, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x4}) 15:05:56 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x100000) 15:05:56 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:05:56 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) [ 358.843353][T21935] binder: 21932:21935 ioctl c018620c 20000080 returned -22 [ 358.865871][T21941] device nr0 entered promiscuous mode [ 358.883050][T21945] binder: 21932:21945 ioctl c018620c 20000080 returned -22 15:05:56 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x200000) 15:05:56 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x5c000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:05:56 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045504, &(0x7f0000000000)) 15:05:56 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:05:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:05:56 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x1000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:05:56 executing program 4: unshare(0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:05:56 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045505, &(0x7f0000000000)) 15:05:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x5}) 15:05:56 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x600000) 15:05:56 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x100000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:05:56 executing program 4: unshare(0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) [ 359.144096][T21978] binder: 21973:21978 ioctl c018620c 20000080 returned -22 [ 359.171769][T21978] binder: BINDER_SET_CONTEXT_MGR already set 15:05:57 executing program 4: unshare(0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:05:57 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045506, &(0x7f0000000000)) 15:05:57 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 359.213531][T21982] binder: 21973:21982 ioctl c018620c 20000080 returned -1 [ 359.218460][T21981] device nr0 entered promiscuous mode [ 359.238071][T21978] binder: 21973:21978 ioctl 40046207 0 returned -16 15:05:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x6}) [ 359.421694][T22010] binder: 22005:22010 ioctl c018620c 20000080 returned -22 [ 359.457133][T22007] binder: BINDER_SET_CONTEXT_MGR already set [ 359.463516][T22007] binder: 22005:22007 ioctl 40046207 0 returned -16 15:05:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x2, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:05:57 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:05:57 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0xc0ffff) 15:05:57 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x300000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:05:57 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045507, &(0x7f0000000000)) 15:05:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x7}) [ 359.470367][T22010] binder: 22005:22010 ioctl c018620c 20000080 returned -1 15:05:57 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0xfeffff) 15:05:57 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x400000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:05:57 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:05:57 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045508, &(0x7f0000000000)) [ 359.576895][T22027] binder: 22023:22027 ioctl c018620c 20000080 returned -22 [ 359.585352][T22030] binder: 22023:22030 ioctl c018620c 20000080 returned -1 15:05:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x8}) 15:05:57 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x500000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:05:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x10, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:05:57 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045509, &(0x7f0000000000)) 15:05:57 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:05:57 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x600000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 359.690905][T22048] binder: 22047:22048 ioctl c018620c 20000080 returned -22 [ 359.728394][T22048] binder: BINDER_SET_CONTEXT_MGR already set 15:05:57 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x700000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 359.751555][T22051] binder: 22047:22051 ioctl c018620c 20000080 returned -1 [ 359.780398][T22048] binder: 22047:22048 ioctl 40046207 0 returned -16 15:05:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x9}) 15:05:57 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x1000000) 15:05:57 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc004550a, &(0x7f0000000000)) 15:05:57 executing program 4: unshare(0x8000400) syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, 0x0) 15:05:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x2275, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:05:57 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x800000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:05:57 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x900000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 359.891287][T22074] binder: 22073:22074 ioctl c018620c 20000080 returned -22 15:05:57 executing program 4: unshare(0x8000400) syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, 0x0) [ 359.955212][T22086] binder: 22073:22086 ioctl c018620c 20000080 returned -22 15:05:57 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0xa00000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:05:57 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc004550b, &(0x7f0000000000)) 15:05:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0xa}) 15:05:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x3b71, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:05:57 executing program 4: unshare(0x8000400) syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, 0x0) [ 360.074957][T22106] binder: 22103:22106 ioctl c018620c 20000080 returned -22 [ 360.126446][T22114] binder: 22103:22114 ioctl c018620c 20000080 returned -22 15:05:57 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x2000000) 15:05:57 executing program 4 (fault-call:2 fault-nth:0): unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:05:57 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0xb00000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:05:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0xb}) 15:05:57 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045516, &(0x7f0000000000)) [ 360.202835][T22122] FAULT_INJECTION: forcing a failure. [ 360.202835][T22122] name failslab, interval 1, probability 0, space 0, times 0 [ 360.226621][T22126] binder: 22125:22126 ioctl c018620c 20000080 returned -22 [ 360.233080][T22122] CPU: 0 PID: 22122 Comm: syz-executor.4 Not tainted 5.3.0-rc6+ #94 [ 360.241981][T22122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.241985][T22122] Call Trace: [ 360.241999][T22122] dump_stack+0x1d8/0x2f8 [ 360.242011][T22122] should_fail+0x555/0x770 [ 360.242027][T22122] __should_failslab+0x11a/0x160 [ 360.268957][T22122] ? tomoyo_realpath_from_path+0xdc/0x7c0 [ 360.268969][T22122] should_failslab+0x9/0x20 [ 360.268978][T22122] __kmalloc+0x7a/0x340 [ 360.268987][T22122] ? tomoyo_realpath_from_path+0xca/0x7c0 [ 360.268997][T22122] tomoyo_realpath_from_path+0xdc/0x7c0 [ 360.269010][T22122] tomoyo_path_number_perm+0x166/0x640 15:05:58 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0xc00000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:05:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0xc}) [ 360.269031][T22122] ? smack_file_ioctl+0x278/0x2e0 [ 360.280505][T22126] binder: BINDER_SET_CONTEXT_MGR already set [ 360.283452][T22122] ? assoc_array_gc+0x13d1/0x1440 [ 360.283468][T22122] tomoyo_file_ioctl+0x23/0x30 [ 360.295124][T22131] binder: 22125:22131 ioctl c018620c 20000080 returned -1 [ 360.300246][T22122] security_file_ioctl+0x6d/0xd0 [ 360.300259][T22122] __x64_sys_ioctl+0xa3/0x120 [ 360.300271][T22122] do_syscall_64+0xfe/0x140 [ 360.300284][T22122] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 360.300292][T22122] RIP: 0033:0x459879 [ 360.300306][T22122] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 360.311582][T22126] binder: 22125:22126 ioctl 40046207 0 returned -16 [ 360.316271][T22122] RSP: 002b:00007eff2bedec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.316280][T22122] RAX: ffffffffffffffda RBX: 00007eff2bedec90 RCX: 0000000000459879 [ 360.316286][T22122] RDX: 0000000000000000 RSI: 00000000c008551b RDI: 0000000000000003 [ 360.316291][T22122] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 360.316297][T22122] R10: 0000000000000000 R11: 0000000000000246 R12: 00007eff2bedf6d4 [ 360.316302][T22122] R13: 00000000004cd848 R14: 00000000004d7990 R15: 0000000000000004 [ 360.326947][T22122] ERROR: Out of memory at tomoyo_realpath_from_path. [ 360.359973][T22135] binder: 22134:22135 ioctl c018620c 20000080 returned -22 15:05:58 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0xd00000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:05:58 executing program 4 (fault-call:2 fault-nth:1): unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) [ 360.440246][T22138] binder: 22134:22138 ioctl c018620c 20000080 returned -22 15:05:58 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000000)) 15:05:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x4c00, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 360.527414][T22146] FAULT_INJECTION: forcing a failure. [ 360.527414][T22146] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 360.540742][T22146] CPU: 1 PID: 22146 Comm: syz-executor.4 Not tainted 5.3.0-rc6+ #94 [ 360.548708][T22146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.559242][T22146] Call Trace: [ 360.562530][T22146] dump_stack+0x1d8/0x2f8 [ 360.566862][T22146] should_fail+0x555/0x770 [ 360.571272][T22146] should_fail_alloc_page+0x55/0x60 [ 360.576456][T22146] prepare_alloc_pages+0x283/0x470 [ 360.576470][T22146] __alloc_pages_nodemask+0xb2/0x5d0 [ 360.576480][T22146] ? stack_trace_save+0x150/0x150 [ 360.576495][T22146] kmem_getpages+0x56/0xa20 [ 360.576510][T22146] cache_grow_begin+0x7e/0x2c0 [ 360.596756][T22146] cache_alloc_refill+0x311/0x3f0 [ 360.596766][T22146] ? check_preemption_disabled+0xb7/0x2a0 [ 360.596776][T22146] __kmalloc+0x318/0x340 [ 360.596785][T22146] ? tomoyo_realpath_from_path+0xdc/0x7c0 [ 360.596797][T22146] tomoyo_realpath_from_path+0xdc/0x7c0 [ 360.616595][T22146] tomoyo_path_number_perm+0x166/0x640 [ 360.616617][T22146] ? smack_file_ioctl+0x278/0x2e0 [ 360.627826][T22146] ? assoc_array_gc+0x13d1/0x1440 [ 360.627839][T22146] tomoyo_file_ioctl+0x23/0x30 [ 360.627849][T22146] security_file_ioctl+0x6d/0xd0 [ 360.627860][T22146] __x64_sys_ioctl+0xa3/0x120 [ 360.627874][T22146] do_syscall_64+0xfe/0x140 [ 360.648278][T22146] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 360.648289][T22146] RIP: 0033:0x459879 15:05:58 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x3000000) [ 360.657942][T22146] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 360.657948][T22146] RSP: 002b:00007eff2bedec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.657956][T22146] RAX: ffffffffffffffda RBX: 00007eff2bedec90 RCX: 0000000000459879 [ 360.657960][T22146] RDX: 0000000000000000 RSI: 00000000c008551b RDI: 0000000000000003 [ 360.657965][T22146] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 15:05:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0xd}) 15:05:58 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0xe00000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:05:58 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x1000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:05:58 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc00455d0, &(0x7f0000000000)) 15:05:58 executing program 4 (fault-call:2 fault-nth:2): unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) [ 360.657969][T22146] R10: 0000000000000000 R11: 0000000000000246 R12: 00007eff2bedf6d4 [ 360.658087][T22146] R13: 00000000004cd848 R14: 00000000004d7990 R15: 0000000000000004 [ 360.764477][T22165] binder: 22164:22165 ioctl c018620c 20000080 returned -22 [ 360.790329][T22168] binder: 22164:22168 ioctl c018620c 20000080 returned -22 15:05:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x4c01, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:05:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0xe}) 15:05:58 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x1100000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:05:58 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:05:58 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045878, &(0x7f0000000000)) 15:05:58 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x4000000) 15:05:58 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x1200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:05:58 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0x2, 0x0) 15:05:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5421, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 360.951542][T22190] binder: 22189:22190 ioctl c018620c 20000080 returned -22 [ 360.978967][T22198] binder: 22189:22198 ioctl c018620c 20000080 returned -22 15:05:58 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x2500000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:05:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x10}) 15:05:58 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045878, &(0x7f0000000000)) 15:05:58 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0x10, 0x0) 15:05:58 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x4000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 361.123774][T22216] binder: 22214:22216 ioctl c018620c 20000080 returned -22 15:05:58 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x5000000) 15:05:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x11}) 15:05:58 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x5c00000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 361.181867][T22227] binder: 22214:22227 ioctl c018620c 20000080 returned -1 15:05:59 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc008551a, &(0x7f0000000000)) 15:05:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5450, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 361.233312][T22234] binder: 22232:22234 ioctl c018620c 20000080 returned -22 [ 361.259179][T22239] binder: 22232:22239 ioctl c018620c 20000080 returned -22 15:05:59 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0xffffffff00000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:05:59 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0x4c00, 0x0) 15:05:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x12}) 15:05:59 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:05:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5451, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:05:59 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc008551b, &(0x7f0000000000)) 15:05:59 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0x4c01, 0x0) [ 361.407088][T22261] binder: 22259:22261 ioctl c018620c 20000080 returned -22 [ 361.422362][T22262] binder: 22259:22262 ioctl c018620c 20000080 returned -22 15:05:59 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x6000000) 15:05:59 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:05:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x25}) 15:05:59 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:05:59 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0x4c80, 0x0) 15:05:59 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc008551c, &(0x7f0000000000)) 15:05:59 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 361.591888][T22285] binder: 22282:22285 ioctl c018620c 20000080 returned -22 15:05:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 361.638089][T22285] binder: BINDER_SET_CONTEXT_MGR already set [ 361.661556][T22294] binder: 22282:22294 ioctl c018620c 20000080 returned -1 15:05:59 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0x5421, 0x0) 15:05:59 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x7000000) 15:05:59 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:05:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x48}) [ 361.701010][T22285] binder: 22282:22285 ioctl 40046207 0 returned -16 15:05:59 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0109207, &(0x7f0000000000)) 15:05:59 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:05:59 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0x5423, 0x0) [ 361.803174][T22318] binder: 22312:22318 ioctl c018620c 20000080 returned -22 [ 361.839269][T22318] binder: BINDER_SET_CONTEXT_MGR already set 15:05:59 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0189436, &(0x7f0000000000)) 15:05:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5460, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 361.854821][T22323] binder: 22312:22323 ioctl c018620c 20000080 returned -1 15:05:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x4c}) 15:05:59 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 361.896520][T22318] binder: 22312:22318 ioctl 40046207 0 returned -16 15:05:59 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:05:59 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc020660b, &(0x7f0000000000)) [ 361.971731][T22339] binder: 22335:22339 ioctl c018620c 20000080 returned -22 [ 361.993472][T22347] binder: 22335:22347 ioctl c018620c 20000080 returned -22 15:05:59 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x8000000) 15:05:59 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0x5450, 0x0) 15:05:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x5c}) 15:05:59 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:05:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5501, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:05:59 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0405519, &(0x7f0000000000)) 15:05:59 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 362.146294][T22369] binder: 22365:22369 ioctl c018620c 20000080 returned -22 [ 362.163563][T22370] binder: 22365:22370 ioctl c018620c 20000080 returned -22 15:05:59 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0x5451, 0x0) 15:06:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x60}) 15:06:00 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0505510, &(0x7f0000000000)) 15:06:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x6364, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:00 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:00 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x9000000) 15:06:00 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0x5452, 0x0) 15:06:00 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc10c5541, &(0x7f0000000000)) 15:06:00 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x68}) [ 362.319206][T22394] binder: 22393:22394 ioctl c018620c 20000080 returned -22 [ 362.348533][T22405] binder: 22393:22405 ioctl c018620c 20000080 returned -22 15:06:00 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 362.422216][T22412] binder: 22410:22412 ioctl c018620c 20000080 returned -22 15:06:00 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc1105511, &(0x7f0000000000)) 15:06:00 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0x5460, 0x0) 15:06:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x6c}) [ 362.474439][T22412] binder: BINDER_SET_CONTEXT_MGR already set [ 362.483641][T22422] binder: 22410:22422 ioctl c018620c 20000080 returned -1 [ 362.491257][T22412] binder: 22410:22412 ioctl 40046207 0 returned -16 15:06:00 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8901, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:00 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0xa000000) 15:06:00 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 362.607111][T22439] binder: 22436:22439 ioctl c018620c 20000080 returned -22 15:06:00 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc1105517, &(0x7f0000000000)) 15:06:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x74}) 15:06:00 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0x6364, 0x0) [ 362.657076][T22447] binder: 22436:22447 ioctl c018620c 20000080 returned -22 15:06:00 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:00 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc1105518, &(0x7f0000000000)) 15:06:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8902, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:00 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0x8912, 0x0) [ 362.794828][T22462] binder: 22460:22462 ioctl c018620c 20000080 returned -22 15:06:00 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x25}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:00 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0xb000000) 15:06:00 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc1205531, &(0x7f0000000000)) [ 362.854484][T22477] binder: 22460:22477 ioctl c018620c 20000080 returned -22 15:06:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x7a}) 15:06:00 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x5c}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8903, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:00 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0x8933, 0x0) [ 362.940379][T22491] binder: 22490:22491 ioctl c018620c 20000080 returned -22 [ 362.949715][T22492] binder: 22490:22492 ioctl c018620c 20000080 returned -22 15:06:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x300}) 15:06:00 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc4c85512, &(0x7f0000000000)) 15:06:00 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x300}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:00 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0x8935, 0x0) [ 363.096596][T22507] binder: 22506:22507 ioctl c018620c 20000080 returned -22 15:06:00 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x500}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:00 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc4c85513, &(0x7f0000000000)) [ 363.143850][T22522] binder: 22506:22522 ioctl c018620c 20000080 returned -22 15:06:00 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0xc000000) 15:06:00 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xae01, 0x0) 15:06:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8904, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x500}) 15:06:01 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x600}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:01 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x700}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 363.287160][T22540] binder: 22536:22540 ioctl c018620c 20000080 returned -22 [ 363.314618][T22540] binder: BINDER_SET_CONTEXT_MGR already set [ 363.321841][T22547] binder: 22536:22547 ioctl c018620c 20000080 returned -1 [ 363.330742][T22540] binder: 22536:22540 ioctl 40046207 0 returned -16 15:06:01 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x2) 15:06:01 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xae41, 0x0) 15:06:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x600}) 15:06:01 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x3) 15:06:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8906, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:01 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x900}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 363.445074][T22562] binder: 22561:22562 ioctl c018620c 20000080 returned -22 15:06:01 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0xd000000) 15:06:01 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xae60, 0x0) [ 363.487672][T22568] binder: 22561:22568 ioctl c018620c 20000080 returned -22 15:06:01 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0xa00}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:01 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x4) 15:06:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x700}) 15:06:01 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xae80, 0x0) 15:06:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8907, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:01 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0xb00}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 363.623171][T22592] binder: 22591:22592 ioctl c018620c 20000080 returned -22 15:06:01 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0xc00}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:01 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x5) 15:06:01 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0xe000000) [ 363.696797][T22608] binder: 22591:22608 ioctl c018620c 20000080 returned -22 15:06:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x900}) 15:06:01 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0xd00}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:01 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xaead, 0x0) 15:06:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8908, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:01 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x6) 15:06:01 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0xe00}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 363.830639][T22626] binder: 22625:22626 ioctl c018620c 20000080 returned -22 [ 363.839496][T22627] binder: 22625:22627 ioctl c018620c 20000080 returned -22 15:06:01 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0x400454ca, 0x0) 15:06:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0xa00}) 15:06:01 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x10000000) 15:06:01 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x7) 15:06:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x890b, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:01 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0x40049409, 0x0) 15:06:01 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 363.986817][T22651] binder: 22647:22651 ioctl c018620c 20000080 returned -22 15:06:01 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x1200}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 364.043067][T22660] binder: 22647:22660 ioctl c018620c 20000080 returned -22 15:06:01 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0x40086602, 0x0) 15:06:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0xb00}) 15:06:01 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x8) 15:06:01 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x11000000) 15:06:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8910, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:02 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x2500}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:02 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x9) 15:06:02 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0x4008af12, 0x0) [ 364.210513][T22682] binder: 22680:22682 ioctl c018620c 20000080 returned -22 [ 364.237813][T22688] binder: 22680:22688 ioctl c018620c 20000080 returned -22 15:06:02 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x4000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0xc00}) 15:06:02 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0x401054d5, 0x0) 15:06:02 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0xa) [ 364.350466][T22702] binder: 22701:22702 ioctl c018620c 20000080 returned -22 15:06:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8911, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:02 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x5c00}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:02 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x12000000) 15:06:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0xd00}) 15:06:02 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0x4020940d, 0x0) [ 364.434041][T22716] binder: 22701:22716 ioctl c018620c 20000080 returned -22 15:06:02 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x1000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 364.512148][T22729] binder: 22728:22729 ioctl c018620c 20000080 returned -22 15:06:02 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0xb) 15:06:02 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x2000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 364.559097][T22736] binder: 22728:22736 ioctl c018620c 20000080 returned -22 15:06:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8912, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:02 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0x40405514, 0x0) 15:06:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0xe00}) 15:06:02 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x3000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:02 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x25000000) 15:06:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x1100}) 15:06:02 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0xc) [ 364.701623][T22755] binder: 22750:22755 ioctl c018620c 20000080 returned -22 [ 364.731081][T22762] binder: 22750:22762 ioctl c018620c 20000080 returned -22 15:06:02 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x4000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:02 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0x40405515, 0x0) [ 364.805055][T22772] binder: 22771:22772 ioctl c018620c 20000080 returned -22 15:06:02 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0xd) 15:06:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8913, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:02 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 364.846396][T22772] binder: BINDER_SET_CONTEXT_MGR already set [ 364.872302][T22777] binder: 22771:22777 ioctl c018620c 20000080 returned -1 15:06:02 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0x800454cf, 0x0) 15:06:02 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x3f000000) [ 364.927970][T22772] binder: 22771:22772 ioctl 40046207 0 returned -16 15:06:02 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x6000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x1200}) 15:06:02 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0xe) 15:06:02 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0x800454d2, 0x0) 15:06:02 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x7000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 365.018788][T22801] binder: 22800:22801 ioctl c018620c 20000080 returned -22 15:06:02 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x10) [ 365.078371][T22815] binder: 22800:22815 ioctl c018620c 20000080 returned -22 15:06:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x891d, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x2000}) 15:06:02 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x8000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:02 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0x80045500, 0x0) 15:06:02 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x40000000) 15:06:03 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x9000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:03 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x11) 15:06:03 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0x800455d1, 0x0) [ 365.241522][T22839] binder: 22838:22839 ioctl c018620c 20000080 returned -22 [ 365.253041][T22844] binder: 22838:22844 ioctl c018620c 20000080 returned -22 15:06:03 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0xa000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x2500}) 15:06:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3f00}) 15:06:03 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0xb000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 365.345281][T22860] binder: 22858:22860 ioctl c018620c 20000080 returned -22 [ 365.369133][T22865] binder: 22858:22865 ioctl c018620c 20000080 returned -22 15:06:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x891e, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:03 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0x80047456, 0x0) 15:06:03 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x12) 15:06:03 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0xc000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 365.481922][T22876] binder: 22874:22876 ioctl c018620c 20000080 returned -22 [ 365.514593][T22888] binder: 22874:22888 ioctl c018620c 20000080 returned -22 15:06:03 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x5c000000) 15:06:03 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0x80086301, 0x0) 15:06:03 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x25) 15:06:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x4000}) 15:06:03 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0xd000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:03 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0xe000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x4800}) [ 365.648999][T22906] binder: 22905:22906 ioctl c018620c 20000080 returned -22 [ 365.660459][T22908] binder: 22905:22908 ioctl c018620c 20000080 returned -22 15:06:03 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x891f, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:03 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0x81785501, 0x0) 15:06:03 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x5c) 15:06:03 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x11000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 365.788861][T22921] binder: 22920:22921 ioctl c018620c 20000080 returned -22 [ 365.846375][T22931] binder: 22920:22931 ioctl c018620c 20000080 returned -22 15:06:03 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x60000000) 15:06:03 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x12000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x4c00}) 15:06:03 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc0045516, 0x0) 15:06:03 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x300) 15:06:03 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x25000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:03 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x5c00}) [ 365.959855][T22946] binder: 22942:22946 ioctl c018620c 20000080 returned -22 [ 365.980737][T22952] binder: 22942:22952 ioctl c018620c 20000080 returned -22 15:06:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8920, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:03 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x500) 15:06:03 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc00455d0, 0x0) 15:06:03 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x5c000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 366.104588][T22969] binder: 22963:22969 ioctl c018620c 20000080 returned -22 15:06:03 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x8cffffff) 15:06:03 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x600) 15:06:03 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x1000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x6000}) [ 366.175265][T22982] binder: 22963:22982 ioctl c018620c 20000080 returned -22 15:06:04 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc0045878, 0x0) 15:06:04 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8921, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:04 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x700) [ 366.249392][T22993] binder: 22991:22993 ioctl c018620c 20000080 returned -22 15:06:04 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc0045878, 0x0) [ 366.320580][T23003] binder: 22991:23003 ioctl c018620c 20000080 returned -22 15:06:04 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x6800}) 15:06:04 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0xfeff0000) 15:06:04 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x300000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:04 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x900) 15:06:04 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551a, 0x0) [ 366.457799][T23025] binder: 23024:23025 ioctl c018620c 20000080 returned -22 [ 366.494293][T23030] binder: 23024:23030 ioctl c018620c 20000080 returned -22 15:06:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8922, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x6c00}) 15:06:04 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:04 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551c, 0x0) 15:06:04 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0xa00) [ 366.605652][T23041] nr0: mtu less than device minimum 15:06:04 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x500000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x7400}) [ 366.648652][T23047] binder: 23045:23047 ioctl c018620c 20000080 returned -22 [ 366.687821][T23058] binder: 23045:23058 ioctl c018620c 20000080 returned -22 15:06:04 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0xfeffffff) 15:06:04 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x600000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 366.725782][T23064] nr0: mtu less than device minimum 15:06:04 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc0189436, 0x0) 15:06:04 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0xb00) 15:06:04 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x700000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 366.768178][T23073] binder: 23072:23073 ioctl c018620c 20000080 returned -22 [ 366.806099][T23079] binder: 23072:23079 ioctl c018620c 20000080 returned -22 15:06:04 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0xc00) 15:06:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x7a00}) 15:06:04 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc018aa3f, 0x0) 15:06:04 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x800000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:04 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0xffffc000) 15:06:04 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x900000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 366.958418][T23101] binder: 23092:23101 ioctl c018620c 20000080 returned -22 [ 366.994627][T23108] binder: 23092:23108 ioctl c018620c 20000080 returned -22 15:06:04 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0xd00) 15:06:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x1000000}) 15:06:04 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc020660b, 0x0) 15:06:04 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0xa00000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8924, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 367.099961][T23122] binder: 23121:23122 ioctl c018620c 20000080 returned -22 [ 367.138625][T23128] binder: 23121:23128 ioctl c018620c 20000080 returned -22 15:06:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x2000000}) 15:06:04 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0xb00000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:04 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc020aa00, 0x0) 15:06:04 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0xe00) 15:06:05 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0xfffffe00) 15:06:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8927, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:05 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0xc00000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:05 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x1100) [ 367.269675][T23149] binder: 23147:23149 ioctl c018620c 20000080 returned -22 15:06:05 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc0405519, 0x0) 15:06:05 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0xd00000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 367.333270][T23158] binder: 23147:23158 ioctl c018620c 20000080 returned -1 15:06:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3000000}) 15:06:05 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0xe00000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8929, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:05 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x1200) [ 367.454440][T23175] binder: 23171:23175 ioctl c018620c 20000080 returned -22 15:06:05 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc0505510, 0x0) 15:06:05 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x1000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:05 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0xffffff7f) [ 367.543143][T23191] binder: 23171:23191 ioctl c018620c 20000080 returned -22 15:06:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x4000000}) 15:06:05 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x1100000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:05 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x2500) 15:06:05 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc1105511, 0x0) [ 367.628267][T23204] binder: 23202:23204 ioctl c018620c 20000080 returned -22 15:06:05 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x1200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x5000000}) 15:06:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8930, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 367.686146][T23212] binder: 23202:23212 ioctl c018620c 20000080 returned -22 15:06:05 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x4000) 15:06:05 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc1105517, 0x0) 15:06:05 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x2500000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 367.771728][T23225] binder: 23218:23225 ioctl c018620c 20000080 returned -22 15:06:05 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x4000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:05 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0xffffff8c) 15:06:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x6000000}) [ 367.838237][T23235] binder: 23218:23235 ioctl c018620c 20000080 returned -22 15:06:05 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x5c00000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8931, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:05 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x5c00) 15:06:05 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0xffffffff00000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:05 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc1105518, 0x0) [ 367.929651][T23249] binder: 23245:23249 ioctl c018620c 20000080 returned -22 15:06:05 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 368.042721][T23267] binder: 23245:23267 ioctl c018620c 20000080 returned -22 15:06:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x7000000}) 15:06:05 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x1000000) 15:06:05 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc4c85512, 0x0) 15:06:05 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:05 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0xfffffffe) 15:06:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8932, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:05 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:06 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x2000000) [ 368.181489][T23284] binder: 23283:23284 ioctl c018620c 20000080 returned -22 [ 368.214223][T23293] binder: 23283:23293 ioctl c018620c 20000080 returned -22 15:06:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x8000000}) 15:06:06 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc4c85513, 0x0) 15:06:06 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8933, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:06 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x3000000) [ 368.309820][T23307] binder: 23306:23307 ioctl c018620c 20000080 returned -22 [ 368.349280][T23315] binder: 23306:23315 ioctl c018620c 20000080 returned -22 15:06:06 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x9000000}) 15:06:06 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:06 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup2(r0, r1) getsockname(r1, &(0x7f0000000700)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000780)=0x80) unshare(0x60000) r3 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r3, 0xc008551b, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000a00)) execveat(r0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000800)='-}\x00'], &(0x7f0000000980)=[&(0x7f0000000880)='/dev/snd/controlC#\x00', &(0x7f00000008c0)='/dev/snd/controlC#\x00', &(0x7f0000000900)='/dev/snd/controlC#\x00', &(0x7f0000000940)='system:\x85\x00'], 