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"}) ioctl$FLOPPY_FDFLUSH(r2, 0x24b) 23:33:00 executing program 1: mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) msgget(0x0, 0x30) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0xfff, 0x8, 0x4, 0x3ff, 0x7}) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0xfff, 0x8, 0x4, 0x3ff, 0x7}) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0xd29, 0x800}, {0x3, 0x78d, 0x3000}, {0x3, 0x3, 0x1800}], 0x3, &(0x7f0000000100)={0x77359400}) [ 731.790940][ T8911] binder: 8908:8911 ioctl 4018f50b 0 returned -22 23:33:00 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000480)={0xffffffff, 0x1, 'client0\x00', 0x1, "e66895b7cba61e47", "caf909d108871287e9ca3dd7c001b974664a6dde53a67ad9e0da481495a26f24", 0x0, 0x81}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000280)={0x0, 0x3671, 0xfffffff8, {0x800, 0xce}, 0x0, 0xc3}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000240)={0x5, 0x1, 0x8, 0x101, 0x9}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0xc00, 0x0) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$MRT_TABLE(r3, 0x0, 0xcf, &(0x7f0000000200), 0x4) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) [ 731.799265][ T8913] binder: 8912:8913 ioctl 401c5820 200006c0 returned -22 23:33:00 executing program 3: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) (async) ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:00 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x6, 0x1}}, './file0\x00'}) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x2a001, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x4) [ 731.805702][ T8913] binder: 8912:8913 ioctl 4018f50b 0 returned -22 [ 731.809018][ T8917] binder: 8916:8917 ioctl 4018f50b 0 returned -22 23:33:00 executing program 0: openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(r1, &(0x7f0000001700)={0x2020}, 0x2020) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0xcc00, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, 0x0) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$BTRFS_IOC_RM_DEV(r5, 0x5000940b, &(0x7f0000000700)={{}, "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"}) ioctl$FLOPPY_FDFLUSH(r2, 0x24b) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) read$FUSE(r1, &(0x7f0000001700)={0x2020}, 0x2020) (async) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0xcc00, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, 0x0) (async) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) (async) ioctl$BTRFS_IOC_RM_DEV(r5, 0x5000940b, &(0x7f0000000700)={{}, "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"}) (async) ioctl$FLOPPY_FDFLUSH(r2, 0x24b) (async) 23:33:00 executing program 3: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) (async) ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) 23:33:00 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x6, 0x1}}, './file0\x00'}) (async) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x2a001, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x4) 23:33:00 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000480)={0xffffffff, 0x1, 'client0\x00', 0x1, "e66895b7cba61e47", "caf909d108871287e9ca3dd7c001b974664a6dde53a67ad9e0da481495a26f24", 0x0, 0x81}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000280)={0x0, 0x3671, 0xfffffff8, {0x800, 0xce}, 0x0, 0xc3}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000240)={0x5, 0x1, 0x8, 0x101, 0x9}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0xc00, 0x0) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$MRT_TABLE(r3, 0x0, 0xcf, &(0x7f0000000200), 0x4) [ 731.825377][ T8925] binder: 8923:8925 ioctl 401c5820 200006c0 returned -22 [ 731.827986][ T8926] binder: 8924:8926 ioctl 4018f50b 0 returned -22 [ 731.829608][ T8925] binder: 8923:8925 ioctl 4018f50b 0 returned -22 [ 731.832363][ T8926] binder: 8924:8926 ioctl 4018f50b 0 returned -22 [ 731.836802][ T8934] binder_alloc: binder_alloc_mmap_handler: 8924 20ffc000-21000000 already mapped failed -16 23:33:00 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000480)={0xffffffff, 0x1, 'client0\x00', 0x1, "e66895b7cba61e47", "caf909d108871287e9ca3dd7c001b974664a6dde53a67ad9e0da481495a26f24", 0x0, 0x81}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000280)={0x0, 0x3671, 0xfffffff8, {0x800, 0xce}, 0x0, 0xc3}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000240)={0x5, 0x1, 0x8, 0x101, 0x9}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0xc00, 0x0) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:00 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x6, 0x1}}, './file0\x00'}) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x2a001, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x4) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x6, 0x1}}, './file0\x00'}) (async) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x2a001, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x4) (async) 23:33:00 executing program 0: openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(r1, &(0x7f0000001700)={0x2020}, 0x2020) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0xcc00, 0x0) (async, rerun: 64) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (rerun: 64) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, 0x0) (async) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$BTRFS_IOC_RM_DEV(r5, 0x5000940b, &(0x7f0000000700)={{}, "a1999f40a72cc3ba18194eadee3bd3a40b4070233720baa9ebc2e6d04c266cfca81ef83d67aa84133ee4d23c5a4b0e1caa2aba98ee9ea61652e0b47237948432a18710d658e792d9afc1b0a4a8c737008ca43789fd786db1f86069d2c33e7ffff6770b0db98a8b3c763d35edece4239a8976b267ee5be15cf7dac7b7ef24df3a356f0405a54d32c377a8fc1c5ab41398cc749b35e23fae2f854ebb10737c37e0353638524ef92e56cbd615a8806f67fb4f037d36422ccc01d6952d36a9868859549b5679fb9ec57ceb19d918b300b2b96fba1e14f6f7ef590b54995aec73b9a637b4091ae571536a87a0bf544f91d6bccd7e4d439858144502e3f5dd3429894511e9b6754bb1f000aae294a0981cc841e2cb62597a0b533bc2026349bd6c2af79e833f3c595033aa721b0406765fdf49a4165c624182cee4b9675a314674844b357cd7510c4d69f6e81749e3df2aa0369f6cb0c6ac73b0b5d7376938c5bd1764cff243621504f3ccae72c615895116ebc4da6cdbed82d35ad6c147428ffc5fa3253d83c4177e09addd66b004fa9806039ff50307c910735d459d1e26d6eece8777726a5462dc9756db8739bfccba53565a23bf4e3685fb9fbd69b39f90a2216ec7929b6cb75c385f20441ccbab4b2b2d72fc3468800067f6f2762c97285be7e52260edfae9261d19542c6ca9bbc0b5a655f9e7a65ab778ad7999cbfe52048aff28c6ebfba6c7229b5976b24738ea727fc4c022035d7f24795970271f307db0ae56b7d05c62c0653ad4ee01c5d670b8567764b11168f14cc923a2c668ca7472f4e41ad4bf473909fd8d130a111dd7151dea76230415c6668244950584b68435e1ab269c68ed31e3d4edf7f2132488a4e8b1f55f3f0b34fc313458f7da546e2453460fe88985173d6b4974675e9470b1d2dbbac1b5659e8ee005c5f889b3bc48aaab662d04946e47fc5bbe0ad01f3757a04ab6f26a4bd9e8a510651276360af040433f4759d8ad37628d194a10976a69d85deb71d5a127603d056d76e04354484787270fcd34f49c9dd831245c1d7616f7599f98ce30205f706830c1d53fb6dfe734a62d449f890d43838e424c6ebaffda03a6fd2e2772c8f83187ac5ccdc043c61b1b391ea122fbf6923288da1fe236206874ccc653521a708e6e48ed398f17f00b807e9682bb5cd369e3f615faa1304072315d6c175b7f0ce183f13f3ba61c2706a1eb6fb506c71064d8359ea17fc517ac0d801774406ca6d75041af7f4e80436bf032b88f3edf6f4d385f6d3933b7c86aa2722a0b54fbf6d3a3a6aed318bbe64eb20bce03ce9576f74fa8d8b354f2e7175c2cda7745241e34c4f7d08e369c27938e18086e3fa69617d77a9bc74df6b51baf1a34dbab070e24d55cda0cf60d8f15e0b08954abd43ea3b57171784957e73d8b2ed9dda852e13bf757fb4aebfd8e69c3f3faabc7763af7a1f08d8f930c3a0bf3f563c99b28cbac372ed2ef8f28c76c9e12b48a60d2e83d4d5258a7f9eeb6c34f03001e0918ed85bfcab13606c75980566fb5ec716b6e9cfb1704aeef366ce9f327d94efa69d56d35e2491985a058075e2c033439f7d88294ca292aad26e1e729a448eed97f20808cf8651b522e1bcf7d69e2d8d97b4194d916172038a4f7a81c029aaadc07031113a12ae1ac289be33e62b96315518909deb5c385e836a65c72b720946951da0cfdd45f5ce9359e0eb4c51a0b5b1a111626d71b59331e4d1cf2cd233c6b71daef0fb1ce09eba03cc40338a04b181750838c33f04abdc9e849d7961628e28bda039c3f252dc1f4034d6b8fc34825a5ada046c77632a28b48445b2e3fd3936c879f0918269880d44f79524ccd1001feb6e5f747c63d586786b3de74b4dbeb9dd756b42e96adf04175ded21db8aebaa6f11faa1be7274dfd20f818259fd54be1d49e5dd057ba8dd66a131637c6635b3eed63b0815004195fa4ff048c5476fd3228602ff098ea6e7441fd2147456beae9125309671748517297909b43bd34f2490aafddc74fa73828b07727b3845606af71e608289ccb12ed9bcc40ab7915e221330cfb1df06aa2103d4748e26d275c7ab6b2419b75de2101e2ab8ecb395a7802f16158d6576ad9768a3e4fab5d621bdabe134f7deb02c1b40adf372d44f4470feaf4293a060906a4189b54a599e5bd59832aac74f27920a80b5f7a4507086c44d972971655adcec91fd65d649c7f792a845e19a5df738e35efff94862878180f228b41d154bd4ae87d676367c85fb02a418cc725a6df04d87e010dacfa60019ce1e976a565d325dc67e4ec13d0674c86d8768feb60eac7c8e15d087901628b27eb24928270e02de1cc4211b817b448e66f75b3889892d824379181db654f84d86ed11dba9d1e0fabf3ed0050302ea061e605c6e2753edda412a39e01017fbfdb1da6c85242226c6bf4f9f944dfb30cbba4c7d724479e9084f866ec91d147a67dfa42aaa7b6c70d3dd05f1571a413d6b997ca786ff78f0fd11fa740ea5539691fecd1b5795f982a5d974941f0915946d019c8a9edc0ef40ad018a52753a0336976581fe0bd0dcafbeb7bf25945163227d5a004ab37088cc1ce611a381a007f054199410e8afcb14cafaf23834d2408f6892aebe321b1286333155fe7990abeb8a2dddcbec5267d30825ea91d0f42005af3c27b0edd8085f6d21c3122ce664d4d425e18eb584e0be174234a9d68a0360410ce26b58bfc948b394aab6c5940252203c23a3493688d34d030aae398920f576f719ec05e2eb1b30a30b13a0267c10740044d61d9d031548b728db65645dbdac3fcd2818565c81106af9854dbbdde6341bd4b76f0eb512d18119ad32fcbb30b8d004a9c2ef0839a4ce6ba3d3a5965de1697591c7172fb8bf49465bc5405be9db05f5f951457185c629d8f4bb05737b79dd14e6995763007df5496cbf9c977ded4aa71c73eaf2dd916a468b5eefc96614dfb3d7a21e4aff575a36bc01e3bce2ae676811fceb707f1faa31207d2919507a5cbce9c53b22b69ece86fa985e4d046fb4da51be667210de88a02f99d86164df21d43e069ba7d17e437f27afab608e59323f876e291215ad17d6bad14ea21283cd4eb3bf150ab1c51bf7127f25442d93ac04494a283a60524f10b7a99a8bbcd75f6ebf52d808c88315901ee4077302e8eb8f30360865cbf6a5bfa2dcc8ef84a8d1d14f99f9833d4d537bb19d0203c355aacf5d4f02e6da4a6202f5138181949f8aedbf47e0ffb32c92cebcd30246f843e730570705f5d3ca62e8475c4400370681ce473c74b2dc7abf231cd46f122f1f40b4382d37e7e7f8e3e1db3d0643147830f54ed33af730adf17fb72f72c683fdde5722ce312d1b1eff9a20123a4ddbcf7f1de2719416cd1768eb22b1d66fea694306a9aab57bcfb72821fc359b95e569f0b3e5229b1630c79e8c3580fcfadebfdf6b88ae8e67c3b88fe701c8b79bb5a8ed432736393ddd10a0500b8c12de0ba5328b80cfd29b3de31a1970a22a11cf5a7178f19bb2fb43863ce0e0acc99f3af9ff105c975b3875e94728bc0548db4727ca7944b417c67c0d2a4e962ddf2831918b3c2a0f634137d1f80a41469f542300794d1893d8d534dd55113c7f3377f78cb876f2a233fc305638a66ee35012bbf887bd4df50a1a3d8bf33d4dabba02ad77d3aae69e99f5c347734571d8b155464bf3f82447e24ab969129113d8f936fbe47ddab83edb749cfe1895535dc5cfa7ed72701f3afee9ec64645a60616e2328e1c4796f28e21adcf7ef5ca6282551e8c77d299f000db5f9c50195e099cc198230110d26cf1578a89b0e29eb244a630fbe72b70ea6f88ebe1dee4ce9e48499491d11ff3f13a7b95d8741c0cd34a6625968621b51bcf288390c6915b1cff02e818435c337570ec2daaa276c79b90d2d7f5bce3d16f73f2cb6b9696ed76766d7347a6651e76ec62d7494e4e520e5cff2abfee03efc3f1a150652c90b89678acde8d004c29840ce392883ed0dbad60af04f56fa77c9cbaafc7f45e6578a765652faa687b8f4565ad511e24b961a169b3faa7e492344e021d64316c225e273dc75abf11a5148262ebd951c6c07a495598ed585d23c21983e8ea12fcdd56855a3be128e1dca77252fd2b44e4cacb7a462a529aaaf0cb6e3dabf949b1b0c31153a5571297bb657d6e8f5addca6ddd3e7dce091b22560e061c74526991ac5585deace61ed1595863fd414acbeb80e5e23326068c93af370d42975d0c5726472a4a390cb9d6e0bc50638c240a92d113cdb085db172371ae6d26d3e8a78375ced76b3ecec5fc757eca55e02e446a16a378f021b8022be8e8820aba33d14e4ef7232c3db98dd8a600ecfdb57f8216c3aadb47859285949f55e4a3c11bf6463ceb9837644ea4e67560f240320e5c76ea25dd3529e7ac41fcc6c0b1cd7e33c31e1c3fa3eccd135bb7333a72159a83c21046b82c8ff75253e32e420fc629aea2da886d80c511a8efcc4df55946fe5dad53bb8b9685fb69a4c6bbf823f6d5da78c9a5771a60f1cfd5596aa4fd89d0608e18ce4e26b81a065219ffd3a21a25ec06ebab5cd1ed8c50f8cdd9ebbd663433f2e6e221e2d92bbd45e34cf8429c07911181870cc475b422d42a91b53ee066dbf22198c97f68c5749c70d0cd3bc318742f80dfe1766e706a97f5deafb4b15da98a1238037d9c3aa5e16d5fee5331d20d2938a4fbc284c389121fda12fda082b7fd5b22318951d43faf9dc1c0057156361371d099ee3fade5d1d814d6c0c16bce7d0dc87c7b0f5a0b98b7d4d4f51bada4e36450ac3aa8719e116073a3238916bc72251c693eceacbb174b8b34dbd28ab7147aa6bf64fb0d07ae7d773b25924e688f8e87e90c85ba71506c690895114b5cc325fb20e0b62053d5240c119585150a83ea6b0f3b1518e66209976cc251cb4c92ec300c0581672bbb66ac62bf7b6bfcac7124f0e5bf45d974cae76dd4a7893101497c4c6dc3f21d89ed659ff56de0fc6bdd0bdd2727105f139f88cf51283a288cb532fc6ec67b6d3ff1ee4f5c86a0e2d1fccf5dbf8f8992c095fbfb14071aff45dfa816b053ab1c0f49c15d2f9e0dbd9e1f1ae811d9115738492d1cba4aace9de34756c7a960bab206bfe254c2987790c7826a6d747b6c15770354bbab978ff443bd533bb39d5468107822ac5136007bb96dd50ddf2aa9d76f9e27e6d676a550b694848a6e84c8561183878ea4b54917abf45fe450770a1a6f4621afc319884a56b16bf5d5b2a90e6b15eb94a937dc236f8f3204ad8627240abe4cdef13b8e818a01a0efc082864ad953419825ce58d5ce9946c9c0cd3bb1ed9a8ac28e92a1ed734eea5b5f76825a5c2b040b4c2f52684ccc502c2592da6e435e58996cb4859b61154263e28f6e5a88e4476593198c8315b0369a478dccd873fc580697272a7ce8d59913b3be072609a81b951583b0de638018aefec10e0ff4c3213f9373f1f4f251bef6dc5fbf581ca0e5c0d1126af0b76fde4c5300aa81c012929f854adb709ec69ad1547a25eb7361fea0d1852f3117c3f52cfe5dfc6b3e0f5d56ca720893060829fd5918bccbd511cd02ee01f57a02daac19a7b17fc1322d83dfa308178135b49342de2ed4279cbdb22ec67f005927de781cea756b358cb9653c4e838612697953dd8bc6673e2b44f1856f5c03b0d350948dd98b33fb028ca0fec0d13fa080398f957991482388604ce4e6741b99d5f1dfb3b7078b8821ecb4562001fc85c8ffdb5c8f2bd02c00"}) (async) ioctl$FLOPPY_FDFLUSH(r2, 0x24b) 23:33:00 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000040)={0x3ff, 0x8, 0x2, 0x0, 0x4, [{0x2, 0x8, 0x0, '\x00', 0x800}, {0x1, 0x7, 0x0, '\x00', 0x802}, {0x80000000, 0x6, 0x2026, '\x00', 0x800}, {0x40, 0x1, 0x100000001, '\x00', 0x901}]}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) [ 731.859842][ T8946] binder: 8941:8946 ioctl 401c5820 200006c0 returned -22 23:33:00 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x4080, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:00 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000480)={0xffffffff, 0x1, 'client0\x00', 0x1, "e66895b7cba61e47", "caf909d108871287e9ca3dd7c001b974664a6dde53a67ad9e0da481495a26f24", 0x0, 0x81}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000280)={0x0, 0x3671, 0xfffffff8, {0x800, 0xce}, 0x0, 0xc3}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000240)={0x5, 0x1, 0x8, 0x101, 0x9}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0xc00, 0x0) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:00 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000040)={0x3ff, 0x8, 0x2, 0x0, 0x4, [{0x2, 0x8, 0x0, '\x00', 0x800}, {0x1, 0x7, 0x0, '\x00', 0x802}, {0x80000000, 0x6, 0x2026, '\x00', 0x800}, {0x40, 0x1, 0x100000001, '\x00', 0x901}]}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000040)={0x3ff, 0x8, 0x2, 0x0, 0x4, [{0x2, 0x8, 0x0, '\x00', 0x800}, {0x1, 0x7, 0x0, '\x00', 0x802}, {0x80000000, 0x6, 0x2026, '\x00', 0x800}, {0x40, 0x1, 0x100000001, '\x00', 0x901}]}) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) [ 731.879178][ T8946] binder: 8941:8946 ioctl 4018f50b 0 returned -22 23:33:00 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000480)={0xffffffff, 0x1, 'client0\x00', 0x1, "e66895b7cba61e47", "caf909d108871287e9ca3dd7c001b974664a6dde53a67ad9e0da481495a26f24", 0x0, 0x81}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000280)={0x0, 0x3671, 0xfffffff8, {0x800, 0xce}, 0x0, 0xc3}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000240)={0x5, 0x1, 0x8, 0x101, 0x9}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0xc00, 0x0) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:00 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x4080, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x4080, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) 23:33:00 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000040)={0x3ff, 0x8, 0x2, 0x0, 0x4, [{0x2, 0x8, 0x0, '\x00', 0x800}, {0x1, 0x7, 0x0, '\x00', 0x802}, {0x80000000, 0x6, 0x2026, '\x00', 0x800}, {0x40, 0x1, 0x100000001, '\x00', 0x901}]}) (async, rerun: 32) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (rerun: 32) 23:33:00 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000000)) 23:33:00 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000480)={0xffffffff, 0x1, 'client0\x00', 0x1, "e66895b7cba61e47", "caf909d108871287e9ca3dd7c001b974664a6dde53a67ad9e0da481495a26f24", 0x0, 0x81}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000280)={0x0, 0x3671, 0xfffffff8, {0x800, 0xce}, 0x0, 0xc3}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000240)={0x5, 0x1, 0x8, 0x101, 0x9}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0xc00, 0x0) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:00 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x4080, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) [ 731.908683][ T8967] binder: 8965:8967 ioctl 401c5820 200006c0 returned -22 23:33:00 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000302, 0x0, 0x0) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) 23:33:00 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async, rerun: 32) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000000)) 23:33:00 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000480)={0xffffffff, 0x1, 'client0\x00', 0x1, "e66895b7cba61e47", "caf909d108871287e9ca3dd7c001b974664a6dde53a67ad9e0da481495a26f24", 0x0, 0x81}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000280)={0x0, 0x3671, 0xfffffff8, {0x800, 0xce}, 0x0, 0xc3}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000240)={0x5, 0x1, 0x8, 0x101, 0x9}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0xc00, 0x0) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:00 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000040)=0x1) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) [ 731.926293][ T8973] binder: 8972:8973 ioctl 4018f50b 0 returned -22 [ 731.928783][ T8975] binder: 8974:8975 ioctl 401c5820 200006c0 returned -22 23:33:00 executing program 3: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000302, 0x0, 0x0) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) [ 731.938202][ T8975] binder: 8974:8975 ioctl 401c5820 200006c0 returned -22 [ 731.941479][ T8975] binder: 8974:8975 ioctl 401c5820 200006c0 returned -22 23:33:00 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000480)={0xffffffff, 0x1, 'client0\x00', 0x1, "e66895b7cba61e47", "caf909d108871287e9ca3dd7c001b974664a6dde53a67ad9e0da481495a26f24", 0x0, 0x81}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000280)={0x0, 0x3671, 0xfffffff8, {0x800, 0xce}, 0x0, 0xc3}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000240)={0x5, 0x1, 0x8, 0x101, 0x9}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0xc00, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 731.944873][ T8975] binder: 8974:8975 ioctl 401c5820 200006c0 returned -22 23:33:00 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000040)=0x1) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) [ 731.948232][ T8984] binder: 8982:8984 ioctl 4018f50b 0 returned -22 23:33:00 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) (async) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000302, 0x0, 0x0) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000080)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) [ 731.954213][ T8975] binder: 8974:8975 ioctl 401c5820 200006c0 returned -22 [ 731.958307][ T8975] binder: 8974:8975 ioctl 401c5820 200006c0 returned -22 23:33:00 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000040)=0x1) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) [ 731.962238][ T8990] binder: 8989:8990 ioctl 4018f50b 0 returned -22 [ 731.962281][ T8975] binder: 8974:8975 ioctl 401c5820 200006c0 returned -22 [ 731.965775][ T8975] binder: 8974:8975 ioctl 401c5820 200006c0 returned -22 [ 731.971202][ T8975] binder: 8974:8975 ioctl 401c5820 200006c0 returned -22 [ 731.974623][ T8975] binder: 8974:8975 ioctl 401c5820 200006c0 returned -22 [ 731.977907][ T8975] binder: 8974:8975 ioctl 401c5820 200006c0 returned -22 [ 731.981171][ T8975] binder: 8974:8975 ioctl 401c5820 200006c0 returned -22 [ 731.984708][ T8975] binder: 8974:8975 ioctl 401c5820 200006c0 returned -22 [ 731.987987][ T8975] binder: 8974:8975 ioctl 401c5820 200006c0 returned -22 [ 731.991270][ T8975] binder: 8974:8975 ioctl 401c5820 200006c0 returned -22 [ 731.995617][ T8975] binder: 8974:8975 ioctl 401c5820 200006c0 returned -22 [ 731.999005][ T8975] binder: 8974:8975 ioctl 401c5820 200006c0 returned -22 [ 732.002481][ T8975] binder: 8974:8975 ioctl 401c5820 200006c0 returned -22 [ 732.005767][ T8975] binder: 8974:8975 ioctl 401c5820 200006c0 returned -22 [ 732.009061][ T8975] binder: 8974:8975 ioctl 401c5820 200006c0 returned -22 [ 732.012348][ T8975] binder: 8974:8975 ioctl 401c5820 200006c0 returned -22 [ 732.017467][ T8975] binder: 8974:8975 ioctl 401c5820 200006c0 returned -22 [ 732.021215][ T8975] binder: 8974:8975 ioctl 401c5820 200006c0 returned -22 [ 732.024969][ T8975] binder: 8974:8975 ioctl 401c5820 200006c0 returned -22 [ 732.028229][ T8975] binder: 8974:8975 ioctl 401c5820 200006c0 returned -22 [ 732.031588][ T8975] binder: 8974:8975 ioctl 401c5820 200006c0 returned -22 [ 732.034882][ T8975] binder: 8974:8975 ioctl 401c5820 200006c0 returned -22 [ 732.038123][ T8975] binder: 8974:8975 ioctl 401c5820 200006c0 returned -22 [ 732.041302][ T8975] binder: 8974:8975 ioctl 401c5820 200006c0 returned -22 [ 732.044638][ T8975] binder: 8974:8975 ioctl 401c5820 200006c0 returned -22 [ 732.047860][ T8975] binder: 8974:8975 ioctl 401c5820 200006c0 returned -22 [ 732.051136][ T8975] binder: 8974:8975 ioctl 401c5820 200006c0 returned -22 [ 732.054434][ T8975] binder: 8974:8975 ioctl 401c5820 200006c0 returned -22 23:33:00 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000000)) 23:33:00 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000480)={0xffffffff, 0x1, 'client0\x00', 0x1, "e66895b7cba61e47", "caf909d108871287e9ca3dd7c001b974664a6dde53a67ad9e0da481495a26f24", 0x0, 0x81}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000280)={0x0, 0x3671, 0xfffffff8, {0x800, 0xce}, 0x0, 0xc3}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000240)={0x5, 0x1, 0x8, 0x101, 0x9}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0xc00, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:00 executing program 1: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xfffffffffffffffe) 23:33:00 executing program 3: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000100)={0xe769, 0xff, 0x0, 'queue0\x00', 0x7fff}) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0xfffc, 0x40, 0x3, 0x8, 0x2, 0xffffffffffffffff}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xfff) [ 732.073267][ T9000] binder: 8998:9000 ioctl 4018f50b 0 returned -22 23:33:00 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000480)={0xffffffff, 0x1, 'client0\x00', 0x1, "e66895b7cba61e47", "caf909d108871287e9ca3dd7c001b974664a6dde53a67ad9e0da481495a26f24", 0x0, 0x81}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000280)={0x0, 0x3671, 0xfffffff8, {0x800, 0xce}, 0x0, 0xc3}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000240)={0x5, 0x1, 0x8, 0x101, 0x9}, 0x14) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 732.077951][ T9002] binder: 9001:9002 ioctl 401c5820 200006c0 returned -22 23:33:00 executing program 1: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xfffffffffffffffe) 23:33:00 executing program 3: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000100)={0xe769, 0xff, 0x0, 'queue0\x00', 0x7fff}) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0xfffc, 0x40, 0x3, 0x8, 0x2, 0xffffffffffffffff}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xfff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000100)={0xe769, 0xff, 0x0, 'queue0\x00', 0x7fff}) (async) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) (async) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0xfffc, 0x40, 0x3, 0x8, 0x2, 0xffffffffffffffff}) (async) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xfff) (async) 23:33:00 executing program 0: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000280)={0xffffffff, 0x10000, 0x1, 'queue1\x00', 0x1000}) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000140), 0x301040, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000340)={0x7fffffff, 0xffffffff, 0x0, 'queue1\x00', 0x1}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x7, @none, 0x8}, 0xe) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00ffffff2e2f66"]) ioctl$FLOPPY_FDGETDRVSTAT(r2, 0x80500212, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1}) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000700)=ANY=[@ANYBLOB="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"]) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) 23:33:00 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000480)={0xffffffff, 0x1, 'client0\x00', 0x1, "e66895b7cba61e47", "caf909d108871287e9ca3dd7c001b974664a6dde53a67ad9e0da481495a26f24", 0x0, 0x81}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000280)={0x0, 0x3671, 0xfffffff8, {0x800, 0xce}, 0x0, 0xc3}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 732.104676][ T9008] blktrace: Concurrent blktraces are not allowed on pmem0 [ 732.106212][ T9009] binder: 9006:9009 ioctl 4018f50b 0 returned -22 [ 732.112098][ T9018] binder: 9012:9018 ioctl 401c5820 200006c0 returned -22 23:33:00 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000480)={0xffffffff, 0x1, 'client0\x00', 0x1, "e66895b7cba61e47", "caf909d108871287e9ca3dd7c001b974664a6dde53a67ad9e0da481495a26f24", 0x0, 0x81}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:00 executing program 3: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000100)={0xe769, 0xff, 0x0, 'queue0\x00', 0x7fff}) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) (async) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0xfffc, 0x40, 0x3, 0x8, 0x2, 0xffffffffffffffff}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xfff) 23:33:00 executing program 1: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xfffffffffffffffe) 23:33:00 executing program 0: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000280)={0xffffffff, 0x10000, 0x1, 'queue1\x00', 0x1000}) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000140), 0x301040, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000340)={0x7fffffff, 0xffffffff, 0x0, 'queue1\x00', 0x1}) (async) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x7, @none, 0x8}, 0xe) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00ffffff2e2f66"]) (async) ioctl$FLOPPY_FDGETDRVSTAT(r2, 0x80500212, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1}) (async) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000700)=ANY=[@ANYBLOB="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"]) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) [ 732.130633][ T9023] blktrace: Concurrent blktraces are not allowed on pmem0 [ 732.134677][ T9028] binder: 9024:9028 ioctl 4018f50b 0 returned -22 23:33:00 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000480)={0xffffffff, 0x1, 'client0\x00', 0x1, "e66895b7cba61e47", "caf909d108871287e9ca3dd7c001b974664a6dde53a67ad9e0da481495a26f24", 0x0, 0x81}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:00 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x4) 23:33:00 executing program 0: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000280)={0xffffffff, 0x10000, 0x1, 'queue1\x00', 0x1000}) (async, rerun: 32) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000140), 0x301040, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000340)={0x7fffffff, 0xffffffff, 0x0, 'queue1\x00', 0x1}) (async) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x7, @none, 0x8}, 0xe) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00ffffff2e2f66"]) (async) ioctl$FLOPPY_FDGETDRVSTAT(r2, 0x80500212, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1}) (async) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000700)=ANY=[@ANYBLOB="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"]) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) 23:33:00 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x400003, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:00 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000480)={0xffffffff, 0x1, 'client0\x00', 0x1, "e66895b7cba61e47", "caf909d108871287e9ca3dd7c001b974664a6dde53a67ad9e0da481495a26f24", 0x0, 0x81}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:00 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x4) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x4) (async) 23:33:00 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffcc, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:33:00 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x400003, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:00 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000480)={0xffffffff, 0x1, 'client0\x00', 0x1, "e66895b7cba61e47", "caf909d108871287e9ca3dd7c001b974664a6dde53a67ad9e0da481495a26f24", 0x0, 0x81}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:00 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x4) [ 732.179761][ T9051] binder: 9048:9051 ioctl 401c5820 200006c0 returned -22 23:33:00 executing program 1: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x400003, 0x0) (async) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x400003, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:00 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffcc, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:33:00 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:00 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040)=0xdf, 0x4) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000080)={0x1, 0x20000002}) 23:33:00 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x6c0003, 0x0) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x200480, 0x0) r3 = getpgrp(0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sched_rr_get_interval(r3, &(0x7f0000000180)) write$FUSE_LK(r1, &(0x7f00000020c0)={0x27, 0x0, r2, {{0x5, 0x2, 0x2, r3}}}, 0x28) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) [ 732.205916][ T9063] binder: 9061:9063 ioctl 401c5820 200006c0 returned -22 23:33:00 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:00 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffcc, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffcc, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) 23:33:00 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x6c0003, 0x0) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x200480, 0x0) (async) r3 = getpgrp(0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) sched_rr_get_interval(r3, &(0x7f0000000180)) write$FUSE_LK(r1, &(0x7f00000020c0)={0x27, 0x0, r2, {{0x5, 0x2, 0x2, r3}}}, 0x28) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:00 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040)=0xdf, 0x4) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000080)={0x1, 0x20000002}) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040)=0xdf, 0x4) (async) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000080)={0x1, 0x20000002}) (async) 23:33:00 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 732.236269][ T9076] binder: 9070:9076 ioctl 401c5820 200006c0 returned -22 [ 732.240176][ T9078] binder: 9070:9078 ioctl 401c5820 200006c0 returned -22 23:33:00 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x6c0003, 0x0) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x200480, 0x0) r3 = getpgrp(0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) sched_rr_get_interval(r3, &(0x7f0000000180)) write$FUSE_LK(r1, &(0x7f00000020c0)={0x27, 0x0, r2, {{0x5, 0x2, 0x2, r3}}}, 0x28) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:00 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040)=0xdf, 0x4) (async, rerun: 32) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000080)={0x1, 0x20000002}) (rerun: 32) 23:33:00 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:00 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:33:00 executing program 1: r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 23:33:00 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), 0x4) [ 732.269555][ T9093] binder: 9090:9093 ioctl c0096616 20000000 returned -22 23:33:00 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:00 executing program 1: r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) (async, rerun: 64) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) (rerun: 64) [ 732.273588][ T9093] binder: 9090:9093 ioctl 401c5820 200006c0 returned -22 23:33:00 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (rerun: 32) 23:33:00 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), 0x4) 23:33:00 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) 23:33:00 executing program 1: r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) [ 732.302189][ T9103] binder: 9102:9103 ioctl c0096616 20000000 returned -22 [ 732.304893][ T9103] binder: 9102:9103 ioctl c0096616 20000000 returned -22 [ 732.305273][ T9104] binder: 9102:9104 ioctl 401c5820 200006c0 returned -22 [ 732.310891][ T9104] binder: 9102:9104 ioctl 401c5820 200006c0 returned -22 [ 732.315430][ T9104] binder: 9102:9104 ioctl 401c5820 200006c0 returned -22 [ 732.317887][ T9103] binder: 9102:9103 ioctl c0096616 20000000 returned -22 [ 732.319095][ T9104] binder: 9102:9104 ioctl 401c5820 200006c0 returned -22 23:33:00 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 732.321356][ T9103] binder: 9102:9103 ioctl c0096616 20000000 returned -22 23:33:00 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) finit_module(r1, &(0x7f0000000040)='}\x00', 0x3) [ 732.332990][ T9104] binder: 9102:9104 ioctl 401c5820 200006c0 returned -22 [ 732.336479][ T9104] binder: 9102:9104 ioctl 401c5820 200006c0 returned -22 23:33:00 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), 0x4) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), 0x4) (async) [ 732.339764][ T9104] binder: 9102:9104 ioctl 401c5820 200006c0 returned -22 [ 732.343248][ T9103] binder: 9102:9103 ioctl c0096616 20000000 returned -22 [ 732.343329][ T9103] binder: 9102:9103 ioctl c0096616 20000000 returned -22 [ 732.347512][ T9104] binder: 9102:9104 ioctl 401c5820 200006c0 returned -22 [ 732.349170][ T9103] binder: 9102:9103 ioctl c0096616 20000000 returned -22 [ 732.359656][ T9104] binder: 9102:9104 ioctl 401c5820 200006c0 returned -22 [ 732.362744][ T9103] binder: 9102:9103 ioctl c0096616 20000000 returned -22 23:33:00 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 732.366457][ T9103] binder: 9102:9103 ioctl c0096616 20000000 returned -22 [ 732.368160][ T9104] binder: 9102:9104 ioctl 401c5820 200006c0 returned -22 [ 732.370046][ T9103] binder: 9102:9103 ioctl c0096616 20000000 returned -22 [ 732.374949][ T9104] binder: 9102:9104 ioctl 401c5820 200006c0 returned -22 [ 732.377977][ T9103] binder: 9102:9103 ioctl c0096616 20000000 returned -22 [ 732.379848][ T9104] binder: 9102:9104 ioctl 401c5820 200006c0 returned -22 [ 732.383533][ T9103] binder: 9102:9103 ioctl c0096616 20000000 returned -22 [ 732.386768][ T9104] binder: 9102:9104 ioctl 401c5820 200006c0 returned -22 [ 732.389574][ T9103] binder: 9102:9103 ioctl c0096616 20000000 returned -22 [ 732.393895][ T9104] binder: 9102:9104 ioctl 401c5820 200006c0 returned -22 [ 732.396453][ T9103] binder: 9102:9103 ioctl c0096616 20000000 returned -22 [ 732.399236][ T9104] binder: 9102:9104 ioctl 401c5820 200006c0 returned -22 [ 732.403337][ T9103] binder: 9102:9103 ioctl c0096616 20000000 returned -22 [ 732.406423][ T9104] binder: 9102:9104 ioctl 401c5820 200006c0 returned -22 [ 732.409274][ T9103] binder: 9102:9103 ioctl c0096616 20000000 returned -22 [ 732.413482][ T9104] binder: 9102:9104 ioctl 401c5820 200006c0 returned -22 [ 732.416205][ T9103] binder: 9102:9103 ioctl c0096616 20000000 returned -22 [ 732.418792][ T9104] binder: 9102:9104 ioctl 401c5820 200006c0 returned -22 [ 732.422661][ T9103] binder: 9102:9103 ioctl c0096616 20000000 returned -22 [ 732.425714][ T9104] binder: 9102:9104 ioctl 401c5820 200006c0 returned -22 [ 732.428714][ T9103] binder: 9102:9103 ioctl c0096616 20000000 returned -22 [ 732.435042][ T9104] binder: 9102:9104 ioctl 401c5820 200006c0 returned -22 [ 732.435938][ T9103] binder: 9102:9103 ioctl c0096616 20000000 returned -22 [ 732.441351][ T9104] binder: 9102:9104 ioctl 401c5820 200006c0 returned -22 [ 732.442006][ T9103] binder: 9102:9103 ioctl c0096616 20000000 returned -22 [ 732.444285][ T9104] binder: 9102:9104 ioctl 401c5820 200006c0 returned -22 [ 732.447687][ T9103] binder: 9102:9103 ioctl c0096616 20000000 returned -22 [ 732.450497][ T9104] binder: 9102:9104 ioctl 401c5820 200006c0 returned -22 [ 732.455507][ T9103] binder: 9102:9103 ioctl c0096616 20000000 returned -22 [ 732.460688][ T9103] binder: 9102:9103 ioctl c0096616 20000000 returned -22 [ 732.461636][ T9104] binder: 9102:9104 ioctl 401c5820 200006c0 returned -22 [ 732.464530][ T9103] binder: 9102:9103 ioctl c0096616 20000000 returned -22 [ 732.468474][ T9104] binder: 9102:9104 ioctl 401c5820 200006c0 returned -22 [ 732.469932][ T9103] binder: 9102:9103 ioctl c0096616 20000000 returned -22 [ 732.472518][ T9104] binder: 9102:9104 ioctl 401c5820 200006c0 returned -22 [ 732.475982][ T9103] binder: 9102:9103 ioctl c0096616 20000000 returned -22 [ 732.482622][ T9104] binder: 9102:9104 ioctl 401c5820 200006c0 returned -22 [ 732.482634][ T9103] binder: 9102:9103 ioctl c0096616 20000000 returned -22 [ 732.485712][ T9104] binder: 9102:9104 ioctl 401c5820 200006c0 returned -22 [ 732.489007][ T9103] binder: 9102:9103 ioctl c0096616 20000000 returned -22 [ 732.492041][ T9104] binder: 9102:9104 ioctl 401c5820 200006c0 returned -22 [ 732.495851][ T9103] binder: 9102:9103 ioctl c0096616 20000000 returned -22 [ 732.497857][ T9104] binder: 9102:9104 ioctl 401c5820 200006c0 returned -22 [ 732.501189][ T9103] binder: 9102:9103 ioctl c0096616 20000000 returned -22 [ 732.503817][ T9104] binder: 9102:9104 ioctl 401c5820 200006c0 returned -22 [ 732.507633][ T9103] binder: 9102:9103 ioctl c0096616 20000000 returned -22 [ 732.509698][ T9104] binder: 9102:9104 ioctl 401c5820 200006c0 returned -22 [ 732.513431][ T9103] binder: 9102:9103 ioctl c0096616 20000000 returned -22 [ 732.515870][ T9104] binder: 9102:9104 ioctl 401c5820 200006c0 returned -22 23:33:00 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:33:00 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:00 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) finit_module(r1, &(0x7f0000000040)='}\x00', 0x3) 23:33:00 executing program 3: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0xa7cd) 23:33:00 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 732.550991][ T9130] binder: 9128:9130 ioctl c0096616 20000000 returned -22 23:33:00 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) finit_module(r1, &(0x7f0000000040)='}\x00', 0x3) [ 732.556522][ T9130] binder: 9128:9130 ioctl 401c5820 200006c0 returned -22 23:33:00 executing program 3: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0xa7cd) 23:33:00 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:33:00 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:00 executing program 3: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0xa7cd) 23:33:00 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 732.587797][ T9140] binder: 9139:9140 ioctl 401c5820 200006c0 returned -22 23:33:00 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:33:00 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:00 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:00 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) [ 732.617045][ T9151] binder: 9148:9151 ioctl 401c5820 200006c0 returned -22 23:33:00 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:00 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:33:00 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) 23:33:00 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:00 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 732.642524][ T9163] binder: 9160:9163 ioctl 401c5820 200006c0 returned -22 23:33:00 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) 23:33:00 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0}) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) 23:33:00 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x3, 0x40}}, './file0\x00'}) r2 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) r3 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f0000000140)={0x0, 0x401, 0x800}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000180)={0x3}) r5 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x2c, 0x0, &(0x7f0000000040)=[@acquire={0x40046305, 0x1}, @request_death, @free_buffer={0x40086303, r3}, @increfs={0x40046304, 0x7}], 0x37, 0x0, &(0x7f0000000080)="232338d6abee216b2ff99c692bc5a4435cb3ddac421a90c72e70de74717d1f40195b70ee70053a6d501b4db8504d79008173d0935a77c6"}) 23:33:00 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 732.665555][ T9173] binder: 9170:9173 ioctl 4018f50b 0 returned -22 [ 732.669917][ T9176] binder: 9172:9176 ioctl 401c5820 200006c0 returned -22 23:33:00 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0xa8, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x9, 0x1, 0x2}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x0, 0x2, 0x29}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}}, @request_death={0x400c630e, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x5}, @fda={0x66646185, 0x7, 0x1, 0x8}, @flat=@binder={0x73622a85, 0x1000, 0x3}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}, 0x40}], 0xd7, 0x0, &(0x7f0000000280)="c3f05701af91f0d0d2275511a585fd2f47af755d1ff8f2c7037b99f09b71f9d9097246eb79faf57a91bcbb225f97f30e66b91e6133529c8071e4dbee6bf633ac777a050297ed4b94ecc26733a72599be85cffaab369588152a468b97dc4c8040c76697f0fa25d8e72f12a441276a9ed9d0ec42470ed9ba19c47cf67ab65805888f82862a77226991ea85b4a34af4c72009667d84628127177ada654a3cbfc0105cc6db14beeb4c537b879dd448ec56c7127009359e807e87e66ae7dfbbb927e665f04561faf5f22d348f083d7b27539782cb756ed768cb"}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) [ 732.672923][ T9173] binder: 9170:9173 ioctl 4018f50b 0 returned -22 [ 732.676127][ T9173] binder: 9170:9173 ioctl 4018f50b 20000140 returned -22 23:33:00 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:00 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x3, 0x40}}, './file0\x00'}) (async) r2 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) (async) r3 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, 0x0) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f0000000140)={0x0, 0x401, 0x800}) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000180)={0x3}) (async) r5 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x2c, 0x0, &(0x7f0000000040)=[@acquire={0x40046305, 0x1}, @request_death, @free_buffer={0x40086303, r3}, @increfs={0x40046304, 0x7}], 0x37, 0x0, &(0x7f0000000080)="232338d6abee216b2ff99c692bc5a4435cb3ddac421a90c72e70de74717d1f40195b70ee70053a6d501b4db8504d79008173d0935a77c6"}) 23:33:00 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000080)) (async) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0}) (async) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) 23:33:00 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0xa8, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x9, 0x1, 0x2}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x0, 0x2, 0x29}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}}, @request_death={0x400c630e, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x5}, @fda={0x66646185, 0x7, 0x1, 0x8}, @flat=@binder={0x73622a85, 0x1000, 0x3}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}, 0x40}], 0xd7, 0x0, &(0x7f0000000280)="c3f05701af91f0d0d2275511a585fd2f47af755d1ff8f2c7037b99f09b71f9d9097246eb79faf57a91bcbb225f97f30e66b91e6133529c8071e4dbee6bf633ac777a050297ed4b94ecc26733a72599be85cffaab369588152a468b97dc4c8040c76697f0fa25d8e72f12a441276a9ed9d0ec42470ed9ba19c47cf67ab65805888f82862a77226991ea85b4a34af4c72009667d84628127177ada654a3cbfc0105cc6db14beeb4c537b879dd448ec56c7127009359e807e87e66ae7dfbbb927e665f04561faf5f22d348f083d7b27539782cb756ed768cb"}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0xa8, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x9, 0x1, 0x2}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x0, 0x2, 0x29}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}}, @request_death={0x400c630e, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x5}, @fda={0x66646185, 0x7, 0x1, 0x8}, @flat=@binder={0x73622a85, 0x1000, 0x3}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}, 0x40}], 0xd7, 0x0, &(0x7f0000000280)="c3f05701af91f0d0d2275511a585fd2f47af755d1ff8f2c7037b99f09b71f9d9097246eb79faf57a91bcbb225f97f30e66b91e6133529c8071e4dbee6bf633ac777a050297ed4b94ecc26733a72599be85cffaab369588152a468b97dc4c8040c76697f0fa25d8e72f12a441276a9ed9d0ec42470ed9ba19c47cf67ab65805888f82862a77226991ea85b4a34af4c72009667d84628127177ada654a3cbfc0105cc6db14beeb4c537b879dd448ec56c7127009359e807e87e66ae7dfbbb927e665f04561faf5f22d348f083d7b27539782cb756ed768cb"}) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) [ 732.695228][ T9183] binder: 9181:9183 ioctl 4018f50b 0 returned -22 [ 732.700633][ T9188] binder: 9181:9188 ioctl 4018f50b 20000140 returned -22 [ 732.700877][ T9183] binder: 9181:9183 ioctl 4018f50b 0 returned -22 23:33:00 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:00 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000080)) (async) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0}) (async) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) 23:33:00 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x3, 0x40}}, './file0\x00'}) (async) r2 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) (async) r3 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f0000000140)={0x0, 0x401, 0x800}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000180)={0x3}) (async) r5 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x2c, 0x0, &(0x7f0000000040)=[@acquire={0x40046305, 0x1}, @request_death, @free_buffer={0x40086303, r3}, @increfs={0x40046304, 0x7}], 0x37, 0x0, &(0x7f0000000080)="232338d6abee216b2ff99c692bc5a4435cb3ddac421a90c72e70de74717d1f40195b70ee70053a6d501b4db8504d79008173d0935a77c6"}) 23:33:00 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0xa8, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x9, 0x1, 0x2}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x0, 0x2, 0x29}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}}, @request_death={0x400c630e, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x5}, @fda={0x66646185, 0x7, 0x1, 0x8}, @flat=@binder={0x73622a85, 0x1000, 0x3}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}, 0x40}], 0xd7, 0x0, &(0x7f0000000280)="c3f05701af91f0d0d2275511a585fd2f47af755d1ff8f2c7037b99f09b71f9d9097246eb79faf57a91bcbb225f97f30e66b91e6133529c8071e4dbee6bf633ac777a050297ed4b94ecc26733a72599be85cffaab369588152a468b97dc4c8040c76697f0fa25d8e72f12a441276a9ed9d0ec42470ed9ba19c47cf67ab65805888f82862a77226991ea85b4a34af4c72009667d84628127177ada654a3cbfc0105cc6db14beeb4c537b879dd448ec56c7127009359e807e87e66ae7dfbbb927e665f04561faf5f22d348f083d7b27539782cb756ed768cb"}) (async, rerun: 32) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:00 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 732.731120][ T9201] binder: 9198:9201 ioctl 4018f50b 0 returned -22 [ 732.733311][ T9203] binder: 9198:9203 ioctl 4018f50b 0 returned -22 [ 732.736230][ T9211] binder: 9200:9211 ioctl 401c5820 200006c0 returned -22 23:33:00 executing program 2: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) [ 732.737570][ T9201] binder: 9198:9201 ioctl 4018f50b 20000140 returned -22 23:33:00 executing program 3: mount$9p_fd(0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004540), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r1, &(0x7f0000002340)={0x2020}, 0x2020) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000000)={0xa0, 0x0, r2, {{0x6, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0xc16b}}}}, 0xa0) ioctl$FLOPPY_FDRESET(r0, 0x254, 0x0) write$FUSE_POLL(r0, &(0x7f0000000040)={0x18, 0x0, r2, {0x3ff}}, 0x18) r3 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000000c0)={0x8, 0x1, 'client0\x00', 0x1, "84436067f7935b28", "8d089e768ba8821209356aa31d5969ac989a2639bd95930694ae749eee96e1c8", 0x0, 0x4}) r4 = syz_open_dev$vcsa(&(0x7f0000000180), 0x20000000000000, 0x40040) ioctl$VHOST_VDPA_GET_VRING_GROUP(r4, 0xc008af7b, &(0x7f00000001c0)={0x0, 0x100}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) ioctl$FLOPPY_FDRAWCMD(r0, 0x258, &(0x7f0000004380)={0x66732557f865bbd5, &(0x7f0000000200)="74fdb9078c560988b133ada4bafbd4020e55d6abde22d7d93636035835dc1bf1c28f049a45ee4405d938a2e52548e7ee8fcc4399ede2005f678761ae21106cf30bedf08dab6469f82bcf46a2ac7bb980ba748b943102", &(0x7f0000000280)=0x40, 0x0, 0x56, 0x0, 0x0, 0x40, 0x6, "9491b4cd482f2db687dbfc3072f807ba", 0x0, '\x00', 0xb42}) 23:33:00 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x857, 0xcdb7}}, './file0\x00'}) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0x4}) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x0, 0x0, 0x0}) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x4980) r3 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r3, 0x0, 0x2b6c, 0x7}}}, 0x90) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1000000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '\xfa^{!'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '.:-#!$\\'}}, {@pcr={'pcr', 0x3d, 0x1b}}, {@appraise}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_role={'obj_role', 0x3d, ',![.[}\\#.}'}}, {@uid_eq={'uid', 0x3d, r3}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x0, 0x2, 0x30, 0x31, 0x31, 0x34, 0x36], 0x2d, [0x32, 0x64, 0x65, 0x36], 0x2d, [0x38, 0x64, 0x63, 0x63], 0x2d, [0x34, 0x39, 0x38, 0x38], 0x2d, [0x65, 0x39, 0x63, 0x39, 0x33, 0x33, 0x66, 0x63]}}}, {@seclabel}]}}) 23:33:00 executing program 1: ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x3, 0x1, &(0x7f00000000c0)=""/190, &(0x7f0000000180)=""/211, &(0x7f0000000280)=""/156, 0x100000}) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x199a43, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1, 0x20}}, './file0\x00'}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0xc3b33b564e4f5df8) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:00 executing program 2: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) [ 732.766342][ T9219] binder: 9217:9219 ioctl 401c5820 200006c0 returned -22 23:33:00 executing program 2: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) 23:33:00 executing program 1: ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x3, 0x1, &(0x7f00000000c0)=""/190, &(0x7f0000000180)=""/211, &(0x7f0000000280)=""/156, 0x100000}) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x199a43, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1, 0x20}}, './file0\x00'}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0xc3b33b564e4f5df8) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x3, 0x1, &(0x7f00000000c0)=""/190, &(0x7f0000000180)=""/211, &(0x7f0000000280)=""/156, 0x100000}) (async) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x199a43, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1, 0x20}}, './file0\x00'}) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0xc3b33b564e4f5df8) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) 23:33:00 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x857, 0xcdb7}}, './file0\x00'}) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0x4}) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x0, 0x0, 0x0}) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x4980) r3 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r3, 0x0, 0x2b6c, 0x7}}}, 0x90) (async) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r3, 0x0, 0x2b6c, 0x7}}}, 0x90) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1000000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '\xfa^{!'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '.:-#!$\\'}}, {@pcr={'pcr', 0x3d, 0x1b}}, {@appraise}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_role={'obj_role', 0x3d, ',![.[}\\#.}'}}, {@uid_eq={'uid', 0x3d, r3}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x0, 0x2, 0x30, 0x31, 0x31, 0x34, 0x36], 0x2d, [0x32, 0x64, 0x65, 0x36], 0x2d, [0x38, 0x64, 0x63, 0x63], 0x2d, [0x34, 0x39, 0x38, 0x38], 0x2d, [0x65, 0x39, 0x63, 0x39, 0x33, 0x33, 0x66, 0x63]}}}, {@seclabel}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1000000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '\xfa^{!'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '.:-#!$\\'}}, {@pcr={'pcr', 0x3d, 0x1b}}, {@appraise}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_role={'obj_role', 0x3d, ',![.[}\\#.}'}}, {@uid_eq={'uid', 0x3d, r3}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x0, 0x2, 0x30, 0x31, 0x31, 0x34, 0x36], 0x2d, [0x32, 0x64, 0x65, 0x36], 0x2d, [0x38, 0x64, 0x63, 0x63], 0x2d, [0x34, 0x39, 0x38, 0x38], 0x2d, [0x65, 0x39, 0x63, 0x39, 0x33, 0x33, 0x66, 0x63]}}}, {@seclabel}]}}) [ 732.793814][ T9230] binder: 9229:9230 ioctl 401c5820 200006c0 returned -22 23:33:01 executing program 2: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) 23:33:01 executing program 1: ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x3, 0x1, &(0x7f00000000c0)=""/190, &(0x7f0000000180)=""/211, &(0x7f0000000280)=""/156, 0x100000}) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x199a43, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1, 0x20}}, './file0\x00'}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0xc3b33b564e4f5df8) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:01 executing program 3: mount$9p_fd(0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0) (async) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004540), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r1, &(0x7f0000002340)={0x2020}, 0x2020) (async) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000000)={0xa0, 0x0, r2, {{0x6, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0xc16b}}}}, 0xa0) (async) ioctl$FLOPPY_FDRESET(r0, 0x254, 0x0) (async) write$FUSE_POLL(r0, &(0x7f0000000040)={0x18, 0x0, r2, {0x3ff}}, 0x18) (async) r3 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000000c0)={0x8, 0x1, 'client0\x00', 0x1, "84436067f7935b28", "8d089e768ba8821209356aa31d5969ac989a2639bd95930694ae749eee96e1c8", 0x0, 0x4}) (async) r4 = syz_open_dev$vcsa(&(0x7f0000000180), 0x20000000000000, 0x40040) ioctl$VHOST_VDPA_GET_VRING_GROUP(r4, 0xc008af7b, &(0x7f00000001c0)={0x0, 0x100}) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) (async) ioctl$FLOPPY_FDRAWCMD(r0, 0x258, &(0x7f0000004380)={0x66732557f865bbd5, &(0x7f0000000200)="74fdb9078c560988b133ada4bafbd4020e55d6abde22d7d93636035835dc1bf1c28f049a45ee4405d938a2e52548e7ee8fcc4399ede2005f678761ae21106cf30bedf08dab6469f82bcf46a2ac7bb980ba748b943102", &(0x7f0000000280)=0x40, 0x0, 0x56, 0x0, 0x0, 0x40, 0x6, "9491b4cd482f2db687dbfc3072f807ba", 0x0, '\x00', 0xb42}) 23:33:01 executing program 2: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) 23:33:01 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x857, 0xcdb7}}, './file0\x00'}) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0x4}) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x0, 0x0, 0x0}) (async) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x4980) (async) r3 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r3, 0x0, 0x2b6c, 0x7}}}, 0x90) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1000000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '\xfa^{!'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '.:-#!$\\'}}, {@pcr={'pcr', 0x3d, 0x1b}}, {@appraise}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_role={'obj_role', 0x3d, ',![.[}\\#.}'}}, {@uid_eq={'uid', 0x3d, r3}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x0, 0x2, 0x30, 0x31, 0x31, 0x34, 0x36], 0x2d, [0x32, 0x64, 0x65, 0x36], 0x2d, [0x38, 0x64, 0x63, 0x63], 0x2d, [0x34, 0x39, 0x38, 0x38], 0x2d, [0x65, 0x39, 0x63, 0x39, 0x33, 0x33, 0x66, 0x63]}}}, {@seclabel}]}}) [ 732.830706][ T9237] binder: 9235:9237 ioctl 401c5820 200006c0 returned -22 23:33:01 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000040)={0x78, 0xfffffffffffffffe, 0x0, {0x1, 0x4, 0x0, {0x6, 0x8001, 0x2, 0x2, 0xffffffff, 0x81, 0x3, 0x1, 0x1, 0xc000, 0x6, 0x0, 0x0, 0x4}}}, 0x78) 23:33:01 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$FLOPPY_FDRESET(r1, 0x254, 0x1) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$FLOPPY_FDFLUSH(r1, 0x24b) ioctl$VHOST_VDPA_GET_VQS_COUNT(0xffffffffffffffff, 0x8004af80, &(0x7f0000000000)) 23:33:01 executing program 3: mount$9p_fd(0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000004540), 0x2, 0x0) (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004540), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r1, &(0x7f0000002340)={0x2020}, 0x2020) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000000)={0xa0, 0x0, r2, {{0x6, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0xc16b}}}}, 0xa0) (async) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000000)={0xa0, 0x0, r2, {{0x6, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0xc16b}}}}, 0xa0) ioctl$FLOPPY_FDRESET(r0, 0x254, 0x0) (async) ioctl$FLOPPY_FDRESET(r0, 0x254, 0x0) write$FUSE_POLL(r0, &(0x7f0000000040)={0x18, 0x0, r2, {0x3ff}}, 0x18) r3 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000000c0)={0x8, 0x1, 'client0\x00', 0x1, "84436067f7935b28", "8d089e768ba8821209356aa31d5969ac989a2639bd95930694ae749eee96e1c8", 0x0, 0x4}) r4 = syz_open_dev$vcsa(&(0x7f0000000180), 0x20000000000000, 0x40040) ioctl$VHOST_VDPA_GET_VRING_GROUP(r4, 0xc008af7b, &(0x7f00000001c0)={0x0, 0x100}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) ioctl$FLOPPY_FDRAWCMD(r0, 0x258, &(0x7f0000004380)={0x66732557f865bbd5, &(0x7f0000000200)="74fdb9078c560988b133ada4bafbd4020e55d6abde22d7d93636035835dc1bf1c28f049a45ee4405d938a2e52548e7ee8fcc4399ede2005f678761ae21106cf30bedf08dab6469f82bcf46a2ac7bb980ba748b943102", &(0x7f0000000280)=0x40, 0x0, 0x56, 0x0, 0x0, 0x40, 0x6, "9491b4cd482f2db687dbfc3072f807ba", 0x0, '\x00', 0xb42}) (async) ioctl$FLOPPY_FDRAWCMD(r0, 0x258, &(0x7f0000004380)={0x66732557f865bbd5, &(0x7f0000000200)="74fdb9078c560988b133ada4bafbd4020e55d6abde22d7d93636035835dc1bf1c28f049a45ee4405d938a2e52548e7ee8fcc4399ede2005f678761ae21106cf30bedf08dab6469f82bcf46a2ac7bb980ba748b943102", &(0x7f0000000280)=0x40, 0x0, 0x56, 0x0, 0x0, 0x40, 0x6, "9491b4cd482f2db687dbfc3072f807ba", 0x0, '\x00', 0xb42}) 23:33:01 executing program 2: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 732.857213][ T9251] binder: 9249:9251 ioctl 401c5820 200006c0 returned -22 [ 732.861119][ T9251] binder: 9249:9251 ioctl 4018f50b 0 returned -22 23:33:01 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000040)={0x78, 0xfffffffffffffffe, 0x0, {0x1, 0x4, 0x0, {0x6, 0x8001, 0x2, 0x2, 0xffffffff, 0x81, 0x3, 0x1, 0x1, 0xc000, 0x6, 0x0, 0x0, 0x4}}}, 0x78) [ 732.864924][ T9251] binder: 9249:9251 ioctl 82307201 200000c0 returned -22 23:33:01 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x3, 0x40}}, './file0\x00'}) r2 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) r3 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f0000000140)={0x0, 0x401, 0x800}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000180)={0x3}) r5 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x2c, 0x0, &(0x7f0000000040)=[@acquire={0x40046305, 0x1}, @request_death, @free_buffer={0x40086303, r3}, @increfs={0x40046304, 0x7}], 0x37, 0x0, &(0x7f0000000080)="232338d6abee216b2ff99c692bc5a4435cb3ddac421a90c72e70de74717d1f40195b70ee70053a6d501b4db8504d79008173d0935a77c6"}) 23:33:01 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$FLOPPY_FDRESET(r1, 0x254, 0x1) (async) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$FLOPPY_FDFLUSH(r1, 0x24b) (async) ioctl$VHOST_VDPA_GET_VQS_COUNT(0xffffffffffffffff, 0x8004af80, &(0x7f0000000000)) [ 732.888600][ T9261] binder: 9258:9261 ioctl 401c5820 200006c0 returned -22 [ 732.889071][ T9260] binder: 9257:9260 ioctl 4018f50b 0 returned -22 [ 732.892266][ T9261] binder: 9258:9261 ioctl 4018f50b 0 returned -22 [ 732.898037][ T9261] binder: 9258:9261 ioctl 82307201 200000c0 returned -22 23:33:01 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000040)={0x78, 0xfffffffffffffffe, 0x0, {0x1, 0x4, 0x0, {0x6, 0x8001, 0x2, 0x2, 0xffffffff, 0x81, 0x3, 0x1, 0x1, 0xc000, 0x6, 0x0, 0x0, 0x4}}}, 0x78) 23:33:01 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$FLOPPY_FDRESET(r1, 0x254, 0x1) (async) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$FLOPPY_FDFLUSH(r1, 0x24b) (async) ioctl$VHOST_VDPA_GET_VQS_COUNT(0xffffffffffffffff, 0x8004af80, &(0x7f0000000000)) [ 732.899516][ T9260] binder: 9257:9260 ioctl 4018f50b 0 returned -22 [ 732.905436][ T9260] binder: 9257:9260 ioctl 4018f50b 20000140 returned -22 23:33:01 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1, 0x8000}}, './file0\x00'}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:01 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:01 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x3, 0x40}}, './file0\x00'}) r2 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) r3 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f0000000140)={0x0, 0x401, 0x800}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000180)={0x3}) r5 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x2c, 0x0, &(0x7f0000000040)=[@acquire={0x40046305, 0x1}, @request_death, @free_buffer={0x40086303, r3}, @increfs={0x40046304, 0x7}], 0x37, 0x0, &(0x7f0000000080)="232338d6abee216b2ff99c692bc5a4435cb3ddac421a90c72e70de74717d1f40195b70ee70053a6d501b4db8504d79008173d0935a77c6"}) [ 732.929716][ T9273] binder: 9269:9273 ioctl 401c5820 200006c0 returned -22 [ 732.930099][ T9274] binder: 9269:9274 ioctl 82307201 200000c0 returned -22 [ 732.933910][ T9270] binder: 9269:9270 ioctl 4018f50b 0 returned -22 [ 732.936712][ T9278] binder: 9272:9278 ioctl 4018f50b 0 returned -22 23:33:01 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1, 0x8000}}, './file0\x00'}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x6}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1, 0x8000}}, './file0\x00'}) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) 23:33:01 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0) (async) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:01 executing program 0: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000000c0)={0x6, 0x4, 0x1, 'queue0\x00', 0x4}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_LSEEK(r1, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x7}}, 0x18) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 732.955040][ T9278] binder: 9272:9278 ioctl 4018f50b 0 returned -22 [ 732.958303][ T9278] binder: 9272:9278 ioctl 4018f50b 20000140 returned -22 23:33:01 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1, 0x8000}}, './file0\x00'}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x6}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1, 0x8000}}, './file0\x00'}) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) 23:33:01 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) [ 732.963425][ T9287] binder: 9284:9287 ioctl 401c5820 200006c0 returned -22 23:33:01 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:01 executing program 0: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000000c0)={0x6, 0x4, 0x1, 'queue0\x00', 0x4}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_LSEEK(r1, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x7}}, 0x18) (async) write$FUSE_LSEEK(r1, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x7}}, 0x18) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:33:01 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x1, 0x7}}, './file0\x00'}) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000100)={{0x9, 0x5}, 'port1\x00', 0x8, 0x800, 0x5, 0xffffffff, 0x8, 0xffffff4c, 0x1000, 0x0, 0x6, 0x1}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x33, 0x10000}}, './file0\x00'}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0xffffffffffffffff) 23:33:01 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004540), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r1, &(0x7f0000002340)={0x2020}, 0x2020) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000000)={0xa0, 0x0, r2, {{0x6, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc16b}}}}, 0xa0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000004140)={0x78, 0x0, r2, {0x494, 0x6, 0x0, {0xae, 0xffffffffffffffff, 0x6, 0x100, 0x6, 0x2fa7dd21, 0x6, 0x1, 0x7ff, 0x4000, 0x8, r3, r4, 0x1, 0x40}}}, 0x78) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000040), 0x20, 0x74800) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r6, 0xfffffffffffffffc) [ 732.996796][ T9299] binder: 9297:9299 ioctl 401c5820 200006c0 returned -22 23:33:01 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:01 executing program 0: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000000c0)={0x6, 0x4, 0x1, 'queue0\x00', 0x4}) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_LSEEK(r1, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x7}}, 0x18) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:33:01 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x1, 0x7}}, './file0\x00'}) (async) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000100)={{0x9, 0x5}, 'port1\x00', 0x8, 0x800, 0x5, 0xffffffff, 0x8, 0xffffff4c, 0x1000, 0x0, 0x6, 0x1}) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x33, 0x10000}}, './file0\x00'}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0xffffffffffffffff) 23:33:01 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) [ 733.021322][ T9308] binder: 9307:9308 ioctl 401c5820 200006c0 returned -22 23:33:01 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r2, 0x0, 0x2b6c, 0x7}}}, 0x90) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2000001, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@afid={'afid', 0x3d, 0x3f}}], [{@fsmagic={'fsmagic', 0x3d, 0x100000001}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@euid_eq={'euid', 0x3d, r2}}]}}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, 0x0) getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000300, r4, 0x0) 23:33:01 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x1, 0x7}}, './file0\x00'}) (async) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000100)={{0x9, 0x5}, 'port1\x00', 0x8, 0x800, 0x5, 0xffffffff, 0x8, 0xffffff4c, 0x1000, 0x0, 0x6, 0x1}) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x33, 