0x100) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f00000009c0)={0x2, 0x6}) write$binfmt_elf32(r2, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"/1687], 0x696) 15:06:06 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x4000000) 15:06:06 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x4000010, r1, 0x22) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0xa8a8, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) sysinfo(&(0x7f00000001c0)=""/172) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000100)) [ 368.466369][T23338] binder: 23337:23338 ioctl c018620c 20000080 returned -22 15:06:06 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8937, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0xa000000}) [ 368.534295][T23338] binder: BINDER_SET_CONTEXT_MGR already set [ 368.544294][T23345] binder: 23337:23345 ioctl c018620c 20000080 returned -1 [ 368.560540][T23338] binder: 23337:23338 ioctl 40046207 0 returned -16 15:06:06 executing program 4: unshare(0x100) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:06:06 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x5000000) 15:06:06 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 368.641897][T23360] binder: 23359:23360 ioctl c018620c 20000080 returned -22 15:06:06 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:06 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:06 executing program 4: r0 = msgget(0x3, 0xf845f159e5d9d161) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/156) unshare(0x68030c00) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000440)=0xe8) accept4$packet(r1, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000880)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000980)={@ipv4={[], [], @multicast1}, 0x0}, &(0x7f00000009c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000a00)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000000b00)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000b40)={@loopback, @loopback, 0x0}, &(0x7f0000000b80)=0xc) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000bc0)={@rand_addr, 0x0}, &(0x7f0000000c00)=0x14) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f00000002c0)=r1, 0x1) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000f40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xbbe36979965cbb1a}, 0xc, &(0x7f0000000f00)={&(0x7f0000000c40)={0x284, r2, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0xb4, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffff8}}}]}}, {{0x8, 0x1, r6}, {0x40, 0x2, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r7}, {0x164, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r9}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x7f, 0x5, 0xfff, 0x10000}, {0x1, 0x2b, 0x9, 0xff}, {0x8, 0x0, 0x5141, 0x80000000}, {0x88, 0x200, 0x80000001, 0xa01}, {0x0, 0x7fffffff, 0xa2, 0x7}, {0x7, 0x80, 0x4, 0x6}]}}}]}}]}, 0x284}, 0x1, 0x0, 0x0, 0x40}, 0x4014) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000200)) socket(0x10, 0x80803, 0x0) write(r1, &(0x7f00000004c0)="fc0000001de50600f677b8ed8641a1c102ab80ff000000000000369304000100000000000000000000ff000000000000009656aaa79bb94b46fe00000007ec020800008c0100036c6c256f1a272f2e117c22ebc205214000000080008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000032d2082038f4f8b29d3ef3d92c8334b3863032ff0208ff8e15c88924b2ccd243f295ed94e0ad91bd0734babc7c0f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b00417cc821d9565187dc48deac270e33429fd30001753651b59e9074535532ca0a6df9dc38e63fb8d38a873cf10000000000f70000000000aa3eda6128736f4dd2db4b6ebb2d424edb082786bd417fcf9a5532e04890761e025600995b8f20ea808bf0997f26a8406d823dbc657ab8e5ab3a95f52bb58f423715213e6559cc0b3ca8b9e6f9dc5dd773b0c6d7dfdbc5bb73d913afb1c889f3f93f82a2e897a91d5883bcbe0d080000004438b5250e92528bf77d92fc742aa5faac2c3f9adf7f51230bd82537b642ac2154b13f8b05b6e5a2d40447b15f47cd0360f3b1f213ae4327fa2cdbfa0b9f821298bbca042d53", 0xffffffffffffff13) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r1, &(0x7f0000000100)="0ffda37cc47ed5acf38eeb714c523e5ddc3af21e4f24e86cfca7d755b227ae8e8a1c11c53fb11689dc380cf3f165d5e7973fda418c1a4c63415a835b5c8f4fa73a310a1029", &(0x7f0000000180)}, 0x18) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180)={0x8, 0x2, 0x7fff, 0x100}, 0x8) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ff) r10 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r10, 0xc008551b, 0x0) [ 368.713386][T23374] binder: 23359:23374 ioctl c018620c 20000080 returned -22 15:06:06 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0xb000000}) 15:06:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8940, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:06 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x6000000) 15:06:06 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) 15:06:06 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:06 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x7000000) [ 368.852441][T23393] binder: 23388:23393 ioctl c018620c 20000080 returned -22 [ 368.891918][T23401] binder: 23388:23401 ioctl c018620c 20000080 returned -1 15:06:06 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0xc000000}) 15:06:06 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:06 executing program 4: unshare(0x1387530921cce17) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x3, 0x4000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:06:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8941, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:06 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x8000000) 15:06:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0xd000000}) [ 369.029591][T23423] binder: 23419:23423 ioctl c018620c 20000080 returned -22 [ 369.041716][T23424] binder: 23419:23424 ioctl c018620c 20000080 returned -22 15:06:06 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:06 executing program 4: unshare(0x2040200) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) [ 369.110837][T23435] binder: 23434:23435 ioctl c018620c 20000080 returned -22 15:06:06 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:06 executing program 4: unshare(0x8000400) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x163000, 0x0) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000040)={0x4, "f903848545c458c6fd45f45fd763b97745197bc9a71df55ebace44eb704af5f1", 0x2, 0x1}) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, 0x0) [ 369.172240][T23445] binder: 23434:23445 ioctl c018620c 20000080 returned -22 15:06:07 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x9000000) 15:06:07 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8942, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:07 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0xe000000}) [ 369.301525][T23461] binder: 23460:23461 ioctl c018620c 20000080 returned -22 15:06:07 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x10000000}) [ 369.344482][T23472] binder: 23460:23472 ioctl c018620c 20000080 returned -22 15:06:07 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0xa000000) [ 369.402496][T23478] binder: 23475:23478 ioctl c018620c 20000080 returned -22 [ 369.435971][T23478] binder: BINDER_SET_CONTEXT_MGR already set [ 369.443411][T23478] binder: 23475:23478 ioctl 40046207 0 returned -16 15:06:07 executing program 4: unshare(0x8000400) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x208000, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r0, &(0x7f0000000040)="f62a833df45047e9adf6a284adb0a17c91ee9798bd71301906", &(0x7f0000000080)=""/163}, 0x18) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000180)={0x1, 'veth1_to_team\x00'}, 0x18) 15:06:07 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8943, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:07 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0xb000000) [ 369.452598][T23485] binder: 23475:23485 ioctl c018620c 20000080 returned -1 15:06:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x11000000}) 15:06:07 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:07 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x25}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:07 executing program 4: unshare(0x8000400) syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) ioctl$TIOCCONS(r0, 0x541d) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40, 0x0) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, 0x0) 15:06:07 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x5c}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 369.596264][T23507] binder: 23506:23507 ioctl c018620c 20000080 returned -22 [ 369.610078][T23508] binder: 23506:23508 ioctl c018620c 20000080 returned -1 15:06:07 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0xc000000) 15:06:07 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x12000000}) 15:06:07 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x35, 0x8000) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000040)={0x3f, 0x0, 0x1, 0x80000001, 0x100000000}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000100)={r2, 0x20}) 15:06:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:07 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x500}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 369.740888][T23531] binder: 23530:23531 ioctl c018620c 20000080 returned -22 15:06:07 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0xd000000) 15:06:07 executing program 4: unshare(0x10000) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)='%eth0ppp1bdevlomime_type*system\x00'}, 0x30) r2 = getpgrp(r1) prctl$PR_SET_PTRACER(0x59616d61, r2) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) [ 369.829959][T23547] binder: 23530:23547 ioctl c018620c 20000080 returned -22 15:06:07 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x20000000}) 15:06:07 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x600}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:07 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0xe000000) 15:06:07 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x4c0000) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)=ANY=[@ANYBLOB="0c000000083f640000404c4271aa2300"]) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:06:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8947, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:07 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x700}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 369.946069][T23565] binder: 23564:23565 ioctl c018620c 20000080 returned -22 [ 369.974032][T23568] binder: 23564:23568 ioctl c018620c 20000080 returned -22 15:06:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x25000000}) 15:06:07 executing program 4: unshare(0x8000400) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x200081, 0x0) getdents64(r0, &(0x7f0000000140)=""/151, 0x97) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuset.effective\xe0\xae!\xfd\x05\xdd]G\x8a\xf3?g_cpus\x00\x05\x9f:\xc5\xf9\xfd+\xe8\xb6E\xca', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x8000000, 0x12400) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffff8) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000240)=""/233, &(0x7f0000000000)=0xe9) linkat(r2, &(0x7f0000000040)='./file0\x00', r3, &(0x7f00000000c0)='./file0\x00', 0x1000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, 0x0) 15:06:07 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x900}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:07 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x10000000) 15:06:07 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0xa00}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:07 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8948, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3f000000}) [ 370.129814][T23591] binder: 23586:23591 ioctl c018620c 20000080 returned -22 [ 370.161549][T23602] binder: 23586:23602 ioctl c018620c 20000080 returned -22 15:06:08 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x11000000) 15:06:08 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x40, 0x0) recvfrom$inet6(r1, &(0x7f0000000240)=""/59, 0x3b, 0x10000, &(0x7f0000000280)={0xa, 0x4e23, 0x7f, @empty, 0x4}, 0x1c) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) io_setup(0xfff, &(0x7f0000000000)=0x0) io_setup(0x4, &(0x7f0000000100)) io_destroy(r2) eventfd(0x8000) r3 = accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10, 0x80000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000000c0)={0x2, 0x1f, 0x3, 0x80, 0xdd2}, 0x14) connect$caif(r1, &(0x7f00000002c0)=@dgm={0x25, 0x0, 0x5}, 0x18) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) ptrace$setsig(0x4203, r4, 0x3cde, &(0x7f0000000180)={0x2b, 0xfa6, 0x7f}) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000002", @ANYRES16=r5, @ANYBLOB="00032cbd7000fddbdf25050000000c00040005000000000000000c00040003000000000000000c00080007000000000000000c0006000200000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) 15:06:08 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0xb00}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 370.261766][T23611] binder: 23608:23611 ioctl c018620c 20000080 returned -22 15:06:08 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0xc00}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x40000000}) [ 370.312475][T23623] binder: 23608:23623 ioctl c018620c 20000080 returned -22 15:06:08 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0xd00}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:08 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x12000000) 15:06:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8949, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:08 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0xe00}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:08 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 370.422650][T23637] binder: 23636:23637 ioctl c018620c 20000080 returned -22 15:06:08 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) name_to_handle_at(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0xab, 0x80000001, "29fadf90fb6625bbb290d6af47ea4258f7825cb35c85a7ca388704a394ff4ff88c0a4725179f217660bc4b67e3c6ea8b477446a704db022c9b4adf986f1a6ecbfa13d8ef7c914647baae15e6f8ab1c50e68cca24ef6b00a6f0b322b03c36e240e92213c991a2194ef94bd7db76ea680300c3dd9d27bbed56b36dfe5e0d913b236895e550766d2acf4b1c328bb60622d7ac9f61f9b0978a422504da7f6a49f29ca9a077"}, &(0x7f0000000140), 0x1000) 15:06:08 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 370.473174][T23649] binder: 23636:23649 ioctl c018620c 20000080 returned -22 15:06:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x48000000}) 15:06:08 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x25000000) 15:06:08 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r1, 0x9}, &(0x7f0000000100)=0x8) unshare(0x10030000) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, 0x0) 15:06:08 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x1200}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x894a, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 370.592587][T23661] binder: 23660:23661 ioctl c018620c 20000080 returned -22 15:06:08 executing program 4: unshare(0x8000400) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000040)=0x6200, 0x4) 15:06:08 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x40000000) 15:06:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x4c000000}) [ 370.665282][T23678] binder: 23660:23678 ioctl c018620c 20000080 returned -22 15:06:08 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x2500}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:08 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:08 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x5c000000) 15:06:08 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x5c000000}) [ 370.754746][T23689] binder: 23688:23689 ioctl c018620c 20000080 returned -22 [ 370.774105][T23693] binder: 23688:23693 ioctl c018620c 20000080 returned -22 15:06:08 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0xfdfdffff) 15:06:08 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x5c00}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 370.872114][T23710] binder: 23706:23710 ioctl c018620c 20000080 returned -22 15:06:08 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000000)={0x8}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:06:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x894c, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:08 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 370.922326][T23715] binder: 23706:23715 ioctl c018620c 20000080 returned -1 15:06:08 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x60000000}) 15:06:08 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:08 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0xfffffdfd) 15:06:08 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:06:08 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x1000000000000) 15:06:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8970, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 371.126539][T23746] binder: 23741:23746 ioctl c018620c 20000080 returned -22 15:06:08 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x3000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:09 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x68000000}) 15:06:09 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x100000000000000) 15:06:09 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0xfffffffffffffffe, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) [ 371.208150][T23759] binder: 23741:23759 ioctl c018620c 20000080 returned -22 15:06:09 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:09 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x4, 0x4000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:06:09 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x200000000000000) [ 371.330559][T23780] binder: 23776:23780 ioctl c018620c 20000080 returned -22 [ 371.346946][T23783] binder: 23776:23783 ioctl c018620c 20000080 returned -22 15:06:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8971, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:09 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:09 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:09 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x6000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x6c000000}) 15:06:09 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:09 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x300000000000000) 15:06:09 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = dup2(r0, r0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:06:09 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:09 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x9000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 371.563557][T23809] binder: 23807:23809 ioctl c018620c 20000080 returned -22 [ 371.587008][T23821] binder: 23807:23821 ioctl c018620c 20000080 returned -22 15:06:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8980, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:09 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x400000000000000) 15:06:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x74000000}) 15:06:09 executing program 4: unshare(0x8000400) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3, 0x402000) accept4$netrom(r0, &(0x7f0000000100)={{0x3, @null}, [@bcast, @null, @default, @default, @default, @bcast, @bcast, @null]}, &(0x7f00000000c0)=0x48, 0x80800) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x501000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, 0x0) 15:06:09 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:09 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0xa000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x7a000000}) 15:06:09 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0xb000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 371.751487][T23846] binder: 23839:23846 ioctl c018620c 20000080 returned -22 [ 371.783377][T23851] binder: 23839:23851 ioctl c018620c 20000080 returned -22 15:06:09 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x410000, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001340)={0x0, 0xffffffffffffffff, 0x29, 0x4, @scatter={0x3, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/212, 0xd4}, {&(0x7f0000000140)=""/191, 0xbf}, {&(0x7f0000000200)=""/104, 0x68}]}, &(0x7f00000002c0)="44fcdb974b5ba527c474465c2a8c80a21221a6888c5654a23899dfbc23aac74650325168aa4bcea1d8", &(0x7f0000000300)=""/4096, 0x4, 0x36, 0x3, &(0x7f0000001300)}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000013c0)=0x5) 15:06:09 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x500000000000000) [ 371.846433][T23862] binder: 23861:23862 ioctl c018620c 20000080 returned -22 15:06:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8981, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x1000000000000}) 15:06:09 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0xc000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 371.897004][T23872] binder: 23861:23872 ioctl c018620c 20000080 returned -22 15:06:09 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:06:09 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x600000000000000) [ 371.974436][T23881] binder: 23879:23881 ioctl c018620c 20000080 returned -22 15:06:09 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0xd000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:09 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:09 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0xe000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x100000000000000}) [ 372.041816][T23891] binder: 23879:23891 ioctl c018620c 20000080 returned -22 15:06:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8982, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 372.123987][T23905] binder: 23902:23905 ioctl c018620c 20000080 returned -22 15:06:09 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x700000000000000) 15:06:09 executing program 4: unshare(0x2020000) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) r1 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x7, 0x200080) r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x5, 0x400000) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x7, 0x8000) setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f00000001c0)=0x209, 0x4) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r3, 0xfc, 0xfffffffffffd0000, r2}) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080)=0xffffffffffffffc9, 0x4) 15:06:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x200000000000000}) 15:06:09 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 372.166157][T23909] binder: 23902:23909 ioctl c018620c 20000080 returned -22 15:06:10 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x11000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x300000000000000}) 15:06:10 executing program 4: r0 = getpgid(0xffffffffffffffff) getpriority(0x1, r0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x61a0e80071453635, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='!/\x00', 0x0, r2) unshare(0x8000400) r3 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r3, 0xc008551b, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x110, r3, 0x0) 15:06:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8983, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 372.250578][T23923] binder: 23922:23923 ioctl c018620c 20000080 returned -22 [ 372.264356][T23927] binder: 23922:23927 ioctl c018620c 20000080 returned -22 [ 372.355916][T23936] binder: 23928:23936 ioctl c018620c 20000080 returned -22 15:06:10 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:10 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x800000000000000) 15:06:10 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x12000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x400000000000000}) 15:06:10 executing program 4: unshare(0x12000800) r0 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, 0x0) [ 372.411065][T23948] binder: 23928:23948 ioctl c018620c 20000080 returned -22 15:06:10 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x488000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000040)) 15:06:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8990, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:10 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x900000000000000) 15:06:10 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x25000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 372.499701][T23961] binder: 23958:23961 ioctl c018620c 20000080 returned -22 [ 372.515899][T23963] binder: 23958:23963 ioctl c018620c 20000080 returned -22 15:06:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x500000000000000}) 15:06:10 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:10 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x7, 0x80) openat$usbmon(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon0\x00', 0x80, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) [ 372.620005][T23979] binder: 23978:23979 ioctl c018620c 20000080 returned -22 [ 372.631557][T23980] binder: 23978:23980 ioctl c018620c 20000080 returned -22 15:06:10 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x600000000000000}) 15:06:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8991, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:10 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x5c000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:10 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0xa00000000000000) 15:06:10 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001040)='/dev/null\x00', 0x100, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000001080)={0x2, 0x24, [0x7, 0xe1d, 0x7, 0x8, 0x4, 0x6, 0x100000000, 0x8, 0x1]}) unshare(0x800) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000000)=ANY=[@ANYBLOB="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"]) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, 0x0) 15:06:10 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 372.796400][T24005] binder: 24001:24005 ioctl c018620c 20000080 returned -22 [ 372.813895][T24012] binder: 24001:24012 ioctl c018620c 20000080 returned -22 15:06:10 executing program 4: r0 = add_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="f7868abf20f70698804660af2dbad361df334986dfac796d3cffc73da5a8a585184815ce282a7c1df963", 0x2a, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000200)='encrypted\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="ec2e5e12949016cf16368cabcb386d0caa4b2b5322f793d7cb4146a055591bd8db8f66493e9a7c857e0cb70255a246e861ffd67804e77b3730f7968e7bf4ffd6cdf1f50e735bcb7d6d", 0x49, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000300)=@keyring={'key_or_keyring:', r1}) unshare(0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r3 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x2b, @loopback, 0x4e20, 0x2, 'rr\x00', 0x4, 0x5, 0x2a}, 0x2c) r4 = fcntl$dupfd(r2, 0x406, r3) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r3, 0xc008551b, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) 15:06:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x700000000000000}) 15:06:10 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:10 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0xb00000000000000) [ 372.870785][T24019] encrypted_key: master key parameter '÷˜€F`¯-ºÓaß3I†ß¬ym<ÿÇ=¥¨¥…HÎ(*|ùc' is invalid [ 372.900005][T24019] encrypted_key: master key parameter '÷˜€F`¯-ºÓaß3I†ß¬ym<ÿÇ=¥¨¥…HÎ(*|ùc' is invalid 15:06:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8992, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 372.943913][T24024] binder: 24023:24024 ioctl c018620c 20000080 returned -22 [ 373.016082][T24040] binder: 24023:24040 ioctl c018620c 20000080 returned -22 15:06:10 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:10 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:10 executing program 4: unshare(0x8000400) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x381007, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10215782855faf}, 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, 0x0) 15:06:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x800000000000000}) 15:06:10 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0xc00000000000000) 15:06:10 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x300000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 373.098755][T24050] binder: 24049:24050 ioctl c018620c 20000080 returned -22 [ 373.118795][T24057] binder: BINDER_SET_CONTEXT_MGR already set [ 373.124819][T24057] binder: 24049:24057 ioctl 40046207 0 returned -16 [ 373.146102][T24058] binder: 24049:24058 ioctl c018620c 20000080 returned -1 15:06:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x900000000000000}) 15:06:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8993, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:10 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0xd00000000000000) 15:06:10 executing program 4: unshare(0x8000400) mkdir(&(0x7f0000000000)='./file0\x00', 0x10) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x50100) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x400000, 0x0) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1}) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:06:11 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:11 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x80, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000480)={0x2, 0x2, 0x7, 0x6}) unshare(0x40000000) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, 0x0) [ 373.298190][T24077] binder: 24075:24077 ioctl c018620c 20000080 returned -22 [ 373.316609][T24083] binder: 24075:24083 ioctl c018620c 20000080 returned -22 15:06:11 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0xa00000000000000}) 15:06:11 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0xe00000000000000) 15:06:11 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x500000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 373.394815][T24092] IPVS: ftp: loaded support on port[0] = 21 15:06:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8994, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:11 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x600000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 373.437851][T24097] binder: 24095:24097 ioctl c018620c 20000080 returned -22 15:06:11 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x1000000000000000) [ 373.526056][T24110] binder: 24095:24110 ioctl c018620c 20000080 returned -22 15:06:11 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x700000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0xb00000000000000}) [ 373.570910][T24100] IPVS: ftp: loaded support on port[0] = 21 15:06:11 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x1100000000000000) 15:06:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8995, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:11 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x8001, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x100) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000080)=""/129) r2 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000000)={0x100000000}, 0x4) connect$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) 15:06:11 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:11 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 373.683131][T24128] binder: 24122:24128 ioctl c018620c 20000080 returned -22 [ 373.704097][T24128] binder: BINDER_SET_CONTEXT_MGR already set 15:06:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0xc00000000000000}) 15:06:11 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x900000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:11 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x1200000000000000) [ 373.742805][T24132] binder: 24122:24132 ioctl c018620c 20000080 returned -1 [ 373.758185][T24128] binder: 24122:24128 ioctl 40046207 0 returned -16 15:06:11 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0xa00000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 373.833364][T24149] binder: 24145:24149 ioctl c018620c 20000080 returned -22 [ 373.856032][T24154] binder: 24145:24154 ioctl c018620c 20000080 returned -22 15:06:11 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x2500000000000000) 15:06:11 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0xb00000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0xd00000000000000}) 15:06:11 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:11 executing program 4: unshare(0x2000000) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xffffffffffffffff, 0x40000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0x8, 0x4, [0x5]}) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x3, 0x4000) getpeername$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:06:11 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0xc00000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 373.998183][T24174] binder: 24172:24174 ioctl c018620c 20000080 returned -22 [ 374.013823][T24179] binder: 24172:24179 ioctl c018620c 20000080 returned -22 15:06:11 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x4000000000000000) 15:06:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0xe00000000000000}) 15:06:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:11 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket(0x11, 0xe37df843bdf440c7, 0x6) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c00e2ff0a2d074e327861029282000000007e4737d57f5d6b73ca2e505f5c4bdf9387519c305a616585776e841a7d97a418199a79065c7b1d8581f648bcbd2245d0ed254dcf54b6b4847d550100000000000000b8cd8b81d77d5a3d07bd8397bfe6ccc80ba2cdd6b17efc54d4031248f392", @ANYRES16=r2, @ANYBLOB="000126bd7000fcdbdf25150000003c000900080001000100000008000200db000000080002000200000008000100ff7f00000800010009000000080001000000008008000200000400000c0007000800020000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40080c5}, 0x4000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:06:11 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0xd00000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:11 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x5c00000000000000) [ 374.134588][T24197] binder: 24196:24197 ioctl c018620c 20000080 returned -22 15:06:12 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0xe00000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 374.216165][T24207] binder: BINDER_SET_CONTEXT_MGR already set [ 374.229917][T24208] binder: 24196:24208 ioctl c018620c 20000080 returned -1 [ 374.251226][T24207] binder: 24196:24207 ioctl 40046207 0 returned -16 15:06:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x1000000000000000}) 15:06:12 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:12 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r2, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x2, 0xb62, 0x5, 0x820000000000, 0x6]}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x8001}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x8, 0x6, 0xd16}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:06:12 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:12 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0xfdfdffff00000000) 15:06:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a2, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 374.332730][T24223] binder: 24222:24223 ioctl c018620c 20000080 returned -22 [ 374.369593][T24228] binder: 24222:24228 ioctl c018620c 20000080 returned -22 15:06:12 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x1100000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x1100000000000000}) 15:06:12 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L+', 0x8000}, 0x28, 0x1) 15:06:12 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0xffffffff00000000) 15:06:12 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 374.520461][T24246] binder: 24243:24246 ioctl c018620c 20000080 returned -22 15:06:12 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x1200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x1200000000000000}) [ 374.562153][T24254] binder: 24243:24254 ioctl c018620c 20000080 returned -22 15:06:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a3, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:12 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x2500000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:12 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000000)={{0x4, @empty, 0x4e23, 0x1, 'lblc\x00', 0x10, 0x1, 0xd}, {@multicast1, 0x4e23, 0x2, 0x7, 0x80000000, 0x3}}, 0x44) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:06:12 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80840, 0xa5) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f00000002c0)=ANY=[@ANYBLOB="06000000000000000000080600"/28]) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x3, 0x305800) r2 = socket$packet(0x11, 0x3, 0x300) r3 = accept4$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0xe3, 0x80000) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f00000000c0)={'ip6_vti0\x00', {0x2, 0x4e21, @empty}}) r4 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000001c0)={r5, 0x4}, &(0x7f0000000200)=0x8) mlock(&(0x7f0000ffa000/0x1000)=nil, 0x1000) sync_file_range(r0, 0x401, 0x0, 0x7) [ 374.678705][T24268] binder: 24267:24268 ioctl c018620c 20000080 returned -22 15:06:12 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:12 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) [ 374.756767][T24280] binder: 24267:24280 ioctl c018620c 20000080 returned -22 15:06:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89b0, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x2000000000000000}) 15:06:12 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0x5c00000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:12 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:12 executing program 4: unshare(0x3c010f00) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:06:12 executing program 1: unshare(0x8000600) syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x6) [ 374.920109][T24298] binder: 24296:24298 ioctl c018620c 20000080 returned -22 [ 374.944911][T24303] binder: 24296:24303 ioctl c018620c 20000080 returned -22 15:06:12 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{0x0, 0x0, 0x0, 0xffffffff00000000}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x2500000000000000}) 15:06:12 executing program 4: unshare(0x8000400) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x141000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0xe5, "8236994775ad65ce98ea1695537275693d585c56bc9d11025550d7bd1573911c997b2aa0f89464bdd47ee7f6d0d087ebcfb50192289c75f827909af86eb40457da3c8238ad260ec15429411cf469dea7c1951b9011fd5326b2855e5d93c9912d2c4b043113293ce61d68f5a0187011a52710bac623c6863df78e90e61f92227c0a4ee4ab8039c79c8bd079496c635a38e41ffe4aa812d9d55cf37ab1a147a56ec004ac4307e25e35d0af5f1bf8c0198493996dbcaa9846ec91ad14db8bedc54055f375e9d217c77e2acde7ff71ccc98eacbcd701066a7149f0e611587e6d3d54ffa82d43fd"}, &(0x7f0000000140)=0xed) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={r1, 0x1000, "06fbd06912a892acd3be5fa13d996d164e076095356b2af28aa41a4c1829de4f76f717106335b0576ff8d280467e85bc6c3b3080bacbb2911caa9109bcdc231cc14645140278ddf19861e71f451660b7568ef4239c8bc01dbcb30903c0c263b896c2f4b7f73cf46a44039bfd743add2c9a7df04ee7323934084930ec4d35ed48f4cda1d857b660e54eb74f872b771958c72cfdc9ba2f1aa65c3893011509540b0be7544013674192a3054b0eec0821ffba71c1da5fdfd16c023d7479059f7f53a3026b38494f90c1cdb2be3bdbc5754a2f163a3e7e10301d1f7f8887192a8d8bfbac79a4c72ee0b0f646a7623b2a36f6e1b7dda3b3906a45be8e6a7d70539a955127fcb20d99b9afa67fb541cc52380edce43e51498d2865ee77f92a7048c58ba91d36048fba717a8e8d672b16be826fb2f42fd75f0b58839fa9d7c1f2b90a580e2d488a15d3a617c976e4bb7584e5ca172746a6b21cfdac6d3da2e733299a8b4c7362f14c0015639dcf3fb20373c710ea93b87e98ddbf2a038c79486243d2c8422fd062c3516f92915e05cefd4f8a3e1fb1e214697350dc0feeafe3ebe84c9740bdfdcd51a5ffcfa7ef6130770d30e4a5045508446a417e15dbb2711cae5d4b41d7662ab906a06788924e72cc2c5204b1009635c9777cdcc5ffc6e778c2e2dd3fcf2eab50243740d7e6a34e0e56211c1ce1cb0bc743382f94a2c7e029d8b607702a2440feec748a4309377d5646af8e1002c844577b59bd5be987979f0123e76df7ddfe6bcd21c1d3ab2291705cd973a084a923cacf1064f0775f7ef395e95057b165fca0edb7155ba1b041323ba9f06967abb5c76ad24f440d73ecbc92caecc6e791584e45c9d16acddedf80a040e992ad08985c76f2a008b81c58dce2c23d0701a41cb448342f23d50cbfc6e8003f0372af8b2d75e28b3d2268c2aa216c4c8565c5e58d4665e93ef70ef5f94c9fa22534e19a5912c2bc82b0f321f2dac6c7a699bb4c4538d48682b0d927acfadaf7c831254e5cf33ba9b0b97f9ca7ba7546d253d8eeec2a5cca931586f15e911aa90a3c98e9db6aca93796ae8b85862612d037022de7208d6db34e0b0b3e94ad7717931058320cf5877c7b8833c1cd69a52907b3a1294e83d27701924635d154c52fda8365b0e9ceb40415c333bbbfde8d41f19297152aa8006ab98d99ba92a8ccb073455188c0b3376a4c51e2095cdd0fb186619b84f811979cef94e403ff5a1a7d10439dae576abb84964f74e28462cea06c9b19753cef0802d70e433175f52743237d803270cccd4d8fb97fe78d1410e6c4cfdc55ed48dac0222dedd4790ec8473cb0b78028af3d226e0df411f94d7ec1588252d9a6e76608cc263f795b9eab05b5e18532a0563d812fbf83b6a7ec31d269894e99fcc85cd08b6887dec32f994f7b46841623c066cb943f872daaa295a67070ae98eda3a7283db9b5fc68946063158786649b486ecb7e652cd6146961948df5cbf8ac136e10a162a50696edb4b5327b0048910c4022737019d253ff38c222c53867f45ddc227e4aa4192dd1a04b6eb24f0b48ada14a8727903735f32fcf52b7553040195767fdb437567455be1fee0ab7034a93f75625691ee4262dc0e9fae02a5a807387e636bf668aa01b9cd6eb0ed7b676332e1f78defd7c900afa926973479f1de222775893dca3a22c2ab751802c52f3123d1ba760e9b6f127db26b05235abecb5c5e9f04c05fe25f7d6a991d2181a38c0f7e18a91b3fd957f7f2b2ff7acc9c5e3487ae1fbbbf236abec68fd623c15e8158c2ef7079339f587e7efabd9af588c7264464c738f2be794c4f8e48a163fc5197bd2376fd8d398c50eda0eda5be9f1e3b089c900efec83c3d5e4a6e2db8b2c66ae79b89b2d20adeb5ad9f2b159c2ee6db5818ae285f2f40e8fdc9ba152ef149d9572d0f9d03a3f30a1d74d8c997f98b660ef45925624e4ad0ab2efbaf96235d785d2e02185f4b0197ec5c39f33f5871d1b08e87b9ee048eb5dab6d5091041934779da96a6b26692d6d9e698213f26e769dd79d128980255ccb6de7bb0c1842454c6ed93a9d2970a1dda118ed1524648aaf2cb09b64d9010b94fb6a5df09d16984a5c29653e8a50f4984334bb57450940d3ceffcdc329e2bcc292a8b02a2d968320d82461e339064792a138d9b8296ec2e5ae4ce4dc0c48bddf24a06359d807b994c2543095787956562d7b4763bd272b1237f866d9347233cab4cb841cfc303f64e0495cc787d8b5964f7de57cd853793729e24079f040473ac62086c77d93553959c1021020a589a5004d3a4a4092bbc5c33c86e648deafa3c75ed3f124c80781df5462687a9e463198b8aba3a575a3f8273595281ce274ceb130d3d7d501d74f9e79024df2ef71ad8060a5c89561e556e5e85d8388f80968cc40b89d6ca00fc1250f2d49bf83452c2e254cfb5c21a9ad4a130091017f2eb1bbbbcff05fb86bd0c485df8f8b06d1f58fdb84b881009e8e711b8fffde95fdcb83420c71cd7827505c9ded4a6334ed5f3c15e04f380fb8fa896c0105856530fef431552cbb3babde8d1f369bdd3423e48f76d61f468ddda3951e5a2ebb704ffff7ff93619c8e1f1cacd9bc646ea3f16efaac685dd2ef78aa46dbf54efe33b51e93b1ba0b64eddfa83e31757a6f882836e6afcfdf53fff7ab75cd503df7c57a72998a636a1f5a1e8dfd33056a7f0ddd89b291aabde30878914ae0345eec3e742ae87b8436d01c141da0b262b5d6083d4ec1629aa6c632c758ca810ef531f16f4e3931c394dd32f75827efc897c2c9a9d0b648ea38261300ff06b765522e6c8df81bd92eaf2133a77c9d7b9905411afde4854aefc5777cd364c93024cfc876647d62e07c98c1b5883c37eb86b6590bf39c250555fed034160eed7f277d6fcff05b36e721f8917d5c27d3c4093a763742d217d146798145dad89f18740facd8c91f4eed777325ded829dd0a5cd48fa0089334a346d86add61ee0c6aacd6572b769407aad685f4560050dea8cf3e5545d666576d79d37a27d37df5130d81b32d575cd74a09a7e71d84c9ffb652d8a75e2b97fdd0ee20813a7c5686540c39dcb2d8924536aea6fe127d58ea97a7cc2791c4c398ddf86c8a49434e0fe12c53062d43037f483a183a2b7c1129dc912faacba66f9b638c042788f8ca84bec60166627d612f9a3a0ef03da4e053792fdfe074ae26a0c78cd414c52bcea232a3b5f7c5e9af255922b4c74ebc71ddcb8e17af3a13e4ee08a911fab71c7e14956f0fae5274bfdced92c29eeff53b1e1ab8d6f0a4ec1e7073d27e2a3b2a963ad4551aa9a4f8fe9de7d1a631fd169f6e6e980f167ede58fad395f873c46d59456cfa3b7a8d6b9be531250450923dbe8be9b5001b347aa2a9f7ea0e95bd5099ccdfbe54a38644ca97ac8a250f1606508d2bbedab5e701e6c3bd594025b4b129e849e51e48f74e138781328aaea047192032c87aedde21c34ebd84718676ccc434dfe6a5ffdcb0587542e95d4a59f1817f856b9beb3e5429a33f278e0831c6e1de7a0a88f5154e3ff9fedd9b5e4606e5fd9a19451f43fc2ff2da582d1778ceefc087c80c1e649f869234fe5ce028e2dc8104f879be3504bb11bffff8f78ea786f2ecc0b0191e885d16a1ad7644f21f445ddd2d21d958332b08b715c8e59fef0bf2736ce7337ead07f7af22f3a1c1a7c811c3e9a625a7998e498dad49130551efdf833e50857afc3139777c67ae0bf0a534cc1343376e2990913b2ff54866911b2da35714c00b8fb199dbf08b8be1d5245dc60a349be6686cabee161b6ad9fea579012b5bb38ef650d43b208f2f0dee8e24452e64ce518a82c6de699d68008e4373cd092fa66462297e254378d796c79b7d041e3bfbd63307b5ef2653852dd7e6948d072eb9428b3b73acd71e9b8d0bc6983142b1d710ad3c10e82f6ec5da9c9d4a09d3f607f7e63156a171464f94d1a9876853ffadd32838649a9178a63376e2cdbd67fea7013873f34bc83a14639fc153840c6b8bbf8e23c092a5d50f4dbca3f323ee939456b952b542c615f68a80328522435d5be1955dcf747337c8dd9059fab579d16c1f56bee77c427497df773fab5daadd9aa95fda49e289771eca7a153aa3dbb1a5ac2df68e340dcee54da1bf35e67a47c9bc2a00356c4a1ab6b6880008a2d0b3e984e4f6447d84480881795d14111031da81e7f1347a23a4538c5723eb1e7098f239ed6fb3ebe2ba3f95cf0a3d28cd146411071c215823d9262820847b2b68b1c23090dab4401425799b7e65025367cd05cb294ee8dced0cc34cb6f4107d5f9ba9253434cd5362de0f1ce3bcc01274c1c429bb24eeeb12f7bd0c5916897e0e53cc6e3bad8b4df7ebd297b4e6682949532cfb3aebb32ac9c06beb557e4b6e1d0170c9ef7812ae2e041b0623ba4e0c68fdd78076bc3d0d6fed8ec56a40ca5d2e51b1fb683792cdd16360abaa116ef33f380670ca686ed77539f34f667a1c7c0db3ec22f6668be768de693e0ed7e267c5a519d8d736bda40ce36ec459a42292ddbdc676b411bf586ffbec6e7e99d3f249065b73132e83f1b6a75d6a6148e0426195bcc6c32168b0d1d1a044219bfffe61a8071bca8eaae3e13b10d0b0ecad944d9d2fe3d290e821d3bfcb0b5c7e5a756ff4982aad3cb8ca5b8f0f6830f7763daf1b5c0c2c0d8a096c0c1ab1dadb393ee21ded33a80b1336f0dade8d506779d9321b262643394a2263ea8e84a7c61aa7a9fa2a0f75f19ca1917d09ba7e59637f580295a826be889a39555d77b1fdbf9e2ff4122e060060420cf3dea7a37db4120260e5cdb1dd5dae53af72606ef1a91e4cdc34ea23dcd234467796e78e67dec6e1d6394ef4cda4271199ad9310c9fe28d799636a46c70931bc681c25d201fbd0fb69fbc33b8c7983b9f36def06eec665e0299f6bc48396329028c97cb8795f4dc3b525a221faaac6665e86d49a1c968b100c3f0ca10d03f227f09c2a596c3fcbb00754351258c2a8a2d678c28fe6c327dc174949f4080d223c9a66530b55212b3949897d20f1aa4d12540078c54508867f89ad33fd5077adadbf9861e5b5f9a9d7e447daa36be6f5e12070ad979d9046ed963c2d4274817e0b9a12bf1912f173596c3abada2a31a0c71b08881f80accb3c5dddcef71f8b75a70ca2046bc27b1f29c9295662c353c3101c00c254638038d3c68aa0f2a0c870a600bbcb76f86fb762194a7087af1aca10190f4bcde691182a1ed1642aa7e86df78d74f3115c381b2a585352d269652745c77e4fe0101e64ced2ea728f6899e96148c8d82fc13bf4c7922507a367416795f0c4638e176c8e85da25f01a90d21ff0699ded4eb688a44efc3f35732cf46cc0912eab024bc3f570c9e02b6bdffccf8c01aad266a28990d5a28e0d6bb3506d2e18f8e4ecdf477a3194bc9caba4e360e46fbe71b1a5877a2c2c4070555601498f5e03c9fdd5b45b51df0012694e4fd82101f1218a3521ddd41d8a0ece2a96653dc6956f2d63985177f196e7f792f49d3fc673398f85be5be69859f9cc7118f781b1be7cdfa5016d2d170cd151760a44adeea96129ce3cc253f9fcddda3cd33c5b34955391919019b18c18b0621440bc3729c38da53155e92acfc70812b34211c344f536f0d0ea580f4c86595332ab721b246f11cda43210d5b490ac4fed16ed88d3a927c9d8ef88c10c7c48d4759b87df2cd852db5cee5e54cf191abdbeb7e3a9ae0caeb73cdf603db26675fc7c5ea0d4ecc700acfe1ccf5f6c9d1bb7d553b6c2f9f0a1b12d1869ca751e5280f1e"}, &(0x7f00000011c0)=0x1008) r3 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000001200)={r1, 0xe8, 0x4, 0x11d4, 0x1, 0x0, 0xb157, 0x25088053, {r2, @in={{0x2, 0x4e21, @broadcast}}, 0x4fa, 0x7, 0x81, 0x400}}, &(0x7f00000012c0)=0xb0) iopl(0x7) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r3, 0xc008551b, 0x0) 15:06:12 executing program 1: socket$isdn_base(0x22, 0x3, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f00000000c0)={0x2, 0x2}) unshare(0x8000400) syz_open_dev$sndctrl(&(0x7f0000000200)='/dev/snd/controlC#\x00', 0x800, 0x63f8c1b2a61da4d8) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x200, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r2) 15:06:12 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x2, 0x0, 0x0, 0x0, 0x0}}}) 15:06:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89b1, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 375.088083][T24320] binder: 24319:24320 ioctl c018620c 20000080 returned -22 [ 375.152746][T24331] binder: 24319:24331 ioctl c018620c 20000080 returned -1 [ 375.153342][T24320] binder: BINDER_SET_CONTEXT_MGR already set 15:06:12 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x3, 0x0, 0x0, 0x0, 0x0}}}) 15:06:13 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:13 executing program 1: unshare(0x2000000) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20ncci\x00', 0x202, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') splice(r1, &(0x7f0000000000), r1, &(0x7f0000000240), 0x2, 0x4) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xbc, r2, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NET={0x5c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x771}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x24004890}, 0x80) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)=0x5) 15:06:13 executing program 4: unshare(0x8000400) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x2000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xd0361b8f2a21266b}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_ALGID={0x8, 0x6, 0xa58}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008044}, 0x4000) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, 0x0) setsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000200)="9ef2c8451beb50f8bc22072fd11d00bff7cb1b9d2597be16a5b13c8cacaa2e55547517f5", 0x24) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000180)=0x2, &(0x7f0000000240)=0x2) [ 375.265708][T24320] binder: 24319:24320 ioctl 40046207 0 returned -16 15:06:13 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x4, 0x0, 0x0, 0x0, 0x0}}}) 15:06:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3f00000000000000}) 15:06:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89e0, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 375.387778][T24353] binder: 24351:24353 ioctl c018620c 20000080 returned -22 15:06:13 executing program 4: unshare(0x1c050800) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) ioctl$int_out(r0, 0x5462, &(0x7f0000000000)) 15:06:13 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x5, 0x0, 0x0, 0x0, 0x0}}}) 15:06:13 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x5, 0x10000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) 15:06:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x4000000000000000}) [ 375.442829][T24363] binder: 24351:24363 ioctl c018620c 20000080 returned -22 15:06:13 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x280, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r1, 0x7}, &(0x7f0000000140)=0x8) unshare(0x8000400) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, 0x0) 15:06:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89e1, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 375.552428][T24379] binder: 24376:24379 ioctl c018620c 20000080 returned -22 15:06:13 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:13 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x6, 0x0, 0x0, 0x0, 0x0}}}) 15:06:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x4800000000000000}) 15:06:13 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x7, 0x0, 0x0, 0x0, 0x0}}}) [ 375.626738][T24388] binder: 24376:24388 ioctl c018620c 20000080 returned -22 15:06:13 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x1, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x0, 0x8, 0x3}) 15:06:13 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x8, 0x0, 0x0, 0x0, 0x0}}}) 15:06:13 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(0xfffffffffffffffe, 0x7, 0x80) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/136) munlockall() ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x80000, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000100)={0x93be, 0x3ff, 0x8, 0x4, 0xc4d3}) 15:06:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89e2, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 375.763985][T24404] binder: 24398:24404 ioctl c018620c 20000080 returned -22 15:06:13 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0xe7ad, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) 15:06:13 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x9, 0x0, 0x0, 0x0, 0x0}}}) [ 375.835598][T24416] binder: 24398:24416 ioctl c018620c 20000080 returned -22 15:06:13 executing program 4: unshare(0x50040000) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:06:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x4c00000000000000}) 15:06:13 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:13 executing program 4: unshare(0x100) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0xffff, 0x30000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x7ff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={r2, 0x3}, 0x8) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x80, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:06:13 executing program 1: unshare(0x8000400) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) connect$bt_sco(r0, &(0x7f0000000080)={0x1f, {0x4, 0x0, 0x7f, 0x100, 0x8000, 0x6}}, 0x8) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)) 15:06:13 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0xa, 0x0, 0x0, 0x0, 0x0}}}) 15:06:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x5c00000000000000}) 15:06:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0xae01, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 375.968303][T24436] binder: 24433:24436 ioctl c018620c 20000080 returned -22 [ 375.992297][T24443] binder: 24433:24443 ioctl c018620c 20000080 returned -22 15:06:13 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, 0xfffffffffffffffd, 0x40000, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x200000) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0xfffffffffffffffc, r2, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:06:13 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0xb, 0x0, 0x0, 0x0, 0x0}}}) 15:06:13 executing program 1: unshare(0x8000400) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x100, 0x0) write$9p(r0, &(0x7f0000000080)="e8c4332a09a2e02c8692562aa7fd18372e2220f6348f8134503caa1edf038829d16b27f84385362476a41c6e333798867f25e05ca17560b4374f8a5450c5dc2744dd1449ef2b1957f52e97b7f824808867b9e5d85b5322a25f30a6c51417076b34c640184d1776974a110bd62ed774b612105f97f59c3dd22b0abbc1e6bf4aec5c4a408d49aba6d8d1f7e1ab8c15379d1d21023cf7b1ed5569e057b7d4af10e207bea245a0cd6ee203b026ddc24218405fab", 0xb2) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000140)={r0, r0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)) [ 376.129061][T24462] binder: 24458:24462 ioctl c018620c 20000080 returned -22 [ 376.142996][T24464] binder: 24458:24464 ioctl c018620c 20000080 returned -22 15:06:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x6000000000000000}) 15:06:13 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:13 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:06:13 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0xc, 0x0, 0x0, 0x0, 0x0}}}) [ 376.221562][T24477] binder: 24474:24477 ioctl c018620c 20000080 returned -22 15:06:14 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0xd, 0x0, 0x0, 0x0, 0x0}}}) [ 376.263588][T24483] binder: 24474:24483 ioctl c018620c 20000080 returned -22 15:06:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x6800000000000000}) 15:06:14 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0xe, 0x0, 0x0, 0x0, 0x0}}}) 15:06:14 executing program 1: unshare(0x8000400) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x2) fchdir(r0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)) 15:06:14 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0xae41, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:14 executing program 4: unshare(0x50900) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:06:14 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x2, 0x200) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000040)=0x200000000000040) 15:06:14 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:14 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x10, 0x0, 0x0, 0x0, 0x0}}}) 15:06:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x6c00000000000000}) 15:06:14 executing program 1: unshare(0x8000400) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2000, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/69, &(0x7f0000000140)=0x45) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000080)) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)) [ 376.426527][T24503] binder: 24491:24503 ioctl c018620c 20000080 returned -22 [ 376.463115][T24513] binder: 24491:24513 ioctl c018620c 20000080 returned -22 15:06:14 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0xae60, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 376.558471][T24526] QAT: Invalid ioctl [ 376.563011][T24524] binder: 24516:24524 ioctl c018620c 20000080 returned -22 15:06:14 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x11, 0x0, 0x0, 0x0, 0x0}}}) 15:06:14 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0xfffffffffffffffb, 0x2000) r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x400) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000100)={0x0, 0x0, @ioapic}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000080)={0x1, 0x0, 0x100, 0x20, 0x0, 0x9295445, 0x8}) 15:06:14 executing program 4: unshare(0x8000400) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8000, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, 0x0) [ 376.625541][T24534] binder: 24516:24534 ioctl c018620c 20000080 returned -22 15:06:14 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:14 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x12, 0x0, 0x0, 0x0, 0x0}}}) 15:06:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x7400000000000000}) 15:06:14 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x25, 0x0, 0x0, 0x0, 0x0}}}) 15:06:14 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) delete_module(&(0x7f0000000140)='em0)\x00', 0x800) r1 = request_key(&(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='/dev/snd/controlC#\x00', 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r1) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:06:14 executing program 1: unshare(0x4000300) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x400) [ 376.765243][T24556] binder: 24551:24556 ioctl c018620c 20000080 returned -22 15:06:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x7a00000000000000}) [ 376.806421][T24562] binder: 24551:24562 ioctl c018620c 20000080 returned -22 15:06:14 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0xae80, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:14 executing program 1: unshare(0x100) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname(r0, &(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x80) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x4, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)) 15:06:14 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x5c, 0x0, 0x0, 0x0, 0x0}}}) [ 376.908312][T24576] binder: 24573:24576 ioctl c018620c 20000080 returned -22 15:06:14 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1000000000000007, 0x80000) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x200200, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000000)={0x3c, 0x6, 0x0, {0x5, 0x6, 0x13, 0x0, '/dev/snd/controlC#\x00'}}, 0x3c) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f00000000c0)=0x1e) shmget(0x1, 0x3000, 0x40, &(0x7f0000ffb000/0x3000)=nil) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) [ 376.966153][T24586] binder: 24573:24586 ioctl c018620c 20000080 returned -22 15:06:14 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x300, 0x0, 0x0, 0x0, 0x0}}}) 15:06:14 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0xffffffff00000000}) 15:06:14 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x100000000, 0x4000) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000080)={0x2, {{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, [], 0x18}}}}, 0x88) 15:06:14 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x400454ca, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:14 executing program 4: unshare(0x8000400) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000005940)='/dev/audio\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000005a00)=""/83) openat$uinput(0xffffffffffffff9c, &(0x7f00000030c0)='/dev/uinput\x00', 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x200000, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000002e40)='/proc/capi/capi20ncci\x00', 0x33750341d8ecd751, 0x0) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f0000003000)={0x400, 0x3, 0xffffffff}) sendmmsg$sock(r1, &(0x7f0000005800)=[{{&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x2, 0x4, 0x4, 0x3}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)="9bff8267e52d695ed26265900127e65e52ebea30c2b367378c7de6ab1656df2966b196bbb9f8ebb9a0e68973fb870582a3d97992145b7da60431963a07fad538d3caadc38c11da536fe1b05273114a4e2a85bf963a67f53f82c04566734dd3353c2d8812e508943fe1d099fb98cf1c82a2549453deada948", 0x78}], 0x1, &(0x7f00000001c0)=[@timestamping={{0x14, 0x1, 0x25, 0xffffffffffffffce}}, @txtime={{0x18, 0x1, 0x3d, 0x80000001}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x34}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x1f}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0xa8}}, {{&(0x7f0000000280)=@ax25={{0x3, @null, 0x5}, [@default, @bcast, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a16f13b9e78ef9d628b2c1bcdf347c5fa938d88e10645e53f7a822bfb3bab919f1d238aa6305a04072cdcce17dc367e9a35c10dad0f397197560600d691a656d2ff521fe1893223a07b8d352765f55e37d79e3a26b9238129d6af1ea93bc0c8159cfbbd60b1f5b23100b2538e3c35ff56dc8391433e2be656401ec4b2fda367e36a047931e18444323a7d0a5108d0b98d066ab5ba81904b1c0f5c66f1632c2cdce2655b446c5bf8ac768eb1b6e8bfd2cdde7003855195f90c0ac3566b89ea8f904b56aba37f9064ed029e505da1dc0e2d0bc7904f1c3fb0bbb33bdd8c9b3626627310e11a09ef2c36a", 0xe9}, {&(0x7f0000000400)="01910121f7cfbfac73b1d5001245c1493f34d367c9676e3b8f01b1759464c4dc0fdd97bf7708ee9175e5a5045d723675dfa240e04b086ebc66412cce118dc2473582bdacd62577972fe62e0f9f51ad7a58630c6923ec69b73c6432bfdef4ff71b63bd82fc7aa6dd34601b3cf2d3998ff7359b908484a5ae9bf5ced2c693a71d363bfe41d462b8f07f86a3543f4efd34d8a53355d42088e8e7244ed3d79a818789782419991de279cb006af986c9c42cf27787338012f390ec1381a2c971f47b25a46f5753505b3d29bf2db166af1cf9cb22a44f5189688e7c1c914e795434f0fe04bb30476aab99b507201012408fcafb29ea9", 0xf3}, {&(0x7f0000000500)="2c5ab443370c55095d439760eec95b67b3ce5607113f979fdd7a7b137709b636b190466f", 0x24}, {&(0x7f0000000540)="94e716dd9312801012314a0b319b4d47ef442c21df962bc6090a7e57ba", 0x1d}, {&(0x7f0000000580)="9cd7e5cb8daddc0215cd9cd435ec54c827a186aa60e537d2600b673983381ae3f4177683cb31b29209dc9a9267353e99e88d8bac30247a9eda6354613fd7db81eef57734f0b9634120d86b4e1db0e4d58bf9248d1dd9d5f07fd5f20c99aaa710c1d15110f23dd8ba52e35e82095d629dd9b68193fcef708fb2dd3f2fd241b6513feeb92f7c5bf1b2e5d1a5a1f94bb8978909da6f66c84e45f1dcbef1f615ec", 0x9f}, {&(0x7f0000000640)="b3601220b2be51abbcc9802e79e8828e7fe917c9e9a5bd3ed8b494b525a8f4ad0d3dbe367a38697fd4", 0x29}, {&(0x7f0000000680)="f7021c7874755a2ebcf0b01bfa941692d9a782bb4c05794054f1b66e07a9a6ff0a5053fb9fb4868c17367acc6944117f6b772cf41f49e1c267e83f0dfc4252c548305c74a1982ef3d40e10276d3bc6f856f6161aa217ac81dd07920d7e190e844b5fa53d57aa5732fa1a01446b9c43ddcaa25ec59d6943f09c828c6cd83a0744354eb763d41a75d0046bafdd3fac7aecc17297d22fa74ac9affb681605d93ba84af8bd3c29b41d5b61c5240a1fc3b4c93c569d4b6cbd6c2bb71afc862341e2a16eefea3f6112e985a43b0dcf90028f25b4f3085c6d9a53840f79d5f8d529273a0adcf4ddb307957063bb4ce01d00b6bda82201fa25", 0xf5}, {&(0x7f0000000780)="5bc7cc5aeedf632d22c1ebc4d585b1f638a97177400d8ee68d174acfd2bb6ad063c2a383b6ec702cfdca771f6d774a6e58ea7a9d2fd1bd8d954da062dcea688b03c1ef161cdc4512a37474dca7bdf3b3808b159ac2407a5f1b528ea00c0187f84e3bc1df7e744c068ff6d39096b68eb53713b92254ee63b2a2e046bc1aeabdd7430c4c4b509c379124bae78be67dff6fb6a58d0bc392c604e3d1259d2f62c751d21a384cb17499cfb5e8131e7c8f8d81", 0xb0}], 0x8, &(0x7f00000008c0)=[@mark={{0x14, 0x1, 0x24, 0x80000001}}], 0x18}}, {{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000000900)="ee6aa1bf9c87f9f36324e429f79ce2e6ca927e51e76319be235ce4627352cc4cc6c514781daeb274fa3fec2de98a7328758e4fc8056ed4ce4bccad46eda6446e2ab69eab62275e185b82d8828e22f19c400ea50c8ac1201a7f61b0a4f352e1a2a91e7a17193a58467d1620243e3983b915559e6275ad025d4d8df32a7f7f97fc2caa963767afff377617db1f4cf3b45130c100c7cbb1926abb9822811a65f36eece90bea0d7b35726237ca0216662f43e8ff57bc74940626ad12b120960ff7e2a7ee82c0cbfaed6d03f5dbe571a176d4", 0xd0}, {&(0x7f0000000a00)="b690621ca30851af06d5c8406758f5b3894e16580f344046c7355d559c5fe342a587776df0c5cb03b63528116a892f1d85e95d0d5db4327c66de1628e1eaefaf0d5ce064c496c2e982933b8c7e6857fe568befa84e0ddac0b97ce822d1b776a25425989b73e692121cd534542224dda455a240171ec70908d7fa0a01a5334fc0be6e17f19b6ff9ce4440fa4ea8b63d94c94e6d638e0969a011b7dcd885ddb6ed0b19a85f0c3985728dbe92be9233eb4d748b9ce70d39426aa73115f0fab8788bb3371d6da8597712012178a40f19fd1befa62edfb42ca65c", 0xd8}, {&(0x7f0000000b00)="5c2c175d614cf89c61c389ac069dbd813693058c820ea8e5c103f025311f97e07e50cd218cb292898882baa358b8d0d92c7996fdd4f592d675c0187d2d56c4c97cc0f26e8f75cac8767361c2e152c8bc55a4d721c3c11ad47dfde7995b9a6dc3de497d425171734c10b03dfbef97509bee6bed373b00aa9471897e7d4ed0ff93ab4323f663c2e952f38c203377ef1c443af5ebf0c253c9be68505cf9b08eab62b6f1322aadf3deb496a45dd63dc8cce1daf010d50f5d46670a55bf5422c5e122e0193a358e7c2c672c87eb", 0xcb}, {&(0x7f0000000c00)="6383289e4bf22f0bb9cb1c5a4c26b35c1831bb33", 0x14}, {&(0x7f0000000c40)="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", 0x1000}, {&(0x7f0000001c40)="e34ee1a29a02f123f55bf9280c5fdd87feba1275991eb28fcdd291ffcf81e7f59d779e1581302736d622e24c0b6a5adf883a901b64f5d1c441fc3da0b91aa1d6ebba23a2e12150b9e073bb12c85d1b34f49e5a6884a4fa8f5a79b9452c01ada559cb40ced25fd706d8f4094051164794db077d7814cc1cdb2625016aedb78eb2c0c6bac490889c0d92c2403f781ae99a6c59bc857a89329937", 0x99}, {&(0x7f0000001d00)="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", 0x1000}, {&(0x7f0000002d00)='\"', 0x1}], 0x8, &(0x7f0000002dc0)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xffffffffffff74a0}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x7fffffff}}], 0x60}}, {{&(0x7f0000002e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x1, 0x1, {0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, [], 0x2a}, 0x9}}}, 0x80, &(0x7f0000005300)=[{&(0x7f0000002f00)="f406e8bd08fbd9bc5c145d9e6eb8e0a9cccca4d00afbb6750b65c541145e2bb117d2e79ad268b19f37a168426b1290f85af481c77c8ac7507022488a88bccf6ea61d950f95ea36108bfaabe563f729632169e4fa0f4afa2156f36220e44c450193539b96990175ba151dda701c77d34e31fb3e994855f0715751757a28b29cbba6b44c361fe31dac150b0790304d77e6d43eb82d50dc391737ae7783c110a3319156fc7d93ed9c0f3cc4e168704e7877cb7ba2bcb5020bf0bcc8b5e3037fadf10f97969fa9c99ff51c96b975", 0xcc}, {&(0x7f0000003000)}, {&(0x7f0000006040)="9f56b7f92fbbed26537ac24f2f481b33c89fec2d22328f27f0be7040fe894e3f3ac9c9a657e719333f59218fc51718e935b05562d5b93ac172604a2cfb110cf2a2c75f6b40aaa2897aed965b39f65b139f878b80ffa6c2329931f973dbc191439212779a624ad1701d7edd513a265c50a87bca348f295cdc14b135c0ef639e8ac21b630b6a9b3789bf5cf39570b5eaacfc0cd0f72e015e846af9aaa76d2329ebe4712aa84e46a3f2a200d8cf2545ddacad4e78abc16269a7a030c4b069181ee991e9afb2b32741a7a6a3d90806bb9afb5242e8d9eb53eff04459a85094c8d64b1a7dead421aea336d584947f9d5317d21a27584070dfd1ee63b26ba7779342397274d9d55645ade22053c166ff767e6d1b3aef0b6e06bcf6e5c1403badbcde7dd9eed5ee4f1829b64a7579e9aebb4588909c7eda7e6344a41068955de5c79904d2c4661709785ab138deff0a6f2552017af0c52d83e47d6b9f1068fa5188acb15de779e648e445714f6cf2ea2c101fbcab420446507af1b779642779014dcf9c3f9b73f8950c7fc7ecdad2d68ce46a8647cb173cc8c7af94282e15d33e3d828e7c0607876d3a6623c67e58d55985f51185b7dadc4786e70b340d1269c7803a5f732ad840fc3284b23228ed941f0f36b3f927d3e5c33e22ed8c0a9b026c27257ff6628de3fa4246521128a5ee52271c71e1b47f5f8f37cc7da7f2fc67cece4e566c637c49b1c83046688b6408631d478e6f9257f7816b50b47350a0394cd4b4379a6c162822a5b53379a7d2e36c3e13dafa6cdc71fe8cdd0b1ebbc3f1617936e744459f8aca3a2bfa8813e7424ff55f30a37c8d060c250e1426af60ffcae53ef25731e9f5e8700ad1e6616098426cbb75504a149b18d80b3630c0adf1737b4f598675e95b2e69ae31109bf3ed901936054d95fe48b2cfcdf1283606cde799d70c4ea73657e76a502a81bf8a4eca9a5021160887062e306d0055c0f23396ebc98824fd513c2719f6048a125e4d9024d0e3da3e5e686a580e986467e8ddf8bd9af9cf5d323e81fac8e2497f9f0cb856d3218bc759bbe458c7b04cbbd013117c1200e30c5dcea632296e7e80c121adab7bfca4e50f3eab1b6fd1772d3ccd208107d9781f450b1fc312f7584d59a6f4e7cf06798345027c1295f98d22f766ac428a2e58e541fd20a1c3b390b33a6145784c510f9d8610699b298facf4bb5ed6912ed2a47c52e44bb9082f67e81560754953592c473d57fca567f092269d0d5421ea9563263863b4428e56abaaa95bacb803dff6044f67bf730ebe99a6f9d9b52a1e09c9b4ac07c00c8106d0274175f33a9b51fc14d4ba3c64d5ef3beab9dbd6764bad088fefcfeb74a1bd6c48aa1e43b6a774ca2844a2b619d07068b28c5f9a5fc1107f4d37f374e920fb72363d75c26244e2c4e699fb06318ff1115e53dd493ae55028924fc6f64b7c8d2fa4912999078d98b7bde9a4548d3e5e7b91e989a1e70aef267d250b702fcda1f964c15bdd573501004c05084a41b09f01f44fc5ce1a66c56806663f45c364a7223310498dc8b46ce2d745d135ec1f6aa58c1a083094ceb9b58be637d89ae2921b11fc1e7c1e1f9e64fc74d3509c6e7b7f082161342a81edc6437060fdb1d8e1976409094c67fbe4013f9736f0914ead126e9b0ad5e3a04825958e19a1ea6e96d281e948ce145ac18657bab92ccf21a8b531260c5a312cf383e60abd2b4636bc519c82fc4892eb9bf71d2a08a7f7aad27d1a391e9992102ee9b384720b654ae10c5c9f1d79d0640fa57d96e9c342db48327804250e996f9389fb3e8065575b10b09bac1d779a5bfb58af987ef6634bd24d21d72814628fb29609f911be4b91c971dade79ae72cbe52d85e58f647fc83209e241b9187850055e338b86031223f91ea000081ba13bf18dc2c24b980c74b162f24622c5a0c8977940a5eb045e5b9dea67adc7b4ab90739ec5c99152476b59bf57df1da083f797bdaa0793966394c6c8d8af16480331fa710b45ec7293ab66048fcbb64cd69553c9423db7d8b344de604ccfe1832135b0e5aba5f8b5ca791b8a8ee0bfdafce6fe3ed83c067235ff8890ca919c55ad8a593ac03e06629237c9e2eea9d61d32274fc13081df4a354d557c2775e6d79c720633391a43e51923e4880535544798da2dc3528457f64448ac6f73edf760a9eb6ba75db57ae53b4797fb69778394c347648a477f84f29820b81bf8401bdebcd759dbdaabb02a8fbcf97bfd3a79d970824a3364795a79847a3a684657031c5d5a15ebf72e91b792033458717e4a4201f26484dc88b8971499a455f41ce0295338805463e4fa7842bdd72fd4f04fafbf9ab7f0c3d03ac120e965be80b2bd74d685f8e4c2b351d4470295bb189e7d30aec99a01d84b8ab0d73ace9915d9587e0043782b0f1472a4f71dea6a7a55ff7551dbea3bcce37d92975c942c86ad5cdefa9a4bfbb2ac8ca3e1b07e91b22bc6c6d79b509caa213bb83b73ce2decf8f53e1916298f5967717199e260c318314ac978e4989cc253bc2e53b0f666714e0369a15960857e0bb12717ecfddd957f48288c9d6e52b11be0c01bf798337d66bf15805f3f82b54f277b9c6b9ed25416d9aeefeac10d5f4db7157571c8561b1ab4493d7f28c8c94e3c9c55ccadb36d6c669d8bf0e310297894e813a3b3d0048ff6e49efc4a131c5a7f1ce2e7e7c52d1c3143b805ce8a4e74a346090b2eb10e4e9fc17aa5c83cd65335b98952f247ff3aca35c5dce32c6f48b764f8412035bc21ba1f6ca0575cc424e49724889dc1e0379ff84798bdb9d0fa18d1ff95085118420aab06c579b0055e36c5fdf11cec0ba44de0d59258f5034643ef37a8795740c974caf7d20d5ce29793cf64a1785ef8a245ccd46ce06ccd114024b57743ac93f9b56cfe28ca4441ba0887a86e3a84463028004fa09838c1847ee626a07dc76e31d5f6b3e6d72f91b87d73f8e4da87dd5483f13dcf217003949a5cc9f1e7c5483aee7621f51dfa28a333d13959f9cd8b70614c246b427a4c214481e4013c20a164cc1088f79741c6a35ed02fab9e1d478824b92c03879292a14c173d9a02e00548faed1a12e0a936fe9f320203862beb87271043c5d82db630cdb934c4bb399f0356288fdac7db5b00ff4a682d9992b40663bb11d02433e57dbbf930c8de91ddc061f331c8ed209ecb725a8ed6c5dc4267f1ca45beb63c803f1f56af62af9d9ec9182465ce761aa9541a8af2cc6392f6befa229391d3e5a86d476b09323b8d37512146104d98ef8040b538429fe2bd02936f0647e9639627bf4ca0e43c9bc131a20e229b9b9b4be54d285f97a53130f335f8ad9104838250cd70b8e7c612c780d2929d08665f7ad87506333f29b500f79304665bb991e04ee4d286812fc06a1c8fd903a684f1c186fe485b6ee2ded1a0e98d59adf749495ca76479c8c8de1c84069ea4186c853ce2b91ce883db6d57f7dff6e9d8dc1f40f6ed1414a3ca5aa245a0d1658f6b8da17bf3cd2286e17728a506a1e11873ebf154efe813ed1cfd9e22aaeb02b75ce4418e64999de0188e0bad0f031af800523b9441117c66bc88d32be1296c6f0efa8c90b6f9a9a9a2aaafd769fede0049fbe56260b913cb13021fb3b0de67c3ebee97098c046cf4a6f41bc4d64a68decd0669ea9811b5ce4af1faff0d3e75ccc19968f45d854a910028a7657f83e4b4f3919e91283d600810fd72f967ffef7f9f61651ae49cd55a5f250b6ac59f660ae8d22c8b189abbab83d648f9ac00028e25fdd39a566c7af5bbb4069b449028a33ebdb24605e56efcecaa4d0376df403f8527da01da1a5d5ea250bc7007f8db7439dd89d17d16e6da6aa0b592e55517dff6d747e429be4d6e9c98e512a7ecf5d1d2e6dac2bf74b223c202188d72172ad8b0b5b195b2bf18be8c394526476317063fef77e2da7cd738e2f89453a8fd1e2cd9a9883a33731380ede8745a52f16c31473bb1bd5d6f2e6d64db4ab32d918eb8c82556e562aa214064a6b625166bf038e71ed314c4853535d237d2dc26c97b30cceda4345cf3a08c93263362f0d7843382fd1aa814b435ad409ec7707ea4e8b32b0d3af3acb22f2d6ba2f331f48a9381528409d3614fa50795ec5c5d8b0bafb4a2d8536c4150dc5b8e40d9db69b347ebf1bc2593e7f750b7917ce5a8a9672bc43e8aa2006e657c142d1c9d82fb237145c30777a771930223716ad08f02a50042d4b4b5ffd7b1560f8f6b9748964bb1d171d6252cb6b03f7d2e06b475ebaa927ac2936dd90b1be3940194a3021acbc42122f91259fa2c87e09da8bd4cc4ec7b848b7bd231ffc3ffb3a639ef734a92d5fa4b1aa0754e4816deda8f2e142cb881d8bfe9b6a48a80f610e58d8150540fa902a3ba7945ce75983e3e02c8611119234c1c28ac38ae62664ec4dde5e1e040c27b830782e545d9595d156751148c5d46922e0e8ed0a2be5ed758ef75306e5ca532ae10709aadbf7d422f8a56a30f5b4d7e70ea8e96d8ce434cfcb1b133a7f4ea7cba0bc2eb7df71e264c893fe61adf7f08855ab18319318851e038e1652c8e1c1e55dd1bca3dce6d8d11a0160481eba211a629215c4346ed61487cd5962e69afe9150040ce99935dd9e6d864434899d9d6ce45717b9830a6fa3134a1f905144ed13874d972be7a17cf3e4f971ae25b0b4a48fcfaed74578a2a305919c544a061b561154d4f48e59e6a535bccd5c96171ccd193fec9349cb6b276c0a1d501218954bf9aab76183ca3b812fd1af3677ee759b7554f2c05e7342478832810c4281f623c940b87b4869b484658308ddefe6c9c240b41b6585959464589c2a406f98f8dcddfccec3fd02cc3b3a2a2a3c1fd146d5804f6d245cf00e2e9e6b06d0fff93349c44ff531c0d041584ce8dd7fd2325b66a5e3f1fde1e84b24d80ec30be9e1301069f03c6384edfc9f0a7a860091442472c8fd0c87d6dfbd83004d10b8f146df595b0fc83ace94e834da5da60a2de1d51c2686c811f75efeb1abfb3cef79084cb93f4d85872e9e7377717dd4b6031d88c5cda7448d83b8e45ecdbd1933d54a0ce52c0a46b80767bfc9501e81b6b45e33569171425009ef52dd5eba462207a33e3a3f6bfb57a7319e4b92a358c80949b4be72d73b792fcd1a54cb6ff35bf2c9f0952caae4a588dc7d1cd36cfedfc40acabde0ec50a4bb439428236cc7a1fb4f9b8b7c48190fe6f3733d5739eee5d88d14e768484576c35e1115035f3f7b36bffb827d14ac548dd0d3fe5b147c186324cb05d497cadb6825bc8f369af6d17c09ea8beed4485f8377b99199f95788e05314210956fa684962637b865d717bcae47f1579c2a7e88fbb02b6386a8e066dc93dddf2346d452f0354a34ffd981558c5ad85d8553ea793e9c3c745aa6cead769909264577f28afb3bc770597c09da7c502d6a77a5b21745c9a0e503e0527ee06547f7731de8b26dd8c4796a9817851a2ef835a9e5adb85d78db053a2fedfbfa510228147258e6206e4b195a243ba0ce65d3c0c1a03131aacc0ff4e4d0e290cb77e8064db723a2e3b8f82be6fb148e5df50ec12b5d0df0e91f8c9e4f0b95dc9180ca4bb68eb52cb522aef376499f0fe6dc91e822fb9c9410eef40f6b295b759bc5b70d77fd50ac7d0285c20ec20ceaa695894468d1313351cba22023f68d6c835dc3b4ffa39dde527ec122db449b711d92fe21dc82ae76b059dada5b099915d11c9ff64e6f704d89dd991214f3b7e0fa113021df7663e15606b918c2d6d6a47a43c5379ca43208fdf0eabc608b646cc077a0a829", 0x1000}, {&(0x7f0000004040)="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", 0x1000}, {&(0x7f0000005040)="f3af5ba495e790e5b6c6e109f55e06645145c8a1213a36ee6813b0c221789bee0117800abd6eeed4ccfcd7ac439dda33a4d8bb61cb72ccea3ee35c89b7239dd6af3ce60b51b74b021184860a3fe6cf034a6862e526e1be15f4c046f23e3dfa09a82e12323e165ac355901ac319a15e31195dcb2076025ea0e47d956f7ce46da4db9a1c3d5d7c8243c2e80e42db0f7b273cc640126838edb0875c", 0x9a}, {&(0x7f0000005100)="3410a67af6d81e600328e67a9cdeb38cf7b5fef05511b970d5994290b2176fe591af37ae66776b973ca30b8feaa0dcc5c3bad4b4a69d22135e5a9b3f8ec4b8055e9a7b84eeb3a17d9bc15a60aacd0c679fe71d24bcddf6d51bb3dc9e456c823adff2d2478ecb70666f98708565ff915ca20017572808b08f2f360daf3b68502a417620722c0f5de8656f6ab364197683838c5e448bb46f499089d842c52bcf3194a352ea4b769b106915f909d7c94865e0a434d35c68f1aea689e4a66759b9411f554cb60258e659ff67bcb64902d069c5a1c6c15c09", 0xd6}, {&(0x7f0000005200)="ec185e1752d91029b9a8145801fd97ae868337044714a083773f65321b8ed6fb4c46616121b5ab041dce64a5897ae3f972a924ecde7a527aed76ba57c1030e9c2bfccaab2b465ad5b2ebac694dc824f2f4d2a0b4c49581bfe81da4d168367c93dd2d1f281c8035289305277ddc6b3aa486c2a3403a34d436cc927ac9588518c12290ad59d5199de0cbd7db30f3f594bfdd08d941f0aa503e0dda5ba0acd88d9169d327cebbc8022380c522919ec2e5cdf3933bacb6e3bace318f4ae34e18830708fec3c77b1881fd7c4cfafebc3089", 0xcf}], 0x7, &(0x7f0000005380)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffff70e}}, @mark={{0x14, 0x1, 0x24, 0x1f}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x60}}, {{&(0x7f0000005400)=@ipx={0x4, 0xffff, 0xf9, "2190edd0d066", 0x4}, 0x80, &(0x7f00000057c0)=[{&(0x7f0000005480)="c7ab4ba3b81535c49677ea5d5d81cfb9cc6f6398c567938efe373e5a267b4c3d6d4521fd5dcae76b609c7b086736c78baf5ba10e666a6bdf1cb74c8395a5cd8aff1a695f818ce46e45e7b806cc48778ac3ca8392d94f3624417aee64c3b8c10ec6b2fed6a0162d", 0x67}, {&(0x7f0000005500)="b050d0cc688f45a427540d1f23711168e4dc468853e7b98941a89c2d8b0d621152debc2cede964cb2e026dbaf1b0d63cff75bb40d20b4314309df8bec8ab808bbdf8346cbfb3b1203f693321ff64bb415549b67efe84ccb4446168a991d3e3b8681ba109d8f4924c3de766090caf62ccf93753cf46a9118b2b64151984ba50f32079d2c0ecdf902c104c3b7b14d89b90", 0x90}, {&(0x7f00000055c0)="d3a1db8bdf90faa135eadd8fa7d563f82f92b2b1573423e67e4005f52b1a3d47a9f86bca35855da29c30dbf3dedc722d83e33eec13ce06a3c423a1ad80f1c8bf6a8faee4afc35dc5b06c3b48e2591345f2ae0be6cf0681be99dfbe7f6fa1611b244a7421725106c9dd964ac5c5f12dc9f6d34fe5c1fe44380137e317fdad7fb57556e2723e16d178fafd9ec38b565b979e4957f556b53e724858d16737c33d8a257ab50d56bf00a3227f873196251d198ca90987d7f25ebd21da48e0a91fc21fb2492bed55a7010c735b3439f10de7c47fd6849d8ed7d50ec27faa70c3843ff6d1fccd89522945c0a8fab6ffa1d9d392f37c1f36a3f4", 0xf6}, {&(0x7f00000056c0)="d44dbc7474e59c645eaec45d20a388e731f79269c11eb2d922b95f92e88fbe68b1025e8c24225df7ecc33bbc1ff9c313a62e0b5a375cb8805413febdc538e2cb9082fa565974565c83e0172c9f0db12b3572b9f503985a3e0d08cf749d942e2cbb90834d96fdf1875975b63273bf97f45d76366accffe2eade17e4850b166e5d6c9482031f17a81634409406be5b0f206d987f920515b57c00063e144c7d3be3d91a56100eeb00642849715fb636cb57b69eb9203e8f8602af3d7f91e99850d947c00120fbe8d5da9b6fbb85ae9374ea8cd2d991f9ef8f87418ecf15a9b42030e56d9d1e", 0xe4}], 0x4}}], 0x5, 0x8080) r4 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000005a80)=""/111, 0x6f) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000000000)=0x20) r5 = add_key$user(&(0x7f0000005b00)='user\x00', &(0x7f0000005b40)={'syz', 0x1}, &(0x7f0000005b80)="a150a713a8da55a84c69e2adb29e3960735e764d9a8c542154620c622033c11b18715ac57f452be5b50272122da81f22fcb02353deaf6f0f1978e174cfaa16360d5b8159b4d077d1b0d097b276e6240c86f2", 0x52, 0xffffffffffffffff) r6 = request_key(&(0x7f0000005c00)='id_resolver\x00', &(0x7f0000005c40)={'syz', 0x2}, &(0x7f0000005c80)='keyring.trustedwlan0\x00', 0x0) keyctl$reject(0x13, r5, 0x20, 0x7, r6) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f0000005980)={0x9, 0x8, 0x9}) r7 = msgget(0x1, 0x41) msgctl$MSG_STAT(r7, 0xb, &(0x7f0000003100)=""/169) r8 = getpid() ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000031c0)={0x1, &(0x7f0000003080)=[{0x0}]}) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f0000003300)={r9, 0x4, &(0x7f0000003200)=[0x0, 0x35a0, 0x9, 0x816], &(0x7f0000003240)=[0x8, 0x5], 0x64, 0x5, 0x1040000000, &(0x7f0000003280)=[0x8, 0x8, 0x80, 0x4, 0x8], &(0x7f00000032c0)=[0x1000, 0x0, 0x9, 0x7, 0x6, 0x80000000, 0x1]}) sched_getattr(r8, &(0x7f0000003040)={0x30}, 0x30, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000005cc0)={0x0}, &(0x7f0000005d00)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000005d40)={r10, @in={{0x2, 0x4e21, @multicast2}}, 0x4, 0x80000001}, &(0x7f0000005e00)=0x90) ioctl$FICLONE(r3, 0x40049409, r1) 15:06:14 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x500, 0x0, 0x0, 0x0, 0x0}}}) [ 377.128449][T24607] binder: 24601:24607 ioctl c018620c 20000080 returned -22 15:06:15 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100ff0300000500000000000000070000000000000002000000000000000004000000000030000000000000000000000000000000000000000000000000020000000300000000001300000000000100000000000000ffffffff0000000007000000000000000000000000000000000000000000000000000000000000000000000000003b50f5fae140f42f000000000000000000000000000000000000000000f9ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000013d9d1e8d42ea1ca00"/776]) [ 377.187604][T24615] binder: 24601:24615 ioctl c018620c 20000080 returned -22 15:06:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x2}) 15:06:15 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x600, 0x0, 0x0, 0x0, 0x0}}}) 15:06:15 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) r1 = semget(0x3, 0x0, 0x265) socket$isdn_base(0x22, 0x3, 0x0) semctl$SEM_INFO(r1, 0x6, 0x13, &(0x7f0000000000)=""/236) 15:06:15 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x700, 0x0, 0x0, 0x0, 0x0}}}) 15:06:15 executing program 1: unshare(0x8000400) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0x40086602, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000080)=[0x8, 0x1ff, 0x57a, 0x0], 0x4, 0xfffffffffffffb67, 0x7, 0x5, 0xffffffff, 0x3, {0x8, 0x6, 0x4, 0x7f, 0x1, 0xffff, 0x2, 0x5, 0x6c, 0x8000, 0x5, 0x0, 0x6, 0x100000001, "ddf2143150f67714dd46cf94aff85b428df05c7653853e037fec4ce53129aa26"}}) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r2 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x5, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000001c0)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)) [ 377.370119][T24639] binder: 24634:24639 ioctl c018620c 20000080 returned -22 15:06:15 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40045564, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 377.449426][T24648] binder: BINDER_SET_CONTEXT_MGR already set [ 377.449550][T24649] binder: 24634:24649 ioctl c018620c 20000080 returned -22 [ 377.456554][T24648] binder: 24634:24648 ioctl 40046207 0 returned -16 15:06:15 executing program 4: unshare(0xbfba3ff72accf483) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000480)=0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x3}, 0x8) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000340)=0xe8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="8d7e87eef32dfd24974f86f9070ee4317a94c7cef9849126a9c46e1676b01e26365aca9160b8483470fc2022da9a1542f21297e67450617fc39d48ee023e9a3b35c539689aa44942ee0585f3a48330353e219452360dc81e5cbe919b1b0b564ba0ac3b", 0x63, 0xcb0}, {&(0x7f0000000140)="2a39291d589d11c89217a90880dbb1c358a7e7d4e8f15367eff60ec62df828e09a353e5ee3d72c50e6b73f3afc13a64cb07f51f53c0132d945d255864d1d128efafebcea05f85c76d7071cb2356f27e55a1a1a40f3e51d8d3e50113891dcf08baaf706017b8e4a907e9dc07985f84ef0ed4eb00a360b0b47b14694853e4e653577f62ffa69962235e0788f6613361cb8cf47e86793accda1e66ef198d5e361e3827f1f6e21a834ad19e14079834ff18a9affe5a3a75fc991b44128606e", 0xbd, 0x1}], 0x800000, &(0x7f0000000380)={[{@journal_dev={'journal_dev', 0x3d, 0x81}}, {@noblock_validity='noblock_validity'}, {@mblk_io_submit='mblk_io_submit'}, {@nomblk_io_submit='nomblk_io_submit'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/snd/controlC#\x00'}}, {@euid_eq={'euid', 0x3d, r2}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@dont_hash='dont_hash'}, {@obj_role={'obj_role', 0x3d, '/dev/snd/controlC#\x00'}}]}) 15:06:15 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x20040, 0x0) unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) 15:06:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x3}) 15:06:15 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x900, 0x0, 0x0, 0x0, 0x0}}}) 15:06:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40049409, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 377.602783][T24661] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 377.622552][T24671] binder: 24668:24671 ioctl c018620c 20000080 returned -22 15:06:15 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0xa00, 0x0, 0x0, 0x0, 0x0}}}) 15:06:15 executing program 1: unshare(0x800) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = semget(0x1, 0x4, 0x40) semctl$IPC_INFO(r1, 0x3, 0x3, &(0x7f0000000040)=""/27) r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x101401) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x558b0bee9e6523d9, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x0, r3, 0x10, 0x1, @in={0x2, 0x4e23, @loopback}}}, 0xa0) semop(r1, &(0x7f0000000080)=[{0x7, 0x0, 0x1000}, {0x3, 0x95e, 0x800}, {0x3, 0x2, 0x800}, {0x7, 0x9, 0x800}, {0x7, 0x0, 0x1000}, {0x4, 0x7, 0x800}, {0x2, 0x40, 0x1800}], 0x7) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) arch_prctl$ARCH_GET_CPUID(0x1011) [ 377.673106][T24677] binder: 24668:24677 ioctl c018620c 20000080 returned -22 15:06:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x4}) 15:06:15 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x1, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="047603036003000013020000080000007c03000001011000000000000000000058e3168c656ae428b600"/297], 0x129) unshare(0x8000400) r1 = syz_open_dev$sndctrl(&(0x7f0000000200)='/dev/snd/controlC#\x00', 0x1000, 0x1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000380)={@reserved}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)) r3 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xe347, 0x80000) prctl$PR_GET_DUMPABLE(0x3) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0, 0x3}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r4, 0x5}, &(0x7f0000000300)=0x8) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x3) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000003c0)=@req={0x1, 0x4, 0x7, 0x8001}, 0x10) 15:06:15 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0xb00, 0x0, 0x0, 0x0, 0x0}}}) [ 377.794647][T24691] binder: 24688:24691 ioctl c018620c 20000080 returned -22 [ 377.833343][T24698] binder: 24688:24698 ioctl c018620c 20000080 returned -22 15:06:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x4008ae89, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:15 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:15 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0xc00, 0x0, 0x0, 0x0, 0x0}}}) 15:06:15 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x5, 0x8040) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:06:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x5}) 15:06:15 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0xd00, 0x0, 0x0, 0x0, 0x0}}}) 15:06:15 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0xe00, 0x0, 0x0, 0x0, 0x0}}}) 15:06:15 executing program 4: unshare(0x8000400) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x80000001, 0x100) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000540), &(0x7f0000000480)=0xb) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x2c, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x57bc, @ipv4={[], [], @multicast2}, 0xfc00000000000000}, @in={0x2, 0x4e23, @broadcast}]}, &(0x7f00000004c0)=0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000500)={r2, 0x5}, &(0x7f0000000580)=0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r0, 0x10, &(0x7f0000000340)={&(0x7f0000000240)=""/243, 0xf3, 0xffffffffffffffff}}, 0x10) syz_extract_tcp_res$synack(&(0x7f00000005c0), 0x1, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r0, 0x10, &(0x7f00000003c0)={&(0x7f0000000200)=""/11, 0xb, r3}}, 0x10) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x10, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000440)=0x20) [ 377.999638][T24718] binder: 24717:24718 ioctl c018620c 20000080 returned -22 [ 378.018033][T24720] binder: 24717:24720 ioctl c018620c 20000080 returned -22 15:06:16 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@remote, @empty, 0x0}, &(0x7f0000000140)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f00000004c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@local}}, &(0x7f00000008c0)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000003e80)={@mcast2, 0x0}, &(0x7f0000003ec0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000003f00)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000003f40)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000003f80)={'hwsim0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003fc0)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000040c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004100)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000004200)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f0000004240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000004280)=0x14, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004380)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000004480)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004580)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000004680)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004780)={{{@in=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000004880)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000005040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8002}, 