0x10000}}, './file0\x00'}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0xffffffffffffffff) 23:33:01 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 733.049184][ T9317] binder: 9316:9317 ioctl 401c5820 200006c0 returned -22 [ 733.053079][ T9317] binder: 9316:9317 ioctl 4018f50b 0 returned -22 23:33:01 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r2 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r2, 0x0, 0x2b6c, 0x7}}}, 0x90) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2000001, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@afid={'afid', 0x3d, 0x3f}}], [{@fsmagic={'fsmagic', 0x3d, 0x100000001}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@euid_eq={'euid', 0x3d, r2}}]}}) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, 0x0) (async) getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000300, r4, 0x0) 23:33:01 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004540), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r1, &(0x7f0000002340)={0x2020}, 0x2020) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000000)={0xa0, 0x0, r2, {{0x6, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc16b}}}}, 0xa0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000004140)={0x78, 0x0, r2, {0x494, 0x6, 0x0, {0xae, 0xffffffffffffffff, 0x6, 0x100, 0x6, 0x2fa7dd21, 0x6, 0x1, 0x7ff, 0x4000, 0x8, r3, r4, 0x1, 0x40}}}, 0x78) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000040), 0x20, 0x74800) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r6, 0xfffffffffffffffc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000004540), 0x2, 0x0) (async) read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) (async) read$FUSE(r1, &(0x7f0000002340)={0x2020}, 0x2020) (async) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000000)={0xa0, 0x0, r2, {{0x6, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc16b}}}}, 0xa0) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020}, 0x2020) (async) write$FUSE_ATTR(r0, &(0x7f0000004140)={0x78, 0x0, r2, {0x494, 0x6, 0x0, {0xae, 0xffffffffffffffff, 0x6, 0x100, 0x6, 0x2fa7dd21, 0x6, 0x1, 0x7ff, 0x4000, 0x8, r3, r4, 0x1, 0x40}}}, 0x78) (async) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0x20, 0x74800) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r6, 0xfffffffffffffffc) (async) 23:33:01 executing program 3: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 23:33:01 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 733.069726][ T9325] binder: 9324:9325 ioctl 401c5820 200006c0 returned -22 [ 733.071294][ T9327] binder: 9324:9327 ioctl 4018f50b 0 returned -22 23:33:01 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:01 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r2, 0x0, 0x2b6c, 0x7}}}, 0x90) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2000001, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@afid={'afid', 0x3d, 0x3f}}], [{@fsmagic={'fsmagic', 0x3d, 0x100000001}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@euid_eq={'euid', 0x3d, r2}}]}}) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, 0x0) (async) getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000300, r4, 0x0) 23:33:01 executing program 3: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) [ 733.089658][ T9337] binder: 9336:9337 ioctl 401c5820 200006c0 returned -22 [ 733.090540][ T9339] binder: 9336:9339 ioctl 4018f50b 0 returned -22 23:33:01 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:01 executing program 3: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 23:33:01 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004540), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r1, &(0x7f0000002340)={0x2020}, 0x2020) (async) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000000)={0xa0, 0x0, r2, {{0x6, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc16b}}}}, 0xa0) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000004140)={0x78, 0x0, r2, {0x494, 0x6, 0x0, {0xae, 0xffffffffffffffff, 0x6, 0x100, 0x6, 0x2fa7dd21, 0x6, 0x1, 0x7ff, 0x4000, 0x8, r3, r4, 0x1, 0x40}}}, 0x78) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r5 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) socket$rxrpc(0x21, 0x2, 0xa) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) (async, rerun: 32) r6 = syz_open_dev$vcsa(&(0x7f0000000040), 0x20, 0x74800) (rerun: 32) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r6, 0xfffffffffffffffc) 23:33:01 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) socket$igmp(0x2, 0x3, 0x2) 23:33:01 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:01 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"ebcd846d2d53499b947cf28f153b69da", 0x0, 0x0, {0x100000000000, 0x10000}, {0x6383}, 0x6bf, [0x4, 0x200, 0x3, 0x1000, 0x1000, 0x100000000, 0x3ff, 0x6f0, 0x9, 0x80000000, 0x8, 0x2, 0x7fffffffffffffff, 0x1, 0xd72, 0x15e]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"4b059571b2d6f4d76113f638fff75bc2", r2, 0x0, {0xfff, 0x80000000}, {0x0, 0xffff7789}, 0x2, [0x6, 0xffffffffffffffbd, 0x8000000000000000, 0x7, 0x6, 0x80, 0xffff, 0xffffffffffff0000, 0x100, 0xfff, 0x1c, 0x2, 0x191, 0x8, 0x5, 0x81]}) 23:33:01 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"ebcd846d2d53499b947cf28f153b69da", 0x0, 0x0, {0x100000000000, 0x10000}, {0x6383}, 0x6bf, [0x4, 0x200, 0x3, 0x1000, 0x1000, 0x100000000, 0x3ff, 0x6f0, 0x9, 0x80000000, 0x8, 0x2, 0x7fffffffffffffff, 0x1, 0xd72, 0x15e]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"4b059571b2d6f4d76113f638fff75bc2", r2, 0x0, {0xfff, 0x80000000}, {0x0, 0xffff7789}, 0x2, [0x6, 0xffffffffffffffbd, 0x8000000000000000, 0x7, 0x6, 0x80, 0xffff, 0xffffffffffff0000, 0x100, 0xfff, 0x1c, 0x2, 0x191, 0x8, 0x5, 0x81]}) [ 733.153898][ T9359] binder: 9353:9359 ioctl 401c5820 200006c0 returned -22 23:33:01 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:01 executing program 1: setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000100)={0x5, "d006c4"}, 0x6) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0xc00) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0xff, @none, 0x7f}, 0xe) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x406e42, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) 23:33:01 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) (async) socket$igmp(0x2, 0x3, 0x2) 23:33:01 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"ebcd846d2d53499b947cf28f153b69da", 0x0, 0x0, {0x100000000000, 0x10000}, {0x6383}, 0x6bf, [0x4, 0x200, 0x3, 0x1000, 0x1000, 0x100000000, 0x3ff, 0x6f0, 0x9, 0x80000000, 0x8, 0x2, 0x7fffffffffffffff, 0x1, 0xd72, 0x15e]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"4b059571b2d6f4d76113f638fff75bc2", r2, 0x0, {0xfff, 0x80000000}, {0x0, 0xffff7789}, 0x2, [0x6, 0xffffffffffffffbd, 0x8000000000000000, 0x7, 0x6, 0x80, 0xffff, 0xffffffffffff0000, 0x100, 0xfff, 0x1c, 0x2, 0x191, 0x8, 0x5, 0x81]}) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"ebcd846d2d53499b947cf28f153b69da", 0x0, 0x0, {0x100000000000, 0x10000}, {0x6383}, 0x6bf, [0x4, 0x200, 0x3, 0x1000, 0x1000, 0x100000000, 0x3ff, 0x6f0, 0x9, 0x80000000, 0x8, 0x2, 0x7fffffffffffffff, 0x1, 0xd72, 0x15e]}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"4b059571b2d6f4d76113f638fff75bc2", r2, 0x0, {0xfff, 0x80000000}, {0x0, 0xffff7789}, 0x2, [0x6, 0xffffffffffffffbd, 0x8000000000000000, 0x7, 0x6, 0x80, 0xffff, 0xffffffffffff0000, 0x100, 0xfff, 0x1c, 0x2, 0x191, 0x8, 0x5, 0x81]}) (async) 23:33:01 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 733.172583][ T9367] binder: 9366:9367 ioctl 401c5820 200006c0 returned -22 23:33:01 executing program 1: setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000100)={0x5, "d006c4"}, 0x6) (async) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0xc00) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0xff, @none, 0x7f}, 0xe) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x406e42, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) 23:33:01 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) socket$igmp(0x2, 0x3, 0x2) 23:33:01 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 733.194129][ T9381] binder: 9378:9381 ioctl 401c5820 200006c0 returned -22 23:33:01 executing program 3: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000640)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$MEDIA_REQUEST_IOC_REINIT(r1, 0x7c81, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000006c0)={0x8245, 0x8, 0x3ff}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f00000005c0)={0x4000000000000006, 0x8, 0x2, 0xfffffffe}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000440)={{&(0x7f00000003c0)={'GENERAL\x00', {&(0x7f0000000100)=@adf_hex={@normal='NumberCyInstances\x00', {0xa0}, {&(0x7f0000000040)=@adf_dec={@bank={'Bank', '1', 'InterruptCoalescingNumResponses\x00'}, {0x6}}}}}, {&(0x7f0000000340)={'Accelerator\x00', {&(0x7f0000000280)=@adf_str={@bank={'Bank', '3', 'InterruptCoalescingTimerNs\x00'}, {"68956095b65101d85030cbd4663d6bf64fac95f7479280613823da40dca0cd5f5d9a9e4c1f472fdd818f088f989fd00b933adb83fbb0152ebfabefd3773858c4"}, {&(0x7f00000001c0)=@adf_dec={@normal='NumberDcInstances\x00', {0xfffffffffffffffd}}}}}}}}}, 0x1}) r4 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0xa0002, 0x0) r5 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x80000000000000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="ff7f0000000000802e2f66696c653200"]) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r7, 0x4018f50b, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r7, 0xc0096616, &(0x7f0000000680)) r8 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) r9 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000500)={r8, r9, 0x0, 0x35, &(0x7f00000004c0)="8bb1e6f4cc5835d0c4c5e819e20c3f116bbc4d352cf35642e963e7b0e6504c0baf97672d7b90630aacb0c5e152bee569f973f6f7be", 0x4, 0xf7, 0x2, 0x7fff, 0x0, 0x3, 0x2, 'syz1\x00'}) 23:33:01 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000800)={'\x00', 0x9, 0x40, 0x7f, 0x2da6000000000000}) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000000)={0x2, 0x7}) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0xe8, 0x0, &(0x7f0000000700)=[@free_buffer, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/171, 0xab, 0x1, 0x27}, @flat=@weak_handle={0x77682a85, 0x101, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/188, 0xbc, 0x2, 0xc}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x40}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x101}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/120, 0x78, 0x0, 0x35}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f00000005c0)={@fda={0x66646185, 0x0, 0x1, 0x2c}, @ptr={0x70742a85, 0x1, &(0x7f0000000400)=""/233, 0xe9, 0x1, 0x1e}, @fda={0x66646185, 0x7, 0x1, 0x1f}}, &(0x7f0000000500)={0x0, 0x20, 0x48}}, 0x40}], 0x2a, 0x0, &(0x7f0000000640)="8c5172f5d0f8dcd0ecc19c74f761a543f90f4e9ffe29cb0d0ebd88b9b4e2aa06398b0ff0123fc041429e"}) 23:33:01 executing program 1: setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000100)={0x5, "d006c4"}, 0x6) (async) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0xc00) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0xff, @none, 0x7f}, 0xe) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x406e42, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) [ 733.209691][ T9386] binder: 9384:9386 ioctl 4018f50b 0 returned -22 23:33:01 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 733.213977][ T9386] binder: 9384:9386 ioctl c0096616 20000640 returned -22 [ 733.221029][ T9386] binder: 9384:9386 ioctl 4018f50b 0 returned -22 [ 733.223269][ T9391] binder: 9390:9391 ioctl 401c5820 200006c0 returned -22 23:33:01 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, 0xee00, 0x0) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004540), 0x2, 0x0) read$FUSE(r3, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f0000002340)={0x2020}, 0x2020) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000000)={0xa0, 0x0, r4, {{0x6, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc16b}}}}, 0xa0) write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0x0, r4, {{0x376d, 0x1, 0x0, 0xffffffffffffffff}}}, 0x28) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x4000000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101c00, 0x0) [ 733.224929][ T9386] binder: 9384:9386 ioctl c0096616 20000680 returned -22 [ 733.230451][ T9391] binder: 9390:9391 ioctl 4018f50b 0 returned -22 23:33:01 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:01 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000800)={'\x00', 0x9, 0x40, 0x7f, 0x2da6000000000000}) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000000)={0x2, 0x7}) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0xe8, 0x0, &(0x7f0000000700)=[@free_buffer, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/171, 0xab, 0x1, 0x27}, @flat=@weak_handle={0x77682a85, 0x101, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/188, 0xbc, 0x2, 0xc}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x40}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x101}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/120, 0x78, 0x0, 0x35}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f00000005c0)={@fda={0x66646185, 0x0, 0x1, 0x2c}, @ptr={0x70742a85, 0x1, &(0x7f0000000400)=""/233, 0xe9, 0x1, 0x1e}, @fda={0x66646185, 0x7, 0x1, 0x1f}}, &(0x7f0000000500)={0x0, 0x20, 0x48}}, 0x40}], 0x2a, 0x0, &(0x7f0000000640)="8c5172f5d0f8dcd0ecc19c74f761a543f90f4e9ffe29cb0d0ebd88b9b4e2aa06398b0ff0123fc041429e"}) 23:33:01 executing program 3: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000640)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$MEDIA_REQUEST_IOC_REINIT(r1, 0x7c81, 0x0) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000006c0)={0x8245, 0x8, 0x3ff}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f00000005c0)={0x4000000000000006, 0x8, 0x2, 0xfffffffe}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) (async) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000440)={{&(0x7f00000003c0)={'GENERAL\x00', {&(0x7f0000000100)=@adf_hex={@normal='NumberCyInstances\x00', {0xa0}, {&(0x7f0000000040)=@adf_dec={@bank={'Bank', '1', 'InterruptCoalescingNumResponses\x00'}, {0x6}}}}}, {&(0x7f0000000340)={'Accelerator\x00', {&(0x7f0000000280)=@adf_str={@bank={'Bank', '3', 'InterruptCoalescingTimerNs\x00'}, {"68956095b65101d85030cbd4663d6bf64fac95f7479280613823da40dca0cd5f5d9a9e4c1f472fdd818f088f989fd00b933adb83fbb0152ebfabefd3773858c4"}, {&(0x7f00000001c0)=@adf_dec={@normal='NumberDcInstances\x00', {0xfffffffffffffffd}}}}}}}}}, 0x1}) r4 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0xa0002, 0x0) r5 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) (async) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x80000000000000) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="ff7f0000000000802e2f66696c653200"]) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r7, 0x4018f50b, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r7, 0xc0096616, &(0x7f0000000680)) r8 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) (async, rerun: 32) r9 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000500)={r8, r9, 0x0, 0x35, &(0x7f00000004c0)="8bb1e6f4cc5835d0c4c5e819e20c3f116bbc4d352cf35642e963e7b0e6504c0baf97672d7b90630aacb0c5e152bee569f973f6f7be", 0x4, 0xf7, 0x2, 0x7fff, 0x0, 0x3, 0x2, 'syz1\x00'}) [ 733.247452][ T9395] binder: 9394:9395 ioctl 4018f50b 0 returned -22 [ 733.257264][ T9399] binder: 9398:9399 ioctl 4018f50b 0 returned -22 [ 733.260611][ T9402] binder: 9398:9402 ioctl c0096616 20000640 returned -22 [ 733.263355][ T9406] binder: 9400:9406 ioctl 401c5820 200006c0 returned -22 [ 733.267848][ T9405] binder: 9400:9405 ioctl 4018f50b 0 returned -22 23:33:01 executing program 3: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000640)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$MEDIA_REQUEST_IOC_REINIT(r1, 0x7c81, 0x0) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000006c0)={0x8245, 0x8, 0x3ff}) (async) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f00000005c0)={0x4000000000000006, 0x8, 0x2, 0xfffffffe}) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000440)={{&(0x7f00000003c0)={'GENERAL\x00', {&(0x7f0000000100)=@adf_hex={@normal='NumberCyInstances\x00', {0xa0}, {&(0x7f0000000040)=@adf_dec={@bank={'Bank', '1', 'InterruptCoalescingNumResponses\x00'}, {0x6}}}}}, {&(0x7f0000000340)={'Accelerator\x00', {&(0x7f0000000280)=@adf_str={@bank={'Bank', '3', 'InterruptCoalescingTimerNs\x00'}, {"68956095b65101d85030cbd4663d6bf64fac95f7479280613823da40dca0cd5f5d9a9e4c1f472fdd818f088f989fd00b933adb83fbb0152ebfabefd3773858c4"}, {&(0x7f00000001c0)=@adf_dec={@normal='NumberDcInstances\x00', {0xfffffffffffffffd}}}}}}}}}, 0x1}) (async) r4 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0xa0002, 0x0) r5 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) (async) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x80000000000000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="ff7f0000000000802e2f66696c653200"]) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r7, 0x4018f50b, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r7, 0xc0096616, &(0x7f0000000680)) (async) r8 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) (async) r9 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000500)={r8, r9, 0x0, 0x35, &(0x7f00000004c0)="8bb1e6f4cc5835d0c4c5e819e20c3f116bbc4d352cf35642e963e7b0e6504c0baf97672d7b90630aacb0c5e152bee569f973f6f7be", 0x4, 0xf7, 0x2, 0x7fff, 0x0, 0x3, 0x2, 'syz1\x00'}) [ 733.269169][ T9406] binder: 9400:9406 ioctl 4018f50b 0 returned -22 23:33:01 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:01 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000800)={'\x00', 0x9, 0x40, 0x7f, 0x2da6000000000000}) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000000)={0x2, 0x7}) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) (rerun: 32) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0xe8, 0x0, &(0x7f0000000700)=[@free_buffer, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/171, 0xab, 0x1, 0x27}, @flat=@weak_handle={0x77682a85, 0x101, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/188, 0xbc, 0x2, 0xc}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x40}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x101}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/120, 0x78, 0x0, 0x35}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f00000005c0)={@fda={0x66646185, 0x0, 0x1, 0x2c}, @ptr={0x70742a85, 0x1, &(0x7f0000000400)=""/233, 0xe9, 0x1, 0x1e}, @fda={0x66646185, 0x7, 0x1, 0x1f}}, &(0x7f0000000500)={0x0, 0x20, 0x48}}, 0x40}], 0x2a, 0x0, &(0x7f0000000640)="8c5172f5d0f8dcd0ecc19c74f761a543f90f4e9ffe29cb0d0ebd88b9b4e2aa06398b0ff0123fc041429e"}) [ 733.287740][ T9409] binder: 9407:9409 ioctl 4018f50b 0 returned -22 [ 733.288414][ T9410] binder: 9407:9410 ioctl c0096616 20000640 returned -22 23:33:01 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 733.295303][ T9415] binder: 9414:9415 ioctl 401c5820 200006c0 returned -22 [ 733.303806][ T9415] binder: 9414:9415 ioctl 4018f50b 0 returned -22 23:33:01 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x7, 0x408000) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000080)={0x100000, 0x7, 0x2, 0x8, 0x1, [{0x8000000000000000, 0x9, 0x7f, '\x00', 0x2f80}]}) 23:33:01 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) (async) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, 0xee00, 0x0) (async) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004540), 0x2, 0x0) read$FUSE(r3, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f0000002340)={0x2020}, 0x2020) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000000)={0xa0, 0x0, r4, {{0x6, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc16b}}}}, 0xa0) write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0x0, r4, {{0x376d, 0x1, 0x0, 0xffffffffffffffff}}}, 0x28) (async) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x4000000) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101c00, 0x0) 23:33:01 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) 23:33:01 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x0, 0x0, 0x0}) 23:33:01 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x7, 0x408000) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000080)={0x100000, 0x7, 0x2, 0x8, 0x1, [{0x8000000000000000, 0x9, 0x7f, '\x00', 0x2f80}]}) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0x7, 0x408000) (async) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000080)={0x100000, 0x7, 0x2, 0x8, 0x1, [{0x8000000000000000, 0x9, 0x7f, '\x00', 0x2f80}]}) (async) [ 733.333282][ T9427] binder: 9426:9427 ioctl 401c5820 200006c0 returned -22 [ 733.334526][ T9428] binder: 9425:9428 ioctl 4018f50b 0 returned -22 23:33:01 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x0, 0x0, 0x0}) 23:33:01 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) 23:33:01 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, 0xee00, 0x0) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004540), 0x2, 0x0) read$FUSE(r3, &(0x7f0000004580)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f0000002340)={0x2020}, 0x2020) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000000)={0xa0, 0x0, r4, {{0x6, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc16b}}}}, 0xa0) write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0x0, r4, {{0x376d, 0x1, 0x0, 0xffffffffffffffff}}}, 0x28) (async) write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0x0, r4, {{0x376d, 0x1, 0x0, 0xffffffffffffffff}}}, 0x28) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x4000000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101c00, 0x0) [ 733.355972][ T9435] binder: 9433:9435 ioctl 401c5820 200006c0 returned -22 23:33:01 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x7, 0x408000) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000080)={0x100000, 0x7, 0x2, 0x8, 0x1, [{0x8000000000000000, 0x9, 0x7f, '\x00', 0x2f80}]}) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0x7, 0x408000) (async) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000080)={0x100000, 0x7, 0x2, 0x8, 0x1, [{0x8000000000000000, 0x9, 0x7f, '\x00', 0x2f80}]}) (async) 23:33:01 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x0, 0x0, 0x0}) 23:33:01 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 733.365247][ T9441] binder: 9438:9441 ioctl 4018f50b 0 returned -22 [ 733.366150][ T9442] binder: 9438:9442 ioctl 4018f50b 0 returned -22 [ 733.375917][ T9446] binder: 9444:9446 ioctl 401c5820 200006c0 returned -22 [ 733.378233][ T9448] binder: 9444:9448 ioctl 401c5820 200006c0 returned -22 23:33:01 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:01 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/131, 0x83, 0x1, &(0x7f0000000100)=""/251, 0xfb}, &(0x7f0000000240)=0x40) 23:33:01 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socket$bt_hidp(0x1f, 0x3, 0x6) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f00000000c0)=0x1) [ 733.400525][ T9457] binder: 9455:9457 ioctl 401c5820 200006c0 returned -22 23:33:01 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/131, 0x83, 0x1, &(0x7f0000000100)=""/251, 0xfb}, &(0x7f0000000240)=0x40) 23:33:01 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socket$bt_hidp(0x1f, 0x3, 0x6) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f00000000c0)=0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x802, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) socket$bt_hidp(0x1f, 0x3, 0x6) (async) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f00000000c0)=0x1) (async) 23:33:01 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/131, 0x83, 0x1, &(0x7f0000000100)=""/251, 0xfb}, &(0x7f0000000240)=0x40) 23:33:01 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:01 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x4c040, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x200200, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x800) quotactl_fd$Q_QUOTAOFF(r2, 0x0, 0x0, 0x0) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) poll(&(0x7f0000000080)=[{r0, 0xa022}, {r0, 0x820c}, {r0, 0xc1e9a464d233d014}, {r1, 0x4011}, {r3, 0xc740}, {r0, 0x4040}, {r0, 0x80}, {r0, 0x100}, {r0, 0x2420}], 0x9, 0xfffffff9) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x400) [ 733.489604][ T9464] binder: 9461:9464 ioctl 401c5820 200006c0 returned -22 23:33:01 executing program 3: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x121280, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x80, 0x0, &(0x7f0000000140)=[@release, @acquire_done, @clear_death={0x400c630f, 0x3}, @request_death, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0x10b, 0x2}, @fda={0x66646185, 0x4, 0x2, 0x9}, @fda={0x66646185, 0x2, 0x1, 0x23}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}}], 0xad, 0x0, &(0x7f00000001c0)="ded2f3a86a7b49d6924ce8545afd02c9556823a2981526bad7721ae67fa41cc3e2f0384de0e9d1209f1f45dc5f6b900914b95d04feaeeef819d401ca26909472c5dc16e0d1e8e5cf62d55bf391f9115acaacba86772c6063036010c3c4cb2e462a3d8b48c3712d2c0f0a8f3254f6fda9944676cf83a5521ca8715ae528f22c30bd1e0f3eaf6343433f56b2091ca1874dee9cd381b73bdf7f336620736483cde03076b15113e126efe2f9e0caac"}) 23:33:01 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:01 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x4c040, 0x0) (async) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x200200, 0x0) (async) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x800) quotactl_fd$Q_QUOTAOFF(r2, 0x0, 0x0, 0x0) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) poll(&(0x7f0000000080)=[{r0, 0xa022}, {r0, 0x820c}, {r0, 0xc1e9a464d233d014}, {r1, 0x4011}, {r3, 0xc740}, {r0, 0x4040}, {r0, 0x80}, {r0, 0x100}, {r0, 0x2420}], 0x9, 0xfffffff9) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x400) [ 733.498134][ T9464] binder: 9461:9464 ioctl 401c5820 200006c0 returned -22 23:33:01 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x802, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) socket$bt_hidp(0x1f, 0x3, 0x6) (async, rerun: 64) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f00000000c0)=0x1) 23:33:01 executing program 3: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x121280, 0x0) (async) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x121280, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x80, 0x0, &(0x7f0000000140)=[@release, @acquire_done, @clear_death={0x400c630f, 0x3}, @request_death, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0x10b, 0x2}, @fda={0x66646185, 0x4, 0x2, 0x9}, @fda={0x66646185, 0x2, 0x1, 0x23}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}}], 0xad, 0x0, &(0x7f00000001c0)="ded2f3a86a7b49d6924ce8545afd02c9556823a2981526bad7721ae67fa41cc3e2f0384de0e9d1209f1f45dc5f6b900914b95d04feaeeef819d401ca26909472c5dc16e0d1e8e5cf62d55bf391f9115acaacba86772c6063036010c3c4cb2e462a3d8b48c3712d2c0f0a8f3254f6fda9944676cf83a5521ca8715ae528f22c30bd1e0f3eaf6343433f56b2091ca1874dee9cd381b73bdf7f336620736483cde03076b15113e126efe2f9e0caac"}) 23:33:01 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x4c040, 0x0) (async, rerun: 32) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x200200, 0x0) (async, rerun: 32) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x800) quotactl_fd$Q_QUOTAOFF(r2, 0x0, 0x0, 0x0) (async, rerun: 64) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) poll(&(0x7f0000000080)=[{r0, 0xa022}, {r0, 0x820c}, {r0, 0xc1e9a464d233d014}, {r1, 0x4011}, {r3, 0xc740}, {r0, 0x4040}, {r0, 0x80}, {r0, 0x100}, {r0, 0x2420}], 0x9, 0xfffffff9) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x400) [ 733.523226][ T9484] binder: 9480:9484 ioctl 401c5820 200006c0 returned -22 23:33:01 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:01 executing program 3: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x121280, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x80, 0x0, &(0x7f0000000140)=[@release, @acquire_done, @clear_death={0x400c630f, 0x3}, @request_death, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0x10b, 0x2}, @fda={0x66646185, 0x4, 0x2, 0x9}, @fda={0x66646185, 0x2, 0x1, 0x23}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}}], 0xad, 0x0, &(0x7f00000001c0)="ded2f3a86a7b49d6924ce8545afd02c9556823a2981526bad7721ae67fa41cc3e2f0384de0e9d1209f1f45dc5f6b900914b95d04feaeeef819d401ca26909472c5dc16e0d1e8e5cf62d55bf391f9115acaacba86772c6063036010c3c4cb2e462a3d8b48c3712d2c0f0a8f3254f6fda9944676cf83a5521ca8715ae528f22c30bd1e0f3eaf6343433f56b2091ca1874dee9cd381b73bdf7f336620736483cde03076b15113e126efe2f9e0caac"}) 23:33:01 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:01 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:33:01 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:01 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000800)={'\x00', 0x9, 0x40, 0x7f, 0x2da6000000000000}) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000000)={0x2, 0x7}) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0xe8, 0x0, &(0x7f0000000700)=[@free_buffer, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/171, 0xab, 0x1, 0x27}, @flat=@weak_handle={0x77682a85, 0x101, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/188, 0xbc, 0x2, 0xc}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x40}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x101}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/120, 0x78, 0x0, 0x35}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f00000005c0)={@fda={0x66646185, 0x0, 0x1, 0x2c}, @ptr={0x70742a85, 0x1, &(0x7f0000000400)=""/233, 0xe9, 0x1, 0x1e}, @fda={0x66646185, 0x7, 0x1, 0x1f}}, &(0x7f0000000500)={0x0, 0x20, 0x48}}, 0x40}], 0x2a, 0x0, &(0x7f0000000640)="8c5172f5d0f8dcd0ecc19c74f761a543f90f4e9ffe29cb0d0ebd88b9b4e2aa06398b0ff0123fc041429e"}) 23:33:01 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:01 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 733.570911][ T9502] binder: 9500:9502 ioctl 401c5820 200006c0 returned -22 23:33:01 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:01 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 733.582623][ T9502] binder: 9500:9502 ioctl 4018f50b 0 returned -22 23:33:01 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:33:01 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:01 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:01 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:01 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) msgget(0x3, 0x20) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:33:01 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:01 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:01 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 733.625463][ T9522] binder: 9521:9522 ioctl 401c5820 200006c0 returned -22 23:33:01 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:01 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) msgget(0x3, 0x20) (async) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:33:01 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 733.648392][ T9533] binder: 9525:9533 ioctl 401c5820 200006c0 returned -22 23:33:01 executing program 2: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) 23:33:01 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:01 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) msgget(0x3, 0x20) (async) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:33:01 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:01 executing program 2: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) [ 733.672078][ T9541] binder: 9538:9541 ioctl 401c5820 200006c0 returned -22 23:33:01 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) 23:33:01 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:01 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0xffffffffffff8000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x7, 0x4000) ioctl$BINDER_WRITE_READ(r1, 0x401c5820, &(0x7f00000006c0)={0x88, 0x0, &(0x7f0000000440)=[@enter_looper, @acquire, @increfs_done={0x40106308, 0x2}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/178, 0x0, 0x0, 0x8}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/192, 0xc0, 0xffffffffffffffff, 0x16}, @fd}, &(0x7f0000000000)={0x0, 0x76, 0x40}}, 0x400}, @request_death={0x400c630e, 0x5}, @dead_binder_done], 0x0, 0x0, 0x0}) 23:33:01 executing program 2: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) 23:33:01 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 733.696023][ T9549] binder: 9548:9549 ioctl 4018f50b 0 returned -22 23:33:01 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) 23:33:01 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0xffffffffffff8000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x7, 0x4000) ioctl$BINDER_WRITE_READ(r1, 0x401c5820, &(0x7f00000006c0)={0x88, 0x0, &(0x7f0000000440)=[@enter_looper, @acquire, @increfs_done={0x40106308, 0x2}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/178, 0x0, 0x0, 0x8}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/192, 0xc0, 0xffffffffffffffff, 0x16}, @fd}, &(0x7f0000000000)={0x0, 0x76, 0x40}}, 0x400}, @request_death={0x400c630e, 0x5}, @dead_binder_done], 0x0, 0x0, 0x0}) 23:33:01 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:01 executing program 2: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) 23:33:01 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 733.723917][ T9557] binder: 9556:9557 ioctl 4018f50b 0 returned -22 23:33:01 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:01 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0xffffffffffff8000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) socket$isdn_base(0x22, 0x3, 0x0) syz_open_dev$vcsa(&(0x7f0000000080), 0x7, 0x4000) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x7, 0x4000) ioctl$BINDER_WRITE_READ(r1, 0x401c5820, &(0x7f00000006c0)={0x88, 0x0, &(0x7f0000000440)=[@enter_looper, @acquire, @increfs_done={0x40106308, 0x2}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/178, 0x0, 0x0, 0x8}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/192, 0xc0, 0xffffffffffffffff, 0x16}, @fd}, &(0x7f0000000000)={0x0, 0x76, 0x40}}, 0x400}, @request_death={0x400c630e, 0x5}, @dead_binder_done], 0x0, 0x0, 0x0}) 23:33:01 executing program 2: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) 23:33:01 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:01 executing program 2: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) 23:33:01 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:01 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 733.756592][ T9575] binder: 9571:9575 ioctl 4018f50b 0 returned -22 23:33:01 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:01 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:33:01 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:01 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) 23:33:02 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) 23:33:02 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:33:02 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:02 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) 23:33:02 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000480)={0xffffffff, 0x1, 'client0\x00', 0x1, "e66895b7cba61e47", "caf909d108871287e9ca3dd7c001b974664a6dde53a67ad9e0da481495a26f24", 0x0, 0x81}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:02 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) 23:33:02 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:02 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) 23:33:02 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000480)={0xffffffff, 0x1, 'client0\x00', 0x1, "e66895b7cba61e47", "caf909d108871287e9ca3dd7c001b974664a6dde53a67ad9e0da481495a26f24", 0x0, 0x81}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:02 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x5, 0x80000) write$proc_mixer(r1, &(0x7f0000000080)=[{'LINE2', @val={' \'', 'Synth'}}, {'SYNTH', @val={' \'', 'Synth Capture Switch'}}], 0x55) 23:33:02 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:02 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:02 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000480)={0xffffffff, 0x1, 'client0\x00', 0x1, "e66895b7cba61e47", "caf909d108871287e9ca3dd7c001b974664a6dde53a67ad9e0da481495a26f24", 0x0, 0x81}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 733.858614][ T9610] binder: 9609:9610 ioctl 401c5820 200006c0 returned -22 23:33:02 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:02 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_open_dev$vcsa(&(0x7f0000000000), 0x5, 0x80000) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x5, 0x80000) write$proc_mixer(r1, &(0x7f0000000080)=[{'LINE2', @val={' \'', 'Synth'}}, {'SYNTH', @val={' \'', 'Synth Capture Switch'}}], 0x55) 23:33:02 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:02 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000480)={0xffffffff, 0x1, 'client0\x00', 0x1, "e66895b7cba61e47", "caf909d108871287e9ca3dd7c001b974664a6dde53a67ad9e0da481495a26f24", 0x0, 0x81}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 733.885865][ T9619] binder: 9617:9619 ioctl 401c5820 200006c0 returned -22 23:33:02 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:02 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x5, 0x80000) write$proc_mixer(r1, &(0x7f0000000080)=[{'LINE2', @val={' \'', 'Synth'}}, {'SYNTH', @val={' \'', 'Synth Capture Switch'}}], 0x55) 23:33:02 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:02 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000480)={0xffffffff, 0x1, 'client0\x00', 0x1, "e66895b7cba61e47", "caf909d108871287e9ca3dd7c001b974664a6dde53a67ad9e0da481495a26f24", 0x0, 0x81}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 733.913550][ T9629] binder: 9627:9629 ioctl 401c5820 200006c0 returned -22 23:33:02 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:02 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x305a01, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x6) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000000)={0x0, 0x4, 0x8000000000000000}) 23:33:02 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:02 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000480)={0xffffffff, 0x1, 'client0\x00', 0x1, "e66895b7cba61e47", "caf909d108871287e9ca3dd7c001b974664a6dde53a67ad9e0da481495a26f24", 0x0, 0x81}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:02 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 733.944774][ T9637] binder: 9636:9637 ioctl 401c5820 200006c0 returned -22 [ 733.948350][ T9637] binder: 9636:9637 ioctl 4018f50b 20000000 returned -22 23:33:02 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:02 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:02 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x305a01, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x6) (async) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000000)={0x0, 0x4, 0x8000000000000000}) 23:33:02 executing program 1: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) 23:33:02 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 733.978551][ T9652] binder: 9647:9652 ioctl 4018f50b 20000000 returned -22 23:33:02 executing program 1: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) [ 733.978563][ T9651] binder: 9647:9651 ioctl 401c5820 200006c0 returned -22 23:33:02 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:02 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x305a01, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x6) (async) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000000)={0x0, 0x4, 0x8000000000000000}) 23:33:02 executing program 1: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) 23:33:02 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:02 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 734.010033][ T9662] binder: 9659:9662 ioctl 401c5820 200006c0 returned -22 [ 734.014721][ T9660] binder: 9659:9660 ioctl 4018f50b 20000000 returned -22 23:33:02 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:02 executing program 1: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) 23:33:02 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) fcntl$setlease(r1, 0x400, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:33:02 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:02 executing program 1: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 734.042738][ T9674] binder: 9670:9674 ioctl 401c5820 200006c0 returned -22 23:33:02 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:02 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:02 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) fcntl$setlease(r1, 0x400, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:33:02 executing program 1: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) 23:33:02 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:02 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 734.070760][ T9683] binder: 9682:9683 ioctl 401c5820 200006c0 returned -22 23:33:02 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) fcntl$setlease(r1, 0x400, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:33:02 executing program 1: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) 23:33:02 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) 23:33:02 executing program 3: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) [ 734.094429][ T9692] binder: 9691:9692 ioctl 401c5820 200006c0 returned -22 23:33:02 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f00000000c0)={0x1, 0x7}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="6ab3cbf2265452bd552f", @ANYRES32=r1, @ANYBLOB="ffc56ad3b29dbdb1ff2f66696c653000"]) ioctl$VHOST_VDPA_GET_VRING_GROUP(r2, 0xc008af7b, &(0x7f0000000140)={0x1, 0xfffffff8}) ioctl$BINDER_WRITE_READ(r1, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000700)={{r3}, "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"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0xc04c5349, &(0x7f0000000200)={0x2, 0x6, 0x1}) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000280)={0x1d0, 0x3, 0x0, {0x10000000000006, 0x1af, 0x0, '\x81\tbinderfs2/cusvom1\xe5\xdb\x03\x00\x00\x00\x00\x00\x00\x00XQ\xd5Cl\xe1]K\a\x89Zu\xf5\xe7\x87\xc0\xa0l\x9f\x91*\xa5\xd4\x16\x9b\xad\xe2/\xafqFj\x9a\x92\xee@)@0\x1d\xa7\xa5q\xf9\xf3J\xbas\x94\rd\x01\x00\x02\xb9\xf5\xa1\xb1h|\x01\xf5\xa3x:\xadJh\aS\xe6H\x81\xa8\xa7(X\x87h\f\bB\xb7?M<\x93R\xd2\xf1\xc4\x00\xf9D\xcar\xa8\x1f\xa5\x97\xda\x01\x97\x054\xb5\x1e\xeb\x82S\xaf\x9d\x0fx(\xd7M\xb6\xe8\xf9\xd7\xad\xdc\xf8\xff\xddx\xca\x91\xad\xbe \x9eR\xd4\xc8`\xab]\xce\xfc\xd9\xd7\xab\r2D\x1aJ\x1f\x06\xeb\xe9\xaa\xc20}Ss[\x0f2\nO\xa1\xea\xfc\xe6\x17\xe2\xf8O\xe8\xd1\xebo!!\xa3\xf8\x17\xfd\x89s\x05\xe11v\xcf/3\x9b\xc3\xaa\xed9\x13W\xcf\x87\xca\x80\xc4]x^\xaf\xb2/\x87\x90\x9c\x93\xc64R\xed\xe7\xa0\xc8\x9d}\x03\xf2T\x8fVx\v7\xbc\xcc\xd7\n!\x0e\xc2\xbf\x98\xec\xfb\x99\xd6\xf9\xd9\xaa\xdd\x87W\x98\xa8\x8d^\x98EX\xbcP\xe5rS\x9d\xa9\x94\f\xc3\xb3D\xed\xf7r\xaf\x1dX\xf3\xadO\x9f\x7f\x1e8E\n\x86\xcfp\x86\xa3\xea\xd9\a\"\rw\xce\x9e\v\a\x7f\x80u\x82#.\bK\x01\xf7(\x10\x91\xf0\x19F\xeb\xe4\x8b\xf8\xba\xa1i\x8f\xcd[\tZ\x9dn#k,\xb3\x83\xe2\x02\x96}\xa6\xd3\xdc*\xfaJ\x86\xe4\x86c\x00\xe1.]\x8f\x02R\xc6\x98\xfce\x97L#\r\"\xb2[\xd5\xda\xccN\x0f\x06\xed\xb8VE\xc2\xb2\xf7\x02\xacw\xd9Pe\xe2\x8e)Ym\x84d\x94x9-6n\x8a\xb9\x93+\t'}}, 0x1d0) 23:33:02 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x5, 0x80000) write$proc_mixer(r1, &(0x7f0000000080)=[{'LINE2', @val={' \'', 'Synth'}}, {'SYNTH', @val={' \'', 'Synth Capture Switch'}}], 0x55) 23:33:02 executing program 3: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) [ 734.117404][ T9701] binder: 9700:9701 ioctl 401c5820 200006c0 returned -22 23:33:02 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) 23:33:02 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f00000000c0)={0x1, 0x7}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="6ab3cbf2265452bd552f", @ANYRES32=r1, @ANYBLOB="ffc56ad3b29dbdb1ff2f66696c653000"]) (async) ioctl$VHOST_VDPA_GET_VRING_GROUP(r2, 0xc008af7b, &(0x7f0000000140)={0x1, 0xfffffff8}) (async) ioctl$BINDER_WRITE_READ(r1, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000700)={{r3}, "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"}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0xc04c5349, &(0x7f0000000200)={0x2, 0x6, 0x1}) (async, rerun: 32) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000280)={0x1d0, 0x3, 0x0, {0x10000000000006, 0x1af, 0x0, '\x81\tbinderfs2/cusvom1\xe5\xdb\x03\x00\x00\x00\x00\x00\x00\x00XQ\xd5Cl\xe1]K\a\x89Zu\xf5\xe7\x87\xc0\xa0l\x9f\x91*\xa5\xd4\x16\x9b\xad\xe2/\xafqFj\x9a\x92\xee@)@0\x1d\xa7\xa5q\xf9\xf3J\xbas\x94\rd\x01\x00\x02\xb9\xf5\xa1\xb1h|\x01\xf5\xa3x:\xadJh\aS\xe6H\x81\xa8\xa7(X\x87h\f\bB\xb7?M<\x93R\xd2\xf1\xc4\x00\xf9D\xcar\xa8\x1f\xa5\x97\xda\x01\x97\x054\xb5\x1e\xeb\x82S\xaf\x9d\x0fx(\xd7M\xb6\xe8\xf9\xd7\xad\xdc\xf8\xff\xddx\xca\x91\xad\xbe \x9eR\xd4\xc8`\xab]\xce\xfc\xd9\xd7\xab\r2D\x1aJ\x1f\x06\xeb\xe9\xaa\xc20}Ss[\x0f2\nO\xa1\xea\xfc\xe6\x17\xe2\xf8O\xe8\xd1\xebo!!\xa3\xf8\x17\xfd\x89s\x05\xe11v\xcf/3\x9b\xc3\xaa\xed9\x13W\xcf\x87\xca\x80\xc4]x^\xaf\xb2/\x87\x90\x9c\x93\xc64R\xed\xe7\xa0\xc8\x9d}\x03\xf2T\x8fVx\v7\xbc\xcc\xd7\n!\x0e\xc2\xbf\x98\xec\xfb\x99\xd6\xf9\xd9\xaa\xdd\x87W\x98\xa8\x8d^\x98EX\xbcP\xe5rS\x9d\xa9\x94\f\xc3\xb3D\xed\xf7r\xaf\x1dX\xf3\xadO\x9f\x7f\x1e8E\n\x86\xcfp\x86\xa3\xea\xd9\a\"\rw\xce\x9e\v\a\x7f\x80u\x82#.\bK\x01\xf7(\x10\x91\xf0\x19F\xeb\xe4\x8b\xf8\xba\xa1i\x8f\xcd[\tZ\x9dn#k,\xb3\x83\xe2\x02\x96}\xa6\xd3\xdc*\xfaJ\x86\xe4\x86c\x00\xe1.]\x8f\x02R\xc6\x98\xfce\x97L#\r\"\xb2[\xd5\xda\xccN\x0f\x06\xed\xb8VE\xc2\xb2\xf7\x02\xacw\xd9Pe\xe2\x8e)Ym\x84d\x94x9-6n\x8a\xb9\x93+\t'}}, 0x1d0) [ 734.136863][ T9703] binder: 9702:9703 ioctl 401c5820 200006c0 returned -22 23:33:02 executing program 3: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) [ 734.140376][ T9709] binder: 9707:9709 ioctl 401c5820 200006c0 returned -22 23:33:02 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:02 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000100)={0xe769, 0xff, 0x0, 'queue0\x00', 0x7fff}) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0xfffc, 0x40, 0x3, 0x8, 0x2, 0xffffffffffffffff}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xfff) 23:33:02 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f00000000c0)={0x1, 0x7}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="6ab3cbf2265452bd552f", @ANYRES32=r1, @ANYBLOB="ffc56ad3b29dbdb1ff2f66696c653000"]) (async, rerun: 32) ioctl$VHOST_VDPA_GET_VRING_GROUP(r2, 0xc008af7b, &(0x7f0000000140)={0x1, 0xfffffff8}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000700)={{r3}, "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"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0) (async) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0xc04c5349, &(0x7f0000000200)={0x2, 0x6, 0x1}) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000280)={0x1d0, 0x3, 0x0, {0x10000000000006, 0x1af, 0x0, '\x81\tbinderfs2/cusvom1\xe5\xdb\x03\x00\x00\x00\x00\x00\x00\x00XQ\xd5Cl\xe1]K\a\x89Zu\xf5\xe7\x87\xc0\xa0l\x9f\x91*\xa5\xd4\x16\x9b\xad\xe2/\xafqFj\x9a\x92\xee@)@0\x1d\xa7\xa5q\xf9\xf3J\xbas\x94\rd\x01\x00\x02\xb9\xf5\xa1\xb1h|\x01\xf5\xa3x:\xadJh\aS\xe6H\x81\xa8\xa7(X\x87h\f\bB\xb7?M<\x93R\xd2\xf1\xc4\x00\xf9D\xcar\xa8\x1f\xa5\x97\xda\x01\x97\x054\xb5\x1e\xeb\x82S\xaf\x9d\x0fx(\xd7M\xb6\xe8\xf9\xd7\xad\xdc\xf8\xff\xddx\xca\x91\xad\xbe \x9eR\xd4\xc8`\xab]\xce\xfc\xd9\xd7\xab\r2D\x1aJ\x1f\x06\xeb\xe9\xaa\xc20}Ss[\x0f2\nO\xa1\xea\xfc\xe6\x17\xe2\xf8O\xe8\xd1\xebo!!\xa3\xf8\x17\xfd\x89s\x05\xe11v\xcf/3\x9b\xc3\xaa\xed9\x13W\xcf\x87\xca\x80\xc4]x^\xaf\xb2/\x87\x90\x9c\x93\xc64R\xed\xe7\xa0\xc8\x9d}\x03\xf2T\x8fVx\v7\xbc\xcc\xd7\n!\x0e\xc2\xbf\x98\xec\xfb\x99\xd6\xf9\xd9\xaa\xdd\x87W\x98\xa8\x8d^\x98EX\xbcP\xe5rS\x9d\xa9\x94\f\xc3\xb3D\xed\xf7r\xaf\x1dX\xf3\xadO\x9f\x7f\x1e8E\n\x86\xcfp\x86\xa3\xea\xd9\a\"\rw\xce\x9e\v\a\x7f\x80u\x82#.\bK\x01\xf7(\x10\x91\xf0\x19F\xeb\xe4\x8b\xf8\xba\xa1i\x8f\xcd[\tZ\x9dn#k,\xb3\x83\xe2\x02\x96}\xa6\xd3\xdc*\xfaJ\x86\xe4\x86c\x00\xe1.]\x8f\x02R\xc6\x98\xfce\x97L#\r\"\xb2[\xd5\xda\xccN\x0f\x06\xed\xb8VE\xc2\xb2\xf7\x02\xacw\xd9Pe\xe2\x8e)Ym\x84d\x94x9-6n\x8a\xb9\x93+\t'}}, 0x1d0) 23:33:02 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:02 executing program 3: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 734.167199][ T9717] blktrace: Concurrent blktraces are not allowed on pmem0 [ 734.169310][ T9719] binder: 9718:9719 ioctl 401c5820 200006c0 returned -22 23:33:02 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000100)={0xe769, 0xff, 0x0, 'queue0\x00', 0x7fff}) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0xfffc, 0x40, 0x3, 0x8, 0x2, 0xffffffffffffffff}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xfff) 23:33:02 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x5, 0x1000}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:33:02 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:02 executing program 3: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 734.193768][ T9729] binder: 9726:9729 ioctl 401c5820 200006c0 returned -22 [ 734.197464][ T9728] blktrace: Concurrent blktraces are not allowed on pmem0 23:33:02 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x5, 0x1000}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:33:02 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:02 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000100)={0xe769, 0xff, 0x0, 'queue0\x00', 0x7fff}) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0xfffc, 0x40, 0x3, 0x8, 0x2, 0xffffffffffffffff}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xfff) 23:33:02 executing program 3: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 734.212246][ T9734] binder: 9732:9734 ioctl 401c5820 200006c0 returned -22 23:33:02 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x5, 0x1000}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:33:02 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 734.227312][ T9739] blktrace: Concurrent blktraces are not allowed on pmem0 23:33:02 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000480)={0xffffffff, 0x1, 'client0\x00', 0x1, "e66895b7cba61e47", "caf909d108871287e9ca3dd7c001b974664a6dde53a67ad9e0da481495a26f24", 0x0, 0x81}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000280)={0x0, 0x3671, 0xfffffff8, {0x800, 0xce}, 0x0, 0xc3}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000240)={0x5, 0x1, 0x8, 0x101, 0x9}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0xc00, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 734.237292][ T9743] binder: 9742:9743 ioctl 401c5820 200006c0 returned -22 23:33:02 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000480)={0xffffffff, 0x1, 'client0\x00', 0x1, "e66895b7cba61e47", "caf909d108871287e9ca3dd7c001b974664a6dde53a67ad9e0da481495a26f24", 0x0, 0x81}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000280)={0x0, 0x3671, 0xfffffff8, {0x800, 0xce}, 0x0, 0xc3}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000240)={0x5, 0x1, 0x8, 0x101, 0x9}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0xc00, 0x0) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:02 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:33:02 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 734.259289][ T9754] binder: 9753:9754 ioctl 401c5820 200006c0 returned -22 23:33:02 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:02 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000480)={0xffffffff, 0x1, 'client0\x00', 0x1, "e66895b7cba61e47", "caf909d108871287e9ca3dd7c001b974664a6dde53a67ad9e0da481495a26f24", 0x0, 0x81}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000280)={0x0, 0x3671, 0xfffffff8, {0x800, 0xce}, 0x0, 0xc3}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000240)={0x5, 0x1, 0x8, 0x101, 0x9}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0xc00, 0x0) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:02 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) (async) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) 23:33:02 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:33:02 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:02 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000480)={0xffffffff, 0x1, 'client0\x00', 0x1, "e66895b7cba61e47", "caf909d108871287e9ca3dd7c001b974664a6dde53a67ad9e0da481495a26f24", 0x0, 0x81}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000280)={0x0, 0x3671, 0xfffffff8, {0x800, 0xce}, 0x0, 0xc3}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000240)={0x5, 0x1, 0x8, 0x101, 0x9}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0xc00, 0x0) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$MRT_TABLE(r3, 0x0, 0xcf, &(0x7f0000000200), 0x4) [ 734.289083][ T9761] binder: 9759:9761 ioctl 401c5820 200006c0 returned -22 [ 734.290937][ T9762] binder: 9760:9762 ioctl 401c5820 200006c0 returned -22 [ 734.294453][ T9763] binder: 9759:9763 ioctl 401c5820 200006c0 returned -22 23:33:02 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:33:02 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:33:02 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) (async) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 734.322633][ T9773] binder: 9771:9773 ioctl 401c5820 200006c0 returned -22 23:33:02 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000480)={0xffffffff, 0x1, 'client0\x00', 0x1, "e66895b7cba61e47", "caf909d108871287e9ca3dd7c001b974664a6dde53a67ad9e0da481495a26f24", 0x0, 0x81}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000280)={0x0, 0x3671, 0xfffffff8, {0x800, 0xce}, 0x0, 0xc3}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000240)={0x5, 0x1, 0x8, 0x101, 0x9}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0xc00, 0x0) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$MRT_TABLE(r3, 0x0, 0xcf, &(0x7f0000000200), 0x4) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) 23:33:02 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 734.328413][ T9775] binder: 9772:9775 ioctl 401c5820 200006c0 returned -22 23:33:02 executing program 0: write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x29, 0x6, 0x0, {0x0, 0x4}}, 0x29) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0xc, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1063084000000000000000009f25e1e745f31fe1820dba3f475fa44fdbd3326a953aac74dffbf543c15bd0977c77b4aca15ccc928db1dbea5ab6e2b49556628ca841f149949845796f6f1baaffdfa9895bf5a14e9f016ee00907cf745080b7333ddd57f87e04667349c98c752cb89cfeaec45d0d0149bc612beba6c08c542a6a5769fca45dd15cf996d28f7a0f3e5a3529a2a9"], 0x0, 0x0, 0x0}) 23:33:02 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:33:02 executing program 2: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) [ 734.345670][ T9781] binder: 9780:9781 ioctl 401c5820 200006c0 returned -22 23:33:02 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000480)={0xffffffff, 0x1, 'client0\x00', 0x1, "e66895b7cba61e47", "caf909d108871287e9ca3dd7c001b974664a6dde53a67ad9e0da481495a26f24", 0x0, 0x81}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000280)={0x0, 0x3671, 0xfffffff8, {0x800, 0xce}, 0x0, 0xc3}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000240)={0x5, 0x1, 0x8, 0x101, 0x9}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0xc00, 0x0) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$MRT_TABLE(r3, 0x0, 0xcf, &(0x7f0000000200), 0x4) r5 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) [ 734.352458][ T9783] binder: 9782:9783 ioctl 401c5820 200006c0 returned -22 23:33:02 executing program 0: write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x29, 0x6, 0x0, {0x0, 0x4}}, 0x29) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0xc, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1063084000000000000000009f25e1e745f31fe1820dba3f475fa44fdbd3326a953aac74dffbf543c15bd0977c77b4aca15ccc928db1dbea5ab6e2b49556628ca841f149949845796f6f1baaffdfa9895bf5a14e9f016ee00907cf745080b7333ddd57f87e04667349c98c752cb89cfeaec45d0d0149bc612beba6c08c542a6a5769fca45dd15cf996d28f7a0f3e5a3529a2a9"], 0x0, 0x0, 0x0}) 23:33:02 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) 23:33:02 executing program 2: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) [ 734.366677][ T9789] binder: 9787:9789 ioctl 401c5820 200006c0 returned -22 23:33:02 executing program 0: write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x29, 0x6, 0x0, {0x0, 0x4}}, 0x29) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0xc, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1063084000000000000000009f25e1e745f31fe1820dba3f475fa44fdbd3326a953aac74dffbf543c15bd0977c77b4aca15ccc928db1dbea5ab6e2b49556628ca841f149949845796f6f1baaffdfa9895bf5a14e9f016ee00907cf745080b7333ddd57f87e04667349c98c752cb89cfeaec45d0d0149bc612beba6c08c542a6a5769fca45dd15cf996d28f7a0f3e5a3529a2a9"], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x29, 0x6, 0x0, {0x0, 0x4}}, 0x29) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0xc, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1063084000000000000000009f25e1e745f31fe1820dba3f475fa44fdbd3326a953aac74dffbf543c15bd0977c77b4aca15ccc928db1dbea5ab6e2b49556628ca841f149949845796f6f1baaffdfa9895bf5a14e9f016ee00907cf745080b7333ddd57f87e04667349c98c752cb89cfeaec45d0d0149bc612beba6c08c542a6a5769fca45dd15cf996d28f7a0f3e5a3529a2a9"], 0x0, 0x0, 0x0}) (async) 23:33:02 executing program 2: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) 23:33:02 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000040)={0x8001, 0x0, 'client1\x00', 0x0, "c5f7a3f27111d1bc", "f34885d0bd7aa0f608f1587393f05fbcf4c025f12911e107240000000044b810", 0x100, 0x1000}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000480)={0xffffffff, 0x1, 'client0\x00', 0x1, "e66895b7cba61e47", "caf909d108871287e9ca3dd7c001b974664a6dde53a67ad9e0da481495a26f24", 0x0, 0x81}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000280)={0x0, 0x3671, 0xfffffff8, {0x800, 0xce}, 0x0, 0xc3}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000240)={0x5, 0x1, 0x8, 0x101, 0x9}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0xc00, 0x0) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$MRT_TABLE(r3, 0x0, 0xcf, &(0x7f0000000200), 0x4) r5 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) accept$alg(r5, 0x0, 0x0) 23:33:02 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) [ 734.388054][ T9797] binder: 9795:9797 ioctl 401c5820 200006c0 returned -22 [ 734.392844][ T9797] binder: 9795:9797 ioctl 401c5820 200006c0 returned -22 23:33:02 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) 23:33:02 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:33:02 executing program 2: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) 23:33:02 executing program 1: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) 23:33:02 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:33:02 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) 23:33:02 executing program 2: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) 23:33:02 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) 23:33:02 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 23:33:02 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:33:02 executing program 2: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) 23:33:02 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$FLOPPY_FDRESET(0xffffffffffffffff, 0x254, 0x0) 23:33:02 executing program 3: socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) 23:33:02 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x1000) fcntl$setpipe(r2, 0x407, 0x100) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000080)={0x8}) [ 734.462876][ T9830] binder: 9826:9830 ioctl 401c5820 200006c0 returned -22 23:33:02 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:02 executing program 3: socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) 23:33:02 executing program 2: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000300)=0x1, 0x4) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000040)=""/1, &(0x7f0000000080)=0x1) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/254, 0xfe, 0x0, &(0x7f0000000440)=""/240, 0xf0}, &(0x7f0000000580)=0x40) r1 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r1, 0x0, 0x2b6c, 0x7}}}, 0x90) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x80, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x80000000}}, {@access_client}, {@cache_mmap}, {@fscache}, {@posixacl}, {@msize={'msize', 0x3d, 0x7}}], [{@euid_gt={'euid>', 0xee01}}, {@smackfsfloor={'smackfsfloor', 0x3d, '['}}, {@fsmagic={'fsmagic', 0x3d, 0x3ff}}, {@subj_type={'subj_type', 0x3d, '/dev/pmem0\x00'}}, {@euid_gt={'euid>', r1}}, {@fowner_lt}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, '/dev/pmem0\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, ',#&,)\\.\\%*,/'}}]}}) r2 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f00000000c0)=0x9, 0x4) 23:33:02 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$FLOPPY_FDRESET(0xffffffffffffffff, 0x254, 0x0) [ 734.484517][ T9838] binder: 9833:9838 ioctl 401c5820 200006c0 returned -22 23:33:02 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) finit_module(r2, &(0x7f0000000100)='\x00', 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$FLOPPY_FDPOLLDRVSTAT(r1, 0x80500213, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:02 executing program 3: socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) 23:33:02 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$FLOPPY_FDRESET(0xffffffffffffffff, 0x254, 0x0) 23:33:02 executing program 2: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000300)=0x1, 0x4) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000040)=""/1, &(0x7f0000000080)=0x1) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/254, 0xfe, 0x0, &(0x7f0000000440)=""/240, 0xf0}, &(0x7f0000000580)=0x40) r1 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r1, 0x0, 0x2b6c, 0x7}}}, 0x90) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x80, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x80000000}}, {@access_client}, {@cache_mmap}, {@fscache}, {@posixacl}, {@msize={'msize', 0x3d, 0x7}}], [{@euid_gt={'euid>', 0xee01}}, {@smackfsfloor={'smackfsfloor', 0x3d, '['}}, {@fsmagic={'fsmagic', 0x3d, 0x3ff}}, {@subj_type={'subj_type', 0x3d, '/dev/pmem0\x00'}}, {@euid_gt={'euid>', r1}}, {@fowner_lt}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, '/dev/pmem0\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, ',#&,)\\.\\%*,/'}}]}}) r2 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f00000000c0)=0x9, 0x4) 23:33:02 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) [ 734.508714][ T9846] binder: 9845:9846 ioctl 401c5820 200006c0 returned -22 23:33:02 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x2058afa8803c3949, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000000)=0x2, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f00000000c0)={0x77, 0xdc9, 0x7, {0x5, 0x6}, 0x1ff, 0x7fffffff}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004540), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r2, &(0x7f0000002340)={0x2020}, 0x2020) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000000)={0xa0, 0x0, r3, {{0x6, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc16b}}}}, 0xa0) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, r3, {0x1010000}}, 0x18) 23:33:02 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) 23:33:02 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) [ 734.539992][ T9855] binder: 9854:9855 ioctl 401c5820 200006c0 returned -22 23:33:02 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) r2 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r2, 0x0, 0x2b6c, 0x7}}}, 0x90) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) 23:33:02 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) finit_module(r2, &(0x7f0000000100)='\x00', 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$FLOPPY_FDPOLLDRVSTAT(r1, 0x80500213, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:02 executing program 2: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000300)=0x1, 0x4) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000040)=""/1, &(0x7f0000000080)=0x1) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/254, 0xfe, 0x0, &(0x7f0000000440)=""/240, 0xf0}, &(0x7f0000000580)=0x40) r1 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r1, 0x0, 0x2b6c, 0x7}}}, 0x90) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x80, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x80000000}}, {@access_client}, {@cache_mmap}, {@fscache}, {@posixacl}, {@msize={'msize', 0x3d, 0x7}}], [{@euid_gt={'euid>', 0xee01}}, {@smackfsfloor={'smackfsfloor', 0x3d, '['}}, {@fsmagic={'fsmagic', 0x3d, 0x3ff}}, {@subj_type={'subj_type', 0x3d, '/dev/pmem0\x00'}}, {@euid_gt={'euid>', r1}}, {@fowner_lt}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, '/dev/pmem0\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, ',#&,)\\.\\%*,/'}}]}}) r2 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f00000000c0)=0x9, 0x4) 23:33:02 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) fcntl$setlease(r0, 0x400, 0x2) (async) fcntl$setlease(r0, 0x400, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x2058afa8803c3949, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000000)=0x2, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f00000000c0)={0x77, 0xdc9, 0x7, {0x5, 0x6}, 0x1ff, 0x7fffffff}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f00000000c0)={0x77, 0xdc9, 0x7, {0x5, 0x6}, 0x1ff, 0x7fffffff}) openat$cuse(0xffffffffffffff9c, &(0x7f0000004540), 0x2, 0x0) (async) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004540), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r2, &(0x7f0000002340)={0x2020}, 0x2020) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000000)={0xa0, 0x0, r3, {{0x6, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc16b}}}}, 0xa0) (async) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000000)={0xa0, 0x0, r3, {{0x6, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc16b}}}}, 0xa0) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, r3, {0x1010000}}, 0x18) 23:33:02 executing program 2: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000300)=0x1, 0x4) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000040)=""/1, &(0x7f0000000080)=0x1) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/254, 0xfe, 0x0, &(0x7f0000000440)=""/240, 0xf0}, &(0x7f0000000580)=0x40) r1 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r1, 0x0, 0x2b6c, 0x7}}}, 0x90) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x80, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x80000000}}, {@access_client}, {@cache_mmap}, {@fscache}, {@posixacl}, {@msize={'msize', 0x3d, 0x7}}], [{@euid_gt={'euid>', 0xee01}}, {@smackfsfloor={'smackfsfloor', 0x3d, '['}}, {@fsmagic={'fsmagic', 0x3d, 0x3ff}}, {@subj_type={'subj_type', 0x3d, '/dev/pmem0\x00'}}, {@euid_gt={'euid>', r1}}, {@fowner_lt}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, '/dev/pmem0\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, ',#&,)\\.