0xc, &(0x7f0000005000)={&(0x7f00000048c0)={0x710, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x130, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xbc}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r5}, {0x140, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x250, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r11}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7ff0000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r13}, {0x21c, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x5d7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}]}}]}, 0x710}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) unshare(0x8000400) r16 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r16, 0xc0045540, &(0x7f0000000000)) 15:06:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x4008ae90, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x6}) 15:06:16 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x1100, 0x0, 0x0, 0x0, 0x0}}}) 15:06:16 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:16 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x2600, 0x8) write$P9_RLINK(r1, &(0x7f00000000c0)={0x7, 0x47, 0x2}, 0x7) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x101000, 0x0) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f0000000040)=0x3b04) 15:06:16 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x1200, 0x0, 0x0, 0x0, 0x0}}}) 15:06:16 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x7}) 15:06:16 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x2500, 0x0, 0x0, 0x0, 0x0}}}) [ 378.920054][T24750] binder: 24743:24750 ioctl c018620c 20000080 returned -22 [ 378.941152][T24758] binder: 24743:24758 ioctl c018620c 20000080 returned -22 15:06:16 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x7ba, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f0000000080)={0x0, {}, 0xfff, 0x1}) 15:06:16 executing program 4: unshare(0x8000400) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x82c40, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000200)={r1, 0x80000001, 0x20, 0xf1e, 0x80000001, 0x7, 0xffff}) prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x39a9fd6b, 0x8, 0x0, 0xc6e}, {0x9ec, 0x0, 0xde2, 0x4}]}) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, 0x0) 15:06:16 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x4000, 0x0, 0x0, 0x0, 0x0}}}) [ 379.024150][T24767] binder: 24763:24767 ioctl c018620c 20000080 returned -22 [ 379.044824][T24773] binder: 24763:24773 ioctl c018620c 20000080 returned -22 15:06:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x4010ae67, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x8}) 15:06:16 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x2) 15:06:16 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x5c00, 0x0, 0x0, 0x0, 0x0}}}) 15:06:16 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9, 0x80) write$P9_RWSTAT(r1, &(0x7f0000000080)={0x7, 0x7f, 0x2}, 0x7) 15:06:17 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x1000000, 0x0, 0x0, 0x0, 0x0}}}) 15:06:17 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x4, 0xfffffffffffffffa}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='tra,rfdno=\x00\x00\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x2, 0x20, 0x8000}}, 0x30) [ 379.210045][T24795] binder: 24786:24795 ioctl c018620c 20000080 returned -22 [ 379.236119][T24801] binder: 24786:24801 ioctl c018620c 20000080 returned -22 15:06:17 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x2000000, 0x0, 0x0, 0x0, 0x0}}}) 15:06:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x9}) 15:06:17 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:06:17 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x7) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000000c0)=0x3, 0x4) 15:06:17 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x3000000, 0x0, 0x0, 0x0, 0x0}}}) 15:06:17 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x4000000, 0x0, 0x0, 0x0, 0x0}}}) 15:06:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x4020940d, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:17 executing program 4: r0 = syz_open_dev$sndpcmc(0x0, 0x9, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, r1, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100000001}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfff}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x63}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) unshare(0x8000400) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f00000001c0)={0x4, 0x1ff, 0x0, 0x101, 0x8, 0x0, 0xa896}) [ 379.376524][T24816] binder: 24814:24816 ioctl c018620c 20000080 returned -22 [ 379.397755][T24823] binder: 24814:24823 ioctl c018620c 20000080 returned -22 15:06:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0xa}) 15:06:17 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xdbd4, 0xd0800) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000080)={0x1, 0x0, {0x4, 0x40, 0x1, 0x100000001}}) 15:06:17 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x5000000, 0x0, 0x0, 0x0, 0x0}}}) 15:06:17 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') msgget(0x3, 0x40) mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0xb}) [ 379.545068][T24841] binder: 24837:24841 ioctl c018620c 20000080 returned -22 [ 379.571042][T24851] binder: 24837:24851 ioctl c018620c 20000080 returned -22 15:06:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x4020ae46, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:17 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x40000, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f0000000080)="4f2b8038763b040604377f11c15e73767349d183452d31d7804118364c009c74df303a13aa5a7f71e9425ba47873d7f74a60a4b68513b05f1a5d92f805c1533ef2dfd615b5bf6cfa8f0497091d6f42dbfce5f0ddd8347f92f2b52aa37e64a78a0e67d5df1acd49c5a8fe0401afd0f69f575695e990c55e593500c1cfd6fe0ebcbbf6debc105846dbae6e87df4e5033fd"}, 0x10) unshare(0x8000400) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)) 15:06:17 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) splice(r0, &(0x7f0000000000)=0x38, r0, &(0x7f0000000040), 0x9, 0xa) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:06:17 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x6000000, 0x0, 0x0, 0x0, 0x0}}}) 15:06:17 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x7000000, 0x0, 0x0, 0x0, 0x0}}}) 15:06:17 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000180)={0x18, 0x0, 0x200000000003}, 0x18) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x7, &(0x7f00000001c0)=@raw=[@call={0x85, 0x0, 0x0, 0x22}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fff}, @alu={0x4, 0x200, 0xd, 0x5, 0x6, 0xfffffffffffffff4, 0x8}, @ldst={0x3, 0x3, 0x2, 0x3, 0x6, 0x6, 0xfffffffffffffffc}, @jmp={0x5, 0x8, 0x9, 0x3, 0xb, 0x18, 0x4}, @alu={0x4, 0x7ff, 0x2, 0xb, 0x1, 0xb0a861207217419d}], &(0x7f0000000280)='GPL\x00', 0xff, 0x0, 0x0, 0x41f00, 0x2, [], r3, 0x16, r2, 0x8, &(0x7f0000000380)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x6, 0x7, 0x8}, 0x10}, 0x70) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000600)={0x7, {{0x2, 0x4e21, @broadcast}}, 0x1, 0x1, [{{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}}]}, 0x110) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000140)={0x4}) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0xc}) [ 379.725676][T24863] binder: 24854:24863 ioctl c018620c 20000080 returned -22 [ 379.750169][T24879] binder: 24854:24879 ioctl c018620c 20000080 returned -22 15:06:17 executing program 4: unshare(0x8000400) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={r1, 0x0, 0x1ff, 0x20, 0x7}) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, 0x0) r3 = getpid() wait4(r3, &(0x7f0000000000), 0x40000005, &(0x7f0000000040)) 15:06:17 executing program 1: unshare(0x8000400) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=0x0) ptrace$getsig(0x4202, r1, 0x4c39, &(0x7f0000000280)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {r2, 0x2, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @rand_addr=0xb2a}, @in6={0xa, 0x4e23, 0x8, @rand_addr="470dad4219f798fa8ea0d09b4d06e14b", 0xfffffffffffffffd}}}, 0x118) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000380)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000500)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@initdev}}, &(0x7f0000000600)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x30a00084}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x9c, r3, 0x543923ec8419012, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x80, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x4) r6 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045540, &(0x7f0000000000)) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000300)=0x3, 0x4) 15:06:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x4068aea3, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:17 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x8000000, 0x0, 0x0, 0x0, 0x0}}}) [ 379.842663][T24891] binder: 24886:24891 ioctl c018620c 20000080 returned -22 [ 379.857012][T24893] binder: 24886:24893 ioctl c018620c 20000080 returned -22 15:06:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0xd}) 15:06:17 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x20040, 0x0) openat$cgroup_ro(r1, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40000, 0x0) r3 = getpgid(0xffffffffffffffff) fcntl$setown(r2, 0x8, r3) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000000c0)={r4, 0x6}, &(0x7f0000000100)=0x8) 15:06:17 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x9000000, 0x0, 0x0, 0x0, 0x0}}}) 15:06:17 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) 15:06:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0xe}) [ 380.026058][T24911] binder: 24906:24911 ioctl c018620c 20000080 returned -22 [ 380.043644][T24922] binder: 24906:24922 ioctl c018620c 20000080 returned -22 15:06:17 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) lseek(r0, 0x0, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mknod(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:17 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0xa000000, 0x0, 0x0, 0x0, 0x0}}}) 15:06:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x4090ae82, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:17 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) poll(&(0x7f0000000000)=[{r0, 0x200}, {r0, 0x200}, {r0, 0x20}, {r0, 0xbbe97105b161c0ca}], 0x4, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x10100000000}) r2 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) sendmsg$nl_netfilter(r2, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800a804}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x290, 0x10, 0x2, 0x2, 0x70bd2d, 0x25dfdbfd, {0xb, 0x0, 0x7}, [@generic="9cd29d7f91da369f1a1175bc12eed2e40fe1bc9dd98564e1288361489f3dfd5dd488a7aad286920ee496439dcf62e9dac898f4758719af7bb584b269e6206aa981feaf8eff46d03a9d18dc9e599b2c31ed0d7b2de4a6ab2731b24551be38fa308a9f91ca00149167c09ca18ef2199064df949ce9fd49a91492465b", @generic="283c323762147b65d69631355ff43327c89328f99b8df28cb7be22c04f1ada3e5949384b62b0b73c7773fff19174469cae5b23df34fa941cee6e0d3ac741c6cc97f344f7d93fe776a2945e3dececdcc141742cecf7fa0ea6698716060c2bbaa6659aecd7c85c95b5b293a19afd9346827446a3e1dd2e5673aeea70d03976d4f4b2b440dfcb20f528d8fd2d705ab057209e00bb9e20cfd994f37cfac431762591b709fa66ec507f1e5db909473f32cc", @generic="48a7d440619dfe050348a4997653a1f2afc3afc46a9957b2338c83633fabc37e1d8cd568742c266248268e792edb33a990f51e1c88310ec6a7a2ea720cd6de26fa83996e0e5a87e05df9c6f0c4c3cbb712c0da53ac1e", @typed={0xc, 0x5, @u64=0x7c00000000}, @generic="da202cd7228709c94eb171150209ae3e1c222127aa624d6d9733245bdda748829cb20d2939efdaeac9ee79db0fd5dfcd57d7d643a2eb023f5cdf8edad381a998af23b301870cdf7aaa7336d27d7376f74c37a2debea1aa4d67a75fca272b9ed03acb049fa2b2a1c6bf1d2317c4cfe0eb327798931ee929c70829baba22dd0afcf68203fc76b66fcae83614abe3fb65ea4bd230b3fb24d2c4ba341854b98d496d84dec823f9be236f7929677834e5a9071ec82de074114b1f380758f0a837145a7e458c9030265f50bb0c6742abcb4074bee3a16800bf428a4c92f8a2ec13364909eb89af0933b2aea22e6bf4a0686c"]}, 0x290}, 0x1, 0x0, 0x0, 0x4000}, 0x4004010) 15:06:17 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vga_arbiter\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000003140)={0x0, @in6={{0xa, 0x4e23, 0x6, @remote, 0xdb66}}, 0x4, 0x0, 0x7, 0x9, 0x1}, &(0x7f0000003200)=0x98) sendmmsg$inet_sctp(r1, &(0x7f0000003300)=[{&(0x7f0000000780)=@in6={0xa, 0x4e23, 0x7, @loopback, 0x3}, 0x1c, &(0x7f0000002b80)=[{&(0x7f00000007c0)="e41f2b8486265ff5b3a5f16c098e7e8906da5d7886a946d7564d96c44890f065d339bdd99424336cad0aab89b30eaee649a8c2deb42d44d9b302c85431dbdbfc52d2a09034cb10277fa0cf39acf4d7e6343d32c518d83058d7816fb6dc71f3d50c06b96272816d47d79cda521745340af363c4a20939241e8d3a598206f13dfbc770618c10e0110f85afee7cd9f2e651c82c9ba3ab4380ee2001ed81423807dc9741349ec82252c0eaa536c6b6458f669067df82576067639e39bcfc", 0xbc}, {&(0x7f0000000880)="dda0549163d1dfd57d2a8e83b3c5adb881f25402b5cec462017c0f292e7c", 0x1e}, {&(0x7f00000008c0)="9b63afcc3250f71b21480e0a69ba2749f1ee9430090942a82a1a2bcd7bff88", 0x1f}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="afa64e39bdfce7f12dbcfec612769c3f953c975f96ae43ccf7", 0x19}, {&(0x7f0000001940)="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", 0xfb}, {&(0x7f0000001a40)="e3d6631487004e1c67b17741f490d592e1260b07462562523f614bf012fb58a1bedf3808b72c74f49ad35cfbc5ba83b779e03bb02a20cc0a3764b5", 0x3b}, {&(0x7f0000001a80)="7c978519304b7d244f874b7841e8552f37b3d20918c85dfd0b37ef90a356ee3e730a0ea67a2ff42813", 0x29}, {&(0x7f0000001ac0)="e4eb6289e8867304b2b4528d52d723a4c85900bcc46227e483504d6ccfaec7f213c431f1197597d4c77c696d580a4d79107ee5f38c513ca0abaaa9f0cc2a249949f91986e04ed131717f1e7e8b4a651bba1fddaf714b82ddf31dca49e46d93a7b28a675d0db2c510d9393938813aad11a597c906b7743856697dd3ee1457681df7bf05fea255fa1d8bee2a0e3e16b4d7a1931c21d71c040e0251637e57c1f0831f996280e24b62955e71c444c29a8c064719a6c70aed59c87fa9407eaf5145caa6680e9b4b23dca6949d3e6e5d3db2c70e3d46e3bd2c86f19b6fc9d9c61a43f5609db25ee57a5e988fcc8a1261e6e7e12684b44d6160af08952d139151d70a02e89154ad34e482c41b4030d23f411eebb1de27d106bb7d0ff949a67e1f3ce9cf1d568efef84260d55e10c116fe513cfcb7dcbefae9d2d06e5b11cb724b63f4285e2a8e4002b0d18f2bc2142bbce496e8410c5c5cd1bd6d68a7315915b86c67e92345d8003a33c2df9f2bae3fbcf3f20dca5f16e9a35cf2adbf2b2435841ae82c8799d642d5de7de2afac6116029a12f5c2ae5d46b6c29538558bffb313bf5358dfbfe134c79e1ac36dfc7a1ef5075683b4d3bc36a066b1856d8e05f381c9a4f9ca5e3f3cd46c4e227c45d28f07e7e7d60db99f32fa9cd58676047d1c720d5017b920617dd93db377d9e2187f4d0df4b51475619b99c851c1ac17cdd92fc8985f231b148adf4386bb0fdb5275e4913856f2fa8cad4ef3c4bbccd26ca4c7d9157be67699ab89809cb8bf246a728857a09f914e7f0a967e5b9021dc35109d49c97de40d0cf5aebbdce936b90ed6aa3af4987f4c69014a11564bbe20ea27f343607ad4a49544e245c21f1cf9bfabeddb112f4224019d6361184530ec977ded83e506d2fc51305f3a31ba2a29987c3fd194f9aa6d8d6393127e288c599c2d4026345befdc353d9587f306b8740a8bfd78da0d77bd6e5380497b0de138465e8b89af090e1b31cae965768abea7c6872e2fda49909465f6b00cc2b89f5033e7e76f04df9612b84188f4b96174a012bb3227e4f2aad5423899dd4bb5c93c6170413d91134e77f543e7fb5db033705b8f73bbcee078cae31e77390b05654f5902c7295bdfbf0096d8d02a9a58590a41cae279a123b82d5a56d71071382789fd308ccc4d013c43ad6585f416eb5dacef96f7852bf001985b6e565dc37216494b60adb53cdc29d3f99ee6cdd6728ceef22a69112e1159fc769c006055bb69c378dfe7d7ab2f85d123fadfc3377656f20396cf2a7f9de390f73b0330a88dcbf59ce4df34faf32338ad8f1364a1aaeba1855912d60f76684b3807fb02f09b381189c2f86562fe534fbda98642291b39907702527e967a692405d426dc1336b5e2dc4aa1165c62e367d63bd42eef726401663681fa65c78ef3596e031d2d0fed7453267a867fc4b18b0a0ad7b4a1b9b2435b577898c045e70bae95a99880cb3e3864dd5918b4993eb706b78bc55b874b37df61e9ae0068995e339174a6b1115dd626b3d732905a4419aa33948b884b1a40094a3e818262769edf462dd7b5c3032a851e5f8fe44f0c16223bb1dd18d34d69be30f1e60b2fd7b6814891aa89a244f893b9047e8c1488f3a7001d9c1814dfd335013787763c7e05dcb9783b5458538c02a0e099a763abef86a5f6df19de46dacc461ed3cc79408d39f8a16ab060cad6c8789c7251e41afe901b4cbd220c94f7bc779d0994a52254ec200a9e885a08d10e658637846877ba54650e57963d5f4e5f1c1c360f06d070ca6a4d53577ccc012ea65db65654a4c331eef6f724e683f7ff519f5594f68120de8a5353c183f1f8a2e7e028a1ce6119d697fb1f223f7204bf920d3461452ea4aeb7c34d7efad77e1ec6d0ee8e977a52a0bc862e0825b2709159dabb243b2f87524411df4151887cb04a88cf95d1d96ce1c6428b87e9345fbaf9d92d6f5d19ef359a74bde27d23a76c855a4cc6ca306d8f52732c03e2ad85c27633a6a24541e24a7f108fd4409edd04c2ce8489b3802b6a62ae8f27b1044222f9250c8aa9fc065ddd03ba522f27923a7afb5bb0f64d3a2b1fc578dc3c4ebc00328aca84abe0919a917ba1798bcf0cd7a44e49391a77464ecce44115df4c0b67dd8f06d467f96ff55795b6e46133fc323e51162a333f7e00deceeefe421d525a417d6d2dbea0ddca2cf0e6925cf70dbaf7b60153e7463ec965cd7d6efb1369fbf46577a30af367edfc730e56d8224f4f61a9699645ad05e083e5b3c0e2fb3eb5a0c135b51c8ad3c1a3d9b33df59a06960ce05a7fd6c63a912af8b399f495e3d329e349157ddc88018a5fc357c521983c13118ec7ae1420a7c060d0452db5020855345ab45f2964fe03f8243d60b8d3399aa9c300e75fec16de0b98daef80a828424450e600516072983964522bdc8a6081890a5b96bf1f420fba1c8e9f99e6c22b61078b87acce82bdca4f1a2034e27605b016df0d9e8891b82e94b6595f050e0e2cc585b7205400c7083899696b4fab4876366a7f578014ec37ae952b3bff4251121d8f6ac07976a2487e4ec918e5cbf7b4ce5148bc31f816e912f32754b48458014ba6763b335fd40455d876cc21ce812ceadf1ac548ccfc540a4bb526816c6b98b97067b5786f2dd63d2f8de32ae51257178a59dfbbc2b79bfe99c0ed99573562745001f7a5c4e57dba368bec37cab35184187696b21ffdaa8202cacae12b494873d4f553c3d86b0edeca1dacd4c9d943c2f22fb2c9208532014aefd04a2d1456cdff306eb23027be4ce9626c31f3b011d921c06c3227b424c04d868a97833aaff8677586f4b9b6cc9c99b247056b1c7727d2bcf53b20f6e9cd31c7a6f758a9ab535c21f0e808a14703d4553663c8dc92b57905e38bb6ae5630e99eab8e48d15401df6686b55d18a789debcbd757a3eadc313dda4ec993c1a24bb9d86191855c1397932d957c274b8639ec2342b58d3a13a651ebc8a0043151a35248134ff5d870051d98abba061b2396b7fb259c0bd81c2edb0e5b6563e1cd57f4ce03e6c627f84d52a36a9e8b39d2e5a91cea8910e37b55b9640c10b9263ebb54af4e82c302af48f0bdd83af930b005a25191943d5b3dfb881fb3346be1ecfc0c65b62758b0ff9df7c03736dfa386ff6e4f566560d6ed6a4c56a00dc28da57417f463f5ad6fa2656fe486ebd86777b866e1fc6aa94c977a77c962db51a8611ca4fb4505ba0772c87fb20f43f191a262de99bdf92016dac3abb0d06c6133a22f354fd5fa60c2c79b5ca655523f012a85bc6280b0fd2dcb0979f86c8c41734362978a280a1db46394bc0ac27a9638b3445f07ffc1fc86ca14617ba6a0ff1086fbcfdc84239849926f28672bc51097baf83a0732d7c7694f180a9599fa7d7104765a77ef5abd3da112dae295c589fbd6a9e9832ab352031d1cc925b2fc0d2c69155ae455300925ade2c97ca9f950fe73b61816cc369581a0a0f5453a97f049d57b681a68584db8e23466efa6a601dfb4d5ca4f14074cca29953be38c52a08f8d230e47e4d9cb881bed79c6b2fe559e311e22eb611f2ab5b129dedb0686b68087a4550504b10f2089d6dfa3f6f98c3f8512f77237e299f63695c39c54179711a6516fd33c8f3e8cf6cdca86d3d2e856024845f85f00fb7e64e3a21fd8c0a48b05f2fe55dab46bfca44261d94407f91b3cee8717d0e9d180318f541fbcc1d9231bcfcebe8d8a5cb1bc8c23600c20c57f4dcc4f361911ecc3a122cd511296aa839654d2e2ebcffd1777458075eb6b74f61ee04221cf9335897eeefd19ac39972c3780824b14a01f659aa03a6ea1ea37935645489da9e26a1ccbffce922cae2ab2a1c5fe3b66c21f1586ce3990ff40b323d09d669da6742069e7cd42b2450a87cf27b9a3ce25da3f45178c38a682079c8365263fe8c0f5cd36edd55175d77c14845985cd716e2411da0ea1e7a7160fb7769639f5f699321c4d1c11f682d852db792b8188ad99809399842e65fac323bb2e111490c648ad661be743247a9496608dca1a3cb9edfc709de3c4c8290bb1382c337ce4fac08400f3772c0bc4b495a06a37e1d9dc2d8ae15458b1416353be638b95ea698cb7ad913775583cf3dc6d64679e831c252079d4b46efdc922b35197c50952c753a3e8edb810f13ded023cdeb868b67a6a3bed57991e2ae9bf9432724a709688821d0136d98a0c2be10fa0face9f1621ccb1422c0c8be466ea573d35e5aadbdd31132e2b5e3d9153d38b7cc1c7aa2b0555e863a1d17cb2afd887cef65e79113cce8177ed4c61e0a1fb929f23f598c01a9528ca1b6b19b751fb6f386a983a61ac99a803a5b27af3f7224f16498cf20e446e4ed6eafe8182f19d28ea22904ef5d09cb4e65acd2ec011e25d73b338511f5c8590143582095109e778ea3491abfcf5adc918b221c7c2afdebfb241bfc09871e9bbdfb48ada46c002be40c5257d2f5411ceb78127ea1c5d957afac009ed05cd961be62a97f54fef10d6b4b366afe47b6b361bf83998011da1f367dcadc807a892180fd5920a72ca71f4fb581ba6efde4b440d6d8928723aa6817d658e1a4f55060c69c2e365ad7c2801d510488ade4c3adeae05cd2f5945797101c0cc3a8dceb901004592a3be174f4f0072d0b7ec5cd4f91ded10c069dc4c121efb3def0b5c417e90ed77ec9c4f43e5da328a3ad15dc48782e6e76ad8497ea989eb1c6e38ad035bb7193c70b494e663023a2a1a689bfad27f30d2cbc44546a7b0b95a49f2c3f676e43b62496766a3f9ea07286e90f82d7b5d4b23575ac6e1538d7e8e27797e63d1eae2b0c3af79b5de6738d7e9c68f1b1bc81cd09cc0c9a86599b9f0b6f5dcfda262410546501720c92628d11e8dcc1643720201db29ca73a747428d80dc9e6967a6b9dc0e503a19532b84101aad02791619035cbe06478f179555800d70bbfbd63561c64a69d59e54e4f90b6883cc0cb3ad91384ba2914895763caecba7036ca4b35274caf87c08cb18d6da2ef1e16291fec85693e1ab197c1db8db97225698b240b70b4baa29608e84697bd4678d6952a57a6784187d5ee4d098c1905cae1f06a39f72dbc1c290bbdf7f95e83b79b031771556ddd488206324c9e4452fce745e7450bd856b9ccd159e1f326b76b1556e54209d52fb5309432ddf9fe8792620f796b854dab9563619ce15b8ffc4031667879d5db4cac1c8cc17f42ae63e24dde206c69e539e6df292982a08f6879281d3fd2f7fd5684264a48c6e79f07b035c2a79040b52e501336ddbd8ee8a868a677219d871aeae2ee9db94eb54a89c86be48daa3dd938e1905dfeccac2bf61928ab3575d5be2a80f509924eee6013629d7f2de3596883ab377fd58ecdc93370239889cfcea75d89a6f6097b69ed1d793f9727780c2d95e63a004c4396fbb756daaa62fd9df8d7650aaddf40273bb297d99d31588d004f0308f24052923afec978cbd0c70becc113b33a27cabaa13a6e47ac07719b904f513c720d60571d0a1f4b7924b95112751a7beec00cbfe3dc7c82fe64bdc1d39924f38d375a81a71464dada3ee7e233d1427ffc004da83f19cd75edd80b41e1249a124cb06321e837228f75d22d9825298d505b34be273fbca7e09760f6f68d73c0c4c5eabb4cd0af8988eb9659c5b5629c654b0ec6a0067f8ea5c4254caac2118540d51047cd52b37a7a27655ab40ae5d267e9f89ed81c88c5f34ed046ca3abf9c8c876b2060d63dd4c6d59f4d010b042ae6abf4fe66db9219069e04278fb4abff1ed9af4a7c14be440ba1285c44ed920ed7", 0x1000}, {&(0x7f0000002ac0)="436e0776143e007e614495314a58fd6ff6b0777362137745dd472a638d60550b3e4caa3593c300f814ba7381a065c8946caabf519866998ddadaab00e8fe4e9b19c94273aa6f85956d0bb40b22633457ca065cb311ac560b35025b6f134197c3748771f554451435159e4ffb4d3df3f9ab2bf6b5d08d5f2d791e29a6a144994ea873e41f6877bade05eedff65eaa3c28e4deabd2fec5d969cb2643a454f6a3e4bad4631198", 0xa5}], 0xa, &(0x7f0000002c40)=[@dstaddrv6={0x20, 0x84, 0x8, @empty}, @authinfo={0x18, 0x84, 0x6, {0x8}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0xfffffffffffff50b}, @authinfo={0x18, 0x84, 0x6, {0x8}}], 0x68, 0x20000000}, {&(0x7f0000002cc0)=@in6={0xa, 0x4e23, 0x9b8, @local, 0xa2}, 0x1c, &(0x7f00000030c0)=[{&(0x7f0000002d00)="4e53bf678672976d65df032f5b1761c46982e60f433991283b8c427a97999cd827649506dd2928984b65357ccf226bd58003d039872f214ab3d53c8bc48b3bdda7ebd00a1215f390f7d1ad60f361e363ee23d472bdcece1d92cf9f72431a78a9e031828923ffe9c0dea5ba70c0e5013542e496d0201d1d0c6c238d4571bfb902a35c937c9e35504305e30b8406636153932afd7250eac0250d1f21d6b203357507ad9be69a3d62d8fffabec86f6619afa4f16bb2922f988c300bf07b095ae41fb6fc0bc15a2dd063829b3d654a37318b51248bce38", 0xd5}, {&(0x7f0000002e00)="e9394f77b3cbc2fe4ed6a86e69bc9fcd2980dc4c90807ac265753b2d53c4762bc92cf4697b4120304f93d9eae87648432a1755b7e083aad1909a246ef00e5e2ec72b9566ccc1636f8a0988669de9fdb675e54e5300d76fac1ff4b6488058518ef200701b4f370c6473581f58fe7b7ef2917e0ffb285113a6fd07c10ddfd8ea92def9dcb28bd90dd76154ff678cc46cd24522844b7162f327f45d4640ce2ea0111c23934c7f989957db85529e47355b1d8bce672377bb17b6719a0c0af00149c888e32b36e794c3b75ed277a8a8e4adc11d22d9955852", 0xd6}, {&(0x7f0000002f00)="74585a3833a3fb65da", 0x9}, {&(0x7f0000002f40)="5864674abebbae263d9f1e229e17a5872bbd1877800268746cda276eb89e98d45d78c94fc6acfdc48c84000bfed89f720108b5f8fa019e243a49fefaa29e06f332c513110de91f4cbc3b310acf1ad45fdaeb5d58347284bce73c21adf63d985b35794eb54a6e877f8910b54a6d9ce02ccbc291d9dfa5cf1892063cb19ddbbc8012d9c3ff1525eb4ad9f3e55e32ee61e14ac879fda199b609e1ae9eb9d59ecee10f2761fabc6e488076455072e22938c9ed9d765a486443a01deca85e879c1be50e3b1a8b89632369f6", 0xc9}, {&(0x7f0000003040)="529f626fea6d1a5aabbfdace69800ff3c85a2caeb299bfa242a41e20e391419936431e98caf7b2da3244347676024090bd941dafd0fc482f8bfd7c5a21f382a1204b954fca8ea64ce08fdccb434a0c41afe38864402e61740afda19dc5afe00a7a3ca5fb36b00cf34c39fce784b1921f2dd48aa2a8760f", 0x77}], 0x5, &(0x7f0000003240)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x34}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @authinfo={0x18, 0x84, 0x6, {0x9}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x8, 0x3, 0x5000000000000, r2}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr="2c5124d8b60f8c7f518ce0b7fb1e2a5f"}], 0x88, 0x40}], 0x2, 0x10) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) 15:06:17 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0xb000000, 0x0, 0x0, 0x0, 0x0}}}) [ 380.180569][T24937] binder: 24934:24937 ioctl c018620c 20000080 returned -22 [ 380.211814][T24943] binder: 24934:24943 ioctl c018620c 20000080 returned -22 15:06:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x10}) 15:06:18 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0xc000000, 0x0, 0x0, 0x0, 0x0}}}) 15:06:18 executing program 4: unshare(0x8000400) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8040, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000040)) chmod(&(0x7f00000000c0)='./file0\x00', 0xeebe888747ae2a17) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080)=0x4, 0x4) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, 0x0) 15:06:18 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x4e, 0x800) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000080)={0x4, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1, 0x8, [{{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}}, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e23, @rand_addr=0x1}}, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e22, @multicast2}}]}, 0x490) 15:06:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x4138ae84, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:18 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0xd000000, 0x0, 0x0, 0x0, 0x0}}}) [ 380.338453][T24961] binder: 24958:24961 ioctl c018620c 20000080 returned -22 15:06:18 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mkdir(&(0x7f0000000140)='./file0\x00', 0x110) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff01800000082ebfad67b135bb20d79186b6debc4879e97ef6"], 0x15) r2 = dup(r1) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000080)=0x10000) write$FUSE_BMAP(r2, &(0x7f0000000180)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f00000004c0)={0xa0, 0xfffffffffffffff5, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x10002}}}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') 15:06:18 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) 15:06:18 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0xe000000, 0x0, 0x0, 0x0, 0x0}}}) 15:06:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x11}) [ 380.420120][T24968] binder: 24958:24968 ioctl c018620c 20000080 returned -22 15:06:18 executing program 4: unshare(0x8000400) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200000, 0x0) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x5f, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xb5, 0x800) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x40, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x5, 0x8000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:06:18 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x10000000, 0x0, 0x0, 0x0, 0x0}}}) 15:06:18 executing program 1: unshare(0x4000000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)) 15:06:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x800454d2, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 380.523910][T24989] binder: 24980:24989 ioctl c018620c 20000080 returned -22 [ 380.548175][T24993] binder: 24980:24993 ioctl c018620c 20000080 returned -22 15:06:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x12}) 15:06:18 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) getpgrp(r1) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80, 0x6c73c2ac08b7780a) openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x8200, 0x0) 15:06:18 executing program 1: unshare(0x8000400) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x12b000, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000002c0)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x40302, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x4, 0x3, 0xccfc, 0xff, 0xffffffffffff8001}, &(0x7f0000000200)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000300)={0x6}, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000240)={r2, 0x81, 0x5e, "1eaf133d6901ea806c14630d9eaa747d582f0ad64f563f3d31b838424b0ed7b42931bb2a7b787675964dd71b116c144860848a606794638bce26b854353d7ef5629714ead7a657840c50f5b3adddddc32bb1368744ec52b57901240f8f5d"}, 0x66) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000400)='/proc/capi/capi20\x00', 0x2000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000080)={0x8, 0x2a8d, 0x6, 0x9, 0x10001, 0x9, 0x2, 0x7f, 0x40, 0x8cb, 0x7}, 0xb) 15:06:18 executing program 4: unshare(0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:06:18 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000180)={0x4, 0xc5e1, 0x8000, 0x8000}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdn/=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000140)={0x4, [0x0, 0x6ff1, 0x80, 0x200]}, 0xc) 15:06:18 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x11000000, 0x0, 0x0, 0x0, 0x0}}}) [ 380.701036][T25016] binder: 25008:25016 ioctl c018620c 20000080 returned -22 15:06:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x80086301, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:18 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000180)=0x2) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) dup(r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000080)={0x0, 0x2, 'client0\x00', 0xcbef5f413a5fdd17, "d25fab95d48ef457", "6384aaa79f439cae541404ac859b8c6ea18d3d5b60c1cd85286c16f944b680b4", 0x3, 0x2}) [ 380.761407][T25025] binder: 25008:25025 ioctl c018620c 20000080 returned -22 [ 380.778573][T25024] 9pnet: Insufficient options for proto=fd 15:06:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x25}) 15:06:18 executing program 4: unshare(0x8000000) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:06:18 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x12000000, 0x0, 0x0, 0x0, 0x0}}}) [ 380.843597][T25037] 9pnet: Insufficient options for proto=fd 15:06:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x48}) [ 380.900975][T25046] binder: 25039:25046 ioctl c018620c 20000080 returned -22 [ 380.923663][T25046] binder: BINDER_SET_CONTEXT_MGR already set [ 380.930003][T25050] binder: 25039:25050 ioctl c018620c 20000080 returned -22 [ 380.938124][T25046] binder: 25039:25046 ioctl 40046207 0 returned -16 15:06:18 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x25000000, 0x0, 0x0, 0x0, 0x0}}}) 15:06:18 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$poke(0x5, r1, &(0x7f0000000040), 0x6) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:06:18 executing program 1: unshare(0x8000400) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x100) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$TIOCNXCL(r0, 0x540d) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000040)) 15:06:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x80108906, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 381.079739][T25072] binder: 25055:25072 ioctl c018620c 20000080 returned -22 [ 381.184203][T25072] binder: 25055:25072 ioctl c018620c 20000080 returned -22 [ 382.036158][ T157] device bridge_slave_1 left promiscuous mode [ 382.042336][ T157] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.096062][ T157] device bridge_slave_0 left promiscuous mode [ 382.102248][ T157] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.715662][ T157] device hsr_slave_0 left promiscuous mode [ 382.765564][ T157] device hsr_slave_1 left promiscuous mode [ 382.809837][ T157] team0 (unregistering): Port device team_slave_1 removed [ 382.819190][ T157] team0 (unregistering): Port device team_slave_0 removed [ 382.828921][ T157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.857887][ T157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.909123][ T157] bond0 (unregistering): Released all slaves [ 382.983694][T25083] IPVS: ftp: loaded support on port[0] = 21 [ 383.023612][T25083] chnl_net:caif_netlink_parms(): no params data found [ 383.043171][T25083] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.050652][T25083] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.058618][T25083] device bridge_slave_0 entered promiscuous mode [ 383.065844][T25083] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.072984][T25083] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.080561][T25083] device bridge_slave_1 entered promiscuous mode [ 383.093760][T25083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.104493][T25083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.119488][T25083] team0: Port device team_slave_0 added [ 383.126969][T25083] team0: Port device team_slave_1 added [ 383.187454][T25083] device hsr_slave_0 entered promiscuous mode [ 383.235722][T25083] device hsr_slave_1 entered promiscuous mode [ 383.342231][T25083] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.349384][T25083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.356721][T25083] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.363757][T25083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.398938][T25083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.414632][ T9257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 383.423055][ T9257] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.433671][ T9257] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.444294][T25083] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.458027][ T9257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 383.469418][ T9257] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.476587][ T9257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.499529][ T9278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 383.508712][ T9278] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.515785][ T9278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.527440][ T9278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 383.538767][ T9278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 383.547519][ T9278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 383.564893][T25083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 383.582002][T25083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 383.590919][ T9257] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 383.600241][ T9257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 383.616580][T25083] 8021q: adding VLAN 0 to HW filter on device batadv0 15:06:21 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r3 = geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getuid() syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x1000, 0x4, &(0x7f0000000600)=[{&(0x7f0000000280)="ebefbd3b12b1d6ddc56379712899b3f0dfe57185d54ff114198331d8ee069909676479594b4d190f6ef64364f06a1c290a6f494920066f82e28c5179952c331f1774ec605fc87c38315a6bb1dd7b", 0x4e, 0xe2}, {&(0x7f00000004c0)="d5673fbb1373f91a0df844ed3d433491972b82b3b728d8389a719059881c3f004802eb4fe65739d9b6725e621e2ed93db79a0982b7af749a9e8cd467a2ddfb48199e41b9648dc7e429e403e11ff0bd84225cd6a889bce56be0c3ab12edd3ce1a3dbeb4f8e1821ba19a178a9b6b2178fa13280bd69e357d32bd7c43e84c26b1069be0923b405526337cd1af14b9b6a44f7bce5fe7cdc3", 0x96, 0xfff}, {&(0x7f00000001c0)="c3059e4c04c261adff58", 0xa, 0x400}, {&(0x7f0000000340)="4ddd302897ce6dfc55b694a4cefc32d9d9324a3b61afc21533ecd16f6e42a378b006fd2784edf3f6b0db0c22cad0ce66ea5c59957ec6897e477fd32c6056f52f5e26", 0x42}], 0x8000, &(0x7f0000000700)={[], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '9p\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '9p\x00'}}, {@fowner_gt={'fowner>', r3}}, {@fowner_lt={'fowner<', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x33, 0x38, 0x63, 0x77, 0x34, 0x62, 0x8c828aac23b9d730], 0x2d, [0x37, 0x34, 0x34, 0x39], 0x2d, [0x37, 0x34, 0x37, 0x66], 0x2d, [0x38, 0x32, 0x34, 0x36], 0x2d, [0x61, 0x34, 0x66, 0x30, 0x32, 0x38, 0x7b, 0x35]}}}, {@uid_gt={'uid>', r5}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@appraise_type='appraise_type=imasig'}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x2) 15:06:21 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x40000000, 0x0, 0x0, 0x0, 0x0}}}) 15:06:21 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x240) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000080), 0x4) unshare(0x8000400) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2787c5f7cf647028, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, 0x0) 15:06:21 executing program 1: unshare(0x32000c00) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) 15:06:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x4c}) 15:06:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x80108907, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 383.657065][T25091] 9pnet: Insufficient options for proto=fd [ 383.667491][T25093] 9pnet: Insufficient options for proto=fd 15:06:21 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x5c000000, 0x0, 0x0, 0x0, 0x0}}}) 15:06:21 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000100)=r2) chmod(&(0x7f0000000000)='./file0\x00', 0x6) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)) [ 383.710600][T25100] binder: 25094:25100 ioctl c018620c 20000080 returned -22 15:06:21 executing program 4: syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x5, 0x40000) unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:06:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8138ae83, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:21 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x1000000000000, 0x0, 0x0, 0x0, 0x0}}}) [ 383.783563][T25116] binder: 25094:25116 ioctl c018620c 20000080 returned -22 15:06:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x5c}) [ 383.945035][T25136] binder: 25134:25136 ioctl c018620c 20000080 returned -22 15:06:21 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000050323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0xf, 0x5, "ad02f523f8d635e9de8528d612a6ee62c0cd1f342b5a1eaa21f39ea8fc36460c7b815b9446027402b6d639f8e61af0830eb5fd976a98dc156897bd9d0eda8baf", "c55432727fe33628b3309c84ab8fa6889a2c459e3e4a4de9f63d5a9a2c426825", [0x42, 0x8]}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:21 executing program 1: unshare(0x500) sysfs$3(0x3) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400080, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000080)={0xa, 0x4, 0x3ff, 0x1, 'syz0\x00', 0x4}) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000040)) 15:06:21 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x100000000000000, 0x0, 0x0, 0x0, 0x0}}}) 15:06:21 executing program 4: unshare(0x8000400) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10, 0x80800) r1 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x800) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000200)={0x686f, 0x9, 0x2}) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000080)=""/252, &(0x7f0000000180)=0xfc) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000240)={'ah\x00'}, &(0x7f0000000280)=0x1e) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, 0x0) 15:06:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0xc0045878, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:21 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x200000000000000, 0x0, 0x0, 0x0, 0x0}}}) 15:06:21 executing program 1: unshare(0x8000400) r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x4, 0x54202) getsockopt$inet_dccp_buf(r0, 0x21, 0xc0, &(0x7f0000000080)=""/198, &(0x7f0000000180)=0xc6) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)) [ 384.004020][T25136] binder: BINDER_SET_CONTEXT_MGR already set [ 384.031142][T25144] binder: 25134:25144 ioctl c018620c 20000080 returned -22 [ 384.041462][T25136] binder: 25134:25136 ioctl 40046207 0 returned -16 15:06:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x60}) 15:06:21 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x300000000000000, 0x0, 0x0, 0x0, 0x0}}}) 15:06:21 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000540)='/dev/vcs#\x00', 0x9, 0xa2000) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000580)={{0x1, @local, 0x4e22, 0x0, 'sh\x00', 0x2b, 0x9, 0x42}, {@multicast2, 0x4e20, 0x3, 0x4, 0x40, 0xaee}}, 0x44) unshare(0x8000400) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0x8d2, 0x70d001) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x4, 0x4) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xffffffffffffffab) 15:06:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0xc0045878, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:21 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x400000000000000, 0x0, 0x0, 0x0, 0x0}}}) [ 384.162935][T25167] binder: 25163:25167 ioctl c018620c 20000080 returned -22 [ 384.183775][T25173] binder: 25163:25173 ioctl c018620c 20000080 returned -22 15:06:22 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESHEX=r1]], 0x8) r2 = dup(r1) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f0000000140)={0x80000001, 0x7, 0x3ff}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfo=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x68}) 15:06:22 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x500000000000000, 0x0, 0x0, 0x0, 0x0}}}) 15:06:22 executing program 1: unshare(0x8000400) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000040)={0x0, {0xcb, 0xb3}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000080)={0xfffffffffffffffd, 0x0, 'client0\x00', 0x2, "5bbc9f5bfb3b4ac4", "694916fc4ee060f7a33c5e88fc606bfc915386a6ee0c775aaa21311ec1efa433", 0x3}) prctl$PR_SET_DUMPABLE(0x4, 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000180)={0x5, 0x1, 'client0\x00', 0xffffffff80000000, "ffc79e18e55ed5a1", "82581dae5ff78cae746d5cf485ec633ac3b07f678539801f6f8cb7f336aa3383", 0x7, 0x8}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000140)={0xecce, 0xfffffffffffffffc}) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)) 15:06:22 executing program 4: unshare(0x8000400) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7, 0x6d, 0x1}, 0x7) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)=ANY=[@ANYBLOB="000025a8f0d4d444284b0000"], 0xc) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, 0x0) r2 = getegid() setfsgid(r2) [ 384.318142][T25191] binder: 25189:25191 ioctl c018620c 20000080 returned -22 15:06:22 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x600000000000000, 0x0, 0x0, 0x0, 0x0}}}) 15:06:22 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0xc008ae05, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 384.362230][T25200] binder: 25189:25200 ioctl c018620c 20000080 returned -22 15:06:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x6c}) 15:06:22 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x402000, 0x0) mq_open(&(0x7f00000000c0)='!vboxnet0cgroup*proc\x00', 0x0, 0x20, &(0x7f0000000100)={0x8001, 0x2, 0x0, 0xdc4, 0x19f8, 0x217, 0x1, 0x4}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)={0x9, 0x1}) unshare(0x8000400) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)) 15:06:22 executing program 4: unshare(0x32070a00) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x109201, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x18) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x9, 0x880) [ 384.435002][T25205] 9pnet: Insufficient options for proto=fd 15:06:22 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x700000000000000, 0x0, 0x0, 0x0, 0x0}}}) 15:06:22 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) [ 384.501380][T25221] binder: 25213:25221 ioctl c018620c 20000080 returned -22 [ 384.501597][T25222] 9pnet: Insufficient options for proto=fd [ 384.517185][T25223] binder: 25213:25223 ioctl c018620c 20000080 returned -22 15:06:22 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000001c0)="a2e41ebdf9712c3329559a5b62650610", 0x10) chdir(&(0x7f0000000000)='./file0\x00') r3 = getpgid(0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)=0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000000180)={r2, r2, 0x1}) mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:22 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000940)='/dev/dlm_plock\x00', 