\\%*,/'}}]}}) r2 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f00000000c0)=0x9, 0x4) 23:33:02 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) r2 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r2, 0x0, 0x2b6c, 0x7}}}, 0x90) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) [ 734.621973][ T9867] binder: 9865:9867 ioctl 401c5820 200006c0 returned -22 23:33:02 executing program 2: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000300)=0x1, 0x4) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000040)=""/1, &(0x7f0000000080)=0x1) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/254, 0xfe, 0x0, &(0x7f0000000440)=""/240, 0xf0}, &(0x7f0000000580)=0x40) r1 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r1, 0x0, 0x2b6c, 0x7}}}, 0x90) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x80, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x80000000}}, {@access_client}, {@cache_mmap}, {@fscache}, {@posixacl}, {@msize={'msize', 0x3d, 0x7}}], [{@euid_gt={'euid>', 0xee01}}, {@smackfsfloor={'smackfsfloor', 0x3d, '['}}, {@fsmagic={'fsmagic', 0x3d, 0x3ff}}, {@subj_type={'subj_type', 0x3d, '/dev/pmem0\x00'}}, {@euid_gt={'euid>', r1}}, {@fowner_lt}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, '/dev/pmem0\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, ',#&,)\\.\\%*,/'}}]}}) r2 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f00000000c0)=0x9, 0x4) 23:33:02 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r3 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r3, 0x0, 0x2b6c, 0x7}}}, 0x90) read$FUSE(r0, &(0x7f0000002080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r1, &(0x7f00000040c0)={0xa0, 0x0, r2, {{0x4, 0x2, 0x8, 0x2e2d, 0x8, 0x7, {0x6, 0x7, 0x6, 0x81, 0x6, 0x800, 0x5, 0x56, 0x7, 0xc000, 0x7bd9e91a, r3, r4, 0x81, 0x3}}, {0x0, 0x4}}}, 0xa0) 23:33:02 executing program 2: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000300)=0x1, 0x4) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000040)=""/1, &(0x7f0000000080)=0x1) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/254, 0xfe, 0x0, &(0x7f0000000440)=""/240, 0xf0}, &(0x7f0000000580)=0x40) r1 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r1, 0x0, 0x2b6c, 0x7}}}, 0x90) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x80, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x80000000}}, {@access_client}, {@cache_mmap}, {@fscache}, {@posixacl}, {@msize={'msize', 0x3d, 0x7}}], [{@euid_gt={'euid>', 0xee01}}, {@smackfsfloor={'smackfsfloor', 0x3d, '['}}, {@fsmagic={'fsmagic', 0x3d, 0x3ff}}, {@subj_type={'subj_type', 0x3d, '/dev/pmem0\x00'}}, {@euid_gt={'euid>', r1}}, {@fowner_lt}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, '/dev/pmem0\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, ',#&,)\\.\\%*,/'}}]}}) r2 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f00000000c0)=0x9, 0x4) 23:33:02 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r3 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r3, 0x0, 0x2b6c, 0x7}}}, 0x90) read$FUSE(r0, &(0x7f0000002080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r1, &(0x7f00000040c0)={0xa0, 0x0, r2, {{0x4, 0x2, 0x8, 0x2e2d, 0x8, 0x7, {0x6, 0x7, 0x6, 0x81, 0x6, 0x800, 0x5, 0x56, 0x7, 0xc000, 0x7bd9e91a, r3, r4, 0x81, 0x3}}, {0x0, 0x4}}}, 0xa0) 23:33:02 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) finit_module(r2, &(0x7f0000000100)='\x00', 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$FLOPPY_FDPOLLDRVSTAT(r1, 0x80500213, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:02 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) fcntl$setlease(r0, 0x400, 0x2) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x2058afa8803c3949, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000000)=0x2, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f00000000c0)={0x77, 0xdc9, 0x7, {0x5, 0x6}, 0x1ff, 0x7fffffff}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004540), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r2, &(0x7f0000002340)={0x2020}, 0x2020) (async) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000000)={0xa0, 0x0, r3, {{0x6, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc16b}}}}, 0xa0) (async) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, r3, {0x1010000}}, 0x18) 23:33:02 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r3 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r3, 0x0, 0x2b6c, 0x7}}}, 0x90) read$FUSE(r0, &(0x7f0000002080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r1, &(0x7f00000040c0)={0xa0, 0x0, r2, {{0x4, 0x2, 0x8, 0x2e2d, 0x8, 0x7, {0x6, 0x7, 0x6, 0x81, 0x6, 0x800, 0x5, 0x56, 0x7, 0xc000, 0x7bd9e91a, r3, r4, 0x81, 0x3}}, {0x0, 0x4}}}, 0xa0) 23:33:02 executing program 2: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000300)=0x1, 0x4) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000040)=""/1, &(0x7f0000000080)=0x1) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/254, 0xfe, 0x0, &(0x7f0000000440)=""/240, 0xf0}, &(0x7f0000000580)=0x40) r1 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r1, 0x0, 0x2b6c, 0x7}}}, 0x90) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x80, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x80000000}}, {@access_client}, {@cache_mmap}, {@fscache}, {@posixacl}, {@msize={'msize', 0x3d, 0x7}}], [{@euid_gt={'euid>', 0xee01}}, {@smackfsfloor={'smackfsfloor', 0x3d, '['}}, {@fsmagic={'fsmagic', 0x3d, 0x3ff}}, {@subj_type={'subj_type', 0x3d, '/dev/pmem0\x00'}}, {@euid_gt={'euid>', r1}}, {@fowner_lt}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, '/dev/pmem0\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, ',#&,)\\.\\%*,/'}}]}}) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000000c0)=0x9, 0x4) [ 734.721196][ T9889] binder: 9884:9889 ioctl 401c5820 200006c0 returned -22 23:33:02 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r3 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r3, 0x0, 0x2b6c, 0x7}}}, 0x90) read$FUSE(r0, &(0x7f0000002080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r1, &(0x7f00000040c0)={0xa0, 0x0, r2, {{0x4, 0x2, 0x8, 0x2e2d, 0x8, 0x7, {0x6, 0x7, 0x6, 0x81, 0x6, 0x800, 0x5, 0x56, 0x7, 0xc000, 0x7bd9e91a, r3, r4, 0x81, 0x3}}, {0x0, 0x4}}}, 0xa0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000004180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 23:33:02 executing program 2: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000300)=0x1, 0x4) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000040)=""/1, &(0x7f0000000080)=0x1) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/254, 0xfe, 0x0, &(0x7f0000000440)=""/240, 0xf0}, &(0x7f0000000580)=0x40) r1 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r1, 0x0, 0x2b6c, 0x7}}}, 0x90) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x80, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x80000000}}, {@access_client}, {@cache_mmap}, {@fscache}, {@posixacl}, {@msize={'msize', 0x3d, 0x7}}], [{@euid_gt={'euid>', 0xee01}}, {@smackfsfloor={'smackfsfloor', 0x3d, '['}}, {@fsmagic={'fsmagic', 0x3d, 0x3ff}}, {@subj_type={'subj_type', 0x3d, '/dev/pmem0\x00'}}, {@euid_gt={'euid>', r1}}, {@fowner_lt}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, '/dev/pmem0\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, ',#&,)\\.\\%*,/'}}]}}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000000c0)=0x9, 0x4) 23:33:02 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x60, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @increfs_done], 0x0, 0x0, 0x0}) 23:33:02 executing program 2: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000300)=0x1, 0x4) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000040)=""/1, &(0x7f0000000080)=0x1) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/254, 0xfe, 0x0, &(0x7f0000000440)=""/240, 0xf0}, &(0x7f0000000580)=0x40) r1 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r1, 0x0, 0x2b6c, 0x7}}}, 0x90) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000000c0)=0x9, 0x4) [ 734.759676][ T9900] binder: 9899:9900 ioctl 401c5820 200006c0 returned -22 23:33:03 executing program 2: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000300)=0x1, 0x4) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000040)=""/1, &(0x7f0000000080)=0x1) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/254, 0xfe, 0x0, &(0x7f0000000440)=""/240, 0xf0}, &(0x7f0000000580)=0x40) geteuid() r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000000c0)=0x9, 0x4) 23:33:03 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0xf06, 0x101000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) 23:33:03 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r3 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r3, 0x0, 0x2b6c, 0x7}}}, 0x90) read$FUSE(r0, &(0x7f0000002080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r1, &(0x7f00000040c0)={0xa0, 0x0, r2, {{0x4, 0x2, 0x8, 0x2e2d, 0x8, 0x7, {0x6, 0x7, 0x6, 0x81, 0x6, 0x800, 0x5, 0x56, 0x7, 0xc000, 0x7bd9e91a, r3, r4, 0x81, 0x3}}, {0x0, 0x4}}}, 0xa0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000004180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 23:33:03 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) finit_module(r2, &(0x7f0000000100)='\x00', 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:03 executing program 2: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000300)=0x1, 0x4) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000040)=""/1, &(0x7f0000000080)=0x1) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/254, 0xfe, 0x0, &(0x7f0000000440)=""/240, 0xf0}, &(0x7f0000000580)=0x40) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000000c0)=0x9, 0x4) 23:33:03 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x60, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @increfs_done], 0x0, 0x0, 0x0}) 23:33:03 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r3 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r3, 0x0, 0x2b6c, 0x7}}}, 0x90) read$FUSE(r0, &(0x7f0000002080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r1, &(0x7f00000040c0)={0xa0, 0x0, r2, {{0x4, 0x2, 0x8, 0x2e2d, 0x8, 0x7, {0x6, 0x7, 0x6, 0x81, 0x6, 0x800, 0x5, 0x56, 0x7, 0xc000, 0x7bd9e91a, r3, r4, 0x81, 0x3}}, {0x0, 0x4}}}, 0xa0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000004180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) [ 734.848616][ T9916] binder: 9914:9916 ioctl 401c5820 200006c0 returned -22 23:33:03 executing program 2: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000300)=0x1, 0x4) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000040)=""/1, &(0x7f0000000080)=0x1) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000000c0)=0x9, 0x4) 23:33:03 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x2840, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) read$proc_mixer(r1, &(0x7f0000000040)=""/182, 0xb6) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:03 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x401c5820, &(0x7f00000006c0)={0xa4, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x10a}, @fd}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 23:33:03 executing program 2: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000300)=0x1, 0x4) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000040)=""/1, &(0x7f0000000080)=0x1) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000000c0)=0x9, 0x4) 23:33:03 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) finit_module(r1, &(0x7f0000000100)='\x00', 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) [ 734.884578][ T9923] binder: 9922:9923 ioctl 4018f50b 0 returned -22 23:33:03 executing program 0: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000300)=0x1, 0x4) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000040)=""/1, &(0x7f0000000080)=0x1) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000000c0)=0x9, 0x4) [ 734.888771][ T9923] binder: 9922:9923 ioctl 4018f50b 0 returned -22 [ 734.892763][ T9923] binder: 9922:9923 ioctl 401c5820 200006c0 returned -22 23:33:03 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x401c5820, &(0x7f00000006c0)={0xa4, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x10a}, @fd}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 23:33:03 executing program 2: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000300)=0x1, 0x4) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000040)=""/1, &(0x7f0000000080)=0x1) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000000c0)=0x9, 0x4) 23:33:03 executing program 0: ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000040)={@none, 0x6}) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) [ 734.917501][ T9934] binder: 9933:9934 ioctl 4018f50b 0 returned -22 [ 734.921469][ T9934] binder: 9933:9934 ioctl 4018f50b 0 returned -22 [ 734.925269][ T9934] binder: 9933:9934 ioctl 401c5820 200006c0 returned -22 23:33:03 executing program 2: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000300)=0x1, 0x4) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000000c0)=0x9, 0x4) 23:33:03 executing program 0: ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000040)={@none, 0x6}) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:03 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x401c5820, &(0x7f00000006c0)={0xa4, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x10a}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 734.953026][ T9944] binder: 9943:9944 ioctl 4018f50b 0 returned -22 [ 734.957457][ T9944] binder: 9943:9944 ioctl 4018f50b 0 returned -22 [ 734.962544][ T9944] binder: 9943:9944 ioctl 401c5820 200006c0 returned -22 23:33:03 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) finit_module(r1, &(0x7f0000000100)='\x00', 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:03 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000000c0)=0x9, 0x4) 23:33:03 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000080)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 23:33:03 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 735.066451][ T9949] binder: 9948:9949 ioctl 401c5820 200006c0 returned -22 23:33:03 executing program 2: socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f00000000c0)=0x9, 0x4) [ 735.066501][ T9950] binder: 9947:9950 ioctl 401c5820 200006c0 returned -22 23:33:03 executing program 2: socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f00000000c0)=0x9, 0x4) 23:33:03 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:33:03 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) finit_module(r1, &(0x7f0000000100)='\x00', 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:03 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) finit_module(r1, &(0x7f0000000100)='\x00', 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) [ 735.086716][ T9956] binder: 9955:9956 ioctl 401c5820 200006c0 returned -22 23:33:03 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:33:03 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) finit_module(r1, &(0x7f0000000100)='\x00', 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:03 executing program 2: socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f00000000c0)=0x9, 0x4) [ 735.105284][ T9964] binder: 9963:9964 ioctl 401c5820 200006c0 returned -22 23:33:03 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) ioctl$FLOPPY_FDFLUSH(0xffffffffffffffff, 0x24b) fcntl$setpipe(r1, 0x407, 0xb8) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000040)={0x0, 0x9, 0xc4}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0x6, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x3) 23:33:03 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x40, 0x7}}, './file0\x00'}) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:33:03 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) finit_module(r1, &(0x7f0000000100)='\x00', 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:03 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) [ 735.126640][ T9973] binder: 9970:9973 ioctl 4018f50b 0 returned -22 23:33:03 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) finit_module(r1, &(0x7f0000000100)='\x00', 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) [ 735.127538][ T9972] binder: 9969:9972 ioctl 4018f50b 0 returned -22 23:33:03 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) [ 735.129881][ T9973] binder: 9970:9973 ioctl 4018f50b 20000040 returned -22 [ 735.135169][ T9972] binder: 9969:9972 ioctl 401c5820 200006c0 returned -22 23:33:03 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) finit_module(r1, &(0x7f0000000100)='\x00', 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:03 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000080)={{0x1, 0x4}, 'port0\x00', 0x57, 0x1404, 0x200, 0x2, 0x1, 0x8e, 0x80000001, 0x0, 0x6, 0x81}) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) clock_gettime(0x1, &(0x7f0000000140)) 23:33:03 executing program 0: setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x6, 0x5eb, 0x7ff, 0x1, 0x7}, 0x14) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:03 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) 23:33:03 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) [ 735.158946][ T9984] binder: 9983:9984 ioctl 401c5820 200006c0 returned -22 23:33:03 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000080)={{0x1, 0x4}, 'port0\x00', 0x57, 0x1404, 0x200, 0x2, 0x1, 0x8e, 0x80000001, 0x0, 0x6, 0x81}) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) clock_gettime(0x1, &(0x7f0000000140)) 23:33:03 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffd000/0x1000)=nil) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x401) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000080)=[@free_buffer={0x40086303, r2}], 0x85, 0x0, &(0x7f00000000c0)="79eff5fa3fb207f4de6a4c4d6834db6dd0a4dbd0bd896eae5e1fbafc501b4394de87913bfa1a829dae2b18365efa58ee995e2968961d37da73a87688aad63b8d24a438a8a23c60dbd26840bab1627570deb6701e2f6b103254f683fad3784154f7443b5adb1cc5e447522c64864b12355e474913ade0fac50ca82e54b8e6f4f56e0f6294e9"}) 23:33:03 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000000c0), 0x4) 23:33:03 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000000c0), 0x4) [ 735.188722][ T9998] binder: 9995:9998 ioctl 401c5820 200006c0 returned -22 23:33:03 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@multicast1, @rand_addr=0x64010102, 0x0, "2212692f1236b0b5eaff2eebfa1068d69db8070dccac5e851fc40107b8087724", 0x4, 0x5, 0x0, 0xfd0}, 0x3c) 23:33:03 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000080)={{0x1, 0x4}, 'port0\x00', 0x57, 0x1404, 0x200, 0x2, 0x1, 0x8e, 0x80000001, 0x0, 0x6, 0x81}) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) clock_gettime(0x1, &(0x7f0000000140)) 23:33:03 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000000c0), 0x4) [ 735.221040][T10005] binder: 10003:10005 ioctl 401c5820 200006c0 returned -22 23:33:03 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) finit_module(r1, &(0x7f0000000180)='/dev/pmem0\x00', 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x28, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x2}, @enter_looper, @acquire_done], 0xaf, 0x0, &(0x7f0000000080)="c8053b5091b0d34fe394b02377ab499467b55693f3167e6af0fd91fc04e272c489f61827abdbe0cd96af84b4bc651d199a50cac0e5da24066d3bb29570b13061c6cde38f064e35d2e89cb7a81944ddf3014ec24e6a1930e53668c85afd5d035340055ddb9c24db43f7d2a5a0341c7876565cad040a5d705f64b3ce6321373a1de199ef956a14d2df6627bcc59b8e0407b786b67b4dde3d3cae2e833c9c7110a221084730e8207380527e100b4d9ad3"}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:03 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) 23:33:03 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000080)={{0x1, 0x4}, 'port0\x00', 0x57, 0x1404, 0x200, 0x2, 0x1, 0x8e, 0x80000001, 0x0, 0x6, 0x81}) clock_gettime(0x1, &(0x7f0000000140)) 23:33:03 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:03 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) 23:33:03 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000180)) clock_gettime(0x1, &(0x7f0000000140)) [ 735.266464][T10014] binder: 10010:10014 ioctl 4018f50b 0 returned -22 23:33:03 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) 23:33:03 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clock_gettime(0x1, &(0x7f0000000140)) 23:33:04 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) clock_gettime(0x1, &(0x7f0000000140)) 23:33:04 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:04 executing program 2: mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, 0xffffffffffffffff, 0x0) 23:33:04 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:04 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x1, &(0x7f0000000140)) 23:33:04 executing program 2: mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, 0xffffffffffffffff, 0x0) 23:33:04 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) clock_gettime(0x1, &(0x7f0000000140)) 23:33:04 executing program 2: mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, 0xffffffffffffffff, 0x0) 23:33:04 executing program 3: clock_gettime(0x1, &(0x7f0000000140)) 23:33:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 23:33:04 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) 23:33:04 executing program 3: clock_gettime(0x0, &(0x7f0000000140)) 23:33:04 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) clock_gettime(0x1, &(0x7f0000000140)) 23:33:04 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) 23:33:04 executing program 3: clock_gettime(0x0, &(0x7f0000000140)) 23:33:04 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:04 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) 23:33:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 23:33:04 executing program 3: clock_gettime(0x0, &(0x7f0000000140)) 23:33:04 executing program 2: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, 0xffffffffffffffff, 0x0) 23:33:04 executing program 3: clock_gettime(0x1, 0x0) 23:33:04 executing program 2: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, 0xffffffffffffffff, 0x0) 23:33:04 executing program 3: clock_gettime(0x1, 0x0) 23:33:04 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) 23:33:04 executing program 2: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, 0xffffffffffffffff, 0x0) 23:33:04 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) 23:33:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 23:33:04 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4007, 0x1, 0x11, r0, 0x0) 23:33:04 executing program 3: clock_gettime(0x1, 0x0) 23:33:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 23:33:04 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) 23:33:04 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4004, 0x1, 0x11, r0, 0x0) 23:33:04 executing program 0: mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 23:33:04 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4003, 0x1, 0x11, r0, 0x0) 23:33:04 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, 0x0, 0x40940, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:04 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7a00, 0x0, 0x0}) 23:33:04 executing program 0: mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, 0xffffffffffffffff, 0x0) [ 736.629588][T10110] binder: 10108:10110 ioctl 401c5820 200006c0 returned -22 23:33:04 executing program 0: mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 23:33:04 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) (fail_nth: 1) 23:33:04 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) (fail_nth: 1) [ 736.683713][T10119] FAULT_INJECTION: forcing a failure. [ 736.683713][T10119] name fail_usercopy, interval 1, probability 0, space 0, times 0 23:33:04 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) [ 736.689050][T10119] CPU: 3 PID: 10119 Comm: syz-executor.2 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 736.689103][T10121] FAULT_INJECTION: forcing a failure. [ 736.689103][T10121] name failslab, interval 1, probability 0, space 0, times 0 [ 736.692889][T10119] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 736.692898][T10119] Call Trace: [ 736.692903][T10119] [ 736.692906][T10119] dump_stack_lvl+0x125/0x1b0 [ 736.692928][T10119] should_fail_ex+0x496/0x5b0 [ 736.692939][T10119] _copy_to_user+0x30/0xb0 23:33:04 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) [ 736.692953][T10119] put_timespec64+0xb6/0x120 [ 736.692968][T10119] ? ns_to_timespec64+0xc0/0xc0 [ 736.692982][T10119] __x64_sys_clock_gettime+0x1cb/0x260 [ 736.692995][T10119] ? __ia32_sys_clock_settime+0x290/0x290 [ 736.693008][T10119] ? rcu_is_watching+0x12/0xb0 [ 736.693018][T10119] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 736.693029][T10119] do_syscall_64+0x38/0xb0 [ 736.693046][T10119] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 736.693057][T10119] RIP: 0033:0x7fbb91c7cae9 [ 736.729716][T10119] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 736.737141][T10119] RSP: 002b:00007fbb92a060c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 736.740319][T10119] RAX: ffffffffffffffda RBX: 00007fbb91d9bf80 RCX: 00007fbb91c7cae9 [ 736.743393][T10119] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000001 [ 736.746474][T10119] RBP: 00007fbb92a06120 R08: 0000000000000000 R09: 0000000000000000 [ 736.749637][T10119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.752720][T10119] R13: 000000000000000b R14: 00007fbb91d9bf80 R15: 00007ffde5d95378 [ 736.755857][T10119] [ 736.757112][T10121] CPU: 1 PID: 10121 Comm: syz-executor.3 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 736.760895][T10121] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 736.764613][T10121] Call Trace: [ 736.766071][T10121] [ 736.767441][T10121] dump_stack_lvl+0x125/0x1b0 [ 736.769648][T10121] should_fail_ex+0x496/0x5b0 [ 736.771816][T10121] should_failslab+0x9/0x20 [ 736.773642][T10121] kmem_cache_alloc+0x61/0x400 [ 736.775415][T10121] ? filter_irq_stacks+0x90/0x90 [ 736.777255][T10121] vm_area_dup+0x21/0x2f0 [ 736.778865][T10121] __split_vma+0x181/0x1070 [ 736.780570][T10121] ? lock_acquire+0x464/0x510 [ 736.782367][T10121] ? generic_get_unmapped_area_topdown+0x690/0x690 [ 736.784797][T10121] ? page_ext_put+0x2b/0xd0 [ 736.786514][T10121] ? lock_release+0x4bf/0x680 [ 736.788246][T10121] ? page_ext_put+0x2b/0xd0 [ 736.789966][T10121] do_vmi_align_munmap+0x2c3/0x15f0 [ 736.791930][T10121] ? rcu_is_watching+0x12/0xb0 [ 736.793824][T10121] ? lock_release+0x4bf/0x680 [ 736.795588][T10121] ? avc_has_perm_noaudit+0x10d/0x3b0 [ 736.797570][T10121] ? reacquire_held_locks+0x4b0/0x4b0 [ 736.799568][T10121] ? get_page_from_freelist+0xee0/0x2f20 [ 736.801767][T10121] ? __split_vma+0x1070/0x1070 [ 736.803593][T10121] ? mtree_range_walk+0x5e1/0x9b0 [ 736.805460][T10121] do_vmi_munmap+0x20e/0x450 [ 736.807451][T10121] mmap_region+0x184/0x28b0 [ 736.809241][T10121] ? lock_acquire+0x464/0x510 [ 736.811159][T10121] ? find_extend_vma_locked+0x2f0/0x2f0 [ 736.813428][T10121] ? security_mmap_addr+0x84/0xa0 [ 736.815373][T10121] ? get_unmapped_area+0x2c5/0x3e0 [ 736.817370][T10121] do_mmap+0x893/0xef0 [ 736.818980][T10121] vm_mmap_pgoff+0x1a8/0x3b0 [ 736.820858][T10121] ? randomize_page+0xb0/0xb0 [ 736.822839][T10121] ? __fget_files+0x279/0x410 [ 736.824970][T10121] ksys_mmap_pgoff+0x422/0x5b0 [ 736.826786][T10121] ? __ia32_sys_read+0xb0/0xb0 [ 736.828536][T10121] __x64_sys_mmap+0x125/0x190 [ 736.830302][T10121] do_syscall_64+0x38/0xb0 [ 736.832044][T10121] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 736.834680][T10121] RIP: 0033:0x7f9c58e7cae9 [ 736.836539][T10121] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 736.844204][T10121] RSP: 002b:00007f9c59bd20c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 736.847341][T10121] RAX: ffffffffffffffda RBX: 00007f9c58f9bf80 RCX: 00007f9c58e7cae9 [ 736.850243][T10121] RDX: 0000000000000001 RSI: 000000000000400a RDI: 0000000020ffc000 [ 736.853218][T10121] RBP: 00007f9c59bd2120 R08: 0000000000000003 R09: 0000000000000000 [ 736.856215][T10121] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 736.859106][T10121] R13: 000000000000000b R14: 00007f9c58f9bf80 R15: 00007ffcfded7558 [ 736.862334][T10121] 23:33:05 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, 0x0, 0x40940, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:05 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) 23:33:05 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) (fail_nth: 2) 23:33:05 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) (fail_nth: 2) [ 736.887745][T10130] FAULT_INJECTION: forcing a failure. [ 736.887745][T10130] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 736.890773][T10133] FAULT_INJECTION: forcing a failure. 23:33:05 executing program 0: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, 0xffffffffffffffff, 0x0) [ 736.890773][T10133] name failslab, interval 1, probability 0, space 0, times 0 [ 736.893964][T10130] CPU: 3 PID: 10130 Comm: syz-executor.2 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 736.903422][T10130] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 736.907747][T10130] Call Trace: [ 736.909282][T10130] [ 736.910553][T10130] dump_stack_lvl+0x125/0x1b0 [ 736.912332][T10130] should_fail_ex+0x496/0x5b0 23:33:05 executing program 0: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, 0xffffffffffffffff, 0x0) [ 736.914368][T10130] __should_fail_alloc_page+0xe7/0x130 [ 736.916836][T10130] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 736.919409][T10130] __alloc_pages+0x14e/0x4a0 [ 736.921414][T10130] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 736.924049][T10130] ? page_ext_put+0x4d/0xd0 [ 736.925862][T10130] ? lock_release+0x4bf/0x680 [ 736.927744][T10130] ? mt_find+0x294/0x900 [ 736.929472][T10130] ? reacquire_held_locks+0x4b0/0x4b0 23:33:05 executing program 0: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, 0xffffffffffffffff, 0x0) [ 736.931536][T10130] alloc_pages+0x1a9/0x270 [ 736.933529][T10130] __pmd_alloc+0x3f/0x840 [ 736.935250][T10130] __handle_mm_fault+0x90a/0x3e20 [ 736.937234][T10130] ? vm_iomap_memory+0x170/0x170 [ 736.939208][T10130] ? find_vma+0x10e/0x1b0 [ 736.941139][T10130] ? can_vma_merge_before+0x3a0/0x3a0 [ 736.943563][T10130] ? preempt_count_sub+0x150/0x150 [ 736.945928][T10130] handle_mm_fault+0x47a/0xa00 [ 736.948094][T10130] ? lock_mm_and_find_vma+0xa6/0x760 [ 736.950533][T10130] do_user_addr_fault+0x3d1/0x1010 [ 736.952863][T10130] ? rcu_is_watching+0x12/0xb0 [ 736.955135][T10130] exc_page_fault+0x5c/0xd0 23:33:05 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (fail_nth: 1) [ 736.957230][T10130] asm_exc_page_fault+0x26/0x30 [ 736.959360][T10130] RIP: 0010:_copy_to_user+0xa3/0xb0 [ 736.961791][T10130] Code: 89 ee 48 89 ef e8 8d 85 62 fd 4d 85 f6 75 b9 e8 73 8a 62 fd 89 de 4c 89 e7 e8 d9 8d b7 fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb eb 91 f3 0f 1e fa 41 56 41 55 49 [ 736.965202][T10144] FAULT_INJECTION: forcing a failure. [ 736.965202][T10144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 736.970410][T10130] RSP: 0018:ffffc90021f4fdf8 EFLAGS: 00050246 [ 736.970428][T10130] RAX: 0000000000000001 RBX: 0000000000000010 RCX: 0000000000000010 [ 736.970439][T10130] RDX: fffff520043e9fcb RSI: ffffc90021f4fe48 RDI: 0000000020000140 [ 736.970451][T10130] RBP: 0000000020000140 R08: 0000000000000000 R09: fffff520043e9fca [ 736.988589][T10130] R10: ffffc90021f4fe57 R11: 0000000000000000 R12: ffffc90021f4fe48 [ 736.992056][T10130] R13: 0000000020000150 R14: 0000000000000000 R15: 0000000000000000 [ 736.995670][T10130] ? _copy_to_user+0x97/0xb0 [ 736.997743][T10130] put_timespec64+0xb6/0x120 [ 736.999830][T10130] ? ns_to_timespec64+0xc0/0xc0 [ 737.002019][T10130] __x64_sys_clock_gettime+0x1cb/0x260 [ 737.004437][T10130] ? __ia32_sys_clock_settime+0x290/0x290 [ 737.006984][T10130] ? rcu_is_watching+0x12/0xb0 [ 737.009110][T10130] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 737.011734][T10130] do_syscall_64+0x38/0xb0 [ 737.013775][T10130] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 737.016327][T10130] RIP: 0033:0x7fbb91c7cae9 [ 737.018391][T10130] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 737.026665][T10130] RSP: 002b:00007fbb92a060c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 737.030248][T10130] RAX: ffffffffffffffda RBX: 00007fbb91d9bf80 RCX: 00007fbb91c7cae9 [ 737.033721][T10130] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000001 [ 737.037199][T10130] RBP: 00007fbb92a06120 R08: 0000000000000000 R09: 0000000000000000 [ 737.040674][T10130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 737.044010][T10130] R13: 000000000000000b R14: 00007fbb91d9bf80 R15: 00007ffde5d95378 [ 737.047409][T10130] [ 737.048778][T10133] CPU: 1 PID: 10133 Comm: syz-executor.3 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 737.053179][T10133] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 737.057639][T10133] Call Trace: [ 737.059122][T10133] [ 737.060455][T10133] dump_stack_lvl+0x125/0x1b0 [ 737.062564][T10133] should_fail_ex+0x496/0x5b0 [ 737.064603][T10133] should_failslab+0x9/0x20 [ 737.066633][T10133] kmem_cache_alloc+0x61/0x400 [ 737.068761][T10133] vm_area_dup+0x53/0x2f0 [ 737.070685][T10133] __split_vma+0x181/0x1070 [ 737.073607][T10133] ? lock_acquire+0x464/0x510 [ 737.075681][T10133] ? generic_get_unmapped_area_topdown+0x690/0x690 [ 737.078563][T10133] ? page_ext_put+0x2b/0xd0 [ 737.080599][T10133] ? lock_release+0x4bf/0x680 [ 737.082698][T10133] ? page_ext_put+0x2b/0xd0 [ 737.084778][T10133] do_vmi_align_munmap+0x2c3/0x15f0 [ 737.087080][T10133] ? rcu_is_watching+0x12/0xb0 [ 737.089218][T10133] ? lock_release+0x4bf/0x680 [ 737.091329][T10133] ? avc_has_perm_noaudit+0x10d/0x3b0 [ 737.093745][T10133] ? reacquire_held_locks+0x4b0/0x4b0 [ 737.096115][T10133] ? get_page_from_freelist+0xee0/0x2f20 [ 737.098672][T10133] ? __split_vma+0x1070/0x1070 [ 737.100836][T10133] ? mtree_range_walk+0x5e1/0x9b0 [ 737.103057][T10133] do_vmi_munmap+0x20e/0x450 [ 737.105187][T10133] mmap_region+0x184/0x28b0 [ 737.107204][T10133] ? lock_acquire+0x464/0x510 [ 737.109310][T10133] ? find_extend_vma_locked+0x2f0/0x2f0 [ 737.111766][T10133] ? security_mmap_addr+0x84/0xa0 [ 737.114063][T10133] ? get_unmapped_area+0x2c5/0x3e0 [ 737.116353][T10133] do_mmap+0x893/0xef0 [ 737.118163][T10133] vm_mmap_pgoff+0x1a8/0x3b0 [ 737.120232][T10133] ? randomize_page+0xb0/0xb0 [ 737.122339][T10133] ? __fget_files+0x279/0x410 [ 737.124431][T10133] ksys_mmap_pgoff+0x422/0x5b0 [ 737.126598][T10133] ? __ia32_sys_read+0xb0/0xb0 [ 737.128758][T10133] __x64_sys_mmap+0x125/0x190 [ 737.130861][T10133] do_syscall_64+0x38/0xb0 [ 737.132918][T10133] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 737.135564][T10133] RIP: 0033:0x7f9c58e7cae9 [ 737.137541][T10133] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 737.146043][T10133] RSP: 002b:00007f9c59bd20c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 737.149683][T10133] RAX: ffffffffffffffda RBX: 00007f9c58f9bf80 RCX: 00007f9c58e7cae9 [ 737.152893][T10133] RDX: 0000000000000001 RSI: 000000000000400a RDI: 0000000020ffc000 [ 737.156294][T10133] RBP: 00007f9c59bd2120 R08: 0000000000000003 R09: 0000000000000000 [ 737.159811][T10133] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 737.163325][T10133] R13: 000000000000000b R14: 00007f9c58f9bf80 R15: 00007ffcfded7558 [ 737.166959][T10133] [ 737.168343][T10144] CPU: 3 PID: 10144 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 737.172904][T10144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 737.177416][T10144] Call Trace: [ 737.178985][T10144] [ 737.180345][T10144] dump_stack_lvl+0x125/0x1b0 [ 737.182477][T10144] should_fail_ex+0x496/0x5b0 [ 737.184611][T10144] _copy_to_user+0x30/0xb0 [ 737.186621][T10144] simple_read_from_buffer+0xd0/0x150 [ 737.189153][T10144] proc_fail_nth_read+0x1b0/0x290 [ 737.191441][T10144] ? proc_sessionid_read+0x290/0x290 [ 737.193910][T10144] ? security_file_permission+0xdc/0x100 [ 737.196534][T10144] ? proc_sessionid_read+0x290/0x290 [ 737.198987][T10144] vfs_read+0x1ce/0x930 [ 737.200939][T10144] ? kernel_read+0x1b0/0x1b0 [ 737.203078][T10144] ? __fget_files+0x279/0x410 [ 737.205295][T10144] ksys_read+0x12f/0x250 [ 737.207269][T10144] ? vfs_write+0xe40/0xe40 [ 737.209379][T10144] ? rcu_is_watching+0x12/0xb0 [ 737.211554][T10144] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 737.214357][T10144] do_syscall_64+0x38/0xb0 [ 737.216456][T10144] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 737.219224][T10144] RIP: 0033:0x7f1bdaa7b78c [ 737.221328][T10144] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 737.230138][T10144] RSP: 002b:00007f1bdb82c0c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 737.234002][T10144] RAX: ffffffffffffffda RBX: 00007f1bdab9bf80 RCX: 00007f1bdaa7b78c [ 737.237635][T10144] RDX: 000000000000000f RSI: 00007f1bdb82c130 RDI: 0000000000000004 [ 737.241287][T10144] RBP: 00007f1bdb82c120 R08: 0000000000000000 R09: 0000000000000000 [ 737.244930][T10144] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 737.248595][T10144] R13: 000000000000000b R14: 00007f1bdab9bf80 R15: 00007fff505478f8 [ 737.252241][T10144] 23:33:05 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) (fail_nth: 3) 23:33:05 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, 0x0, 0x40940, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:05 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) (fail_nth: 3) 23:33:05 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) [ 737.336651][T10149] FAULT_INJECTION: forcing a failure. [ 737.336651][T10149] name failslab, interval 1, probability 0, space 0, times 0 [ 737.338519][T10151] FAULT_INJECTION: forcing a failure. [ 737.338519][T10151] name failslab, interval 1, probability 0, space 0, times 0 23:33:05 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003002, 0x1, 0x11, r0, 0x0) [ 737.344664][T10149] CPU: 3 PID: 10149 Comm: syz-executor.2 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 737.353286][T10149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 737.358181][T10149] Call Trace: [ 737.359775][T10149] [ 737.361201][T10149] dump_stack_lvl+0x125/0x1b0 [ 737.363412][T10149] should_fail_ex+0x496/0x5b0 [ 737.365661][T10149] should_failslab+0x9/0x20 [ 737.367807][T10149] kmem_cache_alloc+0x61/0x400 [ 737.370063][T10149] __pmd_alloc+0xc3/0x840 23:33:05 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003006, 0x1, 0x11, r0, 0x0) [ 737.372104][T10149] __handle_mm_fault+0x90a/0x3e20 [ 737.374747][T10149] ? vm_iomap_memory+0x170/0x170 [ 737.377076][T10149] ? find_vma+0x10e/0x1b0 [ 737.379110][T10149] ? can_vma_merge_before+0x3a0/0x3a0 [ 737.381645][T10149] ? preempt_count_sub+0x150/0x150 [ 737.384045][T10149] handle_mm_fault+0x47a/0xa00 [ 737.386350][T10149] ? lock_mm_and_find_vma+0xa6/0x760 [ 737.388835][T10149] do_user_addr_fault+0x3d1/0x1010 [ 737.391205][T10149] ? rcu_is_watching+0x12/0xb0 23:33:05 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003009, 0x1, 0x11, r0, 0x0) [ 737.393481][T10149] exc_page_fault+0x5c/0xd0 [ 737.395886][T10149] asm_exc_page_fault+0x26/0x30 [ 737.398216][T10149] RIP: 0010:_copy_to_user+0xa3/0xb0 [ 737.400688][T10149] Code: 89 ee 48 89 ef e8 8d 85 62 fd 4d 85 f6 75 b9 e8 73 8a 62 fd 89 de 4c 89 e7 e8 d9 8d b7 fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb eb 91 f3 0f 1e fa 41 56 41 55 49 [ 737.409736][T10149] RSP: 0018:ffffc90021eb7df8 EFLAGS: 00050246 23:33:05 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7ffffffff000, 0x1, 0x11, r0, 0x0) [ 737.412647][T10149] RAX: 0000000000000001 RBX: 0000000000000010 RCX: 0000000000000010 [ 737.416543][T10149] RDX: fffff520043d6fcb RSI: ffffc90021eb7e48 RDI: 0000000020000140 [ 737.420373][T10149] RBP: 0000000020000140 R08: 0000000000000000 R09: fffff520043d6fca [ 737.424153][T10149] R10: ffffc90021eb7e57 R11: 0000000000000000 R12: ffffc90021eb7e48 [ 737.427768][T10149] R13: 0000000020000150 R14: 0000000000000000 R15: 0000000000000000 [ 737.431391][T10149] ? _copy_to_user+0x97/0xb0 [ 737.433445][T10149] put_timespec64+0xb6/0x120 [ 737.435521][T10149] ? ns_to_timespec64+0xc0/0xc0 [ 737.437858][T10149] __x64_sys_clock_gettime+0x1cb/0x260 [ 737.440277][T10149] ? __ia32_sys_clock_settime+0x290/0x290 [ 737.442797][T10149] ? rcu_is_watching+0x12/0xb0 [ 737.444885][T10149] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 737.447394][T10149] do_syscall_64+0x38/0xb0 [ 737.449422][T10149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 737.452065][T10149] RIP: 0033:0x7fbb91c7cae9 [ 737.454134][T10149] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 737.463122][T10149] RSP: 002b:00007fbb92a060c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 737.466890][T10149] RAX: ffffffffffffffda RBX: 00007fbb91d9bf80 RCX: 00007fbb91c7cae9 [ 737.470527][T10149] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000001 [ 737.474159][T10149] RBP: 00007fbb92a06120 R08: 0000000000000000 R09: 0000000000000000 [ 737.477772][T10149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 737.481310][T10149] R13: 000000000000000b R14: 00007fbb91d9bf80 R15: 00007ffde5d95378 [ 737.485149][T10149] [ 737.486630][T10151] CPU: 2 PID: 10151 Comm: syz-executor.3 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 737.491043][T10151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 737.494799][T10151] Call Trace: [ 737.496024][T10151] [ 737.497099][T10151] dump_stack_lvl+0x125/0x1b0 [ 737.498822][T10151] should_fail_ex+0x496/0x5b0 [ 737.500403][T10151] should_failslab+0x9/0x20 [ 737.502364][T10151] kmem_cache_alloc+0x61/0x400 [ 737.504539][T10151] mas_alloc_nodes+0x182/0x830 [ 737.506663][T10151] mas_node_count_gfp+0x105/0x130 [ 737.508863][T10151] mas_preallocate+0x2d7/0xda0 [ 737.510747][T10151] ? reacquire_held_locks+0x4b0/0x4b0 [ 737.513179][T10151] ? mas_destroy+0x3d0/0x3d0 [ 737.515268][T10151] ? __raw_spin_lock_init+0x3a/0x110 [ 737.517282][T10151] ? anon_vma_name+0xc6/0x170 [ 737.519047][T10151] __split_vma+0x435/0x1070 [ 737.520811][T10151] ? generic_get_unmapped_area_topdown+0x690/0x690 [ 737.523224][T10151] ? page_ext_put+0x2b/0xd0 [ 737.524944][T10151] ? lock_release+0x4bf/0x680 [ 737.526659][T10151] ? page_ext_put+0x2b/0xd0 [ 737.528667][T10151] do_vmi_align_munmap+0x2c3/0x15f0 [ 737.531015][T10151] ? rcu_is_watching+0x12/0xb0 [ 737.533192][T10151] ? lock_release+0x4bf/0x680 [ 737.535301][T10151] ? avc_has_perm_noaudit+0x10d/0x3b0 [ 737.537332][T10151] ? reacquire_held_locks+0x4b0/0x4b0 [ 737.539274][T10151] ? get_page_from_freelist+0xee0/0x2f20 [ 737.541336][T10151] ? __split_vma+0x1070/0x1070 [ 737.543100][T10151] ? mtree_range_walk+0x5e1/0x9b0 [ 737.544945][T10151] do_vmi_munmap+0x20e/0x450 [ 737.546627][T10151] mmap_region+0x184/0x28b0 [ 737.548287][T10151] ? lock_acquire+0x464/0x510 [ 737.550023][T10151] ? find_extend_vma_locked+0x2f0/0x2f0 [ 737.552015][T10151] ? security_mmap_addr+0x84/0xa0 [ 737.554227][T10151] ? get_unmapped_area+0x2c5/0x3e0 [ 737.556150][T10151] do_mmap+0x893/0xef0 [ 737.557736][T10151] vm_mmap_pgoff+0x1a8/0x3b0 [ 737.559453][T10151] ? randomize_page+0xb0/0xb0 [ 737.561231][T10151] ? __fget_files+0x279/0x410 [ 737.563026][T10151] ksys_mmap_pgoff+0x422/0x5b0 [ 737.564769][T10151] ? __ia32_sys_read+0xb0/0xb0 [ 737.566495][T10151] __x64_sys_mmap+0x125/0x190 [ 737.568211][T10151] do_syscall_64+0x38/0xb0 [ 737.569903][T10151] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 737.572061][T10151] RIP: 0033:0x7f9c58e7cae9 [ 737.573721][T10151] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 737.580706][T10151] RSP: 002b:00007f9c59bd20c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 737.583784][T10151] RAX: ffffffffffffffda RBX: 00007f9c58f9bf80 RCX: 00007f9c58e7cae9 [ 737.586938][T10151] RDX: 0000000000000001 RSI: 000000000000400a RDI: 0000000020ffc000 [ 737.590413][T10151] RBP: 00007f9c59bd2120 R08: 0000000000000003 R09: 0000000000000000 [ 737.593932][T10151] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 737.596840][T10151] R13: 000000000000000b R14: 00007f9c58f9bf80 R15: 00007ffcfded7558 [ 737.599749][T10151] 23:33:05 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) (fail_nth: 4) 23:33:05 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:05 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x2, 0x11, r0, 0x0) 23:33:05 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) (fail_nth: 4) 23:33:05 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) (fail_nth: 5) [ 737.681772][T10174] FAULT_INJECTION: forcing a failure. 23:33:05 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x3, 0x11, r0, 0x0) 23:33:05 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) (fail_nth: 6) [ 737.681772][T10174] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 737.688602][T10174] CPU: 2 PID: 10174 Comm: syz-executor.2 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 737.693177][T10174] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 737.697257][T10174] Call Trace: [ 737.698735][T10174] 23:33:05 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x4, 0x11, r0, 0x0) [ 737.700028][T10174] dump_stack_lvl+0x125/0x1b0 [ 737.702101][T10174] should_fail_ex+0x496/0x5b0 [ 737.704372][T10174] __should_fail_alloc_page+0xe7/0x130 23:33:05 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) (fail_nth: 7) [ 737.706619][T10174] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 737.708947][T10174] __alloc_pages+0x14e/0x4a0 [ 737.710646][T10174] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 737.713074][T10174] ? rcu_is_watching+0x12/0xb0 [ 737.714769][T10174] ? lock_release+0x4bf/0x680 [ 737.716497][T10174] alloc_pages+0x1a9/0x270 [ 737.718132][T10174] pte_alloc_one+0x20/0x370 [ 737.719439][T10183] FAULT_INJECTION: forcing a failure. [ 737.719439][T10183] name failslab, interval 1, probability 0, space 0, times 0 [ 737.719808][T10174] __pte_alloc+0x6e/0x3b0 [ 737.727242][T10174] ? pmd_install+0x170/0x170 [ 737.729106][T10174] ? __pmd_alloc+0x375/0x840 [ 737.731116][T10174] __handle_mm_fault+0x33a0/0x3e20 [ 737.733342][T10174] ? vm_iomap_memory+0x170/0x170 [ 737.735329][T10174] ? find_vma+0x10e/0x1b0 [ 737.736914][T10174] ? can_vma_merge_before+0x3a0/0x3a0 [ 737.738868][T10174] ? preempt_count_sub+0x150/0x150 [ 737.740750][T10174] handle_mm_fault+0x47a/0xa00 [ 737.742498][T10174] ? lock_mm_and_find_vma+0xa6/0x760 [ 737.744629][T10174] do_user_addr_fault+0x3d1/0x1010 [ 737.746608][T10174] ? rcu_is_watching+0x12/0xb0 [ 737.748352][T10174] exc_page_fault+0x5c/0xd0 [ 737.750064][T10174] asm_exc_page_fault+0x26/0x30 [ 737.751879][T10174] RIP: 0010:_copy_to_user+0xa3/0xb0 [ 737.753805][T10174] Code: 89 ee 48 89 ef e8 8d 85 62 fd 4d 85 f6 75 b9 e8 73 8a 62 fd 89 de 4c 89 e7 e8 d9 8d b7 fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb eb 91 f3 0f 1e fa 41 56 41 55 49 [ 737.760946][T10174] RSP: 0018:ffffc900220afdf8 EFLAGS: 00050246 [ 737.763176][T10174] RAX: 0000000000000001 RBX: 0000000000000010 RCX: 0000000000000010 [ 737.766112][T10174] RDX: fffff52004415fcb RSI: ffffc900220afe48 RDI: 0000000020000140 [ 737.769032][T10174] RBP: 0000000020000140 R08: 0000000000000000 R09: fffff52004415fca [ 737.771941][T10174] R10: ffffc900220afe57 R11: 0000000000000000 R12: ffffc900220afe48 [ 737.774872][T10174] R13: 0000000020000150 R14: 0000000000000000 R15: 0000000000000000 [ 737.777953][T10174] ? _copy_to_user+0x97/0xb0 [ 737.779656][T10174] put_timespec64+0xb6/0x120 [ 737.781404][T10174] ? ns_to_timespec64+0xc0/0xc0 [ 737.783199][T10174] __x64_sys_clock_gettime+0x1cb/0x260 [ 737.785170][T10174] ? __ia32_sys_clock_settime+0x290/0x290 [ 737.787240][T10174] ? rcu_is_watching+0x12/0xb0 [ 737.789006][T10174] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 737.791204][T10174] do_syscall_64+0x38/0xb0 [ 737.792902][T10174] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 737.795073][T10174] RIP: 0033:0x7fbb91c7cae9 [ 737.796711][T10174] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 737.803717][T10174] RSP: 002b:00007fbb92a060c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 737.806829][T10174] RAX: ffffffffffffffda RBX: 00007fbb91d9bf80 RCX: 00007fbb91c7cae9 [ 737.809853][T10174] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000001 [ 737.812907][T10174] RBP: 00007fbb92a06120 R08: 0000000000000000 R09: 0000000000000000 [ 737.816029][T10174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 737.818912][T10174] R13: 000000000000000b R14: 00007fbb91d9bf80 R15: 00007ffde5d95378 [ 737.821982][T10174] [ 737.823424][T10183] CPU: 3 PID: 10183 Comm: syz-executor.3 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 737.827676][T10183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 737.831293][T10183] Call Trace: [ 737.832546][T10183] [ 737.833809][T10183] dump_stack_lvl+0x125/0x1b0 [ 737.835814][T10183] should_fail_ex+0x496/0x5b0 [ 737.837587][T10183] should_failslab+0x9/0x20 [ 737.839549][T10183] kmem_cache_alloc+0x61/0x400 [ 737.841296][T10183] vm_area_alloc+0x1f/0x220 [ 737.842966][T10183] mmap_region+0x3a9/0x28b0 [ 737.844621][T10183] ? find_extend_vma_locked+0x2f0/0x2f0 [ 737.846625][T10183] ? security_mmap_addr+0x84/0xa0 [ 737.848461][T10183] ? get_unmapped_area+0x2c5/0x3e0 [ 737.850328][T10183] do_mmap+0x893/0xef0 [ 737.851832][T10183] vm_mmap_pgoff+0x1a8/0x3b0 [ 737.853528][T10183] ? randomize_page+0xb0/0xb0 [ 737.855249][T10183] ? __fget_files+0x279/0x410 [ 737.857278][T10183] ksys_mmap_pgoff+0x422/0x5b0 [ 737.859296][T10183] ? __ia32_sys_read+0xb0/0xb0 [ 737.861094][T10183] __x64_sys_mmap+0x125/0x190 [ 737.862889][T10183] do_syscall_64+0x38/0xb0 [ 737.864575][T10183] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 737.866750][T10183] RIP: 0033:0x7f9c58e7cae9 [ 737.868477][T10183] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 737.875688][T10183] RSP: 002b:00007f9c59bd20c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 737.878648][T10183] RAX: ffffffffffffffda RBX: 00007f9c58f9bf80 RCX: 00007f9c58e7cae9 [ 737.881445][T10183] RDX: 0000000000000001 RSI: 000000000000400a RDI: 0000000020ffc000 [ 737.884348][T10183] RBP: 00007f9c59bd2120 R08: 0000000000000003 R09: 0000000000000000 [ 737.887217][T10183] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 737.890068][T10183] R13: 000000000000000b R14: 00007f9c58f9bf80 R15: 00007ffcfded7558 [ 737.893338][T10183] 23:33:06 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x6, 0x11, r0, 0x0) 23:33:06 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) (fail_nth: 5) 23:33:06 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:06 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) (fail_nth: 8) [ 737.979441][T10189] FAULT_INJECTION: forcing a failure. [ 737.979441][T10189] name failslab, interval 1, probability 0, space 0, times 0 23:33:06 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x9, 0x11, r0, 0x0) [ 737.980676][T10191] FAULT_INJECTION: forcing a failure. [ 737.980676][T10191] name failslab, interval 1, probability 0, space 0, times 0 [ 737.987870][T10189] CPU: 0 PID: 10189 Comm: syz-executor.2 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 737.995925][T10189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 738.000478][T10189] Call Trace: [ 738.002041][T10189] [ 738.003412][T10189] dump_stack_lvl+0x125/0x1b0 [ 738.005595][T10189] should_fail_ex+0x496/0x5b0 [ 738.007785][T10189] should_failslab+0x9/0x20 [ 738.009924][T10189] kmem_cache_alloc+0x61/0x400 23:33:06 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0xe, 0x11, r0, 0x0) [ 738.012132][T10189] ? lock_release+0x4bf/0x680 [ 738.014567][T10189] ptlock_alloc+0x1f/0x70 [ 738.016583][T10189] pte_alloc_one+0x74/0x370 [ 738.018689][T10189] __pte_alloc+0x6e/0x3b0 [ 738.020680][T10189] ? pmd_install+0x170/0x170 [ 738.022830][T10189] ? __pmd_alloc+0x375/0x840 [ 738.024988][T10189] __handle_mm_fault+0x33a0/0x3e20 [ 738.027344][T10189] ? vm_iomap_memory+0x170/0x170 [ 738.029628][T10189] ? find_vma+0x10e/0x1b0 23:33:06 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x300, 0x11, r0, 0x0) [ 738.031651][T10189] ? can_vma_merge_before+0x3a0/0x3a0 [ 738.034335][T10189] ? preempt_count_sub+0x150/0x150 [ 738.036612][T10189] handle_mm_fault+0x47a/0xa00 [ 738.038820][T10189] ? lock_mm_and_find_vma+0xa6/0x760 [ 738.041257][T10189] do_user_addr_fault+0x3d1/0x1010 [ 738.043617][T10189] ? rcu_is_watching+0x12/0xb0 [ 738.045759][T10189] exc_page_fault+0x5c/0xd0 23:33:06 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x2) [ 738.047865][T10189] asm_exc_page_fault+0x26/0x30 [ 738.050322][T10189] RIP: 0010:_copy_to_user+0xa3/0xb0 [ 738.052751][T10189] Code: 89 ee 48 89 ef e8 8d 85 62 fd 4d 85 f6 75 b9 e8 73 8a 62 fd 89 de 4c 89 e7 e8 d9 8d b7 fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb eb 91 f3 0f 1e fa 41 56 41 55 49 [ 738.061272][T10189] RSP: 0018:ffffc900220afdf8 EFLAGS: 00050246 [ 738.063993][T10189] RAX: 0000000000000001 RBX: 0000000000000010 RCX: 0000000000000010 [ 738.067633][T10189] RDX: fffff52004415fcb RSI: ffffc900220afe48 RDI: 0000000020000140 23:33:06 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x6) [ 738.071257][T10189] RBP: 0000000020000140 R08: 0000000000000000 R09: fffff52004415fca [ 738.075049][T10189] R10: ffffc900220afe57 R11: 0000000000000000 R12: ffffc900220afe48 [ 738.078614][T10189] R13: 0000000020000150 R14: 0000000000000000 R15: 0000000000000000 [ 738.082237][T10189] ? _copy_to_user+0x97/0xb0 [ 738.084395][T10189] put_timespec64+0xb6/0x120 [ 738.086406][T10189] ? ns_to_timespec64+0xc0/0xc0 [ 738.088631][T10189] __x64_sys_clock_gettime+0x1cb/0x260 [ 738.091116][T10189] ? __ia32_sys_clock_settime+0x290/0x290 [ 738.093756][T10189] ? rcu_is_watching+0x12/0xb0 [ 738.095953][T10189] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 738.098703][T10189] do_syscall_64+0x38/0xb0 [ 738.100773][T10189] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 738.103479][T10189] RIP: 0033:0x7fbb91c7cae9 [ 738.105519][T10189] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 738.113906][T10189] RSP: 002b:00007fbb92a060c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 738.117701][T10189] RAX: ffffffffffffffda RBX: 00007fbb91d9bf80 RCX: 00007fbb91c7cae9 [ 738.121310][T10189] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000001 [ 738.124925][T10189] RBP: 00007fbb92a06120 R08: 0000000000000000 R09: 0000000000000000 [ 738.128490][T10189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.132131][T10189] R13: 000000000000000b R14: 00007fbb91d9bf80 R15: 00007ffde5d95378 [ 738.135701][T10189] [ 738.137103][T10191] CPU: 3 PID: 10191 Comm: syz-executor.3 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 738.141588][T10191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 738.146055][T10191] Call Trace: [ 738.147558][T10191] [ 738.148911][T10191] dump_stack_lvl+0x125/0x1b0 [ 738.151032][T10191] should_fail_ex+0x496/0x5b0 23:33:06 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) (fail_nth: 6) [ 738.153176][T10191] should_failslab+0x9/0x20 [ 738.155451][T10191] kmem_cache_alloc+0x61/0x400 [ 738.157629][T10191] vm_area_alloc+0x134/0x220 [ 738.159684][T10191] mmap_region+0x3a9/0x28b0 [ 738.160860][T10207] FAULT_INJECTION: forcing a failure. [ 738.160860][T10207] name failslab, interval 1, probability 0, space 0, times 0 [ 738.161646][T10191] ? find_extend_vma_locked+0x2f0/0x2f0 [ 738.161672][T10191] ? security_mmap_addr+0x84/0xa0 [ 738.161702][T10191] ? get_unmapped_area+0x2c5/0x3e0 [ 738.174204][T10191] do_mmap+0x893/0xef0 [ 738.176047][T10191] vm_mmap_pgoff+0x1a8/0x3b0 [ 738.178122][T10191] ? randomize_page+0xb0/0xb0 [ 738.180239][T10191] ? __fget_files+0x279/0x410 [ 738.182380][T10191] ksys_mmap_pgoff+0x422/0x5b0 [ 738.184530][T10191] ? __ia32_sys_read+0xb0/0xb0 [ 738.186712][T10191] __x64_sys_mmap+0x125/0x190 [ 738.188880][T10191] do_syscall_64+0x38/0xb0 [ 738.190939][T10191] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 738.193611][T10191] RIP: 0033:0x7f9c58e7cae9 [ 738.195609][T10191] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 738.204017][T10191] RSP: 002b:00007f9c59bd20c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 738.207687][T10191] RAX: ffffffffffffffda RBX: 00007f9c58f9bf80 RCX: 00007f9c58e7cae9 [ 738.211183][T10191] RDX: 0000000000000001 RSI: 000000000000400a RDI: 0000000020ffc000 [ 738.214796][T10191] RBP: 00007f9c59bd2120 R08: 0000000000000003 R09: 0000000000000000 [ 738.218266][T10191] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 738.221790][T10191] R13: 000000000000000b R14: 00007f9c58f9bf80 R15: 00007ffcfded7558 [ 738.225421][T10191] [ 738.226825][T10207] CPU: 0 PID: 10207 Comm: syz-executor.2 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 738.231257][T10207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 738.235721][T10207] Call Trace: [ 738.237218][T10207] [ 738.238525][T10207] dump_stack_lvl+0x125/0x1b0 [ 738.240666][T10207] should_fail_ex+0x496/0x5b0 [ 738.242780][T10207] should_failslab+0x9/0x20 [ 738.244845][T10207] kmem_cache_alloc+0x61/0x400 [ 738.246993][T10207] ? _raw_spin_unlock+0x28/0x40 [ 738.249156][T10207] __anon_vma_prepare+0x64/0x550 [ 738.251298][T10207] ? __pmd_alloc+0x375/0x840 [ 738.253387][T10207] __handle_mm_fault+0x394d/0x3e20 [ 738.255707][T10207] ? vm_iomap_memory+0x170/0x170 [ 738.257941][T10207] ? find_vma+0x10e/0x1b0 [ 738.259858][T10207] ? can_vma_merge_before+0x3a0/0x3a0 [ 738.262247][T10207] ? preempt_count_sub+0x150/0x150 [ 738.264457][T10207] handle_mm_fault+0x47a/0xa00 [ 738.266697][T10207] ? lock_mm_and_find_vma+0xa6/0x760 [ 738.269129][T10207] do_user_addr_fault+0x3d1/0x1010 [ 738.271220][T10207] ? rcu_is_watching+0x12/0xb0 [ 738.273452][T10207] exc_page_fault+0x5c/0xd0 [ 738.275538][T10207] asm_exc_page_fault+0x26/0x30 [ 738.277793][T10207] RIP: 0010:_copy_to_user+0xa3/0xb0 [ 738.280187][T10207] Code: 89 ee 48 89 ef e8 8d 85 62 fd 4d 85 f6 75 b9 e8 73 8a 62 fd 89 de 4c 89 e7 e8 d9 8d b7 fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb eb 91 f3 0f 1e fa 41 56 41 55 49 [ 738.288978][T10207] RSP: 0018:ffffc9002681fdf8 EFLAGS: 00050246 [ 738.291752][T10207] RAX: 0000000000000001 RBX: 0000000000000010 RCX: 0000000000000010 [ 738.295347][T10207] RDX: fffff52004d03fcb RSI: ffffc9002681fe48 RDI: 0000000020000140 [ 738.298963][T10207] RBP: 0000000020000140 R08: 0000000000000000 R09: fffff52004d03fca [ 738.302583][T10207] R10: ffffc9002681fe57 R11: 0000000000000000 R12: ffffc9002681fe48 [ 738.306162][T10207] R13: 0000000020000150 R14: 0000000000000000 R15: 0000000000000000 [ 738.309705][T10207] ? _copy_to_user+0x97/0xb0 [ 738.311847][T10207] put_timespec64+0xb6/0x120 [ 738.314004][T10207] ? ns_to_timespec64+0xc0/0xc0 [ 738.316181][T10207] __x64_sys_clock_gettime+0x1cb/0x260 [ 738.318635][T10207] ? __ia32_sys_clock_settime+0x290/0x290 [ 738.321141][T10207] ? rcu_is_watching+0x12/0xb0 [ 738.323262][T10207] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 738.325934][T10207] do_syscall_64+0x38/0xb0 [ 738.328016][T10207] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 738.330717][T10207] RIP: 0033:0x7fbb91c7cae9 [ 738.332796][T10207] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 738.341482][T10207] RSP: 002b:00007fbb92a060c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 738.345260][T10207] RAX: ffffffffffffffda RBX: 00007fbb91d9bf80 RCX: 00007fbb91c7cae9 [ 738.348804][T10207] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000001 [ 738.352295][T10207] RBP: 00007fbb92a06120 R08: 0000000000000000 R09: 0000000000000000 [ 738.355895][T10207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.359488][T10207] R13: 000000000000000b R14: 00007fbb91d9bf80 R15: 00007ffde5d95378 [ 738.363082][T10207] 23:33:06 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:06 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x9) 23:33:06 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) (fail_nth: 9) 23:33:06 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) (fail_nth: 7) [ 738.482788][T10213] FAULT_INJECTION: forcing a failure. [ 738.482788][T10213] name failslab, interval 1, probability 0, space 0, times 0 [ 738.482949][T10214] FAULT_INJECTION: forcing a failure. 23:33:06 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x600) [ 738.482949][T10214] name failslab, interval 1, probability 0, space 0, times 0 [ 738.488818][T10213] CPU: 0 PID: 10213 Comm: syz-executor.3 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 738.488839][T10213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 738.488848][T10213] Call Trace: [ 738.488854][T10213] [ 738.488859][T10213] dump_stack_lvl+0x125/0x1b0 [ 738.488887][T10213] should_fail_ex+0x496/0x5b0 [ 738.488905][T10213] should_failslab+0x9/0x20 [ 738.511114][T10213] kmem_cache_alloc+0x61/0x400 [ 738.513148][T10213] ? reacquire_held_locks+0x4b0/0x4b0 23:33:06 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x900) [ 738.515379][T10213] mas_alloc_nodes+0x182/0x830 [ 738.517554][T10213] mas_node_count_gfp+0x105/0x130 [ 738.519650][T10213] mas_preallocate+0x2d7/0xda0 [ 738.521640][T10213] ? lock_two_nondirectories+0xed/0xf0 [ 738.523779][T10213] ? mas_destroy+0x3d0/0x3d0 23:33:06 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x2000000) [ 738.525706][T10213] ? generic_file_mmap+0x108/0x160 [ 738.527951][T10213] mmap_region+0xc09/0x28b0 [ 738.529803][T10213] ? find_extend_vma_locked+0x2f0/0x2f0 [ 738.532073][T10213] ? security_mmap_addr+0x84/0xa0 [ 738.534182][T10213] ? get_unmapped_area+0x2c5/0x3e0 [ 738.536286][T10213] do_mmap+0x893/0xef0 [ 738.537982][T10213] vm_mmap_pgoff+0x1a8/0x3b0 [ 738.539902][T10213] ? randomize_page+0xb0/0xb0 [ 738.541874][T10213] ? __fget_files+0x279/0x410 [ 738.543814][T10213] ksys_mmap_pgoff+0x422/0x5b0 [ 738.545787][T10213] ? __ia32_sys_read+0xb0/0xb0 [ 738.547752][T10213] __x64_sys_mmap+0x125/0x190 [ 738.549826][T10213] do_syscall_64+0x38/0xb0 [ 738.551664][T10213] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 738.554127][T10213] RIP: 0033:0x7f9c58e7cae9 [ 738.555971][T10213] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 738.563911][T10213] RSP: 002b:00007f9c59bd20c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 738.567298][T10213] RAX: ffffffffffffffda RBX: 00007f9c58f9bf80 RCX: 00007f9c58e7cae9 [ 738.570485][T10213] RDX: 0000000000000001 RSI: 000000000000400a RDI: 0000000020ffc000 [ 738.573718][T10213] RBP: 00007f9c59bd2120 R08: 0000000000000003 R09: 0000000000000000 [ 738.576986][T10213] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 738.580211][T10213] R13: 000000000000000b R14: 00007f9c58f9bf80 R15: 00007ffcfded7558 [ 738.583461][T10213] [ 738.584766][T10214] CPU: 1 PID: 10214 Comm: syz-executor.2 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 738.589248][T10214] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 738.593791][T10214] Call Trace: [ 738.595349][T10214] [ 738.596732][T10214] dump_stack_lvl+0x125/0x1b0 23:33:06 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x6000000) [ 738.598929][T10214] should_fail_ex+0x496/0x5b0 [ 738.601334][T10214] should_failslab+0x9/0x20 [ 738.603463][T10214] kmem_cache_alloc+0x61/0x400 [ 738.605694][T10214] __anon_vma_prepare+0x2bf/0x550 [ 738.608008][T10214] ? __pmd_alloc+0x375/0x840 [ 738.610263][T10214] __handle_mm_fault+0x394d/0x3e20 [ 738.612641][T10214] ? vm_iomap_memory+0x170/0x170 [ 738.614911][T10214] ? find_vma+0x10e/0x1b0 [ 738.616867][T10214] ? can_vma_merge_before+0x3a0/0x3a0 [ 738.619183][T10214] ? preempt_count_sub+0x150/0x150 [ 738.621424][T10214] handle_mm_fault+0x47a/0xa00 [ 738.623596][T10214] ? lock_mm_and_find_vma+0xa6/0x760 [ 738.625934][T10214] do_user_addr_fault+0x3d1/0x1010 [ 738.628241][T10214] ? rcu_is_watching+0x12/0xb0 [ 738.630415][T10214] exc_page_fault+0x5c/0xd0 [ 738.632439][T10214] asm_exc_page_fault+0x26/0x30 [ 738.634608][T10214] RIP: 0010:_copy_to_user+0xa3/0xb0 [ 738.636899][T10214] Code: 89 ee 48 89 ef e8 8d 85 62 fd 4d 85 f6 75 b9 e8 73 8a 62 fd 89 de 4c 89 e7 e8 d9 8d b7 fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb eb 91 f3 0f 1e fa 41 56 41 55 49 [ 738.645217][T10214] RSP: 0018:ffffc900265afdf8 EFLAGS: 00050246 [ 738.647834][T10214] RAX: 0000000000000001 RBX: 0000000000000010 RCX: 0000000000000010 [ 738.651270][T10214] RDX: fffff52004cb5fcb RSI: ffffc900265afe48 RDI: 0000000020000140 [ 738.654730][T10214] RBP: 0000000020000140 R08: 0000000000000000 R09: fffff52004cb5fca [ 738.658097][T10214] R10: ffffc900265afe57 R11: 0000000000000000 R12: ffffc900265afe48 [ 738.661506][T10214] R13: 0000000020000150 R14: 0000000000000000 R15: 0000000000000000 [ 738.665018][T10214] ? _copy_to_user+0x97/0xb0 [ 738.667057][T10214] put_timespec64+0xb6/0x120 [ 738.669084][T10214] ? ns_to_timespec64+0xc0/0xc0 [ 738.671204][T10214] __x64_sys_clock_gettime+0x1cb/0x260 [ 738.673602][T10214] ? __ia32_sys_clock_settime+0x290/0x290 [ 738.676083][T10214] ? rcu_is_watching+0x12/0xb0 [ 738.678212][T10214] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 738.680852][T10214] do_syscall_64+0x38/0xb0 [ 738.682802][T10214] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 738.685372][T10214] RIP: 0033:0x7fbb91c7cae9 [ 738.687362][T10214] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 738.695692][T10214] RSP: 002b:00007fbb92a060c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 738.699332][T10214] RAX: ffffffffffffffda RBX: 00007fbb91d9bf80 RCX: 00007fbb91c7cae9 [ 738.702770][T10214] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000001 [ 738.706188][T10214] RBP: 00007fbb92a06120 R08: 0000000000000000 R09: 0000000000000000 [ 738.709599][T10214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.713090][T10214] R13: 000000000000000b R14: 00007fbb91d9bf80 R15: 00007ffde5d95378 [ 738.716482][T10214] 23:33:07 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:07 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) (fail_nth: 10) 23:33:07 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x9000000) 23:33:07 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) (fail_nth: 8) [ 738.807307][T10229] FAULT_INJECTION: forcing a failure. [ 738.807307][T10229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.811330][T10232] FAULT_INJECTION: forcing a failure. 