0x101880, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x100010, r0, 0x0) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000c40)={0x9, "4416e0dad45f68708a3c1e3b617a53d3654930be33caf638b6a973f86faa1330", 0x5fe2998b64d94388, 0x2, 0x8, 0x0, 0x2}) mount$fuseblk(&(0x7f0000000880)='/dev/loop0\x00', &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)='fuseblk\x00', 0x800, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB="2c64656661756c745f7065726d697373696f6e732c646f6e745f04707072616973652c7569643c", @ANYRESDEC=r3, @ANYBLOB=',\x00']) unshare(0x20000) r4 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000800)='/dev/dlm-control\x00', 0x80, 0x0) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000840)={0x3f, {0xffffffffffffc609, 0x1, 0x0, 0x9, 0x0, 0x800}}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000000000)) fcntl$getownex(r4, 0x10, &(0x7f0000000280)={0x0, 0x0}) prctl$PR_SET_PTRACER(0x59616d61, r6) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='schedstat\x00') syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x4, 0x100) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000001b00000005000000500400001828bf0646aff4cfceb4280af78f86e5460200000000000000000000e8020000e8020000b8030000b8030000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/80], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000f800000000000000000000000000000000000000608902de45e3c318000000000000280074746c000000000000000000000000000000000000000000000000000000000000000000000038004d4153515545524144450000000000000000000000000000000000000000010000001000000000000040ac1e0001050006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8002001000000000000000000000000000000000000000000000000300061646472747970650000000000000000000000c40020000100000001000000000000002000736f636b65740000000000000000000000000000000000000000000000003800444e41540000000000000000000000000000000000000000000000000000010000000000000000000000ffffffff4e234e2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800d0000000000000000000000000000000000000000000000000003800444e41540000000000000000000000000000000000000000000000000000ed000000040000007f000001000000004e20050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800d00000000000000000000000000000000000000000000000000038004d41535155455241444500000000000000000000000000000000000000000100000010000000e0000002ffffffff00654e2400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000315237000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800"/1096], 0x4b0) write$vnet(r7, &(0x7f00000001c0)={0x1, {&(0x7f0000000080)=""/62, 0x3e, &(0x7f00000000c0)=""/207, 0x3, 0x3}}, 0x68) 15:06:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x74}) 15:06:22 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x800000000000000, 0x0, 0x0, 0x0, 0x0}}}) 15:06:22 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0xc00c55ca, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:22 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x900000000000000, 0x0, 0x0, 0x0, 0x0}}}) [ 384.630524][T25242] binder: 25240:25242 ioctl c018620c 20000080 returned -22 15:06:22 executing program 1: unshare(0x2a020600) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x1) 15:06:22 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') times(&(0x7f0000000000)) mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x40, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f00000001c0)={0x8, {0x7, 0x5, 0xfffffffffffffffe, 0x7}}) 15:06:22 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xfffffffeffffffff, 0x400000) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000080)={0x8, 0x0, [{0x101, 0x1, 0x0, 0x0, @msi={0x2, 0x5, 0x6}}, {0x3, 0x1, 0x0, 0x0, @adapter={0xffffffffffffffc0, 0x3, 0x100000000, 0x200, 0x9}}, {0x1f, 0x1, 0x0, 0x0, @sint={0x800000, 0xffffffffffffffff}}, {0x7ff, 0x4, 0x0, 0x0, @sint={0x1, 0x6}}, {0x200, 0x4, 0x0, 0x0, @msi={0x5, 0x5, 0x989}}, {0x0, 0x1, 0x0, 0x0, @sint={0x7, 0xfff}}, {0x80aa, 0x4, 0x0, 0x0, @adapter={0x20, 0x4, 0x2, 0x5, 0x3}}, {0x0, 0x7, 0x0, 0x0, @adapter={0x62d3, 0x400, 0x7, 0xc, 0x6}}]}) prctl$PR_SET_FPEXC(0xc, 0x80) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="73797a3127c23e00000000cc87292c42072a86dec8ff02d398efd6f7135fb749ac2acda1a162d9a4971efaea4a87e1945c465c129700da395dd2a902a340e2693fe22f65f71984fa5c30fc1d1d5e4291d0f044785059f040ebf3ca286f2ee455f61c310d4d841576f59d83db9b686fca3f24f3f73ff3f864e1221767fe924da17377f32aec4a15a533eb"], 0x8a) 15:06:22 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0xa00000000000000, 0x0, 0x0, 0x0, 0x0}}}) 15:06:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x7a}) [ 384.700677][T25255] binder: 25240:25255 ioctl c018620c 20000080 returned -22 15:06:22 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0xc0105303, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:22 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0xb00000000000000, 0x0, 0x0, 0x0, 0x0}}}) 15:06:22 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x80000, 0x0) r2 = dup2(r1, r0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev={[], 0x11}, 'bpq0\x00'}}, 0x1e) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:06:22 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) [ 384.792105][T25270] binder: 25268:25270 ioctl c018620c 20000080 returned -22 [ 384.822281][T25275] binder: 25268:25275 ioctl c018620c 20000080 returned -22 15:06:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x300}) 15:06:22 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0xc00000000000000, 0x0, 0x0, 0x0, 0x0}}}) 15:06:22 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000280)=[0xee01, 0xee00, 0xffffffffffffffff]) getresuid(&(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)) write$P9_RSTATu(r1, &(0x7f0000000600)=ANY=[@ANYPTR=&(0x7f0000000700)=ANY=[@ANYRES32=r1, @ANYBLOB="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", @ANYBLOB="e851c84e92f6b15d91ef9bd10bfd2c808cbe1f4204842d1573e3190cf74989ca9bd753011bdd8b7444cbb3cfc9430710d168a38b07765ef40071290387a8a085b49900bd55d19e4bcb43cc08698e509dcbd48fcee628901eebd5d4de7f778a68326c86cdbcd483334b269effca259c9e503bb83aa6c506a7f04df34512f366d2b3ac39cec98b667b9ffaca85090e7da49aeccd3768cce4f96ba254091737fc2659831840dbb3673db1c5f756ce4664affadd20f6178c846ea6968a0216dee4a050dcea41ea75586e", @ANYPTR=&(0x7f0000000680)=ANY=[@ANYRESOCT=r4], @ANYRES16=r0, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYRES32=r0, @ANYPTR, @ANYRESDEC=r0, @ANYPTR64, @ANYRES16=0x0]], @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r5], 0x14) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000001a00)=ANY=[], 0xfffffffffffffdae) r6 = dup(r1) getsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f00000000c0), &(0x7f0000000580)=0x10) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000540)={0x1c, 0x5, 0x0, {0x0, 0x0, 0x4, 0x1}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) chdir(&(0x7f0000000000)='./file0\x00') mknod$loop(&(0x7f0000000040)='./file0\x00', 0x1, 0x1) ioctl$KIOCSOUND(r6, 0x4b2f, 0xffff) mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:22 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0xc0189436, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:22 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0xd00000000000000, 0x0, 0x0, 0x0, 0x0}}}) 15:06:22 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x100000000, 0x400000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) [ 384.942788][T25294] binder: 25293:25294 ioctl c018620c 20000080 returned -22 [ 384.976124][T25301] binder: 25293:25301 ioctl c018620c 20000080 returned -22 15:06:22 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x800, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000140)=0xffffffff) unshare(0x8000400) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x101080, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f00000000c0)={r3, 0x2}) 15:06:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x500}) 15:06:22 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0xe00000000000000, 0x0, 0x0, 0x0, 0x0}}}) 15:06:22 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000080)) 15:06:22 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0}}}) 15:06:22 executing program 4: r0 = getpgid(0xffffffffffffffff) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000100)={{0x6, 0x6, 0x0, 0x2, 'syz1\x00', 0xb6}, 0x2, 0x10, 0x9, r0, 0x9, 0x9, 'syz0\x00', &(0x7f0000000040)=['\\\x0evboxnet0\\-%\xa8ppp0em1^:!ppp1vmnet0*}selinuxvmnet0^loppp1\x00', '\x00', '/dev/snd/controlC#\x00', '\x00', '\x00', 'cpuset\x00', '/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00'], 0x8f, [], [0x1, 0x1, 0x4, 0x7]}) tkill(r0, 0xe) unshare(0x8000400) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, 0x0) [ 385.104962][T25323] binder: 25316:25323 ioctl c018620c 20000080 returned -22 [ 385.120037][T25325] binder: 25316:25325 ioctl c018620c 20000080 returned -22 15:06:22 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0xc020660b, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x600}) 15:06:23 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20040080) 15:06:23 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x1100000000000000, 0x0, 0x0, 0x0, 0x0}}}) 15:06:23 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2000, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x9) 15:06:23 executing program 4: unshare(0x42040000) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) kexec_load(0x5, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000000)="03b835b5d64c622de22a458048d543c1e978c6", 0x13, 0xffffffffffff5d1b, 0x7}, {&(0x7f0000000040)="a469ad2128b56d435f32a1d02ea3e04deddaf9e885a5a995550f98ef75b91d4f7837c1becc742bf110a654470505fb34f243118f3ca2d323bdeddc633d75c46a4cb32e8daa9995fbe857b707638484b53d4e74c0d8018e02635f82a351821041be87e395dc524fa420ee1ed99a", 0x6d, 0x1800000000000000, 0x1}, {&(0x7f00000000c0)="de727864e4c21df8a702ad122a3bf98e94b09733b7ea070f6cbe12f315dff66d218df80599ec01da382c487b530c9908dd864a40f782399002ad11b3ce73a32c9d1dc68bb98b8cff965c75e9b01bd691d74f6e1b781c108c4d59b354014e205c71bff2a1d31becf10d247f05b6ed7f019540790ea49d30db458fe2014683839a94ab3cf4d40327ac5d978165bc1fd9ec38610f0d8cf1f43c03a32c85edc273f03ae3edaf79a7e0a8318c68003f38aabb37fc3b7e959f91ffbe79448ccdb188e8c1baeefe2e1104bb54a9a1e06d946249a34715b305ce60242fb92d4d5765c313ee3dedc727d7cd90", 0xe8, 0x4b86, 0x9}], 0xf1264c139eac09d7) 15:06:23 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x1200000000000000, 0x0, 0x0, 0x0, 0x0}}}) [ 385.275090][T25346] binder: 25345:25346 ioctl c018620c 20000080 returned -22 15:06:23 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='system.advise\x00') mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0xc028660f, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 385.339149][T25362] binder: 25345:25362 ioctl c018620c 20000080 returned -22 [ 385.346081][T25359] IPVS: ftp: loaded support on port[0] = 21 15:06:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x700}) 15:06:23 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x8000, 0x101000) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="7f2258b1cf177ecb36b32917c51cf203", 0x10) unshare(0x8000400) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0, 0x11}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000100)={0x0, r2, 0x1}) 15:06:23 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x2500000000000000, 0x0, 0x0, 0x0, 0x0}}}) 15:06:23 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0}}}) 15:06:23 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="a576c47e2fa094fc0fc85eec84c9de24cb641386763d7c5edd556ba7ec1e39639d4d616de80fda7fcf8070d24e3d3d96b677e81ce95194a7679c25e0b3af1a18c14581c0b7c5ccfa7f97deea7f8a1a46ee6acf2c14ee16e55031b4af2e6df1f612f262cafd4cebd5092d45ba5961a364aa7680c62f1b9f34d94632c042a329c650a737cbe81b", @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 385.466361][T25379] binder: 25374:25379 ioctl c018620c 20000080 returned -22 [ 385.499447][T25385] binder: 25374:25385 ioctl c018620c 20000080 returned -22 15:06:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x900}) 15:06:23 executing program 1: unshare(0x10000) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) [ 385.529234][T25359] IPVS: ftp: loaded support on port[0] = 21 15:06:23 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x5c00000000000000, 0x0, 0x0, 0x0, 0x0}}}) 15:06:23 executing program 4: unshare(0x8000400) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@v2={0x5, 0x2, 0x11, 0x0, 0xad, "fddd8afc7bb171d59deffea849581d18816935dc8187d1c58e82f5441387c2aff616cd6fd30ad00a458b3872dee02f9eb0f3556717d66b6e56d0eabeef502bcaee27e3670adf192af9c78ce6aaafd426bf0a6590e383791beb9d9fa8b48c8d18e147af2da31f9d03bba4457f6b2559e408f658e3b8a9b9764ab25bcd294048d46c978d1711e1efd3fd62735d36957aed41628125731fee27a0cc685a429c4221fe51adef4b00f4b44a76dd61ec"}, 0xb7, 0x45c4bc4e572e6502) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000140)={0xfffffffffffffff7, 0x8, 0x101}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 15:06:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0xc100565c, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:23 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0}}}) 15:06:23 executing program 1: unshare(0x8000400) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_names\x00') ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000080)) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)) ioctl(r0, 0x3, &(0x7f00000000c0)='\f.Y') [ 385.615253][T25395] binder: 25394:25395 ioctl c018620c 20000080 returned -22 [ 385.644736][T25404] binder: 25394:25404 ioctl c018620c 20000080 returned -22 15:06:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0xa00}) 15:06:23 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x2, 0x0, 0x0, 0x0}}}) 15:06:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0xc1105517, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:23 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x3, 0x0, 0x0, 0x0}}}) [ 385.769627][T25424] 9pnet: Insufficient options for proto=fd [ 385.772438][T25425] binder: 25423:25425 ioctl c018620c 20000080 returned -22 [ 385.817877][T25424] 9pnet: Insufficient options for proto=fd [ 385.833716][T25438] binder: 25423:25438 ioctl c018620c 20000080 returned -22 15:06:23 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000180)=0x1, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ff146645541cff0180000000000000bb02d79186b6de00"/37], 0x15) r4 = dup(r1) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x80000001}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000002c0)={0x7, 0xae0, 0x8, 0x432, 0x59cf, 0x12fec000000, 0xd9a, 0x3, r5}, &(0x7f0000000340)=0x20) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYPTR64=&(0x7f0000000600)=ANY=[@ANYRES64=r0, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="47b4ed4a8c28ceb1a8c2e06f439c747d26bc090e25460cc1b6753d3d07dd0126a1ebe206d17315d9664d955307497c726f565eda45aa991d73d1e87e09dcebd732c6fea4e77b34512d93af1cacca8982f3f8a573cfe60a358e36c6b019ca6c022d9d7917193793bafbcf953f25082107f792bfdddd6c9f77c8f5bd1c2ed2ead4efa60b06af12b0a7d3471c52f3aa2994ff4830c00896287e79e2a19c08ce85f5a957c168badee121e97691b9a63a43b308f131fa79b49f8c7fd399a22c7aab2565747215a6fece408678e9", @ANYPTR, @ANYBLOB="a1fcddecbe3ff164d6030aa833e3100ee14003c6e14a6d4dd56939586b70dc467da3004e1d42bd70c14d355472de45a7c1cefb75e276a2ab0537e5fa44e9cb981b2a2e9d6076f41a4570dc2ec6187361abec67e4a3974a35da8e64ba77f6ceea307b26c46ff921650eb11e3c7359171e60074abe5ba7442b94a5c4e04d4d21d41389bbb5f4e21179f522c359d2abe975c1ef8bfc7df02c58d138d812b5cdb30149809268bb9151d5721fcaf4482af3723659c813df1c96ec8533a786e07f76d202022ac0701496102c"]]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 15:06:23 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) r1 = msgget(0x2, 0x400) msgrcv(r1, &(0x7f0000000040)={0x0, ""/4096}, 0x1008, 0x3, 0x800) 15:06:23 executing program 4: unshare(0x8000400) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000040)={0x80000001, 0x1, 0x7}) ioctl$RTC_PIE_OFF(r0, 0x7006) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e24, @broadcast}}, [0x17b4, 0x7, 0x5, 0x40, 0x2, 0xffff, 0x1, 0x7, 0x200, 0xaf6, 0x8, 0x9, 0x80000000, 0xffffffff]}, &(0x7f0000000180)=0x100) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={r2, 0x5}, 0x8) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, 0x0) 15:06:23 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x4, 0x0, 0x0, 0x0}}}) 15:06:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0xb00}) 15:06:23 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x5, 0x0, 0x0, 0x0}}}) 15:06:23 executing program 4: unshare(0x20000000) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x200900, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x2200, 0x0) write$P9_RAUTH(r1, &(0x7f0000000080)={0x14, 0x67, 0x1, {0x20, 0x4, 0x8}}, 0x14) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, 0x0) 15:06:23 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)=0x3ff) fchmod(r0, 0x10) 15:06:23 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x6, 0x0, 0x0, 0x0}}}) [ 385.962485][T25451] binder: 25450:25451 ioctl c018620c 20000080 returned -22 [ 385.965208][T25457] 9pnet: Insufficient options for proto=fd [ 385.985922][T25460] binder: 25450:25460 ioctl c018620c 20000080 returned -22 [ 385.999136][T25458] 9pnet: Insufficient options for proto=fd 15:06:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0xc00}) 15:06:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='\nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:23 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) linkat(r2, &(0x7f0000000180)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x1400) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wUdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x7b) 15:06:23 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) rt_sigsuspend(&(0x7f0000000000)={0x80}, 0x8) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) [ 386.109245][T25481] 9pnet: Insufficient options for proto=fd [ 386.130177][T25475] binder: 25474:25475 ioctl c018620c 20000080 returned -22 15:06:23 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x7, 0x0, 0x0, 0x0}}}) 15:06:23 executing program 1: unshare(0x8000400) syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1000000000004, 0x80) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x407, 0x10000) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f00000000c0)=""/235) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7fffffff, 0x60000) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x9}, 0x10) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x3) 15:06:23 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180ad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000002c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0xffffffff}}, 0xfffffffffffffe64) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 386.161716][T25487] 9pnet: Insufficient options for proto=fd [ 386.173795][T25490] binder: 25474:25490 ioctl c018620c 20000080 returned -22 15:06:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0xd00}) 15:06:24 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x8, 0x0, 0x0, 0x0}}}) 15:06:24 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c776664ff6f3d", @ANYRESHEX=r2]) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000280)={0x3, @bcast, r3}) chdir(&(0x7f0000000000)='./file0\x00') prctl$PR_GET_NAME(0x10, &(0x7f0000000180)=""/105) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:24 executing program 1: unshare(0x8000400) r0 = socket$inet(0x10, 0x10000000003, 0x9) r1 = dup2(r0, r0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000000c0)="24000000530410041dfffdd46fa2830020200a0009ed0300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000000)) [ 386.242269][T25500] 9pnet: Insufficient options for proto=fd [ 386.262627][T25500] 9pnet: Insufficient options for proto=fd [ 386.318464][ T26] audit: type=1107 audit(1567004784.079:41): pid=25513 uid=0 auid=4294967295 ses=4294967295 subj=_ msg=' [ 386.318464][ T26] ' 15:06:24 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x9, 0x0, 0x0, 0x0}}}) [ 386.362447][T25517] 9pnet: Insufficient options for proto=fd [ 386.368584][ T26] audit: type=1107 audit(1567004784.119:42): pid=25513 uid=0 auid=4294967295 ses=4294967295 subj=_ msg=' [ 386.368584][ T26] ' 15:06:24 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0xa, 0x0, 0x0, 0x0}}}) 15:06:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='n\n0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:24 executing program 1: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x81) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) unshare(0x8000400) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$TCGETX(r2, 0x5432, &(0x7f0000000180)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@broadcast, @broadcast, 0x0}, &(0x7f0000000100)=0xc) recvfrom$packet(r2, &(0x7f0000000080)=""/56, 0x38, 0x140, &(0x7f0000000140)={0x11, 0xf5, r3, 0x1, 0x1f, 0x6, @remote}, 0x371) [ 386.404084][T25516] binder: 25515:25516 ioctl c018620c 20000080 returned -22 [ 386.414343][T25523] 9pnet: Insufficient options for proto=fd [ 386.423880][T25525] binder: 25515:25525 ioctl c018620c 20000080 returned -22 15:06:24 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) 15:06:24 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0xb, 0x0, 0x0, 0x0}}}) 15:06:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0xe00}) 15:06:24 executing program 0: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000002c0)=0x1c, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000e00000/0x200000)=nil, &(0x7f0000e2a000/0x3000)=nil, &(0x7f0000f4e000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000f81000/0x4000)=nil, &(0x7f0000000140)="5fde0c8047a8371b6179fdbf2d238dcd270e0d060988c9d674ee652108d8c615ee296b069c945f89075a32776e2b48d886fac6098e190eb736b87ebf9c0f75e23f5d93888ff1c8cedf495b143c0870c68d65da2d945417a40dc454363b7186704170ef30777e154647167cf5265b0f769944ad353d274a04873c70057b35fc8c9d2ed61d03336ee83845cc", 0x8b, r0}, 0x68) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:24 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x11) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) 15:06:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='n%0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:24 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0xc, 0x0, 0x0, 0x0}}}) 15:06:24 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$P9_RLOPEN(r1, &(0x7f0000000040)={0x18, 0xd, 0x1, {{0x8, 0x0, 0x3}, 0x7fffffff}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f0000000140)='./file0\x00', 0x61e22cda231dc628, 0xbc6) [ 387.084268][T25554] binder: 25547:25554 ioctl c018620c 20000080 returned -22 [ 387.123954][T25566] binder: 25547:25566 ioctl c018620c 20000080 returned -22 15:06:24 executing program 1: unshare(0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x204) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x200, 0x40c100) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000180)) r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x563, 0x290100) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0x0, 0x5, 0x1000, 'queue1\x00', 0x8}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0xa0, "fd846a5051239b5ce305c3777a43120ea09a464252fc90690dbd1a7cfadf8b09e9d7329573af985d8356bfc8aa9dafc346bbc353aa4220a8fa67c1195882e43d641a391d51048db06ba9e3f863a8d32699ec9c223052e759a50b549a44c90f1597f01e9e4e4cc58aa3330c2b7d058b6ae91e28b1bfe3312526933fa04f3f7887bc82ae6494322ad520819c48d5648c3b8c1212b5c20f52b0905c805d948b839b"}, &(0x7f0000000280)=0xa8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r2, @in6={{0xa, 0x4e20, 0x3ff, @local, 0x10001}}, 0x80000000, 0xacb, 0x3, 0x3, 0x40}, &(0x7f0000000380)=0x98) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)) 15:06:24 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0xd, 0x0, 0x0, 0x0}}}) 15:06:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x1100}) 15:06:24 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r2 = getpgid(0xffffffffffffffff) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x402, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000080)={r3, r0}) [ 387.208099][T25573] binder: 25572:25573 ioctl c018620c 20000080 returned -22 15:06:25 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000080)=@rose={'rose', 0x0}, 0x10) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) 15:06:25 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0xe, 0x0, 0x0, 0x0}}}) [ 387.249837][T25583] binder: 25572:25583 ioctl c018620c 20000080 returned -22 15:06:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x1200}) 15:06:25 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = semget(0x3, 0x3, 0x80) semtimedop(r1, &(0x7f0000000100)=[{0x0, 0x8, 0x800}, {0x2, 0x4, 0x1000}], 0x2, &(0x7f00000000c0)) keyctl$set_reqkey_keyring(0xe, 0x5fd10a09c90e05e4) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x200, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000140)=0x2) restart_syscall() seccomp(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x8, 0xffff, 0x3, 0x3}, {0xe0000000000000, 0x9341, 0x8}, {0x7, 0x70000000000000, 0x7, 0x755}, {0x2fa, 0x7, 0x6, 0x80000000}, {0x4, 0x9, 0xffffffff7fffffff, 0x3f}]}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000180)={0x0, @loopback, @remote}, &(0x7f00000001c0)=0xc) 15:06:25 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}}}}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0xffffffffffffff3a) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d31dae323b52fd0e5ee336387cd972b219959df42a116fae85d2542be0ec714", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0)=r1, 0x4) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000280)) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='n\\0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:25 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) 15:06:25 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x10, 0x0, 0x0, 0x0}}}) 15:06:25 executing program 4: r0 = semget(0x0, 0x3, 0x61) semctl$GETZCNT(r0, 0x4, 0xf, &(0x7f0000000000)=""/197) unshare(0x8000400) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, 0x0) [ 387.428271][T25607] binder: 25602:25607 ioctl c018620c 20000080 returned -22 [ 387.452215][T25609] 9pnet: Insufficient options for proto=fd [ 387.467883][T25618] binder: 25602:25618 ioctl c018620c 20000080 returned -22 15:06:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x2000}) 15:06:25 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x11, 0x0, 0x0, 0x0}}}) [ 387.477219][T25613] binder: 25610:25613 ioctl 4020ae46 7fc9b10be510 returned -22 [ 387.496772][T25609] 9pnet: Insufficient options for proto=fd [ 387.514045][T25613] binder: 25610:25613 ioctl 4020ae46 7fc9b10be510 returned -22 [ 387.541604][T25613] binder: 25610:25613 ioctl 4020ae46 7fc9b10be510 returned -22 [ 387.549155][T25629] binder: 25628:25629 ioctl c018620c 20000080 returned -22 [ 387.580216][T25613] binder: 25610:25613 ioctl 4020ae46 7fc9b10be510 returned -22 15:06:25 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0xbe5bef2e07c2b545, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x80}}, {@access_client='access=client'}], [{@pcr={'pcr', 0x3d, 0x13}}, {@context={'context', 0x3d, 'user_u'}}, {@permit_directio='permit_directio'}, {@smackfshat={'smackfshat', 0x3d, '9p\x00'}}, {@subj_user={'subj_user', 0x3d, 'ppp0ppp1'}}, {@obj_user={'obj_user', 0x3d, ','}}, {@uid_eq={'uid', 0x3d, r2}}]}}) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:25 executing program 4: unshare(0x18020000) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x90200, 0x20) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x611, 0x80000001}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r2, 0x2}, 0x8) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) [ 387.588460][T25613] binder: 25610:25613 ioctl 4020ae46 7fc9b10be510 returned -22 [ 387.597210][T25613] binder: 25610:25613 ioctl 4020ae46 7fc9b10be510 returned -22 [ 387.613745][T25613] binder: 25610:25613 ioctl 4020ae46 7fc9b10be510 returned -22 [ 387.615220][T25640] binder: 25628:25640 ioctl c018620c 20000080 returned -22 15:06:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr\n\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:25 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x12, 0x0, 0x0, 0x0}}}) [ 387.636743][T25613] binder: 25610:25613 ioctl 4020ae46 7fc9b10be510 returned -22 [ 387.652561][T25613] binder: 25610:25613 ioctl 4020ae46 7fc9b10be510 returned -22 15:06:25 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') times(&(0x7f0000000000)) mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x40, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f00000001c0)={0x8, {0x7, 0x5, 0xfffffffffffffffe, 0x7}}) 15:06:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x2500}) [ 387.682871][T25613] binder: 25610:25613 ioctl 4020ae46 7fc9b10be510 returned -22 [ 387.716571][T25613] binder: 25610:25613 ioctl 4020ae46 7fc9b10be510 returned -22 15:06:25 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x25, 0x0, 0x0, 0x0}}}) [ 387.755972][T25613] binder: 25610:25613 ioctl 4020ae46 7fc9b10be510 returned -22 [ 387.763800][T25613] binder: 25610:25613 ioctl 4020ae46 7fc9b10be510 returned -22 [ 387.788055][T25661] binder: 25660:25661 ioctl c018620c 20000080 returned -22 [ 387.808209][T25613] binder: 25610:25613 ioctl 4020ae46 7fc9b10be510 returned -22 [ 387.828883][T25613] binder: 25610:25613 ioctl 4020ae46 7fc9b10be510 returned -22 [ 387.846318][T25670] binder: 25660:25670 ioctl c018620c 20000080 returned -22 [ 387.857787][T25613] binder: 25610:25613 ioctl 4020ae46 7fc9b10be510 returned -22 [ 387.867575][T25613] binder: 25610:25613 ioctl 4020ae46 7fc9b10be510 returned -22 [ 387.878173][T25613] binder: 25610:25613 ioctl 4020ae46 7fc9b10be510 returned -22 [ 387.886538][T25613] binder: 25610:25613 ioctl 4020ae46 7fc9b10be510 returned -22 [ 387.894449][T25613] binder: 25610:25613 ioctl 4020ae46 7fc9b10be510 returned -22 [ 387.904397][T25613] binder: 25610:25613 ioctl 4020ae46 7fc9b10be510 returned -22 [ 387.915119][T25613] binder: 25610:25613 ioctl 4020ae46 7fc9b10be510 returned -22 [ 387.926113][T25613] binder: 25610:25613 ioctl 4020ae46 7fc9b10be510 returned -22 [ 387.934056][T25613] binder: 25610:25613 ioctl 4020ae46 7fc9b10be510 returned -22 [ 387.944476][T25613] binder: 25610:25613 ioctl 4020ae46 7fc9b10be530 returned -22 [ 388.058039][T25630] debugfs: File '25610' in directory 'proc' already present! [ 388.090254][T25674] binder: 25610:25674 ioctl 8138ae83 7fc9b107c6f0 returned -22 15:06:25 executing program 1: unshare(0x8000400) r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000180)={@rand_addr, @multicast1}, &(0x7f00000001c0)=0x8) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'trusted.', '/dev/snd/controlC#\x00'}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)) fsetxattr$security_evm(r1, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@v2={0x5, 0x0, 0x5, 0x8000, 0x25, "bccf6e65b544864fbc71f94248b6bba6c948a93a628f99fdaec5c06ef51ea0c9f49291ea92"}, 0x2f, 0x2) 15:06:25 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x25) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = getuid() write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0xfffffffffffffff5, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x80}}, {0x0, 0xa}}}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES64=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000040)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:25 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x5c, 0x0, 0x0, 0x0}}}) 15:06:25 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') times(&(0x7f0000000000)) mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x40, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f00000001c0)={0x8, {0x7, 0x5, 0xfffffffffffffffe, 0x7}}) 15:06:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x3f00}) 15:06:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr#\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:26 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x300, 0x0, 0x0, 0x0}}}) 15:06:26 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') times(&(0x7f0000000000)) mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x40, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f00000001c0)={0x8, {0x7, 0x5, 0xfffffffffffffffe, 0x7}}) [ 388.236601][T25684] binder: 25679:25684 ioctl c018620c 20000080 returned -22 [ 388.250931][T25689] 9pnet: Insufficient options for proto=fd [ 388.262478][T25690] binder: 25679:25690 ioctl c018620c 20000080 returned -22 [ 388.275227][T25689] 9pnet: Insufficient options for proto=fd 15:06:26 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67ad35bb20d79186b6debc17b4c74c98acbea5321ed3ee821bb8b6ad115d00fa8b1969b23a14214851fc5ebf84df2d6766bab3b84886"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e732766642c72298f284ca546246e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:26 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x500, 0x0, 0x0, 0x0}}}) 15:06:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x4000}) 15:06:26 executing program 1: msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x3866ea879408cb9a) unshare(0xe10f1c3b0837e9da) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x7f, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) r1 = socket$key(0xf, 0x3, 0x2) accept4(r1, &(0x7f0000000040), &(0x7f0000000100)=0x80, 0x80000) [ 388.359408][T25702] binder: 25701:25702 ioctl c018620c 20000080 returned -22 15:06:26 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x600, 0x0, 0x0, 0x0}}}) [ 388.415918][T25713] binder: 25701:25713 ioctl c018620c 20000080 returned -22 15:06:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr%\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:26 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x5, 0x1ff}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000001c0)={r3, 0x3}, 0x8) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:26 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x700, 0x0, 0x0, 0x0}}}) 15:06:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x4800}) 15:06:26 executing program 1: unshare(0x8000400) r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x1, 0x2681) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000080)=0x5, &(0x7f00000000c0)=0x2) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "380ccb25d88659cd", "5b2e40aad1a83f7ac70b7f6831a42d1114f1ff1941fe427428aa8f986f35c407", "3b01ebc0", "e8eeb24a07a6d5ae"}, 0x22) prctl$PR_GET_DUMPABLE(0x3) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f00000001c0)=0x7fffe) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000100)=@ccm_128={{0x303}, "e1d4163c6211809c", "e2c809dfe84413b547810e515fd42cfc", "67f36649", "8119de435445e8ee"}, 0x28) 15:06:26 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') times(&(0x7f0000000000)) mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x40, 0x0) 15:06:26 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x900, 0x0, 0x0, 0x0}}}) 15:06:26 executing program 0: syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x105) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x400, 0x0) linkat(r0, &(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x1000) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="151a4cebf6dbfb1325dadd3201800019a3bc0a15c4c292302ebfad67b135bb20d79186b6debc1792444c"], 0x15) r4 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0xfffffffffffffda0, 0x0, 0x4}, 0x5) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d66642c7266376e6f3db32b652895fc152fbbd57ed2316529db83c9e4bc8ac6bbec5be45c9cc25d6fb927dfd970a1ea0479b56e5c1d1c707f328165048792b2e15afaec1cb0eda1ad0cabc07d57b945eae9aa8e99db1aee5ff4dbcf", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) chdir(&(0x7f0000000000)='./file0\x00') ioctl$UI_SET_EVBIT(r0, 0x40045564, 0xe) mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:26 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0xa00, 0x0, 0x0, 0x0}}}) 15:06:26 executing program 1: unshare(0x18000d00) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)) [ 388.613779][T25736] binder: 25732:25736 ioctl c018620c 20000080 returned -22 [ 388.634498][T25741] binder: 25732:25741 ioctl c018620c 20000080 returned -22 15:06:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x4c00}) 15:06:26 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0xb00, 0x0, 0x0, 0x0}}}) 15:06:26 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) r1 = dup(r0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000040)=0x4d, 0x8) 15:06:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr+\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 388.747232][T25757] binder: 25754:25757 ioctl c018620c 20000080 returned -22 [ 388.772269][T25761] binder: 25754:25761 ioctl c018620c 20000080 returned -22 15:06:26 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0xc00, 0x0, 0x0, 0x0}}}) 15:06:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x5c00}) 15:06:26 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) rmdir(&(0x7f00000000c0)='./file0\x00') 15:06:26 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') times(&(0x7f0000000000)) mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x40, 0x0) 15:06:26 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0xd00, 0x0, 0x0, 0x0}}}) [ 388.939130][T25784] binder: 25783:25784 ioctl c018620c 20000080 returned -22 [ 388.969702][T25798] binder: 25783:25798 ioctl c018620c 20000080 returned -22 [ 388.976084][T25794] 9pnet: Insufficient options for proto=fd 15:06:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x6000}) 15:06:26 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0xe00, 0x0, 0x0, 0x0}}}) [ 389.013952][T25801] 9pnet: Insufficient options for proto=fd 15:06:26 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000140)=ANY=[@ANYBLOB='/dew\x00\x00\x00\x00\x00'], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='romfs\x00', 0x20, &(0x7f0000000280)='*selfself(\x00') 15:06:26 executing program 1: unshare(0x800) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) 15:06:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr-\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:26 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x1100, 0x0, 0x0, 0x0}}}) 15:06:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x6800}) [ 389.078380][T25808] binder: 25807:25808 ioctl c018620c 20000080 returned -22 [ 389.117991][T25818] binder: 25807:25818 ioctl c018620c 20000080 returned -22 15:06:26 executing program 1: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x200400) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x20, 0xff, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4800) unshare(0x8000400) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000000)) 15:06:26 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') times(&(0x7f0000000000)) mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 389.145481][T25821] binder: 25820:25821 ioctl c018620c 20000080 returned -22 15:06:26 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x1200, 0x0, 0x0, 0x0}}}) [ 389.199181][T25832] binder: 25820:25832 ioctl c018620c 20000080 returned -22 15:06:27 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3d9990a36289671bc5e5377433ea93f2", @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:27 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x2500, 0x0, 0x0, 0x0}}}) 15:06:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x6c00}) 15:06:27 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x4000, 0x0, 0x0, 0x0}}}) 15:06:27 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:27 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000080)={0x100000001, {{0xa, 0x4e21, 0x5, @rand_addr="d0bd6ae40e6e57e735693727bd8240c5", 0x9}}, {{0xa, 0x4e20, 0x8, @mcast2, 0x3}}}, 0x108) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) 15:06:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr\\\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 389.357283][T25853] binder: 25849:25853 ioctl c018620c 20000080 returned -22 15:06:27 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x5c00, 0x0, 0x0, 0x0}}}) 15:06:27 executing program 1: unshare(0x2c000500) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) [ 389.423581][T25853] binder: BINDER_SET_CONTEXT_MGR already set [ 389.432389][T25861] binder: 25849:25861 ioctl c018620c 20000080 returned -22 [ 389.462347][T25867] 9pnet: Insufficient options for proto=fd 15:06:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x7400}) [ 389.470236][T25853] binder: 25849:25853 ioctl 40046207 0 returned -16 [ 389.486275][T25870] 9pnet: Insufficient options for proto=fd 15:06:27 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key(&(0x7f00000001c0)='rxrpc\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$negate(0xd, r3, 0x1fc, r4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:27 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) write$P9_RSTATFS(r0, &(0x7f0000000080)={0x43, 0x9, 0x2, {0x1, 0x618, 0x77af, 0x7ff, 0x1, 0x1, 0x5, 0x0, 0x3f}}, 0x43) unshare(0x8000400) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)) 15:06:27 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x1000000, 0x0, 0x0, 0x0}}}) 15:06:27 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x02\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x7a00}) 15:06:27 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='rdma.current\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000600)={@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x4, 0x1, 0x0, {0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x28}, 0x7}}}, {&(0x7f00000004c0)=""/155, 0x9b}, &(0x7f0000000180), 0x4}, 0xa0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000280)=0x4) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x240, 0x0) mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 389.617008][T25890] binder: 25878:25890 ioctl c018620c 20000080 returned -22 [ 389.637979][T25879] binder: 25878:25879 ioctl c018620c 20000080 returned -22 15:06:27 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x2000000, 0x0, 0x0, 0x0}}}) 15:06:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x1000000}) [ 389.706929][T25901] binder: 25900:25901 ioctl c018620c 20000080 returned -22 [ 389.720291][T25902] binder: 25900:25902 ioctl c018620c 20000080 returned -22 15:06:27 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) 15:06:27 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x3000000, 0x0, 0x0, 0x0}}}) [ 389.762668][T25906] binder: 25905:25906 ioctl c018620c 20000080 returned -22 15:06:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x2000000}) [ 389.809354][T25915] binder: 25905:25915 ioctl c018620c 20000080 returned -22 15:06:27 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x4000000, 0x0, 0x0, 0x0}}}) 15:06:27 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0xe9, 0x2002) syz_mount_image$ceph(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)='./file0\x00', 0x1f, 0x5, &(0x7f0000001380)=[{&(0x7f00000000c0)="27c04b41838fb536467a70bfef3bbd7cc76b3b2ea6161b97ad660ea45dbeaa4c6bba829eb5639383a714c70c4f866ae5f26e773ff57b3ae96f2d5a4b0d0db51516ec9abf0c5ffb8bfca1d54225920ff09d52c94ac600e3f83712a9f1874dbc1ed09bafe75a", 0x65, 0x800}, {&(0x7f0000000140)="c0da9df68f0beb4622a6f86680b7fc0d18cb1f3f0813d6e3ffd7ce4621b8aa59f7829fe00b1b95", 0x27, 0x1c00000}, {&(0x7f0000000180)="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", 0x1000, 0x9}, {&(0x7f0000001180)="ef851fe75ad80db10c693344eada1c1c778297d6c2c21ec08e3c85d763669d0bddbf9e78ac8ddef32ed78ddd4ad2fa204e3405fd0882432f1bea482d0067ff3b5c06c0f7e7142fa4be7d87d91d3c1c2a71529a8a61341db577330869734d95fd48e8e5481ea627cefe059473116cd72b23802e157b77b37e4daad6c481aff1d8909b5e957cd823086ff164a725999d6948b07250e6538de022d04d41cc439b089c501ff15b4ea3f7045bd4a93747b09317588e4a140d509f9fd247b41d1d72082842137ed67735b0ff878180d0dca21ad07add95551203e1edfcbf1455b51b9d72e92e75a97088", 0xe7, 0x8}, {&(0x7f0000001280)="c264840f0c837c67b83e0005eb6ee5293ac8de103561525d9829c490567e9f721b77afae968d72967301d9f600e509bcc9e47944df3b153fbdbf8feafcd208b0ae3b4d56ffeb3a6c16575ef428acfe7f58667ff0ed5014ddddd3c3b7247ab0f09d6626996d39cc2cf7263f090cfa49ba5644d56f24f1a06a3cf249b3628925161a2b1024526aad6ed0e196b8f89e58975c317254ebc8b22cf5a5eddb1ae8a9142c493ac4817cc420a4e3dafbff279e9176f88d177ea9f72b129e79f97481edd4ce2983e1ce260249571c4badbc91a7d3dc50068c7087cf2851d9ea64d28b", 0xde, 0x40}], 0x40, &(0x7f0000001400)='\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) [ 389.892043][T25925] binder: 25923:25925 ioctl c018620c 20000080 returned -22 15:06:27 