23:33:07 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x7fffdf003) [ 738.811330][T10232] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 738.812149][T10229] CPU: 0 PID: 10229 Comm: syz-executor.3 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 738.821469][T10229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 738.825354][T10229] Call Trace: [ 738.826552][T10229] [ 738.827619][T10229] dump_stack_lvl+0x125/0x1b0 [ 738.829317][T10229] should_fail_ex+0x496/0x5b0 23:33:07 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) [ 738.831006][T10229] _copy_to_user+0x30/0xb0 [ 738.832825][T10229] simple_read_from_buffer+0xd0/0x150 [ 738.834748][T10229] proc_fail_nth_read+0x1b0/0x290 [ 738.836625][T10229] ? proc_sessionid_read+0x290/0x290 23:33:07 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x7fff800020ffc) [ 738.838535][T10229] ? security_file_permission+0xdc/0x100 [ 738.840858][T10229] ? proc_sessionid_read+0x290/0x290 [ 738.842829][T10229] vfs_read+0x1ce/0x930 [ 738.844572][T10229] ? kernel_read+0x1b0/0x1b0 [ 738.846247][T10229] ? __fget_files+0x279/0x410 [ 738.847977][T10229] ksys_read+0x12f/0x250 [ 738.849559][T10229] ? vfs_write+0xe40/0xe40 [ 738.851222][T10229] ? rcu_is_watching+0x12/0xb0 [ 738.852957][T10229] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 738.855160][T10229] do_syscall_64+0x38/0xb0 23:33:07 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) [ 738.856821][T10229] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 738.859098][T10229] RIP: 0033:0x7f9c58e7b78c [ 738.860709][T10229] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 738.867729][T10229] RSP: 002b:00007f9c59bd20c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 738.871345][T10229] RAX: ffffffffffffffda RBX: 00007f9c58f9bf80 RCX: 00007f9c58e7b78c [ 738.874342][T10229] RDX: 000000000000000f RSI: 00007f9c59bd2130 RDI: 0000000000000004 23:33:07 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x200000000000000) [ 738.877689][T10229] RBP: 00007f9c59bd2120 R08: 0000000000000000 R09: 0000000000000000 [ 738.881333][T10229] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000002 [ 738.884861][T10229] R13: 000000000000000b R14: 00007f9c58f9bf80 R15: 00007ffcfded7558 [ 738.888365][T10229] [ 738.889791][T10232] CPU: 3 PID: 10232 Comm: syz-executor.2 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 738.894437][T10232] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 23:33:07 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) [ 738.898985][T10232] Call Trace: [ 738.900692][T10232] [ 738.902072][T10232] dump_stack_lvl+0x125/0x1b0 23:33:07 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) [ 738.904277][T10232] should_fail_ex+0x496/0x5b0 [ 738.906642][T10232] __should_fail_alloc_page+0xe7/0x130 [ 738.909131][T10232] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 738.911890][T10232] ? mod_objcg_state+0x3ef/0x9e0 [ 738.914121][T10232] __alloc_pages+0x14e/0x4a0 [ 738.916278][T10232] ? lock_acquire+0x464/0x510 [ 738.918495][T10232] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 738.921617][T10232] ? lock_sync+0x190/0x190 [ 738.923599][T10232] ? rcu_is_watching+0x12/0xb0 [ 738.925648][T10232] ? reacquire_held_locks+0x4b0/0x4b0 [ 738.928003][T10232] ? lock_release+0x4bf/0x680 [ 738.930092][T10232] ? __anon_vma_prepare+0x26a/0x550 [ 738.932534][T10232] __folio_alloc+0x16/0x40 [ 738.934625][T10232] vma_alloc_folio+0x156/0x890 [ 738.936742][T10232] ? policy_nodemask+0x1d0/0x1d0 [ 738.939047][T10232] ? __anon_vma_prepare+0x298/0x550 [ 738.941471][T10232] __handle_mm_fault+0xe6c/0x3e20 [ 738.943802][T10232] ? vm_iomap_memory+0x170/0x170 [ 738.946112][T10232] ? find_vma+0x10e/0x1b0 [ 738.948138][T10232] ? can_vma_merge_before+0x3a0/0x3a0 [ 738.950629][T10232] ? preempt_count_sub+0x150/0x150 [ 738.953023][T10232] handle_mm_fault+0x47a/0xa00 [ 738.955248][T10232] ? lock_mm_and_find_vma+0xa6/0x760 [ 738.957709][T10232] do_user_addr_fault+0x3d1/0x1010 [ 738.960092][T10232] ? rcu_is_watching+0x12/0xb0 [ 738.962313][T10232] exc_page_fault+0x5c/0xd0 [ 738.964415][T10232] asm_exc_page_fault+0x26/0x30 [ 738.966672][T10232] RIP: 0010:_copy_to_user+0xa3/0xb0 [ 738.969079][T10232] Code: 89 ee 48 89 ef e8 8d 85 62 fd 4d 85 f6 75 b9 e8 73 8a 62 fd 89 de 4c 89 e7 e8 d9 8d b7 fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb eb 91 f3 0f 1e fa 41 56 41 55 49 [ 738.977841][T10232] RSP: 0018:ffffc900265afdf8 EFLAGS: 00050246 [ 738.980657][T10232] RAX: 0000000000000001 RBX: 0000000000000010 RCX: 0000000000000010 [ 738.984287][T10232] RDX: fffff52004cb5fcb RSI: ffffc900265afe48 RDI: 0000000020000140 [ 738.987811][T10232] RBP: 0000000020000140 R08: 0000000000000000 R09: fffff52004cb5fca [ 738.991444][T10232] R10: ffffc900265afe57 R11: 0000000000000000 R12: ffffc900265afe48 [ 738.995067][T10232] R13: 0000000020000150 R14: 0000000000000000 R15: 0000000000000000 [ 738.998680][T10232] ? _copy_to_user+0x97/0xb0 [ 739.000821][T10232] put_timespec64+0xb6/0x120 [ 739.002987][T10232] ? ns_to_timespec64+0xc0/0xc0 [ 739.005272][T10232] __x64_sys_clock_gettime+0x1cb/0x260 [ 739.007806][T10232] ? __ia32_sys_clock_settime+0x290/0x290 [ 739.010456][T10232] ? rcu_is_watching+0x12/0xb0 [ 739.012689][T10232] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 739.015442][T10232] do_syscall_64+0x38/0xb0 [ 739.017529][T10232] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 739.020252][T10232] RIP: 0033:0x7fbb91c7cae9 [ 739.022327][T10232] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 739.031136][T10232] RSP: 002b:00007fbb92a060c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 739.034995][T10232] RAX: ffffffffffffffda RBX: 00007fbb91d9bf80 RCX: 00007fbb91c7cae9 [ 739.038641][T10232] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000001 [ 739.042278][T10232] RBP: 00007fbb92a06120 R08: 0000000000000000 R09: 0000000000000000 [ 739.045914][T10232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.049551][T10232] R13: 000000000000000b R14: 00007fbb91d9bf80 R15: 00007ffde5d95378 [ 739.053150][T10232] 23:33:07 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) (fail_nth: 9) 23:33:07 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:07 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4002, 0x1, 0x11, r0, 0x0) 23:33:07 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x3f0fdff07000000) 23:33:07 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4003, 0x1, 0x11, r0, 0x0) 23:33:07 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x600000000000000) [ 739.075378][T10256] FAULT_INJECTION: forcing a failure. [ 739.075378][T10256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 739.081992][T10256] CPU: 2 PID: 10256 Comm: syz-executor.2 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 739.086202][T10256] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 739.090209][T10256] Call Trace: [ 739.091506][T10256] [ 739.092646][T10256] dump_stack_lvl+0x125/0x1b0 [ 739.094515][T10256] should_fail_ex+0x496/0x5b0 [ 739.096399][T10256] _copy_to_user+0x30/0xb0 [ 739.098314][T10256] simple_read_from_buffer+0xd0/0x150 23:33:07 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:07 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x900000000000000) [ 739.100804][T10256] proc_fail_nth_read+0x1b0/0x290 [ 739.102903][T10256] ? proc_sessionid_read+0x290/0x290 [ 739.105111][T10256] ? security_file_permission+0xdc/0x100 [ 739.107413][T10256] ? proc_sessionid_read+0x290/0x290 [ 739.109736][T10256] vfs_read+0x1ce/0x930 [ 739.111427][T10256] ? kernel_read+0x1b0/0x1b0 [ 739.113401][T10256] ? __fget_files+0x279/0x410 [ 739.115368][T10256] ksys_read+0x12f/0x250 [ 739.117221][T10256] ? vfs_write+0xe40/0xe40 [ 739.119110][T10256] ? rcu_is_watching+0x12/0xb0 [ 739.120919][T10256] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 739.123385][T10256] do_syscall_64+0x38/0xb0 [ 739.125265][T10256] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 739.127907][T10256] RIP: 0033:0x7fbb91c7b78c [ 739.129791][T10256] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 739.138164][T10256] RSP: 002b:00007fbb92a060c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 739.141876][T10256] RAX: ffffffffffffffda RBX: 00007fbb91d9bf80 RCX: 00007fbb91c7b78c [ 739.145406][T10256] RDX: 000000000000000f RSI: 00007fbb92a06130 RDI: 0000000000000003 [ 739.148996][T10256] RBP: 00007fbb92a06120 R08: 0000000000000000 R09: 0000000000000000 [ 739.152546][T10256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.156008][T10256] R13: 000000000000000b R14: 00007fbb91d9bf80 R15: 00007ffde5d95378 [ 739.159166][T10256] 23:33:07 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) 23:33:07 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4004, 0x1, 0x11, r0, 0x0) 23:33:07 executing program 1: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 23:33:07 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0xfc0f0200f8ff0700) 23:33:07 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r1, 0x40046103, &(0x7f0000000040)={0x5, 0x7, 0x6, 0x3, 0x5, 0x0, 0x7f, 0x0, 0x9, 0x5, 0x4, "a5c13793b02588d30e24f07e8e34bbd282efe4aad40262ff8d58b9b9183a9464"}) 23:33:07 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4005, 0x1, 0x11, r0, 0x0) 23:33:07 executing program 2: clock_gettime(0x2, &(0x7f0000000140)) 23:33:07 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r1, 0x40046103, &(0x7f0000000040)={0x5, 0x7, 0x6, 0x3, 0x5, 0x0, 0x7f, 0x0, 0x9, 0x5, 0x4, "a5c13793b02588d30e24f07e8e34bbd282efe4aad40262ff8d58b9b9183a9464"}) 23:33:07 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4006, 0x1, 0x11, r0, 0x0) 23:33:07 executing program 2: clock_gettime(0x3, &(0x7f0000000140)) 23:33:07 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) ioctl$IOCTL_STATUS_ACCEL_DEV(r1, 0x40046103, &(0x7f0000000040)={0x5, 0x7, 0x6, 0x3, 0x5, 0x0, 0x7f, 0x0, 0x9, 0x5, 0x4, "a5c13793b02588d30e24f07e8e34bbd282efe4aad40262ff8d58b9b9183a9464"}) 23:33:07 executing program 1: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 23:33:07 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4007, 0x1, 0x11, r0, 0x0) 23:33:07 executing program 2: clock_gettime(0x4, &(0x7f0000000140)) 23:33:07 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x54, 0x0, &(0x7f0000000100)=[@decrefs={0x40046307, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="852a68770000000000000000000000000000000000000000852a646600000000", @ANYRES32=r1, @ANYBLOB="0053957beaf644a874000000852a68770a1000"/36], &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x1}], 0x4, 0x0, &(0x7f0000000180)="b164dbf5"}) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000240)) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) ioctl$SIOCGETVIFCNT(r4, 0x89e0, &(0x7f00000002c0)) 23:33:07 executing program 2: clock_gettime(0x5, &(0x7f0000000140)) 23:33:07 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x1, 0x11, r0, 0x0) [ 739.283655][T10299] binder: 10297:10299 ioctl 4018f50b 0 returned -22 23:33:07 executing program 2: clock_gettime(0xb, &(0x7f0000000140)) 23:33:07 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x54, 0x0, &(0x7f0000000100)=[@decrefs={0x40046307, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="852a68770000000000000000000000000000000000000000852a646600000000", @ANYRES32=r1, @ANYBLOB="0053957beaf644a874000000852a68770a1000"/36], &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x1}], 0x4, 0x0, &(0x7f0000000180)="b164dbf5"}) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000240)) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) ioctl$SIOCGETVIFCNT(r4, 0x89e0, &(0x7f00000002c0)) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder1\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x8) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x54, 0x0, &(0x7f0000000100)=[@decrefs={0x40046307, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="852a68770000000000000000000000000000000000000000852a646600000000", @ANYRES32=r1, @ANYBLOB="0053957beaf644a874000000852a68770a1000"/36], &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x1}], 0x4, 0x0, &(0x7f0000000180)="b164dbf5"}) (async) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000240)) (async) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) (async) ioctl$SIOCGETVIFCNT(r4, 0x89e0, &(0x7f00000002c0)) (async) [ 739.310873][T10307] binder: 10306:10307 ioctl 4018f50b 0 returned -22 [ 739.316716][T10309] binder: 10306:10309 ioctl 4018f50b 0 returned -22 23:33:07 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4009, 0x1, 0x11, r0, 0x0) 23:33:07 executing program 2: clock_gettime(0xe, &(0x7f0000000140)) 23:33:07 executing program 1: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 23:33:07 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder1\x00', 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x54, 0x0, &(0x7f0000000100)=[@decrefs={0x40046307, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="852a68770000000000000000000000000000000000000000852a646600000000", @ANYRES32=r1, @ANYBLOB="0053957beaf644a874000000852a68770a1000"/36], &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x1}], 0x4, 0x0, &(0x7f0000000180)="b164dbf5"}) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000240)) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) ioctl$SIOCGETVIFCNT(r4, 0x89e0, &(0x7f00000002c0)) [ 739.335975][T10313] binder: 10311:10313 ioctl 4018f50b 0 returned -22 23:33:07 executing program 2: clock_gettime(0x7, &(0x7f0000000140)) 23:33:07 executing program 0: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x8000000) syz_open_dev$media(&(0x7f0000000040), 0x401, 0x48000) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1, 0x4580}, {r2}], 0x2, 0x0) inotify_add_watch(r0, &(0x7f0000000100)='./file0/file0\x00', 0x14000684) 23:33:07 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400c, 0x1, 0x11, r0, 0x0) 23:33:07 executing program 2: clock_gettime(0x7, &(0x7f0000000140)) 23:33:07 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400d, 0x1, 0x11, r0, 0x0) 23:33:07 executing program 0: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x8000000) syz_open_dev$media(&(0x7f0000000040), 0x401, 0x48000) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1, 0x4580}, {r2}], 0x2, 0x0) inotify_add_watch(r0, &(0x7f0000000100)='./file0/file0\x00', 0x14000684) 23:33:07 executing program 2: clock_gettime(0x7, &(0x7f0000000140)) clock_gettime(0x7, &(0x7f0000000140)) (async) 23:33:07 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400e, 0x1, 0x11, r0, 0x0) 23:33:07 executing program 0: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x8000000) syz_open_dev$media(&(0x7f0000000040), 0x401, 0x48000) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1, 0x4580}, {r2}], 0x2, 0x0) (async) inotify_add_watch(r0, &(0x7f0000000100)='./file0/file0\x00', 0x14000684) 23:33:07 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) clock_getres(0x4, &(0x7f0000000000)) 23:33:07 executing program 1: clock_gettime(0xe, &(0x7f0000000140)) 23:33:07 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400f, 0x1, 0x11, r0, 0x0) 23:33:07 executing program 1: clock_gettime(0xe, &(0x7f0000000140)) 23:33:07 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) (async, rerun: 32) clock_getres(0x4, &(0x7f0000000000)) (rerun: 32) 23:33:07 executing program 0: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x8, 0x40, 0x2, {0x4, 0x8}, 0x9, 0x2}) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000400), 0x10000, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x802, 0x0) r3 = getpgrp(0x0) sched_rr_get_interval(r3, &(0x7f0000000180)) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000100)={r3, 0x0, 0x7}) 23:33:07 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) clock_getres(0x4, &(0x7f0000000000)) clock_gettime(0x1, &(0x7f0000000140)) (async) clock_getres(0x4, &(0x7f0000000000)) (async) 23:33:07 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4010, 0x1, 0x11, r0, 0x0) 23:33:07 executing program 1: clock_gettime(0xe, &(0x7f0000000140)) 23:33:07 executing program 0: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x8, 0x40, 0x2, {0x4, 0x8}, 0x9, 0x2}) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000400), 0x10000, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x802, 0x0) r3 = getpgrp(0x0) sched_rr_get_interval(r3, &(0x7f0000000180)) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000100)={r3, 0x0, 0x7}) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x8, 0x40, 0x2, {0x4, 0x8}, 0x9, 0x2}) (async) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000400), 0x10000, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r1, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x802, 0x0) (async) getpgrp(0x0) (async) sched_rr_get_interval(r3, &(0x7f0000000180)) (async) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000100)={r3, 0x0, 0x7}) (async) 23:33:07 executing program 2: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000080)={0x0, 0x0, 0x7, 0x6, 0x57ba, 0x7}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000300, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0x6, 0x8300) clock_gettime(0x1, &(0x7f0000000140)) 23:33:07 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x2, 0x11, r0, 0x0) 23:33:07 executing program 1: clock_gettime(0x0, &(0x7f0000000140)) 23:33:07 executing program 0: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x8, 0x40, 0x2, {0x4, 0x8}, 0x9, 0x2}) (async) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000400), 0x10000, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r1, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x802, 0x0) (async) r3 = getpgrp(0x0) sched_rr_get_interval(r3, &(0x7f0000000180)) (async) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000100)={r3, 0x0, 0x7}) 23:33:07 executing program 2: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000080)={0x0, 0x0, 0x7, 0x6, 0x57ba, 0x7}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000300, 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0x6, 0x8300) clock_gettime(0x1, &(0x7f0000000140)) 23:33:07 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x3, 0x11, r0, 0x0) 23:33:07 executing program 1: clock_gettime(0x0, &(0x7f0000000140)) 23:33:07 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x7) 23:33:07 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x4, 0x11, r0, 0x0) 23:33:07 executing program 2: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000080)={0x0, 0x0, 0x7, 0x6, 0x57ba, 0x7}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000300, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0x6, 0x8300) clock_gettime(0x1, &(0x7f0000000140)) (async) clock_gettime(0x1, &(0x7f0000000140)) 23:33:07 executing program 1: clock_gettime(0x0, &(0x7f0000000140)) 23:33:07 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x7) 23:33:07 executing program 1: clock_gettime(0xe, 0x0) 23:33:07 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000), 0x4) 23:33:07 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x5, 0x11, r0, 0x0) 23:33:07 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x7) 23:33:07 executing program 1: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x8, 0x40, 0x2, {0x4, 0x8}, 0x9, 0x2}) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000400), 0x10000, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x802, 0x0) r3 = getpgrp(0x0) sched_rr_get_interval(r3, &(0x7f0000000180)) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000100)={r3, 0x0, 0x7}) 23:33:07 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x6, 0x11, r0, 0x0) 23:33:07 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000), 0x4) clock_gettime(0x1, &(0x7f0000000140)) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000), 0x4) (async) 23:33:07 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=0xffffffffffffffff, @ANYBLOB="03000000020000002e2f66696c653000"]) ioctl$VHOST_VDPA_GET_VQS_COUNT(r1, 0x8004af80, &(0x7f00000000c0)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8000) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(r2, 0x7c81, 0x0) 23:33:07 executing program 1: clock_gettime(0xb, &(0x7f0000000140)) 23:33:07 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x7, 0x11, r0, 0x0) 23:33:07 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) (async) clock_gettime(0x1, &(0x7f0000000140)) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000), 0x4) 23:33:07 executing program 1: clock_gettime(0xb, &(0x7f0000000140)) 23:33:07 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=0xffffffffffffffff, @ANYBLOB="03000000020000002e2f66696c653000"]) ioctl$VHOST_VDPA_GET_VQS_COUNT(r1, 0x8004af80, &(0x7f00000000c0)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8000) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(r2, 0x7c81, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="03000000020000002e2f66696c653000"]) (async) ioctl$VHOST_VDPA_GET_VQS_COUNT(r1, 0x8004af80, &(0x7f00000000c0)) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8000) (async) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) ioctl$MEDIA_REQUEST_IOC_REINIT(r2, 0x7c81, 0x0) (async) 23:33:07 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x8, 0x11, r0, 0x0) 23:33:07 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x2, 0x80) ioctl$FLOPPY_FDFMTTRK(r0, 0x400c0248, &(0x7f0000000300)={0x401, 0x6, 0x10000}) clock_gettime(0x1, &(0x7f0000000140)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) clock_getres(0x1, &(0x7f0000000040)) ioctl$FLOPPY_FDRAWCMD(r0, 0x258, &(0x7f0000000400)={0x800, &(0x7f0000000340)="001b1584e7c81af600ab4b376d23927ca2dcc84d83d48fae90ded5105e5968adefa5441925dcd7f5d5ed6804b2a9acb1b340113e0895a539d1901274301a567a9594dac736714e10508b05cbe601180c66ff3df39d57d46adf7f18aafc881c3a1e", &(0x7f00000003c0)=0x1f, 0x0, 0x61, 0x0, 0x0, 0x0, 0x7b, "9ba95fc63c688018349eaea4381e8d61", 0x0, '\x00', 0x3f9}) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/18, 0x12, 0x0, &(0x7f0000000180)=""/199, 0xc7}, &(0x7f0000000100)=0x40) clock_getres(0x2, &(0x7f0000000280)) 23:33:07 executing program 1: clock_gettime(0xb, &(0x7f0000000140)) 23:33:07 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=0xffffffffffffffff, @ANYBLOB="03000000020000002e2f66696c653000"]) ioctl$VHOST_VDPA_GET_VQS_COUNT(r1, 0x8004af80, &(0x7f00000000c0)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8000) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(r2, 0x7c81, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="03000000020000002e2f66696c653000"]) (async) ioctl$VHOST_VDPA_GET_VQS_COUNT(r1, 0x8004af80, &(0x7f00000000c0)) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8000) (async) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) ioctl$MEDIA_REQUEST_IOC_REINIT(r2, 0x7c81, 0x0) (async) 23:33:07 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x9, 0x11, r0, 0x0) 23:33:07 executing program 1: clock_gettime(0x0, &(0x7f0000000140)) 23:33:07 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x2, 0x80) ioctl$FLOPPY_FDFMTTRK(r0, 0x400c0248, &(0x7f0000000300)={0x401, 0x6, 0x10000}) (async) clock_gettime(0x1, &(0x7f0000000140)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) (async) clock_getres(0x1, &(0x7f0000000040)) (async) ioctl$FLOPPY_FDRAWCMD(r0, 0x258, &(0x7f0000000400)={0x800, &(0x7f0000000340)="001b1584e7c81af600ab4b376d23927ca2dcc84d83d48fae90ded5105e5968adefa5441925dcd7f5d5ed6804b2a9acb1b340113e0895a539d1901274301a567a9594dac736714e10508b05cbe601180c66ff3df39d57d46adf7f18aafc881c3a1e", &(0x7f00000003c0)=0x1f, 0x0, 0x61, 0x0, 0x0, 0x0, 0x7b, "9ba95fc63c688018349eaea4381e8d61", 0x0, '\x00', 0x3f9}) (async, rerun: 64) socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 64) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/18, 0x12, 0x0, &(0x7f0000000180)=""/199, 0xc7}, &(0x7f0000000100)=0x40) (async) clock_getres(0x2, &(0x7f0000000280)) 23:33:07 executing program 1: clock_gettime(0x0, &(0x7f0000000140)) 23:33:07 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r3 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FLOPPY_FDPOLLDRVSTAT(r2, 0x80500213, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r3, 0x0) 23:33:07 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0xa, 0x11, r0, 0x0) 23:33:07 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x2, 0x80) ioctl$FLOPPY_FDFMTTRK(r0, 0x400c0248, &(0x7f0000000300)={0x401, 0x6, 0x10000}) (async) clock_gettime(0x1, &(0x7f0000000140)) (async) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) (async) clock_getres(0x1, &(0x7f0000000040)) ioctl$FLOPPY_FDRAWCMD(r0, 0x258, &(0x7f0000000400)={0x800, &(0x7f0000000340)="001b1584e7c81af600ab4b376d23927ca2dcc84d83d48fae90ded5105e5968adefa5441925dcd7f5d5ed6804b2a9acb1b340113e0895a539d1901274301a567a9594dac736714e10508b05cbe601180c66ff3df39d57d46adf7f18aafc881c3a1e", &(0x7f00000003c0)=0x1f, 0x0, 0x61, 0x0, 0x0, 0x0, 0x7b, "9ba95fc63c688018349eaea4381e8d61", 0x0, '\x00', 0x3f9}) (async) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/18, 0x12, 0x0, &(0x7f0000000180)=""/199, 0xc7}, &(0x7f0000000100)=0x40) (async) clock_getres(0x2, &(0x7f0000000280)) 23:33:07 executing program 1: clock_gettime(0x0, &(0x7f0000000140)) 23:33:07 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0xd, 0x11, r0, 0x0) 23:33:07 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r3 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FLOPPY_FDPOLLDRVSTAT(r2, 0x80500213, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r3, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r3, 0x0) 23:33:07 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r1, 0x0, 0x2b6c, 0x7}}}, 0x90) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cachetag=,aname=\\,uname=,cache=fscache,fowner>', @ANYRESDEC=r1, @ANYBLOB="2c45ada7762f723e", @ANYRESDEC=0x0, @ANYBLOB=',subj_user={+,smackfsfloor=[{,context=sysadm_u,\x00']) clock_gettime(0x1, &(0x7f0000000140)) r2 = geteuid() mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x100000, &(0x7f0000002340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@mmap}, {@cache_mmap}, {@version_L}, {@version_9p2000}], [{@fowner_gt={'fowner>', r2}}, {@pcr={'pcr', 0x3d, 0x31}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@measure}, {@uid_gt}, {@context={'context', 0x3d, 'staff_u'}}, {@audit}]}}) 23:33:07 executing program 1: clock_gettime(0xb, 0x0) 23:33:07 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r1, 0x0, 0x2b6c, 0x7}}}, 0x90) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cachetag=,aname=\\,uname=,cache=fscache,fowner>', @ANYRESDEC=r1, @ANYBLOB="2c45ada7762f723e", @ANYRESDEC=0x0, @ANYBLOB=',subj_user={+,smackfsfloor=[{,context=sysadm_u,\x00']) clock_gettime(0x1, &(0x7f0000000140)) r2 = geteuid() mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x100000, &(0x7f0000002340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@mmap}, {@cache_mmap}, {@version_L}, {@version_9p2000}], [{@fowner_gt={'fowner>', r2}}, {@pcr={'pcr', 0x3d, 0x31}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@measure}, {@uid_gt}, {@context={'context', 0x3d, 'staff_u'}}, {@audit}]}}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) geteuid() (async) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r1, 0x0, 0x2b6c, 0x7}}}, 0x90) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cachetag=,aname=\\,uname=,cache=fscache,fowner>', @ANYRESDEC=r1, @ANYBLOB="2c45ada7762f723e", @ANYRESDEC=0x0, @ANYBLOB=',subj_user={+,smackfsfloor=[{,context=sysadm_u,\x00']) (async) clock_gettime(0x1, &(0x7f0000000140)) (async) geteuid() (async) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x100000, &(0x7f0000002340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@mmap}, {@cache_mmap}, {@version_L}, {@version_9p2000}], [{@fowner_gt={'fowner>', r2}}, {@pcr={'pcr', 0x3d, 0x31}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@measure}, {@uid_gt}, {@context={'context', 0x3d, 'staff_u'}}, {@audit}]}}) (async) 23:33:07 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0xe, 0x11, r0, 0x0) 23:33:07 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r3 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$FLOPPY_FDPOLLDRVSTAT(r2, 0x80500213, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r3, 0x0) 23:33:07 executing program 1: clock_gettime(0xb, 0x0) 23:33:07 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0xf, 0x11, r0, 0x0) 23:33:07 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r1 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r1, 0x0, 0x2b6c, 0x7}}}, 0x90) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cachetag=,aname=\\,uname=,cache=fscache,fowner>', @ANYRESDEC=r1, @ANYBLOB="2c45ada7762f723e", @ANYRESDEC=0x0, @ANYBLOB=',subj_user={+,smackfsfloor=[{,context=sysadm_u,\x00']) (async) clock_gettime(0x1, &(0x7f0000000140)) r2 = geteuid() mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x100000, &(0x7f0000002340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@mmap}, {@cache_mmap}, {@version_L}, {@version_9p2000}], [{@fowner_gt={'fowner>', r2}}, {@pcr={'pcr', 0x3d, 0x31}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@measure}, {@uid_gt}, {@context={'context', 0x3d, 'staff_u'}}, {@audit}]}}) 23:33:07 executing program 1: clock_gettime(0xb, 0x0) 23:33:07 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x10, 0x11, r0, 0x0) 23:33:08 executing program 2: clock_gettime(0x2, &(0x7f0000000040)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x252002) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x300, 0x11, r0, 0x0) 23:33:08 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) read$FUSE(r1, &(0x7f0000005180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r1, &(0x7f00000011c0)={0x18, 0xfffffffffffffffe, r2, {0x9}}, 0x18) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) inotify_rm_watch(r4, 0x0) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=0x1000) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x0, 0x8, 0x9}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x18040, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000012c0)={{0x7f, 0x2}, 'port1\x00', 0x84, 0x121821, 0x1, 0x8, 0x0, 0x5, 0x4eae, 0x0, 0x0, 0x40}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001240)=ANY=[@ANYBLOB="01000000000088c51b52a647350babf9141d62df75cc94b4891cbd332c48ce5efd5206dd097e082df55b9f5d8c24da00"/76, @ANYRES32=r5, @ANYBLOB="620000009eb300002e2f66696c653000"]) r6 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000015c0)) r7 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r7, 0x0, 0x2b6c, 0x7}}}, 0x90) getresuid(&(0x7f00000013c0), &(0x7f0000001400)=0x0, &(0x7f0000001440)) bind$isdn_base(r6, &(0x7f0000001580)={0x22, 0x7, 0x7f, 0xfe, 0x7}, 0x6) mount$fuse(0x0, &(0x7f0000001200)='./file0\x00', &(0x7f0000001380), 0x102c0a0, &(0x7f0000001480)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other}], [{@fsname={'fsname', 0x3d, 'port1\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, './binderfs/binder1\x00'}}, {@hash}, {@fowner_gt={'fowner>', r8}}]}}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, &(0x7f0000002140)=""/4096, 0x1000, 0x1, &(0x7f0000000100)=""/54, 0xfffffffffffffe63}, &(0x7f00000000c0)=0x40) 23:33:08 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x2, 0x80) ioctl$FLOPPY_FDFMTTRK(r0, 0x400c0248, &(0x7f0000000300)={0x401, 0x6, 0x10000}) clock_gettime(0x1, &(0x7f0000000140)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) clock_getres(0x1, &(0x7f0000000040)) ioctl$FLOPPY_FDRAWCMD(r0, 0x258, &(0x7f0000000400)={0x800, &(0x7f0000000340)="001b1584e7c81af600ab4b376d23927ca2dcc84d83d48fae90ded5105e5968adefa5441925dcd7f5d5ed6804b2a9acb1b340113e0895a539d1901274301a567a9594dac736714e10508b05cbe601180c66ff3df39d57d46adf7f18aafc881c3a1e", &(0x7f00000003c0)=0x1f, 0x0, 0x61, 0x0, 0x0, 0x0, 0x7b, "9ba95fc63c688018349eaea4381e8d61", 0x0, '\x00', 0x3f9}) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/18, 0x12, 0x0, &(0x7f0000000180)=""/199, 0xc7}, &(0x7f0000000100)=0x40) clock_getres(0x2, &(0x7f0000000280)) [ 739.803522][T10493] binder: 10491:10493 ioctl 4018f50b 0 returned -22 23:33:08 executing program 2: clock_gettime(0x2, &(0x7f0000000040)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x252002) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1b2df1ffff, 0x11, r0, 0x0) 23:33:08 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x2, 0x80) ioctl$FLOPPY_FDFMTTRK(r0, 0x400c0248, &(0x7f0000000300)={0x401, 0x6, 0x10000}) clock_gettime(0x1, &(0x7f0000000140)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) clock_getres(0x1, &(0x7f0000000040)) ioctl$FLOPPY_FDRAWCMD(r0, 0x258, &(0x7f0000000400)={0x800, &(0x7f0000000340)="001b1584e7c81af600ab4b376d23927ca2dcc84d83d48fae90ded5105e5968adefa5441925dcd7f5d5ed6804b2a9acb1b340113e0895a539d1901274301a567a9594dac736714e10508b05cbe601180c66ff3df39d57d46adf7f18aafc881c3a1e", &(0x7f00000003c0)=0x1f, 0x0, 0x61, 0x0, 0x0, 0x0, 0x7b, "9ba95fc63c688018349eaea4381e8d61", 0x0, '\x00', 0x3f9}) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/18, 0x12, 0x0, &(0x7f0000000180)=""/199, 0xc7}, &(0x7f0000000100)=0x40) clock_getres(0x2, &(0x7f0000000280)) 23:33:08 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) read$FUSE(r1, &(0x7f0000005180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r1, &(0x7f00000011c0)={0x18, 0xfffffffffffffffe, r2, {0x9}}, 0x18) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) inotify_rm_watch(r4, 0x0) (async, rerun: 64) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=0x1000) (async, rerun: 64) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x0, 0x8, 0x9}) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x18040, 0x0) (async, rerun: 64) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) (rerun: 64) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000012c0)={{0x7f, 0x2}, 'port1\x00', 0x84, 0x121821, 0x1, 0x8, 0x0, 0x5, 0x4eae, 0x0, 0x0, 0x40}) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001240)=ANY=[@ANYBLOB="01000000000088c51b52a647350babf9141d62df75cc94b4891cbd332c48ce5efd5206dd097e082df55b9f5d8c24da00"/76, @ANYRES32=r5, @ANYBLOB="620000009eb300002e2f66696c653000"]) (async, rerun: 64) r6 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) (async, rerun: 32) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000015c0)) (rerun: 32) r7 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r7, 0x0, 0x2b6c, 0x7}}}, 0x90) (async, rerun: 32) getresuid(&(0x7f00000013c0), &(0x7f0000001400)=0x0, &(0x7f0000001440)) (async, rerun: 32) bind$isdn_base(r6, &(0x7f0000001580)={0x22, 0x7, 0x7f, 0xfe, 0x7}, 0x6) mount$fuse(0x0, &(0x7f0000001200)='./file0\x00', &(0x7f0000001380), 0x102c0a0, &(0x7f0000001480)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other}], [{@fsname={'fsname', 0x3d, 'port1\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, './binderfs/binder1\x00'}}, {@hash}, {@fowner_gt={'fowner>', r8}}]}}) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, &(0x7f0000002140)=""/4096, 0x1000, 0x1, &(0x7f0000000100)=""/54, 0xfffffffffffffe63}, &(0x7f00000000c0)=0x40) 23:33:08 executing program 2: clock_gettime(0x2, &(0x7f0000000040)) (async) clock_gettime(0x2, &(0x7f0000000040)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x252002) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x2) 23:33:08 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x2, 0x80) ioctl$FLOPPY_FDFMTTRK(r0, 0x400c0248, &(0x7f0000000300)={0x401, 0x6, 0x10000}) clock_gettime(0x1, &(0x7f0000000140)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) clock_getres(0x1, &(0x7f0000000040)) ioctl$FLOPPY_FDRAWCMD(r0, 0x258, &(0x7f0000000400)={0x800, &(0x7f0000000340)="001b1584e7c81af600ab4b376d23927ca2dcc84d83d48fae90ded5105e5968adefa5441925dcd7f5d5ed6804b2a9acb1b340113e0895a539d1901274301a567a9594dac736714e10508b05cbe601180c66ff3df39d57d46adf7f18aafc881c3a1e", &(0x7f00000003c0)=0x1f, 0x0, 0x61, 0x0, 0x0, 0x0, 0x7b, "9ba95fc63c688018349eaea4381e8d61", 0x0, '\x00', 0x3f9}) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/18, 0x12, 0x0, &(0x7f0000000180)=""/199, 0xc7}, &(0x7f0000000100)=0x40) clock_getres(0x2, &(0x7f0000000280)) 23:33:08 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) read$FUSE(r1, &(0x7f0000005180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r1, &(0x7f00000011c0)={0x18, 0xfffffffffffffffe, r2, {0x9}}, 0x18) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) inotify_rm_watch(r4, 0x0) (async) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=0x1000) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x0, 0x8, 0x9}) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x18040, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000012c0)={{0x7f, 0x2}, 'port1\x00', 0x84, 0x121821, 0x1, 0x8, 0x0, 0x5, 0x4eae, 0x0, 0x0, 0x40}) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001240)=ANY=[@ANYBLOB="01000000000088c51b52a647350babf9141d62df75cc94b4891cbd332c48ce5efd5206dd097e082df55b9f5d8c24da00"/76, @ANYRES32=r5, @ANYBLOB="620000009eb300002e2f66696c653000"]) (async) r6 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) (async) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000015c0)) (async) r7 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r7, 0x0, 0x2b6c, 0x7}}}, 0x90) (async) getresuid(&(0x7f00000013c0), &(0x7f0000001400)=0x0, &(0x7f0000001440)) bind$isdn_base(r6, &(0x7f0000001580)={0x22, 0x7, 0x7f, 0xfe, 0x7}, 0x6) (async) mount$fuse(0x0, &(0x7f0000001200)='./file0\x00', &(0x7f0000001380), 0x102c0a0, &(0x7f0000001480)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other}], [{@fsname={'fsname', 0x3d, 'port1\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, './binderfs/binder1\x00'}}, {@hash}, {@fowner_gt={'fowner>', r8}}]}}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, &(0x7f0000002140)=""/4096, 0x1000, 0x1, &(0x7f0000000100)=""/54, 0xfffffffffffffe63}, &(0x7f00000000c0)=0x40) 23:33:08 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6da9, 0x440000) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x7) clock_gettime(0x1, &(0x7f0000000140)) 23:33:08 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x2, 0x80) ioctl$FLOPPY_FDFMTTRK(r0, 0x400c0248, &(0x7f0000000300)={0x401, 0x6, 0x10000}) clock_gettime(0x1, &(0x7f0000000140)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) clock_getres(0x1, &(0x7f0000000040)) ioctl$FLOPPY_FDRAWCMD(r0, 0x258, &(0x7f0000000400)={0x800, &(0x7f0000000340)="001b1584e7c81af600ab4b376d23927ca2dcc84d83d48fae90ded5105e5968adefa5441925dcd7f5d5ed6804b2a9acb1b340113e0895a539d1901274301a567a9594dac736714e10508b05cbe601180c66ff3df39d57d46adf7f18aafc881c3a1e", &(0x7f00000003c0)=0x1f, 0x0, 0x61, 0x0, 0x0, 0x0, 0x7b, "9ba95fc63c688018349eaea4381e8d61", 0x0, '\x00', 0x3f9}) socket$inet6_udplite(0xa, 0x2, 0x88) clock_getres(0x2, &(0x7f0000000280)) 23:33:08 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000890000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001ac2e7332c2db50000000000000000000000000000000000000000000000000035922f013bdf9e6b000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000085b7a3ef2a46227d7a76af4730db0d9f0ecb7f76a95f4fda94b3277e4324ac4deb8c035fd5c3a3bfac4e3b534bfa78d137a630bbafc5408783cc1a5fe32ea038d1680380f9f6fb183a86e44547c6276ee832cf0001333a650077c09e733cf1e1a2cc3df699d110a2bd92949da96c805155247898301495fa58205b2e7b7d"]) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x3) 23:33:08 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6da9, 0x440000) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x7) (async, rerun: 64) clock_gettime(0x1, &(0x7f0000000140)) (rerun: 64) 23:33:08 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x2, 0x80) ioctl$FLOPPY_FDFMTTRK(r0, 0x400c0248, &(0x7f0000000300)={0x401, 0x6, 0x10000}) clock_gettime(0x1, &(0x7f0000000140)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) clock_getres(0x1, &(0x7f0000000040)) ioctl$FLOPPY_FDRAWCMD(r0, 0x258, &(0x7f0000000400)={0x800, &(0x7f0000000340)="001b1584e7c81af600ab4b376d23927ca2dcc84d83d48fae90ded5105e5968adefa5441925dcd7f5d5ed6804b2a9acb1b340113e0895a539d1901274301a567a9594dac736714e10508b05cbe601180c66ff3df39d57d46adf7f18aafc881c3a1e", &(0x7f00000003c0)=0x1f, 0x0, 0x61, 0x0, 0x0, 0x0, 0x7b, "9ba95fc63c688018349eaea4381e8d61", 0x0, '\x00', 0x3f9}) clock_getres(0x2, &(0x7f0000000280)) 23:33:08 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) 23:33:08 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6da9, 0x440000) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x7) clock_gettime(0x1, &(0x7f0000000140)) syz_open_dev$vcsa(&(0x7f0000000000), 0x6da9, 0x440000) (async) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x7) (async) clock_gettime(0x1, &(0x7f0000000140)) (async) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x4) 23:33:08 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x2, 0x80) ioctl$FLOPPY_FDFMTTRK(r0, 0x400c0248, &(0x7f0000000300)={0x401, 0x6, 0x10000}) clock_gettime(0x1, &(0x7f0000000140)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) clock_getres(0x1, &(0x7f0000000040)) clock_getres(0x2, &(0x7f0000000280)) 23:33:08 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x5) 23:33:08 executing program 2: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x30, 0x4, 0x0, {0x3, 0x1b, 0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x30) clock_gettime(0x4, &(0x7f0000000140)) 23:33:08 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x2, 0x80) ioctl$FLOPPY_FDFMTTRK(r0, 0x400c0248, &(0x7f0000000300)={0x401, 0x6, 0x10000}) clock_gettime(0x1, &(0x7f0000000140)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) clock_getres(0x2, &(0x7f0000000280)) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x6) 23:33:08 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x45c0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) 23:33:08 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x2, 0x80) ioctl$FLOPPY_FDFMTTRK(r0, 0x400c0248, &(0x7f0000000300)={0x401, 0x6, 0x10000}) clock_gettime(0x1, &(0x7f0000000140)) clock_getres(0x2, &(0x7f0000000280)) 23:33:08 executing program 2: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x30, 0x4, 0x0, {0x3, 0x1b, 0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x30) (async) clock_gettime(0x4, &(0x7f0000000140)) 23:33:08 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x2, 0x80) ioctl$FLOPPY_FDFMTTRK(r0, 0x400c0248, &(0x7f0000000300)={0x401, 0x6, 0x10000}) clock_getres(0x2, &(0x7f0000000280)) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x7) 23:33:08 executing program 2: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x30, 0x4, 0x0, {0x3, 0x1b, 0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x30) clock_gettime(0x4, &(0x7f0000000140)) (async) clock_gettime(0x4, &(0x7f0000000140)) 23:33:08 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x45c0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x45c0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) 23:33:08 executing program 1: syz_open_dev$vcsa(&(0x7f00000002c0), 0x2, 0x80) clock_getres(0x2, &(0x7f0000000280)) 23:33:08 executing program 2: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) ioctl$FLOPPY_FDSETDRVPRM(0xffffffffffffffff, 0x40800290, &(0x7f0000000040)={0x9, 0x9, 0x1, 0x0, 0xfffffffffffffff8, 0x6, 0x4, 0xd0, 0x6, 0x6, 0x6, 0x1, 0x81, {0x5, 0x0, 0x4, 0x1, 0xc9}, 0xd4, 0x7f, [0xfffc, 0x7, 0x8, 0x1, 0xbc, 0x8, 0x2, 0x6], 0x80, 0x29a}) clock_gettime(0x1, &(0x7f0000000140)) clock_gettime(0x6, &(0x7f0000000000)) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x8) 23:33:08 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x45c0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x9) 23:33:08 executing program 2: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) ioctl$FLOPPY_FDSETDRVPRM(0xffffffffffffffff, 0x40800290, &(0x7f0000000040)={0x9, 0x9, 0x1, 0x0, 0xfffffffffffffff8, 0x6, 0x4, 0xd0, 0x6, 0x6, 0x6, 0x1, 0x81, {0x5, 0x0, 0x4, 0x1, 0xc9}, 0xd4, 0x7f, [0xfffc, 0x7, 0x8, 0x1, 0xbc, 0x8, 0x2, 0x6], 0x80, 0x29a}) clock_gettime(0x1, &(0x7f0000000140)) clock_gettime(0x6, &(0x7f0000000000)) 23:33:08 executing program 1: clock_getres(0x2, &(0x7f0000000280)) 23:33:08 executing program 0: mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x5) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r0, 0xc008af7b, &(0x7f0000000100)={0x0, 0xffffffe1}) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000080)=[{'IGAIN', @void}, {'LINE', @val={' \'', 'Master Playback Switch'}}, {'LINE', @void}, {'IMIX', @val={' \'', 'Line Capture'}}, {'LINE2', @void}], 0x6d) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000140), 0x90000, 0x0) ioctl$FLOPPY_FDGETDRVPRM(r1, 0x80800211, &(0x7f0000000180)) syz_open_dev$floppy(&(0x7f0000000040), 0x7ff, 0x40000) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xa) 23:33:08 executing program 1: clock_getres(0x0, &(0x7f0000000280)) 23:33:08 executing program 2: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) ioctl$FLOPPY_FDSETDRVPRM(0xffffffffffffffff, 0x40800290, &(0x7f0000000040)={0x9, 0x9, 0x1, 0x0, 0xfffffffffffffff8, 0x6, 0x4, 0xd0, 0x6, 0x6, 0x6, 0x1, 0x81, {0x5, 0x0, 0x4, 0x1, 0xc9}, 0xd4, 0x7f, [0xfffc, 0x7, 0x8, 0x1, 0xbc, 0x8, 0x2, 0x6], 0x80, 0x29a}) clock_gettime(0x1, &(0x7f0000000140)) clock_gettime(0x6, &(0x7f0000000000)) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) (async) ioctl$FLOPPY_FDSETDRVPRM(0xffffffffffffffff, 0x40800290, &(0x7f0000000040)={0x9, 0x9, 0x1, 0x0, 0xfffffffffffffff8, 0x6, 0x4, 0xd0, 0x6, 0x6, 0x6, 0x1, 0x81, {0x5, 0x0, 0x4, 0x1, 0xc9}, 0xd4, 0x7f, [0xfffc, 0x7, 0x8, 0x1, 0xbc, 0x8, 0x2, 0x6], 0x80, 0x29a}) (async) clock_gettime(0x1, &(0x7f0000000140)) (async) clock_gettime(0x6, &(0x7f0000000000)) (async) 23:33:08 executing program 0: mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x5) (async) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ioctl$VHOST_VDPA_GET_VRING_GROUP(r0, 0xc008af7b, &(0x7f0000000100)={0x0, 0xffffffe1}) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000080)=[{'IGAIN', @void}, {'LINE', @val={' \'', 'Master Playback Switch'}}, {'LINE', @void}, {'IMIX', @val={' \'', 'Line Capture'}}, {'LINE2', @void}], 0x6d) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000140), 0x90000, 0x0) ioctl$FLOPPY_FDGETDRVPRM(r1, 0x80800211, &(0x7f0000000180)) syz_open_dev$floppy(&(0x7f0000000040), 0x7ff, 0x40000) (async) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xd) 23:33:08 executing program 1: clock_getres(0x0, &(0x7f0000000280)) 23:33:08 executing program 2: clock_gettime(0x3, &(0x7f0000000140)) clock_getres(0x2, &(0x7f0000000000)) 23:33:08 executing program 0: mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x5) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r0, 0xc008af7b, &(0x7f0000000100)={0x0, 0xffffffe1}) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000080)=[{'IGAIN', @void}, {'LINE', @val={' \'', 'Master Playback Switch'}}, {'LINE', @void}, {'IMIX', @val={' \'', 'Line Capture'}}, {'LINE2', @void}], 0x6d) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000140), 0x90000, 0x0) ioctl$FLOPPY_FDGETDRVPRM(r1, 0x80800211, &(0x7f0000000180)) syz_open_dev$floppy(&(0x7f0000000040), 0x7ff, 0x40000) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x5) (async) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ioctl$VHOST_VDPA_GET_VRING_GROUP(r0, 0xc008af7b, &(0x7f0000000100)={0x0, 0xffffffe1}) (async) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000080)=[{'IGAIN', @void}, {'LINE', @val={' \'', 'Master Playback Switch'}}, {'LINE', @void}, {'IMIX', @val={' \'', 'Line Capture'}}, {'LINE2', @void}], 0x6d) (async) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000140), 0x90000, 0x0) (async) ioctl$FLOPPY_FDGETDRVPRM(r1, 0x80800211, &(0x7f0000000180)) (async) syz_open_dev$floppy(&(0x7f0000000040), 0x7ff, 0x40000) (async) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xe) 23:33:08 executing program 1: clock_getres(0x0, &(0x7f0000000280)) 23:33:08 executing program 2: clock_gettime(0x3, &(0x7f0000000140)) (async) clock_getres(0x2, &(0x7f0000000000)) 23:33:08 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$FLOPPY_FDGETDRVSTAT(r2, 0x80500212, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xf) 23:33:08 executing program 1: clock_getres(0x2, 0x0) 23:33:08 executing program 2: clock_gettime(0x3, &(0x7f0000000140)) (async) clock_getres(0x2, &(0x7f0000000000)) 23:33:08 executing program 0: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$FLOPPY_FDGETDRVSTAT(r2, 0x80500212, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x21) 23:33:08 executing program 1: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) ioctl$FLOPPY_FDSETDRVPRM(0xffffffffffffffff, 0x40800290, &(0x7f0000000040)={0x9, 0x9, 0x1, 0x0, 0xfffffffffffffff8, 0x6, 0x4, 0xd0, 0x6, 0x6, 0x6, 0x1, 0x81, {0x5, 0x0, 0x4, 0x1, 0xc9}, 0xd4, 0x7f, [0xfffc, 0x7, 0x8, 0x1, 0xbc, 0x8, 0x2, 0x6], 0x80, 0x29a}) clock_gettime(0x1, &(0x7f0000000140)) clock_gettime(0x6, &(0x7f0000000000)) 23:33:08 executing program 2: clock_gettime(0x5, &(0x7f0000000140)) 23:33:08 executing program 1: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) ioctl$FLOPPY_FDSETDRVPRM(0xffffffffffffffff, 0x40800290, &(0x7f0000000040)={0x9, 0x9, 0x1, 0x0, 0xfffffffffffffff8, 0x6, 0x4, 0xd0, 0x6, 0x6, 0x6, 0x1, 0x81, {0x5, 0x0, 0x4, 0x1, 0xc9}, 0xd4, 0x7f, [0xfffc, 0x7, 0x8, 0x1, 0xbc, 0x8, 0x2, 0x6], 0x80, 0x29a}) clock_gettime(0x1, &(0x7f0000000140)) clock_gettime(0x6, &(0x7f0000000000)) 23:33:08 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) ioctl$FLOPPY_FDGETDRVSTAT(r2, 0x80500212, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x300) 23:33:08 executing program 2: clock_gettime(0x5, &(0x7f0000000140)) 23:33:08 executing program 1: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) ioctl$FLOPPY_FDSETDRVPRM(0xffffffffffffffff, 0x40800290, &(0x7f0000000040)={0x9, 0x9, 0x1, 0x0, 0xfffffffffffffff8, 0x6, 0x4, 0xd0, 0x6, 0x6, 0x6, 0x1, 0x81, {0x5, 0x0, 0x4, 0x1, 0xc9}, 0xd4, 0x7f, [0xfffc, 0x7, 0x8, 0x1, 0xbc, 0x8, 0x2, 0x6], 0x80, 0x29a}) clock_gettime(0x1, &(0x7f0000000140)) clock_gettime(0x6, &(0x7f0000000000)) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x500) 23:33:08 executing program 0: ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000040)=0x1) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 23:33:08 executing program 2: clock_gettime(0x5, &(0x7f0000000140)) 23:33:08 executing program 0: ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000040)=0x1) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000040)=0x1) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 23:33:08 executing program 1: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) ioctl$FLOPPY_FDSETDRVPRM(0xffffffffffffffff, 0x40800290, &(0x7f0000000040)={0x9, 0x9, 0x1, 0x0, 0xfffffffffffffff8, 0x6, 0x4, 0xd0, 0x6, 0x6, 0x6, 0x1, 0x81, {0x5, 0x0, 0x4, 0x1, 0xc9}, 0xd4, 0x7f, [0xfffc, 0x7, 0x8, 0x1, 0xbc, 0x8, 0x2, 0x6], 0x80, 0x29a}) clock_gettime(0x6, &(0x7f0000000000)) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x600) 23:33:08 executing program 2: ioctl$FLOPPY_FDFMTBEG(0xffffffffffffffff, 0x247) clock_gettime(0x1, &(0x7f0000000140)) clock_gettime(0x1, &(0x7f00000001c0)) pselect6(0x40, &(0x7f0000000200)={0x167, 0x0, 0x0, 0x100000001, 0x5, 0x95, 0xfffffffffffffffe, 0x101}, &(0x7f0000000240)={0x1000, 0x0, 0x7, 0x7, 0x8, 0x401, 0x2, 0x2b30}, &(0x7f0000000280)={0x7fffffffffffffff, 0x5ac7, 0x1000, 0x89, 0xae, 0x5, 0x9, 0x8000000000000001}, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300)={[0x81]}, 0x8}) 23:33:08 executing program 0: ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000040)=0x1) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x700) 23:33:08 executing program 2: ioctl$FLOPPY_FDFMTBEG(0xffffffffffffffff, 0x247) (async) clock_gettime(0x1, &(0x7f0000000140)) (async) clock_gettime(0x1, &(0x7f00000001c0)) pselect6(0x40, &(0x7f0000000200)={0x167, 0x0, 0x0, 0x100000001, 0x5, 0x95, 0xfffffffffffffffe, 0x101}, &(0x7f0000000240)={0x1000, 0x0, 0x7, 0x7, 0x8, 0x401, 0x2, 0x2b30}, &(0x7f0000000280)={0x7fffffffffffffff, 0x5ac7, 0x1000, 0x89, 0xae, 0x5, 0x9, 0x8000000000000001}, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300)={[0x81]}, 0x8}) 23:33:08 executing program 1: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) clock_gettime(0x6, &(0x7f0000000000)) 23:33:08 executing program 1: clock_gettime(0x6, &(0x7f0000000000)) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x900) 23:33:08 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000040)=0x1) 23:33:08 executing program 2: ioctl$FLOPPY_FDFMTBEG(0xffffffffffffffff, 0x247) (async) clock_gettime(0x1, &(0x7f0000000140)) clock_gettime(0x1, &(0x7f00000001c0)) (async) pselect6(0x40, &(0x7f0000000200)={0x167, 0x0, 0x0, 0x100000001, 0x5, 0x95, 0xfffffffffffffffe, 0x101}, &(0x7f0000000240)={0x1000, 0x0, 0x7, 0x7, 0x8, 0x401, 0x2, 0x2b30}, &(0x7f0000000280)={0x7fffffffffffffff, 0x5ac7, 0x1000, 0x89, 0xae, 0x5, 0x9, 0x8000000000000001}, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300)={[0x81]}, 0x8}) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xa00) 23:33:08 executing program 1: clock_gettime(0x0, &(0x7f0000000000)) 23:33:08 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0xffffffffffffffff, 0x408800) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="21000000030000000700"/33], 0x21) clock_gettime(0x1, &(0x7f0000000000)) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f00000000c0)={@any, 0x8}) 23:33:08 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) r1 = socket$rxrpc(0x21, 0x2, 0x2) (rerun: 32) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000040)=0x1) 23:33:08 executing program 1: clock_gettime(0x0, &(0x7f0000000000)) 23:33:08 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0xffffffffffffffff, 0x408800) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="21000000030000000700"/33], 0x21) (async) clock_gettime(0x1, &(0x7f0000000000)) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f00000000c0)={@any, 0x8}) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xd00) 23:33:08 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000040)=0x1) 23:33:08 executing program 1: clock_gettime(0x0, &(0x7f0000000000)) 23:33:08 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0xffffffffffffffff, 0x408800) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="21000000030000000700"/33], 0x21) (async, rerun: 32) clock_gettime(0x1, &(0x7f0000000000)) (async, rerun: 32) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f00000000c0)={@any, 0x8}) 23:33:08 executing program 0: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x199701, 0x0) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000040)=""/95) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r1, 0x40046103, &(0x7f0000000140)={0x2, 0x3, 0x7fffffff, 0xff, 0x41, 0x80, 0x5, 0xc1, 0x0, 0x3f, 0x1, "caa83c226c929c5e439c7712ab28abfc4ff2a3f7dda2b54ab8a9bd50ba597287"}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x1) r2 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x2400c0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100)={0x1, 0x49}, 0x2) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xe00) 23:33:08 executing program 1: clock_gettime(0x6, 0x0) 23:33:08 executing program 0: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x199701, 0x0) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000040)=""/95) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) ioctl$IOCTL_STATUS_ACCEL_DEV(r1, 0x40046103, &(0x7f0000000140)={0x2, 0x3, 0x7fffffff, 0xff, 0x41, 0x80, 0x5, 0xc1, 0x0, 0x3f, 0x1, "caa83c226c929c5e439c7712ab28abfc4ff2a3f7dda2b54ab8a9bd50ba597287"}) (async, rerun: 64) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x1) (async, rerun: 64) r2 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x2400c0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100)={0x1, 0x49}, 0x2) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xf00) 23:33:08 executing program 2: clock_gettime(0x1, &(0x7f0000000000)) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x800000) 23:33:08 executing program 1: clock_gettime(0x6, 0x0) 23:33:08 executing program 0: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x199701, 0x0) (async, rerun: 32) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000040)=""/95) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) ioctl$IOCTL_STATUS_ACCEL_DEV(r1, 0x40046103, &(0x7f0000000140)={0x2, 0x3, 0x7fffffff, 0xff, 0x41, 0x80, 0x5, 0xc1, 0x0, 0x3f, 0x1, "caa83c226c929c5e439c7712ab28abfc4ff2a3f7dda2b54ab8a9bd50ba597287"}) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x1) r2 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x2400c0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100)={0x1, 0x49}, 0x2) 23:33:08 executing program 2: clock_gettime(0x1, &(0x7f0000000000)) 23:33:08 executing program 1: clock_gettime(0x6, 0x0) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xc0ff20) 23:33:08 executing program 2: clock_gettime(0x1, &(0x7f0000000000)) 23:33:08 executing program 0: r0 = inotify_init() ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x1, 0x5, 0x3}) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000080)=[{'PHONEIN', @void}], 0x8) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r1, 0x0) 23:33:08 executing program 1: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) ioctl$FLOPPY_FDSETDRVPRM(0xffffffffffffffff, 0x40800290, &(0x7f0000000040)={0x9, 0x9, 0x1, 0x0, 0xfffffffffffffff8, 0x6, 0x4, 0xd0, 0x6, 0x6, 0x6, 0x1, 0x81, {0x5, 0x0, 0x4, 0x1, 0xc9}, 0xd4, 0x7f, [0xfffc, 0x7, 0x8, 0x1, 0xbc, 0x8, 0x2, 0x6], 0x80, 0x29a}) clock_gettime(0x6, &(0x7f0000000000)) 23:33:08 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x1000000) 23:33:08 executing program 1: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) ioctl$FLOPPY_FDSETDRVPRM(0xffffffffffffffff, 0x40800290, &(0x7f0000000040)={0x9, 0x9, 0x1, 0x0, 0xfffffffffffffff8, 0x6, 0x4, 0xd0, 0x6, 0x6, 0x6, 0x1, 0x81, {0x5, 0x0, 0x4, 0x1, 0xc9}, 0xd4, 0x7f, [0xfffc, 0x7, 0x8, 0x1, 0xbc, 0x8, 0x2, 0x6], 0x80, 0x29a}) clock_gettime(0x6, &(0x7f0000000000)) 23:33:08 executing program 0: r0 = inotify_init() ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x1, 0x5, 0x3}) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000080)=[{'PHONEIN', @void}], 0x8) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r1, 0x0) inotify_init() (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x1, 0x5, 0x3}) (async) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000080)=[{'PHONEIN', @void}], 0x8) (async) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r1, 0x0) (async) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x2000000) 23:33:08 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) clock_gettime(0x1, &(0x7f0000000140)) (async) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) (async) 23:33:08 executing program 1: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) ioctl$FLOPPY_FDSETDRVPRM(0xffffffffffffffff, 0x40800290, &(0x7f0000000040)={0x9, 0x9, 0x1, 0x0, 0xfffffffffffffff8, 0x6, 0x4, 0xd0, 0x6, 0x6, 0x6, 0x1, 0x81, {0x5, 0x0, 0x4, 0x1, 0xc9}, 0xd4, 0x7f, [0xfffc, 0x7, 0x8, 0x1, 0xbc, 0x8, 0x2, 0x6], 0x80, 0x29a}) clock_gettime(0x6, &(0x7f0000000000)) 23:33:08 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x3000000) 23:33:08 executing program 0: r0 = inotify_init() ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x1, 0x5, 0x3}) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000080)=[{'PHONEIN', @void}], 0x8) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r1, 0x0) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x4000000) 23:33:08 executing program 1: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) clock_gettime(0x6, &(0x7f0000000000)) 23:33:08 executing program 2: bind$isdn_base(0xffffffffffffffff, &(0x7f0000000000)={0x22, 0x5, 0x6, 0x8, 0x1f}, 0x6) clock_gettime(0x1, &(0x7f0000000140)) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r2, 0x0, 0x2b6c, 0x7}}}, 0x90) r3 = geteuid() r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, 0x0) finit_module(r4, &(0x7f00000002c0)='access=client', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1010, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=fscache,dfltgid=', @ANYRESHEX, @ANYBLOB="2c70726976706f72742c63616368653d6c6f6f73652c76657273696f6e3d3977323030302e4c2c6163636573733d632cb790777612b87acc65686d61702c6d61836b3d4d4159415050454e442c666f776e65723e", @ANYRESDEC=r2, @ANYBLOB=',fowner>', @ANYRESDEC=r3, @ANYBLOB=',permit_directio,uid>', @ANYRESDEC=0xee01, @ANYBLOB=',hash,\x00']) 23:33:08 executing program 0: getitimer(0x1, &(0x7f00000000c0)) ioctl$FLOPPY_FDSETDRVPRM(0xffffffffffffffff, 0x40800290, &(0x7f0000000040)={0x9, 0x3, 0x7, 0xa47, 0x7, 0xf0a, 0x7, 0x14, 0x1, 0x3f, 0x3, 0x8, 0x0, {0x5, 0x6, 0x6, 0x80000000, 0x8}, 0x112, 0x7f, [0x3, 0x9, 0x81, 0x2, 0x40, 0x8, 0x7f, 0x7fff], 0x6, 0x9}) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) 23:33:08 executing program 1: clock_gettime(0x6, &(0x7f0000000000)) [ 740.421861][T10764] binder: 10761:10764 ioctl 4018f50b 0 returned -22 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x5000000) 23:33:08 executing program 0: getitimer(0x1, &(0x7f00000000c0)) ioctl$FLOPPY_FDSETDRVPRM(0xffffffffffffffff, 0x40800290, &(0x7f0000000040)={0x9, 0x3, 0x7, 0xa47, 0x7, 0xf0a, 0x7, 0x14, 0x1, 0x3f, 0x3, 0x8, 0x0, {0x5, 0x6, 0x6, 0x80000000, 0x8}, 0x112, 0x7f, [0x3, 0x9, 0x81, 0x2, 0x40, 0x8, 0x7f, 0x7fff], 0x6, 0x9}) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) getitimer(0x1, &(0x7f00000000c0)) (async) ioctl$FLOPPY_FDSETDRVPRM(0xffffffffffffffff, 0x40800290, &(0x7f0000000040)={0x9, 0x3, 0x7, 0xa47, 0x7, 0xf0a, 0x7, 0x14, 0x1, 0x3f, 0x3, 0x8, 0x0, {0x5, 0x6, 0x6, 0x80000000, 0x8}, 0x112, 0x7f, [0x3, 0x9, 0x81, 0x2, 0x40, 0x8, 0x7f, 0x7fff], 0x6, 0x9}) (async) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) 23:33:08 executing program 2: bind$isdn_base(0xffffffffffffffff, &(0x7f0000000000)={0x22, 0x5, 0x6, 0x8, 0x1f}, 0x6) (async) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000000)={0x22, 0x5, 0x6, 0x8, 0x1f}, 0x6) clock_gettime(0x1, &(0x7f0000000140)) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) geteuid() (async) r2 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r2, 0x0, 0x2b6c, 0x7}}}, 0x90) geteuid() (async) r3 = geteuid() r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, 0x0) finit_module(r4, &(0x7f00000002c0)='access=client', 0x0) (async) finit_module(r4, &(0x7f00000002c0)='access=client', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1010, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=fscache,dfltgid=', @ANYRESHEX, @ANYBLOB="2c70726976706f72742c63616368653d6c6f6f73652c76657273696f6e3d3977323030302e4c2c6163636573733d632cb790777612b87acc65686d61702c6d61836b3d4d4159415050454e442c666f776e65723e", @ANYRESDEC=r2, @ANYBLOB=',fowner>', @ANYRESDEC=r3, @ANYBLOB=',permit_directio,uid>', @ANYRESDEC=0xee01, @ANYBLOB=',hash,\x00']) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x6000000) 23:33:08 executing program 0: getitimer(0x1, &(0x7f00000000c0)) ioctl$FLOPPY_FDSETDRVPRM(0xffffffffffffffff, 0x40800290, &(0x7f0000000040)={0x9, 0x3, 0x7, 0xa47, 0x7, 0xf0a, 0x7, 0x14, 0x1, 0x3f, 0x3, 0x8, 0x0, {0x5, 0x6, 0x6, 0x80000000, 0x8}, 0x112, 0x7f, [0x3, 0x9, 0x81, 0x2, 0x40, 0x8, 0x7f, 0x7fff], 0x6, 0x9}) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) getitimer(0x1, &(0x7f00000000c0)) (async) ioctl$FLOPPY_FDSETDRVPRM(0xffffffffffffffff, 0x40800290, &(0x7f0000000040)={0x9, 0x3, 0x7, 0xa47, 0x7, 0xf0a, 0x7, 0x14, 0x1, 0x3f, 0x3, 0x8, 0x0, {0x5, 0x6, 0x6, 0x80000000, 0x8}, 0x112, 0x7f, [0x3, 0x9, 0x81, 0x2, 0x40, 0x8, 0x7f, 0x7fff], 0x6, 0x9}) (async) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) [ 740.453308][T10776] binder: 10774:10776 ioctl 4018f50b 0 returned -22 23:33:08 executing program 1: clock_gettime(0x0, &(0x7f0000000000)) 23:33:08 executing program 2: bind$isdn_base(0xffffffffffffffff, &(0x7f0000000000)={0x22, 0x5, 0x6, 0x8, 0x1f}, 0x6) (async) clock_gettime(0x1, &(0x7f0000000140)) (async) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r2, 0x0, 0x2b6c, 0x7}}}, 0x90) r3 = geteuid() (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, 0x0) (async) finit_module(r4, &(0x7f00000002c0)='access=client', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1010, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=fscache,dfltgid=', @ANYRESHEX, @ANYBLOB="2c70726976706f72742c63616368653d6c6f6f73652c76657273696f6e3d3977323030302e4c2c6163636573733d632cb790777612b87acc65686d61702c6d61836b3d4d4159415050454e442c666f776e65723e", @ANYRESDEC=r2, @ANYBLOB=',fowner>', @ANYRESDEC=r3, @ANYBLOB=',permit_directio,uid>', @ANYRESDEC=0xee01, @ANYBLOB=',hash,\x00']) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x7000000) 23:33:08 executing program 1: clock_gettime(0x0, &(0x7f0000000000)) 23:33:08 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) r1 = geteuid() getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1010004, &(0x7f0000000180)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x8000000000000000}}], [{@uid_eq={'uid', 0x3d, r2}}, {@obj_type={'obj_type', 0x3d, ',\\-]$'}}]}}) [ 740.477419][T10786] binder: 10785:10786 ioctl 4018f50b 0 returned -22 23:33:08 executing program 1: clock_gettime(0x0, &(0x7f0000000000)) 23:33:08 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000000)=0x4) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x8000000) 23:33:08 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) r1 = geteuid() getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) (async) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1010004, &(0x7f0000000180)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x8000000000000000}}], [{@uid_eq={'uid', 0x3d, r2}}, {@obj_type={'obj_type', 0x3d, ',\\-]$'}}]}}) 23:33:08 executing program 1: clock_gettime(0x6, 0x0) [ 740.503279][T10799] binder: 10796:10799 ioctl 4018f50b 0 returned -22 [ 740.506500][T10799] binder: 10796:10799 ioctl 40049366 20000000 returned -22 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x9000000) 23:33:08 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) r1 = geteuid() getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1010004, &(0x7f0000000180)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x8000000000000000}}], [{@uid_eq={'uid', 0x3d, r2}}, {@obj_type={'obj_type', 0x3d, ',\\-]$'}}]}}) 23:33:08 executing program 1: clock_gettime(0x6, 0x0) 23:33:08 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000000)=0x4) 23:33:08 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000040)=0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x4, 0x0) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000301, 0xee01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r1, 0x0) 23:33:08 executing program 1: clock_gettime(0x6, 0x0) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xa000000) [ 740.534149][T10811] binder: 10810:10811 ioctl 4018f50b 0 returned -22 [ 740.537406][T10811] binder: 10810:10811 ioctl 40049366 20000000 returned -22 [ 740.538662][T10815] binder: 10813:10815 ioctl 4018f50b 0 returned -22 [ 740.544579][T10815] binder: 10813:10815 ioctl 40049366 20000040 returned -22 23:33:08 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000000)=0x4) 23:33:08 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x1000000) [ 740.558518][T10821] binder: 10819:10821 ioctl 4018f50b 0 returned -22 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xd000000) 23:33:08 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000040)=0x2) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x4, 0x0) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (rerun: 64) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000301, 