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:27 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x5000000, 0x0, 0x0, 0x0}}}) [ 389.956301][T25939] binder: 25923:25939 ioctl c018620c 20000080 returned -22 [ 389.969651][T25938] ceph: device name is missing path (no : separator in /dev/loop1) 15:06:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x03\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:27 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="a0536e6f3d", @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x3000000}) 15:06:27 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x6000000, 0x0, 0x0, 0x0}}}) [ 390.089852][T25951] binder: 25949:25951 ioctl c018620c 20000080 returned -22 [ 390.103467][T25944] ceph: device name is missing path (no : separator in /dev/loop1) [ 390.109131][T25951] binder: BINDER_SET_CONTEXT_MGR already set [ 390.125831][T25955] binder: 25949:25955 ioctl c018620c 20000080 returned -22 15:06:27 executing program 1: unshare(0x4c030300) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x100) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xffffffffffffffff, 0x40000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xff}}, [0x100, 0x467c, 0x3, 0x3, 0x80000001, 0x7fffffff, 0x6, 0x2, 0x7, 0x5, 0x400, 0x42, 0x800, 0x3, 0x9]}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={r2, 0xfffffffffffffff8}, &(0x7f0000000240)=0x8) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000040)={0x8, 0x6, 0x100000000, 0x3, 'syz1\x00', 0x7}) accept4$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14, 0xb27eb066284f3ca6) 15:06:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x4000000}) [ 390.165823][T25951] binder: 25949:25951 ioctl 40046207 0 returned -16 15:06:28 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x7000000, 0x0, 0x0, 0x0}}}) 15:06:28 executing program 1: unshare(0x8000400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400800, 0x0) openat$cgroup_type(r0, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)) 15:06:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x04\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:28 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:28 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x8000000, 0x0, 0x0, 0x0}}}) [ 390.274924][T25980] 9pnet: Insufficient options for proto=fd [ 390.297786][T25982] binder: 25981:25982 ioctl c018620c 20000080 returned -22 15:06:28 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x9000000, 0x0, 0x0, 0x0}}}) 15:06:28 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000140)={0x30, 0x3b, 0xa, 0xf, 0x5, 0x5, 0x6, 0x6a, 0x93296a0b75177505}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 390.347440][T25980] 9pnet: Insufficient options for proto=fd [ 390.358221][T25993] binder: 25981:25993 ioctl c018620c 20000080 returned -22 15:06:28 executing program 1: unshare(0x8000400) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x141000, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x2, 0xcf, &(0x7f0000000080)="94c2c9b9379b53c866d128c91fc9b5b0b90ced0f7621be3389958819046c6d5c1ed6bbfe91576f1a41491a062a3e350b89fde9ade13b64d3d75b9d0bae0e1a7e7a655ab07155bbfe5418f428947a9ea9d269685660454d5c2e10733a2fdc97e10df02bb220fc902f23ae7dc7a0cbd974411c308519f4aa6e382a3164fb16f72f2e935699727a13dd7df257d9432a38b4d5cc6455e21c4d7783b870a5e0253a4dfaf364dc9708cd67b4cd5f12bff9f89f39a5e80120eff56dd964e98966e58b7fe5953ca3b12ad236582cee77fc1667"}) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)=0x859) 15:06:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x5000000}) 15:06:28 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0xa000000, 0x0, 0x0, 0x0}}}) 15:06:28 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x4) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES16=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 390.485299][T26009] binder: 26007:26009 ioctl c018620c 20000080 returned -22 15:06:28 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0xb000000, 0x0, 0x0, 0x0}}}) 15:06:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x05\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:28 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:28 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0xc000000, 0x0, 0x0, 0x0}}}) [ 390.549878][T26020] binder: 26007:26020 ioctl c018620c 20000080 returned -22 15:06:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x6000000}) 15:06:28 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0xd000000, 0x0, 0x0, 0x0}}}) 15:06:28 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffffffffff01}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xd456fc73bb5753aa) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) [ 390.655985][T26033] binder: 26031:26033 ioctl c018620c 20000080 returned -22 [ 390.675729][T26036] binder: 26031:26036 ioctl c018620c 20000080 returned -22 [ 390.699802][T26040] 9pnet: Insufficient options for proto=fd 15:06:28 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0xe000000, 0x0, 0x0, 0x0}}}) 15:06:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x7000000}) [ 390.745140][T26040] 9pnet: Insufficient options for proto=fd 15:06:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x06\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:28 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x280400, 0x0) ioctl$TIOCNXCL(r2, 0x540d) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:28 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 390.793617][T26055] binder: 26054:26055 ioctl c018620c 20000080 returned -22 15:06:28 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x10000000, 0x0, 0x0, 0x0}}}) 15:06:28 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000080)) [ 390.847317][T26065] binder: 26054:26065 ioctl c018620c 20000080 returned -22 15:06:28 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x8000000}) 15:06:28 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x11000000, 0x0, 0x0, 0x0}}}) 15:06:28 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x67fa, 0x8200) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f00000000c0)=0x3c) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) 15:06:28 executing program 0: pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="1500000065ffff0180ff0f00000000000030302ebfad67b135bb20d79186b6debc17b4c74cb6f186f256300f8490c34d00b0bc6cc8ec52e31ed7267e6412e2d4ae238b332c55716edc64666206aa56ae879b154eb1e7e05bc400040000763b869c30db6746580851a8756429574f121d0b18cb04d1eae908b2c88f49ca280124d2fe29d9679e80e52d552eeb9314af51d549510c1b1a48fd51d69151340088d3a5d7793773793e919e3cdc2620a5c1d3b2b7eb1b68d91edf248a72c3d5affed8ea3bd66d69963af677d2f7321a81e613962cde76fae821aefd2b9067e276663ba2cbad5dc1"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000240), 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7472639974aa4ac36e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB="6e00004d9d3bb65aab3310a75db1da3eda083a2d1658d0ebc3e849cc4274f6814720bc92a228de519859c0426d81d73870b248223654ab2705bca4f1110164267fe16cd0068fb6904d2c6fce67d234a5eb2bfec3cf72b87852ff7eb57759df14f7c2b891528647dd7de40461b756f49775e6744d7c2aeb5010c4777359bde6359c26318030fa666fb85bfb025f45563157e39cd7b2dba8ec2df8a6ab16c46f7c26e02a8920dc77bdbda756f11fbfdd9cfb9c26e3b83aa1", @ANYRESHEX=r2]) io_uring_enter(r2, 0x2, 0x2, 0x2, &(0x7f0000000040)={0x3}, 0x8) sendto(r2, &(0x7f00000004c0)="1fee3a692d23067af111ab1eda437ba17e7c4ac20d3b5b9f029ea494295dd00697c8f5024fed7d6aa906b7f733290337c3c54d10a85a047c2f7a9f2f4cc49caf58c1727637e29246ba8d076a510555187ca3eaecc2b06ac35923d6750b4fa65179b39bea66db5db67e280e02037d23be2751ee7df3186b509202625b078c75c86269473847d7a886b2592f5deed373cd4ba2b3286ce84cb15057e6eef4d3123999de095c5bfe4ad905f2c2064d57c3e2668d1cbd21c1be6aba9215e6e71122af6350723be8a553e0bcd0e16cefa2073ad9b60a5d9b4c1895bc896f3eaace3d3f8fba239e819827", 0xe7, 0x4008804, &(0x7f0000000340)=@x25={0x9, @remote={[], 0x3}}, 0x80) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@random={'btrfs.', 'system.posix_acl_access\x00'}) write$P9_RREADDIR(r2, &(0x7f0000000400)={0xa6, 0x29, 0x2, {0x1ff, [{{0x60, 0x0, 0x7}, 0x8, 0x800, 0x7, './file0'}, {{0x959ad9b7c89ce994, 0x4, 0x6}, 0x5, 0x100000000, 0x7, './file0'}, {{0x10, 0x0, 0x5}, 0xff, 0xf30a, 0x7, './file0'}, {{0x2, 0x1, 0x4}, 0x3, 0xffff, 0x7, './file0'}, {{0x40, 0x2}, 0x1f, 0xfffffffffffffff7, 0x7, './file0'}]}}, 0xa6) [ 390.963849][T26083] binder: 26082:26083 ioctl c018620c 20000080 returned -22 [ 390.978946][T26083] binder: BINDER_SET_CONTEXT_MGR already set [ 390.985569][T26087] binder: 26082:26087 ioctl c018620c 20000080 returned -22 15:06:28 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x9000000}) [ 391.020627][T26083] binder: 26082:26083 ioctl 40046207 0 returned -16 [ 391.113336][T26105] binder: 26104:26105 ioctl c018620c 20000080 returned -22 [ 391.129274][T26107] binder: 26104:26107 ioctl c018620c 20000080 returned -22 15:06:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\a\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:28 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x12000000, 0x0, 0x0, 0x0}}}) 15:06:28 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_genetlink_get_family_id$fou(&(0x7f0000000a00)='fou\x00') setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000980)=@nat={'nat\x00', 0x19, 0x5, 0x816, [0x20000140, 0x0, 0x0, 0x200004bc, 0x200007b8], 0x0, &(0x7f0000000100), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x9, 0x4, 0x9000, 'bridge0\x00', 'ipddp0\x00', 'syz_tun\x00', 'gretap0\x00', @remote, [0xff, 0x0, 0xff, 0xff], @local, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0x196, 0x1fe, 0x236, [@comment={'comment\x00', 0x100}], [@arpreply={'arpreply\x00', 0x10, {{@remote, 0xfffffffffffffffc}}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}], @snat={'snat\x00', 0x10, {{@remote, 0x10}}}}, {0x3, 0x40, 0x600, 'ipddp0\x00', 'veth0_to_hsr\x00', 'bond_slave_1\x00', 'veth1_to_team\x00', @remote, [0x0, 0xff, 0xff, 0xff, 0xff], @local, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0x6e, 0xde, 0x116, [], [@snat={'snat\x00', 0x10, {{@local, 0xffffffffffffffff}}}, @snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}}}], @arpreply={'arpreply\x00', 0x10, {{@remote}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x2, 0xf6, 'nlmon0\x00', 'vcan0\x00', 'syzkaller1\x00', 'bridge_slave_0\x00', @remote, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x9e, 0xd6, [@m802_3={'802_3\x00', 0x8, {{0x80, 0xb, 0x4, 0x4}}}], [], @common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xfffffffffffffffe}}}}, {0xd, 0x8, 0x6003, 'syzkaller0\x00', 'sit0\x00', 'nr0\x00', '\x00', @local, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], @broadcast, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0x156, 0x1c6, 0x1f6, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00', 0x1ff}}}, @physdev={'physdev\x00', 0x70, {{'bcsh0\x00', {0x2a0d5f42a204fcc9}, 'bond_slave_1\x00', {0xff}, 0x1a, 0x2}}}], [@snat={'snat\x00', 0x10, {{@broadcast, 0xffffffffffffffff}}}, @snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffe}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x3}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe, 0x1, [{0x19, 0x46, 0x6007, 'team0\x00', 'bond0\x00', 'veth1_to_hsr\x00', 'veth0\x00', @random="3c08c232df2f", [0xff, 0xff, 0xff, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0xfe, 0x136, 0x16e, [@arp={'arp\x00', 0x38, {{0x0, 0x7, 0x1, @multicast1, 0xff, @broadcast, 0xffffffff, @random="eba0825f4870", [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @broadcast, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0x4c, 0x80}}}, @pkttype={'pkttype\x00', 0x8, {{0x3}}}], [@snat={'snat\x00', 0x10, {{@dev={[], 0x1e}, 0xfffffffffffffffe}}}], @snat={'snat\x00', 0x10, {{@local, 0xffffffffffffffff}}}}]}]}, 0x88e) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) socket(0x15, 0x80000, 0x1) 15:06:28 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2e6cdf6f}}}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:28 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0xa000000}) 15:06:29 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x25000000, 0x0, 0x0, 0x0}}}) 15:06:29 executing program 1: unshare(0x8000400) syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000140)=0x704) [ 391.250375][T26123] binder: 26121:26123 ioctl c018620c 20000080 returned -22 [ 391.264429][T26127] binder: 26121:26127 ioctl c018620c 20000080 returned -22 15:06:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0xb000000}) 15:06:29 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x40000000, 0x0, 0x0, 0x0}}}) 15:06:29 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x5c000000, 0x0, 0x0, 0x0}}}) 15:06:29 executing program 1: unshare(0x8000400) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair(0x10, 0x5, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000680)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @empty}, 0x1, 0x1, 0x2, 0x3}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000001c0)="5a7e6e7be688d5845cd63139a93598e2151501e03cf7f3b19439312beeb0cc102e10a53084f74dcf26db034e4eb9b2b29386a4d88d44feafd60de7b2a5d17d530f505cc06461f6d2aa8cd3f7731c61a92db1effd6b624cf14623f6466c9fa515b965bca8b05c0b78d8e353a6f3b0a52c285b424a21990087ba486a666830e19fac1ac9a410d235820134a0b58f6a88e5316630ec00b402c5b494a3b959614db2c0939d1fa14d5f5cb228b32947c511e03f8d2f90fcdac83d", 0xb8}, {&(0x7f0000000140)="468fd765ce6e92aed203a60954db9b468e", 0x11}, {&(0x7f0000000280)="d7e076e38397baeeebdc3f6edba4ee6b81f08410b703c18c91a7a842ed5f58dc2c550d02138dc30410e2ee453a24699e934c7c3a5e649b1333810e935e1118bbf0e93b19a152e4bc7ecae2562c70782c0471e8e985734ed2a30c3b086f4306b34a59ffafd31b0c186bddabca268476af95b4d1fb013732184f1d13d13820e55e095d3f4dfdee6c3b5a46c68dda96a2fcff0c8214bf1e11b4be24c5b12125c8e2e1cc2ae7cea68315c827eda7811b9d81f9f1d2dc1394c0a6e4698dde308261df0fa2bd07f7d9a8807ad5af1b472ae5c34a18a2fab041fc437e1c4bb864b142f5a79846b44b5c3b9b81", 0xe9}, {&(0x7f0000000380)="00de8efe1290fb568bda5881a754a6658f5120656dd7cfa2731de525deab20827efb21fb8cb1a6ec06b82bcdb806f0d9abec257798850fbae66f168e2f5fc3ef4e4be9daf0a330a988224493babd73db166e47789b01e5061dc6fc11180b178c368b66c24ee5011dd69fca5f3ab40fb0b68bae3c95797d8c2bf36961eaa532324bdcd24253a4640f20dd4ed7c009ac35ac16c650c8ea48ed3bacd315fd770279db06b19db988ccbb3485c4f09731780036102f8411140d6251b712c348f855f19fd2f2d810f2725a6bc6f3533ba42a3bf53bce50158095ab6a5792", 0xdb}, {&(0x7f0000000480)="513f8301ffb4ee5fff7d6b59cf7b2a06a8a78f638b8ff1fc07a066138ded89a1139124045758ae0c54ef64a868b3736599c9ceb084bb276dd3467824dadf3befbe0ccdc032bf1187a174b346536726124bd512e884072cf3e192ecbbbbf0814da9aa320d39d8382c232f5b34ce72405813ed36145dca1a7dd3c0a562ea811f30ceba6bedd315e72eafb809c3cf51edb351a68a59753da3c4c984b4918db63b7922eb55a4f7302c19893590ed7ffa0993e81f91a4b8ff9760a7779de4e15fb9af4ee65916b55a9c4525a752d7bf06970c0b608bf3c1a287f4a26d0e184243bb7988a571af3d34f5fafe93d6a089b6d08300c4", 0xf2}], 0x5, &(0x7f0000000600)=[@timestamping={{0x14, 0x1, 0x25, 0x1f}}, @txtime={{0x18, 0x1, 0x3d, 0x200}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x48}, 0x4000000) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000000)=0xffffffffffffff1c) r3 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x185400) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000080)=0x3) ioctl$KDSKBLED(r3, 0x4b65, 0x80000001) 15:06:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\b\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 391.404718][T26146] binder: 26141:26146 ioctl c018620c 20000080 returned -22 [ 391.433881][T26150] binder: 26141:26150 ioctl c018620c 20000080 returned -22 15:06:29 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x1000000000000, 0x0, 0x0, 0x0}}}) 15:06:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0xc000000}) 15:06:29 executing program 0: pipe2$9p(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000240)) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000880)={0x101, 0x5}) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') syz_mount_image$ceph(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)='./file1\x00', 0x6, 0x7, &(0x7f0000000780)=[{&(0x7f00000004c0)="1bee7bf176af2374f4d6429067b3bc8ac091e1d36b6e311d86a24624e6ed8762911ae9334a5ca51d3dcc5feb91d3901ab5d3f1dfe458399176b39f7f1d0558281eea1d5eb55ea4135d33b337e07e2db123ce08b3130ba76ea811fb136d7687a858f472bb283514697f337d378518442a1eafbec8bef5a38f97b5648c7ab7ba18a0936039fc589e53fcdfb87df9a060026035a46cb2be05524a492e2944ee8b7d0fad593f7798bf969de8d9e6a4e63dd63652d11b9412", 0xb6, 0x9}, {&(0x7f0000000600)="6427797e48c9024253a4a6fbb5779ae856abf400dc0874e9b6623ecc31b0289dddf44ec9a9f59d9b1dd55000d45a7ac3be984674299451ba985cb9a8a2b0e65f0af2c1c20272473fae87b3b1be8c36d19a8c828a8ebbc6942ad88f5d408792e74ea2b05dd3ca7bb175ca8c1cd17b4b16a8f3d4b955fd4fc0661ac7dffc371a7ea7ba782cd882542f57942136ca93", 0x8e, 0x5}, {&(0x7f00000001c0)="25f614c0bb405f75c870c150bdd780600d986d37a92806cfcc5733ec913b56e8722104fb27", 0x25, 0x16}, {&(0x7f00000006c0)="b214909375a51bd6b89d2254d99da61c38f12b8e3b6b48530f1acd1fe108100e57d1e3cf39df317bb01dd48599659ab97a2470e5c996bed16a1b2991915b5aa2d24ca9ecfc3286e4cc8b087a6e2d8f8bf29855e737682c7de4889d6ddc107365f7ed117cb72ec650cdf3d7fa1ef18fd0a17158985ae2ce40c03d7389c066cce7e0ccf85997d25b7b650ab675dd8cc39ddb6c835274adc7ab", 0x98, 0x100}, {&(0x7f0000000280)="82d4873b11469f7c2bb98e112ac8a55582bb4d669c9a4131186c2be2599ffaaae3bea72f86f651273259dfb037dd472211aee9a39b32aa27bb43fe89e2b58c3646179ca63834af16a2052f237dda7d68613479079e5530cb4df4b244ba4e23563f1bbd7ea919659c2ca976da97dae16ca3f3", 0x72}, {&(0x7f0000000340)="1c3f5a31c5c407554fe0ecdf7ea586c251ad9d0fba33dc6085f6dae04eda8cab3142fc200df2aeece0981bdd003d04e852afaad5857951911567e2a0c21e993018833229452f1e52d2523fd6bc295c9c06970d3c13d39a", 0x57, 0x4}, {&(0x7f0000000580)="9afc1c1be8a96f9f7efab1cf3119786b", 0x10, 0x3}], 0x802, &(0x7f0000000840)=')/\x05%T\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:29 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:29 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x100000000000000, 0x0, 0x0, 0x0}}}) 15:06:29 executing program 1: unshare(0x60000) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)) r2 = gettid() ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000240)={{0x2, 0x4e21, @loopback}, {0x306, @broadcast}, 0x6c, {0x2, 0x4e22, @multicast1}, 'bond_slave_1\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000100)={{0x3, 0x5, 0x81, 0x8001, '\x00', 0x3}, 0x1, 0x30, 0x1f, r2, 0x9, 0x8, 'syz1\x00', &(0x7f0000000080)=['(\x00', '&\\]\x00', '/dev/snd/controlC#\x00', '\x00', '/proc/capi/capi20ncci\x00', '/dev/snd/controlC#\x00', '\x00', 'trusted\x00', '}\x00'], 0x4e, [], [0xfffffffffffffffb, 0x6, 0x4, 0x8]}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x4000, 0x0) 15:06:29 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x4, 0x2) r1 = syz_open_dev$dspn(&(0x7f0000001600)='/dev/dsp#\x00', 0x3c, 0x8000) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000001640)={0x0, 0x5, 0x1, 0x4e66, 0x4, 0xab6c, 0x1, 0x1, {0x0, @in={{0x2, 0x4e22, @local}}, 0x1c09, 0x0, 0x0, 0x9, 0x8}}, &(0x7f0000001700)=0xb0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001740)={r2, @in={{0x2, 0x4e23, @empty}}, 0xfffffffffffffeff, 0x17, 0xfffffffffffffffd, 0x7, 0x8}, 0x98) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0xfffffffffffffffe) 15:06:29 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x200000000000000, 0x0, 0x0, 0x0}}}) [ 391.610229][T26172] binder: 26170:26172 ioctl c018620c 20000080 returned -22 [ 391.649854][T26180] ceph: device name is missing path (no : separator in /dev/loop0) 15:06:29 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x300000000000000, 0x0, 0x0, 0x0}}}) [ 391.680916][T26182] binder: 26170:26182 ioctl c018620c 20000080 returned -22 15:06:29 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0xd000000}) 15:06:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\n\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:29 executing program 1: unshare(0x100) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x680e80, 0x100) bind$x25(r1, &(0x7f00000000c0)={0x9, @null=' \x00'}, 0x12) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) 15:06:29 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x400000000000000, 0x0, 0x0, 0x0}}}) [ 391.822922][T26204] binder: 26198:26204 ioctl c018620c 20000080 returned -22 [ 391.854796][T26211] binder: 26198:26211 ioctl c018620c 20000080 returned -22 15:06:29 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000140), &(0x7f0000000180)=0x4) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:29 executing program 1: unshare(0x8000400) r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '/dev/snd/controlC#\x00'}, {0x20, '-ppp0trustedcgroupcgroupGPLmd5sum*eth1lo'}, {0x20, '{'}], 0xa, "32ddab997432fcdff3c4d29c48f7c674c4d3203d7f85805e37a0affbd423ac7516395b624af482a569a42d51301043efec9ce3c133f7cef0641ea285224aa567e14cdf4ae88efaffb80754bfa74dbe93b692d78b7a8dc27002a94844b9a79f1da14136d91d1917c16f3ddb44b6637578dacff813a6dd8648603c1620ac59d172416a4dd023118365a3"}, 0xd3) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)) 15:06:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0xe000000}) 15:06:29 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x500000000000000, 0x0, 0x0, 0x0}}}) 15:06:29 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x600000000000000, 0x0, 0x0, 0x0}}}) 15:06:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\v\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 392.029845][T26236] binder: 26231:26236 ioctl c018620c 20000080 returned -22 [ 392.046838][T26237] binder: 26231:26237 ioctl c018620c 20000080 returned -22 15:06:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x10000000}) 15:06:29 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:29 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x700000000000000, 0x0, 0x0, 0x0}}}) 15:06:29 executing program 1: unshare(0x20000000) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) 15:06:29 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x800000000000000, 0x0, 0x0, 0x0}}}) [ 392.148334][T26251] binder: 26250:26251 ioctl c018620c 20000080 returned -22 [ 392.170700][T26254] binder: 26250:26254 ioctl c018620c 20000080 returned -22 15:06:30 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x6, 0x2000) 15:06:30 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x11000000}) 15:06:30 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x900000000000000, 0x0, 0x0, 0x0}}}) 15:06:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\f\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:30 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0}}}) 15:06:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x12000000}) 15:06:30 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3, 0x800) sendmsg$kcm(r1, &(0x7f0000000300)={&(0x7f0000000080)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)="41d18d68cffa2c40c5c3c42d3dcc70dcd952a32e96e4c0f19f74ed754d23117e501a95b623cb7a64add16ec803c2fac03809115d110dfd09c387e6ca91e08940e160eb11b87a254c4144d5019914ce0c475798899497cd2dc66a32cd09313358d59b399a00ade4c60aec1e817159ef7e23ad43754775b2b5d0c4a04d5374e0c0ef4cc1d850bfff9045c5560809291fd0f34b2b03b46e2d1fd06f42ce37ef491599bda1154e66334d35423fb5a1358e24e6b5f560263884034f073ad47d90", 0xbe}, {&(0x7f00000001c0)="decb250f8326329081268201", 0xc}], 0x2, &(0x7f0000000240)=[{0x88, 0x0, 0x9, "92ddc483eed90328c121fd4c960db776a6042e4f795c1f9d2ba65c1c5989b438adcfca5336540a974373861611367b8eb9e9a4d3f7e76668199976d4af3e849d3305dcee6b474b652a00f2656d59e45959c5856a0972703721a1dc4e0733e41f9e2985eb15a0e8ee0576be46e93b521edb80"}], 0x88}, 0x5) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) [ 392.343346][T26280] binder: 26278:26280 ioctl c018620c 20000080 returned -22 [ 392.361463][T26286] binder: 26278:26286 ioctl c018620c 20000080 returned -22 [ 392.443828][T26297] binder: 26296:26297 ioctl c018620c 20000080 returned -22 [ 392.465092][T26301] binder: 26296:26301 ioctl c018620c 20000080 returned -22 15:06:30 executing program 1: unshare(0x8000400) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x10, &(0x7f0000000200)={&(0x7f0000000180)=""/83, 0x53, 0xffffffffffffffff}}, 0x10) r1 = syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x81, 0x40000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000400)=0xe8) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000440)={@local, @rand_addr="6f8b1dd7ad05826c914a06f2dbd24f2e", @loopback, 0xfffffffffffff800, 0x8001, 0x1, 0x500, 0x9, 0x4, r2}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=r0, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{}]}) r5 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(r6, 0x890b, &(0x7f0000000080)={@remote={[], 0x3}, 0x4, 'bond0\x00'}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045540, &(0x7f0000000000)) 15:06:30 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0xb00000000000000, 0x0, 0x0, 0x0}}}) 15:06:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x20000000}) 15:06:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\r\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:30 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:30 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:30 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0xc00000000000000, 0x0, 0x0, 0x0}}}) [ 392.629049][T26320] QAT: Invalid ioctl [ 392.642970][T26318] binder: 26317:26318 ioctl c018620c 20000080 returned -22 15:06:30 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0xd00000000000000, 0x0, 0x0, 0x0}}}) 15:06:30 executing program 1: unshare(0x8000400) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x101000, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0xe1) 15:06:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x25000000}) [ 392.669730][T26328] binder: 26317:26328 ioctl c018620c 20000080 returned -22 [ 392.740844][T26335] 9pnet: Insufficient options for proto=fd [ 392.773402][T26342] binder: 26341:26342 ioctl c018620c 20000080 returned -22 [ 392.784442][T26335] 9pnet: Insufficient options for proto=fd 15:06:30 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0xe00000000000000, 0x0, 0x0, 0x0}}}) 15:06:30 executing program 1: unshare(0x2000000) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) fcntl$getown(r0, 0x9) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0x4) [ 392.789609][T26345] binder: 26341:26345 ioctl c018620c 20000080 returned -22 15:06:30 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0}}}) 15:06:30 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000140)=""/44, &(0x7f0000000180)=0x2c) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:30 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x0f\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:30 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x180, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x6, 0x0, 0x10002, 0x2}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000100)={0x40, 0x8, [0x7, 0x20]}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f00000000c0)={0x3, r1}) unshare(0x8000400) bind$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000000)) 15:06:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x3f000000}) 15:06:30 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x1100000000000000, 0x0, 0x0, 0x0}}}) [ 392.958365][T26371] binder: 26369:26371 ioctl c018620c 20000080 returned -22 15:06:30 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) prctl$PR_SET_UNALIGN(0x6, 0x1) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x40000000}) [ 393.012972][T26379] binder: 26369:26379 ioctl c018620c 20000080 returned -22 15:06:30 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x1200000000000000, 0x0, 0x0, 0x0}}}) 15:06:30 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280)='/dev/udmabuf\x00', 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fdinfo\x00') ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000200)=0x1) unshare(0x8000000) r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x10000, 0x8000) r2 = request_key(&(0x7f0000000100)='trusted\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='-selfvboxnet1\x00', 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)) [ 393.092779][T26387] binder: 26386:26387 ioctl c018620c 20000080 returned -22 15:06:30 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x2500000000000000, 0x0, 0x0, 0x0}}}) 15:06:30 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 393.137410][T26395] binder: 26386:26395 ioctl c018620c 20000080 returned -22 15:06:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x48000000}) 15:06:31 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x101400, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0x18, 0x35, 0x15, 0x4, 0x3, 0x200, 0x6, 0x141}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) unshare(0x8000400) syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f00000000c0)) r3 = getpgrp(r1) syz_open_dev$evdev(0xfffffffffffffffd, 0x5, 0x400) write$FUSE_LK(r0, &(0x7f0000000000)={0x28, 0x0, 0x1, {{0x2, 0x40, 0x2, r3}}}, 0x28) 15:06:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x10\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:31 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0112c74c00"/22], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) statx(r2, &(0x7f0000000140)='./file0\x00', 0x0, 0x800, &(0x7f00000004c0)) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:31 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0}}}) [ 393.274141][T26410] binder: 26404:26410 ioctl c018620c 20000080 returned -22 15:06:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x4c000000}) 15:06:31 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x5c00000000000000, 0x0, 0x0, 0x0}}}) 15:06:31 executing program 1: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x4) r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x3, 0x20400) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x3, {{0x8000, 0xfffffffffffff9e7, 0x80000000, 0x0, 0xf8, 0x6, 0x1f, 0x3352}}}, 0x60) pread64(r0, &(0x7f0000000040)=""/139, 0x8b, 0x0) unshare(0x8000400) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000000)) [ 393.340673][T26424] binder: 26404:26424 ioctl c018620c 20000080 returned -22 15:06:31 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0}}}) 15:06:31 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:31 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000080)) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040)=0x30, 0x4) 15:06:31 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x2, 0x0}}}) [ 393.443755][T26434] binder: 26430:26434 ioctl c018620c 20000080 returned -22 [ 393.500499][T26447] binder: 26430:26447 ioctl c018620c 20000080 returned -22 15:06:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x5c000000}) 15:06:31 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x25) r2 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x7f, 0x28cd71092dbbbc0b) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000180)=0xd000) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x6, 0xfffffffffffffff9, 0x2}}, 0xfffffffffffffe13) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x12\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:31 executing program 1: unshare(0x8000400) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000000100)) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x40000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x7f, 0x4) 15:06:31 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x3, 0x0}}}) [ 393.628183][T26464] binder: 26460:26464 ioctl c018620c 20000080 returned -22 15:06:31 executing program 1: unshare(0x32020900) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) 15:06:31 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x4, 0x0}}}) [ 393.679804][T26472] binder: 26460:26472 ioctl c018620c 20000080 returned -22 15:06:31 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x60000000}) 15:06:31 executing program 1: unshare(0x8000400) r0 = geteuid() syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0x7, &(0x7f0000000580)=[{&(0x7f00000000c0)="8065a9e9d7ff99153d26d08b88a61b69f26c31097818f0fdf8cda14f48fe3851354acf21efb8b40dddc543879a654403a1a583aaa70be3f9621e01d73e4b3d6e096e0d16617257a7fac7828a4d642ceeaa9b3798ea2c968f11141dc93b12cf5804711e5ed3bd4e7d8107", 0x6a, 0x2}, {&(0x7f0000000140)="4a773d7f32443ce319511d4dc1d16a1d19644bcc46d2a0e2ad7c8b20d72909bf39aebf3245b1a1d546683290668d4739", 0x30, 0x9}, {&(0x7f0000000180)="1ee1829e32e06e37eaf8110ee4c93741aa40bc8334ec24654ee5af668fd1310ab310047b6f9d23b269d96640059ffddc4e36f5a2ca37fa2026748f6e99f1bd5d2e667d42eeed22876dc11fb9bc3cdeaf38199f773519860cad11c81da5d81383a1b6c05c0cc66b7ba8dd2f8e55b6577d1c5a98901710457ed0aa41abc7c1a87c18c5808df869c5ff299fc6d19f448964da70bc07b884dd360a02edf102d8cfa7766b6ab04b5389d9c7c1f05644243bf07e0e638cabfaa922f2c6c33dd37a61865acaee68d3df6c62becdd379891aee308eec5058fafeb1d81da09e07a9b1d5ffc97c9e5d8c46caa93f42", 0xea, 0x2ae}, {&(0x7f0000000280)="fa8cb19a2c18abe81feecc78e07d99be70ef1bd37be7a98ce1bdd63f810c44adb5efd773cabd07549669502fa34992037356c1c24fb3275c94c22b0e31c0d2fdd1ae6aecb39430b2d1fda34791c30d20c545fbf7891788e43e447dc25ad5b02d56137df2a2e95cbd49cf8604b3e5b55c01657c681c6083ef38a265de297894a582ad84b22e01e75fa6361c1e2180d38313a59b52b37b73ede0f3ec7e", 0x9c, 0x4}, {&(0x7f0000000340)="b9d455b6d5ec8951375f07b00c663a57441699ad487cb7e7a3d5545de31b53be0a3f70abc855dd3979174e9aec33c7649c8e24d03b55c3775953fc1937660c31a2ad8deec2323e27ccf6d174eabd3e01537ea04a46138daa381ecb53dda8cab5d4174c584e59c2ee331863b32700267b5c3564b19615b57edd8cfe47d5d03f48204599467d4a303b58466c29dd4a83b407bd42fa8686daa63448f566dfc445c0dfdbb3fef3a367630ebcad4cf3d4", 0xae, 0x4}, {&(0x7f0000000400)="f7839f798efaf69d87528c34408a3ca5e51b2f9ba3dc74e30ec44a68eab3f74086811030457068ea4925caca4dcbc712c06aad19ef2ef30442a55fed8b9541edfea3126a5517239dba0dc6c1c742e90cde9d511be5c84c38be6f4f1b7bf40f7211cb39", 0x63, 0x8}, {&(0x7f0000000480)="460555dfb652208f3a885a95b169a986cf67e76eff017eac5b55d4b0deb2fd79463446d0d098fcfe408f1fd48912a02c0b5a42745f8e07bca2023cb2d92c6f9b750c556b914d1ee33521a4887c9f3032a47d9608a29d7294b36c417cef5f21aa496d22f8a28510763bd8a87b661ab43da206ed1813cf973960c94496c424dbfb5cd1a75b49a3375cda6fb0e652f3268eee0021c89a6a3adbb84438954947808695e443d04a7251c4fb80f627b9668ca226081ce9171e62bc5ab1a7e7892ad2e5371525f1088daad7b0b47ad773dc400be81a7e75275bd5ec79dedac22bc5b3ad911382bc4713eba2eba42e6337", 0xed, 0x127}], 0x400, &(0x7f0000000640)={[{@space_cache_v2='space_cache=v2'}, {@acl='acl'}, {@nossd_spread='nossd_spread'}, {@nodiscard='nodiscard'}, {@compress_force_algo={'compress-force', 0x3d, 'zlib'}}, {@barrier='barrier'}, {@ssd='ssd'}], [{@seclabel='seclabel'}, {@uid_eq={'uid', 0x3d, r0}}, {@fsname={'fsname', 0x3d, '}eth1\\'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@subj_type={'subj_type', 0x3d, 'GPL'}}, {@appraise_type='appraise_type=imasig'}, {@dont_measure='dont_measure'}]}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) [ 393.774841][T26485] binder: 26484:26485 ioctl c018620c 20000080 returned -22 15:06:31 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x5, 0x0}}}) 15:06:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x13\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:31 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 393.836028][T26494] 9pnet: Insufficient options for proto=fd [ 393.856571][T26498] binder: 26484:26498 ioctl c018620c 20000080 returned -22 15:06:31 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x8) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x3) 15:06:31 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x6, 0x0}}}) 15:06:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x68000000}) 15:06:31 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x7, 0x0}}}) [ 393.991346][T26508] 9pnet: Insufficient options for proto=fd [ 394.021591][T26524] binder: 26523:26524 ioctl c018620c 20000080 returned -22 15:06:31 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0xc13a474f589c7a69) write$P9_RVERSION(r1, &(0x7f0000000100)={0x13, 0x65, 0xffff, 0x4, 0x6, '9P2000'}, 0x13) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000080)={0xa6, 0x3, {0x2, 0x2, 0x9, 0x3, 0x2}}) 15:06:31 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffd}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) readlinkat(r2, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0) chdir(&(0x7f0000000000)='./file0\x00') ioctl$FS_IOC_ENABLE_VERITY(r2, 0x6685, &(0x7f0000000280)={0x1, 0x42, 0x1000, 0xb, &(0x7f0000000140)="8043828a125d8a6d737b64", 0x39, 0x0, &(0x7f0000000180)="eb36fabf6319e9992abab3f75ffbdc311868d89cbffe2bf829a01c3b4ef457afd601c8f29cd5573680217e568fd8d84f9bc864009283b4d4a1"}) mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:31 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:31 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x8, 0x0}}}) 15:06:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x6c000000}) [ 394.100464][T26533] binder: 26523:26533 ioctl c018620c 20000080 returned -22 15:06:31 executing program 1: unshare(0x2000000) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0xe3, 0x1, 0xff, "f4571f788e68500bf9a9e1b7372101ea", "7d69cac338fb358c27b600c06ad8b775d51f3f968b1b799e2400be3b6fea46d915f50b4280f702876579046796a44ca5fc1839da52c9155cd8efa4a6156da32f2dea8e59a3a05c92f5f37dd9761bc492aabdcc4849052194fa45edff1e59923b99c69c4ddd046254e7a263452a6a61d4bf6a5b1751e3430089d3e52eaecc346b5b56d59d3f8ee09f286b151ec1562451ed424fa4d700e27a998e669c6cba8da8628c30f78818ef625ed553f9323f21c3f36be301b0c1420974e5f01cd9e9a345033fc04066033980b7a3f42d6258"}, 0xe3, 0x2) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x3460f9041888d4e0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000080)=0xfffffffffffffffd) 15:06:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x14\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:32 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x9, 0x0}}}) 15:06:32 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') r3 = getuid() syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000180)='./file0\x00', 0x4, 0xa, &(0x7f0000000a00)=[{&(0x7f00000001c0), 0x0, 0x578}, {&(0x7f00000004c0)="dd5fb17dd68e7511d6a387fc58672defccd902d58bf843f1a1644a818482106c8e1d293c32b798af49ad8ecc7debfbf3d55296d746267924fbdbc5316a6c15891922c30f1bb79a5514b5761594b2a5a647fea08551d3b99d33c7aa04bbdd14a53443ee28fb4aef26797b948ce6ef223691a284c28ff1c21753b9acb7e60d1fee711000974c90d7b9ced962eb7f702629e91d9c5df7050f567820b03a4ba2b8dd7143739c9b589b26c6705670c70fe294ac1bb4b451b43573a1e3ad8f71646646d4b50e", 0xc3, 0x1}, {&(0x7f0000000280)="ae54d1bef5b51b3ba96780ae84280633d40124ffa60a1c41cd7d60005073cad4a5239209b1ed1e83433baa9d7687791fd5cb740d1a48fec1a7d6b4de94e613c51ea3c97c47f01ce0c3e00b32f15132e4871c3f053429d8bc3370acf930d1d3c6ee577ffcfccc28130f4a147835b9f92abb4b54a7b63f1d90", 0x78, 0x21b}, {&(0x7f0000000340)="9da19e43f89bd843927ea15e44f430dc047f952cf972b41350f1e40980d1ac6bf68e3b184b3e4c60918c41ca620622c35e7d276e345bab9768185144184a6798bbd42a25969881499323aadb5fb2549c24fd1effb2ff7032145a86ef7210eefcd553486187bf39b84a", 0x69, 0x6}, {&(0x7f0000000600)="cf9d4459163d863ee27a8cf7621b2b6b9c8ea823f001fc25428740ca3403bb31dfe41b7f228eb60e62b2e7705f00f2371b0e98d1c4cf392d793c3268dba3716522be01da8d3abf922f024d4c88421272a0cc449b697d1837ae8c2e2fae78c5b1267e51e88f2729e25dbbe59549107016cae84d2fce388623ba65d40c532ad8289b0ffdcda424f33230b1c5092a23f7a987815845d4f5ea318f47ba5d4a16ace25ce3657ba2a919aed107907701ccf18843316e6106fb483f0c94e3856dcb5330ed06fac935757b7f182a3c8b78f0d2a0ae5a71fcc0ca33f1bee23c4d20de7bd105d05d444759a79d002d78be90d6c7e84e", 0xf1, 0x20}, {&(0x7f0000000700)="f8b9b71d14a9d9e9f87ca475e835023902a723883925e0f1d4d5fb9b00152fa492dfb00fd21178bc7d1933f09849b61a400fa497ee3ba1050d059cbfecae1471086090103b3edad3eb0914376cd4851463f8d9311339740552aef642ef11476475ee2f36d183d607131950777a34f5bfb6b1a75dcc976f1b336c24398faa90e1e4ebc91d11951571f26a709cb6e7230ad89ee1f84d6b314cfc1b51e75f9ecfa6383f29ffee6cb6a2c956067ccb9e0f242dcd2269b9765ea3d4815c658924e1c359c25c89e8308d785a471d396cf5", 0xce, 0x3f}, {&(0x7f0000000800)="ead222dd45c08ff74ee435b5343b264865998e8dfa0028834f01deb48e481973a31356df209d3a1ba28bbdb3c0", 0x2d, 0x604}, {&(0x7f0000000840)="ead7788b63880b37140244bbf1d679c1440464ad454b98a3085f0931a732682e81e8ab2a18a78de6a2e114b1b5392c6c60f5a0c1f8341338c004c0040df200089a617b707e0c1091233472c94df0b6b0b3bc57a41723e2d6b95e68eb7c80d18cd35cd8095ba16e127f2a031a4d9dbcbb368aebb4638fab7c8a9b56fbda48f15c775144ecbb552da3ad42b73aaac930245572b441535e702933278a56107a8fa01df3c1823b718f38fb3d33d41fb47a2b3e53dc45", 0xb4, 0x800}, {&(0x7f0000000900)="48e6e0c759a2d2cc9fb219dba72980a45c265b0d4ab9e02484bde22ab87646d077f041bd580e59adddc3a7a0aa6e84772c90703dad4cf56171a4fcd81fb5fff8ce6f41ab198d89a449f6fdd546fc9821f1726a97704544de94751231de38ba3671efa4fecf7c5480e6faf3140520d46499f14a6acf0889a6e9ad5e44e6296d59523a59e51e86", 0x86, 0x6}, {&(0x7f00000009c0)="02138acff8ce005418988528e5f98a9fd9e8b182f2f0b25adfdfde3c03d4ab8e5a03eb91b0", 0x25, 0x100000001}], 0x2000, &(0x7f0000000b00)={[{@noacl='noacl'}], [{@smackfsfloor={'smackfsfloor'}}, {@audit='audit'}, {@fowner_gt={'fowner>', r3}}]}) mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:32 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) poll(&(0x7f0000000000)=[{r0, 0x200}, {r0, 0x200}, {r0, 0x20}, {r0, 0xbbe97105b161c0ca}], 0x4, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x10100000000}) r2 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) sendmsg$nl_netfilter(r2, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800a804}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x290, 0x10, 0x2, 0x2, 0x70bd2d, 0x25dfdbfd, {0xb, 0x0, 0x7}, [@generic="9cd29d7f91da369f1a1175bc12eed2e40fe1bc9dd98564e1288361489f3dfd5dd488a7aad286920ee496439dcf62e9dac898f4758719af7bb584b269e6206aa981feaf8eff46d03a9d18dc9e599b2c31ed0d7b2de4a6ab2731b24551be38fa308a9f91ca00149167c09ca18ef2199064df949ce9fd49a91492465b", @generic="283c323762147b65d69631355ff43327c89328f99b8df28cb7be22c04f1ada3e5949384b62b0b73c7773fff19174469cae5b23df34fa941cee6e0d3ac741c6cc97f344f7d93fe776a2945e3dececdcc141742cecf7fa0ea6698716060c2bbaa6659aecd7c85c95b5b293a19afd9346827446a3e1dd2e5673aeea70d03976d4f4b2b440dfcb20f528d8fd2d705ab057209e00bb9e20cfd994f37cfac431762591b709fa66ec507f1e5db909473f32cc", @generic="48a7d440619dfe050348a4997653a1f2afc3afc46a9957b2338c83633fabc37e1d8cd568742c266248268e792edb33a990f51e1c88310ec6a7a2ea720cd6de26fa83996e0e5a87e05df9c6f0c4c3cbb712c0da53ac1e", @typed={0xc, 0x5, @u64=0x7c00000000}, @generic="da202cd7228709c94eb171150209ae3e1c222127aa624d6d9733245bdda748829cb20d2939efdaeac9ee79db0fd5dfcd57d7d643a2eb023f5cdf8edad381a998af23b301870cdf7aaa7336d27d7376f74c37a2debea1aa4d67a75fca272b9ed03acb049fa2b2a1c6bf1d2317c4cfe0eb327798931ee929c70829baba22dd0afcf68203fc76b66fcae83614abe3fb65ea4bd230b3fb24d2c4ba341854b98d496d84dec823f9be236f7929677834e5a9071ec82de074114b1f380758f0a837145a7e458c9030265f50bb0c6742abcb4074bee3a16800bf428a4c92f8a2ec13364909eb89af0933b2aea22e6bf4a0686c"]}, 0x290}, 0x1, 0x0, 0x0, 0x4000}, 0x4004010) 15:06:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x74000000}) [ 394.223516][T26551] 9pnet: Insufficient options for proto=fd [ 394.230409][T26549] binder: 26547:26549 ioctl c018620c 20000080 returned -22 [ 394.263113][T26560] binder: 26547:26560 ioctl c018620c 20000080 returned -22 15:06:32 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:32 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0xa, 0x0}}}) 15:06:32 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) poll(&(0x7f0000000000)=[{r0, 0x200}, {r0, 0x200}, {r0, 0x20}, {r0, 0xbbe97105b161c0ca}], 0x4, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x10100000000}) r2 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) sendmsg$nl_netfilter(r2, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800a804}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x290, 0x10, 0x2, 0x2, 0x70bd2d, 0x25dfdbfd, {0xb, 0x0, 0x7}, [@generic="9cd29d7f91da369f1a1175bc12eed2e40fe1bc9dd98564e1288361489f3dfd5dd488a7aad286920ee496439dcf62e9dac898f4758719af7bb584b269e6206aa981feaf8eff46d03a9d18dc9e599b2c31ed0d7b2de4a6ab2731b24551be38fa308a9f91ca00149167c09ca18ef2199064df949ce9fd49a91492465b", @generic="283c323762147b65d69631355ff43327c89328f99b8df28cb7be22c04f1ada3e5949384b62b0b73c7773fff19174469cae5b23df34fa941cee6e0d3ac741c6cc97f344f7d93fe776a2945e3dececdcc141742cecf7fa0ea6698716060c2bbaa6659aecd7c85c95b5b293a19afd9346827446a3e1dd2e5673aeea70d03976d4f4b2b440dfcb20f528d8fd2d705ab057209e00bb9e20cfd994f37cfac431762591b709fa66ec507f1e5db909473f32cc", @generic="48a7d440619dfe050348a4997653a1f2afc3afc46a9957b2338c83633fabc37e1d8cd568742c266248268e792edb33a990f51e1c88310ec6a7a2ea720cd6de26fa83996e0e5a87e05df9c6f0c4c3cbb712c0da53ac1e", @typed={0xc, 0x5, @u64=0x7c00000000}, @generic="da202cd7228709c94eb171150209ae3e1c222127aa624d6d9733245bdda748829cb20d2939efdaeac9ee79db0fd5dfcd57d7d643a2eb023f5cdf8edad381a998af23b301870cdf7aaa7336d27d7376f74c37a2debea1aa4d67a75fca272b9ed03acb049fa2b2a1c6bf1d2317c4cfe0eb327798931ee929c70829baba22dd0afcf68203fc76b66fcae83614abe3fb65ea4bd230b3fb24d2c4ba341854b98d496d84dec823f9be236f7929677834e5a9071ec82de074114b1f380758f0a837145a7e458c9030265f50bb0c6742abcb4074bee3a16800bf428a4c92f8a2ec13364909eb89af0933b2aea22e6bf4a0686c"]}, 0x290}, 0x1, 0x0, 0x0, 0x4000}, 0x4004010) 15:06:32 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 394.384242][T26577] binder: 26572:26577 ioctl c018620c 20000080 returned -22 15:06:32 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0xb, 0x0}}}) 15:06:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x7a000000}) [ 394.427855][T26582] binder: 26572:26582 ioctl c018620c 20000080 returned -22 15:06:32 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0xc, 0x0}}}) 15:06:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x15\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:32 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:32 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x214a4400}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000340)={0x6, 0x1, 0x3}) 15:06:32 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) poll(&(0x7f0000000000)=[{r0, 0x200}, {r0, 0x200}, {r0, 0x20}, {r0, 0xbbe97105b161c0ca}], 0x4, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x10100000000}) r2 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) sendmsg$nl_netfilter(r2, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800a804}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x290, 0x10, 0x2, 0x2, 0x70bd2d, 0x25dfdbfd, {0xb, 0x0, 0x7}, [@generic="9cd29d7f91da369f1a1175bc12eed2e40fe1bc9dd98564e1288361489f3dfd5dd488a7aad286920ee496439dcf62e9dac898f4758719af7bb584b269e6206aa981feaf8eff46d03a9d18dc9e599b2c31ed0d7b2de4a6ab2731b24551be38fa308a9f91ca00149167c09ca18ef2199064df949ce9fd49a91492465b", @generic="283c323762147b65d69631355ff43327c89328f99b8df28cb7be22c04f1ada3e5949384b62b0b73c7773fff19174469cae5b23df34fa941cee6e0d3ac741c6cc97f344f7d93fe776a2945e3dececdcc141742cecf7fa0ea6698716060c2bbaa6659aecd7c85c95b5b293a19afd9346827446a3e1dd2e5673aeea70d03976d4f4b2b440dfcb20f528d8fd2d705ab057209e00bb9e20cfd994f37cfac431762591b709fa66ec507f1e5db909473f32cc", @generic="48a7d440619dfe050348a4997653a1f2afc3afc46a9957b2338c83633fabc37e1d8cd568742c266248268e792edb33a990f51e1c88310ec6a7a2ea720cd6de26fa83996e0e5a87e05df9c6f0c4c3cbb712c0da53ac1e", @typed={0xc, 0x5, @u64=0x7c00000000}, @generic="da202cd7228709c94eb171150209ae3e1c222127aa624d6d9733245bdda748829cb20d2939efdaeac9ee79db0fd5dfcd57d7d643a2eb023f5cdf8edad381a998af23b301870cdf7aaa7336d27d7376f74c37a2debea1aa4d67a75fca272b9ed03acb049fa2b2a1c6bf1d2317c4cfe0eb327798931ee929c70829baba22dd0afcf68203fc76b66fcae83614abe3fb65ea4bd230b3fb24d2c4ba341854b98d496d84dec823f9be236f7929677834e5a9071ec82de074114b1f380758f0a837145a7e458c9030265f50bb0c6742abcb4074bee3a16800bf428a4c92f8a2ec13364909eb89af0933b2aea22e6bf4a0686c"]}, 0x290}, 0x1, 0x0, 0x0, 0x4000}, 0x4004010) [ 394.579271][T26607] binder: 26600:26607 ioctl c018620c 20000080 returned -22 15:06:32 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:32 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0xd, 0x0}}}) 15:06:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x1000000000000}) [ 394.653141][T26619] binder: 26600:26619 ioctl c018620c 20000080 returned -22 15:06:32 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) poll(&(0x7f0000000000)=[{r0, 0x200}, {r0, 0x200}, {r0, 0x20}, {r0, 0xbbe97105b161c0ca}], 0x4, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x10100000000}) r2 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) 15:06:32 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0xe, 0x0}}}) 15:06:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x16\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:32 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 394.766998][T26628] binder: 26627:26628 ioctl c018620c 20000080 returned -22 15:06:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x100000000000000}) 15:06:32 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000140)={0x14, 0x49, 0x2, {0x41d320d74da6705e, 0x1, 0x8}}, 0x14) 15:06:32 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x10, 0x0}}}) [ 394.847643][T26646] binder: 26627:26646 ioctl c018620c 20000080 returned -22 15:06:32 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) poll(&(0x7f0000000000)=[{r0, 0x200}, {r0, 0x200}, {r0, 0x20}, {r0, 0xbbe97105b161c0ca}], 0x4, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x10100000000}) syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) 15:06:32 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 394.919564][T26656] binder: 26652:26656 ioctl c018620c 20000080 returned -22 15:06:32 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x11, 0x0}}}) [ 394.982235][T26662] binder: 26652:26662 ioctl c018620c 20000080 returned -1 15:06:32 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) poll(&(0x7f0000000000)=[{r0, 0x200}, {r0, 0x200}, {r0, 0x20}, {r0, 0xbbe97105b161c0ca}], 0x4, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x10100000000}) 15:06:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x200000000000000}) 15:06:32 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x12, 0x0}}}) 15:06:32 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x1c\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:32 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) r3 = getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000880)={{{@in6=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe8) stat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getpid() getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000b00)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b40)={0x0, 0x0, 0x0}, &(0x7f0000000b80)=0xc) r9 = getpgid(0xffffffffffffffff) r10 = geteuid() fstat(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) r13 = getpgrp(0x0) stat(&(0x7f0000000c40)='./file0/file0\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getegid() sendmsg$unix(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f00000001c0)="414c498397d1bf5d50719bc6490b936edce5a2d24729544868d278feb4", 0x1d}, {&(0x7f00000004c0)="e3a679df7b21915ffafcce5bcbbf2b4436f41607252b76e00c33b4c0023654c0315ec9de258f6a53bc0ba34a132edf02b4cd9c0626b7b5d7f1b54a944407e891f7c4e1486161378b53350281a4df5d2e0202dff2620937638cd4e3cd9a4d16ae9550ef157d99c2d0c7c04f2fdb490b0fdfc4cca35ec9befb13977e188be52a8d501a0a", 0x83}, {&(0x7f0000000280)="12056366c380c29067b0d6a2e8ed7f109fb8e93169", 0x15}, {&(0x7f0000000600)="340f648a3a7fbc80d6528fa2a4cbd09ec9417a087a51b7d08fcd7fd33404016370fd778c3c4142b724eeb317829d08922b7237fa892ee1262394eb185b9a8cf46b072695978d328e534fcf0afb280b4765fd5aee993ee40875bc356f279abe187ad51af6732c769020521eaece111fa5ecca1a53ebbdbe0f97a391d93489923caecf4206716b880c2569f4125488249b279f2a016752840f3cc898a33511a4656939e8d253128f073a92b217b85d1e14ffb6924bdc7ace89463116f30fea3227d14ee15de2bfd19f0c0b0e1b2fe6b82cfd8ccc495dd7f2eab3", 0xd9}, {&(0x7f0000000340)="1f43e2719ce20a25f24f46fdfb6f86a3cf93ff14418df228fc5ec6d84612951abdb22741e0ac3724eece420be41534ca4f36e13c9b292670ad32d37ac86d9ea431501a244803236903b463375a8bf59c83d13c323b38c22aaffc26a46c49faf9", 0x60}, {&(0x7f0000000700)="94125ca6e3263b5d71dc2e743021ba40fb3c02812316a6d54c22b9c0c6bce67721831a9b66be4fedbdd8bc8d90eb4324dbc8ad70886c8b9e4c688faa3b12041636cf9c9a69108c2470d0f787e595b10358a5ec58768b22fb2f3b84f698a56f5eb2b868eb7484ff24446c8d3a33697e1c38d4461f8ba59b3ce34fa2652b156cd77e97e25d0c2b579b5fe9412ee44edaa95d6c0842f86408ea477f193fc3db311d0cec2fea962783665c3e6ff803aa3272c17451afa72c1907fcd4ec25d037149ae7a63952d4715ec0fe649948979b6291856fe3ae", 0xd4}], 0x6, &(0x7f0000000d00)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @rights={{0x38, 0x1, 0x1, [r2, r0, r0, r2, r2, r0, r0, r2, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x1c, 0x1, 0x1, [r1, r12, r1]}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}], 0xd8, 0x40}, 0x8000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 395.107345][T26681] binder: 26679:26681 ioctl c018620c 20000080 returned -22 15:06:32 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) poll(&(0x7f0000000000)=[{r0, 0x200}, {r0, 0x200}, {r0, 0x20}, {r0, 0xbbe97105b161c0ca}], 0x4, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) 15:06:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x300000000000000}) [ 395.163012][T26688] 9pnet: Insufficient options for proto=fd [ 395.171859][T26686] binder: 26679:26686 ioctl c018620c 20000080 returned -22 15:06:33 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x25, 0x0}}}) 15:06:33 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:33 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x5c, 0x0}}}) 15:06:33 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) poll(&(0x7f0000000000)=[{r0, 0x200}, {r0, 0x200}, {r0, 0x20}, {r0, 0xbbe97105b161c0ca}], 0x4, 0x6) [ 395.281565][T26700] binder: 26695:26700 ioctl c018620c 20000080 returned -22 [ 395.314550][T26709] binder: 26695:26709 ioctl c018620c 20000080 returned -22 [ 395.315349][T26706] 9pnet: Insufficient options for proto=fd 15:06:33 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) chroot(&(0x7f0000000180)='./file0\x00') ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000140)) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x80, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRES64=r2]]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:33 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x300, 0x0}}}) 15:06:33 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x400000000000000}) 15:06:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x1e\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:33 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r0, 0x200}, {r0, 0x200}, {r0, 0x20}, {r0, 0xbbe97105b161c0ca}], 0x4, 0x6) 15:06:33 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x500, 0x0}}}) [ 395.460776][T26729] 9pnet: Insufficient options for proto=fd 15:06:33 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x600, 0x0}}}) 15:06:33 executing program 4: pipe2$9p(0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:33 executing program 1: unshare(0x8000400) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0xbbe97105b161c0ca}], 0x4, 0x6) [ 395.501684][T26731] binder: 26722:26731 ioctl c018620c 20000080 returned -22 [ 395.540204][T26740] binder: 26722:26740 ioctl c018620c 20000080 returned -22 15:06:33 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x700, 0x0}}}) 15:06:33 executing program 4: pipe2$9p(0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 395.604064][T26749] 9pnet: Insufficient options for proto=fd 15:06:33 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000180)={0xfffffffffffffd6e, 0x5, 0x0, {0x0, 0x0, 0x5}}, 0xfffffde2) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x500000000000000}) 15:06:33 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x900, 0x0}}}) 15:06:33 executing program 1: unshare(0x8000400) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0xbbe97105b161c0ca}], 0x4, 0x6) [ 395.693813][T26755] 9pnet: Insufficient options for proto=fd [ 395.707564][T26763] 9pnet: Insufficient options for proto=fd [ 395.718697][T26755] 9pnet: Insufficient options for proto=fd 15:06:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0%\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:33 executing program 4: pipe2$9p(0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:33 executing program 1: unshare(0x8000400) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0xbbe97105b161c0ca}], 0x4, 0x6) 15:06:33 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0xa00, 0x0}}}) 15:06:33 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 395.804367][T26776] binder: 26768:26776 ioctl c018620c 20000080 returned -22 [ 395.834184][T26782] 9pnet: Insufficient options for proto=fd [ 395.841942][T26784] binder: 26768:26784 ioctl c018620c 20000080 returned -22 15:06:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x600000000000000}) 15:06:33 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0xb00, 0x0}}}) 15:06:33 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 395.943251][T26799] binder: 26798:26799 ioctl c018620c 20000080 returned -22 [ 395.974729][T26806] binder: 26798:26806 ioctl c018620c 20000080 returned -22 15:06:34 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) utimes(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)={{0x0, 0x7530}}) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:34 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r0, 0x200}, {r0, 0x200}, {r0, 0x20}, {r0, 0xbbe97105b161c0ca}], 0x4, 0x6) 15:06:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\xc3\x03`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:34 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0xc00, 0x0}}}) 15:06:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x700000000000000}) 15:06:34 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:34 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0xd00, 0x0}}}) 15:06:34 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 396.694382][T26829] binder: 26821:26829 ioctl c018620c 20000080 returned -22 [ 396.724259][T26829] binder: BINDER_SET_CONTEXT_MGR already set 15:06:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x800000000000000}) 15:06:34 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r0, 0x200}, {r0, 0x200}, {r0, 0x20}, {r0, 0xbbe97105b161c0ca}], 0x4, 0x6) [ 396.738790][T26832] binder: 26821:26832 ioctl c018620c 20000080 returned -1 [ 396.746479][T26829] binder: 26821:26829 ioctl 40046207 0 returned -16 15:06:34 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0x3, 0x1, 0xc91) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000340)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r2, &(0x7f0000002600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x14, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0x44010) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:34 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:34 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0xe00, 0x0}}}) 15:06:34 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r0, 0x200}, {r0, 0x200}, {r0, 0x20}, {r0, 0xbbe97105b161c0ca}], 0x4, 0x6) 15:06:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\xdc\x0f`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:34 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x1100, 0x0}}}) 15:06:34 executing program 1: unshare(0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r0, 0x200}, {r0, 0x200}, {r0, 0x20}, {r0, 0xbbe97105b161c0ca}], 0x4, 0x6) [ 396.899636][T26851] binder: 26848:26851 ioctl c018620c 20000080 returned -22 [ 396.922408][T26859] binder: 26848:26859 ioctl c018620c 20000080 returned -22 15:06:34 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x900000000000000}) 15:06:34 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x1200, 0x0}}}) 15:06:34 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0xfffffffffffffe19) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:34 executing program 1: unshare(0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r0, 0x200}, {r0, 0x200}, {r0, 0x20}, {r0, 0xbbe97105b161c0ca}], 0x4, 0x6) 15:06:34 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, 0x0, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 397.073415][T26880] binder: 26877:26880 ioctl c018620c 20000080 returned -22 [ 397.104645][T26886] binder: 26877:26886 ioctl c018620c 20000080 returned -22 15:06:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0xa00000000000000}) 15:06:34 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x2500, 0x0}}}) 15:06:34 executing program 1: unshare(0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r0, 0x200}, {r0, 0x200}, {r0, 0x20}, {r0, 0xbbe97105b161c0ca}], 0x4, 0x6) [ 397.189124][T26893] binder: 26892:26893 ioctl c018620c 20000080 returned -22 [ 397.249703][T26905] binder: 26892:26905 ioctl c018620c 20000080 returned -22 15:06:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x005`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:35 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x4000, 0x0}}}) 15:06:35 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, 0x0, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0xb00000000000000}) 15:06:35 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) poll(&(0x7f0000000000)=[{r0, 0x200}, {r0, 0x200}, {r0, 0x20}, {r0, 0xbbe97105b161c0ca}], 0x4, 0x6) 15:06:35 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000140)={0x84f5, 0xc5, 0xffffffff00000001, 0x5}) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f00000001c0)={0x3, 0x591a80e90d28be5f, [0x9, 0x7, 0x8, 0x9, 0x8, 0x1, 0x8000, 0x40]}) openat(r2, &(0x7f0000000180)='./file0\x00', 0x100, 0x1) 15:06:35 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x5c00, 0x0}}}) 15:06:35 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, 0x0, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 397.416014][T26925] binder: 26924:26925 ioctl c018620c 20000080 returned -22 15:06:35 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x1000000, 0x0}}}) 15:06:35 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) poll(&(0x7f0000000000)=[{r0, 0x200}, {r0, 0x200}, {r0, 0x20}, {r0, 0xbbe97105b161c0ca}], 0x4, 0x6) 15:06:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0xc00000000000000}) [ 397.470646][T26935] binder: 26924:26935 ioctl c018620c 20000080 returned -1 15:06:35 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[], 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 397.595034][T26951] binder: 26946:26951 ioctl c018620c 20000080 returned -22 [ 397.620274][T26955] binder: 26946:26955 ioctl c018620c 20000080 returned -22 15:06:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x00\x87`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:35 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x2000000, 0x0}}}) 15:06:35 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) poll(&(0x7f0000000000)=[{r0, 0x200}, {r0, 0x200}, {r0, 0x20}, {r0, 0xbbe97105b161c0ca}], 0x4, 0x6) 15:06:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0xd00000000000000}) 15:06:35 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[], 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 397.708906][T26964] binder: 26962:26964 ioctl c018620c 20000080 returned -22 15:06:35 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1500000065ffff018000000400000032303030ffffff7f00000000d79186b6debc1799c74c76086ad530aa0f26d9c46984302e773363d4b566a89b17add8de690ca0ee9f527c785e0e036359b7d92b6f720655"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:35 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x3000000, 0x0}}}) 15:06:35 executing program 1: unshare(0x8000400) syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) poll(0x0, 0x0, 0x6) 15:06:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0xe00000000000000}) [ 397.764569][T26973] binder: 26962:26973 ioctl c018620c 20000080 returned -1 15:06:35 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[], 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:35 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x4000000, 0x0}}}) 15:06:35 executing program 1: unshare(0x8000400) syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) poll(0x0, 0x0, 0x6) [ 397.909444][T26988] binder: 26982:26988 ioctl c018620c 20000080 returned -22 [ 397.943326][T26997] binder: 26982:26997 ioctl c018620c 20000080 returned -1 15:06:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x02`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:35 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:35 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x5000000, 0x0}}}) 15:06:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x1000000000000000}) 15:06:35 executing program 1: unshare(0x8000400) syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) poll(0x0, 0x0, 0x6) 15:06:35 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) getsockname$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x1c) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ff030280000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:35 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x6000000, 0x0}}}) 15:06:35 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 398.070072][T27010] binder: 27009:27010 ioctl c018620c 20000080 returned -22 15:06:35 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x7000000, 0x0}}}) 15:06:35 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r0, 0x200}, {r0, 0x200}, {r0, 0x20}], 0x3, 0x6) [ 398.131684][T27024] binder: 27009:27024 ioctl c018620c 20000080 returned -1 15:06:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x1100000000000000}) 15:06:36 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x60002, 0x0) 15:06:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x03`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:36 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x8000000, 0x0}}}) 15:06:36 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 398.270569][T27039] binder: 27038:27039 ioctl c018620c 20000080 returned -22 [ 398.305788][T27049] binder: 27038:27049 ioctl c018620c 20000080 returned -22 15:06:36 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r0, 0x200}, {r0, 0x200}], 0x2, 0x6) 15:06:36 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x9d33f78e48d36212, 0x0) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x1200000000000000}) 15:06:36 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x9000000, 0x0}}}) [ 398.374219][T27059] binder: 27055:27059 ioctl c018620c 20000080 returned -22 15:06:36 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r0, 0x200}], 0x1, 0x6) 15:06:36 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x13) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 398.427923][T27065] binder: 27055:27065 ioctl c018620c 20000080 returned -22 15:06:36 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0xa000000, 0x0}}}) 15:06:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x2000000000000000}) 15:06:36 executing program 0: pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f00000001c0)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 398.567719][T27086] binder: 27085:27086 ioctl c018620c 20000080 returned -22 [ 398.601442][T27092] binder: 27085:27092 ioctl c018620c 20000080 returned -22 15:06:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x04`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:36 executing program 1: unshare(0x8000400) syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) poll(&(0x7f0000000000), 0x0, 0x6) 15:06:36 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0xb000000, 0x0}}}) 15:06:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x2500000000000000}) 15:06:36 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x13) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:36 executing program 1: unshare(0x8000400) syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) poll(&(0x7f0000000000), 0x0, 0x6) [ 398.718858][T27100] binder: 27098:27100 ioctl c018620c 20000080 returned -22 [ 398.729121][T27102] binder: 27098:27102 ioctl c018620c 20000080 returned -22 15:06:36 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0xc000000, 0x0}}}) 15:06:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x3f00000000000000}) 15:06:36 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYRES64=r1], 0x2ef) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYBLOB="14b1728817575023d81f2ed0d49c77dd3ce39159a78fe2cc5331d51a230ad1409118129a296c833097d63ed51623521b0acacd880e"]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f0000000140)='./file0\x00', 0x200, 0x0) 15:06:36 executing program 1: unshare(0x8000400) syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) poll(&(0x7f0000000000), 0x0, 0x6) 15:06:36 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0xd000000, 0x0}}}) [ 398.880351][T27122] binder: 27121:27122 ioctl c018620c 20000080 returned -22 15:06:36 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0xe000000, 0x0}}}) [ 398.956222][T27133] binder: 27121:27133 ioctl c018620c 20000080 returned -22 15:06:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x05`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x4000000000000000}) 15:06:36 executing program 1: unshare(0x8000400) syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x200}], 0x1, 0x6) 15:06:36 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x10000000, 0x0}}}) 15:06:36 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x13) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 399.072786][T27148] binder: 27140:27148 ioctl c018620c 20000080 returned -22 15:06:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x4800000000000000}) 15:06:36 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x11000000, 0x0}}}) 15:06:36 executing program 1: unshare(0x8000400) syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x200}], 0x1, 0x6) [ 399.119337][T27154] binder: 27140:27154 ioctl c018620c 20000080 returned -22 [ 399.127132][T27151] 9pnet: Insufficient options for proto=fd [ 399.153873][T27151] 9pnet: Insufficient options for proto=fd 15:06:36 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000140)=0x2) mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:37 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x12000000, 0x0}}}) 15:06:37 executing program 1: unshare(0x8000400) syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x200}], 0x1, 0x6) [ 399.208849][T27166] binder: 27163:27166 ioctl c018620c 20000080 returned -22 15:06:37 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x25000000, 0x0}}}) [ 399.269006][T27177] binder: 27163:27177 ioctl c018620c 20000080 returned -22 15:06:37 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x06`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:37 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x6) 15:06:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x4c00000000000000}) 15:06:37 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d7"], 0x1c) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:37 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) syz_mount_image$hfsplus(&(0x7f0000000280)='hfsplus\x00', &(0x7f00000002c0)='./file1\x00', 0x400, 0x6, &(0x7f0000000800)=[{&(0x7f0000000340)="f1e1cea9599dcd367edefc2eaeb7f62c7cce5bb751a9f39188f5d8921adae454d835142ce8edaeb57011f385f16b4752c8549286956dd3f88674d2aa15d888cf1b36619fdad3401b84a0989e796deaa22ec0936494eddc9a3456b0526e1e376772fc65bfe87000c3a6cce3f90c2f842cdfee94aa5b79622c", 0x78, 0x6}, {&(0x7f00000004c0)="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", 0xfe, 0x9}, {&(0x7f0000000600)="7024e8c2606c9e7961279f0a0265930de92bf126d9a90b08c5978083411a0b80e227ab18f2ac754b7c00e201b47c23d884dca59bb0ca1a97266c1e556bb1de718def8085f725665c8dc0e602e954c52a11b83381de5f8e9f1140654760383e3991cf94c6ef1bcd83f755333252765b5ac26232e09995f825d7588a7b59a0d29d3399378e4523a570ee9745d5a2f85f12b8c8a1b40ec4e8cd39", 0x99, 0x1}, {&(0x7f00000006c0)="5cf2d8cd41acfa5143d3976b719018986c85d327733c9cc2a5e7341eeda700e8b691cc8a5bd04a0d10f972f8a398df42bc21c68f301fdd801a3bee5941518d29", 0x40, 0x10001}, {&(0x7f0000000700)="a1b9e71408f1a64715c175e890eff6ad7ae692678c14596ab5bd5e646332c46132575c325d0eef06431d6e363216b351e9f6bb4063046ee1294775c771488475b039af", 0x43, 0x3ff}, {&(0x7f0000000780)="a3ffe469b36754fe193b0c4885a04b6894c426c7ab98fe43005c3aebef1b6f230d786ff88b7b88ab580e51d2243dafa8d41b9a77b1126086aa05b47121aae8eb16bfae37283513dd4dbf546e056b6d186368336f12a031898b9ba90c1d67f07171188f181b6b7548b1ff4c79b29820", 0x6f, 0x9}], 0x40088, &(0x7f00000008c0)={[{@barrier='barrier'}], [{@subj_role={'subj_role', 0x3d, '9p\x00'}}, {@measure='measure'}]}) lsetxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@v1={0x2, "2595be08dffc3bd95926e7aa45a5fb"}, 0x10, 0x3) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:37 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x40000000, 0x0}}}) 15:06:37 executing program 1: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) [ 399.423654][T27197] binder: 27192:27197 ioctl c018620c 20000080 returned -22 15:06:37 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x5c000000, 0x0}}}) [ 399.477358][T27208] binder: 27192:27208 ioctl c018620c 20000080 returned -22 15:06:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x412, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000180)='../file0\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) 15:06:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x5c00000000000000}) 15:06:37 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x1000000000000, 0x0}}}) 15:06:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x6000000000000000}) [ 399.626699][T27225] binder: 27224:27225 ioctl c018620c 20000080 returned -22 [ 399.636157][T27227] binder: 27224:27227 ioctl c018620c 20000080 returned -22 15:06:37 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\a`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:37 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500008065ffff01800bba4c6398285287deb96cafd704f045d42b256b05324cc7cc9548fa7d7e3b15c8ea6b63b4"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x86}, 0x30) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000040)) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e73c95277c17266646e6f3d2e18469c54b70c84e25529ba4a79a00f2b22933b4f33256ffef312e0f6e75e16d8cda54fff1e55c90ddb10e99873a0cf5ab17a3c4c76957623e5e03c3c8baf2b5b8963869d99cc5fd3b27ccbc187d97eed3f66f87dc44b1658b3dce132f834537a92ff0fdc1d3a", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:37 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x100000000000000, 0x0}}}) 15:06:37 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d7"], 0x1c) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RCLUNK(r1, &(0x7f0000000000)={0x7}, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x8000000, r1}) [ 399.742990][T27238] binder: 27237:27238 ioctl c018620c 20000080 returned -22 [ 399.768006][T27241] binder: 27237:27241 ioctl c018620c 20000080 returned -22 15:06:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x6800000000000000}) 15:06:37 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x200000000000000, 0x0}}}) 15:06:37 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x300000000000000, 0x0}}}) 15:06:37 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 399.913861][T27261] binder: 27256:27261 ioctl c018620c 20000080 returned -22 [ 399.944852][T27268] binder: 27256:27268 ioctl c018620c 20000080 returned -22 15:06:37 executing program 1: socket(0x10, 0x80803, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000340)='/dev/snd/timer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.stE\xae\x00', 0x275a, 0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x2000002) read$eventfd(r3, &(0x7f00000003c0), 0x8) poll(&(0x7f0000000300)=[{r2, 0x20}, {r2, 0x400}, {r2, 0x4000}, {r2, 0x4000}, {r1, 0x100}, {r1, 0x5000}, {r2, 0x200}, {r0, 0x100}], 0x8, 0x9) fallocate(r1, 0x800000000000002, 0x6, 0xffffffff) r4 = creat(&(0x7f0000001c00)='./bus\x00', 0xa1) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r5) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000001bc0)=0xc) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_open_pts(r3, 0x8000) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000640)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0xc}}, 0x2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}}, 0xe8) ftruncate(r4, 0x800fe) sendfile(r6, r7, 0x0, 0x8000fffffffe) 15:06:37 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d7"], 0x1c) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x6c00000000000000}) 15:06:37 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\b`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:37 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x400000000000000, 0x0}}}) 15:06:37 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 400.121151][T27284] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 400.123229][T27289] binder: 27286:27289 ioctl c018620c 20000080 returned -22 15:06:37 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x500000000000000, 0x0}}}) [ 400.165592][T27293] binder: 27286:27293 ioctl c018620c 20000080 returned -22 15:06:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x7400000000000000}) [ 400.281296][T27304] binder: 27302:27304 ioctl c018620c 20000080 returned -22 [ 400.321422][T27311] binder: BINDER_SET_CONTEXT_MGR already set 15:06:38 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x600000000000000, 0x0}}}) 15:06:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\t`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 400.335196][T27312] binder: 27302:27312 ioctl c018620c 20000080 returned -1 [ 400.344899][T27311] binder: 27302:27311 ioctl 40046207 0 returned -16 15:06:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x7a00000000000000}) 15:06:38 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc"], 0x21) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:38 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x10007) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x100000129}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffa) 15:06:38 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x700000000000000, 0x0}}}) 15:06:38 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0x0, 0xfffffffffffffffe}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 400.505805][T27330] binder: 27325:27330 ioctl c018620c 20000080 returned -22 [ 400.530908][T27330] binder: BINDER_SET_CONTEXT_MGR already set [ 400.538306][T27330] binder: 27325:27330 ioctl 40046207 0 returned -16 [ 400.548178][T27332] binder: 27325:27332 ioctl c018620c 20000080 returned -1 15:06:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0xffffffff00000000}) 15:06:38 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x800000000000000, 0x0}}}) 15:06:38 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x900000000000000, 0x0}}}) 15:06:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x2}) 15:06:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\n`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 400.628539][T27346] binder: 27344:27346 ioctl c018620c 20000080 returned -22 [ 400.651280][T27349] binder: 27344:27349 ioctl c018620c 20000080 returned -22 15:06:38 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0xa00000000000000, 0x0}}}) [ 400.754312][ T26] audit: type=1804 audit(1567004798.509:43): pid=27351 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir054096223/syzkaller.4xfPad/604/bus" dev="sda1" ino=17089 res=1 [ 400.799576][T27362] binder: 27358:27362 ioctl c018620c 20000080 returned -22 [ 400.830299][T27370] binder: 27358:27370 ioctl c018620c 20000080 returned -22 15:06:38 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0xb00000000000000, 0x0}}}) 15:06:38 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008000900323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c77660700b4ffe96f3d", @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000140)='security.evm\x00', &(0x7f00000004c0)=@v2={0x5, 0x1, 0xa, 0x2, 0x9f, "3809a2c4aa54a10e0c45499e93d2dbea390d2c84d6ea04fd9117148ccb2d38910fee14531c02c64195cbc80aefdb3ebab691d09a0a2c4223105db64c6c50c700f8d2953c732b01ece183b7bcc0948da00f7c42e8aef174d8c38d53d6e1f1ad4722c4391288a13852926ca77828f93199a69efdaa419445caef176d2804cb0d6fc9d15f09b0fc58c23a388cab0d3fa1e718b3fbc66c8e47c630cb87caaed85e"}, 0xa9, 0x2) 15:06:38 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc"], 0x21) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 400.854811][ T26] audit: type=1804 audit(1567004798.609:44): pid=27360 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir054096223/syzkaller.4xfPad/604/bus" dev="sda1" ino=17089 res=1 15:06:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fremovexattr(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) symlink(0x0, 0x0) listen(r2, 0x7) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(0x0) clock_gettime(0x7, &(0x7f00000001c0)={0x0}) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r5 = dup(r0) mkdirat(r5, &(0x7f0000000040)='./file0\x00', 0x50) setsockopt$sock_timeval(r2, 0x1, 0x57, &(0x7f0000000300)={r4}, 0x8) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) fcntl$lock(r0, 0x0, &(0x7f00000000c0)) ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f0000000000)) r6 = openat$zero(0xffffffffffffff9c, 0x0, 0x800, 0x0) shutdown(r6, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0xffffffffffffff04) poll(0x0, 0x2de, 0x6e54) write(r3, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r3, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'lo\x00', 0x800}) accept4(r2, 0x0, 0x0, 0x0) 15:06:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x3}) 15:06:38 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0xc00000000000000, 0x0}}}) 15:06:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\v`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 400.978857][T27388] 9pnet: Insufficient options for proto=fd [ 400.992183][T27390] binder: 27386:27390 ioctl c018620c 20000080 returned -22 [ 401.012580][T27391] 9pnet: Insufficient options for proto=fd 15:06:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x4}) 15:06:38 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x4100, 0x0) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f00000002c0)={0x34, 0x0, &(0x7f0000000280)}) write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x15) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x15, 0x181000) r3 = dup(r1) setxattr$security_smack_entry(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.SMACK64MMAP\x00', &(0x7f00000001c0)='9p\x00', 0x3, 0x1) lookup_dcookie(0x80000100000003, &(0x7f0000000600)=""/156, 0x9c) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) [ 401.033686][T27396] binder: 27386:27396 ioctl c018620c 20000080 returned -22 15:06:38 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0xd00000000000000, 0x0}}}) 15:06:38 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff01f6cd0008003950323030302ebfad67b135bb20d79186b6debc17a4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) unlinkat(r2, &(0x7f0000000180)='./file0\x00', 0x200) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000140)=""/60) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:38 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0xe00000000000000, 0x0}}}) 15:06:38 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc"], 0x21) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:39 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0}}}) [ 401.216451][T27416] binder: 27410:27416 ioctl c018620c 20000080 returned -22 [ 401.251062][T27413] binder: BINDER_SET_CONTEXT_MGR already set 15:06:39 executing program 0: pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0xcbc952f14134de70) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000180)={0x18, 0xffffffffffffffff}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0xfcfc, 0x5, 0x0, {0x0, 0x0, 0x7fffffff}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f0000000140)='./file0\x00', 0x0, 0xfffffffc) [ 401.277196][T27416] binder: 27410:27416 ioctl c018620c 20000080 returned -22 [ 401.277481][T27413] binder: 27410:27413 ioctl 40046207 0 returned -16 [ 401.442422][T27438] 9pnet: Insufficient options for proto=fd [ 401.453816][T27438] 9pnet: Insufficient options for proto=fd 15:06:39 executing program 1: r0 = socket(0x11, 0x2, 0x9) accept4(r0, &(0x7f0000000040)=@tipc=@name, &(0x7f0000000100)=0x80, 0x80000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) 15:06:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x5}) 15:06:39 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x1100000000000000, 0x0}}}) 15:06:39 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4"], 0x23) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\f`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:39 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = syz_open_dev$sndpcmp(&(0x7f0000000380)='/dev/snd/pcmC#D#p\x00', 0xffffffffffffffff, 0x4c440) accept4$unix(r2, 0x0, &(0x7f00000004c0), 0x800) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f00000003c0)={0x10002, 0x0, &(0x7f0000ff4000/0xc000)=nil}) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000340)=0x5) recvfrom$unix(r3, &(0x7f0000000140)=""/137, 0x89, 0x20, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e20}, 0x6e) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30}, 0x30) epoll_create(0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f0000000000)='./file0\x00') 15:06:39 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x1200000000000000, 0x0}}}) 15:06:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x6}) [ 401.857370][T27452] binder: 27446:27452 ioctl c018620c 20000080 returned -22 [ 401.871104][T27456] binder: 27446:27456 ioctl c018620c 20000080 returned -22 15:06:39 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0xffffffffffffff6c}, 0xa1) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:39 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x2500000000000000, 0x0}}}) 15:06:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x7}) 15:06:39 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0}}}) [ 401.956608][T27467] binder: 27466:27467 ioctl c018620c 20000080 returned -22 [ 401.983136][T27471] binder: 27466:27471 ioctl c018620c 20000080 returned -22 15:06:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000180)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r2 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) write$evdev(r4, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x70, 0xff, 0x6bb50a6, 0xd450, 0x29, 0x0, 0x2, 0xf0c1d8ee30b8df09, 0x1, 0x1, 0x2, 0x8, 0x1, 0x200, 0x7, 0x1, 0x5, 0x7, 0x7, 0x7, 0x0, 0x5, 0x101, 0x5, 0x1818, 0x2, 0xdefc, 0x9, 0xfffffffffffffff7, 0xfff, 0x1, 0x1, 0x43e, 0x9, 0x4, 0x1, 0x7, 0x0, 0x7ff, 0x2, @perf_config_ext={0x7, 0x9}, 0x800, 0x5, 0x7ff, 0xc, 0x3ef0, 0x9, 0x1}, r4, 0x4, r1, 0x8) fstatfs(r1, &(0x7f0000005200)=""/4096) 15:06:39 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4"], 0x23) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:39 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x5c00000000000000, 0x0}}}) [ 402.051213][T27477] binder: 27476:27477 ioctl c018620c 20000080 returned -22 [ 402.077462][T27483] binder: 27476:27483 ioctl c018620c 20000080 returned -22 15:06:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\r`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x8}) 15:06:40 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0}}}) [ 402.228712][T27501] binder: 27500:27501 ioctl c018620c 20000080 returned -22 [ 402.259769][T27508] binder: 27500:27508 ioctl c018620c 20000080 returned -22 15:06:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x9}) 15:06:40 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:40 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x8e) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="0000001b020000b2312cf293a73e5e958e7e65045eee21dc6164007163d9bd67edb1f82e9c7a2a54ebdd211fa2", @ANYRESHEX=r2]) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x13, r3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4040, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000180)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r2 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) write$evdev(r4, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x70, 0xff, 0x6bb50a6, 0xd450, 0x29, 0x0, 0x2, 0xf0c1d8ee30b8df09, 0x1, 0x1, 0x2, 0x8, 0x1, 0x200, 0x7, 0x1, 0x5, 0x7, 0x7, 0x7, 0x0, 0x5, 0x101, 0x5, 0x1818, 0x2, 0xdefc, 0x9, 0xfffffffffffffff7, 0xfff, 0x1, 0x1, 0x43e, 0x9, 0x4, 0x1, 0x7, 0x0, 0x7ff, 0x2, @perf_config_ext={0x7, 0x9}, 0x800, 0x5, 0x7ff, 0xc, 0x3ef0, 0x9, 0x1}, r4, 0x4, r1, 0x8) fstatfs(r1, &(0x7f0000005200)=""/4096) 15:06:40 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:40 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4"], 0x23) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x0e`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 402.432354][T27522] binder: 27515:27522 ioctl c018620c 20000080 returned -22 [ 402.443988][T27522] binder: BINDER_SET_CONTEXT_MGR already set [ 402.458543][T27525] binder: 27515:27525 ioctl c018620c 20000080 returned -22 [ 402.466551][T27522] binder: 