0xee01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r1, 0x0) [ 740.563045][T10821] binder: 10819:10821 ioctl 40049366 20000000 returned -22 23:33:08 executing program 1: clock_gettime(0x2, &(0x7f0000000040)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x252002) [ 740.570640][T10828] binder: 10825:10828 ioctl 4018f50b 0 returned -22 23:33:08 executing program 2: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "82bec446a38f8157", "4b3e8fa1492b913648b84d568973264a", "02d96b85", "f0633502f3c5b8fa"}, 0x28) clock_gettime(0x1, &(0x7f0000000140)) [ 740.574744][T10827] binder: 10825:10827 ioctl 40049366 20000040 returned -22 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xe000000) 23:33:08 executing program 1: clock_gettime(0x2, &(0x7f0000000040)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x252002) 23:33:08 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000040)=0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x4, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x4, 0x0) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000301, 0xee01, 0x0) (async) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000301, 0xee01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r1, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r1, 0x0) 23:33:08 executing program 2: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "82bec446a38f8157", "4b3e8fa1492b913648b84d568973264a", "02d96b85", "f0633502f3c5b8fa"}, 0x28) clock_gettime(0x1, &(0x7f0000000140)) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xf000000) [ 740.606339][T10839] binder: 10837:10839 ioctl 4018f50b 0 returned -22 [ 740.609194][T10839] binder: 10837:10839 ioctl 40049366 20000040 returned -22 23:33:08 executing program 1: clock_gettime(0x2, &(0x7f0000000040)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x252002) 23:33:08 executing program 2: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "82bec446a38f8157", "4b3e8fa1492b913648b84d568973264a", "02d96b85", "f0633502f3c5b8fa"}, 0x28) clock_gettime(0x1, &(0x7f0000000140)) 23:33:08 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000080)={{r0}, "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"}) openat$pmem0(0xffffffffffffff9c, &(0x7f0000001080), 0x4000, 0x0) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x1fffefff) 23:33:08 executing program 1: clock_gettime(0x2, &(0x7f0000000040)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x252002) 23:33:08 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000240)=&(0x7f0000000200)) pselect6(0x40, &(0x7f0000000000)={0x8, 0x9, 0x7, 0x9, 0x8000000000000001, 0x7, 0x4, 0xfffffffffffffac9}, &(0x7f0000000040)={0x7, 0x5, 0x8, 0x10000, 0x9, 0xfffffffffffffffa, 0xfff, 0xb3e9}, &(0x7f0000000080)={0x7fffffff, 0x80, 0x8000, 0x5, 0x5, 0xdd, 0x1}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x7fffffffffffffff]}, 0x8}) 23:33:08 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000080)={{r0}, "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"}) (async, rerun: 32) openat$pmem0(0xffffffffffffff9c, &(0x7f0000001080), 0x4000, 0x0) 23:33:08 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000240)=&(0x7f0000000200)) (async) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000240)=&(0x7f0000000200)) pselect6(0x40, &(0x7f0000000000)={0x8, 0x9, 0x7, 0x9, 0x8000000000000001, 0x7, 0x4, 0xfffffffffffffac9}, &(0x7f0000000040)={0x7, 0x5, 0x8, 0x10000, 0x9, 0xfffffffffffffffa, 0xfff, 0xb3e9}, &(0x7f0000000080)={0x7fffffff, 0x80, 0x8000, 0x5, 0x5, 0xdd, 0x1}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x7fffffffffffffff]}, 0x8}) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x1fffffff) 23:33:08 executing program 1: clock_gettime(0x2, &(0x7f0000000040)) 23:33:08 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000240)=&(0x7f0000000200)) pselect6(0x40, &(0x7f0000000000)={0x8, 0x9, 0x7, 0x9, 0x8000000000000001, 0x7, 0x4, 0xfffffffffffffac9}, &(0x7f0000000040)={0x7, 0x5, 0x8, 0x10000, 0x9, 0xfffffffffffffffa, 0xfff, 0xb3e9}, &(0x7f0000000080)={0x7fffffff, 0x80, 0x8000, 0x5, 0x5, 0xdd, 0x1}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x7fffffffffffffff]}, 0x8}) (async) pselect6(0x40, &(0x7f0000000000)={0x8, 0x9, 0x7, 0x9, 0x8000000000000001, 0x7, 0x4, 0xfffffffffffffac9}, &(0x7f0000000040)={0x7, 0x5, 0x8, 0x10000, 0x9, 0xfffffffffffffffa, 0xfff, 0xb3e9}, &(0x7f0000000080)={0x7fffffff, 0x80, 0x8000, 0x5, 0x5, 0xdd, 0x1}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x7fffffffffffffff]}, 0x8}) 23:33:08 executing program 1: clock_gettime(0x0, &(0x7f0000000040)) 23:33:08 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000080)={{r0}, "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"}) openat$pmem0(0xffffffffffffff9c, &(0x7f0000001080), 0x4000, 0x0) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x20ffbfff) 23:33:08 executing program 1: clock_gettime(0x0, &(0x7f0000000040)) 23:33:08 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0)={0x0, 0xff}, 0x2) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x6, 0x299c8362, 0x1}}, 0x28) r2 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r2, 0x0, 0x2b6c, 0x7}}}, 0x90) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, r2, 0x0) clock_gettime(0x4, &(0x7f0000000000)) 23:33:08 executing program 0: ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000040)={0x99, 'syz0\x00'}) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) 23:33:08 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0)={0x0, 0xff}, 0x2) (async) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x6, 0x299c8362, 0x1}}, 0x28) (async) r2 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r2, 0x0, 0x2b6c, 0x7}}}, 0x90) (async) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, r2, 0x0) (async) clock_gettime(0x4, &(0x7f0000000000)) 23:33:08 executing program 1: clock_gettime(0x0, &(0x7f0000000040)) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x20ffc000) 23:33:08 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async, rerun: 32) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0)={0x0, 0xff}, 0x2) (async) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x6, 0x299c8362, 0x1}}, 0x28) (async, rerun: 64) r2 = geteuid() (rerun: 64) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r2, 0x0, 0x2b6c, 0x7}}}, 0x90) (async) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, r2, 0x0) clock_gettime(0x4, &(0x7f0000000000)) 23:33:08 executing program 0: ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000040)={0x99, 'syz0\x00'}) (async) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) 23:33:08 executing program 1: clock_gettime(0x2, 0x0) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x20ffffff) 23:33:08 executing program 0: ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000040)={0x99, 'syz0\x00'}) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000040)={0x99, 'syz0\x00'}) (async) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) 23:33:08 executing program 1: clock_gettime(0x2, 0x0) 23:33:08 executing program 2: ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) clock_gettime(0x1, &(0x7f0000000140)) 23:33:08 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x21000000) 23:33:08 executing program 1: clock_gettime(0x2, 0x0) 23:33:08 executing program 0: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0x1, &(0x7f0000000040)="e27496adbbbd4d3604127b1ccdc0762ef08c7b157ad84a8f97bf0779736543ef136d89dd5e7bc41f33ec0bb205f22dbbfec36c63ca25f49b5bfeff0e42303b25c24c0738e079726d24b3", &(0x7f00000000c0)=@udp6, 0x4}, 0x20) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) 23:33:09 executing program 2: ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) (async) clock_gettime(0x1, &(0x7f0000000140)) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x21000fff) 23:33:09 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x20ffc000) 23:33:09 executing program 0: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0x1, &(0x7f0000000040)="e27496adbbbd4d3604127b1ccdc0762ef08c7b157ad84a8f97bf0779736543ef136d89dd5e7bc41f33ec0bb205f22dbbfec36c63ca25f49b5bfeff0e42303b25c24c0738e079726d24b3", &(0x7f00000000c0)=@udp6, 0x4}, 0x20) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0x1, &(0x7f0000000040)="e27496adbbbd4d3604127b1ccdc0762ef08c7b157ad84a8f97bf0779736543ef136d89dd5e7bc41f33ec0bb205f22dbbfec36c63ca25f49b5bfeff0e42303b25c24c0738e079726d24b3", &(0x7f00000000c0)=@udp6, 0x4}, 0x20) (async) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) 23:33:09 executing program 1: clock_gettime(0x5, &(0x7f0000000140)) 23:33:09 executing program 2: ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) clock_gettime(0x1, &(0x7f0000000140)) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) (async) clock_gettime(0x1, &(0x7f0000000140)) (async) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xff0f0021) 23:33:09 executing program 0: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0x1, &(0x7f0000000040)="e27496adbbbd4d3604127b1ccdc0762ef08c7b157ad84a8f97bf0779736543ef136d89dd5e7bc41f33ec0bb205f22dbbfec36c63ca25f49b5bfeff0e42303b25c24c0738e079726d24b3", &(0x7f00000000c0)=@udp6, 0x4}, 0x20) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) 23:33:09 executing program 1: clock_gettime(0x5, &(0x7f0000000140)) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xffbfff20) 23:33:09 executing program 0: getpgrp(0xffffffffffffffff) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r1, 0x0, 0x2b6c, 0x7}}}, 0x90) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, r1, 0x0) pipe2$9p(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f00000011c0)={{r3}, "6911b4c5a433295f2a8f5d6d33499b406b2ebfa11db9c2c94940c83e62936051df72d90f3cc5a90d8ce6935e7d2bb94c63a2c2101051f30560cd22b43cdff02d957e28a0865ca67a66f43048d93ce9983fec1a10521bb5d9ecd571096bf45190652c519a6f8bde09390ea322eabadef82cf9ec0769c91e760230421324487f4282797a1b66c820320096407b46fe5de81f52a809f4d7a1ab287dd2f8d97f1a32117a3fcceeeaec9cf7d5d8c15abfa359947064243082a1f56de0d290f642ef3259c7f32cddd73b81d225d5c58864572224fda2b906b1e1051faf907ca3780bd8b17286f1a5c1c89fe50347ecf32743b0f09557c45946626a9a3017542d0ce107fb9e2482d835e61175078a24faac85793a1ef6ae1d2917a001c50ca95cde9e61b0bb07259d9537b7b491bddc8fcbc4523f8a94de4b6b7f2127ce1df441c7af1719d8cb23011338636bcde9435ca3ac56d60b85c9da68acec677a18f1c41949edc86305b15daf9986519b72ba8a50370e6d9e27ca806e534d8155616564738531af512e47283dae60091d67799f673e35d8b24fe6868b0fd0574cbc5f69887c1c42966dcd8e3334b3214db45607f37fa72d096d57398983551e15e35c617d0cb4b008ede1160e55e7ee0b73bf0fb8e8776fcf30a3547c73e5e711f17ed3cd2d50359760999fadbaff4986c241bc2783097f567a7a56743ba10650763d678ccce0b3135c74bf99525e3138786afbcd1a11402010c42d0f7cd03b042dfb487c5da3a7d0e5ec0415210d87d3115a0d000539de560113409daead0027bdf98825dc77f27a54bb1683bf1a6a9a7605ff8f947439555310670a97563f65898128613b16688bd12afd04c8d77bc4e84b3a5f5ab41b8805236b1f78e2c61ad9d44deaa1168147ad64902a7cdf3415b4df911ebfe9d372613f991b420e2d2cd2a3588f94d3b40153d5432d0575c48794969b5221bc085da6bfe8440c20899357204a5984e4d47ea3dde31792bd63c137ce17407538ad9d0f57aa35855717311e98088efa6af1e9ea976b74af747b278c377c30b54ca2dda154714058e27d1c7e9bc0d75a9584bf23696542103376de12d0fc0be6605117378cf6608ec03e04c96eacebff73d8334cee9b68904ef510cab55fa09e82a1498aec9ee61a40bc184fb5d218d8b6ac6548a7d4083c94b14713b020ccd6cd0d4a3fad0279ed594b82efa312e19690135dd82c454e1b0d5dca89842eaeda76345e3aee5414a5c99c876d4529d9c00a6f22ada3b9a2d62d7483f669a0113de0a11525f9d0104ba3ae5209f5a64136d9c19e956352d27faedc16702f4604e66bde39cb2e3eef196cf0dd7958b0e43fe9200e0f046f81ca5ebbfb4de1718268f182fc49244b36651412c4279c419c712489dce4389559958f757eaabeff46c3d21d40d070237a4506c03887f6c0f94df8e310ab2f87a6f47a303273868f407f879ef1175cf2e9972e485a3a734d08bf96693ff84e9b4b477dcbb2c4d82695626e4208d7a16a0f4e7860e68f9d838cf0d41901e3299958e563c77f590cdd5522580d26df9e1b10aa42e527847b3cedac8ae069befe4654d71f92c3ecea702cf2d6b02321053bc21e57118bc5d2008c5182471a4b3e0375212c9caee27b452f129f617035ed406750d654317d7f8f7d89305bf5d13c7c8f2ab63e245709853bb66f2f15affd6de928be1366979990821a4ff6b064c83207c79531d828b4b70a985b7226317a23e864907895d09bcc1298e9383060d94ec816992ac6a4b9bb01854497eb1b7e54d768c2bb4722024e941978d47016139d28f00a8e55ce2248e1b6565689d0937394c77d0d8852bee01424530642cffa7485a6faf0802952b4c3406d347996a38321a35faeea4acc6620ff53572ca042151a83c9a0ed1e0cce39d992b2bb56556af23b6380451b1ae338eaa617319045e02b432120f7f88086234dfea118f6b55fd51415235b3299d5709fca0afd11bd6ecc111367dc4125729f0ef3cbd106e9241eb5de45eb64b4941ee6be04a9170af67cfb021e68e19d4b664a967b9aa2d3b56ae976392dc869ea1bccc9cc0741f44b89f786899deac6476bf94fae309eb8dcd8d0631c9f1d528d7815087d1fc9ea1df915d8136fff71ad0af33aff5e2931e99a6cc5eb33bc4afaf2da47e32d4f6d50d38644d92b76690735fff8b29f9e5503b795e1e707ad7e0787cbd664658e3f153ef382785b69c3404805a74f4f661b31da9ab8bf181d6bee25e7ca4918b12cfc19b018de58a949122af31c94289dc3bd5b20440227e3de051b32bca35deadefb5e6c6b95f4ccab5a62c089982e8d822e775a8c7b5b6b468946b9b63d99679200a752e0c8e733582e38dfe1d3e19e7ccdbc4571faf779c5b1637428f4affa9f420a827c5e9ef7410ab676f4e5e447331ba0bee12aa3e41e8af8f02a003999e9288d8a7b3a26183996ddf27cedee0c7db76ae108114e6feb5299ed4069f96fa22dfe056c12ff1a63829f177779b30c09526dd06a0a90ef8eef363a4f2fd09aa6c11451aaea433d4185b1610a5c922abd5779929aaa71c407ec2284f6a81668d15cca4cc7b910bb65899fe23dfc95dfb12779ce6c1849f736d6d9313ed7b029b5e34873c47f63d1d86c74697fb66597060365dc6c60015bf7de2ba3c88daa3b3becae65ae9ad04a2bbfbc72884673f05e72c2db7af4e8b2acbf7fb6c6cb67290208d5724b0ca4ad1f09cab3ed2fd43debb3a30701cb12b39a792e8c370e7424b4965186e55f180348fe8bf626e34b0564927e6e02c279b8db79f55d8e257529285f5fc1dfd822246a42d8f69143f6eef8be3ca3add76cbfeeaa35a8fc7afeac7b49c97e48e55373e28b608cb9126fe394c0e3dd4a5876b3ae81695e1c2091be03864d70efd3ec2e3af439cdb5ead2a44f11aa8b8bd7b2ad285d517a2e119e8776464eff1b3795370c72e571322647cf44a92d2e6966d76349de9fa8605cc680fcab3c51e2db17baa440ca13319c01e113504f0d5ff73baeccca47bb4dac05d3e7da8aaab597d66a622cde2455672b003ff3818f4cb6484f51b38b93d6eed4b2059d664554d65dacf2f5c426051631825adca28e326329109c45f194fd06e1003a0463bce55a745cc5c56d4b205fac37e10fb695880d42f7096431479983ce2900c3ffe903f68f25133e397ef6bcb3f8589fbaeb3d3b4468adb0fb8f332baa88ef9f111d6b950bc5ee2689177bde187a79378f3a78405f182545ff8981680d0f269f42603be850b7bd65f75d430068c4d9a3452e9a92b70bb933e564cdef83bbccdd9b26c5b1f0ec430550ce681c1e1b3ee02757116aa78189a55f26db2c95e9fc43ae994068813ae5e9f616211469d0d26a7ca75c73caa6a9db7a19420137a7a227a1f9f7a3347d347e2c5118dfd6c22a606c2454265cdd5785b1d4cd6bcffc5c0a3f48495d72add9f196c8906ccd86d97f6bd25e9dcd9482cc2703fdb53fe766a350660d9635027c10ae704b629ee7049fe0d01ce7b56c3af16835d8cb9be7239074652f59586eb7c5d6ba8e0c742d9bc39e79deeba93be492f400495de6b6002e1205f8e2e963727764e9be0768953c93a612e97d48a63e1cb2c125ef02cc11cabe759a9143a717b03b256ccc6e72a2a40d4523b5a12c31b2c38582b92a902438652407bdb6214d912976a7c4dd7b7a088049fd3170de9679ad4c4866c89965075e703c64dd890cea3218394a102aaae021f9f2b61b30bb4e471237b2d26c5620da6b7a48a1059ae3a8300315a587b94cb22cd1aa505cda86f95a63b6664d097960885cea5e68503cf6e4fa143a14a68939a9af20c0bb8c7899f72456ecca3116d14eae755872d44ddf58a0ff965237b5b0b05e494502cdc4ccfc1c503586c18e499667f25218981816bd9d04cbdbdaa51fc11c77a8a9214258aca862be7aca0209f24f3b979b30a9b8f9167be04192a3bc456922f285a8630c61f0a007a299a04f8c6c5dda0e6bac67d320d127e3dcc8604682dc884d0b48f8d4a93bf56e35a18e103cb2dab56a6a30b94235b18330de24a25f4b2664d248205da2514ccd1b8b26ebde08f65f042090292b61e141d1f442d7b09b7c03cf0b73b381465a36c9ed405de2436ed996b2ac8b139f77ab109b4f75fe31535b387f47761f87d07164547378dec19794622a54617781d2a52d31d171f3046ce70eaf63d11190fe375855237911305aa6a4828fbb0b8e26be34adbd2dc1781b024d4f67225ad7a6397ad9afa85393c67980fa16e4dbf31360e62eb39ebdc4d0a99d4aede3296d0128e51aee681f8e25819bb80ae91875e898f936d467901dd01a6757adb6af556246e4e309c9db9f256f9657d357c38f880c427a706b7321ca1500d4e1409ebcb94b73512e909fdb4a3f12e20286e11d689132d31a6cfce5eebf475f6b7a1728ebb2b142e41c8449af98dc3632df650ae78860c29d0f6927ae357bb7e1b6182d2ef20c8f69dc68f44393b30b31e080efb8fcdbd6326312846f9f8c59382e443d2f9ce475c05632b453a0ec62f6ef3afd034a7ae49d70a94e9f2e0d0f779dc73f1b37ad8ca20dd6d18e78d240c89c1c21baa817794e16302d6016f5ec94c66eddfa7ddf0e193875637eb6e5f67f6b37005f60862d058053a3efa0ff7a54799b42401cda47b710891b2d21e6942ee8f76381a7b11fc39d89e04ab2fa35af2f3f053f1aaeca8482dce890a46847b04db545a899fc9594671220a2f2336253efa8f9154a9a8b10d75ec63a622e16927f44699794f093134a0848846c816b8eabe99f9732933bc66aa894811f68005881f5f76a7e556d884e3f76ce58fbe89723806dad8128af4f096d43351ae1e38a028740110abb6cd6ecb9f1414edcace0da1b765eee9d69e66e15ed39da0abc127a64f6c1607a081720a2591926e90dbf984186ca1fd5a1d07b79a0aea44e9e39a2ffa981ed2cef6453a952d45d8446f44ae27658849557d631599f06f6c9a177a766e6880b192e84176ac8beb6362d6c9ef20772c3b4f9a5e342eb3852cb54dbcbfb6de86e4dabb9aa14f5033cd049663f78f59bdafdd598d4cee386ef3489f0babd66c474c76cf845fbf8eaddf3cf690a255c7f2272ac3ee7fad99a23ec49472fe2bb59fc794e29ce9c2f6fd8ad1bfabbec45917daedefb32d82ec920248c54a721d138916968a3568878afe97615b707d7573e4e625f3764ee64e665afcf405bb20879effb991ac32b375936efc32428be418b855be9fc76c703315430df32c1f7840791c2b8d6e35404ac8039753629a350a873a35f259c6951f2f55d1ced24a3280f2ae173b039a228d52a5c305451cf2d9c8e7d96cccd47ece68868b52675399b73345ac8bbe9b5c93f925001d0bbe596826c80d985b7cbbe69ab192c1da79bf552eca8526a4e32e219456143f2a20b16a595faf0b98f7ca26dd57c99e68261339eb2534cecc9022efa7cdbc9505f97b8e4a382e0a56da979aed0d4723ba00a84bc054f782d918bea79999d41c3e37223d73343305eb3e9c950566cdb03f11f6eec439c717c841223e0c455d3bb94ac61ebe65cedea803f181d173027636d4d7ff13be4f6c64a85905619c803bfe854c752137a0c717889659a874d8143689255d57b186e3305be4c70b2c0bf8a1b618fb79bcd88227e77d523148191f72c210ecffee12bad641338a9eedef53f6d9150aa38d9317c1e7dd843b70de732dc91e13857fb548285be893bc234488f42eb9889109d4136d1d6eea3494f627c34b1a7f6fc7598f92710"}) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=0x1000) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 23:33:09 executing program 2: clock_gettime(0x0, &(0x7f0000000000)) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x4, 0x8000, 0x400, 0x5, 0x2}, 0x14) clock_getres(0x3, &(0x7f00000000c0)) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xffefff1f) 23:33:09 executing program 1: clock_gettime(0x5, &(0x7f0000000140)) 23:33:09 executing program 2: clock_gettime(0x0, &(0x7f0000000000)) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x4, 0x8000, 0x400, 0x5, 0x2}, 0x14) clock_getres(0x3, &(0x7f00000000c0)) (async) clock_getres(0x3, &(0x7f00000000c0)) 23:33:09 executing program 0: getpgrp(0xffffffffffffffff) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r1, 0x0, 0x2b6c, 0x7}}}, 0x90) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, r1, 0x0) pipe2$9p(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f00000011c0)={{r3}, "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"}) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=0x1000) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) (async) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) geteuid() (async) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r1, 0x0, 0x2b6c, 0x7}}}, 0x90) (async) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, r1, 0x0) (async) pipe2$9p(&(0x7f0000001180), 0x800) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f00000011c0)={{r3}, "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"}) (async) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff}) (async) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) (async) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=0x1000) (async) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) (async) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xffffff1f) 23:33:09 executing program 1: clock_gettime(0x0, &(0x7f0000000140)) 23:33:09 executing program 2: clock_gettime(0x0, &(0x7f0000000000)) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x4, 0x8000, 0x400, 0x5, 0x2}, 0x14) clock_getres(0x3, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000000)) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x4, 0x8000, 0x400, 0x5, 0x2}, 0x14) (async) clock_getres(0x3, &(0x7f00000000c0)) (async) 23:33:09 executing program 0: getpgrp(0xffffffffffffffff) (async) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r1, 0x0, 0x2b6c, 0x7}}}, 0x90) (async) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, r1, 0x0) (async) pipe2$9p(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) (async) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f00000011c0)={{r3}, "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"}) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff}) (async) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=0x1000) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xffffff20) 23:33:09 executing program 1: clock_gettime(0x0, &(0x7f0000000140)) 23:33:09 executing program 2: clock_gettime(0x6, &(0x7f0000000140)) r0 = semget(0x1, 0x1, 0x4) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x11ae, 0x800}, {0x2, 0x8, 0x1000}, {0x4, 0x4, 0x1800}, {0x0, 0x6, 0x1000}, {0x3, 0x7, 0x800}, {0x2, 0x1, 0x800}, {0x4, 0x1, 0x800}, {0x2, 0x5, 0x1000}], 0x8, &(0x7f0000000080)={r1, r2+10000000}) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x1b2df1ffff) 23:33:09 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) geteuid() r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) r2 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x1e49) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/14, @ANYRES64=r2], 0x7c, 0x0, &(0x7f00000000c0)="4871fef55c6f7cc33c45ee780dbe515a9125dffcdb73a8ed05219fd31b7ce7ba48ea1935464a689912144e468e78fb70d5b3535432e6782af610e7993188c9cca264e722dec1231fb443631032a2a3aec3cb62a4da0da7f93e47a2473d2fad23d2835a14a10c33886c943f1566abed9921200370dfabf726be9a2a38"}) 23:33:09 executing program 1: clock_gettime(0x0, &(0x7f0000000140)) 23:33:09 executing program 2: clock_gettime(0x6, &(0x7f0000000140)) r0 = semget(0x1, 0x1, 0x4) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x11ae, 0x800}, {0x2, 0x8, 0x1000}, {0x4, 0x4, 0x1800}, {0x0, 0x6, 0x1000}, {0x3, 0x7, 0x800}, {0x2, 0x1, 0x800}, {0x4, 0x1, 0x800}, {0x2, 0x5, 0x1000}], 0x8, &(0x7f0000000080)={r1, r2+10000000}) (async) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x11ae, 0x800}, {0x2, 0x8, 0x1000}, {0x4, 0x4, 0x1800}, {0x0, 0x6, 0x1000}, {0x3, 0x7, 0x800}, {0x2, 0x1, 0x800}, {0x4, 0x1, 0x800}, {0x2, 0x5, 0x1000}], 0x8, &(0x7f0000000080)={r1, r2+10000000}) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x2100000000) 23:33:09 executing program 1: clock_gettime(0x5, 0x0) 23:33:09 executing program 2: clock_gettime(0x6, &(0x7f0000000140)) (async) r0 = semget(0x1, 0x1, 0x4) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x11ae, 0x800}, {0x2, 0x8, 0x1000}, {0x4, 0x4, 0x1800}, {0x0, 0x6, 0x1000}, {0x3, 0x7, 0x800}, {0x2, 0x1, 0x800}, {0x4, 0x1, 0x800}, {0x2, 0x5, 0x1000}], 0x8, &(0x7f0000000080)={r1, r2+10000000}) 23:33:09 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) geteuid() r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x1e49) (async) r2 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x1e49) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/14, @ANYRES64=r2], 0x7c, 0x0, &(0x7f00000000c0)="4871fef55c6f7cc33c45ee780dbe515a9125dffcdb73a8ed05219fd31b7ce7ba48ea1935464a689912144e468e78fb70d5b3535432e6782af610e7993188c9cca264e722dec1231fb443631032a2a3aec3cb62a4da0da7f93e47a2473d2fad23d2835a14a10c33886c943f1566abed9921200370dfabf726be9a2a38"}) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x555556cbafff) 23:33:09 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) pselect6(0x40, &(0x7f0000000100)={0x200, 0x80000001, 0x84, 0x6, 0x71ba7159, 0x5, 0x20, 0x2}, &(0x7f0000000180)={0x203cc8, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffff7, 0xffffffffffffff01, 0x20, 0x1f1c, 0x7}, &(0x7f00000001c0)={0x2, 0x70, 0x7, 0x5, 0x8, 0x2, 0x8000000000000001, 0x4e}, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0xfffffffffffffffe]}, 0x8}) pselect6(0x40, &(0x7f00000002c0)={0x3ff, 0x1, 0x1, 0x5, 0x1, 0xfd5, 0x3f, 0x1}, &(0x7f0000000300)={0xffff, 0xffffffff954d2154, 0x5, 0x401, 0x0, 0x0, 0xb9c, 0x101}, &(0x7f0000000340)={0x3, 0x4, 0xffffffffffffffff, 0x6, 0x28, 0x6, 0x6, 0x2}, &(0x7f0000000380)={0x77359400}, &(0x7f0000000400)={&(0x7f00000003c0)={[0xa0000000000000]}, 0x8}) getrusage(0x0, &(0x7f0000000540)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4, 0x8}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000480)={{0x1, 0x7}, 'port1\x00', 0x24, 0x10011, 0xfffff26f, 0x7, 0x8, 0x4, 0x6, 0x0, 0x7, 0x2}) sched_rr_get_interval(0x0, &(0x7f00000000c0)) ioctl$MEDIA_REQUEST_IOC_QUEUE(r2, 0x7c80, 0x0) semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x1, 0x8, 0x1800}, {0x3, 0x9, 0x800}, {0x0, 0x8, 0x1000}, {0x0, 0x5}], 0x4, &(0x7f0000000080)={r0, r1+60000000}) 23:33:09 executing program 1: clock_gettime(0x5, 0x0) 23:33:09 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) geteuid() r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) r2 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x1e49) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/14, @ANYRES64=r2], 0x7c, 0x0, &(0x7f00000000c0)="4871fef55c6f7cc33c45ee780dbe515a9125dffcdb73a8ed05219fd31b7ce7ba48ea1935464a689912144e468e78fb70d5b3535432e6782af610e7993188c9cca264e722dec1231fb443631032a2a3aec3cb62a4da0da7f93e47a2473d2fad23d2835a14a10c33886c943f1566abed9921200370dfabf726be9a2a38"}) 23:33:09 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) (async) pselect6(0x40, &(0x7f0000000100)={0x200, 0x80000001, 0x84, 0x6, 0x71ba7159, 0x5, 0x20, 0x2}, &(0x7f0000000180)={0x203cc8, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffff7, 0xffffffffffffff01, 0x20, 0x1f1c, 0x7}, &(0x7f00000001c0)={0x2, 0x70, 0x7, 0x5, 0x8, 0x2, 0x8000000000000001, 0x4e}, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0xfffffffffffffffe]}, 0x8}) (async) pselect6(0x40, &(0x7f00000002c0)={0x3ff, 0x1, 0x1, 0x5, 0x1, 0xfd5, 0x3f, 0x1}, &(0x7f0000000300)={0xffff, 0xffffffff954d2154, 0x5, 0x401, 0x0, 0x0, 0xb9c, 0x101}, &(0x7f0000000340)={0x3, 0x4, 0xffffffffffffffff, 0x6, 0x28, 0x6, 0x6, 0x2}, &(0x7f0000000380)={0x77359400}, &(0x7f0000000400)={&(0x7f00000003c0)={[0xa0000000000000]}, 0x8}) (async) getrusage(0x0, &(0x7f0000000540)) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4, 0x8}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000480)={{0x1, 0x7}, 'port1\x00', 0x24, 0x10011, 0xfffff26f, 0x7, 0x8, 0x4, 0x6, 0x0, 0x7, 0x2}) sched_rr_get_interval(0x0, &(0x7f00000000c0)) ioctl$MEDIA_REQUEST_IOC_QUEUE(r2, 0x7c80, 0x0) semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x1, 0x8, 0x1800}, {0x3, 0x9, 0x800}, {0x0, 0x8, 0x1000}, {0x0, 0x5}], 0x4, &(0x7f0000000080)={r0, r1+60000000}) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x555556cdcfff) 23:33:09 executing program 1: clock_gettime(0x5, 0x0) 23:33:09 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) (async) pselect6(0x40, &(0x7f0000000100)={0x200, 0x80000001, 0x84, 0x6, 0x71ba7159, 0x5, 0x20, 0x2}, &(0x7f0000000180)={0x203cc8, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffff7, 0xffffffffffffff01, 0x20, 0x1f1c, 0x7}, &(0x7f00000001c0)={0x2, 0x70, 0x7, 0x5, 0x8, 0x2, 0x8000000000000001, 0x4e}, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0xfffffffffffffffe]}, 0x8}) pselect6(0x40, &(0x7f00000002c0)={0x3ff, 0x1, 0x1, 0x5, 0x1, 0xfd5, 0x3f, 0x1}, &(0x7f0000000300)={0xffff, 0xffffffff954d2154, 0x5, 0x401, 0x0, 0x0, 0xb9c, 0x101}, &(0x7f0000000340)={0x3, 0x4, 0xffffffffffffffff, 0x6, 0x28, 0x6, 0x6, 0x2}, &(0x7f0000000380)={0x77359400}, &(0x7f0000000400)={&(0x7f00000003c0)={[0xa0000000000000]}, 0x8}) (async) getrusage(0x0, &(0x7f0000000540)) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4, 0x8}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000480)={{0x1, 0x7}, 'port1\x00', 0x24, 0x10011, 0xfffff26f, 0x7, 0x8, 0x4, 0x6, 0x0, 0x7, 0x2}) (async) sched_rr_get_interval(0x0, &(0x7f00000000c0)) ioctl$MEDIA_REQUEST_IOC_QUEUE(r2, 0x7c80, 0x0) semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x1, 0x8, 0x1800}, {0x3, 0x9, 0x800}, {0x0, 0x8, 0x1000}, {0x0, 0x5}], 0x4, &(0x7f0000000080)={r0, r1+60000000}) 23:33:09 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x3b5ab52fc5ae1ba2, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x351082, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x7f9c579fefff) [ 741.001777][T11015] binder: 11012:11015 ioctl 4018f50b 0 returned -22 [ 741.004841][T11015] binder: 11012:11015 ioctl 82307201 200000c0 returned -22 [ 741.008385][T11015] binder: 11012:11015 ioctl 4018f50b 0 returned -22 23:33:09 executing program 1: getpgrp(0xffffffffffffffff) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r1, 0x0, 0x2b6c, 0x7}}}, 0x90) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, r1, 0x0) pipe2$9p(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f00000011c0)={{r3}, "6911b4c5a433295f2a8f5d6d33499b406b2ebfa11db9c2c94940c83e62936051df72d90f3cc5a90d8ce6935e7d2bb94c63a2c2101051f30560cd22b43cdff02d957e28a0865ca67a66f43048d93ce9983fec1a10521bb5d9ecd571096bf45190652c519a6f8bde09390ea322eabadef82cf9ec0769c91e760230421324487f4282797a1b66c820320096407b46fe5de81f52a809f4d7a1ab287dd2f8d97f1a32117a3fcceeeaec9cf7d5d8c15abfa359947064243082a1f56de0d290f642ef3259c7f32cddd73b81d225d5c58864572224fda2b906b1e1051faf907ca3780bd8b17286f1a5c1c89fe50347ecf32743b0f09557c45946626a9a3017542d0ce107fb9e2482d835e61175078a24faac85793a1ef6ae1d2917a001c50ca95cde9e61b0bb07259d9537b7b491bddc8fcbc4523f8a94de4b6b7f2127ce1df441c7af1719d8cb23011338636bcde9435ca3ac56d60b85c9da68acec677a18f1c41949edc86305b15daf9986519b72ba8a50370e6d9e27ca806e534d8155616564738531af512e47283dae60091d67799f673e35d8b24fe6868b0fd0574cbc5f69887c1c42966dcd8e3334b3214db45607f37fa72d096d57398983551e15e35c617d0cb4b008ede1160e55e7ee0b73bf0fb8e8776fcf30a3547c73e5e711f17ed3cd2d50359760999fadbaff4986c241bc2783097f567a7a56743ba10650763d678ccce0b3135c74bf99525e3138786afbcd1a11402010c42d0f7cd03b042dfb487c5da3a7d0e5ec0415210d87d3115a0d000539de560113409daead0027bdf98825dc77f27a54bb1683bf1a6a9a7605ff8f947439555310670a97563f65898128613b16688bd12afd04c8d77bc4e84b3a5f5ab41b8805236b1f78e2c61ad9d44deaa1168147ad64902a7cdf3415b4df911ebfe9d372613f991b420e2d2cd2a3588f94d3b40153d5432d0575c48794969b5221bc085da6bfe8440c20899357204a5984e4d47ea3dde31792bd63c137ce17407538ad9d0f57aa35855717311e98088efa6af1e9ea976b74af747b278c377c30b54ca2dda154714058e27d1c7e9bc0d75a9584bf23696542103376de12d0fc0be6605117378cf6608ec03e04c96eacebff73d8334cee9b68904ef510cab55fa09e82a1498aec9ee61a40bc184fb5d218d8b6ac6548a7d4083c94b14713b020ccd6cd0d4a3fad0279ed594b82efa312e19690135dd82c454e1b0d5dca89842eaeda76345e3aee5414a5c99c876d4529d9c00a6f22ada3b9a2d62d7483f669a0113de0a11525f9d0104ba3ae5209f5a64136d9c19e956352d27faedc16702f4604e66bde39cb2e3eef196cf0dd7958b0e43fe9200e0f046f81ca5ebbfb4de1718268f182fc49244b36651412c4279c419c712489dce4389559958f757eaabeff46c3d21d40d070237a4506c03887f6c0f94df8e310ab2f87a6f47a303273868f407f879ef1175cf2e9972e485a3a734d08bf96693ff84e9b4b477dcbb2c4d82695626e4208d7a16a0f4e7860e68f9d838cf0d41901e3299958e563c77f590cdd5522580d26df9e1b10aa42e527847b3cedac8ae069befe4654d71f92c3ecea702cf2d6b02321053bc21e57118bc5d2008c5182471a4b3e0375212c9caee27b452f129f617035ed406750d654317d7f8f7d89305bf5d13c7c8f2ab63e245709853bb66f2f15affd6de928be1366979990821a4ff6b064c83207c79531d828b4b70a985b7226317a23e864907895d09bcc1298e9383060d94ec816992ac6a4b9bb01854497eb1b7e54d768c2bb4722024e941978d47016139d28f00a8e55ce2248e1b6565689d0937394c77d0d8852bee01424530642cffa7485a6faf0802952b4c3406d347996a38321a35faeea4acc6620ff53572ca042151a83c9a0ed1e0cce39d992b2bb56556af23b6380451b1ae338eaa617319045e02b432120f7f88086234dfea118f6b55fd51415235b3299d5709fca0afd11bd6ecc111367dc4125729f0ef3cbd106e9241eb5de45eb64b4941ee6be04a9170af67cfb021e68e19d4b664a967b9aa2d3b56ae976392dc869ea1bccc9cc0741f44b89f786899deac6476bf94fae309eb8dcd8d0631c9f1d528d7815087d1fc9ea1df915d8136fff71ad0af33aff5e2931e99a6cc5eb33bc4afaf2da47e32d4f6d50d38644d92b76690735fff8b29f9e5503b795e1e707ad7e0787cbd664658e3f153ef382785b69c3404805a74f4f661b31da9ab8bf181d6bee25e7ca4918b12cfc19b018de58a949122af31c94289dc3bd5b20440227e3de051b32bca35deadefb5e6c6b95f4ccab5a62c089982e8d822e775a8c7b5b6b468946b9b63d99679200a752e0c8e733582e38dfe1d3e19e7ccdbc4571faf779c5b1637428f4affa9f420a827c5e9ef7410ab676f4e5e447331ba0bee12aa3e41e8af8f02a003999e9288d8a7b3a26183996ddf27cedee0c7db76ae108114e6feb5299ed4069f96fa22dfe056c12ff1a63829f177779b30c09526dd06a0a90ef8eef363a4f2fd09aa6c11451aaea433d4185b1610a5c922abd5779929aaa71c407ec2284f6a81668d15cca4cc7b910bb65899fe23dfc95dfb12779ce6c1849f736d6d9313ed7b029b5e34873c47f63d1d86c74697fb66597060365dc6c60015bf7de2ba3c88daa3b3becae65ae9ad04a2bbfbc72884673f05e72c2db7af4e8b2acbf7fb6c6cb67290208d5724b0ca4ad1f09cab3ed2fd43debb3a30701cb12b39a792e8c370e7424b4965186e55f180348fe8bf626e34b0564927e6e02c279b8db79f55d8e257529285f5fc1dfd822246a42d8f69143f6eef8be3ca3add76cbfeeaa35a8fc7afeac7b49c97e48e55373e28b608cb9126fe394c0e3dd4a5876b3ae81695e1c2091be03864d70efd3ec2e3af439cdb5ead2a44f11aa8b8bd7b2ad285d517a2e119e8776464eff1b3795370c72e571322647cf44a92d2e6966d76349de9fa8605cc680fcab3c51e2db17baa440ca13319c01e113504f0d5ff73baeccca47bb4dac05d3e7da8aaab597d66a622cde2455672b003ff3818f4cb6484f51b38b93d6eed4b2059d664554d65dacf2f5c426051631825adca28e326329109c45f194fd06e1003a0463bce55a745cc5c56d4b205fac37e10fb695880d42f7096431479983ce2900c3ffe903f68f25133e397ef6bcb3f8589fbaeb3d3b4468adb0fb8f332baa88ef9f111d6b950bc5ee2689177bde187a79378f3a78405f182545ff8981680d0f269f42603be850b7bd65f75d430068c4d9a3452e9a92b70bb933e564cdef83bbccdd9b26c5b1f0ec430550ce681c1e1b3ee02757116aa78189a55f26db2c95e9fc43ae994068813ae5e9f616211469d0d26a7ca75c73caa6a9db7a19420137a7a227a1f9f7a3347d347e2c5118dfd6c22a606c2454265cdd5785b1d4cd6bcffc5c0a3f48495d72add9f196c8906ccd86d97f6bd25e9dcd9482cc2703fdb53fe766a350660d9635027c10ae704b629ee7049fe0d01ce7b56c3af16835d8cb9be7239074652f59586eb7c5d6ba8e0c742d9bc39e79deeba93be492f400495de6b6002e1205f8e2e963727764e9be0768953c93a612e97d48a63e1cb2c125ef02cc11cabe759a9143a717b03b256ccc6e72a2a40d4523b5a12c31b2c38582b92a902438652407bdb6214d912976a7c4dd7b7a088049fd3170de9679ad4c4866c89965075e703c64dd890cea3218394a102aaae021f9f2b61b30bb4e471237b2d26c5620da6b7a48a1059ae3a8300315a587b94cb22cd1aa505cda86f95a63b6664d097960885cea5e68503cf6e4fa143a14a68939a9af20c0bb8c7899f72456ecca3116d14eae755872d44ddf58a0ff965237b5b0b05e494502cdc4ccfc1c503586c18e499667f25218981816bd9d04cbdbdaa51fc11c77a8a9214258aca862be7aca0209f24f3b979b30a9b8f9167be04192a3bc456922f285a8630c61f0a007a299a04f8c6c5dda0e6bac67d320d127e3dcc8604682dc884d0b48f8d4a93bf56e35a18e103cb2dab56a6a30b94235b18330de24a25f4b2664d248205da2514ccd1b8b26ebde08f65f042090292b61e141d1f442d7b09b7c03cf0b73b381465a36c9ed405de2436ed996b2ac8b139f77ab109b4f75fe31535b387f47761f87d07164547378dec19794622a54617781d2a52d31d171f3046ce70eaf63d11190fe375855237911305aa6a4828fbb0b8e26be34adbd2dc1781b024d4f67225ad7a6397ad9afa85393c67980fa16e4dbf31360e62eb39ebdc4d0a99d4aede3296d0128e51aee681f8e25819bb80ae91875e898f936d467901dd01a6757adb6af556246e4e309c9db9f256f9657d357c38f880c427a706b7321ca1500d4e1409ebcb94b73512e909fdb4a3f12e20286e11d689132d31a6cfce5eebf475f6b7a1728ebb2b142e41c8449af98dc3632df650ae78860c29d0f6927ae357bb7e1b6182d2ef20c8f69dc68f44393b30b31e080efb8fcdbd6326312846f9f8c59382e443d2f9ce475c05632b453a0ec62f6ef3afd034a7ae49d70a94e9f2e0d0f779dc73f1b37ad8ca20dd6d18e78d240c89c1c21baa817794e16302d6016f5ec94c66eddfa7ddf0e193875637eb6e5f67f6b37005f60862d058053a3efa0ff7a54799b42401cda47b710891b2d21e6942ee8f76381a7b11fc39d89e04ab2fa35af2f3f053f1aaeca8482dce890a46847b04db545a899fc9594671220a2f2336253efa8f9154a9a8b10d75ec63a622e16927f44699794f093134a0848846c816b8eabe99f9732933bc66aa894811f68005881f5f76a7e556d884e3f76ce58fbe89723806dad8128af4f096d43351ae1e38a028740110abb6cd6ecb9f1414edcace0da1b765eee9d69e66e15ed39da0abc127a64f6c1607a081720a2591926e90dbf984186ca1fd5a1d07b79a0aea44e9e39a2ffa981ed2cef6453a952d45d8446f44ae27658849557d631599f06f6c9a177a766e6880b192e84176ac8beb6362d6c9ef20772c3b4f9a5e342eb3852cb54dbcbfb6de86e4dabb9aa14f5033cd049663f78f59bdafdd598d4cee386ef3489f0babd66c474c76cf845fbf8eaddf3cf690a255c7f2272ac3ee7fad99a23ec49472fe2bb59fc794e29ce9c2f6fd8ad1bfabbec45917daedefb32d82ec920248c54a721d138916968a3568878afe97615b707d7573e4e625f3764ee64e665afcf405bb20879effb991ac32b375936efc32428be418b855be9fc76c703315430df32c1f7840791c2b8d6e35404ac8039753629a350a873a35f259c6951f2f55d1ced24a3280f2ae173b039a228d52a5c305451cf2d9c8e7d96cccd47ece68868b52675399b73345ac8bbe9b5c93f925001d0bbe596826c80d985b7cbbe69ab192c1da79bf552eca8526a4e32e219456143f2a20b16a595faf0b98f7ca26dd57c99e68261339eb2534cecc9022efa7cdbc9505f97b8e4a382e0a56da979aed0d4723ba00a84bc054f782d918bea79999d41c3e37223d73343305eb3e9c950566cdb03f11f6eec439c717c841223e0c455d3bb94ac61ebe65cedea803f181d173027636d4d7ff13be4f6c64a85905619c803bfe854c752137a0c717889659a874d8143689255d57b186e3305be4c70b2c0bf8a1b618fb79bcd88227e77d523148191f72c210ecffee12bad641338a9eedef53f6d9150aa38d9317c1e7dd843b70de732dc91e13857fb548285be893bc234488f42eb9889109d4136d1d6eea3494f627c34b1a7f6fc7598f92710"}) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=0x1000) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 23:33:09 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x3b5ab52fc5ae1ba2, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x351082, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x3b5ab52fc5ae1ba2, 0x0) (async) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x351082, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) 23:33:09 executing program 2: clock_gettime(0x0, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000080)) r0 = semget$private(0x0, 0x2, 0x1) semtimedop(r0, &(0x7f0000000000)=[{0x2, 0x2, 0x800}, {0x3, 0x2}, {0x1, 0xfff7, 0x800}, {0x4, 0x7f, 0x1800}], 0x4, &(0x7f0000000040)={0x77359400}) clock_gettime(0x0, &(0x7f00000000c0)) [ 741.025680][T11026] binder: 11023:11026 ioctl 4018f50b 0 returned -22 [ 741.028646][T11026] binder: 11023:11026 ioctl 82307201 200000c0 returned -22 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x7f9c579fffff) 23:33:09 executing program 2: clock_gettime(0x0, &(0x7f0000000140)) (async) clock_gettime(0x0, &(0x7f0000000080)) r0 = semget$private(0x0, 0x2, 0x1) semtimedop(r0, &(0x7f0000000000)=[{0x2, 0x2, 0x800}, {0x3, 0x2}, {0x1, 0xfff7, 0x800}, {0x4, 0x7f, 0x1800}], 0x4, &(0x7f0000000040)={0x77359400}) (async) clock_gettime(0x0, &(0x7f00000000c0)) [ 741.034948][T11026] binder: 11023:11026 ioctl 4018f50b 0 returned -22 23:33:09 executing program 1: getpgrp(0xffffffffffffffff) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r1, 0x0, 0x2b6c, 0x7}}}, 0x90) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, r1, 0x0) pipe2$9p(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f00000011c0)={{r3}, "6911b4c5a433295f2a8f5d6d33499b406b2ebfa11db9c2c94940c83e62936051df72d90f3cc5a90d8ce6935e7d2bb94c63a2c2101051f30560cd22b43cdff02d957e28a0865ca67a66f43048d93ce9983fec1a10521bb5d9ecd571096bf45190652c519a6f8bde09390ea322eabadef82cf9ec0769c91e760230421324487f4282797a1b66c820320096407b46fe5de81f52a809f4d7a1ab287dd2f8d97f1a32117a3fcceeeaec9cf7d5d8c15abfa359947064243082a1f56de0d290f642ef3259c7f32cddd73b81d225d5c58864572224fda2b906b1e1051faf907ca3780bd8b17286f1a5c1c89fe50347ecf32743b0f09557c45946626a9a3017542d0ce107fb9e2482d835e61175078a24faac85793a1ef6ae1d2917a001c50ca95cde9e61b0bb07259d9537b7b491bddc8fcbc4523f8a94de4b6b7f2127ce1df441c7af1719d8cb23011338636bcde9435ca3ac56d60b85c9da68acec677a18f1c41949edc86305b15daf9986519b72ba8a50370e6d9e27ca806e534d8155616564738531af512e47283dae60091d67799f673e35d8b24fe6868b0fd0574cbc5f69887c1c42966dcd8e3334b3214db45607f37fa72d096d57398983551e15e35c617d0cb4b008ede1160e55e7ee0b73bf0fb8e8776fcf30a3547c73e5e711f17ed3cd2d50359760999fadbaff4986c241bc2783097f567a7a56743ba10650763d678ccce0b3135c74bf99525e3138786afbcd1a11402010c42d0f7cd03b042dfb487c5da3a7d0e5ec0415210d87d3115a0d000539de560113409daead0027bdf98825dc77f27a54bb1683bf1a6a9a7605ff8f947439555310670a97563f65898128613b16688bd12afd04c8d77bc4e84b3a5f5ab41b8805236b1f78e2c61ad9d44deaa1168147ad64902a7cdf3415b4df911ebfe9d372613f991b420e2d2cd2a3588f94d3b40153d5432d0575c48794969b5221bc085da6bfe8440c20899357204a5984e4d47ea3dde31792bd63c137ce17407538ad9d0f57aa35855717311e98088efa6af1e9ea976b74af747b278c377c30b54ca2dda154714058e27d1c7e9bc0d75a9584bf23696542103376de12d0fc0be6605117378cf6608ec03e04c96eacebff73d8334cee9b68904ef510cab55fa09e82a1498aec9ee61a40bc184fb5d218d8b6ac6548a7d4083c94b14713b020ccd6cd0d4a3fad0279ed594b82efa312e19690135dd82c454e1b0d5dca89842eaeda76345e3aee5414a5c99c876d4529d9c00a6f22ada3b9a2d62d7483f669a0113de0a11525f9d0104ba3ae5209f5a64136d9c19e956352d27faedc16702f4604e66bde39cb2e3eef196cf0dd7958b0e43fe9200e0f046f81ca5ebbfb4de1718268f182fc49244b36651412c4279c419c712489dce4389559958f757eaabeff46c3d21d40d070237a4506c03887f6c0f94df8e310ab2f87a6f47a303273868f407f879ef1175cf2e9972e485a3a734d08bf96693ff84e9b4b477dcbb2c4d82695626e4208d7a16a0f4e7860e68f9d838cf0d41901e3299958e563c77f590cdd5522580d26df9e1b10aa42e527847b3cedac8ae069befe4654d71f92c3ecea702cf2d6b02321053bc21e57118bc5d2008c5182471a4b3e0375212c9caee27b452f129f617035ed406750d654317d7f8f7d89305bf5d13c7c8f2ab63e245709853bb66f2f15affd6de928be1366979990821a4ff6b064c83207c79531d828b4b70a985b7226317a23e864907895d09bcc1298e9383060d94ec816992ac6a4b9bb01854497eb1b7e54d768c2bb4722024e941978d47016139d28f00a8e55ce2248e1b6565689d0937394c77d0d8852bee01424530642cffa7485a6faf0802952b4c3406d347996a38321a35faeea4acc6620ff53572ca042151a83c9a0ed1e0cce39d992b2bb56556af23b6380451b1ae338eaa617319045e02b432120f7f88086234dfea118f6b55fd51415235b3299d5709fca0afd11bd6ecc111367dc4125729f0ef3cbd106e9241eb5de45eb64b4941ee6be04a9170af67cfb021e68e19d4b664a967b9aa2d3b56ae976392dc869ea1bccc9cc0741f44b89f786899deac6476bf94fae309eb8dcd8d0631c9f1d528d7815087d1fc9ea1df915d8136fff71ad0af33aff5e2931e99a6cc5eb33bc4afaf2da47e32d4f6d50d38644d92b76690735fff8b29f9e5503b795e1e707ad7e0787cbd664658e3f153ef382785b69c3404805a74f4f661b31da9ab8bf181d6bee25e7ca4918b12cfc19b018de58a949122af31c94289dc3bd5b20440227e3de051b32bca35deadefb5e6c6b95f4ccab5a62c089982e8d822e775a8c7b5b6b468946b9b63d99679200a752e0c8e733582e38dfe1d3e19e7ccdbc4571faf779c5b1637428f4affa9f420a827c5e9ef7410ab676f4e5e447331ba0bee12aa3e41e8af8f02a003999e9288d8a7b3a26183996ddf27cedee0c7db76ae108114e6feb5299ed4069f96fa22dfe056c12ff1a63829f177779b30c09526dd06a0a90ef8eef363a4f2fd09aa6c11451aaea433d4185b1610a5c922abd5779929aaa71c407ec2284f6a81668d15cca4cc7b910bb65899fe23dfc95dfb12779ce6c1849f736d6d9313ed7b029b5e34873c47f63d1d86c74697fb66597060365dc6c60015bf7de2ba3c88daa3b3becae65ae9ad04a2bbfbc72884673f05e72c2db7af4e8b2acbf7fb6c6cb67290208d5724b0ca4ad1f09cab3ed2fd43debb3a30701cb12b39a792e8c370e7424b4965186e55f180348fe8bf626e34b0564927e6e02c279b8db79f55d8e257529285f5fc1dfd822246a42d8f69143f6eef8be3ca3add76cbfeeaa35a8fc7afeac7b49c97e48e55373e28b608cb9126fe394c0e3dd4a5876b3ae81695e1c2091be03864d70efd3ec2e3af439cdb5ead2a44f11aa8b8bd7b2ad285d517a2e119e8776464eff1b3795370c72e571322647cf44a92d2e6966d76349de9fa8605cc680fcab3c51e2db17baa440ca13319c01e113504f0d5ff73baeccca47bb4dac05d3e7da8aaab597d66a622cde2455672b003ff3818f4cb6484f51b38b93d6eed4b2059d664554d65dacf2f5c426051631825adca28e326329109c45f194fd06e1003a0463bce55a745cc5c56d4b205fac37e10fb695880d42f7096431479983ce2900c3ffe903f68f25133e397ef6bcb3f8589fbaeb3d3b4468adb0fb8f332baa88ef9f111d6b950bc5ee2689177bde187a79378f3a78405f182545ff8981680d0f269f42603be850b7bd65f75d430068c4d9a3452e9a92b70bb933e564cdef83bbccdd9b26c5b1f0ec430550ce681c1e1b3ee02757116aa78189a55f26db2c95e9fc43ae994068813ae5e9f616211469d0d26a7ca75c73caa6a9db7a19420137a7a227a1f9f7a3347d347e2c5118dfd6c22a606c2454265cdd5785b1d4cd6bcffc5c0a3f48495d72add9f196c8906ccd86d97f6bd25e9dcd9482cc2703fdb53fe766a350660d9635027c10ae704b629ee7049fe0d01ce7b56c3af16835d8cb9be7239074652f59586eb7c5d6ba8e0c742d9bc39e79deeba93be492f400495de6b6002e1205f8e2e963727764e9be0768953c93a612e97d48a63e1cb2c125ef02cc11cabe759a9143a717b03b256ccc6e72a2a40d4523b5a12c31b2c38582b92a902438652407bdb6214d912976a7c4dd7b7a088049fd3170de9679ad4c4866c89965075e703c64dd890cea3218394a102aaae021f9f2b61b30bb4e471237b2d26c5620da6b7a48a1059ae3a8300315a587b94cb22cd1aa505cda86f95a63b6664d097960885cea5e68503cf6e4fa143a14a68939a9af20c0bb8c7899f72456ecca3116d14eae755872d44ddf58a0ff965237b5b0b05e494502cdc4ccfc1c503586c18e499667f25218981816bd9d04cbdbdaa51fc11c77a8a9214258aca862be7aca0209f24f3b979b30a9b8f9167be04192a3bc456922f285a8630c61f0a007a299a04f8c6c5dda0e6bac67d320d127e3dcc8604682dc884d0b48f8d4a93bf56e35a18e103cb2dab56a6a30b94235b18330de24a25f4b2664d248205da2514ccd1b8b26ebde08f65f042090292b61e141d1f442d7b09b7c03cf0b73b381465a36c9ed405de2436ed996b2ac8b139f77ab109b4f75fe31535b387f47761f87d07164547378dec19794622a54617781d2a52d31d171f3046ce70eaf63d11190fe375855237911305aa6a4828fbb0b8e26be34adbd2dc1781b024d4f67225ad7a6397ad9afa85393c67980fa16e4dbf31360e62eb39ebdc4d0a99d4aede3296d0128e51aee681f8e25819bb80ae91875e898f936d467901dd01a6757adb6af556246e4e309c9db9f256f9657d357c38f880c427a706b7321ca1500d4e1409ebcb94b73512e909fdb4a3f12e20286e11d689132d31a6cfce5eebf475f6b7a1728ebb2b142e41c8449af98dc3632df650ae78860c29d0f6927ae357bb7e1b6182d2ef20c8f69dc68f44393b30b31e080efb8fcdbd6326312846f9f8c59382e443d2f9ce475c05632b453a0ec62f6ef3afd034a7ae49d70a94e9f2e0d0f779dc73f1b37ad8ca20dd6d18e78d240c89c1c21baa817794e16302d6016f5ec94c66eddfa7ddf0e193875637eb6e5f67f6b37005f60862d058053a3efa0ff7a54799b42401cda47b710891b2d21e6942ee8f76381a7b11fc39d89e04ab2fa35af2f3f053f1aaeca8482dce890a46847b04db545a899fc9594671220a2f2336253efa8f9154a9a8b10d75ec63a622e16927f44699794f093134a0848846c816b8eabe99f9732933bc66aa894811f68005881f5f76a7e556d884e3f76ce58fbe89723806dad8128af4f096d43351ae1e38a028740110abb6cd6ecb9f1414edcace0da1b765eee9d69e66e15ed39da0abc127a64f6c1607a081720a2591926e90dbf984186ca1fd5a1d07b79a0aea44e9e39a2ffa981ed2cef6453a952d45d8446f44ae27658849557d631599f06f6c9a177a766e6880b192e84176ac8beb6362d6c9ef20772c3b4f9a5e342eb3852cb54dbcbfb6de86e4dabb9aa14f5033cd049663f78f59bdafdd598d4cee386ef3489f0babd66c474c76cf845fbf8eaddf3cf690a255c7f2272ac3ee7fad99a23ec49472fe2bb59fc794e29ce9c2f6fd8ad1bfabbec45917daedefb32d82ec920248c54a721d138916968a3568878afe97615b707d7573e4e625f3764ee64e665afcf405bb20879effb991ac32b375936efc32428be418b855be9fc76c703315430df32c1f7840791c2b8d6e35404ac8039753629a350a873a35f259c6951f2f55d1ced24a3280f2ae173b039a228d52a5c305451cf2d9c8e7d96cccd47ece68868b52675399b73345ac8bbe9b5c93f925001d0bbe596826c80d985b7cbbe69ab192c1da79bf552eca8526a4e32e219456143f2a20b16a595faf0b98f7ca26dd57c99e68261339eb2534cecc9022efa7cdbc9505f97b8e4a382e0a56da979aed0d4723ba00a84bc054f782d918bea79999d41c3e37223d73343305eb3e9c950566cdb03f11f6eec439c717c841223e0c455d3bb94ac61ebe65cedea803f181d173027636d4d7ff13be4f6c64a85905619c803bfe854c752137a0c717889659a874d8143689255d57b186e3305be4c70b2c0bf8a1b618fb79bcd88227e77d523148191f72c210ecffee12bad641338a9eedef53f6d9150aa38d9317c1e7dd843b70de732dc91e13857fb548285be893bc234488f42eb9889109d4136d1d6eea3494f627c34b1a7f6fc7598f92710"}) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=0x1000) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) [ 741.040245][T11026] binder: 11023:11026 ioctl 4018f50b 0 returned -22 [ 741.043261][T11029] binder: 11023:11029 ioctl 82307201 200000c0 returned -22 [ 741.046981][T11031] binder: 11023:11031 ioctl 4018f50b 0 returned -22 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x7f9c581fffff) 23:33:09 executing program 2: clock_gettime(0x0, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000080)) (async) r0 = semget$private(0x0, 0x2, 0x1) semtimedop(r0, &(0x7f0000000000)=[{0x2, 0x2, 0x800}, {0x3, 0x2}, {0x1, 0xfff7, 0x800}, {0x4, 0x7f, 0x1800}], 0x4, &(0x7f0000000040)={0x77359400}) (async) clock_gettime(0x0, &(0x7f00000000c0)) 23:33:09 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x3b5ab52fc5ae1ba2, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x351082, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, 0x0) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 23:33:09 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) clock_gettime(0x6, &(0x7f0000000000)) 23:33:09 executing program 1: getpgrp(0xffffffffffffffff) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r1, 0x0, 0x2b6c, 0x7}}}, 0x90) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, r1, 0x0) pipe2$9p(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f00000011c0)={{r3}, "6911b4c5a433295f2a8f5d6d33499b406b2ebfa11db9c2c94940c83e62936051df72d90f3cc5a90d8ce6935e7d2bb94c63a2c2101051f30560cd22b43cdff02d957e28a0865ca67a66f43048d93ce9983fec1a10521bb5d9ecd571096bf45190652c519a6f8bde09390ea322eabadef82cf9ec0769c91e760230421324487f4282797a1b66c820320096407b46fe5de81f52a809f4d7a1ab287dd2f8d97f1a32117a3fcceeeaec9cf7d5d8c15abfa359947064243082a1f56de0d290f642ef3259c7f32cddd73b81d225d5c58864572224fda2b906b1e1051faf907ca3780bd8b17286f1a5c1c89fe50347ecf32743b0f09557c45946626a9a3017542d0ce107fb9e2482d835e61175078a24faac85793a1ef6ae1d2917a001c50ca95cde9e61b0bb07259d9537b7b491bddc8fcbc4523f8a94de4b6b7f2127ce1df441c7af1719d8cb23011338636bcde9435ca3ac56d60b85c9da68acec677a18f1c41949edc86305b15daf9986519b72ba8a50370e6d9e27ca806e534d8155616564738531af512e47283dae60091d67799f673e35d8b24fe6868b0fd0574cbc5f69887c1c42966dcd8e3334b3214db45607f37fa72d096d57398983551e15e35c617d0cb4b008ede1160e55e7ee0b73bf0fb8e8776fcf30a3547c73e5e711f17ed3cd2d50359760999fadbaff4986c241bc2783097f567a7a56743ba10650763d678ccce0b3135c74bf99525e3138786afbcd1a11402010c42d0f7cd03b042dfb487c5da3a7d0e5ec0415210d87d3115a0d000539de560113409daead0027bdf98825dc77f27a54bb1683bf1a6a9a7605ff8f947439555310670a97563f65898128613b16688bd12afd04c8d77bc4e84b3a5f5ab41b8805236b1f78e2c61ad9d44deaa1168147ad64902a7cdf3415b4df911ebfe9d372613f991b420e2d2cd2a3588f94d3b40153d5432d0575c48794969b5221bc085da6bfe8440c20899357204a5984e4d47ea3dde31792bd63c137ce17407538ad9d0f57aa35855717311e98088efa6af1e9ea976b74af747b278c377c30b54ca2dda154714058e27d1c7e9bc0d75a9584bf23696542103376de12d0fc0be6605117378cf6608ec03e04c96eacebff73d8334cee9b68904ef510cab55fa09e82a1498aec9ee61a40bc184fb5d218d8b6ac6548a7d4083c94b14713b020ccd6cd0d4a3fad0279ed594b82efa312e19690135dd82c454e1b0d5dca89842eaeda76345e3aee5414a5c99c876d4529d9c00a6f22ada3b9a2d62d7483f669a0113de0a11525f9d0104ba3ae5209f5a64136d9c19e956352d27faedc16702f4604e66bde39cb2e3eef196cf0dd7958b0e43fe9200e0f046f81ca5ebbfb4de1718268f182fc49244b36651412c4279c419c712489dce4389559958f757eaabeff46c3d21d40d070237a4506c03887f6c0f94df8e310ab2f87a6f47a303273868f407f879ef1175cf2e9972e485a3a734d08bf96693ff84e9b4b477dcbb2c4d82695626e4208d7a16a0f4e7860e68f9d838cf0d41901e3299958e563c77f590cdd5522580d26df9e1b10aa42e527847b3cedac8ae069befe4654d71f92c3ecea702cf2d6b02321053bc21e57118bc5d2008c5182471a4b3e0375212c9caee27b452f129f617035ed406750d654317d7f8f7d89305bf5d13c7c8f2ab63e245709853bb66f2f15affd6de928be1366979990821a4ff6b064c83207c79531d828b4b70a985b7226317a23e864907895d09bcc1298e9383060d94ec816992ac6a4b9bb01854497eb1b7e54d768c2bb4722024e941978d47016139d28f00a8e55ce2248e1b6565689d0937394c77d0d8852bee01424530642cffa7485a6faf0802952b4c3406d347996a38321a35faeea4acc6620ff53572ca042151a83c9a0ed1e0cce39d992b2bb56556af23b6380451b1ae338eaa617319045e02b432120f7f88086234dfea118f6b55fd51415235b3299d5709fca0afd11bd6ecc111367dc4125729f0ef3cbd106e9241eb5de45eb64b4941ee6be04a9170af67cfb021e68e19d4b664a967b9aa2d3b56ae976392dc869ea1bccc9cc0741f44b89f786899deac6476bf94fae309eb8dcd8d0631c9f1d528d7815087d1fc9ea1df915d8136fff71ad0af33aff5e2931e99a6cc5eb33bc4afaf2da47e32d4f6d50d38644d92b76690735fff8b29f9e5503b795e1e707ad7e0787cbd664658e3f153ef382785b69c3404805a74f4f661b31da9ab8bf181d6bee25e7ca4918b12cfc19b018de58a949122af31c94289dc3bd5b20440227e3de051b32bca35deadefb5e6c6b95f4ccab5a62c089982e8d822e775a8c7b5b6b468946b9b63d99679200a752e0c8e733582e38dfe1d3e19e7ccdbc4571faf779c5b1637428f4affa9f420a827c5e9ef7410ab676f4e5e447331ba0bee12aa3e41e8af8f02a003999e9288d8a7b3a26183996ddf27cedee0c7db76ae108114e6feb5299ed4069f96fa22dfe056c12ff1a63829f177779b30c09526dd06a0a90ef8eef363a4f2fd09aa6c11451aaea433d4185b1610a5c922abd5779929aaa71c407ec2284f6a81668d15cca4cc7b910bb65899fe23dfc95dfb12779ce6c1849f736d6d9313ed7b029b5e34873c47f63d1d86c74697fb66597060365dc6c60015bf7de2ba3c88daa3b3becae65ae9ad04a2bbfbc72884673f05e72c2db7af4e8b2acbf7fb6c6cb67290208d5724b0ca4ad1f09cab3ed2fd43debb3a30701cb12b39a792e8c370e7424b4965186e55f180348fe8bf626e34b0564927e6e02c279b8db79f55d8e257529285f5fc1dfd822246a42d8f69143f6eef8be3ca3add76cbfeeaa35a8fc7afeac7b49c97e48e55373e28b608cb9126fe394c0e3dd4a5876b3ae81695e1c2091be03864d70efd3ec2e3af439cdb5ead2a44f11aa8b8bd7b2ad285d517a2e119e8776464eff1b3795370c72e571322647cf44a92d2e6966d76349de9fa8605cc680fcab3c51e2db17baa440ca13319c01e113504f0d5ff73baeccca47bb4dac05d3e7da8aaab597d66a622cde2455672b003ff3818f4cb6484f51b38b93d6eed4b2059d664554d65dacf2f5c426051631825adca28e326329109c45f194fd06e1003a0463bce55a745cc5c56d4b205fac37e10fb695880d42f7096431479983ce2900c3ffe903f68f25133e397ef6bcb3f8589fbaeb3d3b4468adb0fb8f332baa88ef9f111d6b950bc5ee2689177bde187a79378f3a78405f182545ff8981680d0f269f42603be850b7bd65f75d430068c4d9a3452e9a92b70bb933e564cdef83bbccdd9b26c5b1f0ec430550ce681c1e1b3ee02757116aa78189a55f26db2c95e9fc43ae994068813ae5e9f616211469d0d26a7ca75c73caa6a9db7a19420137a7a227a1f9f7a3347d347e2c5118dfd6c22a606c2454265cdd5785b1d4cd6bcffc5c0a3f48495d72add9f196c8906ccd86d97f6bd25e9dcd9482cc2703fdb53fe766a350660d9635027c10ae704b629ee7049fe0d01ce7b56c3af16835d8cb9be7239074652f59586eb7c5d6ba8e0c742d9bc39e79deeba93be492f400495de6b6002e1205f8e2e963727764e9be0768953c93a612e97d48a63e1cb2c125ef02cc11cabe759a9143a717b03b256ccc6e72a2a40d4523b5a12c31b2c38582b92a902438652407bdb6214d912976a7c4dd7b7a088049fd3170de9679ad4c4866c89965075e703c64dd890cea3218394a102aaae021f9f2b61b30bb4e471237b2d26c5620da6b7a48a1059ae3a8300315a587b94cb22cd1aa505cda86f95a63b6664d097960885cea5e68503cf6e4fa143a14a68939a9af20c0bb8c7899f72456ecca3116d14eae755872d44ddf58a0ff965237b5b0b05e494502cdc4ccfc1c503586c18e499667f25218981816bd9d04cbdbdaa51fc11c77a8a9214258aca862be7aca0209f24f3b979b30a9b8f9167be04192a3bc456922f285a8630c61f0a007a299a04f8c6c5dda0e6bac67d320d127e3dcc8604682dc884d0b48f8d4a93bf56e35a18e103cb2dab56a6a30b94235b18330de24a25f4b2664d248205da2514ccd1b8b26ebde08f65f042090292b61e141d1f442d7b09b7c03cf0b73b381465a36c9ed405de2436ed996b2ac8b139f77ab109b4f75fe31535b387f47761f87d07164547378dec19794622a54617781d2a52d31d171f3046ce70eaf63d11190fe375855237911305aa6a4828fbb0b8e26be34adbd2dc1781b024d4f67225ad7a6397ad9afa85393c67980fa16e4dbf31360e62eb39ebdc4d0a99d4aede3296d0128e51aee681f8e25819bb80ae91875e898f936d467901dd01a6757adb6af556246e4e309c9db9f256f9657d357c38f880c427a706b7321ca1500d4e1409ebcb94b73512e909fdb4a3f12e20286e11d689132d31a6cfce5eebf475f6b7a1728ebb2b142e41c8449af98dc3632df650ae78860c29d0f6927ae357bb7e1b6182d2ef20c8f69dc68f44393b30b31e080efb8fcdbd6326312846f9f8c59382e443d2f9ce475c05632b453a0ec62f6ef3afd034a7ae49d70a94e9f2e0d0f779dc73f1b37ad8ca20dd6d18e78d240c89c1c21baa817794e16302d6016f5ec94c66eddfa7ddf0e193875637eb6e5f67f6b37005f60862d058053a3efa0ff7a54799b42401cda47b710891b2d21e6942ee8f76381a7b11fc39d89e04ab2fa35af2f3f053f1aaeca8482dce890a46847b04db545a899fc9594671220a2f2336253efa8f9154a9a8b10d75ec63a622e16927f44699794f093134a0848846c816b8eabe99f9732933bc66aa894811f68005881f5f76a7e556d884e3f76ce58fbe89723806dad8128af4f096d43351ae1e38a028740110abb6cd6ecb9f1414edcace0da1b765eee9d69e66e15ed39da0abc127a64f6c1607a081720a2591926e90dbf984186ca1fd5a1d07b79a0aea44e9e39a2ffa981ed2cef6453a952d45d8446f44ae27658849557d631599f06f6c9a177a766e6880b192e84176ac8beb6362d6c9ef20772c3b4f9a5e342eb3852cb54dbcbfb6de86e4dabb9aa14f5033cd049663f78f59bdafdd598d4cee386ef3489f0babd66c474c76cf845fbf8eaddf3cf690a255c7f2272ac3ee7fad99a23ec49472fe2bb59fc794e29ce9c2f6fd8ad1bfabbec45917daedefb32d82ec920248c54a721d138916968a3568878afe97615b707d7573e4e625f3764ee64e665afcf405bb20879effb991ac32b375936efc32428be418b855be9fc76c703315430df32c1f7840791c2b8d6e35404ac8039753629a350a873a35f259c6951f2f55d1ced24a3280f2ae173b039a228d52a5c305451cf2d9c8e7d96cccd47ece68868b52675399b73345ac8bbe9b5c93f925001d0bbe596826c80d985b7cbbe69ab192c1da79bf552eca8526a4e32e219456143f2a20b16a595faf0b98f7ca26dd57c99e68261339eb2534cecc9022efa7cdbc9505f97b8e4a382e0a56da979aed0d4723ba00a84bc054f782d918bea79999d41c3e37223d73343305eb3e9c950566cdb03f11f6eec439c717c841223e0c455d3bb94ac61ebe65cedea803f181d173027636d4d7ff13be4f6c64a85905619c803bfe854c752137a0c717889659a874d8143689255d57b186e3305be4c70b2c0bf8a1b618fb79bcd88227e77d523148191f72c210ecffee12bad641338a9eedef53f6d9150aa38d9317c1e7dd843b70de732dc91e13857fb548285be893bc234488f42eb9889109d4136d1d6eea3494f627c34b1a7f6fc7598f92710"}) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=0x1000) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) [ 741.068000][T11044] binder: 11043:11044 ioctl 4018f50b 0 returned -22 [ 741.068291][T11046] binder: 11043:11046 ioctl 4018f50b 0 returned -22 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x7f9c583fffff) [ 741.074488][T11044] binder: 11043:11044 ioctl 82307201 200000c0 returned -22 [ 741.078556][T11046] binder: 11043:11046 ioctl 4018f50b 0 returned -22 [ 741.081818][T11044] binder: 11043:11044 ioctl 4018f50b 0 returned -22 23:33:09 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x3b5ab52fc5ae1ba2, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x351082, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 23:33:09 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) (async) clock_gettime(0x6, &(0x7f0000000000)) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x7f9c585fffff) 23:33:09 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x10000, 0x6}}, './file0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000080)={@none, 0x60d0}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) [ 741.096654][T11054] binder: 11053:11054 ioctl 4018f50b 0 returned -22 [ 741.100066][T11054] binder: 11053:11054 ioctl 82307201 200000c0 returned -22 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x7f9c587fffff) [ 741.105668][T11054] binder: 11053:11054 ioctl 4018f50b 0 returned -22 23:33:09 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) (async) clock_gettime(0x6, &(0x7f0000000000)) 23:33:09 executing program 1: clock_gettime(0x0, &(0x7f0000000000)) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x4, 0x8000, 0x400, 0x5, 0x2}, 0x14) clock_getres(0x3, &(0x7f00000000c0)) 23:33:09 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x10000, 0x6}}, './file0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000080)={@none, 0x60d0}) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) 23:33:09 executing program 1: clock_gettime(0x0, &(0x7f0000000000)) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x4, 0x8000, 0x400, 0x5, 0x2}, 0x14) clock_getres(0x3, &(0x7f00000000c0)) 23:33:09 executing program 2: r0 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r0, 0x0, 0x2b6c, 0x7}}}, 0x90) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xc41a575abde0f3e6, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '$#\\!{'}}, {@version_u}, {@dfltgid}, {@access_uid={'access', 0x3d, r0}}], [{@pcr={'pcr', 0x3d, 0x3b}}, {@smackfsroot={'smackfsroot', 0x3d, '+.&},]'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@fsname={'fsname', 0x3d, '@(&-*#\'!'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '\b'}}]}}) clock_gettime(0x1, &(0x7f0000000140)) 23:33:09 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x10000, 0x6}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x10000, 0x6}}, './file0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000080)={@none, 0x60d0}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x7f9c589fffff) 23:33:09 executing program 2: geteuid() (async) r0 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r0, 0x0, 0x2b6c, 0x7}}}, 0x90) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xc41a575abde0f3e6, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '$#\\!{'}}, {@version_u}, {@dfltgid}, {@access_uid={'access', 0x3d, r0}}], [{@pcr={'pcr', 0x3d, 0x3b}}, {@smackfsroot={'smackfsroot', 0x3d, '+.&},]'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@fsname={'fsname', 0x3d, '@(&-*#\'!'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '\b'}}]}}) clock_gettime(0x1, &(0x7f0000000140)) 23:33:09 executing program 1: clock_gettime(0x0, &(0x7f0000000000)) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x4, 0x8000, 0x400, 0x5, 0x2}, 0x14) clock_getres(0x3, &(0x7f00000000c0)) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x7f9c58dfffff) 23:33:09 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x400280, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0xfffffffffffffffe, 0x0) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x5) socket$rxrpc(0x21, 0x2, 0x2) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x7f9c59bb2fff) 23:33:09 executing program 2: r0 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x1, 0x48000000, 0x2, 0x7f, 0x1, {0x5, 0x4, 0x40, 0x6, 0x0, 0x400, 0x7ff, 0xbb94, 0x2, 0xa000, 0xf1cb, r0, 0x0, 0x2b6c, 0x7}}}, 0x90) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xc41a575abde0f3e6, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '$#\\!{'}}, {@version_u}, {@dfltgid}, {@access_uid={'access', 0x3d, r0}}], [{@pcr={'pcr', 0x3d, 0x3b}}, {@smackfsroot={'smackfsroot', 0x3d, '+.&},]'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@fsname={'fsname', 0x3d, '@(&-*#\'!'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '\b'}}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xc41a575abde0f3e6, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '$#\\!{'}}, {@version_u}, {@dfltgid}, {@access_uid={'access', 0x3d, r0}}], [{@pcr={'pcr', 0x3d, 0x3b}}, {@smackfsroot={'smackfsroot', 0x3d, '+.&},]'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@fsname={'fsname', 0x3d, '@(&-*#\'!'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '\b'}}]}}) clock_gettime(0x1, &(0x7f0000000140)) 23:33:09 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x400280, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0xfffffffffffffffe, 0x0) (async) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x5) (async) socket$rxrpc(0x21, 0x2, 0x2) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 23:33:09 executing program 1: clock_gettime(0x0, &(0x7f0000000000)) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) clock_getres(0x3, &(0x7f00000000c0)) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x7f9c59bd2fff) 23:33:09 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x400280, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0xfffffffffffffffe, 0x0) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x5) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 23:33:09 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xe000, 0x5987453d2327a9fd}, {0x0, 0x8, 0x1800}, {0x0, 0x1, 0x800}, {0x3, 0x1ff, 0x1000}, {0x4, 0xfff9}, {0x1, 0x7, 0x800}], 0x6, &(0x7f0000000080)={r0, r1+10000000}) clock_getres(0x7, &(0x7f00000000c0)) r2 = getpgrp(0x0) sched_rr_get_interval(r2, &(0x7f0000000180)) sched_rr_get_interval(r2, &(0x7f0000000100)) 23:33:09 executing program 1: clock_gettime(0x0, &(0x7f0000000000)) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) clock_getres(0x3, &(0x7f00000000c0)) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x7fffffffffffa) 23:33:09 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xe000, 0x5987453d2327a9fd}, {0x0, 0x8, 0x1800}, {0x0, 0x1, 0x800}, {0x3, 0x1ff, 0x1000}, {0x4, 0xfff9}, {0x1, 0x7, 0x800}], 0x6, &(0x7f0000000080)={r0, r1+10000000}) clock_getres(0x7, &(0x7f00000000c0)) r2 = getpgrp(0x0) sched_rr_get_interval(r2, &(0x7f0000000180)) (async) sched_rr_get_interval(r2, &(0x7f0000000100)) 23:33:09 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x113080, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3, 0x4}}, './file0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000080)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7f}) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xffffffffffffffc1) socket$inet_mptcp(0x2, 0x1, 0x106) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x80000000000000) 23:33:09 executing program 1: clock_gettime(0x0, &(0x7f0000000000)) clock_getres(0x3, &(0x7f00000000c0)) 23:33:09 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) (async) clock_gettime(0x1, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xe000, 0x5987453d2327a9fd}, {0x0, 0x8, 0x1800}, {0x0, 0x1, 0x800}, {0x3, 0x1ff, 0x1000}, {0x4, 0xfff9}, {0x1, 0x7, 0x800}], 0x6, &(0x7f0000000080)={r0, r1+10000000}) clock_getres(0x7, &(0x7f00000000c0)) (async) clock_getres(0x7, &(0x7f00000000c0)) r2 = getpgrp(0x0) sched_rr_get_interval(r2, &(0x7f0000000180)) sched_rr_get_interval(r2, &(0x7f0000000100)) 23:33:09 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x113080, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3, 0x4}}, './file0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000080)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7f}) (async) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xffffffffffffffc1) socket$inet_mptcp(0x2, 0x1, 0x106) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xc0ff2000000000) 23:33:09 executing program 1: clock_getres(0x3, &(0x7f00000000c0)) 23:33:09 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x100000000000000) 23:33:09 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x113080, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3, 0x4}}, './file0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000080)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7f}) (async) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xffffffffffffffc1) socket$inet_mptcp(0x2, 0x1, 0x106) 23:33:09 executing program 1: clock_getres(0x0, &(0x7f00000000c0)) 23:33:09 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x200000000000000) 23:33:09 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004540), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="cb9453e10f57341d1800000006768d75c21f9b91b4da4d98d3463f043581962a1ba708150f63af7c9693135f076badb690c9ef06f068107d589162f24b5fcc26edc1f7cc73", @ANYRES32=r0, @ANYBLOB="00000065300000000000000000000000551d2e8f97b59a20afb433e50c79"]) read$FUSE(r2, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) write$FUSE_WRITE(r4, &(0x7f0000000100)={0x18, 0x0, r3, {0x20}}, 0x18) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000000)={0xa0, 0x0, r1, {{0x6, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc16b}}}}, 0xa0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004540), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x2d, 0x6, 0x0, {0x5, 0x4, 0x4, 0x0, '!-},'}}, 0x2d) read$FUSE(r6, &(0x7f0000002340)={0x2020}, 0x2020) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000000)={0xa0, 0x0, r7, {{0x6, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc16b}}}}, 0xa0) write$FUSE_LSEEK(r5, &(0x7f0000000180)={0x18, 0x0, r7, {0x4879}}, 0x18) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0xfffffffffffffffe, r1, {{0x4a13, 0x464, 0x1}}}, 0x28) r8 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, 0x0) read$FUSE(r9, &(0x7f00000065c0)={0x2020}, 0x2020) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r8, 0x0) 23:33:09 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) clock_gettime(0x1, &(0x7f0000000140)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) (async) 23:33:09 executing program 1: clock_getres(0x0, &(0x7f00000000c0)) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x300000000000000) 23:33:09 executing program 1: clock_getres(0x0, &(0x7f00000000c0)) 23:33:09 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x4, 0x8, 0x1000}, {0x0, 0xfff, 0x800}, {0x2, 0x100, 0x1800}, {0x0, 0x200, 0x800}, {0x3, 0x460, 0x800}, {0x4, 0x1f, 0x1000}, {0x0, 0x9, 0x1000}, {0x1, 0x7, 0x1800}], 0x8, &(0x7f0000000080)={r0, r1+60000000}) clock_getres(0x0, &(0x7f00000000c0)) r2 = getpgrp(0x0) sched_rr_get_interval(r2, &(0x7f0000000180)) sched_rr_get_interval(r2, &(0x7f0000000100)) clock_getres(0x2, &(0x7f00000001c0)) 23:33:09 executing program 1: clock_getres(0x3, 0x0) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x400000000000000) 23:33:09 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x4, 0x8, 0x1000}, {0x0, 0xfff, 0x800}, {0x2, 0x100, 0x1800}, {0x0, 0x200, 0x800}, {0x3, 0x460, 0x800}, {0x4, 0x1f, 0x1000}, {0x0, 0x9, 0x1000}, {0x1, 0x7, 0x1800}], 0x8, &(0x7f0000000080)={r0, r1+60000000}) (async) clock_getres(0x0, &(0x7f00000000c0)) (async) r2 = getpgrp(0x0) sched_rr_get_interval(r2, &(0x7f0000000180)) sched_rr_get_interval(r2, &(0x7f0000000100)) clock_getres(0x2, &(0x7f00000001c0)) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x500000000000000) 23:33:09 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004540), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="cb9453e10f57341d1800000006768d75c21f9b91b4da4d98d3463f043581962a1ba708150f63af7c9693135f076badb690c9ef06f068107d589162f24b5fcc26edc1f7cc73", @ANYRES32=r0, @ANYBLOB="00000065300000000000000000000000551d2e8f97b59a20afb433e50c79"]) (async) read$FUSE(r2, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) (async) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) (async) write$FUSE_WRITE(r4, &(0x7f0000000100)={0x18, 0x0, r3, {0x20}}, 0x18) (async) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000000)={0xa0, 0x0, r1, {{0x6, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc16b}}}}, 0xa0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004540), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x2d, 0x6, 0x0, {0x5, 0x4, 0x4, 0x0, '!-},'}}, 0x2d) (async, rerun: 64) read$FUSE(r6, &(0x7f0000002340)={0x2020}, 0x2020) (async, rerun: 64) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000000)={0xa0, 0x0, r7, {{0x6, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc16b}}}}, 0xa0) write$FUSE_LSEEK(r5, &(0x7f0000000180)={0x18, 0x0, r7, {0x4879}}, 0x18) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0xfffffffffffffffe, r1, {{0x4a13, 0x464, 0x1}}}, 0x28) r8 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r9 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, 0x0) (async) read$FUSE(r9, &(0x7f00000065c0)={0x2020}, 0x2020) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r8, 0x0) 23:33:09 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x7f9c589fffff) 23:33:09 executing program 1: clock_gettime(0x4, &(0x7f0000000140)) 23:33:09 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x4, 0x8, 0x1000}, {0x0, 0xfff, 0x800}, {0x2, 0x100, 0x1800}, {0x0, 0x200, 0x800}, {0x3, 0x460, 0x800}, {0x4, 0x1f, 0x1000}, {0x0, 0x9, 0x1000}, {0x1, 0x7, 0x1800}], 0x8, &(0x7f0000000080)={r0, r1+60000000}) clock_getres(0x0, &(0x7f00000000c0)) r2 = getpgrp(0x0) sched_rr_get_interval(r2, &(0x7f0000000180)) (async) sched_rr_get_interval(r2, &(0x7f0000000100)) (async, rerun: 64) clock_getres(0x2, &(0x7f00000001c0)) (rerun: 64) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x600000000000000) 23:33:09 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004540), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="cb9453e10f57341d1800000006768d75c21f9b91b4da4d98d3463f043581962a1ba708150f63af7c9693135f076badb690c9ef06f068107d589162f24b5fcc26edc1f7cc73", @ANYRES32=r0, @ANYBLOB="00000065300000000000000000000000551d2e8f97b59a20afb433e50c79"]) read$FUSE(r2, &(0x7f0000004580)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) write$FUSE_WRITE(r4, &(0x7f0000000100)={0x18, 0x0, r3, {0x20}}, 0x18) (async) write$FUSE_WRITE(r4, &(0x7f0000000100)={0x18, 0x0, r3, {0x20}}, 0x18) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000000)={0xa0, 0x0, r1, {{0x6, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc16b}}}}, 0xa0) (async) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000000)={0xa0, 0x0, r1, {{0x6, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc16b}}}}, 0xa0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004540), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x2d, 0x6, 0x0, {0x5, 0x4, 0x4, 0x0, '!-},'}}, 0x2d) read$FUSE(r6, &(0x7f0000002340)={0x2020}, 0x2020) (async) read$FUSE(r6, &(0x7f0000002340)={0x2020}, 0x2020) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000000)={0xa0, 0x0, r7, {{0x6, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc16b}}}}, 0xa0) write$FUSE_LSEEK(r5, &(0x7f0000000180)={0x18, 0x0, r7, {0x4879}}, 0x18) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0xfffffffffffffffe, r1, {{0x4a13, 0x464, 0x1}}}, 0x28) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r8 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, 0x0) read$FUSE(r9, &(0x7f00000065c0)={0x2020}, 0x2020) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r8, 0x0) 23:33:09 executing program 1: clock_gettime(0x4, &(0x7f0000000140)) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x700000000000000) 23:33:09 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) pselect6(0x40, &(0x7f0000000000)={0x20, 0x7ff, 0xad6, 0x0, 0x401, 0x0, 0x2, 0x9}, &(0x7f0000000040)={0x3, 0x1000, 0x7, 0x1, 0x3, 0x0, 0x2, 0x8000000000000001}, &(0x7f0000000080)={0xc2000, 0x5, 0x4, 0x1, 0x3, 0x7fffffff, 0x8, 0x1}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000100)={[0x81]}, 0x8}) 23:33:09 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) (async) pselect6(0x40, &(0x7f0000000000)={0x20, 0x7ff, 0xad6, 0x0, 0x401, 0x0, 0x2, 0x9}, &(0x7f0000000040)={0x3, 0x1000, 0x7, 0x1, 0x3, 0x0, 0x2, 0x8000000000000001}, &(0x7f0000000080)={0xc2000, 0x5, 0x4, 0x1, 0x3, 0x7fffffff, 0x8, 0x1}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000100)={[0x81]}, 0x8}) 23:33:09 executing program 1: clock_gettime(0x4, &(0x7f0000000140)) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x800000000000000) 23:33:09 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) pselect6(0x40, &(0x7f0000000000)={0x20, 0x7ff, 0xad6, 0x0, 0x401, 0x0, 0x2, 0x9}, &(0x7f0000000040)={0x3, 0x1000, 0x7, 0x1, 0x3, 0x0, 0x2, 0x8000000000000001}, &(0x7f0000000080)={0xc2000, 0x5, 0x4, 0x1, 0x3, 0x7fffffff, 0x8, 0x1}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000100)={[0x81]}, 0x8}) (async) pselect6(0x40, &(0x7f0000000000)={0x20, 0x7ff, 0xad6, 0x0, 0x401, 0x0, 0x2, 0x9}, &(0x7f0000000040)={0x3, 0x1000, 0x7, 0x1, 0x3, 0x0, 0x2, 0x8000000000000001}, &(0x7f0000000080)={0xc2000, 0x5, 0x4, 0x1, 0x3, 0x7fffffff, 0x8, 0x1}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000100)={[0x81]}, 0x8}) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x900000000000000) 23:33:09 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff, 0x51}}, './file0\x00'}) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x2878, 0x0, &(0x7f0000000080), 0x2, 0x7, 0x0, 0x81, 0x1, 0x0, 0x80000000, 'syz1\x00'}) clock_gettime(0x1, &(0x7f0000000000)) 23:33:09 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) finit_module(r1, &(0x7f0000000180)='/dev/nmem0\x00', 0x5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000080)={"e9bb1fd046f125f86a87822a14878e79", 0x0, 0x0, {0xffffffffffffff81, 0x401}, {0x2, 0x7}, 0x9, [0x3, 0x4, 0x2, 0x1, 0x0, 0x401, 0x1, 0x800, 0x80010009, 0x50fe, 0x6, 0x8, 0x200, 0x9, 0x2, 0x20]}) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) fcntl$setlease(r4, 0x400, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000200)=ANY=[@ANYBLOB="0100"/12, @ANYRES32=r2, @ANYBLOB="02000000010000802e2f66696c6530004dfaeab6a93bb5c23053027116c03f561e810c7aa26548b3f6dd6db448eaa22d1bc17cea2c998f60c5c3631989f8147796b028e5a3d2647ca1b8661d882116f53c149e5df8d774597483572088b6ab7886b3446fc5d347b0d04a940e48c94f945ed77a515a92369f0734a5c800ea0b839dcd5aad21ea0b129d8f9dab96fe634367398d"]) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x8, 0x7ff}}, './file0\x00'}) read$FUSE(r4, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) ioctl$FLOPPY_FDGETDRVSTAT(r7, 0x80500212, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002380), 0x1}) ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000002340)={r6, 0x0, 0x40}) shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) 23:33:09 executing program 1: clock_gettime(0x0, &(0x7f0000000140)) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xa00000000000000) 23:33:09 executing program 1: clock_gettime(0x0, &(0x7f0000000140)) 23:33:09 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff, 0x51}}, './file0\x00'}) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x2878, 0x0, &(0x7f0000000080), 0x2, 0x7, 0x0, 0x81, 0x1, 0x0, 0x80000000, 'syz1\x00'}) clock_gettime(0x1, &(0x7f0000000000)) 23:33:09 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) finit_module(r1, &(0x7f0000000180)='/dev/nmem0\x00', 0x5) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000080)={"e9bb1fd046f125f86a87822a14878e79", 0x0, 0x0, {0xffffffffffffff81, 0x401}, {0x2, 0x7}, 0x9, [0x3, 0x4, 0x2, 0x1, 0x0, 0x401, 0x1, 0x800, 0x80010009, 0x50fe, 0x6, 0x8, 0x200, 0x9, 0x2, 0x20]}) (async) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) (async) fcntl$setlease(r4, 0x400, 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000200)=ANY=[@ANYBLOB="0100"/12, @ANYRES32=r2, @ANYBLOB="02000000010000802e2f66696c6530004dfaeab6a93bb5c23053027116c03f561e810c7aa26548b3f6dd6db448eaa22d1bc17cea2c998f60c5c3631989f8147796b028e5a3d2647ca1b8661d882116f53c149e5df8d774597483572088b6ab7886b3446fc5d347b0d04a940e48c94f945ed77a515a92369f0734a5c800ea0b839dcd5aad21ea0b129d8f9dab96fe634367398d"]) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x8, 0x7ff}}, './file0\x00'}) (async) read$FUSE(r4, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r7 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) (async) ioctl$FLOPPY_FDGETDRVSTAT(r7, 0x80500212, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002380), 0x1}) (async) ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000002340)={r6, 0x0, 0x40}) (async) shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) 23:33:09 executing program 1: clock_gettime(0x0, &(0x7f0000000140)) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xd00000000000000) 23:33:09 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff, 0x51}}, './file0\x00'}) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x2878, 0x0, &(0x7f0000000080), 0x2, 0x7, 0x0, 0x81, 0x1, 0x0, 0x80000000, 'syz1\x00'}) clock_gettime(0x1, &(0x7f0000000000)) 23:33:09 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) finit_module(r1, &(0x7f0000000180)='/dev/nmem0\x00', 0x5) (async) finit_module(r1, &(0x7f0000000180)='/dev/nmem0\x00', 0x5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) pipe2$9p(&(0x7f0000000040), 0x800) (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000080)={"e9bb1fd046f125f86a87822a14878e79", 0x0, 0x0, {0xffffffffffffff81, 0x401}, {0x2, 0x7}, 0x9, [0x3, 0x4, 0x2, 0x1, 0x0, 0x401, 0x1, 0x800, 0x80010009, 0x50fe, 0x6, 0x8, 0x200, 0x9, 0x2, 0x20]}) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) fcntl$setlease(r4, 0x400, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000200)=ANY=[@ANYBLOB="0100"/12, @ANYRES32=r2, @ANYBLOB="02000000010000802e2f66696c6530004dfaeab6a93bb5c23053027116c03f561e810c7aa26548b3f6dd6db448eaa22d1bc17cea2c998f60c5c3631989f8147796b028e5a3d2647ca1b8661d882116f53c149e5df8d774597483572088b6ab7886b3446fc5d347b0d04a940e48c94f945ed77a515a92369f0734a5c800ea0b839dcd5aad21ea0b129d8f9dab96fe634367398d"]) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x8, 0x7ff}}, './file0\x00'}) read$FUSE(r4, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) ioctl$FLOPPY_FDGETDRVSTAT(r7, 0x80500212, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002380), 0x1}) ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000002340)={r6, 0x0, 0x40}) shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) 23:33:09 executing program 1: clock_gettime(0x4, 0x0) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xe00000000000000) 23:33:09 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) clock_gettime(0x2, &(0x7f0000000000)) 23:33:09 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r1, 0x8004af70, &(0x7f0000000080)) 23:33:09 executing program 1: clock_gettime(0x4, 0x0) 23:33:09 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) (async) clock_gettime(0x2, &(0x7f0000000000)) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xf00000000000000) 23:33:09 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r1, 0x8004af70, &(0x7f0000000080)) 23:33:09 executing program 1: clock_gettime(0x4, 0x0) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xfaffffffffff0700) 23:33:09 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) clock_gettime(0x2, &(0x7f0000000000)) clock_gettime(0x1, &(0x7f0000000140)) (async) clock_gettime(0x2, &(0x7f0000000000)) (async) 23:33:09 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r1, 0x8004af70, &(0x7f0000000080)) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xff0f002100000000) 23:33:09 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004540), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r1, &(0x7f0000002340)={0x2020}, 0x2020) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000000)={0xa0, 0x0, r2, {{0x6, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc16b}}}}, 0xa0) r3 = getegid() write$FUSE_ATTR(r0, &(0x7f0000000000)={0x78, 0x0, r2, {0x6, 0xffff, 0x0, {0x4, 0x7, 0x1, 0x2, 0x9, 0x0, 0xff, 0xf6b, 0x9, 0x1000, 0x0, 0xee00, r3, 0x80000001, 0x200}}}, 0x78) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xff2fbb599c7f0000) 23:33:09 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x800000000000000) 23:33:09 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x220001, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0xc8b, 0x521401) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) inotify_rm_watch(r2, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x100000001) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, 0x0) finit_module(r3, &(0x7f0000000080)='#]\x00', 0x2) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xff2fbd599c7f0000) [ 741.612139][T11264] binder: 11263:11264 ioctl 4018f50b 0 returned -22 23:33:09 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x800000000000000) 23:33:09 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x220001, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0xc8b, 0x521401) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) inotify_rm_watch(r2, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x100000001) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, 0x0) finit_module(r3, &(0x7f0000000080)='#]\x00', 0x2) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xffafcb5655550000) [ 741.637023][T11271] binder: 11269:11271 ioctl 4018f50b 0 returned -22 23:33:09 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) (async) clock_gettime(0x1, &(0x7f0000000140)) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004540), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r1, &(0x7f0000002340)={0x2020}, 0x2020) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000000)={0xa0, 0x0, r2, {{0x6, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc16b}}}}, 0xa0) (async) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000000)={0xa0, 0x0, r2, {{0x6, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc16b}}}}, 0xa0) r3 = getegid() write$FUSE_ATTR(r0, &(0x7f0000000000)={0x78, 0x0, r2, {0x6, 0xffff, 0x0, {0x4, 0x7, 0x1, 0x2, 0x9, 0x0, 0xff, 0xf6b, 0x9, 0x1000, 0x0, 0xee00, r3, 0x80000001, 0x200}}}, 0x78) (async) write$FUSE_ATTR(r0, &(0x7f0000000000)={0x78, 0x0, r2, {0x6, 0xffff, 0x0, {0x4, 0x7, 0x1, 0x2, 0x9, 0x0, 0xff, 0xf6b, 0x9, 0x1000, 0x0, 0xee00, r3, 0x80000001, 0x200}}}, 0x78) 23:33:09 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x500000000000000) 23:33:09 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x220001, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async, rerun: 64) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0xc8b, 0x521401) (async, rerun: 64) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async, rerun: 64) inotify_rm_watch(r2, 0x0) (rerun: 64) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x100000001) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, 0x0) (async) finit_module(r3, &(0x7f0000000080)='#]\x00', 0x2) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xffbfff2000000000) [ 741.676342][T11280] binder: 11277:11280 ioctl 4018f50b 0 returned -22 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xffcfcd5655550000) 23:33:09 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:09 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000040)={0x0, 0x2, 0x40}) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xffef9f579c7f0000) [ 741.700865][T11293] binder: 11292:11293 ioctl 4018f50b 0 returned -22 [ 741.704242][T11293] binder: 11292:11293 ioctl 4018f50b 20000040 returned -22 23:33:09 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000040)={0x0, 0x2, 0x40}) 23:33:09 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004540), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) (async) read$FUSE(r1, &(0x7f0000002340)={0x2020}, 0x2020) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000000)={0xa0, 0x0, r2, {{0x6, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc16b}}}}, 0xa0) (async) r3 = getegid() write$FUSE_ATTR(r0, &(0x7f0000000000)={0x78, 0x0, r2, {0x6, 0xffff, 0x0, {0x4, 0x7, 0x1, 0x2, 0x9, 0x0, 0xff, 0xf6b, 0x9, 0x1000, 0x0, 0xee00, r3, 0x80000001, 0x200}}}, 0x78) 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xffefff1f00000000) [ 741.741611][T11299] binder: 11297:11299 ioctl 4018f50b 0 returned -22 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xffff1f589c7f0000) [ 741.741937][T11300] binder: 11297:11300 ioctl 4018f50b 20000040 returned -22 23:33:09 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000040)={0x0, 0x2, 0x40}) 23:33:09 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) [ 741.767670][T11309] binder: 11308:11309 ioctl 4018f50b 0 returned -22 23:33:09 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xffff3f589c7f0000) [ 741.770376][T11309] binder: 11308:11309 ioctl 4018f50b 20000040 returned -22 23:33:09 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000040)={{0x0, 0x1f}, 'port0\x00', 0x10, 0x81803, 0xab0, 0x0, 0x7, 0x6, 0x1, 0x0, 0x7, 0x58}) 23:33:10 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xffff5f589c7f0000) 23:33:10 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) clock_getres(0x1, &(0x7f0000000000)) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000040)) 23:33:10 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xffff7f589c7f0000) 23:33:10 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000040)={{0x0, 0x1f}, 'port0\x00', 0x10, 0x81803, 0xab0, 0x0, 0x7, 0x6, 0x1, 0x0, 0x7, 0x58}) 23:33:10 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:10 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000040)={{0x0, 0x1f}, 'port0\x00', 0x10, 0x81803, 0xab0, 0x0, 0x7, 0x6, 0x1, 0x0, 0x7, 0x58}) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000040)={{0x0, 0x1f}, 'port0\x00', 0x10, 0x81803, 0xab0, 0x0, 0x7, 0x6, 0x1, 0x0, 0x7, 0x58}) (async) 23:33:10 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xffff9f579c7f0000) 23:33:10 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) clock_getres(0x1, &(0x7f0000000000)) socket$isdn_base(0x22, 0x3, 0x0) (async) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000040)) 23:33:10 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x7fffffff, 0x5}}, './file0\x00'}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xffffffffffffffff) 23:33:10 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) clock_getres(0x1, &(0x7f0000000000)) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000040)) clock_gettime(0x1, &(0x7f0000000140)) (async) clock_getres(0x1, &(0x7f0000000000)) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000040)) (async) 23:33:10 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xffff9f589c7f0000) [ 742.631713][T11338] binder: 11337:11338 ioctl 4018f50b 0 returned -22 23:33:10 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) (rerun: 32) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x7fffffff, 0x5}}, './file0\x00'}) (async, rerun: 64) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xffffffffffffffff) (rerun: 64) 23:33:10 executing program 1: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:10 executing program 2: clock_gettime(0x3, &(0x7f0000000040)) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x4, "8f1d10"}, 0x6) 23:33:10 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xffffdf589c7f0000) [ 742.673710][T11346] binder: 11345:11346 ioctl 4018f50b 0 returned -22 23:33:10 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xfffff12d1b000000) 23:33:10 executing program 2: clock_gettime(0x3, &(0x7f0000000040)) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x4, "8f1d10"}, 0x6) 23:33:10 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x7fffffff, 0x5}}, './file0\x00'}) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xffffffffffffffff) 23:33:10 executing program 2: clock_gettime(0x3, &(0x7f0000000040)) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x4, "8f1d10"}, 0x6) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x4, "8f1d10"}, 0x6) [ 742.705776][T11362] binder: 11361:11362 ioctl 4018f50b 0 returned -22 23:33:10 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xffffff1f00000000) 23:33:11 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mmap$binder(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1, 0x11, r1, 0x0) 23:33:11 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xffffff2000000000) 23:33:11 executing program 2: clock_gettime(0x0, &(0x7f0000000140)) 23:33:11 executing program 1: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 23:33:11 executing program 2: clock_gettime(0x0, &(0x7f0000000140)) 23:33:11 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mmap$binder(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1, 0x11, r1, 0x0) 23:33:11 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0xffffffff00000000) 23:33:11 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mmap$binder(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1, 0x11, r1, 0x0) 23:33:11 executing program 2: clock_gettime(0x0, &(0x7f0000000140)) 23:33:11 executing program 1: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 23:33:11 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x8002, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) 23:33:11 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0xffffffffffffff82) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xed}}, './file0\x00'}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xe22) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x5) 23:33:11 executing program 2: quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000301, 0xffffffffffffffff, 0x0) clock_gettime(0x1, &(0x7f0000000140)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000180)) sched_rr_get_interval(r0, &(0x7f0000000000)) 23:33:11 executing program 3: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x8002, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) 23:33:11 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0xffffffffffffff82) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xed}}, './file0\x00'}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xe22) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x5) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0xffffffffffffff82) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xed}}, './file0\x00'}) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xe22) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x5) (async) 23:33:11 executing program 1: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 23:33:11 executing program 2: quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000301, 0xffffffffffffffff, 0x0) clock_gettime(0x1, &(0x7f0000000140)) (async) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000180)) (async) sched_rr_get_interval(r0, &(0x7f0000000000)) 23:33:11 executing program 1: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 23:33:11 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x8002, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) 23:33:11 executing program 2: quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000301, 0xffffffffffffffff, 0x0) clock_gettime(0x1, &(0x7f0000000140)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000180)) sched_rr_get_interval(r0, &(0x7f0000000000)) (async) sched_rr_get_interval(r0, &(0x7f0000000000)) 23:33:11 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0xffffffffffffff82) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xed}}, './file0\x00'}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xe22) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x5) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0xffffffffffffff82) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xed}}, './file0\x00'}) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xe22) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x5) (async) 23:33:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 23:33:11 executing program 2: clock_gettime(0x1, &(0x7f0000000000)) 23:33:11 executing program 3: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x2}, 0xe) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x1) 23:33:11 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0xe0, 0x0, &(0x7f0000000440)=[@increfs, @clear_death, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@flat=@weak_handle={0x77682a85, 0x3000, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/170, 0xaa, 0x0, 0x2c}, @flat=@handle={0x73682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}}, @decrefs={0x40046307, 0x1}, @free_buffer, @acquire_done={0x40106309, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x4, 0x0, 0x1f}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/217, 0xd9, 0x2, 0x31}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}, @register_looper, @exit_looper], 0x7e, 0x0, &(0x7f0000000580)="ad139e72f0bd174861af078861b5f10b8cbabe9025d0cf7922416f6653d4d2601a9d1b08ec040ba5243ce52af3083c9410887f8d1d7aeed8a0d3568454b6fe69c21c0582ba5f2a21188f119a4098ce41cc84e565dda6474ed0c88b88f9df3f2fe8d62e8ef403b6a94d70b29c134f923592b0f0174ee03f92cb11e722f283"}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000380), 0x400000, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000680)={@empty, @rand_addr=0x64010101, 0xffffffffffffffff, "758418b9b3a00ed2221ac4099ffd15650383d42bf4a0dfaf9e1f58ab4e232f53", 0x79649411, 0x3ff, 0x7, 0x7}, 0x3c) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f00000006c0)={0x1, 0x9, 0x5}) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000640), 0x4) 23:33:11 executing program 2: clock_gettime(0x1, &(0x7f0000000000)) 23:33:11 executing program 3: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x2}, 0xe) (async) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x1) 23:33:11 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) (async) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0xe0, 0x0, &(0x7f0000000440)=[@increfs, @clear_death, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@flat=@weak_handle={0x77682a85, 0x3000, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/170, 0xaa, 0x0, 0x2c}, @flat=@handle={0x73682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}}, @decrefs={0x40046307, 0x1}, @free_buffer, @acquire_done={0x40106309, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x4, 0x0, 0x1f}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/217, 0xd9, 0x2, 0x31}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}, @register_looper, @exit_looper], 0x7e, 0x0, &(0x7f0000000580)="ad139e72f0bd174861af078861b5f10b8cbabe9025d0cf7922416f6653d4d2601a9d1b08ec040ba5243ce52af3083c9410887f8d1d7aeed8a0d3568454b6fe69c21c0582ba5f2a21188f119a4098ce41cc84e565dda6474ed0c88b88f9df3f2fe8d62e8ef403b6a94d70b29c134f923592b0f0174ee03f92cb11e722f283"}) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000380), 0x400000, 0x0) (async, rerun: 32) r3 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 32) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000680)={@empty, @rand_addr=0x64010101, 0xffffffffffffffff, "758418b9b3a00ed2221ac4099ffd15650383d42bf4a0dfaf9e1f58ab4e232f53", 0x79649411, 0x3ff, 0x7, 0x7}, 0x3c) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f00000006c0)={0x1, 0x9, 0x5}) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000640), 0x4) 23:33:11 executing program 2: clock_gettime(0x1, &(0x7f0000000000)) 23:33:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 23:33:11 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) (async) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0xe0, 0x0, &(0x7f0000000440)=[@increfs, @clear_death, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@flat=@weak_handle={0x77682a85, 0x3000, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/170, 0xaa, 0x0, 0x2c}, @flat=@handle={0x73682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}}, @decrefs={0x40046307, 0x1}, @free_buffer, @acquire_done={0x40106309, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x4, 0x0, 0x1f}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/217, 0xd9, 0x2, 0x31}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}, @register_looper, @exit_looper], 0x7e, 0x0, &(0x7f0000000580)="ad139e72f0bd174861af078861b5f10b8cbabe9025d0cf7922416f6653d4d2601a9d1b08ec040ba5243ce52af3083c9410887f8d1d7aeed8a0d3568454b6fe69c21c0582ba5f2a21188f119a4098ce41cc84e565dda6474ed0c88b88f9df3f2fe8d62e8ef403b6a94d70b29c134f923592b0f0174ee03f92cb11e722f283"}) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000380), 0x400000, 0x0) (async) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000680)={@empty, @rand_addr=0x64010101, 0xffffffffffffffff, "758418b9b3a00ed2221ac4099ffd15650383d42bf4a0dfaf9e1f58ab4e232f53", 0x79649411, 0x3ff, 0x7, 0x7}, 0x3c) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f00000006c0)={0x1, 0x9, 0x5}) (async) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000640), 0x4) 23:33:11 executing program 3: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x2}, 0xe) (async) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x1) 23:33:11 executing program 2: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) clock_gettime(0x1, &(0x7f0000000140)) 23:33:11 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x9) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) 23:33:11 executing program 2: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) clock_gettime(0x1, &(0x7f0000000140)) (async) clock_gettime(0x1, &(0x7f0000000140)) 23:33:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 23:33:11 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x506c0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f0000000040)=[@register_looper, @clear_death={0x400c630f, 0x3}, @register_looper], 0xff, 0x0, &(0x7f0000000080)="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"}) inotify_init() mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) 23:33:11 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x9) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) 23:33:11 executing program 2: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) (async) clock_gettime(0x1, &(0x7f0000000140)) 23:33:11 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x506c0, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f0000000040)=[@register_looper, @clear_death={0x400c630f, 0x3}, @register_looper], 0xff, 0x0, &(0x7f0000000080)="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"}) inotify_init() (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) 23:33:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 23:33:11 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x9) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) 23:33:11 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 23:33:11 executing program 2: clock_gettime(0x5, &(0x7f0000000000)) 23:33:11 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x506c0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f0000000040)=[@register_looper, @clear_death={0x400c630f, 0x3}, @register_looper], 0xff, 0x0, &(0x7f0000000080)="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"}) (async) inotify_init() (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) 23:33:11 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040)={0x8, "1348c2"}, 0x6) 23:33:11 executing program 2: clock_gettime(0x5, &(0x7f0000000000)) 23:33:11 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 23:33:11 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040)={0x8, "1348c2"}, 0x6) 23:33:11 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x4c0500, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "27fbc90831d1db5e", "d749d30952638400", '\x00', "fbf7a0104cffea62"}, 0x28) 23:33:11 executing program 2: clock_gettime(0x5, &(0x7f0000000000)) 23:33:11 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 23:33:11 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040)={0x8, "1348c2"}, 0x6) 23:33:11 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x4c0500, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "27fbc90831d1db5e", "d749d30952638400", '\x00', "fbf7a0104cffea62"}, 0x28) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x4c0500, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "27fbc90831d1db5e", "d749d30952638400", '\x00', "fbf7a0104cffea62"}, 0x28) (async) 23:33:11 executing program 2: clock_gettime(0x6, &(0x7f0000000140)) 23:33:11 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x414100, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) 23:33:11 executing program 1: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 23:33:11 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x4c0500, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "27fbc90831d1db5e", "d749d30952638400", '\x00', "fbf7a0104cffea62"}, 0x28) 23:33:11 executing program 2: clock_gettime(0x6, &(0x7f0000000140)) 23:33:11 executing program 2: clock_gettime(0x6, &(0x7f0000000140)) 23:33:11 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x414100, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) 23:33:11 executing program 0: mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000000)={0x60, 0x0, 0x0, {{0x2, 0x7ff, 0x81, 0x2, 0xffff, 0x2, 0x8000, 0xe5}}}, 0x60) 23:33:11 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) clock_gettime(0x2, &(0x7f0000000000)) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x5, @any, 0xff7f}, 0xe) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7fffffffffffffff) 23:33:11 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x414100, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) 23:33:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 1) 23:33:11 executing program 0: mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000000)={0x60, 0x0, 0x0, {{0x2, 0x7ff, 0x81, 0x2, 0xffff, 0x2, 0x8000, 0xe5}}}, 0x60) 23:33:11 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) (async) clock_gettime(0x2, &(0x7f0000000000)) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x5, @any, 0xff7f}, 0xe) (async) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7fffffffffffffff) 23:33:11 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xfffffffffffffffe) [ 743.290057][T11539] FAULT_INJECTION: forcing a failure. [ 743.290057][T11539] name failslab, interval 1, probability 0, space 0, times 0 23:33:11 executing program 0: mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000000)={0x60, 0x0, 0x0, {{0x2, 0x7ff, 0x81, 0x2, 0xffff, 0x2, 0x8000, 0xe5}}}, 0x60) (async) write$FUSE_STATFS(r0, &(0x7f0000000000)={0x60, 0x0, 0x0, {{0x2, 0x7ff, 0x81, 0x2, 0xffff, 0x2, 0x8000, 0xe5}}}, 0x60) 23:33:11 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xfffffffffffffffe) [ 743.296675][T11539] CPU: 2 PID: 11539 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 743.302248][T11539] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 743.306674][T11539] Call Trace: [ 743.308137][T11539] [ 743.309484][T11539] dump_stack_lvl+0x125/0x1b0 [ 743.311592][T11539] should_fail_ex+0x496/0x5b0 [ 743.313667][T11539] should_failslab+0x9/0x20 [ 743.315679][T11539] __kmem_cache_alloc_node+0x5f/0x470 [ 743.317986][T11539] ? lock_acquire+0x464/0x510 [ 743.319795][T11539] ? tomoyo_realpath_from_path+0xb9/0x710 [ 743.321933][T11539] __kmalloc+0x4f/0x100 [ 743.323608][T11539] tomoyo_realpath_from_path+0xb9/0x710 [ 743.325904][T11539] ? lock_release+0x4bf/0x680 [ 743.327957][T11539] ? tomoyo_profile+0x47/0x60 [ 743.329759][T11539] tomoyo_path_number_perm+0x243/0x590 [ 743.332127][T11539] ? tomoyo_path_number_perm+0x1eb/0x590 [ 743.334374][T11539] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 743.336723][T11539] ? lock_release+0x4bf/0x680 [ 743.338588][T11539] ? reacquire_held_locks+0x4b0/0x4b0 [ 743.340854][T11539] ? bit_wait_timeout+0x160/0x160 [ 743.342995][T11539] ? __fget_files+0x279/0x410 [ 743.345087][T11539] ? __fget_files+0x279/0x410 [ 743.347148][T11539] security_file_ioctl+0x72/0xb0 [ 743.349380][T11539] __x64_sys_ioctl+0xbb/0x210 [ 743.351297][T11539] do_syscall_64+0x38/0xb0 [ 743.353349][T11539] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 743.355768][T11539] RIP: 0033:0x7fc9bba7cae9 [ 743.357736][T11539] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 743.365962][T11539] RSP: 002b:00007fc9bc8880c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 743.369070][T11539] RAX: ffffffffffffffda RBX: 00007fc9bbb9bf80 RCX: 00007fc9bba7cae9 [ 743.372499][T11539] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 743.376011][T11539] RBP: 00007fc9bc888120 R08: 0000000000000000 R09: 0000000000000000 [ 743.378957][T11539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 743.382332][T11539] R13: 000000000000000b R14: 00007fc9bbb9bf80 R15: 00007ffdf1e289a8 [ 743.385710][T11539] 23:33:11 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) (async) clock_gettime(0x2, &(0x7f0000000000)) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x5, @any, 0xff7f}, 0xe) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7fffffffffffffff) 23:33:11 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xfffffffffffffffe) [ 743.389974][T11539] ERROR: Out of memory at tomoyo_realpath_from_path. 23:33:11 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000040)={0x1, 0xffffffff}) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100), &(0x7f00000000c0)=0xe, 0x800) fcntl$setpipe(r1, 0x407, 0x2) 23:33:11 executing program 2: clock_gettime(0x7, &(0x7f0000000040)) 23:33:11 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001040)=0x2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="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", 0x1000) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) 23:33:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 2) 23:33:11 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000040)={0x1, 0xffffffff}) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100), &(0x7f00000000c0)=0xe, 0x800) fcntl$setpipe(r1, 0x407, 0x2) (async) fcntl$setpipe(r1, 0x407, 0x2) 23:33:11 executing program 2: clock_gettime(0x7, &(0x7f0000000040)) 23:33:11 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001040)=0x2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="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", 0x1000) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001040)=0x2) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="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", 0x1000) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) (async) 23:33:11 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000040)={0x1, 0xffffffff}) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100), &(0x7f00000000c0)=0xe, 0x800) fcntl$setpipe(r1, 0x407, 0x2) 23:33:11 executing program 2: clock_gettime(0x7, &(0x7f0000000040)) 23:33:11 executing program 3: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001040)=0x2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="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", 0x1000) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) 23:33:11 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x800000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) finit_module(r1, &(0x7f0000000040)='!,\x00', 0x2) [ 743.507174][T11576] binder: 11572:11576 ioctl 4018f50b 0 returned -22 23:33:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 3) 23:33:11 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x5, &(0x7f0000000140)) 23:33:11 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x800000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) finit_module(r1, &(0x7f0000000040)='!,\x00', 0x2) 23:33:11 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) 23:33:11 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x5, &(0x7f0000000140)) [ 743.555711][T11584] binder: 11579:11584 ioctl 4018f50b 0 returned -22 [ 743.559683][T11587] FAULT_INJECTION: forcing a failure. 23:33:11 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) [ 743.559683][T11587] name failslab, interval 1, probability 0, space 0, times 0 [ 743.565922][T11587] CPU: 1 PID: 11587 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 743.570480][T11587] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 743.574989][T11587] Call Trace: 23:33:11 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x5, &(0x7f0000000140)) socket$can_j1939(0x1d, 0x2, 0x7) (async) clock_gettime(0x5, &(0x7f0000000140)) (async) [ 743.576509][T11587] [ 743.578014][T11587] dump_stack_lvl+0x125/0x1b0 [ 743.580152][T11587] should_fail_ex+0x496/0x5b0 [ 743.582293][T11587] should_failslab+0x9/0x20 [ 743.584348][T11587] __kmem_cache_alloc_node+0x5f/0x470 [ 743.586745][T11587] ? tomoyo_encode2+0x100/0x3d0 [ 743.588922][T11587] __kmalloc+0x4f/0x100 [ 743.590843][T11587] tomoyo_encode2+0x100/0x3d0 [ 743.592986][T11587] ? rcu_is_watching+0x12/0xb0 [ 743.595163][T11587] tomoyo_encode+0x29/0x50 23:33:11 executing program 2: clock_gettime(0x4, &(0x7f0000000140)) [ 743.597244][T11587] tomoyo_realpath_from_path+0x196/0x710 [ 743.600184][T11587] tomoyo_path_number_perm+0x243/0x590 [ 743.602684][T11587] ? tomoyo_path_number_perm+0x1eb/0x590 [ 743.605252][T11587] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 743.607959][T11587] ? lock_release+0x4bf/0x680 [ 743.610171][T11587] ? reacquire_held_locks+0x4b0/0x4b0 [ 743.612653][T11587] ? bit_wait_timeout+0x160/0x160 [ 743.615105][T11587] ? __fget_files+0x279/0x410 [ 743.617303][T11587] ? __fget_files+0x279/0x410 [ 743.619006][T11587] security_file_ioctl+0x72/0xb0 [ 743.620810][T11587] __x64_sys_ioctl+0xbb/0x210 [ 743.622522][T11587] do_syscall_64+0x38/0xb0 [ 743.624377][T11587] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 743.626905][T11587] RIP: 0033:0x7fc9bba7cae9 [ 743.628613][T11587] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 743.636507][T11587] RSP: 002b:00007fc9bc8880c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 743.639952][T11587] RAX: ffffffffffffffda RBX: 00007fc9bbb9bf80 RCX: 00007fc9bba7cae9 [ 743.642842][T11587] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 743.645878][T11587] RBP: 00007fc9bc888120 R08: 0000000000000000 R09: 0000000000000000 [ 743.649038][T11587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 743.651972][T11587] R13: 000000000000000b R14: 00007fc9bbb9bf80 R15: 00007ffdf1e289a8 [ 743.655122][T11587] [ 743.657758][T11587] ERROR: Out of memory at tomoyo_realpath_from_path. 23:33:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 4) 23:33:11 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x800000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) finit_module(r1, &(0x7f0000000040)='!,\x00', 0x2) 23:33:11 executing program 2: clock_gettime(0x4, &(0x7f0000000140)) 23:33:11 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) 23:33:11 executing program 2: clock_gettime(0x4, &(0x7f0000000140)) [ 743.765666][T11603] binder: 11599:11603 ioctl 4018f50b 0 returned -22 23:33:11 executing program 0: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x4, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:33:11 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000001040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000012c0)=@gcm_256={{0x303}, "3eaff1a1a438d7b0", "28a667e485ee19f8159c19abd51004564e1714437f485774f97e401124d7d1b7", "d990a2c6", "4aef1166f8b70839"}, 0x38) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000001300)={{r4}, "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"}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x1) finit_module(r0, &(0x7f0000000040)='##:)\x00', 0x0) [ 743.778462][T11608] FAULT_INJECTION: forcing a failure. 23:33:12 executing program 2: pselect6(0x40, &(0x7f0000000000)={0x3d09, 0x81, 0x5d9, 0xf27, 0x9, 0x0, 0x80, 0xfffffffffffffeb8}, &(0x7f0000000040)={0x5, 0x1, 0xff, 0x5, 0x0, 0xad8a, 0x5, 0xffffffff}, &(0x7f0000000080)={0xb7da, 0x3, 0x1, 0x7, 0xd843, 0x8, 0x6, 0x2}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000100)={[0xf8]}, 0x8}) [ 743.778462][T11608] name failslab, interval 1, probability 0, space 0, times 0 [ 743.784887][T11608] CPU: 2 PID: 11608 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 743.788940][T11608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 743.793000][T11608] Call Trace: [ 743.794385][T11608] [ 743.795586][T11608] dump_stack_lvl+0x125/0x1b0 [ 743.797505][T11608] should_fail_ex+0x496/0x5b0 [ 743.799471][T11608] should_failslab+0x9/0x20 [ 743.801469][T11608] kmem_cache_alloc_node+0x64/0x540 [ 743.803772][T11608] ? preempt_count_sub+0x150/0x150 [ 743.805992][T11608] alloc_vmap_area+0x1af/0x2060 [ 743.808173][T11608] ? free_vmap_area+0x1c40/0x1c40 [ 743.810399][T11608] __get_vm_area_node+0x132/0x3d0 [ 743.812639][T11608] __vmalloc_node_range+0x27a/0x1540 [ 743.814932][T11608] ? kvm_dev_ioctl+0x210/0x1c20 [ 743.817072][T11608] ? kvm_dev_ioctl+0x210/0x1c20 [ 743.819279][T11608] ? reacquire_held_locks+0x4b0/0x4b0 [ 743.821661][T11608] ? delayed_vfree_work+0x70/0x70 [ 743.823894][T11608] ? vsprintf+0x30/0x30 [ 743.825827][T11608] ? _raw_spin_unlock+0x28/0x40 [ 743.828016][T11608] ? alloc_fd+0x2da/0x6c0 [ 743.830016][T11608] ? kvm_dev_ioctl+0x210/0x1c20 [ 743.832342][T11608] __vmalloc+0x6d/0x90 [ 743.834187][T11608] ? kvm_dev_ioctl+0x210/0x1c20 [ 743.836375][T11608] kvm_dev_ioctl+0x210/0x1c20 [ 743.838443][T11608] ? reacquire_held_locks+0x4b0/0x4b0 [ 743.840803][T11608] ? bit_wait_timeout+0x160/0x160 [ 743.842994][T11608] ? kvm_vcpu_stats_release+0x80/0x80 [ 743.845376][T11608] ? selinux_file_ioctl+0x17d/0x270 [ 743.847707][T11608] ? selinux_file_ioctl+0xb5/0x270 [ 743.849946][T11608] ? kvm_vcpu_stats_release+0x80/0x80 [ 743.852315][T11608] __x64_sys_ioctl+0x18f/0x210 [ 743.854448][T11608] do_syscall_64+0x38/0xb0 [ 743.856467][T11608] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 743.859047][T11608] RIP: 0033:0x7fc9bba7cae9 [ 743.861000][T11608] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 743.869289][T11608] RSP: 002b:00007fc9bc8880c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 743.872884][T11608] RAX: ffffffffffffffda RBX: 00007fc9bbb9bf80 RCX: 00007fc9bba7cae9 [ 743.876230][T11608] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 743.879657][T11608] RBP: 00007fc9bc888120 R08: 0000000000000000 R09: 0000000000000000 [ 743.883023][T11608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 743.886516][T11608] R13: 000000000000000b R14: 00007fc9bbb9bf80 R15: 00007ffdf1e289a8 [ 743.889757][T11608] [ 743.892987][T11608] syz-executor.1: vmalloc error: size 39320, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 743.900260][T11608] CPU: 3 PID: 11608 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 743.904770][T11608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 743.909247][T11608] Call Trace: [ 743.910759][T11608] [ 743.912054][T11608] dump_stack_lvl+0x125/0x1b0 [ 743.914165][T11608] warn_alloc+0x24a/0x3a0 [ 743.916084][T11608] ? zone_watermark_ok_safe+0x2e0/0x2e0 [ 743.918536][T11608] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 743.921211][T11608] ? __phys_addr+0xc6/0x140 [ 743.923271][T11608] ? __get_vm_area_node+0x281/0x3d0 [ 743.925649][T11608] __vmalloc_node_range+0xc13/0x1540 [ 743.927984][T11608] ? kvm_dev_ioctl+0x210/0x1c20 [ 743.930228][T11608] ? reacquire_held_locks+0x4b0/0x4b0 [ 743.932637][T11608] ? delayed_vfree_work+0x70/0x70 [ 743.934902][T11608] ? vsprintf+0x30/0x30 [ 743.936810][T11608] ? _raw_spin_unlock+0x28/0x40 [ 743.939027][T11608] ? alloc_fd+0x2da/0x6c0 [ 743.940995][T11608] ? kvm_dev_ioctl+0x210/0x1c20 [ 743.943197][T11608] __vmalloc+0x6d/0x90 [ 743.945045][T11608] ? kvm_dev_ioctl+0x210/0x1c20 [ 743.947243][T11608] kvm_dev_ioctl+0x210/0x1c20 [ 743.949193][T11608] ? reacquire_held_locks+0x4b0/0x4b0 [ 743.951304][T11608] ? bit_wait_timeout+0x160/0x160 [ 743.953333][T11608] ? kvm_vcpu_stats_release+0x80/0x80 [ 743.955411][T11608] ? selinux_file_ioctl+0x17d/0x270 [ 743.957409][T11608] ? selinux_file_ioctl+0xb5/0x270 [ 743.959532][T11608] ? kvm_vcpu_stats_release+0x80/0x80 [ 743.961735][T11608] __x64_sys_ioctl+0x18f/0x210 [ 743.963605][T11608] do_syscall_64+0x38/0xb0 [ 743.965355][T11608] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 743.967596][T11608] RIP: 0033:0x7fc9bba7cae9 [ 743.969384][T11608] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 743.976961][T11608] RSP: 002b:00007fc9bc8880c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 743.980181][T11608] RAX: ffffffffffffffda RBX: 00007fc9bbb9bf80 RCX: 00007fc9bba7cae9 [ 743.983211][T11608] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 743.986340][T11608] RBP: 00007fc9bc888120 R08: 0000000000000000 R09: 0000000000000000 [ 743.989465][T11608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 743.992633][T11608] R13: 000000000000000b R14: 00007fc9bbb9bf80 R15: 00007ffdf1e289a8 [ 743.995697][T11608] [ 743.998300][T11608] Mem-Info: [ 743.999811][T11608] active_anon:17658 inactive_anon:516 isolated_anon:0 [ 743.999811][T11608] active_file:0 inactive_file:46659 isolated_file:0 [ 743.999811][T11608] unevictable:1768 dirty:7 writeback:0 [ 743.999811][T11608] slab_reclaimable:17178 slab_unreclaimable:73834 [ 743.999811][T11608] mapped:15433 shmem:2520 pagetables:406 [ 743.999811][T11608] sec_pagetables:0 bounce:0 [ 743.999811][T11608] kernel_misc_reclaimable:0 [ 743.999811][T11608] free:524754 free_pcp:6412 free_cma:0 [ 744.021169][T11608] Node 0 active_anon:70632kB inactive_anon:2064kB active_file:0kB inactive_file:186560kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:61732kB dirty:28kB writeback:0kB shmem:6544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10480kB pagetables:1624kB sec_pagetables:0kB all_unreclaimable? no [ 744.033904][T11608] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 744.048079][T11608] Node 0 DMA free:15296kB boost:0kB min:324kB low:404kB high:484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 744.060032][T11608] lowmem_reserve[]: 0 1362 1362 1362 1362 [ 744.062869][T11608] Node 0 DMA32 free:479984kB boost:0kB min:29464kB low:36828kB high:44192kB reserved_highatomic:0KB active_anon:70632kB inactive_anon:2064kB active_file:0kB inactive_file:186560kB unevictable:3536kB writepending:28kB present:2080628kB managed:1399816kB mlocked:0kB bounce:0kB free_pcp:8900kB local_pcp:3200kB free_cma:0kB [ 744.076518][T11608] lowmem_reserve[]: 0 0 0 0 0 [ 744.078845][T11608] Node 1 Normal free:1612984kB boost:0kB min:37792kB low:47240kB high:56688kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:3536kB writepending:0kB present:2097152kB managed:1790132kB mlocked:0kB bounce:0kB free_pcp:8336kB local_pcp:4064kB free_cma:0kB [ 744.091817][T11608] lowmem_reserve[]: 0 0 0 0 0 [ 744.093805][T11608] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15296kB [ 744.098947][T11608] Node 0 DMA32: 2306*4kB (UME) 2093*8kB (UME) 1012*16kB (UM) 394*32kB (UME) 222*64kB (UM) 55*128kB (UME) 18*256kB (UME) 6*512kB (UME) 3*1024kB (ME) 2*2048kB (ME) 95*4096kB (M) = 479984kB [ 744.106060][T11608] Node 1 Normal: 8*4kB (UME) 281*8kB (UME) 141*16kB (UE) 70*32kB (UME) 33*64kB (UME) 14*128kB (UM) 1*256kB (U) 5*512kB (UME) 2*1024kB (UE) 2*2048kB (ME) 389*4096kB (M) = 1612984kB [ 744.113136][T11608] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 744.117175][T11608] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=4 hugepages_size=2048kB [ 744.120489][T11608] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 744.124160][T11608] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 744.128346][T11608] 49168 total pagecache pages [ 744.130486][T11608] 0 pages in swap cache [ 744.132957][T11608] Free swap = 124996kB [ 744.134835][T11608] Total swap = 124996kB [ 744.136400][T11608] 1048443 pages RAM [ 744.137837][T11608] 0 pages HighMem/MovableOnly [ 744.139615][T11608] 247116 pages reserved [ 744.141336][T11608] 0 pages cma reserved 23:33:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 5) 23:33:12 executing program 0: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x4, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x4, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) 23:33:12 executing program 2: pselect6(0x40, &(0x7f0000000000)={0x3d09, 0x81, 0x5d9, 0xf27, 0x9, 0x0, 0x80, 0xfffffffffffffeb8}, &(0x7f0000000040)={0x5, 0x1, 0xff, 0x5, 0x0, 0xad8a, 0x5, 0xffffffff}, &(0x7f0000000080)={0xb7da, 0x3, 0x1, 0x7, 0xd843, 0x8, 0x6, 0x2}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000100)={[0xf8]}, 0x8}) 23:33:12 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000001040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async, rerun: 32) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async, rerun: 32) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000012c0)=@gcm_256={{0x303}, "3eaff1a1a438d7b0", "28a667e485ee19f8159c19abd51004564e1714437f485774f97e401124d7d1b7", "d990a2c6", "4aef1166f8b70839"}, 0x38) (async, rerun: 32) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000001300)={{r4}, "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"}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x1) finit_module(r0, &(0x7f0000000040)='##:)\x00', 0x0) 23:33:12 executing program 2: pselect6(0x40, &(0x7f0000000000)={0x3d09, 0x81, 0x5d9, 0xf27, 0x9, 0x0, 0x80, 0xfffffffffffffeb8}, &(0x7f0000000040)={0x5, 0x1, 0xff, 0x5, 0x0, 0xad8a, 0x5, 0xffffffff}, &(0x7f0000000080)={0xb7da, 0x3, 0x1, 0x7, 0xd843, 0x8, 0x6, 0x2}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000100)={[0xf8]}, 0x8}) 23:33:12 executing program 0: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x4, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) [ 744.166016][T11626] FAULT_INJECTION: forcing a failure. [ 744.166016][T11626] name failslab, interval 1, probability 0, space 0, times 0 [ 744.172096][T11626] CPU: 3 PID: 11626 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 744.176715][T11626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 23:33:12 executing program 0: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x2) [ 744.181376][T11626] Call Trace: 23:33:12 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$FLOPPY_FDRAWCMD(r0, 0x258, &(0x7f00000000c0)={0x80, &(0x7f0000000000)="5884374d72914432d9c2d3087f836691ab374152217fbe51c283563a6851bf9fd9cb576649b23690ec6cbc8f19ea91225bee72ffe49aca2249689f39ae73c08735c81ca613cafb7332cf2af8dd5daa3f3d", &(0x7f0000000080)=0x1, 0x0, 0x51, 0x0, 0x0, 0xff, 0xae, "efb73df4995aa73ebf7496e6d6738915", 0x0, '\x00', 0xffffff01}) [ 744.183127][T11626] [ 744.184697][T11626] dump_stack_lvl+0x125/0x1b0 [ 744.186926][T11626] should_fail_ex+0x496/0x5b0 [ 744.189157][T11626] should_failslab+0x9/0x20 [ 744.191303][T11626] kmem_cache_alloc_node+0x64/0x540 [ 744.193718][T11626] alloc_vmap_area+0xd93/0x2060 [ 744.195959][T11626] ? free_vmap_area+0x1c40/0x1c40 [ 744.198319][T11626] __get_vm_area_node+0x132/0x3d0 [ 744.200650][T11626] __vmalloc_node_range+0x27a/0x1540 [ 744.203108][T11626] ? kvm_dev_ioctl+0x210/0x1c20 [ 744.205506][T11626] ? kvm_dev_ioctl+0x210/0x1c20 [ 744.207782][T11626] ? reacquire_held_locks+0x4b0/0x4b0 [ 744.210312][T11626] ? delayed_vfree_work+0x70/0x70 [ 744.212680][T11626] ? vsprintf+0x30/0x30 [ 744.214632][T11626] ? _raw_spin_unlock+0x28/0x40 [ 744.216928][T11626] ? alloc_fd+0x2da/0x6c0 [ 744.218949][T11626] ? kvm_dev_ioctl+0x210/0x1c20 [ 744.221227][T11626] __vmalloc+0x6d/0x90 [ 744.223149][T11626] ? kvm_dev_ioctl+0x210/0x1c20 [ 744.225434][T11626] kvm_dev_ioctl+0x210/0x1c20 [ 744.227637][T11626] ? reacquire_held_locks+0x4b0/0x4b0 [ 744.230135][T11626] ? bit_wait_timeout+0x160/0x160 [ 744.232507][T11626] ? kvm_vcpu_stats_release+0x80/0x80 [ 744.234968][T11626] ? selinux_file_ioctl+0x17d/0x270 [ 744.237398][T11626] ? selinux_file_ioctl+0xb5/0x270 [ 744.239783][T11626] ? kvm_vcpu_stats_release+0x80/0x80 [ 744.242287][T11626] __x64_sys_ioctl+0x18f/0x210 [ 744.244501][T11626] do_syscall_64+0x38/0xb0 [ 744.246560][T11626] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 744.249310][T11626] RIP: 0033:0x7fc9bba7cae9 [ 744.251346][T11626] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 744.260223][T11626] RSP: 002b:00007fc9bc8880c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 744.264071][T11626] RAX: ffffffffffffffda RBX: 00007fc9bbb9bf80 RCX: 00007fc9bba7cae9 [ 744.267658][T11626] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 744.271461][T11626] RBP: 00007fc9bc888120 R08: 0000000000000000 R09: 0000000000000000 [ 744.275210][T11626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.278967][T11626] R13: 000000000000000b R14: 00007fc9bbb9bf80 R15: 00007ffdf1e289a8 [ 744.282586][T11626] 23:33:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 6) 23:33:12 executing program 0: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x2) 23:33:12 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$FLOPPY_FDRAWCMD(r0, 0x258, &(0x7f00000000c0)={0x80, &(0x7f0000000000)="5884374d72914432d9c2d3087f836691ab374152217fbe51c283563a6851bf9fd9cb576649b23690ec6cbc8f19ea91225bee72ffe49aca2249689f39ae73c08735c81ca613cafb7332cf2af8dd5daa3f3d", &(0x7f0000000080)=0x1, 0x0, 0x51, 0x0, 0x0, 0xff, 0xae, "efb73df4995aa73ebf7496e6d6738915", 0x0, '\x00', 0xffffff01}) (async) ioctl$FLOPPY_FDRAWCMD(r0, 0x258, &(0x7f00000000c0)={0x80, &(0x7f0000000000)="5884374d72914432d9c2d3087f836691ab374152217fbe51c283563a6851bf9fd9cb576649b23690ec6cbc8f19ea91225bee72ffe49aca2249689f39ae73c08735c81ca613cafb7332cf2af8dd5daa3f3d", &(0x7f0000000080)=0x1, 0x0, 0x51, 0x0, 0x0, 0xff, 0xae, "efb73df4995aa73ebf7496e6d6738915", 0x0, '\x00', 0xffffff01}) 23:33:12 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000001040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000001040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000012c0)=@gcm_256={{0x303}, "3eaff1a1a438d7b0", "28a667e485ee19f8159c19abd51004564e1714437f485774f97e401124d7d1b7", "d990a2c6", "4aef1166f8b70839"}, 0x38) (async) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000012c0)=@gcm_256={{0x303}, "3eaff1a1a438d7b0", "28a667e485ee19f8159c19abd51004564e1714437f485774f97e401124d7d1b7", "d990a2c6", "4aef1166f8b70839"}, 0x38) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000001300)={{r4}, "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"}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x1) finit_module(r0, &(0x7f0000000040)='##:)\x00', 0x0) 23:33:12 executing program 0: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x2) 23:33:12 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) (async) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ioctl$FLOPPY_FDRAWCMD(r0, 0x258, &(0x7f00000000c0)={0x80, &(0x7f0000000000)="5884374d72914432d9c2d3087f836691ab374152217fbe51c283563a6851bf9fd9cb576649b23690ec6cbc8f19ea91225bee72ffe49aca2249689f39ae73c08735c81ca613cafb7332cf2af8dd5daa3f3d", &(0x7f0000000080)=0x1, 0x0, 0x51, 0x0, 0x0, 0xff, 0xae, "efb73df4995aa73ebf7496e6d6738915", 0x0, '\x00', 0xffffff01}) 23:33:12 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x101500, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffff7f}}, './file0\x00'}) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000200)=""/4096) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xfffffffffffffffe) pselect6(0x40, &(0x7f0000000040)={0x7ff, 0xffff, 0x2, 0x4, 0x20000000000000, 0x4, 0x437f, 0x4}, &(0x7f0000000080)={0x2, 0x8, 0x1, 0x1, 0xfffffffffffffff9, 0x81, 0x1000, 0x80}, &(0x7f00000000c0)={0x7f, 0xfffffffffffeffff, 0xb28d, 0x9, 0x0, 0x4653, 0x45, 0xffffffffffffffc0}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0xffffffffffffff81]}, 0x8}) [ 744.393852][T11649] FAULT_INJECTION: forcing a failure. [ 744.393852][T11649] name failslab, interval 1, probability 0, space 0, times 0 [ 744.399259][T11649] CPU: 2 PID: 11649 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 744.403136][T11649] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 744.406871][T11649] Call Trace: [ 744.408189][T11649] [ 744.409320][T11649] dump_stack_lvl+0x125/0x1b0 [ 744.411152][T11649] should_fail_ex+0x496/0x5b0 [ 744.413080][T11649] should_failslab+0x9/0x20 23:33:12 executing program 0: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000040)={0xea, 0x0, {0x1, 0x2, 0x202d7c, 0x3, 0x2}, 0x207f}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x200, 0x1, {0x2, 0x1, 0x404, 0x3, 0xa66}, 0x33}) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffffffffd) [ 744.415091][T11649] kmem_cache_alloc_node+0x64/0x540 [ 744.417676][T11649] alloc_vmap_area+0xd93/0x2060 [ 744.419913][T11649] ? free_vmap_area+0x1c40/0x1c40 [ 744.422267][T11649] __get_vm_area_node+0x132/0x3d0 [ 744.424561][T11649] __vmalloc_node_range+0x27a/0x1540 [ 744.426873][T11649] ? kvm_dev_ioctl+0x210/0x1c20 [ 744.429166][T11649] ? kvm_dev_ioctl+0x210/0x1c20 [ 744.431415][T11649] ? reacquire_held_locks+0x4b0/0x4b0 [ 744.433897][T11649] ? delayed_vfree_work+0x70/0x70 [ 744.436143][T11649] ? vsprintf+0x30/0x30 [ 744.438046][T11649] ? _raw_spin_unlock+0x28/0x40 [ 744.440150][T11649] ? alloc_fd+0x2da/0x6c0 [ 744.442163][T11649] ? kvm_dev_ioctl+0x210/0x1c20 [ 744.444355][T11649] __vmalloc+0x6d/0x90 [ 744.446115][T11649] ? kvm_dev_ioctl+0x210/0x1c20 [ 744.448261][T11649] kvm_dev_ioctl+0x210/0x1c20 [ 744.450403][T11649] ? reacquire_held_locks+0x4b0/0x4b0 [ 744.452789][T11649] ? bit_wait_timeout+0x160/0x160 [ 744.455139][T11649] ? kvm_vcpu_stats_release+0x80/0x80 [ 744.457592][T11649] ? selinux_file_ioctl+0x17d/0x270 [ 744.459619][T11649] ? selinux_file_ioctl+0xb5/0x270 [ 744.461755][T11649] ? kvm_vcpu_stats_release+0x80/0x80 [ 744.464103][T11649] __x64_sys_ioctl+0x18f/0x210 [ 744.466144][T11649] do_syscall_64+0x38/0xb0 [ 744.468162][T11649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 744.470669][T11649] RIP: 0033:0x7fc9bba7cae9 [ 744.472459][T11649] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 744.480053][T11649] RSP: 002b:00007fc9bc8880c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 744.483934][T11649] RAX: ffffffffffffffda RBX: 00007fc9bbb9bf80 RCX: 00007fc9bba7cae9 [ 744.487548][T11649] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 744.491213][T11649] RBP: 00007fc9bc888120 R08: 0000000000000000 R09: 0000000000000000 [ 744.494717][T11649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.498045][T11649] R13: 000000000000000b R14: 00007fc9bbb9bf80 R15: 00007ffdf1e289a8 [ 744.501159][T11649] 23:33:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 7) 23:33:12 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = syz_open_dev$floppy(&(0x7f0000000100), 0x7, 0x400) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"741fc88ba2d50128b86325edb892673e", 0x0, 0x0, {0x8000, 0x4}, {0x3, 0x7ff}, 0x1, [0x9, 0x7, 0x3ff, 0x4, 0x7, 0x3ff, 0xe6, 0xfffffffffffffffe, 0x19a, 0x5, 0xffffffffffffffff, 0x100, 0x8, 0x1, 0x7f, 0x3ff]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x80045301, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)=0x80000) clock_gettime(0x6, &(0x7f0000000140)) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5d) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x10102, 0x0) 23:33:12 executing program 0: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000040)={0xea, 0x0, {0x1, 0x2, 0x202d7c, 0x3, 0x2}, 0x207f}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x200, 0x1, {0x2, 0x1, 0x404, 0x3, 0xa66}, 0x33}) (async) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffffffffd) 23:33:12 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x101500, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffff7f}}, './file0\x00'}) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000200)=""/4096) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xfffffffffffffffe) pselect6(0x40, &(0x7f0000000040)={0x7ff, 0xffff, 0x2, 0x4, 0x20000000000000, 0x4, 0x437f, 0x4}, &(0x7f0000000080)={0x2, 0x8, 0x1, 0x1, 0xfffffffffffffff9, 0x81, 0x1000, 0x80}, &(0x7f00000000c0)={0x7f, 0xfffffffffffeffff, 0xb28d, 0x9, 0x0, 0x4653, 0x45, 0xffffffffffffffc0}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0xffffffffffffff81]}, 0x8}) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x101500, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffff7f}}, './file0\x00'}) (async) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000200)=""/4096) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xfffffffffffffffe) (async) pselect6(0x40, &(0x7f0000000040)={0x7ff, 0xffff, 0x2, 0x4, 0x20000000000000, 0x4, 0x437f, 0x4}, &(0x7f0000000080)={0x2, 0x8, 0x1, 0x1, 0xfffffffffffffff9, 0x81, 0x1000, 0x80}, &(0x7f00000000c0)={0x7f, 0xfffffffffffeffff, 0xb28d, 0x9, 0x0, 0x4653, 0x45, 0xffffffffffffffc0}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0xffffffffffffff81]}, 0x8}) (async) 23:33:12 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x101500, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffff7f}}, './file0\x00'}) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000200)=""/4096) (async, rerun: 64) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xfffffffffffffffe) (async, rerun: 64) pselect6(0x40, &(0x7f0000000040)={0x7ff, 0xffff, 0x2, 0x4, 0x20000000000000, 0x4, 0x437f, 0x4}, &(0x7f0000000080)={0x2, 0x8, 0x1, 0x1, 0xfffffffffffffff9, 0x81, 0x1000, 0x80}, &(0x7f00000000c0)={0x7f, 0xfffffffffffeffff, 0xb28d, 0x9, 0x0, 0x4653, 0x45, 0xffffffffffffffc0}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0xffffffffffffff81]}, 0x8}) 23:33:12 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) syz_open_dev$floppy(&(0x7f0000000100), 0x7, 0x400) (async) r1 = syz_open_dev$floppy(&(0x7f0000000100), 0x7, 0x400) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"741fc88ba2d50128b86325edb892673e", 0x0, 0x0, {0x8000, 0x4}, {0x3, 0x7ff}, 0x1, [0x9, 0x7, 0x3ff, 0x4, 0x7, 0x3ff, 0xe6, 0xfffffffffffffffe, 0x19a, 0x5, 0xffffffffffffffff, 0x100, 0x8, 0x1, 0x7f, 0x3ff]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x80045301, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)=0x80000) clock_gettime(0x6, &(0x7f0000000140)) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5d) (async) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5d) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x10102, 0x0) [ 744.595329][ T37] audit: type=1400 audit(1694302392.802:235): avc: denied { setattr } for pid=11663 comm="syz-executor.2" path="pipe:[376326]" dev="pipefs" ino=376326 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 744.606272][T11674] FAULT_INJECTION: forcing a failure. 23:33:12 executing program 0: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000040)={0xea, 0x0, {0x1, 0x2, 0x202d7c, 0x3, 0x2}, 0x207f}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x200, 0x1, {0x2, 0x1, 0x404, 0x3, 0xa66}, 0x33}) (async) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffffffffd) [ 744.606272][T11674] name failslab, interval 1, probability 0, space 0, times 0 23:33:12 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xfffffffffffffffe) quotactl_fd$Q_QUOTAOFF(r0, 0x1, 0xee00, 0x0) [ 744.625622][T11674] CPU: 0 PID: 11674 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 744.629428][T11674] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 744.633039][T11674] Call Trace: [ 744.634298][T11674] [ 744.635404][T11674] dump_stack_lvl+0x125/0x1b0 [ 744.637010][T11674] should_fail_ex+0x496/0x5b0 [ 744.638597][T11674] should_failslab+0x9/0x20 [ 744.640138][T11674] __kmem_cache_alloc_node+0x5f/0x470 [ 744.641937][T11674] ? __vmalloc_node_range+0x3e9/0x1540 [ 744.643754][T11674] __kmalloc_node+0x52/0x110 [ 744.645477][T11674] __vmalloc_node_range+0x3e9/0x1540 [ 744.647470][T11674] ? kvm_dev_ioctl+0x210/0x1c20 [ 744.649376][T11674] ? reacquire_held_locks+0x4b0/0x4b0 [ 744.651407][T11674] ? delayed_vfree_work+0x70/0x70 [ 744.653325][T11674] ? vsprintf+0x30/0x30 [ 744.655152][T11674] ? _raw_spin_unlock+0x28/0x40 [ 744.657253][T11674] ? alloc_fd+0x2da/0x6c0 [ 744.659095][T11674] ? kvm_dev_ioctl+0x210/0x1c20 [ 744.661110][T11674] __vmalloc+0x6d/0x90 [ 744.662790][T11674] ? kvm_dev_ioctl+0x210/0x1c20 [ 744.664647][T11674] kvm_dev_ioctl+0x210/0x1c20 [ 744.666667][T11674] ? reacquire_held_locks+0x4b0/0x4b0 [ 744.668990][T11674] ? bit_wait_timeout+0x160/0x160 [ 744.671171][T11674] ? kvm_vcpu_stats_release+0x80/0x80 [ 744.673468][T11674] ? selinux_file_ioctl+0x17d/0x270 [ 744.675704][T11674] ? selinux_file_ioctl+0xb5/0x270 [ 744.677935][T11674] ? kvm_vcpu_stats_release+0x80/0x80 [ 744.680116][T11674] __x64_sys_ioctl+0x18f/0x210 [ 744.682204][T11674] do_syscall_64+0x38/0xb0 [ 744.684164][T11674] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 744.686711][T11674] RIP: 0033:0x7fc9bba7cae9 [ 744.688633][T11674] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 744.696937][T11674] RSP: 002b:00007fc9bc8880c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 744.700359][T11674] RAX: ffffffffffffffda RBX: 00007fc9bbb9bf80 RCX: 00007fc9bba7cae9 [ 744.703589][T11674] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 744.707007][T11674] RBP: 00007fc9bc888120 R08: 0000000000000000 R09: 0000000000000000 [ 744.710408][T11674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.713846][T11674] R13: 000000000000000b R14: 00007fc9bbb9bf80 R15: 00007ffdf1e289a8 [ 744.717273][T11674] 23:33:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 8) 23:33:12 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = syz_open_dev$floppy(&(0x7f0000000100), 0x7, 0x400) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"741fc88ba2d50128b86325edb892673e", 0x0, 0x0, {0x8000, 0x4}, {0x3, 0x7ff}, 0x1, [0x9, 0x7, 0x3ff, 0x4, 0x7, 0x3ff, 0xe6, 0xfffffffffffffffe, 0x19a, 0x5, 0xffffffffffffffff, 0x100, 0x8, 0x1, 0x7f, 0x3ff]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x80045301, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)=0x80000) clock_gettime(0x6, &(0x7f0000000140)) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5d) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x10102, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) (async) syz_open_dev$floppy(&(0x7f0000000100), 0x7, 0x400) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"741fc88ba2d50128b86325edb892673e", 0x0, 0x0, {0x8000, 0x4}, {0x3, 0x7ff}, 0x1, [0x9, 0x7, 0x3ff, 0x4, 0x7, 0x3ff, 0xe6, 0xfffffffffffffffe, 0x19a, 0x5, 0xffffffffffffffff, 0x100, 0x8, 0x1, 0x7f, 0x3ff]}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x80045301, 0x0) (async) pipe2$9p(&(0x7f0000000040), 0x4000) (async) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)=0x80000) (async) clock_gettime(0x6, &(0x7f0000000140)) (async) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5d) (async) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x10102, 0x0) (async) 23:33:12 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000040)={0x1, [0x0]}) 23:33:12 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xfffffffffffffffe) quotactl_fd$Q_QUOTAOFF(r0, 0x1, 0xee00, 0x0) [ 744.744140][T11693] binder: 11689:11693 ioctl 4018f50b 0 returned -22 23:33:12 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xfffffffffffffffe) (async) quotactl_fd$Q_QUOTAOFF(r0, 0x1, 0xee00, 0x0) 23:33:12 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x5, 0x8000) pselect6(0x40, &(0x7f0000000080)={0x8, 0x2, 0x5, 0x8001, 0x6, 0x8001, 0x5ec, 0x10000}, &(0x7f00000000c0)={0x38, 0x7fff, 0xfff, 0x5, 0x2a, 0x9, 0x401, 0x1}, &(0x7f0000000100)={0x0, 0x3f, 0x4, 0x200, 0xfc92, 0xbb, 0xfff}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x1]}, 0x8}) r1 = getpgrp(0x0) sched_rr_get_interval(r1, &(0x7f0000000180)) write$FUSE_LK(r0, &(0x7f0000000040)={0x28, 0xfffffffffffffff5, 0x0, {{0x8, 0x100, 0x2, r1}}}, 0x28) 23:33:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 9) [ 744.750655][T11693] binder: 11689:11693 ioctl c0096616 20000040 returned -22 23:33:12 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000040)={0x1, [0x0]}) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000040)={0x1, [0x0]}) (async) 23:33:12 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x121001, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) 23:33:12 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x5, 0x8000) pselect6(0x40, &(0x7f0000000080)={0x8, 0x2, 0x5, 0x8001, 0x6, 0x8001, 0x5ec, 0x10000}, &(0x7f00000000c0)={0x38, 0x7fff, 0xfff, 0x5, 0x2a, 0x9, 0x401, 0x1}, &(0x7f0000000100)={0x0, 0x3f, 0x4, 0x200, 0xfc92, 0xbb, 0xfff}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x1]}, 0x8}) r1 = getpgrp(0x0) sched_rr_get_interval(r1, &(0x7f0000000180)) write$FUSE_LK(r0, &(0x7f0000000040)={0x28, 0xfffffffffffffff5, 0x0, {{0x8, 0x100, 0x2, r1}}}, 0x28) clock_gettime(0x1, &(0x7f0000000140)) (async) syz_open_dev$vcsa(&(0x7f0000000000), 0x5, 0x8000) (async) pselect6(0x40, &(0x7f0000000080)={0x8, 0x2, 0x5, 0x8001, 0x6, 0x8001, 0x5ec, 0x10000}, &(0x7f00000000c0)={0x38, 0x7fff, 0xfff, 0x5, 0x2a, 0x9, 0x401, 0x1}, &(0x7f0000000100)={0x0, 0x3f, 0x4, 0x200, 0xfc92, 0xbb, 0xfff}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x1]}, 0x8}) (async) getpgrp(0x0) (async) sched_rr_get_interval(r1, &(0x7f0000000180)) (async) write$FUSE_LK(r0, &(0x7f0000000040)={0x28, 0xfffffffffffffff5, 0x0, {{0x8, 0x100, 0x2, r1}}}, 0x28) (async) 23:33:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 10) [ 744.773400][T11704] binder: 11703:11704 ioctl 4018f50b 0 returned -22 [ 744.776454][T11704] binder: 11703:11704 ioctl c0096616 20000040 returned -22 [ 744.781934][T11706] binder: 11703:11706 ioctl 4018f50b 0 returned -22 23:33:13 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x121001, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) 23:33:13 executing program 0: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000040)={0x1, [0x0]}) 23:33:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 11) 23:33:13 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) syz_open_dev$vcsa(&(0x7f0000000000), 0x5, 0x8000) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x5, 0x8000) pselect6(0x40, &(0x7f0000000080)={0x8, 0x2, 0x5, 0x8001, 0x6, 0x8001, 0x5ec, 0x10000}, &(0x7f00000000c0)={0x38, 0x7fff, 0xfff, 0x5, 0x2a, 0x9, 0x401, 0x1}, &(0x7f0000000100)={0x0, 0x3f, 0x4, 0x200, 0xfc92, 0xbb, 0xfff}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x1]}, 0x8}) getpgrp(0x0) (async) r1 = getpgrp(0x0) sched_rr_get_interval(r1, &(0x7f0000000180)) write$FUSE_LK(r0, &(0x7f0000000040)={0x28, 0xfffffffffffffff5, 0x0, {{0x8, 0x100, 0x2, r1}}}, 0x28) 23:33:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 12) 23:33:13 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x121001, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) [ 744.830212][T11723] binder: 11720:11723 ioctl 4018f50b 0 returned -22 [ 744.834937][T11723] binder: 11720:11723 ioctl c0096616 20000040 returned -22 23:33:13 executing program 2: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000000)={{0x1, 0x9}, 'port0\x00', 0xc1, 0x1818, 0x2, 0x80000000, 0x1, 0x1, 0xfffffffa, 0x0, 0x1}) clock_gettime(0x1, &(0x7f0000000140)) 23:33:13 executing program 3: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xe1a63fb0, 0x3}}, './file0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x4, 0x8d, 0x2f, 0x1, 0x4}, 0x14) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r1, 0x0) 23:33:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 13) 23:33:13 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$floppy(&(0x7f0000000040), 0x1, 0x3) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$FLOPPY_FDFLUSH(r1, 0x24b) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) [ 744.867949][ T13] [ 744.869124][ T13] floppy driver state [ 744.870978][ T13] ------------------- 23:33:13 executing program 3: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xe1a63fb0, 0x3}}, './file0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x4, 0x8d, 0x2f, 0x1, 0x4}, 0x14) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r1, 0x0) 23:33:13 executing program 2: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000000)={{0x1, 0x9}, 'port0\x00', 0xc1, 0x1818, 0x2, 0x80000000, 0x1, 0x1, 0xfffffffa, 0x0, 0x1}) clock_gettime(0x1, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000000)={{0x1, 0x9}, 'port0\x00', 0xc1, 0x1818, 0x2, 0x80000000, 0x1, 0x1, 0xfffffffa, 0x0, 0x1}) (async) clock_gettime(0x1, &(0x7f0000000140)) (async) [ 744.876647][ T13] now=4295011610 last interrupt=4294983995 diff=27615 last called handler=main_command_interrupt [ 744.884475][ T13] timeout_message=lock fdc [ 744.886540][ T13] last output bytes: 23:33:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 14) [ 744.888278][ T13] 0 90 4294983992 [ 744.890656][ T13] 1 90 4294983992 [ 744.893641][ T13] 2 90 4294983992 [ 744.895449][ T13] 12 90 4294983992 23:33:13 executing program 3: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xe1a63fb0, 0x3}}, './file0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x4, 0x8d, 0x2f, 0x1, 0x4}, 0x14) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r1, 0x0) [ 744.898164][ T13] 1b 90 4294983992 23:33:13 executing program 2: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000000)={{0x1, 0x9}, 'port0\x00', 0xc1, 0x1818, 0x2, 0x80000000, 0x1, 0x1, 0xfffffffa, 0x0, 0x1}) (async) clock_gettime(0x1, &(0x7f0000000140)) [ 744.900245][ T13] ff 90 4294983992 [ 744.903279][ T13] 12 80 4294983995 [ 744.905085][ T13] 3 90 4294983995 [ 744.906838][ T13] 3 80 4294983995 [ 744.908648][ T13] a1 90 4294983995 [ 744.910387][ T13] 1e 90 4294983995 23:33:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 15) [ 744.913644][ T13] e6 80 4294983995 [ 744.915362][ T13] 1 90 4294983995 23:33:13 executing program 3: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) write$FUSE_POLL(r0, &(0x7f0000000240)={0x18, 0x0, 0x0, {0x6d83}}, 0x18) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0xc) syz_open_dev$media(&(0x7f0000000200), 0x9, 0x404181) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x3c1702) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r1, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000080), 0x8, 0x82) r3 = getpgrp(0x0) sched_rr_get_interval(r3, &(0x7f0000000180)) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f00000001c0)) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f00000000c0)={r3, 0x0, 0x2}) [ 744.917319][ T13] 0 90 4294983995 [ 744.919192][ T13] 0 90 4294983995 [ 744.920923][ T13] 1 90 4294983995 [ 744.923054][ T13] 2 90 4294983995 [ 744.924849][ T13] 24 90 4294983995 [ 744.926615][ T13] 1b 90 4294983995 [ 744.928405][ T13] ff 90 4294983995 [ 744.930117][ T13] last result at 4294986973 [ 744.935178][ T13] last redo_fd_request at 4295009819 [ 744.937663][ T13] status=80 [ 744.939170][ T13] fdc_busy=1 [ 744.940622][ T13] floppy_work.func=floppy_work_workfn [ 744.943488][ T13] cont=ffffffff8b136720 [ 744.945425][ T13] current_req=0000000000000000 [ 744.947498][ T13] command_status=-1 [ 744.949134][ T13] [ 744.950200][ T13] floppy1: floppy timeout called [ 744.953282][ T13] floppy.c: no request in request_done [ 744.955575][ T13] [ 744.956654][ T13] floppy driver state [ 744.958109][ T13] ------------------- [ 744.959563][ T13] now=4295011618 last interrupt=4294983995 diff=27623 last called handler=main_command_interrupt [ 744.964230][ T13] timeout_message=lock fdc [ 744.966062][ T13] last output bytes: [ 744.967819][ T13] 0 90 4294983992 [ 744.969373][ T13] 1 90 4294983992 [ 744.970890][ T13] 2 90 4294983992 [ 744.974252][ T13] 12 90 4294983992 [ 744.975890][ T13] 1b 90 4294983992 [ 744.977208][ T13] ff 90 4294983992 [ 744.978396][ T13] 12 80 4294983995 [ 744.979668][ T13] 3 90 4294983995 [ 744.981042][ T13] 3 80 4294983995 [ 744.982999][ T13] a1 90 4294983995 [ 744.984792][ T13] 1e 90 4294983995 [ 744.986558][ T13] e6 80 4294983995 [ 744.988236][ T13] 1 90 4294983995 [ 744.989994][ T13] 0 90 4294983995 [ 744.991777][ T13] 0 90 4294983995 [ 744.993476][ T13] 1 90 4294983995 [ 744.995126][ T13] 2 90 4294983995 [ 744.996678][ T13] 24 90 4294983995 [ 744.998201][ T13] 1b 90 4294983995 [ 744.999808][ T13] ff 90 4294983995 [ 745.001615][ T13] last result at 4294986973 [ 745.003676][ T13] last redo_fd_request at 4295011618 [ 745.006065][ T13] status=80 [ 745.007495][ T13] fdc_busy=1 [ 745.009017][ T13] floppy_work.func=floppy_work_workfn [ 745.011636][ T13] cont=ffffffff8b1366e0 [ 745.013576][ T13] current_req=0000000000000000 [ 745.015749][ T13] command_status=-1 [ 745.017530][ T13] [ 745.018692][ T13] floppy1: floppy timeout called [ 745.021291][ T13] [ 745.022524][ T13] floppy driver state [ 745.024334][ T13] ------------------- [ 745.026674][ T13] now=4295011625 last interrupt=4294983995 diff=27630 last called handler=main_command_interrupt 23:33:13 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$floppy(&(0x7f0000000040), 0x1, 0x3) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$FLOPPY_FDFLUSH(r1, 0x24b) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$floppy(&(0x7f0000000040), 0x1, 0x3) (async) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) (async) ioctl$FLOPPY_FDFLUSH(r1, 0x24b) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) 23:33:13 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) clock_gettime(0x1, &(0x7f0000000140)) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000180)={0x1, 0x4b, 0x9}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) clock_getres(0x6, &(0x7f0000000100)) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x101202, 0x0) connect$bt_l2cap(r2, &(0x7f00000001c0)={0x1f, 0x1, @any, 0xfff9}, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x3, 0x7, 0x2, 0x3080, 0xffffffffffffffff, 0x6, '\x00', 0x0, r2, 0x1, 0x3, 0x0, 0xf}, 0x48) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) fcntl$setlease(r2, 0x400, 0x0) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000040)) [ 745.032011][ T13] timeout_message=lock fdc 23:33:13 executing program 3: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async, rerun: 32) write$FUSE_POLL(r0, &(0x7f0000000240)={0x18, 0x0, 0x0, {0x6d83}}, 0x18) (rerun: 32) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0xc) syz_open_dev$media(&(0x7f0000000200), 0x9, 0x404181) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x3c1702) (async, rerun: 64) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r1, 0x0) (async, rerun: 32) r2 = syz_open_dev$vcsa(&(0x7f0000000080), 0x8, 0x82) (rerun: 32) r3 = getpgrp(0x0) sched_rr_get_interval(r3, &(0x7f0000000180)) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f00000001c0)) (async) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f00000000c0)={r3, 0x0, 0x2}) 23:33:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 16) [ 745.034275][ T13] last output bytes: [ 745.036088][ T13] 0 90 4294983992 [ 745.037617][ T13] 1 90 4294983992 [ 745.039251][ T13] 2 90 4294983992 [ 745.040843][ T13] 12 90 4294983992 [ 745.042861][ T13] 1b 90 4294983992 [ 745.044577][ T13] ff 90 4294983992 [ 745.046410][ T13] 12 80 4294983995 [ 745.047999][ T13] 3 90 4294983995 [ 745.049582][ T13] 3 80 4294983995 [ 745.051144][ T13] a1 90 4294983995 23:33:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 17) [ 745.053267][ T13] 1e 90 4294983995 [ 745.055172][ T13] e6 80 4294983995 [ 745.057005][ T13] 1 90 4294983995 23:33:13 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) clock_gettime(0x1, &(0x7f0000000140)) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000180)={0x1, 0x4b, 0x9}) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) clock_getres(0x6, &(0x7f0000000100)) (async) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x101202, 0x0) connect$bt_l2cap(r2, &(0x7f00000001c0)={0x1f, 0x1, @any, 0xfff9}, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x3, 0x7, 0x2, 0x3080, 0xffffffffffffffff, 0x6, '\x00', 0x0, r2, 0x1, 0x3, 0x0, 0xf}, 0x48) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) fcntl$setlease(r2, 0x400, 0x0) (async) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, 0x0) (async) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000040)) [ 745.058748][ T13] 0 90 4294983995 [ 745.060673][ T13] 0 90 4294983995 [ 745.063215][ T13] 1 90 4294983995 [ 745.064968][ T13] 2 90 4294983995 [ 745.066606][ T13] 24 90 4294983995 [ 745.068261][ T13] 1b 90 4294983995 [ 745.069846][ T13] ff 90 4294983995 [ 745.071470][ T13] last result at 4294986973 [ 745.073640][ T13] last redo_fd_request at 4295011624 [ 745.074840][T11767] FAULT_INJECTION: forcing a failure. [ 745.074840][T11767] name failslab, interval 1, probability 0, space 0, times 0 [ 745.075841][ T13] status=80 [ 745.075848][ T13] fdc_busy=1 [ 745.075853][ T13] floppy_work.func=floppy_work_workfn 23:33:13 executing program 3: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) write$FUSE_POLL(r0, &(0x7f0000000240)={0x18, 0x0, 0x0, {0x6d83}}, 0x18) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0xc) syz_open_dev$media(&(0x7f0000000200), 0x9, 0x404181) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x3c1702) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r1, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000080), 0x8, 0x82) (async) r3 = getpgrp(0x0) sched_rr_get_interval(r3, &(0x7f0000000180)) (async) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f00000001c0)) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f00000000c0)={r3, 0x0, 0x2}) 23:33:13 executing program 2: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) clock_gettime(0x1, &(0x7f0000000140)) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000180)={0x1, 0x4b, 0x9}) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) clock_getres(0x6, &(0x7f0000000100)) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x101202, 0x0) connect$bt_l2cap(r2, &(0x7f00000001c0)={0x1f, 0x1, @any, 0xfff9}, 0xe) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x3, 0x7, 0x2, 0x3080, 0xffffffffffffffff, 0x6, '\x00', 0x0, r2, 0x1, 0x3, 0x0, 0xf}, 0x48) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) fcntl$setlease(r2, 0x400, 0x0) (async) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, 0x0) (async) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000040)) [ 745.081360][T11767] CPU: 2 PID: 11767 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 745.082712][ T13] cont=ffffffff8b136720 [ 745.084108][T11767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 745.086332][ T13] current_req=0000000000000000 [ 745.086340][ T13] command_status=-1 [ 745.090857][T11767] Call Trace: [ 745.090868][T11767] [ 745.093090][ T13] [ 745.097056][T11767] dump_stack_lvl+0x125/0x1b0 [ 745.099317][ T13] floppy1: floppy timeout called [ 745.101077][T11767] should_fail_ex+0x496/0x5b0 [ 745.103400][ T13] floppy.c: no request in request_done [ 745.103908][T11767] should_failslab+0x9/0x20 [ 745.110954][ T13] [ 745.111306][T11767] __kmem_cache_alloc_node+0x5f/0x470 [ 745.114287][ T13] floppy driver state [ 745.115686][T11767] ? vsprintf+0x30/0x30 [ 745.116762][ T13] ------------------- [ 745.116768][ T13] now=4295011630 last interrupt=4294983995 diff=27635 last called handler=main_command_interrupt [ 745.119071][T11767] kmalloc_trace+0x25/0xe0 [ 745.120814][ T13] timeout_message=lock fdc [ 745.120819][ T13] last output bytes: [ 745.120822][ T13] 0 90 4294983992 [ 745.122698][T11767] init_srcu_struct_fields+0x8da/0xdc0 [ 745.122730][T11767] kvm_dev_ioctl+0x5be/0x1c20 [ 745.122751][T11767] ? reacquire_held_locks+0x4b0/0x4b0 [ 745.122774][T11767] ? bit_wait_timeout+0x160/0x160 [ 745.122795][T11767] ? kvm_vcpu_stats_release+0x80/0x80 [ 745.122815][T11767] ? selinux_file_ioctl+0x17d/0x270 [ 745.124715][ T13] 1 90 4294983992 [ 745.128692][T11767] ? selinux_file_ioctl+0xb5/0x270 [ 745.128718][T11767] ? kvm_vcpu_stats_release+0x80/0x80 [ 745.128740][T11767] __x64_sys_ioctl+0x18f/0x210 [ 745.128763][T11767] do_syscall_64+0x38/0xb0 [ 745.128791][T11767] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 745.128811][T11767] RIP: 0033:0x7fc9bba7cae9 [ 745.128825][T11767] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 745.128842][T11767] RSP: 002b:00007fc9bc8880c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 745.128862][T11767] RAX: ffffffffffffffda RBX: 00007fc9bbb9bf80 RCX: 00007fc9bba7cae9 [ 745.130891][ T13] 2 90 4294983992 [ 745.132574][T11767] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 745.132588][T11767] RBP: 00007fc9bc888120 R08: 0000000000000000 R09: 0000000000000000 [ 745.132599][T11767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 745.132611][T11767] R13: 000000000000000b R14: 00007fc9bbb9bf80 R15: 00007ffdf1e289a8 [ 745.132626][T11767] [ 745.200276][ T13] 12 90 4294983992 [ 745.202438][ T13] 1b 90 4294983992 [ 745.204168][ T13] ff 90 4294983992 [ 745.205921][ T13] 12 80 4294983995 [ 745.207657][ T13] 3 90 4294983995 [ 745.209325][ T13] 3 80 4294983995 [ 745.210820][ T13] a1 90 4294983995 [ 745.212522][ T13] 1e 90 4294983995 [ 745.214090][ T13] e6 80 4294983995 [ 745.215560][ T13] 1 90 4294983995 [ 745.217072][ T13] 0 90 4294983995 [ 745.218618][ T13] 0 90 4294983995 [ 745.220063][ T13] 1 90 4294983995 [ 745.222565][ T13] 2 90 4294983995 [ 745.224123][ T13] 24 90 4294983995 [ 745.225718][ T13] 1b 90 4294983995 [ 745.227076][ T13] ff 90 4294983995 [ 745.228448][ T13] last result at 4294986973 [ 745.230778][ T13] last redo_fd_request at 4295011630 [ 745.232925][ T13] status=80 [ 745.234087][ T13] fdc_busy=1 [ 745.235405][ T13] floppy_work.func=floppy_work_workfn [ 745.237736][ T13] cont=ffffffff8b1366e0 [ 745.239553][ T13] current_req=0000000000000000 [ 745.241414][ T13] command_status=-1 [ 745.243154][ T13] [ 745.244016][ T13] floppy1: floppy timeout called [ 745.246770][ T13] [ 745.247678][ T13] floppy driver state [ 745.249349][ T13] ------------------- [ 745.250855][ T13] now=4295011647 last interrupt=4294983995 diff=27652 last called handler=main_command_interrupt 23:33:13 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$floppy(&(0x7f0000000040), 0x1, 0x3) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) (async) ioctl$FLOPPY_FDFLUSH(r1, 0x24b) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) 23:33:13 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 23:33:13 executing program 2: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x40501, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000040)) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x7, 0x4, 0xdef, 0x80, 0x1d56400000000, r1}) ioctl$VHOST_VDPA_GET_DEVICE_ID(r0, 0x8004af70, &(0x7f0000000000)) clock_gettime(0x5, &(0x7f0000000140)) 23:33:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 18) [ 745.254835][ T13] timeout_message=lock fdc [ 745.257907][ T13] last output bytes: [ 745.259683][ T13] 0 90 4294983992 [ 745.261348][ T13] 1 90 4294983992 [ 745.263654][ T13] 2 90 4294983992 [ 745.265498][ T13] 12 90 4294983992 [ 745.266513][T11787] FAULT_INJECTION: forcing a failure. [ 745.266513][T11787] name failslab, interval 1, probability 0, space 0, times 0 [ 745.267145][ T13] 1b 90 4294983992 [ 745.267154][ T13] ff 90 4294983992 [ 745.272865][T11787] CPU: 0 PID: 11787 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 745.272887][T11787] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 745.272897][T11787] Call Trace: [ 745.272903][T11787] [ 745.272909][T11787] dump_stack_lvl+0x125/0x1b0 [ 745.274614][ T13] 12 80 4294983995 [ 745.276378][T11787] should_fail_ex+0x496/0x5b0 [ 745.280899][ T13] 3 90 4294983995 [ 745.285502][T11787] should_failslab+0x9/0x20 [ 745.285532][T11787] __kmem_cache_alloc_node+0x5f/0x470 [ 745.285551][T11787] ? vsprintf+0x30/0x30 [ 745.285574][T11787] kmalloc_trace+0x25/0xe0 [ 745.285596][T11787] init_srcu_struct_fields+0x8da/0xdc0 [ 745.285625][T11787] kvm_dev_ioctl+0x5be/0x1c20 [ 745.285647][T11787] ? reacquire_held_locks+0x4b0/0x4b0 [ 745.285671][T11787] ? bit_wait_timeout+0x160/0x160 [ 745.287299][ T13] 3 80 4294983995 [ 745.288597][T11787] ? kvm_vcpu_stats_release+0x80/0x80 [ 745.288622][T11787] ? selinux_file_ioctl+0x17d/0x270 [ 745.290452][ T13] a1 90 4294983995 [ 745.292173][T11787] ? selinux_file_ioctl+0xb5/0x270 [ 745.292198][T11787] ? kvm_vcpu_stats_release+0x80/0x80 [ 745.292220][T11787] __x64_sys_ioctl+0x18f/0x210 23:33:13 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 23:33:13 executing program 2: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x40501, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000040)) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x7, 0x4, 0xdef, 0x80, 0x1d56400000000, r1}) ioctl$VHOST_VDPA_GET_DEVICE_ID(r0, 0x8004af70, &(0x7f0000000000)) clock_gettime(0x5, &(0x7f0000000140)) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x40501, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000040)) (async) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x7, 0x4, 0xdef, 0x80, 0x1d56400000000, r1}) (async) ioctl$VHOST_VDPA_GET_DEVICE_ID(r0, 0x8004af70, &(0x7f0000000000)) (async) clock_gettime(0x5, &(0x7f0000000140)) (async) [ 745.292241][T11787] do_syscall_64+0x38/0xb0 23:33:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 19) [ 745.294198][ T13] 1e 90 4294983995 [ 745.295911][T11787] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 745.297567][ T13] e6 80 4294983995 [ 745.297574][ T13] 1 90 4294983995 [ 745.300027][T11787] RIP: 0033:0x7fc9bba7cae9 [ 745.301644][ T13] 0 90 4294983995 23:33:13 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) [ 745.303625][T11787] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 745.305711][ T13] 0 90 4294983995 [ 745.305719][ T13] 1 90 4294983995 [ 745.307832][T11787] RSP: 002b:00007fc9bc8880c8 EFLAGS: 00000246 [ 745.309848][ T13] 2 90 4294983995 [ 745.309855][ T13] 24 90 4294983995 [ 745.312142][T11787] ORIG_RAX: 0000000000000010 [ 745.312151][T11787] RAX: ffffffffffffffda RBX: 00007fc9bbb9bf80 RCX: 00007fc9bba7cae9 [ 745.312164][T11787] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 745.312175][T11787] RBP: 00007fc9bc888120 R08: 0000000000000000 R09: 0000000000000000 [ 745.312187][T11787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 745.312198][T11787] R13: 000000000000000b R14: 00007fc9bbb9bf80 R15: 00007ffdf1e289a8 [ 745.313621][ T13] 1b 90 4294983995 [ 745.313628][ T13] ff 90 4294983995 [ 745.316064][T11787] [ 745.318445][ T13] last result at 4294986973 [ 745.344054][T11797] FAULT_INJECTION: forcing a failure. [ 745.344054][T11797] name failslab, interval 1, probability 0, space 0, times 0 [ 745.352571][ T13] last redo_fd_request at 4295011647 [ 745.354165][T11797] CPU: 3 PID: 11797 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 745.354941][ T13] status=80 [ 745.357221][T11797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 745.357229][T11797] Call Trace: [ 745.358942][ T13] fdc_busy=1 [ 745.360333][T11797] [ 745.360339][T11797] dump_stack_lvl+0x125/0x1b0 [ 745.362777][ T13] floppy_work.func=floppy_work_workfn [ 745.365620][T11797] should_fail_ex+0x496/0x5b0 [ 745.369289][ T13] cont=ffffffff8b1366e0 [ 745.372407][T11797] should_failslab+0x9/0x20 [ 745.372454][T11797] __kmem_cache_alloc_node+0x5f/0x470 [ 745.372474][T11797] kmalloc_trace+0x25/0xe0 [ 745.372490][T11797] kvm_dev_ioctl+0x9b6/0x1c20 [ 745.372503][T11797] ? bit_wait_timeout+0x160/0x160 [ 745.372515][T11797] ? kvm_vcpu_stats_release+0x80/0x80 [ 745.372527][T11797] ? selinux_file_ioctl+0x17d/0x270 [ 745.372539][T11797] ? selinux_file_ioctl+0xb5/0x270 [ 745.372553][T11797] ? kvm_vcpu_stats_release+0x80/0x80 [ 745.372570][T11797] __x64_sys_ioctl+0x18f/0x210 [ 745.372590][T11797] do_syscall_64+0x38/0xb0 [ 745.376224][ T13] current_req=0000000000000000 [ 745.379190][T11797] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 745.380955][ T13] command_status=-1 [ 745.382426][T11797] RIP: 0033:0x7fc9bba7cae9 [ 745.382442][T11797] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 745.382458][T11797] RSP: 002b:00007fc9bc8880c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 745.382475][T11797] RAX: ffffffffffffffda RBX: 00007fc9bbb9bf80 RCX: 00007fc9bba7cae9 [ 745.382485][T11797] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 745.382496][T11797] RBP: 00007fc9bc888120 R08: 0000000000000000 R09: 0000000000000000 [ 745.382505][T11797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 745.382515][T11797] R13: 000000000000000b R14: 00007fc9bbb9bf80 R15: 00007ffdf1e289a8 [ 745.382523][T11797] [ 745.485399][ T13] [ 745.486612][ T13] floppy1: floppy timeout called [ 745.489128][ T13] [ 745.490296][ T13] floppy driver state [ 745.493776][ T13] ------------------- 23:33:13 executing program 2: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x40501, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000040)) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x7, 0x4, 0xdef, 0x80, 0x1d56400000000, r1}) ioctl$VHOST_VDPA_GET_DEVICE_ID(r0, 0x8004af70, &(0x7f0000000000)) clock_gettime(0x5, &(0x7f0000000140)) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x40501, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000040)) (async) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x7, 0x4, 0xdef, 0x80, 0x1d56400000000, r1}) (async) ioctl$VHOST_VDPA_GET_DEVICE_ID(r0, 0x8004af70, &(0x7f0000000000)) (async) clock_gettime(0x5, &(0x7f0000000140)) (async) 23:33:13 executing program 3: r0 = syz_open_dev$floppy(&(0x7f0000000040), 0xffffffff, 0x2) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x187482, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$FLOPPY_FDFMTEND(r1, 0x249) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$FLOPPY_FDRESET(r2, 0x254, 0x1) ioctl$FLOPPY_FDRESET(r0, 0x254, 0x2) r3 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r3, 0x0) [ 745.495523][ T13] now=4295011672 last interrupt=4294983995 diff=27677 last called handler=main_command_interrupt [ 745.500528][ T13] timeout_message=lock fdc 23:33:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 20) 23:33:13 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x1f, 0x0) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0x1, 0x80) ioctl$VHOST_VDPA_GET_VRING_GROUP(r2, 0xc008af7b, &(0x7f0000000140)={0x2, 0x5}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$FLOPPY_FDGETFDCSTAT(r0, 0x80280215, &(0x7f0000000080)) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000040)) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r1, 0x0) [ 745.502631][ T13] last output bytes: [ 745.504649][ T13] 0 90 4294983992 [ 745.506418][ T13] 1 90 4294983992 [ 745.508237][ T13] 2 90 4294983992 23:33:13 executing program 3: syz_open_dev$floppy(&(0x7f0000000040), 0xffffffff, 0x2) (async) r0 = syz_open_dev$floppy(&(0x7f0000000040), 0xffffffff, 0x2) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x187482, 0x0) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x187482, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$FLOPPY_FDFMTEND(r1, 0x249) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$FLOPPY_FDRESET(r2, 0x254, 0x1) ioctl$FLOPPY_FDRESET(r0, 0x254, 0x2) r3 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r3, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r3, 0x0) [ 745.510720][ T13] 12 90 4294983992 [ 745.512735][T11810] FAULT_INJECTION: forcing a failure. [ 745.512735][T11810] name failslab, interval 1, probability 0, space 0, times 0 [ 745.513190][ T13] 1b 90 4294983992 [ 745.518196][T11810] CPU: 3 PID: 11810 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 745.520014][ T13] ff 90 4294983992 [ 745.524281][T11810] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 745.524291][T11810] Call Trace: [ 745.524296][T11810] [ 745.524300][T11810] dump_stack_lvl+0x125/0x1b0 [ 745.524321][T11810] should_fail_ex+0x496/0x5b0 [ 745.524332][T11810] should_failslab+0x9/0x20 23:33:13 executing program 3: r0 = syz_open_dev$floppy(&(0x7f0000000040), 0xffffffff, 0x2) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x187482, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$FLOPPY_FDFMTEND(r1, 0x249) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$FLOPPY_FDRESET(r2, 0x254, 0x1) ioctl$FLOPPY_FDRESET(r0, 0x254, 0x2) r3 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r3, 0x0) syz_open_dev$floppy(&(0x7f0000000040), 0xffffffff, 0x2) (async) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x187482, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) ioctl$FLOPPY_FDFMTEND(r1, 0x249) (async) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) ioctl$FLOPPY_FDRESET(r2, 0x254, 0x1) (async) ioctl$FLOPPY_FDRESET(r0, 0x254, 0x2) (async) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r3, 0x0) (async) [ 745.526288][ T13] 12 80 4294983995 [ 745.530327][T11810] __kmem_cache_alloc_node+0x5f/0x470 [ 745.532315][ T13] 3 90 4294983995 [ 745.533181][T11810] kmalloc_trace+0x25/0xe0 [ 745.535576][ T13] 3 80 4294983995 [ 745.535584][ T13] a1 90 4294983995 [ 745.537606][T11810] kvm_dev_ioctl+0x9b6/0x1c20 23:33:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 21) [ 745.537630][T11810] ? bit_wait_timeout+0x160/0x160 [ 745.537643][T11810] ? kvm_vcpu_stats_release+0x80/0x80 [ 745.537660][T11810] ? selinux_file_ioctl+0x17d/0x270 23:33:13 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x100) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000000c0)) [ 745.537680][T11810] ? selinux_file_ioctl+0xb5/0x270 [ 745.537699][T11810] ? kvm_vcpu_stats_release+0x80/0x80 [ 745.537717][T11810] __x64_sys_ioctl+0x18f/0x210 [ 745.537736][T11810] do_syscall_64+0x38/0xb0 [ 745.537761][T11810] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 745.537778][T11810] RIP: 0033:0x7fc9bba7cae9 [ 745.537791][T11810] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 745.537807][T11810] RSP: 002b:00007fc9bc8880c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 23:33:13 executing program 2: clock_gettime(0xe, &(0x7f0000000040)) 23:33:13 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) (async, rerun: 32) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x100) (rerun: 32) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000000c0)) [ 745.537825][T11810] RAX: ffffffffffffffda RBX: 00007fc9bbb9bf80 RCX: 00007fc9bba7cae9 [ 745.537837][T11810] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 745.539934][ T13] 1e 90 4294983995 [ 745.541632][T11810] RBP: 00007fc9bc888120 R08: 0000000000000000 R09: 0000000000000000 [ 745.541649][T11810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 23:33:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 22) [ 745.541660][T11810] R13: 000000000000000b R14: 00007fc9bbb9bf80 R15: 00007ffdf1e289a8 [ 745.541675][T11810] [ 745.573796][T11825] FAULT_INJECTION: forcing a failure. [ 745.573796][T11825] name failslab, interval 1, probability 0, space 0, times 0 [ 745.575564][ T13] e6 80 4294983995 [ 745.577690][T11825] CPU: 0 PID: 11825 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 745.579808][ T13] 1 90 4294983995 [ 745.589520][T11825] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 745.589535][T11825] Call Trace: [ 745.589543][T11825] [ 745.589550][T11825] dump_stack_lvl+0x125/0x1b0 [ 745.589583][T11825] should_fail_ex+0x496/0x5b0 [ 745.589600][T11825] should_failslab+0x9/0x20 [ 745.589624][T11825] __kmem_cache_alloc_node+0x5f/0x470 [ 745.589642][T11825] kmalloc_trace+0x25/0xe0 [ 745.589665][T11825] kvm_dev_ioctl+0x9b6/0x1c20 [ 745.589688][T11825] ? bit_wait_timeout+0x160/0x160 [ 745.589710][T11825] ? kvm_vcpu_stats_release+0x80/0x80 [ 745.589736][T11825] ? selinux_file_ioctl+0x17d/0x270 [ 745.595630][ T13] 0 90 4294983995 [ 745.598376][T11825] ? selinux_file_ioctl+0xb5/0x270 [ 745.598402][T11825] ? kvm_vcpu_stats_release+0x80/0x80 [ 745.598421][T11825] __x64_sys_ioctl+0x18f/0x210 [ 745.598440][T11825] do_syscall_64+0x38/0xb0 [ 745.598464][T11825] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 745.598483][T11825] RIP: 0033:0x7fc9bba7cae9 [ 745.598496][T11825] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 745.598512][T11825] RSP: 002b:00007fc9bc8880c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 745.598529][T11825] RAX: ffffffffffffffda RBX: 00007fc9bbb9bf80 RCX: 00007fc9bba7cae9 [ 745.598539][T11825] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 745.598549][T11825] RBP: 00007fc9bc888120 R08: 0000000000000000 R09: 0000000000000000 [ 745.598559][T11825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 745.598573][T11825] R13: 000000000000000b R14: 00007fc9bbb9bf80 R15: 00007ffdf1e289a8 [ 745.598603][T11825] [ 745.615071][T11833] binder: 11807:11833 ioctl 4018f50b 0 returned -22 [ 745.615592][ T13] 0 90 4294983995 [ 745.622666][T11833] binder: 11807:11833 ioctl 80086601 20000040 returned -22 [ 745.622909][ T13] 1 90 4294983995 [ 745.628986][T11835] FAULT_INJECTION: forcing a failure. [ 745.628986][T11835] name failslab, interval 1, probability 0, space 0, times 0 [ 745.633225][ T13] 2 90 4294983995 [ 745.636736][T11835] CPU: 3 PID: 11835 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 745.637423][ T13] 24 90 4294983995 [ 745.639489][T11835] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 745.639501][T11835] Call Trace: [ 745.639508][T11835] [ 745.639514][T11835] dump_stack_lvl+0x125/0x1b0 [ 745.639544][T11835] should_fail_ex+0x496/0x5b0 [ 745.639561][T11835] should_failslab+0x9/0x20 [ 745.639590][T11835] __kmem_cache_alloc_node+0x5f/0x470 [ 745.639609][T11835] kmalloc_trace+0x25/0xe0 [ 745.639628][T11835] kvm_dev_ioctl+0x9b6/0x1c20 [ 745.639649][T11835] ? bit_wait_timeout+0x160/0x160 [ 745.639668][T11835] ? kvm_vcpu_stats_release+0x80/0x80 [ 745.639687][T11835] ? selinux_file_ioctl+0x17d/0x270 [ 745.639707][T11835] ? selinux_file_ioctl+0xb5/0x270 [ 745.639727][T11835] ? kvm_vcpu_stats_release+0x80/0x80 [ 745.639745][T11835] __x64_sys_ioctl+0x18f/0x210 [ 745.639764][T11835] do_syscall_64+0x38/0xb0 [ 745.639787][T11835] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 745.639804][T11835] RIP: 0033:0x7fc9bba7cae9 [ 745.639817][T11835] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 745.639833][T11835] RSP: 002b:00007fc9bc8880c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 745.639850][T11835] RAX: ffffffffffffffda RBX: 00007fc9bbb9bf80 RCX: 00007fc9bba7cae9 [ 745.639861][T11835] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 745.639871][T11835] RBP: 00007fc9bc888120 R08: 0000000000000000 R09: 0000000000000000 [ 745.639878][T11835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 745.639884][T11835] R13: 000000000000000b R14: 00007fc9bbb9bf80 R15: 00007ffdf1e289a8 [ 745.643322][ T13] 1b 90 4294983995 [ 745.644297][T11835] [ 745.794365][ T13] ff 90 4294983995 [ 745.794381][ T13] last result at 4294986973 [ 745.794388][ T13] last redo_fd_request at 4295011671 [ 745.794440][ T13] status=80 [ 745.794447][ T13] fdc_busy=1 [ 745.794453][ T13] floppy_work.func=floppy_work_workfn [ 745.794477][ T13] cont=ffffffff8b1366e0 [ 745.794484][ T13] current_req=0000000000000000 [ 745.794490][ T13] command_status=-1 [ 745.794496][ T13] [ 745.794542][ T13] floppy1: floppy timeout called 23:33:14 executing program 0: syz_open_dev$vcsa(&(0x7f00000004c0), 0x1f, 0x0) (async) r0 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x1f, 0x0) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000100), 0x1, 0x80) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0x1, 0x80) ioctl$VHOST_VDPA_GET_VRING_GROUP(r2, 0xc008af7b, &(0x7f0000000140)={0x2, 0x5}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$FLOPPY_FDGETFDCSTAT(r0, 0x80280215, &(0x7f0000000080)) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000040)) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000040)) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r1, 0x0) 23:33:14 executing program 2: clock_gettime(0xe, &(0x7f0000000040)) 23:33:14 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x100) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000000c0)) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x100) (async) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000000c0)) (async) 23:33:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 23) [ 745.831367][T11841] FAULT_INJECTION: forcing a failure. 23:33:14 executing program 2: clock_gettime(0xe, &(0x7f0000000040)) [ 745.831367][T11841] name failslab, interval 1, probability 0, space 0, times 0 23:33:14 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, &(0x7f0000000080)={0x0, 0x6b, ""/107}) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) [ 745.837902][T11841] CPU: 0 PID: 11841 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 745.842381][T11841] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 745.842395][T11841] Call Trace: [ 745.842403][T11841] [ 745.842410][T11841] dump_stack_lvl+0x125/0x1b0 [ 745.842442][T11841] should_fail_ex+0x496/0x5b0 23:33:14 executing program 2: clock_gettime(0x1, &(0x7f0000000040)) ioctl$IOCTL_START_ACCEL_DEV(0xffffffffffffffff, 0x40096102, &(0x7f0000000080)={{}, 0x5}) clock_getres(0x5, &(0x7f0000000000)) [ 745.842462][T11841] should_failslab+0x9/0x20 [ 745.842486][T11841] __kmem_cache_alloc_node+0x5f/0x470 [ 745.842503][T11841] ? kvm_dev_ioctl+0x9b6/0x1c20 [ 745.842520][T11841] ? __x64_sys_ioctl+0x18f/0x210 [ 745.842544][T11841] kmalloc_trace+0x25/0xe0 [ 745.842565][T11841] alloc_workqueue+0x16f/0x1490 [ 745.842588][T11841] ? workqueue_sysfs_register+0x400/0x400 [ 745.842613][T11841] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 745.842631][T11841] kvm_mmu_init_vm+0x248/0x2e0 23:33:14 executing program 2: clock_gettime(0x1, &(0x7f0000000040)) (async) ioctl$IOCTL_START_ACCEL_DEV(0xffffffffffffffff, 0x40096102, &(0x7f0000000080)={{}, 0x5}) (async) clock_getres(0x5, &(0x7f0000000000)) [ 745.842654][T11841] kvm_arch_init_vm+0x39/0x720 [ 745.874019][T11841] ? __kasan_kmalloc+0xa3/0xb0 [ 745.874039][T11841] kvm_dev_ioctl+0xa31/0x1c20 [ 745.874060][T11841] ? bit_wait_timeout+0x160/0x160 [ 745.879976][T11841] ? kvm_vcpu_stats_release+0x80/0x80 [ 745.880006][T11841] ? selinux_file_ioctl+0x17d/0x270 [ 745.880027][T11841] ? selinux_file_ioctl+0xb5/0x270 [ 745.880046][T11841] ? kvm_vcpu_stats_release+0x80/0x80 [ 745.880066][T11841] __x64_sys_ioctl+0x18f/0x210 [ 745.880088][T11841] do_syscall_64+0x38/0xb0 [ 745.880116][T11841] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 745.880136][T11841] RIP: 0033:0x7fc9bba7cae9 [ 745.880155][T11841] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 745.880175][T11841] RSP: 002b:00007fc9bc8880c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 745.880194][T11841] RAX: ffffffffffffffda RBX: 00007fc9bbb9bf80 RCX: 00007fc9bba7cae9 [ 745.880206][T11841] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 745.880218][T11841] RBP: 00007fc9bc888120 R08: 0000000000000000 R09: 0000000000000000 [ 745.880229][T11841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 745.880240][T11841] R13: 000000000000000b R14: 00007fc9bbb9bf80 R15: 00007ffdf1e289a8 [ 745.880255][T11841] [ 745.931229][T11856] binder: 11844:11856 ioctl 4018f50b 0 returned -22 [ 745.937804][T11856] binder: 11844:11856 ioctl 80086601 20000040 returned -22 [ 745.937871][T11845] binder: 11844:11845 ioctl 80086601 20000040 returned -22 23:33:14 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, &(0x7f0000000080)={0x0, 0x6b, ""/107}) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, &(0x7f0000000080)={0x0, 0x6b, ""/107}) (async) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) (async) 23:33:14 executing program 2: clock_gettime(0x1, &(0x7f0000000040)) (async) ioctl$IOCTL_START_ACCEL_DEV(0xffffffffffffffff, 0x40096102, &(0x7f0000000080)={{}, 0x5}) (async) clock_getres(0x5, &(0x7f0000000000)) 23:33:14 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x1f, 0x0) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0x1, 0x80) ioctl$VHOST_VDPA_GET_VRING_GROUP(r2, 0xc008af7b, &(0x7f0000000140)={0x2, 0x5}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$FLOPPY_FDGETFDCSTAT(r0, 0x80280215, &(0x7f0000000080)) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000040)) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r1, 0x0) syz_open_dev$vcsa(&(0x7f00000004c0), 0x1f, 0x0) (async) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000100), 0x1, 0x80) (async) ioctl$VHOST_VDPA_GET_VRING_GROUP(r2, 0xc008af7b, &(0x7f0000000140)={0x2, 0x5}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) (async) ioctl$FLOPPY_FDGETFDCSTAT(r0, 0x80280215, &(0x7f0000000080)) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, 0x0) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000040)) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r1, 0x0) (async) 23:33:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 24) 23:33:14 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) clock_gettime(0x3, &(0x7f0000000040)) [ 745.962494][T11868] binder: 11862:11868 ioctl 4018f50b 0 returned -22 [ 745.962687][T11867] FAULT_INJECTION: forcing a failure. [ 745.962687][T11867] name failslab, interval 1, probability 0, space 0, times 0 23:33:14 executing program 3: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, &(0x7f0000000080)={0x0, 0x6b, ""/107}) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) [ 745.965862][T11868] binder: 11862:11868 ioctl 80086601 20000040 returned -22 [ 745.976368][T11867] CPU: 2 PID: 11867 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 23:33:14 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) clock_gettime(0x3, &(0x7f0000000040)) (async) clock_gettime(0x3, &(0x7f0000000040)) [ 745.976396][T11867] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 745.976408][T11867] Call Trace: [ 745.976441][T11867] 23:33:14 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0xa3, 0x242000) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x81) [ 745.976449][T11867] dump_stack_lvl+0x125/0x1b0 [ 745.990753][T11867] should_fail_ex+0x496/0x5b0 [ 745.992993][T11867] should_failslab+0x9/0x20 [ 745.995136][T11867] __kmem_cache_alloc_node+0x5f/0x470 [ 745.997661][T11867] ? kvm_dev_ioctl+0x9b6/0x1c20 [ 745.999963][T11867] ? __x64_sys_ioctl+0x18f/0x210 [ 746.002325][T11867] kmalloc_trace+0x25/0xe0 [ 746.004456][T11867] alloc_workqueue+0x16f/0x1490 [ 746.006745][T11867] ? workqueue_sysfs_register+0x400/0x400 [ 746.009398][T11867] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 746.011808][T11867] kvm_mmu_init_vm+0x248/0x2e0 [ 746.014057][T11867] kvm_arch_init_vm+0x39/0x720 [ 746.016302][T11867] ? __kasan_kmalloc+0xa3/0xb0 [ 746.018606][T11867] kvm_dev_ioctl+0xa31/0x1c20 [ 746.020861][T11867] ? bit_wait_timeout+0x160/0x160 [ 746.023276][T11867] ? kvm_vcpu_stats_release+0x80/0x80 [ 746.025920][T11867] ? selinux_file_ioctl+0x17d/0x270 [ 746.028388][T11867] ? selinux_file_ioctl+0xb5/0x270 [ 746.030811][T11867] ? kvm_vcpu_stats_release+0x80/0x80 [ 746.033356][T11867] __x64_sys_ioctl+0x18f/0x210 [ 746.035608][T11867] do_syscall_64+0x38/0xb0 [ 746.037716][T11867] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 746.040445][T11867] RIP: 0033:0x7fc9bba7cae9 [ 746.042532][T11867] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 746.051362][T11867] RSP: 002b:00007fc9bc8880c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 746.055326][T11867] RAX: ffffffffffffffda RBX: 00007fc9bbb9bf80 RCX: 00007fc9bba7cae9 [ 746.059006][T11867] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 746.062555][T11867] RBP: 00007fc9bc888120 R08: 0000000000000000 R09: 0000000000000000 [ 746.066293][T11867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 746.070008][T11867] R13: 000000000000000b R14: 00007fc9bbb9bf80 R15: 00007ffdf1e289a8 [ 746.073768][T11867] 23:33:14 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) clock_gettime(0x3, &(0x7f0000000040)) 23:33:14 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0xa3, 0x242000) socket$can_j1939(0x1d, 0x2, 0x7) (async) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x81) 23:33:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 25) 23:33:14 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3f, 0x75}}, './file0\x00'}) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1000002) inotify_rm_watch(r1, r2) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1000002) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x527400) inotify_rm_watch(r3, r4) inotify_rm_watch(r0, r4) 23:33:14 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x1e) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="feffffff050000002e2f66696c6530000540415ae471c27b1d3b4048f98334234b6518b77a922b6cc8b92246aab0f00bd2585232cc65bc7e304ad601bc186ccb05bd46416901cb9ec26ac609bbb074ac23e73a02da8bc01789cf1b3ead6996d32ab09a83a96e6a9696a012bc8eda2d38767500000000000000019946f01ccb6a2822ee20e7e993b5c9dda4d6c140bf5cc6d31790b5ae976862c73d101a8f0f4f34dba32d7ef2efd134e4b4c9715fdaad9d65208b03a2d49819764696b8cf9106962369bb928d0d10fde8d3561307cbb318e9848b02398809ea13d1f0adbbac44"]) ioctl$FLOPPY_FDFMTEND(0xffffffffffffffff, 0x249) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"283905ac14dac7cfeb0946e3c536b27c", 0x0, 0x0, {0x2, 0xe36}, {0x80000000, 0x10000}, 0x6, [0x2, 0x400, 0x392, 0x4, 0x3ff, 0x8, 0x9, 0x7f, 0x3, 0x6, 0x8000000000000000, 0x32, 0x1e7, 0x8000, 0x8, 0xff]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000140)={"ed965a2ca54c8830f529e171fd9e6b19", 0x0, r3, {0x3, 0x4}, {0x80, 0x3}, 0x200, [0x200, 0x5, 0x200, 0x7, 0x6, 0x7fffffffffffffff, 0xf, 0x7fffffffffffffff, 0x9, 0x6, 0x4e, 0x99a, 0x1, 0xee, 0xffffffff00000000, 0x5]}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) 23:33:14 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0xa3, 0x242000) (async) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x81) 23:33:14 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3f, 0x75}}, './file0\x00'}) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1000002) inotify_rm_watch(r1, r2) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1000002) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x527400) inotify_rm_watch(r3, r4) inotify_rm_watch(r0, r4) clock_gettime(0x1, &(0x7f0000000140)) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3f, 0x75}}, './file0\x00'}) (async) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1000002) (async) inotify_rm_watch(r1, r2) (async) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1000002) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x527400) (async) inotify_rm_watch(r3, r4) (async) inotify_rm_watch(r0, r4) (async) 23:33:14 executing program 0: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) mount$9p_fd(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x802400, &(0x7f00000006c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@noextend}, {@msize={'msize', 0x3d, 0x8}}, {@cache_fscache}, {@loose}], [{@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}]}}) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000780)) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x20000000) fcntl$setpipe(r0, 0x407, 0x3f) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0x104, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x1, 0x0, 0xc}, @flat=@weak_handle={0x77682a85, 0x2000, 0x3}, @fda={0x66646185, 0x3, 0x2, 0x7}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}, 0x1000}, @dead_binder_done, @register_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/19, 0x13, 0x0, 0xb}, @fda={0x66646185, 0x5, 0x1, 0x13}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/180, 0xb4, 0x2, 0x5}}, &(0x7f0000000280)={0x0, 0x28, 0x48}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@handle={0x73682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/38, 0x26, 0x1, 0x10}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}}, &(0x7f0000000380)={0x0, 0x18, 0x40}}}, @register_looper, @increfs, @dead_binder_done], 0xc3, 0x0, &(0x7f0000000500)="9dbde58407faf1644b0b41024724524d460545e0faac324dce09843c3825a92f0b1e74666a0b99783a67a9cb3055bb53044d200d66a10f514ba9208a16d328342dbe750aeb46317614c56ea3a21e3d61de13fd4ce09b984c676b6171386a6b7e551c044ffab5b57ebb7ce5ce67d6e858c9cf3574c380dfe515018456e74f0d410822a40a7c7a54c3861cea0e3342e1f8c1f31cede240d5e2c5bdb717f21b79898a96e451bba89eb60a83d7d063775de1019cfbf6f45bae1dbdfcd3b2e3c1f69c1c7e44"}) 23:33:14 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x1e) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="feffffff050000002e2f66696c6530000540415ae471c27b1d3b4048f98334234b6518b77a922b6cc8b92246aab0f00bd2585232cc65bc7e304ad601bc186ccb05bd46416901cb9ec26ac609bbb074ac23e73a02da8bc01789cf1b3ead6996d32ab09a83a96e6a9696a012bc8eda2d38767500000000000000019946f01ccb6a2822ee20e7e993b5c9dda4d6c140bf5cc6d31790b5ae976862c73d101a8f0f4f34dba32d7ef2efd134e4b4c9715fdaad9d65208b03a2d49819764696b8cf9106962369bb928d0d10fde8d3561307cbb318e9848b02398809ea13d1f0adbbac44"]) ioctl$FLOPPY_FDFMTEND(0xffffffffffffffff, 0x249) (async) ioctl$FLOPPY_FDFMTEND(0xffffffffffffffff, 0x249) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"283905ac14dac7cfeb0946e3c536b27c", 0x0, 0x0, {0x2, 0xe36}, {0x80000000, 0x10000}, 0x6, [0x2, 0x400, 0x392, 0x4, 0x3ff, 0x8, 0x9, 0x7f, 0x3, 0x6, 0x8000000000000000, 0x32, 0x1e7, 0x8000, 0x8, 0xff]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000140)={"ed965a2ca54c8830f529e171fd9e6b19", 0x0, r3, {0x3, 0x4}, {0x80, 0x3}, 0x200, [0x200, 0x5, 0x200, 0x7, 0x6, 0x7fffffffffffffff, 0xf, 0x7fffffffffffffff, 0x9, 0x6, 0x4e, 0x99a, 0x1, 0xee, 0xffffffff00000000, 0x5]}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) [ 746.113946][T11899] FAULT_INJECTION: forcing a failure. [ 746.113946][T11899] name failslab, interval 1, probability 0, space 0, times 0 [ 746.118812][T11899] CPU: 3 PID: 11899 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 746.122815][T11899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 746.125154][T11903] binder: 11901:11903 ioctl 4018f50b 0 returned -22 [ 746.126806][T11899] Call Trace: 23:33:14 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3f, 0x75}}, './file0\x00'}) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1000002) inotify_rm_watch(r1, r2) (async) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1000002) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x527400) inotify_rm_watch(r3, r4) (async) inotify_rm_watch(r0, r4) [ 746.126812][T11899] [ 746.126816][T11899] dump_stack_lvl+0x125/0x1b0 [ 746.126837][T11899] should_fail_ex+0x496/0x5b0 [ 746.126849][T11899] ? kasprintf+0xc8/0x100 [ 746.126862][T11899] ? kasprintf+0xc8/0x100 [ 746.126874][T11899] should_failslab+0x9/0x20 [ 746.126888][T11899] __kmem_cache_alloc_node+0x5f/0x470 [ 746.130414][T11903] binder: 11901:11903 ioctl 80089418 20000780 returned -22 [ 746.131179][T11899] ? pointer+0xbf0/0xbf0 [ 746.148118][T11899] ? kasprintf+0xc8/0x100 [ 746.149781][T11899] __kmalloc_node_track_caller+0x50/0x100 [ 746.151909][T11899] kvasprintf+0xbd/0x150 [ 746.153758][T11899] ? bust_spinlocks+0xe0/0xe0 [ 746.155535][T11899] ? fill_ptr_key+0x30/0x30 [ 746.157292][T11899] ? preempt_count_add+0x72/0x140 [ 746.159161][T11899] kasprintf+0xc8/0x100 [ 746.160795][T11899] ? kvasprintf_const+0x190/0x190 [ 746.162666][T11899] ? free_zapped_rcu+0x290/0x290 [ 746.164733][T11899] ? lockdep_init_map_type+0x16d/0x7c0 [ 746.167075][T11899] alloc_workqueue+0x590/0x1490 [ 746.169180][T11899] ? workqueue_sysfs_register+0x400/0x400 [ 746.171659][T11899] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 746.173801][T11899] kvm_mmu_init_vm+0x248/0x2e0 [ 746.175908][T11899] kvm_arch_init_vm+0x39/0x720 [ 746.177868][T11899] ? __kasan_kmalloc+0xa3/0xb0 [ 746.179627][T11899] kvm_dev_ioctl+0xa31/0x1c20 [ 746.181432][T11899] ? bit_wait_timeout+0x160/0x160 [ 746.183517][T11899] ? kvm_vcpu_stats_release+0x80/0x80 [ 746.185707][T11899] ? selinux_file_ioctl+0x17d/0x270 [ 746.187819][T11899] ? selinux_file_ioctl+0xb5/0x270 [ 746.189921][T11899] ? kvm_vcpu_stats_release+0x80/0x80 [ 746.192129][T11899] __x64_sys_ioctl+0x18f/0x210 [ 746.194108][T11899] do_syscall_64+0x38/0xb0 [ 746.195946][T11899] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 746.198356][T11899] RIP: 0033:0x7fc9bba7cae9 [ 746.200181][T11899] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 746.207952][T11899] RSP: 002b:00007fc9bc8880c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 746.211359][T11899] RAX: ffffffffffffffda RBX: 00007fc9bbb9bf80 RCX: 00007fc9bba7cae9 [ 746.214592][T11899] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 746.217785][T11899] RBP: 00007fc9bc888120 R08: 0000000000000000 R09: 0000000000000000 [ 746.220952][T11899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 746.224110][T11899] R13: 000000000000000b R14: 00007fc9bbb9bf80 R15: 00007ffdf1e289a8 [ 746.227319][T11899] 23:33:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 26) 23:33:14 executing program 2: clock_gettime(0x6, &(0x7f0000000000)) 23:33:14 executing program 0: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) mount$9p_fd(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x802400, &(0x7f00000006c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@noextend}, {@msize={'msize', 0x3d, 0x8}}, {@cache_fscache}, {@loose}], [{@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}]}}) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000780)) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x20000000) fcntl$setpipe(r0, 0x407, 0x3f) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0x104, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x1, 0x0, 0xc}, @flat=@weak_handle={0x77682a85, 0x2000, 0x3}, @fda={0x66646185, 0x3, 0x2, 0x7}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}, 0x1000}, @dead_binder_done, @register_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/19, 0x13, 0x0, 0xb}, @fda={0x66646185, 0x5, 0x1, 0x13}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/180, 0xb4, 0x2, 0x5}}, &(0x7f0000000280)={0x0, 0x28, 0x48}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@handle={0x73682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/38, 0x26, 0x1, 0x10}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}}, &(0x7f0000000380)={0x0, 0x18, 0x40}}}, @register_looper, @increfs, @dead_binder_done], 0xc3, 0x0, &(0x7f0000000500)="9dbde58407faf1644b0b41024724524d460545e0faac324dce09843c3825a92f0b1e74666a0b99783a67a9cb3055bb53044d200d66a10f514ba9208a16d328342dbe750aeb46317614c56ea3a21e3d61de13fd4ce09b984c676b6171386a6b7e551c044ffab5b57ebb7ce5ce67d6e858c9cf3574c380dfe515018456e74f0d410822a40a7c7a54c3861cea0e3342e1f8c1f31cede240d5e2c5bdb717f21b79898a96e451bba89eb60a83d7d063775de1019cfbf6f45bae1dbdfcd3b2e3c1f69c1c7e44"}) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x802400, &(0x7f00000006c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@noextend}, {@msize={'msize', 0x3d, 0x8}}, {@cache_fscache}, {@loose}], [{@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}]}}) (async) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000780)) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x20000000) (async) fcntl$setpipe(r0, 0x407, 0x3f) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0x104, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x1, 0x0, 0xc}, @flat=@weak_handle={0x77682a85, 0x2000, 0x3}, @fda={0x66646185, 0x3, 0x2, 0x7}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}, 0x1000}, @dead_binder_done, @register_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/19, 0x13, 0x0, 0xb}, @fda={0x66646185, 0x5, 0x1, 0x13}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/180, 0xb4, 0x2, 0x5}}, &(0x7f0000000280)={0x0, 0x28, 0x48}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@handle={0x73682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/38, 0x26, 0x1, 0x10}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}}, &(0x7f0000000380)={0x0, 0x18, 0x40}}}, @register_looper, @increfs, @dead_binder_done], 0xc3, 0x0, &(0x7f0000000500)="9dbde58407faf1644b0b41024724524d460545e0faac324dce09843c3825a92f0b1e74666a0b99783a67a9cb3055bb53044d200d66a10f514ba9208a16d328342dbe750aeb46317614c56ea3a21e3d61de13fd4ce09b984c676b6171386a6b7e551c044ffab5b57ebb7ce5ce67d6e858c9cf3574c380dfe515018456e74f0d410822a40a7c7a54c3861cea0e3342e1f8c1f31cede240d5e2c5bdb717f21b79898a96e451bba89eb60a83d7d063775de1019cfbf6f45bae1dbdfcd3b2e3c1f69c1c7e44"}) (async) 23:33:14 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x1e) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="feffffff050000002e2f66696c6530000540415ae471c27b1d3b4048f98334234b6518b77a922b6cc8b92246aab0f00bd2585232cc65bc7e304ad601bc186ccb05bd46416901cb9ec26ac609bbb074ac23e73a02da8bc01789cf1b3ead6996d32ab09a83a96e6a9696a012bc8eda2d38767500000000000000019946f01ccb6a2822ee20e7e993b5c9dda4d6c140bf5cc6d31790b5ae976862c73d101a8f0f4f34dba32d7ef2efd134e4b4c9715fdaad9d65208b03a2d49819764696b8cf9106962369bb928d0d10fde8d3561307cbb318e9848b02398809ea13d1f0adbbac44"]) ioctl$FLOPPY_FDFMTEND(0xffffffffffffffff, 0x249) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"283905ac14dac7cfeb0946e3c536b27c", 0x0, 0x0, {0x2, 0xe36}, {0x80000000, 0x10000}, 0x6, [0x2, 0x400, 0x392, 0x4, 0x3ff, 0x8, 0x9, 0x7f, 0x3, 0x6, 0x8000000000000000, 0x32, 0x1e7, 0x8000, 0x8, 0xff]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000140)={"ed965a2ca54c8830f529e171fd9e6b19", 0x0, r3, {0x3, 0x4}, {0x80, 0x3}, 0x200, [0x200, 0x5, 0x200, 0x7, 0x6, 0x7fffffffffffffff, 0xf, 0x7fffffffffffffff, 0x9, 0x6, 0x4e, 0x99a, 0x1, 0xee, 0xffffffff00000000, 0x5]}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$rxrpc(0x21, 0x2, 0x1e) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="feffffff050000002e2f66696c6530000540415ae471c27b1d3b4048f98334234b6518b77a922b6cc8b92246aab0f00bd2585232cc65bc7e304ad601bc186ccb05bd46416901cb9ec26ac609bbb074ac23e73a02da8bc01789cf1b3ead6996d32ab09a83a96e6a9696a012bc8eda2d38767500000000000000019946f01ccb6a2822ee20e7e993b5c9dda4d6c140bf5cc6d31790b5ae976862c73d101a8f0f4f34dba32d7ef2efd134e4b4c9715fdaad9d65208b03a2d49819764696b8cf9106962369bb928d0d10fde8d3561307cbb318e9848b02398809ea13d1f0adbbac44"]) (async) ioctl$FLOPPY_FDFMTEND(0xffffffffffffffff, 0x249) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"283905ac14dac7cfeb0946e3c536b27c", 0x0, 0x0, {0x2, 0xe36}, {0x80000000, 0x10000}, 0x6, [0x2, 0x400, 0x392, 0x4, 0x3ff, 0x8, 0x9, 0x7f, 0x3, 0x6, 0x8000000000000000, 0x32, 0x1e7, 0x8000, 0x8, 0xff]}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000140)={"ed965a2ca54c8830f529e171fd9e6b19", 0x0, r3, {0x3, 0x4}, {0x80, 0x3}, 0x200, [0x200, 0x5, 0x200, 0x7, 0x6, 0x7fffffffffffffff, 0xf, 0x7fffffffffffffff, 0x9, 0x6, 0x4e, 0x99a, 0x1, 0xee, 0xffffffff00000000, 0x5]}) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) (async) [ 746.286837][T11920] binder: 11917:11920 ioctl 4018f50b 0 returned -22 [ 746.290224][T11920] binder: 11917:11920 ioctl 80089418 20000780 returned -22 23:33:14 executing program 2: clock_gettime(0x6, &(0x7f0000000000)) [ 746.296158][T11927] FAULT_INJECTION: forcing a failure. [ 746.296158][T11927] name failslab, interval 1, probability 0, space 0, times 0 23:33:14 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x3fd) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040), 0x4) [ 746.296248][T11929] binder: 11917:11929 ioctl 80089418 20000780 returned -22 [ 746.303510][T11927] CPU: 2 PID: 11927 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 23:33:14 executing program 2: clock_gettime(0x6, &(0x7f0000000000)) 23:33:14 executing program 0: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) mount$9p_fd(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x802400, &(0x7f00000006c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@noextend}, {@msize={'msize', 0x3d, 0x8}}, {@cache_fscache}, {@loose}], [{@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}]}}) (async) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000780)) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x20000000) (async) fcntl$setpipe(r0, 0x407, 0x3f) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0x104, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x1, 0x0, 0xc}, @flat=@weak_handle={0x77682a85, 0x2000, 0x3}, @fda={0x66646185, 0x3, 0x2, 0x7}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}, 0x1000}, @dead_binder_done, @register_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/19, 0x13, 0x0, 0xb}, @fda={0x66646185, 0x5, 0x1, 0x13}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/180, 0xb4, 0x2, 0x5}}, &(0x7f0000000280)={0x0, 0x28, 0x48}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@handle={0x73682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/38, 0x26, 0x1, 0x10}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}}, &(0x7f0000000380)={0x0, 0x18, 0x40}}}, @register_looper, @increfs, @dead_binder_done], 0xc3, 0x0, &(0x7f0000000500)="9dbde58407faf1644b0b41024724524d460545e0faac324dce09843c3825a92f0b1e74666a0b99783a67a9cb3055bb53044d200d66a10f514ba9208a16d328342dbe750aeb46317614c56ea3a21e3d61de13fd4ce09b984c676b6171386a6b7e551c044ffab5b57ebb7ce5ce67d6e858c9cf3574c380dfe515018456e74f0d410822a40a7c7a54c3861cea0e3342e1f8c1f31cede240d5e2c5bdb717f21b79898a96e451bba89eb60a83d7d063775de1019cfbf6f45bae1dbdfcd3b2e3c1f69c1c7e44"}) [ 746.310063][T11927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 746.314881][T11927] Call Trace: [ 746.316505][T11927] [ 746.317911][T11927] dump_stack_lvl+0x125/0x1b0 [ 746.320132][T11927] should_fail_ex+0x496/0x5b0 [ 746.322346][T11927] should_failslab+0x9/0x20 [ 746.324483][T11927] __kmem_cache_alloc_node+0x5f/0x470 [ 746.326964][T11927] kmalloc_trace+0x25/0xe0 [ 746.327483][T11939] binder: 11938:11939 ioctl 4018f50b 0 returned -22 [ 746.328015][T11940] binder: 11938:11940 ioctl 80089418 20000780 returned -22 [ 746.329056][T11927] alloc_workqueue+0x1d4/0x1490 [ 746.329086][T11927] ? workqueue_sysfs_register+0x400/0x400 [ 746.329114][T11927] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 746.342662][T11927] kvm_mmu_init_vm+0x248/0x2e0 [ 746.344919][T11927] kvm_arch_init_vm+0x39/0x720 [ 746.347118][T11927] ? __kasan_kmalloc+0xa3/0xb0 [ 746.349337][T11927] kvm_dev_ioctl+0xa31/0x1c20 [ 746.351532][T11927] ? bit_wait_timeout+0x160/0x160 [ 746.353854][T11927] ? kvm_vcpu_stats_release+0x80/0x80 [ 746.356328][T11927] ? selinux_file_ioctl+0x17d/0x270 [ 746.358765][T11927] ? selinux_file_ioctl+0xb5/0x270 [ 746.361170][T11927] ? kvm_vcpu_stats_release+0x80/0x80 [ 746.363650][T11927] __x64_sys_ioctl+0x18f/0x210 [ 746.365886][T11927] do_syscall_64+0x38/0xb0 [ 746.367910][T11927] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 746.370656][T11927] RIP: 0033:0x7fc9bba7cae9 [ 746.372668][T11927] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 746.381309][T11927] RSP: 002b:00007fc9bc8880c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 746.385125][T11927] RAX: ffffffffffffffda RBX: 00007fc9bbb9bf80 RCX: 00007fc9bba7cae9 [ 746.388769][T11927] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 746.392449][T11927] RBP: 00007fc9bc888120 R08: 0000000000000000 R09: 0000000000000000 [ 746.395943][T11927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 746.399483][T11927] R13: 000000000000000b R14: 00007fc9bbb9bf80 R15: 00007ffdf1e289a8 [ 746.402484][T11927] 23:33:14 executing program 2: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000200)=&(0x7f00000001c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0xc, 0x0, &(0x7f0000000140)) clock_gettime(0x1, &(0x7f0000000140)) pselect6(0x40, &(0x7f0000000000)={0x4, 0x5, 0x101, 0xdb7, 0x3, 0x1, 0x2}, &(0x7f0000000040)={0xb5a, 0x80000001, 0x1, 0x0, 0xff, 0x4, 0x400, 0x7}, &(0x7f0000000080)={0x0, 0x6, 0x80000001, 0x2, 0x1, 0x0, 0x7, 0xfff}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000100)={[0xaa]}, 0x8}) 23:33:14 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x3fd) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040), 0x4) 23:33:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 27) 23:33:14 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) write$FUSE_STATFS(r3, &(0x7f0000002080)={0x60, 0x0, r1, {{0x401, 0x7fff, 0x40, 0xfff, 0xffff, 0x6, 0x6, 0x9}}}, 0x60) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, r2, 0x0) 23:33:14 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x3fd) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040), 0x4) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x3fd) (async) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040), 0x4) (async) [ 746.432272][T11951] FAULT_INJECTION: forcing a failure. [ 746.432272][T11951] name failslab, interval 1, probability 0, space 0, times 0 [ 746.438139][T11951] CPU: 2 PID: 11951 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 23:33:14 executing program 2: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000200)=&(0x7f00000001c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0xc, 0x0, &(0x7f0000000140)) clock_gettime(0x1, &(0x7f0000000140)) pselect6(0x40, &(0x7f0000000000)={0x4, 0x5, 0x101, 0xdb7, 0x3, 0x1, 0x2}, &(0x7f0000000040)={0xb5a, 0x80000001, 0x1, 0x0, 0xff, 0x4, 0x400, 0x7}, &(0x7f0000000080)={0x0, 0x6, 0x80000001, 0x2, 0x1, 0x0, 0x7, 0xfff}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000100)={[0xaa]}, 0x8}) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000200)=&(0x7f00000001c0)) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$inet_tcp_buf(r1, 0x6, 0xc, 0x0, &(0x7f0000000140)) (async) clock_gettime(0x1, &(0x7f0000000140)) (async) pselect6(0x40, &(0x7f0000000000)={0x4, 0x5, 0x101, 0xdb7, 0x3, 0x1, 0x2}, &(0x7f0000000040)={0xb5a, 0x80000001, 0x1, 0x0, 0xff, 0x4, 0x400, 0x7}, &(0x7f0000000080)={0x0, 0x6, 0x80000001, 0x2, 0x1, 0x0, 0x7, 0xfff}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000100)={[0xaa]}, 0x8}) (async) [ 746.442865][T11951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 746.447578][T11951] Call Trace: [ 746.449139][T11951] [ 746.450509][T11951] dump_stack_lvl+0x125/0x1b0 [ 746.452733][T11951] should_fail_ex+0x496/0x5b0 [ 746.454971][T11951] ? kasprintf+0xc8/0x100 [ 746.456998][T11951] ? kasprintf+0xc8/0x100 23:33:14 executing program 2: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000200)=&(0x7f00000001c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0xc, 0x0, &(0x7f0000000140)) clock_gettime(0x1, &(0x7f0000000140)) pselect6(0x40, &(0x7f0000000000)={0x4, 0x5, 0x101, 0xdb7, 0x3, 0x1, 0x2}, &(0x7f0000000040)={0xb5a, 0x80000001, 0x1, 0x0, 0xff, 0x4, 0x400, 0x7}, &(0x7f0000000080)={0x0, 0x6, 0x80000001, 0x2, 0x1, 0x0, 0x7, 0xfff}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000100)={[0xaa]}, 0x8}) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000200)=&(0x7f00000001c0)) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$inet_tcp_buf(r1, 0x6, 0xc, 0x0, &(0x7f0000000140)) (async) clock_gettime(0x1, &(0x7f0000000140)) (async) pselect6(0x40, &(0x7f0000000000)={0x4, 0x5, 0x101, 0xdb7, 0x3, 0x1, 0x2}, &(0x7f0000000040)={0xb5a, 0x80000001, 0x1, 0x0, 0xff, 0x4, 0x400, 0x7}, &(0x7f0000000080)={0x0, 0x6, 0x80000001, 0x2, 0x1, 0x0, 0x7, 0xfff}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000100)={[0xaa]}, 0x8}) (async) 23:33:14 executing program 3: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/72, 0x48, 0x0, &(0x7f00000000c0)=""/117, 0x75}, &(0x7f0000000180)=0x40) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f00000001c0)={0x0, 0x4}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) [ 746.459031][T11951] should_failslab+0x9/0x20 [ 746.461232][T11951] __kmem_cache_alloc_node+0x5f/0x470 [ 746.463714][T11951] ? pointer+0xbf0/0xbf0 [ 746.465684][T11951] ? kasprintf+0xc8/0x100 [ 746.467610][T11951] __kmalloc_node_track_caller+0x50/0x100 [ 746.470219][T11951] kvasprintf+0xbd/0x150 [ 746.472154][T11951] ? bust_spinlocks+0xe0/0xe0 [ 746.474280][T11951] ? fill_ptr_key+0x30/0x30 [ 746.476481][T11951] ? preempt_count_add+0x72/0x140 [ 746.478822][T11951] kasprintf+0xc8/0x100 [ 746.480870][T11951] ? kvasprintf_const+0x190/0x190 [ 746.483180][T11951] ? free_zapped_rcu+0x290/0x290 [ 746.485469][T11951] ? lockdep_init_map_type+0x16d/0x7c0 [ 746.487934][T11951] alloc_workqueue+0x590/0x1490 [ 746.490203][T11951] ? workqueue_sysfs_register+0x400/0x400 [ 746.492740][T11951] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 746.495094][T11951] kvm_mmu_init_vm+0x248/0x2e0 [ 746.497313][T11951] kvm_arch_init_vm+0x39/0x720 [ 746.499478][T11951] ? __kasan_kmalloc+0xa3/0xb0 [ 746.501753][T11951] kvm_dev_ioctl+0xa31/0x1c20 [ 746.503941][T11951] ? bit_wait_timeout+0x160/0x160 [ 746.506265][T11951] ? kvm_vcpu_stats_release+0x80/0x80 [ 746.508772][T11951] ? selinux_file_ioctl+0x17d/0x270 [ 746.511201][T11951] ? selinux_file_ioctl+0xb5/0x270 [ 746.513584][T11951] ? kvm_vcpu_stats_release+0x80/0x80 [ 746.516055][T11951] __x64_sys_ioctl+0x18f/0x210 [ 746.518276][T11951] do_syscall_64+0x38/0xb0 [ 746.520365][T11951] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 746.523138][T11951] RIP: 0033:0x7fc9bba7cae9 [ 746.525184][T11951] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 746.534001][T11951] RSP: 002b:00007fc9bc8880c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 746.537790][T11951] RAX: ffffffffffffffda RBX: 00007fc9bbb9bf80 RCX: 00007fc9bba7cae9 [ 746.541088][T11951] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 746.544385][T11951] RBP: 00007fc9bc888120 R08: 0000000000000000 R09: 0000000000000000 [ 746.547619][T11951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 746.551221][T11951] R13: 000000000000000b R14: 00007fc9bbb9bf80 R15: 00007ffdf1e289a8 [ 746.554842][T11951] 23:33:14 executing program 3: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/72, 0x48, 0x0, &(0x7f00000000c0)=""/117, 0x75}, &(0x7f0000000180)=0x40) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f00000001c0)={0x0, 0x4}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/72, 0x48, 0x0, &(0x7f00000000c0)=""/117, 0x75}, &(0x7f0000000180)=0x40) (async) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f00000001c0)={0x0, 0x4}) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) (async) 23:33:14 executing program 3: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/72, 0x48, 0x0, &(0x7f00000000c0)=""/117, 0x75}, &(0x7f0000000180)=0x40) (async) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f00000001c0)={0x0, 0x4}) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) 23:33:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 28) 23:33:14 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000040)={{r1}, "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"}) 23:33:14 executing program 2: clock_gettime(0x0, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000003c0)={0x7, 0x0, [{0x6000, 0x52, &(0x7f0000000080)=""/82}, {0x2000, 0xb, &(0x7f0000000000)=""/11}, {0x3000, 0x8c, &(0x7f0000000100)=""/140}, {0x0, 0x57, &(0x7f00000001c0)=""/87}, {0x2000, 0x6, &(0x7f0000000240)=""/6}, {0x4000, 0xd9, &(0x7f0000000280)=""/217}, {0x3000, 0xe, &(0x7f0000000380)=""/14}]}) 23:33:14 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async) write$FUSE_STATFS(r3, &(0x7f0000002080)={0x60, 0x0, r1, {{0x401, 0x7fff, 0x40, 0xfff, 0xffff, 0x6, 0x6, 0x9}}}, 0x60) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, r2, 0x0) 23:33:14 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) (async) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) write$FUSE_STATFS(r3, &(0x7f0000002080)={0x60, 0x0, r1, {{0x401, 0x7fff, 0x40, 0xfff, 0xffff, 0x6, 0x6, 0x9}}}, 0x60) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, r2, 0x0) (async) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, r2, 0x0) 23:33:14 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) (async, rerun: 64) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000040)={{r1}, "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"}) 23:33:14 executing program 2: clock_gettime(0x0, &(0x7f0000000040)) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000003c0)={0x7, 0x0, [{0x6000, 0x52, &(0x7f0000000080)=""/82}, {0x2000, 0xb, &(0x7f0000000000)=""/11}, {0x3000, 0x8c, &(0x7f0000000100)=""/140}, {0x0, 0x57, &(0x7f00000001c0)=""/87}, {0x2000, 0x6, &(0x7f0000000240)=""/6}, {0x4000, 0xd9, &(0x7f0000000280)=""/217}, {0x3000, 0xe, &(0x7f0000000380)=""/14}]}) [ 746.664705][T11984] FAULT_INJECTION: forcing a failure. [ 746.664705][T11984] name failslab, interval 1, probability 0, space 0, times 0 [ 746.670371][T11984] CPU: 2 PID: 11984 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 23:33:14 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) [ 746.674921][T11984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 746.679965][T11984] Call Trace: [ 746.681457][T11984] [ 746.682771][T11984] dump_stack_lvl+0x125/0x1b0 [ 746.684948][T11984] should_fail_ex+0x496/0x5b0 [ 746.687762][T11984] should_failslab+0x9/0x20 [ 746.689851][T11984] __kmem_cache_alloc_node+0x5f/0x470 [ 746.692279][T11984] ? alloc_workqueue+0xda3/0x1490 [ 746.694698][T11984] ? apply_wqattrs_prepare+0xff/0xa90 [ 746.696956][T11984] __kmalloc+0x4f/0x100 [ 746.698804][T11984] apply_wqattrs_prepare+0xff/0xa90 [ 746.701147][T11984] ? preempt_count_sub+0x150/0x150 [ 746.703432][T11984] apply_workqueue_attrs_locked+0xcb/0x150 [ 746.705990][T11984] alloc_workqueue+0xdae/0x1490 [ 746.708158][T11984] ? workqueue_sysfs_register+0x400/0x400 [ 746.710721][T11984] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 746.713014][T11984] kvm_mmu_init_vm+0x248/0x2e0 [ 746.715136][T11984] kvm_arch_init_vm+0x39/0x720 [ 746.717151][T11984] ? __kasan_kmalloc+0xa3/0xb0 [ 746.719253][T11984] kvm_dev_ioctl+0xa31/0x1c20 [ 746.721355][T11984] ? bit_wait_timeout+0x160/0x160 [ 746.723651][T11984] ? kvm_vcpu_stats_release+0x80/0x80 [ 746.726017][T11984] ? selinux_file_ioctl+0x17d/0x270 [ 746.728319][T11984] ? selinux_file_ioctl+0xb5/0x270 [ 746.730605][T11984] ? kvm_vcpu_stats_release+0x80/0x80 [ 746.733028][T11984] __x64_sys_ioctl+0x18f/0x210 [ 746.735189][T11984] do_syscall_64+0x38/0xb0 [ 746.737198][T11984] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 746.739933][T11984] RIP: 0033:0x7fc9bba7cae9 [ 746.741962][T11984] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 746.749731][T11984] RSP: 002b:00007fc9bc8880c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 746.753532][T11984] RAX: ffffffffffffffda RBX: 00007fc9bbb9bf80 RCX: 00007fc9bba7cae9 [ 746.757259][T11984] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 746.760946][T11984] RBP: 00007fc9bc888120 R08: 0000000000000000 R09: 0000000000000000 [ 746.764701][T11984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 746.768438][T11984] R13: 000000000000000b R14: 00007fc9bbb9bf80 R15: 00007ffdf1e289a8 [ 746.772041][T11984] 23:33:15 executing program 2: clock_gettime(0x0, &(0x7f0000000040)) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000003c0)={0x7, 0x0, [{0x6000, 0x52, &(0x7f0000000080)=""/82}, {0x2000, 0xb, &(0x7f0000000000)=""/11}, {0x3000, 0x8c, &(0x7f0000000100)=""/140}, {0x0, 0x57, &(0x7f00000001c0)=""/87}, {0x2000, 0x6, &(0x7f0000000240)=""/6}, {0x4000, 0xd9, &(0x7f0000000280)=""/217}, {0x3000, 0xe, &(0x7f0000000380)=""/14}]}) 23:33:15 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000040)={{r1}, "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"}) 23:33:15 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 23:33:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 29) [ 746.802412][T12002] FAULT_INJECTION: forcing a failure. [ 746.802412][T12002] name failslab, interval 1, probability 0, space 0, times 0 23:33:15 executing program 2: clock_gettime(0x4, &(0x7f0000000040)) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000000c0)=0x20, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x6820, 0x0, 0x1}, 0x14) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x5, 0x4) [ 746.807400][T12002] CPU: 2 PID: 12002 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 23:33:15 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x6}) 23:33:15 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) [ 746.811914][T12002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 746.819624][T12002] Call Trace: [ 746.821210][T12002] [ 746.822588][T12002] dump_stack_lvl+0x125/0x1b0 [ 746.824781][T12002] should_fail_ex+0x496/0x5b0 [ 746.826980][T12002] should_failslab+0x9/0x20 [ 746.829110][T12002] __kmem_cache_alloc_node+0x5f/0x470 [ 746.831591][T12002] ? alloc_workqueue+0xda3/0x1490 [ 746.833969][T12002] ? apply_wqattrs_prepare+0xff/0xa90 [ 746.836535][T12002] __kmalloc+0x4f/0x100 [ 746.838445][T12002] apply_wqattrs_prepare+0xff/0xa90 [ 746.840726][T12002] ? preempt_count_sub+0x150/0x150 [ 746.843200][T12002] apply_workqueue_attrs_locked+0xcb/0x150 [ 746.846107][T12002] alloc_workqueue+0xdae/0x1490 [ 746.848478][T12002] ? workqueue_sysfs_register+0x400/0x400 [ 746.851169][T12002] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 746.853601][T12002] kvm_mmu_init_vm+0x248/0x2e0 [ 746.855895][T12002] kvm_arch_init_vm+0x39/0x720 [ 746.858218][T12002] ? __kasan_kmalloc+0xa3/0xb0 [ 746.860354][T12002] kvm_dev_ioctl+0xa31/0x1c20 [ 746.862307][T12002] ? bit_wait_timeout+0x160/0x160 [ 746.864843][T12002] ? kvm_vcpu_stats_release+0x80/0x80 [ 746.867546][T12002] ? selinux_file_ioctl+0x17d/0x270 [ 746.870156][T12002] ? selinux_file_ioctl+0xb5/0x270 [ 746.872628][T12002] ? kvm_vcpu_stats_release+0x80/0x80 [ 746.875206][T12002] __x64_sys_ioctl+0x18f/0x210 [ 746.877274][T12002] do_syscall_64+0x38/0xb0 [ 746.879324][T12002] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 746.882665][T12002] RIP: 0033:0x7fc9bba7cae9 [ 746.884806][T12002] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 746.894808][T12002] RSP: 002b:00007fc9bc8880c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 746.898398][T12002] RAX: ffffffffffffffda RBX: 00007fc9bbb9bf80 RCX: 00007fc9bba7cae9 [ 746.901905][T12002] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 746.905672][T12002] RBP: 00007fc9bc888120 R08: 0000000000000000 R09: 0000000000000000 [ 746.909387][T12002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 746.915720][T12002] R13: 000000000000000b R14: 00007fc9bbb9bf80 R15: 00007ffdf1e289a8 [ 746.920290][T12002] 23:33:15 executing program 0: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, &(0x7f0000000000)=0x5) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) 23:33:15 executing program 2: clock_gettime(0x4, &(0x7f0000000040)) (async) clock_gettime(0x4, &(0x7f0000000040)) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000000c0)=0x20, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x6820, 0x0, 0x1}, 0x14) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x5, 0x4) 23:33:15 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x6}) 23:33:15 executing program 2: clock_gettime(0x4, &(0x7f0000000040)) (async) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000000c0)=0x20, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x6820, 0x0, 0x1}, 0x14) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x5, 0x4) 23:33:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 30) 23:33:15 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x6}) 23:33:15 executing program 0: openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, &(0x7f0000000000)=0x5) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) 23:33:15 executing program 2: clock_gettime(0x3, &(0x7f0000000140)) r0 = getpgrp(0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = getpgrp(r1) sched_rr_get_interval(r2, &(0x7f0000000180)) sched_rr_get_interval(r2, &(0x7f0000000040)) sched_rr_get_interval(r0, &(0x7f0000000000)) 23:33:15 executing program 2: clock_gettime(0x3, &(0x7f0000000140)) r0 = getpgrp(0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = getpgrp(r1) sched_rr_get_interval(r2, &(0x7f0000000180)) sched_rr_get_interval(r2, &(0x7f0000000040)) sched_rr_get_interval(r0, &(0x7f0000000000)) clock_gettime(0x3, &(0x7f0000000140)) (async) getpgrp(0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002200)={0x2020}, 0x2020) (async) getpgrp(r1) (async) sched_rr_get_interval(r2, &(0x7f0000000180)) (async) sched_rr_get_interval(r2, &(0x7f0000000040)) (async) sched_rr_get_interval(r0, &(0x7f0000000000)) (async) [ 746.947663][T12032] FAULT_INJECTION: forcing a failure. 23:33:15 executing program 3: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x442280, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x3ff) 23:33:15 executing program 0: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, &(0x7f0000000000)=0x5) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) [ 746.947663][T12032] name failslab, interval 1, probability 0, space 0, times 0 [ 746.954356][T12032] CPU: 2 PID: 12032 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 746.958988][T12032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 746.963668][T12032] Call Trace: [ 746.965280][T12032] [ 746.966647][T12032] dump_stack_lvl+0x125/0x1b0 [ 746.968880][T12032] should_fail_ex+0x496/0x5b0 [ 746.971078][T12032] should_failslab+0x9/0x20 23:33:15 executing program 3: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x442280, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x3ff) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x442280, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x802, 0x0) (async) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x3ff) (async) [ 746.973150][T12032] kmem_cache_alloc_node+0x64/0x540 [ 746.975666][T12032] alloc_unbound_pwq+0x41e/0xd00 [ 746.978001][T12032] ? kasan_set_track+0x25/0x30 [ 746.980199][T12032] apply_wqattrs_prepare+0x3be/0xa90 [ 746.982676][T12032] apply_workqueue_attrs_locked+0xcb/0x150 [ 746.985410][T12032] alloc_workqueue+0xdae/0x1490 [ 746.987740][T12032] ? workqueue_sysfs_register+0x400/0x400 [ 746.990413][T12032] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 746.992831][T12032] kvm_mmu_init_vm+0x248/0x2e0 [ 746.995077][T12032] kvm_arch_init_vm+0x39/0x720 [ 746.997341][T12032] ? __kasan_kmalloc+0xa3/0xb0 [ 746.999592][T12032] kvm_dev_ioctl+0xa31/0x1c20 [ 747.001795][T12032] ? bit_wait_timeout+0x160/0x160 [ 747.004213][T12032] ? kvm_vcpu_stats_release+0x80/0x80 [ 747.006720][T12032] ? selinux_file_ioctl+0x17d/0x270 [ 747.009149][T12032] ? selinux_file_ioctl+0xb5/0x270 [ 747.011527][T12032] ? kvm_vcpu_stats_release+0x80/0x80 [ 747.014121][T12032] __x64_sys_ioctl+0x18f/0x210 [ 747.016336][T12032] do_syscall_64+0x38/0xb0 [ 747.018198][T12032] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 747.020943][T12032] RIP: 0033:0x7fc9bba7cae9 [ 747.023025][T12032] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 747.031898][T12032] RSP: 002b:00007fc9bc8880c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 747.035798][T12032] RAX: ffffffffffffffda RBX: 00007fc9bbb9bf80 RCX: 00007fc9bba7cae9 [ 747.039447][T12032] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 747.042924][T12032] RBP: 00007fc9bc888120 R08: 0000000000000000 R09: 0000000000000000 [ 747.046477][T12032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 747.050155][T12032] R13: 000000000000000b R14: 00007fc9bbb9bf80 R15: 00007ffdf1e289a8 [ 747.053847][T12032] 23:33:15 executing program 0: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 23:33:15 executing program 2: clock_gettime(0x3, &(0x7f0000000140)) (async) r0 = getpgrp(0x0) (async, rerun: 64) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) (async, rerun: 64) read$FUSE(0xffffffffffffffff, &(0x7f0000002200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = getpgrp(r1) sched_rr_get_interval(r2, &(0x7f0000000180)) (async) sched_rr_get_interval(r2, &(0x7f0000000040)) (async) sched_rr_get_interval(r0, &(0x7f0000000000)) 23:33:15 executing program 3: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x442280, 0x0) (async) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x442280, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x3ff) 23:33:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 31) [ 747.081370][T12059] FAULT_INJECTION: forcing a failure. 23:33:15 executing program 0: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 23:33:15 executing program 2: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) clock_gettime(0x1, &(0x7f0000000140)) 23:33:15 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x60000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0xefffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="010008000000000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r5 = syz_open_dev$vcsa(&(0x7f0000000080), 0x5, 0x0) r6 = inotify_init() ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000180)=ANY=[@ANYBLOB="bc10658e69dafea8dc02000000000000000000"]) inotify_rm_watch(r6, 0x0) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000000c0)={0x2, r5}) [ 747.081370][T12059] name failslab, interval 1, probability 0, space 0, times 0 [ 747.088080][T12059] CPU: 3 PID: 12059 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 747.092755][T12059] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 747.097465][T12059] Call Trace: [ 747.099031][T12059] [ 747.100424][T12059] dump_stack_lvl+0x125/0x1b0 [ 747.102634][T12059] should_fail_ex+0x496/0x5b0 23:33:15 executing program 2: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) clock_gettime(0x1, &(0x7f0000000140)) [ 747.103475][T12065] binder: 12062:12065 ioctl 4018f50b 0 returned -22 [ 747.104697][T12059] should_failslab+0x9/0x20 [ 747.109707][T12059] kmem_cache_alloc_node+0x64/0x540 [ 747.112139][T12059] alloc_unbound_pwq+0x41e/0xd00 [ 747.114386][T12059] apply_wqattrs_prepare+0x696/0xa90 [ 747.116734][T12059] apply_workqueue_attrs_locked+0xcb/0x150 [ 747.119406][T12059] alloc_workqueue+0xdae/0x1490 [ 747.121617][T12059] ? workqueue_sysfs_register+0x400/0x400 [ 747.124195][T12059] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 747.126149][T12059] kvm_mmu_init_vm+0x248/0x2e0 [ 747.127907][T12059] kvm_arch_init_vm+0x39/0x720 [ 747.129674][T12059] ? __kasan_kmalloc+0xa3/0xb0 [ 747.131417][T12059] kvm_dev_ioctl+0xa31/0x1c20 [ 747.133171][T12059] ? bit_wait_timeout+0x160/0x160 [ 747.134989][T12059] ? kvm_vcpu_stats_release+0x80/0x80 [ 747.136953][T12059] ? selinux_file_ioctl+0x17d/0x270 [ 747.139098][T12059] ? selinux_file_ioctl+0xb5/0x270 [ 747.141393][T12059] ? kvm_vcpu_stats_release+0x80/0x80 [ 747.143754][T12059] __x64_sys_ioctl+0x18f/0x210 [ 747.145887][T12059] do_syscall_64+0x38/0xb0 [ 747.147702][T12059] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 747.150472][T12059] RIP: 0033:0x7fc9bba7cae9 [ 747.152210][T12059] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 747.159661][T12059] RSP: 002b:00007fc9bc8880c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 747.162946][T12059] RAX: ffffffffffffffda RBX: 00007fc9bbb9bf80 RCX: 00007fc9bba7cae9 [ 747.166083][T12059] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 747.169192][T12059] RBP: 00007fc9bc888120 R08: 0000000000000000 R09: 0000000000000000 [ 747.172284][T12059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 747.173746][ T1351] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.175406][T12059] R13: 000000000000000b R14: 00007fc9bbb9bf80 R15: 00007ffdf1e289a8 [ 747.175423][T12059] [ 747.184266][ T1351] ieee802154 phy1 wpan1: encryption failed: -22 23:33:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 32) 23:33:15 executing program 0: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) 23:33:15 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x60000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) (rerun: 32) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) (async) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0xefffffffffffffff) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="010008000000000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async, rerun: 64) r5 = syz_open_dev$vcsa(&(0x7f0000000080), 0x5, 0x0) r6 = inotify_init() ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000180)=ANY=[@ANYBLOB="bc10658e69dafea8dc02000000000000000000"]) (async) inotify_rm_watch(r6, 0x0) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000000c0)={0x2, r5}) 23:33:15 executing program 2: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async) clock_gettime(0x1, &(0x7f0000000140)) [ 747.211202][T12074] FAULT_INJECTION: forcing a failure. [ 747.211202][T12074] name failslab, interval 1, probability 0, space 0, times 0 [ 747.213422][T12069] binder: 12068:12069 ioctl 4018f50b 0 returned -22 [ 747.231597][T12074] CPU: 1 PID: 12074 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 747.236346][T12074] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 747.241270][T12074] Call Trace: [ 747.243355][T12074] [ 747.244988][T12074] dump_stack_lvl+0x125/0x1b0 [ 747.247480][T12074] should_fail_ex+0x496/0x5b0 [ 747.249547][T12074] should_failslab+0x9/0x20 [ 747.251459][T12074] kmem_cache_alloc_node+0x64/0x540 23:33:15 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) 23:33:15 executing program 2: clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x4, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000040)={0x3, 0xffffffffffffff81, 0x8, 0xe, 0xa, 0x8001, 0xc5, 0x4}, &(0x7f00000000c0)={0x479, 0x7fffffffffffffff, 0x5, 0x80000000, 0x4, 0x1000, 0x9, 0x7fff}, &(0x7f0000000100)={0x1, 0x4, 0x3, 0xffffffffffffffff, 0x2, 0xa77, 0x7, 0x1}, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x800]}, 0x8}) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) [ 747.254064][T12074] alloc_unbound_pwq+0x41e/0xd00 23:33:15 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) [ 747.256762][T12074] apply_wqattrs_prepare+0x696/0xa90 [ 747.259369][T12074] apply_workqueue_attrs_locked+0xcb/0x150 [ 747.261948][T12074] alloc_workqueue+0xdae/0x1490 [ 747.264099][T12074] ? workqueue_sysfs_register+0x400/0x400 [ 747.266616][T12074] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 747.268953][T12074] kvm_mmu_init_vm+0x248/0x2e0 23:33:15 executing program 2: clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x4, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000040)={0x3, 0xffffffffffffff81, 0x8, 0xe, 0xa, 0x8001, 0xc5, 0x4}, &(0x7f00000000c0)={0x479, 0x7fffffffffffffff, 0x5, 0x80000000, 0x4, 0x1000, 0x9, 0x7fff}, &(0x7f0000000100)={0x1, 0x4, 0x3, 0xffffffffffffffff, 0x2, 0xa77, 0x7, 0x1}, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x800]}, 0x8}) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) clock_gettime(0x0, &(0x7f0000000080)) (async) clock_gettime(0x4, &(0x7f0000000000)) (async) pselect6(0x40, &(0x7f0000000040)={0x3, 0xffffffffffffff81, 0x8, 0xe, 0xa, 0x8001, 0xc5, 0x4}, &(0x7f00000000c0)={0x479, 0x7fffffffffffffff, 0x5, 0x80000000, 0x4, 0x1000, 0x9, 0x7fff}, &(0x7f0000000100)={0x1, 0x4, 0x3, 0xffffffffffffffff, 0x2, 0xa77, 0x7, 0x1}, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x800]}, 0x8}) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) (async) [ 747.271109][T12074] kvm_arch_init_vm+0x39/0x720 [ 747.273433][T12074] ? __kasan_kmalloc+0xa3/0xb0 [ 747.275640][T12074] kvm_dev_ioctl+0xa31/0x1c20 [ 747.278218][T12074] ? bit_wait_timeout+0x160/0x160 [ 747.280245][T12074] ? kvm_vcpu_stats_release+0x80/0x80 [ 747.282886][T12074] ? selinux_file_ioctl+0x17d/0x270 [ 747.285124][T12074] ? selinux_file_ioctl+0xb5/0x270 [ 747.287319][T12074] ? kvm_vcpu_stats_release+0x80/0x80 [ 747.289121][T12074] __x64_sys_ioctl+0x18f/0x210 [ 747.290657][T12074] do_syscall_64+0x38/0xb0 [ 747.292359][T12074] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 747.294344][T12074] RIP: 0033:0x7fc9bba7cae9 [ 747.295928][T12074] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 747.303826][T12074] RSP: 002b:00007fc9bc8880c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 747.307386][T12074] RAX: ffffffffffffffda RBX: 00007fc9bbb9bf80 RCX: 00007fc9bba7cae9 [ 747.310578][T12074] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 747.314120][T12074] RBP: 00007fc9bc888120 R08: 0000000000000000 R09: 0000000000000000 [ 747.317686][T12074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 747.321218][T12074] R13: 000000000000000b R14: 00007fc9bbb9bf80 R15: 00007ffdf1e289a8 [ 747.324577][T12074] 23:33:15 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) 23:33:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 33) 23:33:15 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x60000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) (async) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0xefffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="010008000000000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) r5 = syz_open_dev$vcsa(&(0x7f0000000080), 0x5, 0x0) (async) r6 = inotify_init() ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000180)=ANY=[@ANYBLOB="bc10658e69dafea8dc02000000000000000000"]) (async) inotify_rm_watch(r6, 0x0) (async) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000000c0)={0x2, r5}) 23:33:15 executing program 2: clock_gettime(0x0, &(0x7f0000000080)) (async, rerun: 64) clock_gettime(0x4, &(0x7f0000000000)) (rerun: 64) pselect6(0x40, &(0x7f0000000040)={0x3, 0xffffffffffffff81, 0x8, 0xe, 0xa, 0x8001, 0xc5, 0x4}, &(0x7f00000000c0)={0x479, 0x7fffffffffffffff, 0x5, 0x80000000, 0x4, 0x1000, 0x9, 0x7fff}, &(0x7f0000000100)={0x1, 0x4, 0x3, 0xffffffffffffffff, 0x2, 0xa77, 0x7, 0x1}, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x800]}, 0x8}) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) [ 747.347603][T12094] binder: 12090:12094 ioctl 4018f50b 0 returned -22 23:33:15 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x4, 0x0, 0x3, 0x8000, 0x0, 0x6, {0x2, 0x0, 0x0, 0x2, 0x740d, 0x5, 0x6, 0x9, 0x0, 0x6000, 0x4, 0x0, 0xee00, 0x9, 0x200}}}, 0x90) pipe2$9p(&(0x7f0000000240), 0x80980) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000280)=0x5) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000040)=""/49, &(0x7f0000000080)=""/219, &(0x7f0000000180)=""/123, 0x4}) [ 747.355846][T12100] FAULT_INJECTION: forcing a failure. [ 747.355846][T12100] name failslab, interval 1, probability 0, space 0, times 0 23:33:15 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="012000010000080000000000f744e76f6b9c02281642b2b06cb1275ba71de303824a77b55c755ba19de3c3d5697dbd1431af1a9c7866", @ANYRES32=r0, @ANYBLOB="05000000030000002e2f66696c653000"]) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x2000000100) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0xfffffffffffffffe, 0x0, {0x1}}, 0x18) [ 747.361368][T12100] CPU: 1 PID: 12100 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 23:33:15 executing program 2: r0 = getegid() r1 = getpgrp(0x0) sched_rr_get_interval(r1, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000000)={{0x1, 0x0, r0, 0xee00, 0xee01, 0x0, 0x7}, 0x0, 0x3, 0x7, 0xb8d, 0xffffffffffffffff, r1, 0x2}) clock_gettime(0x1, &(0x7f0000000140)) [ 747.366184][T12100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 747.370868][T12100] Call Trace: [ 747.372513][T12100] [ 747.373922][T12100] dump_stack_lvl+0x125/0x1b0 23:33:15 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x4, 0x0, 0x3, 0x8000, 0x0, 0x6, {0x2, 0x0, 0x0, 0x2, 0x740d, 0x5, 0x6, 0x9, 0x0, 0x6000, 0x4, 0x0, 0xee00, 0x9, 0x200}}}, 0x90) (async) pipe2$9p(&(0x7f0000000240), 0x80980) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000280)=0x5) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000040)=""/49, &(0x7f0000000080)=""/219, &(0x7f0000000180)=""/123, 0x4}) [ 747.375257][T12104] binder: 12103:12104 ioctl 4018f50b 0 returned -22 [ 747.376144][T12100] should_fail_ex+0x496/0x5b0 [ 747.376167][T12100] should_failslab+0x9/0x20 [ 747.383193][T12100] kmem_cache_alloc_node+0x64/0x540 [ 747.385586][T12100] alloc_unbound_pwq+0x41e/0xd00 [ 747.387833][T12100] apply_wqattrs_prepare+0x696/0xa90 [ 747.390359][T12100] apply_workqueue_attrs_locked+0xcb/0x150 [ 747.393077][T12100] alloc_workqueue+0xdae/0x1490 [ 747.395380][T12100] ? workqueue_sysfs_register+0x400/0x400 [ 747.397995][T12100] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 747.400263][T12100] kvm_mmu_init_vm+0x248/0x2e0 [ 747.402426][T12100] kvm_arch_init_vm+0x39/0x720 [ 747.404758][T12100] ? __kasan_kmalloc+0xa3/0xb0 [ 747.406977][T12100] kvm_dev_ioctl+0xa31/0x1c20 [ 747.409090][T12100] ? bit_wait_timeout+0x160/0x160 [ 747.411399][T12100] ? kvm_vcpu_stats_release+0x80/0x80 [ 747.413922][T12100] ? selinux_file_ioctl+0x17d/0x270 [ 747.416291][T12100] ? selinux_file_ioctl+0xb5/0x270 [ 747.418752][T12100] ? kvm_vcpu_stats_release+0x80/0x80 [ 747.421250][T12100] __x64_sys_ioctl+0x18f/0x210 [ 747.423305][T12100] do_syscall_64+0x38/0xb0 [ 747.425298][T12100] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 747.428023][T12100] RIP: 0033:0x7fc9bba7cae9 [ 747.430211][T12100] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 747.438346][T12100] RSP: 002b:00007fc9bc8880c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 747.442046][T12100] RAX: ffffffffffffffda RBX: 00007fc9bbb9bf80 RCX: 00007fc9bba7cae9 [ 747.445614][T12100] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 747.449179][T12100] RBP: 00007fc9bc888120 R08: 0000000000000000 R09: 0000000000000000 [ 747.452778][T12100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 747.456332][T12100] R13: 000000000000000b R14: 00007fc9bbb9bf80 R15: 00007ffdf1e289a8 [ 747.460137][T12100] 23:33:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 34) 23:33:15 executing program 0: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x4, 0x0, 0x3, 0x8000, 0x0, 0x6, {0x2, 0x0, 0x0, 0x2, 0x740d, 0x5, 0x6, 0x9, 0x0, 0x6000, 0x4, 0x0, 0xee00, 0x9, 0x200}}}, 0x90) pipe2$9p(&(0x7f0000000240), 0x80980) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000280)=0x5) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000040)=""/49, &(0x7f0000000080)=""/219, &(0x7f0000000180)=""/123, 0x4}) 23:33:15 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="012000010000080000000000f744e76f6b9c02281642b2b06cb1275ba71de303824a77b55c755ba19de3c3d5697dbd1431af1a9c7866", @ANYRES32=r0, @ANYBLOB="05000000030000002e2f66696c653000"]) (async) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x2000000100) (async) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0xfffffffffffffffe, 0x0, {0x1}}, 0x18) 23:33:15 executing program 2: r0 = getegid() (async) r1 = getpgrp(0x0) sched_rr_get_interval(r1, &(0x7f0000000180)) (async) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000000)={{0x1, 0x0, r0, 0xee00, 0xee01, 0x0, 0x7}, 0x0, 0x3, 0x7, 0xb8d, 0xffffffffffffffff, r1, 0x2}) clock_gettime(0x1, &(0x7f0000000140)) [ 747.483050][T12115] binder: 12112:12115 ioctl 4018f50b 0 returned -22 23:33:15 executing program 0: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x420c01, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x30800001d) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x4, 0x0, {0x0, 0x6, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x409c0cbc63d36661, 0x0) 23:33:15 executing program 2: r0 = getegid() (async) r1 = getpgrp(0x0) sched_rr_get_interval(r1, &(0x7f0000000180)) (async) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000000)={{0x1, 0x0, r0, 0xee00, 0xee01, 0x0, 0x7}, 0x0, 0x3, 0x7, 0xb8d, 0xffffffffffffffff, r1, 0x2}) (async) clock_gettime(0x1, &(0x7f0000000140)) [ 747.490099][T12122] FAULT_INJECTION: forcing a failure. [ 747.490099][T12122] name failslab, interval 1, probability 0, space 0, times 0 23:33:15 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="012000010000080000000000f744e76f6b9c02281642b2b06cb1275ba71de303824a77b55c755ba19de3c3d5697dbd1431af1a9c7866", @ANYRES32=r0, @ANYBLOB="05000000030000002e2f66696c653000"]) (async) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x2000000100) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0xfffffffffffffffe, 0x0, {0x1}}, 0x18) [ 747.498683][T12122] CPU: 0 PID: 12122 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 747.502800][T12122] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 747.507193][T12122] Call Trace: [ 747.508953][T12122] [ 747.510427][T12122] dump_stack_lvl+0x125/0x1b0 [ 747.510752][T12130] binder: 12126:12130 ioctl 4018f50b 0 returned -22 [ 747.512312][T12122] should_fail_ex+0x496/0x5b0 [ 747.512329][T12122] should_failslab+0x9/0x20 23:33:15 executing program 0: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x420c01, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x30800001d) (async) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x4, 0x0, {0x0, 0x6, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) (async) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x409c0cbc63d36661, 0x0) [ 747.512345][T12122] kmem_cache_alloc_node+0x64/0x540 23:33:15 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) clock_getres(0x1, &(0x7f0000000000)) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 747.512357][T12122] alloc_unbound_pwq+0x41e/0xd00 [ 747.512373][T12122] apply_wqattrs_prepare+0x696/0xa90 [ 747.512387][T12122] apply_workqueue_attrs_locked+0xcb/0x150 [ 747.512428][T12122] alloc_workqueue+0xdae/0x1490 [ 747.531194][T12122] ? workqueue_sysfs_register+0x400/0x400 [ 747.534387][T12122] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 747.536790][T12122] kvm_mmu_init_vm+0x248/0x2e0 [ 747.538641][T12122] kvm_arch_init_vm+0x39/0x720 [ 747.540521][T12122] ? __kasan_kmalloc+0xa3/0xb0 [ 747.542710][T12122] kvm_dev_ioctl+0xa31/0x1c20 [ 747.544936][T12122] ? bit_wait_timeout+0x160/0x160 [ 747.547301][T12122] ? kvm_vcpu_stats_release+0x80/0x80 [ 747.549712][T12122] ? selinux_file_ioctl+0x17d/0x270 [ 747.551916][T12122] ? selinux_file_ioctl+0xb5/0x270 [ 747.554667][T12122] ? kvm_vcpu_stats_release+0x80/0x80 [ 747.557142][T12122] __x64_sys_ioctl+0x18f/0x210 [ 747.559340][T12122] do_syscall_64+0x38/0xb0 [ 747.561437][T12122] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 747.564192][T12122] RIP: 0033:0x7fc9bba7cae9 [ 747.566288][T12122] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 747.574923][T12122] RSP: 002b:00007fc9bc8880c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 747.578008][T12122] RAX: ffffffffffffffda RBX: 00007fc9bbb9bf80 RCX: 00007fc9bba7cae9 [ 747.580893][T12122] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 747.584173][T12122] RBP: 00007fc9bc888120 R08: 0000000000000000 R09: 0000000000000000 [ 747.587371][T12122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 747.590539][T12122] R13: 000000000000000b R14: 00007fc9bbb9bf80 R15: 00007ffdf1e289a8 [ 747.593560][T12122] 23:33:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 35) 23:33:15 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000001200)='\x00', 0x1) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000200)={{r0}, "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"}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/11, 0xb, 0x0, &(0x7f0000000080)=""/224, 0xe0}, &(0x7f00000001c0)=0x40) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0x2c75) 23:33:15 executing program 0: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x420c01, 0x0) (async) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x30800001d) (async) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x4, 0x0, {0x0, 0x6, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) (async) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x409c0cbc63d36661, 0x0) 23:33:15 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) clock_getres(0x1, &(0x7f0000000000)) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040), &(0x7f0000000080)=0x4) 23:33:15 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) clock_getres(0x1, &(0x7f0000000000)) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040), &(0x7f0000000080)=0x4) 23:33:15 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) (async, rerun: 64) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async, rerun: 64) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000001200)='\x00', 0x1) (rerun: 64) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000200)={{r0}, "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"}) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/11, 0xb, 0x0, &(0x7f0000000080)=""/224, 0xe0}, &(0x7f00000001c0)=0x40) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async, rerun: 32) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0x2c75) 23:33:15 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001240)={0x3, 0x0, [{0x4000, 0xe5, &(0x7f0000000040)=""/229}, {0x1000, 0x1000, &(0x7f0000000140)=""/4096}, {0xd000, 0xeb, &(0x7f0000001140)=""/235}]}) r1 = syz_open_dev$vcsa(&(0x7f00000012c0), 0x7, 0x80) ioctl$FLOPPY_FDRESET(r1, 0x254, 0x1) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) [ 747.631632][T12146] FAULT_INJECTION: forcing a failure. [ 747.631632][T12146] name failslab, interval 1, probability 0, space 0, times 0 [ 747.637575][T12146] CPU: 1 PID: 12146 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 747.642085][T12146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 747.646675][T12146] Call Trace: [ 747.648154][T12146] [ 747.649560][T12146] dump_stack_lvl+0x125/0x1b0 [ 747.651756][T12146] should_fail_ex+0x496/0x5b0 [ 747.653967][T12146] should_failslab+0x9/0x20 23:33:15 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) r0 = semget(0x2, 0x0, 0x260) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0xff, 0x1000}, {0x1, 0x7, 0x1000}, {0x0, 0x2}, {0x1, 0x101, 0x1000}, {0x4, 0x800, 0x400}, {0x4, 0x6, 0x800}, {0x4, 0x8001, 0x5c72099d0a9db7c2}, {0x4, 0x200, 0x1000}, {0x3, 0x7b, 0x1800}, {0x0, 0x0, 0x1000}], 0xa, &(0x7f0000000080)={r1, r2+60000000}) [ 747.656109][T12146] kmem_cache_alloc_node+0x64/0x540 [ 747.658704][T12146] alloc_unbound_pwq+0x41e/0xd00 [ 747.660987][T12146] apply_wqattrs_prepare+0x696/0xa90 [ 747.663403][T12146] apply_workqueue_attrs_locked+0xcb/0x150 [ 747.666421][T12146] alloc_workqueue+0xdae/0x1490 [ 747.668727][T12146] ? workqueue_sysfs_register+0x400/0x400 [ 747.671373][T12146] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 747.673779][T12146] kvm_mmu_init_vm+0x248/0x2e0 [ 747.676029][T12146] kvm_arch_init_vm+0x39/0x720 [ 747.678278][T12146] ? __kasan_kmalloc+0xa3/0xb0 [ 747.680510][T12146] kvm_dev_ioctl+0xa31/0x1c20 [ 747.682727][T12146] ? bit_wait_timeout+0x160/0x160 [ 747.685107][T12146] ? kvm_vcpu_stats_release+0x80/0x80 [ 747.687578][T12146] ? selinux_file_ioctl+0x17d/0x270 [ 747.689957][T12146] ? selinux_file_ioctl+0xb5/0x270 [ 747.692195][T12146] ? kvm_vcpu_stats_release+0x80/0x80 [ 747.694687][T12146] __x64_sys_ioctl+0x18f/0x210 [ 747.696884][T12146] do_syscall_64+0x38/0xb0 [ 747.698935][T12146] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 747.701570][T12146] RIP: 0033:0x7fc9bba7cae9 [ 747.703576][T12146] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 747.712194][T12146] RSP: 002b:00007fc9bc8880c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 747.716003][T12146] RAX: ffffffffffffffda RBX: 00007fc9bbb9bf80 RCX: 00007fc9bba7cae9 [ 747.719577][T12146] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 747.723024][T12146] RBP: 00007fc9bc888120 R08: 0000000000000000 R09: 0000000000000000 [ 747.726410][T12146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 747.729888][T12146] R13: 000000000000000b R14: 00007fc9bbb9bf80 R15: 00007ffdf1e289a8 [ 747.733348][T12146] 23:33:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 36) 23:33:15 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001240)={0x3, 0x0, [{0x4000, 0xe5, &(0x7f0000000040)=""/229}, {0x1000, 0x1000, &(0x7f0000000140)=""/4096}, {0xd000, 0xeb, &(0x7f0000001140)=""/235}]}) (async, rerun: 64) r1 = syz_open_dev$vcsa(&(0x7f00000012c0), 0x7, 0x80) ioctl$FLOPPY_FDRESET(r1, 0x254, 0x1) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) 23:33:15 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) (async) r0 = semget(0x2, 0x0, 0x260) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0xff, 0x1000}, {0x1, 0x7, 0x1000}, {0x0, 0x2}, {0x1, 0x101, 0x1000}, {0x4, 0x800, 0x400}, {0x4, 0x6, 0x800}, {0x4, 0x8001, 0x5c72099d0a9db7c2}, {0x4, 0x200, 0x1000}, {0x3, 0x7b, 0x1800}, {0x0, 0x0, 0x1000}], 0xa, &(0x7f0000000080)={r1, r2+60000000}) 23:33:15 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000001200)='\x00', 0x1) (async) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000001200)='\x00', 0x1) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000200)={{r0}, "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"}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/11, 0xb, 0x0, &(0x7f0000000080)=""/224, 0xe0}, &(0x7f00000001c0)=0x40) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) (async) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0x2c75) [ 747.765766][T12162] FAULT_INJECTION: forcing a failure. [ 747.765766][T12162] name failslab, interval 1, probability 0, space 0, times 0 23:33:15 executing program 2: clock_gettime(0x1, &(0x7f0000000140)) r0 = semget(0x2, 0x0, 0x260) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0xff, 0x1000}, {0x1, 0x7, 0x1000}, {0x0, 0x2}, {0x1, 0x101, 0x1000}, {0x4, 0x800, 0x400}, {0x4, 0x6, 0x800}, {0x4, 0x8001, 0x5c72099d0a9db7c2}, {0x4, 0x200, 0x1000}, {0x3, 0x7b, 0x1800}, {0x0, 0x0, 0x1000}], 0xa, &(0x7f0000000080)={r1, r2+60000000}) 23:33:15 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000040)={{r1}, "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"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8) [ 747.771693][T12162] CPU: 3 PID: 12162 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 747.776820][T12162] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 747.781020][T12162] Call Trace: [ 747.782468][T12162] [ 747.783835][T12162] dump_stack_lvl+0x125/0x1b0 23:33:16 executing program 2: clock_gettime(0x5, &(0x7f0000000040)) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000000)) [ 747.785993][T12162] should_fail_ex+0x496/0x5b0 [ 747.788416][T12162] should_failslab+0x9/0x20 [ 747.790342][T12162] kmem_cache_alloc_node+0x64/0x540 23:33:16 executing program 3: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000040)={{r1}, "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"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8) [ 747.792559][T12162] alloc_unbound_pwq+0x41e/0xd00 [ 747.795149][T12162] apply_wqattrs_prepare+0x696/0xa90 [ 747.797727][T12162] apply_workqueue_attrs_locked+0xcb/0x150 [ 747.800481][T12162] alloc_workqueue+0xdae/0x1490 [ 747.803158][T12162] ? workqueue_sysfs_register+0x400/0x400 [ 747.806096][T12162] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 747.808465][T12162] kvm_mmu_init_vm+0x248/0x2e0 [ 747.811056][T12162] kvm_arch_init_vm+0x39/0x720 [ 747.813499][T12162] ? __kasan_kmalloc+0xa3/0xb0 [ 747.815833][T12162] kvm_dev_ioctl+0xa31/0x1c20 [ 747.817920][T12162] ? bit_wait_timeout+0x160/0x160 [ 747.820195][T12162] ? kvm_vcpu_stats_release+0x80/0x80 [ 747.822505][T12162] ? selinux_file_ioctl+0x17d/0x270 [ 747.824489][T12162] ? selinux_file_ioctl+0xb5/0x270 [ 747.826534][T12162] ? kvm_vcpu_stats_release+0x80/0x80 [ 747.828540][T12162] __x64_sys_ioctl+0x18f/0x210 [ 747.830459][T12162] do_syscall_64+0x38/0xb0 [ 747.832307][T12162] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 747.834639][T12162] RIP: 0033:0x7fc9bba7cae9 [ 747.836526][T12162] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 747.844913][T12162] RSP: 002b:00007fc9bc8880c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 747.848586][T12162] RAX: ffffffffffffffda RBX: 00007fc9bbb9bf80 RCX: 00007fc9bba7cae9 [ 747.851597][T12162] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 747.855177][T12162] RBP: 00007fc9bc888120 R08: 0000000000000000 R09: 0000000000000000 [ 747.858693][T12162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 747.862272][T12162] R13: 000000000000000b R14: 00007fc9bbb9bf80 R15: 00007ffdf1e289a8 [ 747.865868][T12162] [ 747.872755][ T3] ================================================================== [ 747.876574][ T3] BUG: KASAN: slab-use-after-free in pwq_release_workfn+0x339/0x380 [ 747.879983][ T3] Read of size 4 at addr ffff8880207475c0 by task pool_workqueue_/3 [ 747.883336][ T3] [ 747.884211][ T3] CPU: 3 PID: 3 Comm: pool_workqueue_ Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 747.887726][ T3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 747.892160][ T3] Call Trace: [ 747.909884][ T3] [ 747.911276][ T3] dump_stack_lvl+0xd9/0x1b0 [ 747.913472][ T3] print_report+0xc4/0x620 [ 747.915567][ T3] ? __virt_addr_valid+0x5e/0x2d0 [ 747.917846][ T3] ? __phys_addr+0xc6/0x140 [ 747.919924][ T3] kasan_report+0xda/0x110 [ 747.921990][ T3] ? pwq_release_workfn+0x339/0x380 [ 747.924338][ T3] ? pwq_release_workfn+0x339/0x380 [ 747.926719][ T3] pwq_release_workfn+0x339/0x380 [ 747.929027][ T3] kthread_worker_fn+0x2fc/0xa80 [ 747.931311][ T3] ? put_unbound_pool+0x7c0/0x7c0 [ 747.933663][ T3] ? kthread_freezable_should_stop+0x190/0x190 [ 747.936160][ T3] kthread+0x33a/0x430 [ 747.937737][ T3] ? kthread_complete_and_exit+0x40/0x40 [ 747.939959][ T3] ret_from_fork+0x45/0x80 [ 747.941987][ T3] ? kthread_complete_and_exit+0x40/0x40 [ 747.944248][ T3] ret_from_fork_asm+0x11/0x20 [ 747.946249][ T3] [ 747.947453][ T3] [ 747.948381][ T3] Allocated by task 12162: [ 747.950014][ T3] kasan_save_stack+0x33/0x50 [ 747.952035][ T3] kasan_set_track+0x25/0x30 [ 747.954380][ T3] __kasan_kmalloc+0xa3/0xb0 [ 747.956459][ T3] alloc_workqueue+0x16f/0x1490 [ 747.958711][ T3] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 747.961027][ T3] kvm_mmu_init_vm+0x248/0x2e0 [ 747.963014][ T3] kvm_arch_init_vm+0x39/0x720 [ 747.965171][ T3] kvm_dev_ioctl+0xa31/0x1c20 [ 747.967029][ T3] __x64_sys_ioctl+0x18f/0x210 [ 747.968819][ T3] do_syscall_64+0x38/0xb0 [ 747.970719][ T3] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 747.973121][ T3] [ 747.974081][ T3] Freed by task 12162: [ 747.975739][ T3] kasan_save_stack+0x33/0x50 [ 747.977746][ T3] kasan_set_track+0x25/0x30 [ 747.979811][ T3] kasan_save_free_info+0x28/0x40 [ 747.981950][ T3] ____kasan_slab_free+0x138/0x190 [ 747.984261][ T3] __kmem_cache_free+0xcc/0x2d0 [ 747.986272][ T3] alloc_workqueue+0xe76/0x1490 [ 747.988345][ T3] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 747.990413][ T3] kvm_mmu_init_vm+0x248/0x2e0 [ 747.992237][ T3] kvm_arch_init_vm+0x39/0x720 [ 747.994432][ T3] kvm_dev_ioctl+0xa31/0x1c20 [ 747.996471][ T3] __x64_sys_ioctl+0x18f/0x210 [ 747.998674][ T3] do_syscall_64+0x38/0xb0 [ 748.000568][ T3] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 748.003061][ T3] [ 748.004189][ T3] Last potentially related work creation: [ 748.006557][ T3] kasan_save_stack+0x33/0x50 [ 748.008500][ T3] __kasan_record_aux_stack+0x78/0x80 [ 748.010763][ T3] insert_work+0x38/0x230 [ 748.012697][ T3] __queue_work+0x5d2/0x1060 [ 748.014749][ T3] call_timer_fn+0x1a0/0x580 [ 748.016778][ T3] __run_timers+0x585/0xb10 [ 748.018818][ T3] run_timer_softirq+0x58/0xd0 [ 748.021031][ T3] __do_softirq+0x218/0x965 [ 748.022887][ T3] [ 748.023881][ T3] Second to last potentially related work creation: [ 748.026756][ T3] kasan_save_stack+0x33/0x50 [ 748.028872][ T3] __kasan_record_aux_stack+0x78/0x80 [ 748.031233][ T3] insert_work+0x38/0x230 [ 748.033173][ T3] __queue_work+0xb7e/0x1060 [ 748.035328][ T3] call_timer_fn+0x1a0/0x580 [ 748.037441][ T3] __run_timers+0x585/0xb10 [ 748.039486][ T3] run_timer_softirq+0x58/0xd0 [ 748.041657][ T3] __do_softirq+0x218/0x965 [ 748.043719][ T3] [ 748.044774][ T3] The buggy address belongs to the object at ffff888020747400 [ 748.044774][ T3] which belongs to the cache kmalloc-512 of size 512 [ 748.050979][ T3] The buggy address is located 448 bytes inside of [ 748.050979][ T3] freed 512-byte region [ffff888020747400, ffff888020747600) [ 748.056939][ T3] [ 748.058034][ T3] The buggy address belongs to the physical page: [ 748.060847][ T3] page:ffffea000081d1c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20747 [ 748.065415][ T3] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 748.069609][ T3] page_type: 0x4() [ 748.071268][ T3] raw: 00fff00000000800 ffff888012c40600 ffffea00008e53d0 ffffea00008a0110 [ 748.074999][ T3] raw: 0000000000000000 ffff888020747000 0000000100000004 0000000000000000 [ 748.078533][ T3] page dumped because: kasan: bad access detected [ 748.081165][ T3] page_owner tracks the page as allocated [ 748.083586][ T3] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2420c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_COMP|__GFP_THISNODE), pid 1, tgid 1 (swapper/0), ts 10048731316, free_ts 9812486312 [ 748.092132][ T3] post_alloc_hook+0x2cf/0x340 [ 748.094361][ T3] get_page_from_freelist+0xee0/0x2f20 [ 748.096768][ T3] __alloc_pages+0x1d0/0x4a0 [ 748.098810][ T3] cache_grow_begin+0x99/0x3a0 [ 748.100936][ T3] cache_alloc_refill+0x294/0x3a0 [ 748.103182][ T3] __kmem_cache_alloc_node+0x3c9/0x470 [ 748.105548][ T3] kmalloc_trace+0x25/0xe0 [ 748.107651][ T3] usb_serial_register_drivers+0x59/0xe10 [ 748.110161][ T3] do_one_initcall+0x117/0x630 [ 748.112273][ T3] kernel_init_freeable+0x5c2/0x8f0 [ 748.114693][ T3] kernel_init+0x1c/0x2a0 [ 748.116679][ T3] ret_from_fork+0x45/0x80 [ 748.118643][ T3] ret_from_fork_asm+0x11/0x20 [ 748.120431][ T3] page last free stack trace: [ 748.122383][ T3] free_unref_page_prepare+0x476/0xa40 [ 748.124625][ T3] free_unref_page+0x33/0x3b0 [ 748.126734][ T3] __folio_put+0xc3/0x110 [ 748.128688][ T3] free_page_and_swap_cache+0x25a/0x2d0 [ 748.131156][ T3] tlb_remove_table_rcu+0x89/0xe0 [ 748.133449][ T3] rcu_core+0x7fb/0x1bb0 [ 748.135353][ T3] __do_softirq+0x218/0x965 [ 748.137391][ T3] [ 748.138470][ T3] Memory state around the buggy address: [ 748.140921][ T3] ffff888020747480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 748.144456][ T3] ffff888020747500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 748.147990][ T3] >ffff888020747580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 748.151529][ T3] ^ [ 748.154328][ T3] ffff888020747600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 748.157946][ T3] ffff888020747680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 748.161570][ T3] ================================================================== [ 748.167185][ T3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 748.170568][ T3] CPU: 0 PID: 3 Comm: pool_workqueue_ Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 748.175039][ T3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 748.179311][ T3] Call Trace: [ 748.180871][ T3] [ 748.182237][ T3] dump_stack_lvl+0xd9/0x1b0 [ 748.184415][ T3] panic+0x6a6/0x750 23:33:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 37) 23:33:16 executing program 2: clock_gettime(0x5, &(0x7f0000000040)) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000000)) 23:33:16 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000040)={{r1}, "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"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) (async) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000040)={{r1}, "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"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8) (async) 23:33:16 executing program 0: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001240)={0x3, 0x0, [{0x4000, 0xe5, &(0x7f0000000040)=""/229}, {0x1000, 0x1000, &(0x7f0000000140)=""/4096}, {0xd000, 0xeb, &(0x7f0000001140)=""/235}]}) (async) r1 = syz_open_dev$vcsa(&(0x7f00000012c0), 0x7, 0x80) ioctl$FLOPPY_FDRESET(r1, 0x254, 0x1) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x1, 0x11, r0, 0x0) [ 748.186585][ T3] ? panic_smp_self_stop+0xa0/0xa0 [ 748.189105][ T3] ? preempt_schedule_thunk+0x1a/0x30 [ 748.190149][T12189] FAULT_INJECTION: forcing a failure. [ 748.190149][T12189] name failslab, interval 1, probability 0, space 0, times 0 23:33:16 executing program 2: clock_gettime(0x5, &(0x7f0000000040)) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000000)) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000000)) 23:33:16 executing program 3: r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x400a, 0x1, 0x11, r0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) [ 748.197130][ T3] ? preempt_schedule_common+0x45/0xc0 [ 748.199827][ T3] check_panic_on_warn+0xab/0xb0 23:33:16 executing program 0: openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x2ec002, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0xb2f) [ 748.202038][ T3] end_report+0x108/0x150 [ 748.204127][ T3] kasan_report+0xea/0x110 [ 748.206143][ T3] ? pwq_release_workfn+0x339/0x380 [ 748.208421][ T3] ? pwq_release_workfn+0x339/0x380 [ 748.210853][ T3] pwq_release_workfn+0x339/0x380 [ 748.213084][ T3] kthread_worker_fn+0x2fc/0xa80 [ 748.215256][ T3] ? put_unbound_pool+0x7c0/0x7c0 23:33:16 executing program 2: r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000010440), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x0, r0}) clock_gettime(0x1, &(0x7f0000000140)) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000040)) [ 748.217268][ T3] ? kthread_freezable_should_stop+0x190/0x190 [ 748.220054][ T3] kthread+0x33a/0x430 [ 748.221696][ T3] ? kthread_complete_and_exit+0x40/0x40 [ 748.224091][ T3] ret_from_fork+0x45/0x80 [ 748.225872][ T3] ? kthread_complete_and_exit+0x40/0x40 [ 748.228157][ T3] ret_from_fork_asm+0x11/0x20 [ 748.230337][ T3] [ 748.231788][T12189] CPU: 3 PID: 12189 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 748.231825][T12189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 748.231835][T12189] Call Trace: [ 748.231840][T12189] [ 748.231844][T12189] dump_stack_lvl+0x125/0x1b0 [ 748.231871][T12189] should_fail_ex+0x496/0x5b0 [ 748.231887][T12189] should_failslab+0x9/0x20 [ 748.231906][T12189] __kmem_cache_alloc_node+0x5f/0x470 [ 748.231922][T12189] ? alloc_workqueue+0xdc6/0x1490 [ 748.231942][T12189] kmalloc_node_trace+0x22/0xd0 [ 748.231960][T12189] alloc_worker+0x40/0x1a0 [ 748.231982][T12189] init_rescuer+0x6f/0x1f0 [ 748.231996][T12189] alloc_workqueue+0xd35/0x1490 [ 748.232017][T12189] ? workqueue_sysfs_register+0x400/0x400 [ 748.232038][T12189] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 748.232056][T12189] kvm_mmu_init_vm+0x248/0x2e0 [ 748.232078][T12189] kvm_arch_init_vm+0x39/0x720 [ 748.232096][T12189] ? __kasan_kmalloc+0xa3/0xb0 [ 748.232111][T12189] kvm_dev_ioctl+0xa31/0x1c20 [ 748.232146][T12189] ? bit_wait_timeout+0x160/0x160 [ 748.232196][T12189] ? kvm_vcpu_stats_release+0x80/0x80 [ 748.232246][T12189] ? selinux_file_ioctl+0x17d/0x270 [ 748.232263][T12189] ? selinux_file_ioctl+0xb5/0x270 [ 748.232280][T12189] ? kvm_vcpu_stats_release+0x80/0x80 [ 748.232297][T12189] __x64_sys_ioctl+0x18f/0x210 [ 748.232314][T12189] do_syscall_64+0x38/0xb0 [ 748.232337][T12189] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 748.232353][T12189] RIP: 0033:0x7fc9bba7cae9 [ 748.232364][T12189] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 748.232377][T12189] RSP: 002b:00007fc9bc8880c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 748.232420][T12189] RAX: ffffffffffffffda RBX: 00007fc9bbb9bf80 RCX: 00007fc9bba7cae9 [ 748.232431][T12189] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 748.232440][T12189] RBP: 00007fc9bc888120 R08: 0000000000000000 R09: 0000000000000000 [ 748.232450][T12189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 748.232460][T12189] R13: 000000000000000b R14: 00007fc9bbb9bf80 R15: 00007ffdf1e289a8 [ 748.232471][T12189] [ 748.233402][ T3] Kernel Offset: disabled [ 748.326665][ T3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:33:16 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffffc900000078d0 RCX=0000000000000100 RDX=ffffc900000078e0 RSI=ffffffff81dba6e3 RDI=ffffc900000078e0 RBP=ffffc900000078a0 RSP=ffffc900000077e8 R8 =0000000000000007 R9 =0000000000000000 R10=ffffffff81dba6e3 R11=ffffc90000007ff8 R12=ffffc90000007810 R13=ffffffff817472e0 R14=ffffc900000078d0 R15=ffff888014eac340 RIP=ffffffff817472fe RFL=00000096 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1bdab75198 CR3=0000000047662000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000010000100 Opmask01=0000000000000000 Opmask02=00000000ffffbfef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf1e28cc0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9bbac7da6 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9bbac7db3 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9bbac7dad ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9bbac7dc1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9bbac7e47 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9bbac7f25 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88806b947fc0 RCX=0000000000000000 RDX=ffff88801c9ddb40 RSI=ffffffff817b43a4 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900211bf750 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=dffffc0000000000 R12=ffffed100d728ff9 R13=0000000000000001 R14=ffff88806b73d900 R15=ffff88806b947fc8 RIP=ffffffff817b43a6 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020001000 CR3=000000000c976000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffffc Opmask01=0000000000002000 Opmask02=00000000fbfffbff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9bc8880f0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9bbac7da6 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9bbac7db3 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9bbac7dad ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9bbac7dc1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9bbac7e47 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9bbac7f25 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0064656c69616620 297325287269646e 65706f000a297325 28746e756f6d7500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 004140494c444305 0c56000d574c414b 40554a000a0c5600 0d514b504a485000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffff888022d29240 RBX=ffff88804b5a8d40 RCX=0000000000000000 RDX=ffff888022d28c80 RSI=ffffffff814e4059 RDI=ffff88804b5a9310 RBP=ffffc9000358fcf8 RSP=ffffc9000358fc60 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=dffffc0000000000 R13=ffff888022d28c80 R14=0000000000000000 R15=ffff888022d29240 RIP=ffffffff814e4079 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555556f80480 ffffffff 00c00000 GS =0000 ffff88806b800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2e323000 CR3=0000000047662000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000010000100 Opmask01=0000000000000000 Opmask02=00000000ffffbfef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf1e28cc0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9bbac7da6 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9bbac7db3 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9bbac7dad ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9bbac7dc1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9bbac7e47 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9bbac7f25 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff849ae545 RDI=ffffffff925564e0 RBP=ffffffff925564a0 RSP=ffffc900002877e0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6572617764726148 R12=0000000000000000 R13=0000000000000020 R14=ffffffff849ae4e0 R15=0000000000000000 RIP=ffffffff849ae56f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbb91d98000 CR3=0000000020ea6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000010000100 Opmask01=0000000000000000 Opmask02=00000000ffffbfef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff50547c10 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bdaac7da6 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bdaac7db3 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bdaac7dad ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bdaac7dc1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bdaac7e47 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bdaac7f25 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000