27515:27522 ioctl 40046207 0 returned -16 15:06:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0xa}) 15:06:40 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 402.579568][T27539] 9pnet: Insufficient options for proto=fd [ 402.588143][T27542] binder: 27537:27542 ioctl c018620c 20000080 returned -22 15:06:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000180)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r2 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) write$evdev(r4, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x70, 0xff, 0x6bb50a6, 0xd450, 0x29, 0x0, 0x2, 0xf0c1d8ee30b8df09, 0x1, 0x1, 0x2, 0x8, 0x1, 0x200, 0x7, 0x1, 0x5, 0x7, 0x7, 0x7, 0x0, 0x5, 0x101, 0x5, 0x1818, 0x2, 0xdefc, 0x9, 0xfffffffffffffff7, 0xfff, 0x1, 0x1, 0x43e, 0x9, 0x4, 0x1, 0x7, 0x0, 0x7ff, 0x2, @perf_config_ext={0x7, 0x9}, 0x800, 0x5, 0x7ff, 0xc, 0x3ef0, 0x9, 0x1}, r4, 0x4, r1, 0x8) fstatfs(r1, &(0x7f0000005200)=""/4096) 15:06:40 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 402.655697][T27551] binder: 27537:27551 ioctl c018620c 20000080 returned -22 15:06:40 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c7"], 0x24) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0xb}) 15:06:40 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 402.803684][T27548] 9pnet: Insufficient options for proto=fd [ 402.830822][T27568] binder: 27566:27568 ioctl c018620c 20000080 returned -22 15:06:40 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x0f`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:40 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 402.880031][T27576] binder: 27566:27576 ioctl c018620c 20000080 returned -22 15:06:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000180)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r2 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) write$evdev(r4, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x70, 0xff, 0x6bb50a6, 0xd450, 0x29, 0x0, 0x2, 0xf0c1d8ee30b8df09, 0x1, 0x1, 0x2, 0x8, 0x1, 0x200, 0x7, 0x1, 0x5, 0x7, 0x7, 0x7, 0x0, 0x5, 0x101, 0x5, 0x1818, 0x2, 0xdefc, 0x9, 0xfffffffffffffff7, 0xfff, 0x1, 0x1, 0x43e, 0x9, 0x4, 0x1, 0x7, 0x0, 0x7ff, 0x2, @perf_config_ext={0x7, 0x9}, 0x800, 0x5, 0x7ff, 0xc, 0x3ef0, 0x9, 0x1}, r4, 0x4, r1, 0x8) fstatfs(r1, &(0x7f0000005200)=""/4096) 15:06:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0xc}) 15:06:40 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:40 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c7"], 0x24) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 403.032778][T27592] binder: 27591:27592 ioctl c018620c 20000080 returned -22 [ 403.061830][T27595] binder: 27591:27595 ioctl c018620c 20000080 returned -22 15:06:40 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0xd}) 15:06:40 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket(0x11, 0x1, 0x1) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000140)) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="1500382ebfad67b135bb20d79186b6debe17b4c74c00004a75843a04c873137ea48cff695700"/51], 0x15) r1 = dup(0xffffffffffffffff) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000400)={0xa0}, 0xa0) sendmmsg$inet_sctp(r1, &(0x7f0000000980)=[{&(0x7f0000000040)=@in6={0xa, 0x4e24, 0xc181, @loopback, 0x6}, 0x1c, &(0x7f0000000900)=[{&(0x7f00000005c0)="fedcb71435f0a8967922ccc71a899d9ae68a2da6518a572680bc3f174dafe6179e0a4211095504549f1e9a4190a397a46f399b6bdbec3564bd3fde18b87e21d3dc99f4a002b75cb28297e8d5838a142128c05ff8954714183ba8e44a2127f6907d9cbd8d64a32dd5d9fa6390a50fd25c25da94b17add6aa7ff8dc9dbe858e58bbef06c60c3485276d4a4e1845d6ccb30b7dd104cc223e5313414708ae2ec0edc2feef7e2db0d8969dde7e699fdb3623e0d82c944cea1848893c0ca101603aab52c1b794ccfe803f85dfcdb11561509c6b87a8b795bf4e778aad42b05d508c669f40edc6bb9e1dec6", 0xe8}, {&(0x7f00000006c0)="6f7c6b9d802bfbc78c2e544bd887b9ef969399", 0x13}, {&(0x7f0000000700)="eab249e48e22004ff570839ba18f45b413412a674fd82b6825bcaa1962efaee042746f5511d139841932b06cade4c76f3a473e075ea746a0543b713da584394cbaffa13a8b02d1ee14181225f6d8a9b1fcef6e6a4abc6099d6d0a66cee7da121cde9e4e7257b927b4e6a1c100d758511a6a9b2328206b2f99e27f0a99c256737c6eb58e3a5dbd9a902feb300b93cde12c25c676fbe8ea1cd6b598cb5e6767a1f3fc1bd83c1f5dbb1534305d9340a150b3eec96b1c2c5a76a0a8c8308801cd5e50d037812fa76be65918703535a88dae48976b57c307ca756a191fea3717512b1ae", 0xe1}, {&(0x7f0000000800)="a1265081a99ae1bf8e4bb841e8ed19ac71add4e2fdda5d0243a3c0dc28443922a936448d607be2dfcc1b14b63c1c2add538d8a5590b042e0eeadd20d14278feec33c0475ddaaf7afe2d6022c85ce74d8adff9c01fa583048d7d4f8d02bfe7f90ad2c5066601de39ff54a8682371f74f3e29f62ada04b151b28dfd6866910245e12e03582669dea300989632c4f743a6f3e4bfb4fba65b7ccf625138f54b7b30837d7a5d093dfb893404094a0d331c74419099818871ab631228c197707635f1ecc711038b640dc16ca089e3b7e38560597d93083959e652ccfc487b1c8cb5039df979f", 0xe3}], 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="200000000030564b0000008400000008000000fe80000000ffffffed220001000000bbcd"], 0x20, 0x8000}], 0x1, 0x8000) write$P9_RREADDIR(r1, &(0x7f0000000b40)={0x49, 0x29, 0x1, {0x37b5, [{{0x10, 0x3, 0x1}, 0x5, 0x1000, 0x7, './file1'}, {{0x20, 0x0, 0x7}, 0x3f, 0x1, 0x7, './file0'}]}}, 0x49) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x30}, 0x2b) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000a00)={@in={{0x2, 0x4e20, @broadcast}}, 0x0, 0x3, 0x0, "d7116581b143a56c13dba631ca04587092e58981472f3089eb13e04bea8630a10757eab4654d988e8384d53be7d9a1e27f00754ccb1009f18756b77329bb146ad49ce658fff398b82dd3db86b40956f7"}, 0xd8) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000b00)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000340)={0xb, 0x10, 0xfa00, {&(0x7f0000000240), r2, 0x1}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d94d164a38642cb1464735319e883d2ac9add52486511455be941aec046e15d997570555f34e1579c3cfbf55552424bb41dd7fc15e1a2a84bc505ceaf159c8a57d8330d3e5988de205579c9470504e65338bd976bf28cffa52985ef90337e6312c138c5eb4e8e81290df5a51e638424c42d8d18f71594daa011c3312afd6f010270ea25d0e3f887046cfa0ffa464e5797b4aa308909afef88e4ad37ffd1f57f1e2f944e511e062e0ffe9ecfe6b81d012ca59d6f836873a7ed81aece2cd5", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f00000009c0)='./file0/file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0xffffffff) 15:06:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000180)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r2 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) write$evdev(r4, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x70, 0xff, 0x6bb50a6, 0xd450, 0x29, 0x0, 0x2, 0xf0c1d8ee30b8df09, 0x1, 0x1, 0x2, 0x8, 0x1, 0x200, 0x7, 0x1, 0x5, 0x7, 0x7, 0x7, 0x0, 0x5, 0x101, 0x5, 0x1818, 0x2, 0xdefc, 0x9, 0xfffffffffffffff7, 0xfff, 0x1, 0x1, 0x43e, 0x9, 0x4, 0x1, 0x7, 0x0, 0x7ff, 0x2, @perf_config_ext={0x7, 0x9}, 0x800, 0x5, 0x7ff, 0xc, 0x3ef0, 0x9, 0x1}, r4, 0x4, r1, 0x8) 15:06:41 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x10`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 403.228447][T27613] binder: 27611:27613 ioctl c018620c 20000080 returned -22 [ 403.257523][T27617] binder: 27611:27617 ioctl c018620c 20000080 returned -22 15:06:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0xe}) 15:06:41 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:41 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c7"], 0x24) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 403.388907][T27627] binder: 27625:27627 ioctl c018620c 20000080 returned -22 15:06:41 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 403.449132][T27637] binder: 27625:27637 ioctl c018620c 20000080 returned -22 [ 403.475650][T27640] 9pnet: Insufficient options for proto=fd 15:06:41 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c846665d0a6e6061b8f87a28c182f4578cc646e9e582d3b67be471e7f6f7125aa25bc917383a20e3d", @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x102, 0x80400) 15:06:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x10}) [ 403.504264][T27646] 9pnet: Insufficient options for proto=fd 15:06:41 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x11`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 403.620971][T27653] binder: 27652:27653 ioctl c018620c 20000080 returned -22 [ 403.655009][T27660] binder: 27652:27660 ioctl c018620c 20000080 returned -22 [ 403.664629][T27659] 9pnet: Insufficient options for proto=fd 15:06:41 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 403.718668][T27664] 9pnet: Insufficient options for proto=fd 15:06:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000180)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r1 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) write$evdev(r3, 0x0, 0x0) 15:06:44 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(0xffffffffffffffff) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:44 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x11}) 15:06:44 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x12`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:44 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:44 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(0xffffffffffffffff) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 406.584031][T27684] binder: 27681:27684 ioctl c018620c 20000080 returned -22 [ 406.606088][T27686] 9pnet: Insufficient options for proto=fd [ 406.617062][T27691] binder: 27681:27691 ioctl c018620c 20000080 returned -22 15:06:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x12}) 15:06:44 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63}}}}, 0xfffffe3f) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',-{dno=', @ANYRESHEX=r2]) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000140)={0x9, 0x10000}) chdir(&(0x7f0000000000)='./file1\x00') mknod(&(0x7f0000000180)='./file0\x00', 0x8000, 0xffffffff) 15:06:44 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:44 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(0xffffffffffffffff) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 406.743610][T27704] 9pnet: Insufficient options for proto=fd [ 406.768278][T27703] binder: 27702:27703 ioctl c018620c 20000080 returned -22 [ 406.815759][T27711] binder: 27702:27711 ioctl c018620c 20000080 returned -22 [ 406.901643][T27715] 9pnet: Insufficient options for proto=fd [ 407.044549][T27725] 9pnet: Insufficient options for proto=fd 15:06:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000180)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r1 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue0\x00'}) write$evdev(r3, 0x0, 0x0) 15:06:47 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x1c`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x25}) 15:06:47 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:47 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="15000000654eff8c7e133179e07a356febe17e018000000800395032303030c74c"], 0x15) read$FUSE(r1, &(0x7f00000016c0), 0x1000) r2 = dup2(r1, r0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r4 = getegid() write$FUSE_CREATE_OPEN(r2, &(0x7f0000001600)={0xa0, 0x0, 0x6, {{0x3, 0x0, 0xfffffffffffffbff, 0xf6ae, 0x5, 0x1000, {0x0, 0x81c6ad8, 0xfffffffffffffc00, 0x3ff, 0x894, 0x7, 0x329f, 0x4, 0x2, 0x10000, 0xfff, r3, r4, 0xad, 0x80000001}}, {0x0, 0x8}}}, 0xa0) r5 = dup(r1) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:47 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 409.908265][T27735] binder: 27729:27735 ioctl c018620c 20000080 returned -22 15:06:47 executing program 0: pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1500000065ffff018000000800ad67b135bb20da419b2f00d79186b6debc17b4c74c000fa745543d9e93a4caa61f68600a18c3b462de53c6d973bddbb149d2f7722442d765ce54a8114dcd23f8f15060fead2e5f41d8f2f94f11e1115f3498fbf75dd04c8708fe600a97c7f3a8073fbf6ee7233e38fcaf9bf0814c1bbac301e509a51461a066a982cca977224b81ba2c0fba4da0167a167674fc3db8619f33b1ebcbdc166dc2ced5fbbac6da05a4cd2dde463b420dee6199f97934bcfcc41d0aa72da4a1aa089a003fc9ae178be62c034d9d5675c4302c56094bd5fb1ff9e32ef66c1009c79865f8ad80"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) seccomp(0x0, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x3, 0xfffffffffffffff9, 0x2, 0x100000001}]}) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 409.954909][T27740] binder: 27729:27740 ioctl c018620c 20000080 returned -22 15:06:47 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x48}) 15:06:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000180)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r1 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue0\x00'}) write$evdev(r3, 0x0, 0x0) 15:06:47 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) write$P9_RWSTAT(r1, &(0x7f00000001c0)={0x7, 0x7f, 0x1}, 0x7) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r0, &(0x7f0000000180)={r2, r1, 0x7}) mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000340)=0x44) 15:06:47 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:47 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 410.142116][T27758] binder: 27757:27758 ioctl c018620c 20000080 returned -22 15:06:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01%`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000180)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r1 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue0\x00'}) write$evdev(r3, 0x0, 0x0) [ 410.190426][T27769] binder: 27757:27769 ioctl c018620c 20000080 returned -22 15:06:48 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x4c}) 15:06:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000180)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r1 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) write$evdev(r3, 0x0, 0x0) [ 410.318341][T27786] binder: 27782:27786 ioctl c018620c 20000080 returned -22 15:06:48 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:48 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 410.362048][T27791] binder: 27782:27791 ioctl c018620c 20000080 returned -22 15:06:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x5c}) 15:06:48 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 410.540706][T27810] binder: 27806:27810 ioctl c018620c 20000080 returned -22 [ 410.572925][T27812] binder: 27806:27812 ioctl c018620c 20000080 returned -22 15:06:48 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[], 0xfffffffffffffcef) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x3d, 0xb89041c, 0x80000001, 0x7ff, 0x5}) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000180)='./file0/file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:48 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01H`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:48 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x60}) 15:06:48 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:48 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="747261bf093df7312c5866646e673de8e0d3d169bf1a9084c9bc8e9b9c45fda4e64fef47b6b938f177b4a0ebe4d9b69bd50af6d98fd2243e66149304764020c7a6c9317a486d632bf67d26d2df8fc8f5acd7ff6f3028d1bbac7401f01a0b387de1ae809ded20ed22e639cbcc4179536f32e25427cbf07074c057330d7bbc17895f537ada5d527d64bcc601908bf705f044d3e3ce9d0545cc7944f9990987da65996964622dc5982715721a2aaf5dcb2918af605663a78f0935a8cf6db88f71773f7ce76fdc774bb4cf7ac9d0cc2fb677ad5d6c2ce0f240740bd11b0c8fa7be7d0134839b7022dea091679a23e8a2a9bb0729d550609f857fcb0f94961ff52fcfe4d700"/268, @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000140)=0x2) [ 410.756198][T27824] binder: 27816:27824 ioctl c018620c 20000080 returned -22 [ 410.813622][T27834] binder: 27816:27834 ioctl c018620c 20000080 returned -22 15:06:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000180)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r1 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) write$evdev(r3, 0x0, 0x0) 15:06:51 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:51 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:51 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x404001, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000180)={0x10001, 0x0, 0x4716}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000280)={0x2, 0x6e33c17d}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x4, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x68}) 15:06:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01L`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:51 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:51 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x4}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000280)={r3, 0x6b, "5f728b781f67065182faf20a947157922bf34fc0c5b4f20476de984b0ca5d3f3257e833393efb84538754261ac4eca7a14ba9727863892b3d9e85e4c69ae32b5bc16fe41f64ace0ef27dd8da6aa034c755cf34916e7f3849bf34673945f2ea362e274efe1398c3bba62612"}, &(0x7f00000001c0)=0x73) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x577) 15:06:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000180)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r1 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) write$evdev(r3, 0x0, 0x0) [ 413.701929][T27856] binder: 27850:27856 ioctl c018620c 20000080 returned -22 [ 413.730925][T27859] binder: 27850:27859 ioctl c018620c 20000080 returned -22 15:06:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x6c}) 15:06:51 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000180)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r1 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) write$evdev(r3, 0x0, 0x0) 15:06:51 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 413.862888][T27872] binder: 27871:27872 ioctl c018620c 20000080 returned -22 [ 413.889798][T27878] binder: 27871:27878 ioctl c018620c 20000080 returned -22 15:06:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x74}) 15:06:51 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\\`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000180)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r1 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) write$evdev(0xffffffffffffffff, 0x0, 0x0) [ 414.095587][T27896] binder: 27892:27896 ioctl c018620c 20000080 returned -22 [ 414.104312][T27898] binder: 27892:27898 ioctl c018620c 20000080 returned -22 15:06:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x7a}) 15:06:51 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 414.256207][T27918] binder: 27915:27918 ioctl c018620c 20000080 returned -22 [ 414.280845][T27920] binder: 27915:27920 ioctl c018620c 20000080 returned -22 15:06:52 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000340), &(0x7f0000000380)) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}}, {0x0, 0x2}}}, 0x369) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) llistxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=""/36, 0x24) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000140)={0x1000, 0x8, 0x7fff, 'queue0\x00', 0x9}) 15:06:52 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01``\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:52 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x300}) 15:06:52 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 414.438118][T27929] binder: 27925:27929 ioctl c018620c 20000080 returned -22 [ 414.465147][T27934] binder: 27925:27934 ioctl c018620c 20000080 returned -22 15:06:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x500}) 15:06:52 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 414.622276][T27945] binder: 27944:27945 ioctl c018620c 20000080 returned -22 15:06:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01h`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 414.671512][T27952] binder: 27944:27952 ioctl c018620c 20000080 returned -22 15:06:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000180)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r1 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) write$evdev(0xffffffffffffffff, 0x0, 0x0) 15:06:52 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x600}) 15:06:52 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:52 executing program 0: openat$cuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0xfffffce0) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f00000002c0)=0xbd0c) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x2, 0x1, 0x1d}}, 0x30) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000140)={0x0, 0xa814}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={r3, 0xa0, &(0x7f00000004c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e20, 0x0, @loopback, 0x10000}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e23, 0x3, @ipv4={[], [], @remote}, 0x8001}, @in6={0xa, 0x4e20, 0x2, @loopback}, @in6={0xa, 0x4e21, 0x25, @empty, 0x5}]}, &(0x7f0000000280)=0x10) mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x12000) 15:06:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01l`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:52 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 415.034191][T27977] binder: 27971:27977 ioctl c018620c 20000080 returned -22 [ 415.070626][T27985] binder: 27971:27985 ioctl c018620c 20000080 returned -22 15:06:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x700}) 15:06:52 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:53 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:53 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 415.187118][T28000] binder: 27995:28000 ioctl c018620c 20000080 returned -22 [ 415.217704][T28005] binder: 27995:28005 ioctl c018620c 20000080 returned -22 15:06:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01n`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 415.284413][T28011] 9pnet: Insufficient options for proto=fd 15:06:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000180)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r1 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) write$evdev(0xffffffffffffffff, 0x0, 0x0) 15:06:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x900}) 15:06:53 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:53 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 415.702870][T28030] binder: 28027:28030 ioctl c018620c 20000080 returned -22 [ 415.715197][T28033] binder: 28027:28033 ioctl c018620c 20000080 returned -22 15:06:53 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000140)='9p\x00'}, 0x30) fcntl$setown(r1, 0x8, r2) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f00000001c0)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000280)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x2, [@struct={0xd, 0x3, 0x0, 0x4, 0x1000, 0x81, [{0x10, 0x0, 0x3f}, {0xb, 0x0, 0x7}, {0xc, 0x0, 0x1f}]}, @ptr={0xc, 0x0, 0x0, 0x2, 0x2}, @var={0xf, 0x0, 0x0, 0xe, 0x5}, @var={0x8, 0x0, 0x0, 0xe, 0x2}]}}, &(0x7f0000000600)=""/4096, 0x76, 0x1000}, 0x20) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) 15:06:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01q`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0xa00}) 15:06:53 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:53 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:53 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 415.901287][T28046] binder: 28042:28046 ioctl c018620c 20000080 returned -22 [ 415.929788][T28052] binder: 28042:28052 ioctl c018620c 20000080 returned -22 15:06:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0xb00}) 15:06:53 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2cf766646e6f3d", @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 416.067036][T28067] binder: 28064:28067 ioctl c018620c 20000080 returned -22 [ 416.078348][T28068] binder: 28064:28068 ioctl c018620c 20000080 returned -22 [ 416.212168][T28075] 9pnet: Insufficient options for proto=fd 15:06:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000180)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r1 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) write$evdev(r2, 0x0, 0x0) 15:06:54 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01t`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0xc00}) 15:06:54 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:54 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0/file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r2, &(0x7f0000000280)="66755f07119237edec5d206ae119580b22e949fad2c5fafa951429b4efb0fa9df977b111dc2bf221465205df0807a81940b8195096026794645dc8436332310cfff2fe9cc5d89c58cab15d3d5d0faa89", &(0x7f00000004c0)=""/169}, 0x18) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) sendmsg$sock(r3, &(0x7f0000000580)={&(0x7f0000000340)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000600)="04e65dd579879d866f94c59a7f14c7e47a62912697a53873150222d32c8efc9238a7f1a109bc5f3cf578efa4a2ce70dcaeb094939c3e67beab16c3a10ad869eb121986ca6feb6b", 0x47}, {&(0x7f0000000680)="31ed8168a0c211bfbd71a0b9cfe72b2a9bd793c028fcb04cb685ba1097266d639e5bc3188a107419c8219713fd1d252f6c0529c21a53dda12516b42dbde9b50a98a4cd656a22a65a5d71b4a43f86491d6f261971bc893732259ec3d840044e09d2fecbf39261a40cda7f0ca09b1f47ba75b23c01fe67da8695981f930861abfcaf8c88c546462dfebc6ebd2adf", 0x8d}, {&(0x7f0000000740)="7c7b11f4c2b063d62d148ffdbbc7391f6595438faac41935066f566dcf455585d27ad4f87d2a77d9cde5babb5097e38406e03af73aa144bcd70ec10ba30f2d12109183a7672bb1464df5d3fc43c1ee393bf4d605902a04b2ab5fdb344614a0614625a017dc230a438f4a28eab23ba6cb970d81472ad677954aff9b23aba9bfde19853f505c4f65cd53716e6327acf292a5aedf4532a568777752dfc64ffef614d35662413f4e6c4a42fc54a265e9661d8e6181c29bc1963e9795356dd6eeee9fba202db1773c522dd1a3275271f8f905a8db2bc17d2c53f1d330f8c8c0f0b757dfcfe7e880c848519e95502f9924384891c67b84597cd7a00ce5fe94f210733d339d79e5e5b1274757c891a774da6f70fc7610261d76a013d1cb0e07afcda4641187dc95958acd20de1faf0e861fdb57ec66de31c1c08daa0ad9e4adbaed5dbc205eabec5477ff536660837db5976822fa200dd158764b27c8e58f1bf69d15f1ef12e0c580f3ee5c55a339dfff98a7d53cedefff8ba72396725884865766939151726d668f2fbcd46bc38738aa1a3e857999990634d7b2f6f3ea17a6d63dae1565d13ddcd76b4d5a19810e3f024576e6b97524d21eedff01ddde3abb61110029bf993aebadaddb1d080781a0b47e7c208d3b89ce7489fb109e725cf63a9d2295dc3c9c54bd2d7809768e4190ef2e5356b2a3e771f9f5e2107236a84e4dbf54a54eba8995d7361efcb6c113bc7ea81a0be20003e3088c0b84b90b6cd02dbef7df9615e7cdaf54a9c5b295a34e0bfdd67662dc7a6ef73996a79febc04b2dcdd9500a2968dd999b472242296dec0e65ea0d48a924f1328276bbc2248b631a6099e49e0b15cf82bb4c783b57e34be32fbc7b8633a28a8a9928f4cbab100825551d795010e66d2a0280f07c2d13d41d3beb9a718b69a708d3eb93e32dcf2b47d82c4f16fc410131e61dffebc7e75b68c576ea0a3cd7cd07dc1df8b9f4b55453a2a7bd0c598d01f628308e4c06c9edf707dc973740e064c12543251da32a2c4a745d95a5cc8ce61dd9564e820dd583a32d2fc743bc81cffa26a5f05b5654908ee54326ac14e427bf663f240cc7d90e37b3dce306d07c24576e74b692eb2eeaaa6d48d52c10b27a1f5ab9dc27e15dddc827c3a0bbc2d765f903467cf6aa5e643ec354b6464ac5fb363f8a353cf01b597066166b1785adc159703b530841be5ffc82a31daac28e09a25ac9cd8353cbff3d89d1965aae32324622cf1e434a5e92188794cd0263c9371557b906147bba972801ad0ae02e42a72eb7ad8bca60dacdc27af70cf91d78bd1f072751f467aa85c2affb277023ce99777d0ee5e57be3ddf87db666fcea0257c1f538739cf2d4b5ecfa78e3abfc5918a919bfa3e6d08c21538b992d09a4a770937dfaafe9a4dbd54689fad62f3ed2c1bdcfd04a3999b3abc1524295998198593a4781be726a9557d605ccfc9cd1e60314be671d0347833a1f38dd9b7c40bb2ad2338b7dbd138ce368278dd511b6de26031a6b584e84d7987beabca0dc57169492720dbc0a373b4d929219075a2dbbbff0184ffd6ce53e6819c40b6425a01b85f8786cf2141cfe3c07178d851eada59695adde83d8f024f9bd356868ab427ce187efe781b4e7986a90eefef6aa7cd2c071acfe59f1d4c6e8640252b733480cdb4375daefb4374de933ac8840b51d0eaa3f95c2ea757fcac4e65b93993385f35054c4f64a3dc8c6c60db4f83d999f758cf0e9ea031fadfafa0b0974c9f49169831b290a3cd0faa5a95c3f260bb9734baf437e11dddcb9cf22ad73d811d3703f04a7dacfbc1220f41b70373c4cd1704e9f35573f3ab328bfe8fa7dc3d8552ad3dc2b454db423cc357a42fccf14dc5da47c4f1658a820e83fd758c5bc32a19d9cfcff5a69ed6523087bc5aab2005c5e2610bb376268125fc8ca33d5b9c61b3f547b26303d5cc545f3761cf5a71234a2c573f36d2ffede4306a9a94fecb995d028c5f14f8a066436ceed2080d5232a83a775e4cd6bde2c124bd72de5a5444070770900fce23b490c2e364f7a6d693de10a654c7fc9e23172974a6bd6ca32024327b1040963463d417e084eb7f1ee4865b8397223e239949c5bde4ea182faa062d68ae3aaf0ff7ed94422fbb91455f83638983bc8b5d59caac86724544b202831306ab66bd00644873f92d1a89b4834a10ab681b5c0b437f5feec98279e3936d4c710956dcbdb2c87ddabe372616ed4af427cf6ebe83484b0ee8906db2ad8b983cd38fa4ac5424dfbbd8660529cec70735e59ccd0a5a28618cfc9ce07404c81f4b761583cf6d4d3a8b69ed0ffd156970242693a8e4e40a4487f12aef9912452efcd97a67eeaec116b276fd03624fe6f74f62ce05ca7d88b3cce49d7dd21b27b41173ae8f18a76156760de6947ecff72fc3067214ff94e20887547fb5bde930a596603deb971deff2faf9e61f95be9e0a8dabd5fe38c3c36623a3c3db71f9d30c4473f285aa597212c06ebcd4c982c7672234836e103e2d445c1a8254d71479d04127c0e15b8690cea94fb14ac94003e36dc7000795546850f4c25ee6541cecd28f25e7a7700fe7dfdbb0ba0916437d9ab60b8f97f71ea882781e9b5583c55ff3e335ea60027b82f29594bc82de6e34c053211b70c27a2fc1d1e6bfa3863705daf7806349b8cb7c37a3440010a5312bcd094edb99777a9fc9290b01c93d727806adf6eae8842710dd9c3c10f7d0e6d81f76c1dadff270bd551427f348d68c69b0c70f686494a0dfc94b794f38add7d11a252d3724a5a9dd5de3293b4230d073ec77757975facbf9313fe913da36d1335cfcc59700db7502105d858ee4eb3f1ba086dcc0ce9eaf073044f5bbd13db4a20d83a2b0d9438d1a96c0334d07391d99dee7b2344191c4def027c102292b7ae28a86a5ffbd7f7e9dca33400d1dfdf964465e8e07964c0938704179bdce0538934856165825db1949ad9dc0aad228b049ab0364362ea7fefc3cd4a7da2c9ad348c38d66e265bd5c463f7917e9f134d0e157d70e97c87126b2a3baff013958098126766f9bcf450c3acc167cd679f448ae684e0295b8473a431da3e74237e01acd7c3e7d55997bcc622fb62c99d3956c7f04f2f66677342740793d7a2d2d179d83afa653dc62cecd026cc5e859b34d65e72c903aa0f681f2e458c7d02928679a50a8030b2e5e59f50071326ad8bcec7bf02026673d85bfac9bb4974a98e134d2365b1344e29b4c2762c424d2739dec6568b3813221d970b4e380a4b6d7cbc7203d5ce559d733e673cd5644a776b0125c1088fab48186cb6f7198c4296f92dc8c03f1f2348c406a0f6f6c2415552fc7d844e7bc589bf28f4d2c1a1c4aa56454f0277bdf86d2566cc533485756fca13114b389fb4e583dec5e2aef8f3a62b33148b45f1ed7063d2cd987a76609d5555644ec004c6e170bcf3cec168cd075ecbd71d36463dd9a9cc6efccbb3c3f4cc5fd401ea0b218ed68150ecf07b472bf6831ca3cc2360e6728e163e9125fed1da3541d688b2019ad852e3b04b5a0c5f90ef46932f06b6bc4286121cc0d63c99956aadf910e9eedf3a2857ad2acad5352b993c48b76f1f14730066d01afdc8a936f7d9e92fd6a7bb9873c2be0ae4d641b2165cd7f8de0c866c7834e12c6b9dff9089c4b1cb4d25edfc1ffdfb50d4f6871ad9145b91d5e91b56d0bcd8fcf2e430e5ac1f82c8acec2f31aef613fb451efe682d469e5d88a7d21ef8f99e3fc4d6951de81eedf0f3e13c8641b3bb56b195980282c23af3a2feafbc7bc8a286e3f8c5850bca58f02ed267d42365559c92113d7da9df98d42269493e22508da79d727a2aead071cd6c899fc328bb32c9163066be7a94603ac17947e9ab46b4e482fae63e439232203c0cdd6e85fa4079411512665bce533defabbd8f29169072b22774ffd57a2c180f301140b52a43f7fe4a6018971685bcf7bf4877f7ef79a98c94736e82612c98e7d58788b5756d63f29f9a7bafd013e395136ee88544e88b686972758875cfa0fb881bef8ca67a6da96d3085092ece32fcff0ad39c70050f77828256e299175ef848c277519a7821719b734332d08434fdfb16e4f4242355496d57dc2e84d2d770aac569294632a88a3152528febf4bb4691547bee7e8920a128019a2744cac99eeb171c7372e12ec879f2f34ecb09781376966d751a5b18dee76439fb2d2d149aac297133f4112f6c47c9bf7aec482fc6d9af05907bf0b73e86fb79cfc5cc00eea6fd26af8ef4acd728261a52cfd8230dad6faf3c1d75b7dade6b67cbaa8e5803d01c7a82f7d7f83fba8640d6f3b07255e9d9ddafb1f6f6bbf217bfec990190dd8595cac8e3dff5f0b78af68b252d50f8ce48159ef3079362c37ad0bc8559c6e52fecc1cb358f4397c8fa61bc1ba4d556b8cba201a96650aa43039a33033fb821db3a322a499acfe4acad1c922b50867e0dbbc2dd21b575e91bd16a1d1bff5bdcb99389a6b32f072c8a1f6e39067db0e3f7173d9e0a739d468ac2db1740b742e0338d7479eacf5e172943daae83d59fb2ba42e7d94b6fd312f95e9f12d194b66443a844648815a136dc5092809a8bb6bc6cca216ad134d6050165b1de67dd3b100360f0b94bd2a24dd7887d3c0ab96ffe9e6379ef5114d7a59dad31e4abbf06f67582931591ba07c9175c1447637fb0c14c0e3eca0f9e756bbae5701048c01dfcf4ad0199e17a0d2721b091544cd3c20a256f41107cc761f0d6f6ce89bd456a5cd53ccd0fdf6d48a8742ad69e10c34872a2be15d75ba7426b0cc7cfdce834b40568f980cd45a0659b0a5b9ab1b8bf367769533121a4f22663581b2f7dbfc3375c059571374b85a7158496803b31ff956e4aa118ce8f3e97719e00a7e308a67939ffe6a4e418781d0a760fcb0ae672b341eb062ae47ef946e09a7f2673c6e1cee874319381516ce16f863c916f960591b17a289c6987de5e0e8db97f175271fc6081d6f4689c7abf085754f49dd22323cc657e4e6f436c73ca4f71b0c106d3575a16bbd6ebd180dc519890fbfcee24d37c8ce3f7ad71aa98ef2d5057427577195ceabd4133dc3f0abd347a5f5d587887f7abfa3d7d8a98b993229a8057204cc268074c1ecf05299f8916f1499e61e15218cc8579eb8496472714dcf5812d68c7188e1c400daf54e7fcf14c9ec28c5b899dde45a831c43b5b58b2ca4733b2499dbc0c341b14019ae2deee4ea754ab0fbc06a51a33653edee76b8f55530694f7e4c45b0c6d4d5ed2d6606bffbcc388defc3104a2e74d4b6922600d1142cf499e938f7b1e31737e4ddef38eb61251c44d5fdba4370fb537c756fd40f15aac6ff2e14b4504cf4f988f0ae92efbf285940355f378bf75fedb3ac049ca336b35541403575ad9f7383fa1849c0e29203397a686129cfd95215ba593d5af37a2cc90a5881725d14780c212e07440c0d1f1ce2b3385270c281367b3440c22e658c73b94898a579cb489502ce5901b9fd78a108f4b61cb803c70e3dccf3d3747d5f55d68d7c89a5f9b0ba68c5f5e8329235900de291327cde750ab25c0a1e1625de783aa587e4be0df89acd1627c08441e94077553c32b4e4497dc628ab9d5bdd8649a156c9143732a12d286875b9666f363c9dc69878370e3c9f5a03de2283bdca5f73de3652b85702cedb0042dbca8c3fb8e8016fde2ad3fd666a5b1360ebe33d114fca96470156e5b3adedcdb94c12c8bac04612ced5ed25e8e3000a8e9d6dffa2c0d3d55d91ca38e77f8443658963e51a80756ee5d84bd753285821e1c359de61465", 0x1000}, {&(0x7f0000001740)="307fe78e3d14191241a739d22256033fc13bcf5e21216e2ebfd72463ca8cb55c1b74c58d26bb9c6017832bea5f60ee08a60cf7f6c3f73402cb60dd5d68ea611da26c0df0", 0x44}, {&(0x7f00000017c0)="cd3344c41931e564ab920c0cb53e7b8dafdb6c99d1193b14d16901c490b6e3f41b40c0b55f0aa10479895e6a2266648417899c3fe1c9dd5b104a1d49c17ceca1aa1e5b3a46ed2e3817bc5eafa819ae9c388ce721cc90f5f8a3c47d931ddc9c2f2ec6fd690181db", 0x67}, {&(0x7f0000001840)="b734684808b6f803dc75452c3c2332fdc141704884a085b513dfe1d0024e7fa47aad3a214a6c30e7c7c08290c9bc385aac303164906ba8a69a68d9283f42f7c169eef79a5952489b6588f03c96d20c8ff83cc3107811d42e8662337440333254e5b7aee43a540a6ced162cb36e9c070e11d35e690a4f6a20456b27b9bd0574d11a50ff4d7086d0cc4dd740eeb6bbc800de4b997a60065e22fef784e47a875fb2c3c8b28396dd9e7000d569a1490a35f212cf1f96b3bb4d80cc3ac4059f6220f97d6877d5c206da7408fb49e894f8a12d13ae96", 0xd3}, {&(0x7f0000001940)="24ee13acce2d2aa9dc4cba012690b924e88013b9a21eb5c898b2c7043b087831c55ce5e7fff6a41dc58b1429b9de7d7e918bad811359ff26a38a5d6306cbc511fb1698e3eb99f0687176959ea4fa02595d5d1aadf54d6245c1aab64d34c17de0d3244b919dec184c2d1c24a1d16e46b8a6844c91a5bc8d6ac767ee579ffbc715", 0x80}], 0x7}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x3ae}, 0x30) write$P9_RVERSION(r0, &(0x7f0000001a40)={0x15, 0x65, 0xffff, 0x4, 0x8, '9P2000.u'}, 0x15) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:54 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 416.426559][T28089] binder: 28084:28089 ioctl c018620c 20000080 returned -22 [ 416.448960][T28094] binder: 28084:28094 ioctl c018620c 20000080 returned -22 15:06:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0xd00}) 15:06:54 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:54 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) [ 416.588924][T28106] binder: 28104:28106 ioctl c018620c 20000080 returned -22 [ 416.604431][T28107] binder: 28104:28107 ioctl c018620c 20000080 returned -22 15:06:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01z`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:06:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0xe00}) [ 416.774495][T28122] binder: 28119:28122 ioctl c018620c 20000080 returned -22 [ 416.789364][T28123] binder: 28119:28123 ioctl c018620c 20000080 returned -22 15:06:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x1100}) 15:06:54 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xffc, 0x1, {0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 15:06:54 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ebfad67b135bb20d79186b6debc17b4c74c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 15:06:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000180)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r1 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) write$evdev(r2, 0x0, 0x0) 15:06:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\xbc`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 417.104717][T28138] binder: 28132:28138 ioctl c018620c 20000080 returned -22 [ 417.134325][T28144] binder: 28132:28144 ioctl c018620c 20000080 returned -22 [ 561.965502][ T1058] INFO: task syz-executor.0:28152 blocked for more than 143 seconds. [ 561.974181][ T1058] Not tainted 5.3.0-rc6+ #94 [ 561.979416][ T1058] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 561.988236][ T1058] syz-executor.0 D30024 28152 25083 0x00004004 [ 561.994898][ T1058] Call Trace: [ 561.998240][ T1058] __schedule+0x877/0xc50 [ 562.002603][ T1058] ? _raw_spin_unlock_irq+0x27/0x80 [ 562.008127][ T1058] schedule+0x131/0x1e0 [ 562.012433][ T1058] rwsem_down_write_slowpath+0x813/0xdd0 [ 562.018344][ T1058] down_write_nested+0x132/0x140 [ 562.023276][ T1058] filename_create+0x12e/0x670 [ 562.028088][ T1058] ? getname_flags+0x214/0x640 [ 562.032848][ T1058] do_mkdirat+0x5a/0x320 [ 562.037354][ T1058] ? trace_hardirqs_off_caller+0x58/0x80 [ 562.042991][ T1058] __x64_sys_mkdir+0x60/0x70 [ 562.047796][ T1058] do_syscall_64+0xfe/0x140 [ 562.052605][ T1058] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 562.058597][ T1058] RIP: 0033:0x459879 [ 562.062535][ T1058] Code: 30 48 c7 44 24 38 00 00 00 00 48 c7 44 24 40 00 00 00 00 48 c7 44 24 48 00 00 00 00 e8 b0 67 ff ff 48 8b 44 24 50 48 8b 4c 24 <58> 48 89 01 48 8b 6c 24 60 48 83 c4 68 c3 e8 14 06 fd ff 0f 0b e8 [ 562.082190][ T1058] RSP: 002b:00007f2501f86c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 562.091378][ T1058] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000459879 [ 562.099603][ T1058] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 562.107979][ T1058] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 562.115989][ T1058] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2501f876d4 [ 562.124098][ T1058] R13: 00000000004bf081 R14: 00000000004da720 R15: 00000000ffffffff [ 562.133360][ T1058] INFO: task syz-executor.0:28153 blocked for more than 143 seconds. [ 562.142138][ T1058] Not tainted 5.3.0-rc6+ #94 [ 562.147269][ T1058] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 562.156485][ T1058] syz-executor.0 D30008 28153 25083 0x00004004 [ 562.163143][ T1058] Call Trace: [ 562.166486][ T1058] __schedule+0x877/0xc50 [ 562.170942][ T1058] ? _raw_spin_unlock_irq+0x27/0x80 [ 562.176414][ T1058] schedule+0x131/0x1e0 [ 562.180577][ T1058] rwsem_down_read_slowpath+0x5c5/0xa00 [ 562.186292][ T1058] __down_read+0x6e/0x330 [ 562.190957][ T1058] down_read+0x45/0x50 [ 562.195167][ T1058] walk_component+0x2c7/0x7b0 [ 562.199899][ T1058] path_lookupat+0x1ac/0xb30 [ 562.204684][ T1058] ? __fs_reclaim_release+0x4/0x20 [ 562.210020][ T1058] filename_lookup+0x1d3/0x6a0 [ 562.215169][ T1058] ? strncpy_from_user+0x361/0x3f0 [ 562.220458][ T1058] user_path_at_empty+0x40/0x50 [ 562.225549][ T1058] do_mount+0xd4/0x2490 [ 562.229908][ T1058] ? kmem_cache_alloc_trace+0x23a/0x2f0 [ 562.235539][ T1058] ? copy_mount_options+0x5f/0x3c0 [ 562.241077][ T1058] ? __kasan_check_read+0x11/0x20 [ 562.246227][ T1058] ? copy_mount_options+0x308/0x3c0 [ 562.251797][ T1058] ksys_mount+0xcc/0x100 [ 562.256414][ T1058] __x64_sys_mount+0xbf/0xd0 [ 562.261303][ T1058] do_syscall_64+0xfe/0x140 [ 562.266736][ T1058] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 562.273400][ T1058] RIP: 0033:0x459879 [ 562.277475][ T1058] Code: 30 48 c7 44 24 38 00 00 00 00 48 c7 44 24 40 00 00 00 00 48 c7 44 24 48 00 00 00 00 e8 b0 67 ff ff 48 8b 44 24 50 48 8b 4c 24 <58> 48 89 01 48 8b 6c 24 60 48 83 c4 68 c3 e8 14 06 fd ff 0f 0b e8 [ 562.297937][ T1058] RSP: 002b:00007f2501f65c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 562.306901][ T1058] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459879 [ 562.315116][ T1058] RDX: 0000000020000300 RSI: 0000000020000200 RDI: 0000000000000000 [ 562.323349][ T1058] RBP: 000000000075c070 R08: 00000000200005c0 R09: 0000000000000000 [ 562.331958][ T1058] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2501f666d4 [ 562.340164][ T1058] R13: 00000000004c5e2f R14: 00000000004da930 R15: 00000000ffffffff [ 562.348178][ T1058] INFO: task syz-executor.0:28154 blocked for more than 143 seconds. [ 562.356901][ T1058] Not tainted 5.3.0-rc6+ #94 [ 562.362175][ T1058] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 562.371300][ T1058] syz-executor.0 D30024 28154 25083 0x00004004 [ 562.378045][ T1058] Call Trace: [ 562.381511][ T1058] __schedule+0x877/0xc50 [ 562.385995][ T1058] ? _raw_spin_unlock_irq+0x27/0x80 [ 562.391332][ T1058] schedule+0x131/0x1e0 [ 562.395912][ T1058] rwsem_down_read_slowpath+0x5c5/0xa00 [ 562.401810][ T1058] __down_read+0x6e/0x330 [ 562.406304][ T1058] down_read+0x45/0x50 [ 562.426303][ T1058] walk_component+0x2c7/0x7b0 [ 562.431970][ T1058] path_lookupat+0x1ac/0xb30 [ 562.436614][ T1058] ? __fs_reclaim_release+0x4/0x20 [ 562.443552][ T1058] filename_lookup+0x1d3/0x6a0 [ 562.448517][ T1058] ? strncpy_from_user+0x361/0x3f0 [ 562.454152][ T1058] user_path_at_empty+0x40/0x50 [ 562.459367][ T1058] ksys_chdir+0x45/0x1b0 [ 562.463745][ T1058] ? do_syscall_64+0x1d/0x140 [ 562.468625][ T1058] ? trace_irq_enable_rcuidle+0x23/0x1e0 [ 562.474318][ T1058] __x64_sys_chdir+0x38/0x40 [ 562.479087][ T1058] do_syscall_64+0xfe/0x140 [ 562.483746][ T1058] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 562.489891][ T1058] RIP: 0033:0x459879 [ 562.493820][ T1058] Code: 30 48 c7 44 24 38 00 00 00 00 48 c7 44 24 40 00 00 00 00 48 c7 44 24 48 00 00 00 00 e8 b0 67 ff ff 48 8b 44 24 50 48 8b 4c 24 <58> 48 89 01 48 8b 6c 24 60 48 83 c4 68 c3 e8 14 06 fd ff 0f 0b e8 [ 562.513921][ T1058] RSP: 002b:00007f2501f44c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 562.522754][ T1058] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000459879 [ 562.531185][ T1058] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 562.539940][ T1058] RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000 [ 562.548531][ T1058] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2501f456d4 [ 562.556748][ T1058] R13: 00000000004bf0ea R14: 00000000004d1a20 R15: 00000000ffffffff [ 562.565419][ T1058] INFO: task syz-executor.0:28156 blocked for more than 143 seconds. [ 562.574099][ T1058] Not tainted 5.3.0-rc6+ #94 [ 562.579513][ T1058] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 562.588582][ T1058] syz-executor.0 D30024 28156 25083 0x00004004 [ 562.595170][ T1058] Call Trace: [ 562.598591][ T1058] __schedule+0x877/0xc50 [ 562.603524][ T1058] ? _raw_spin_unlock_irq+0x27/0x80 [ 562.610222][ T1058] schedule+0x131/0x1e0 [ 562.614538][ T1058] rwsem_down_write_slowpath+0x813/0xdd0 [ 562.620583][ T1058] down_write_nested+0x132/0x140 [ 562.625705][ T1058] filename_create+0x12e/0x670 [ 562.630777][ T1058] ? getname_flags+0x214/0x640 [ 562.635894][ T1058] do_mknodat+0xbd/0x4f0 [ 562.640282][ T1058] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 562.645961][ T1058] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 562.651841][ T1058] __x64_sys_mknod+0x80/0x90 [ 562.656585][ T1058] do_syscall_64+0xfe/0x140 [ 562.661323][ T1058] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 562.667537][ T1058] RIP: 0033:0x459879 [ 562.671439][ T1058] Code: 30 48 c7 44 24 38 00 00 00 00 48 c7 44 24 40 00 00 00 00 48 c7 44 24 48 00 00 00 00 e8 b0 67 ff ff 48 8b 44 24 50 48 8b 4c 24 <58> 48 89 01 48 8b 6c 24 60 48 83 c4 68 c3 e8 14 06 fd ff 0f 0b e8 [ 562.692200][ T1058] RSP: 002b:00007f2501f23c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 562.700988][ T1058] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 562.709599][ T1058] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200003c0 [ 562.718194][ T1058] RBP: 000000000075c1c0 R08: 0000000000000000 R09: 0000000000000000 [ 562.726245][ T1058] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2501f246d4 [ 562.734430][ T1058] R13: 00000000004c5d4c R14: 00000000004da780 R15: 00000000ffffffff [ 562.742716][ T1058] INFO: lockdep is turned off. [ 562.747600][ T1058] NMI backtrace for cpu 0 [ 562.752546][ T1058] CPU: 0 PID: 1058 Comm: khungtaskd Not tainted 5.3.0-rc6+ #94 [ 562.760194][ T1058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.770242][ T1058] Call Trace: [ 562.773528][ T1058] dump_stack+0x1d8/0x2f8 [ 562.777969][ T1058] nmi_cpu_backtrace+0xaf/0x1a0 [ 562.783239][ T1058] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 562.789618][ T1058] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 562.795690][ T1058] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 562.801900][ T1058] arch_trigger_cpumask_backtrace+0x10/0x20 [ 562.807794][ T1058] trigger_all_cpu_backtrace+0x17/0x20 [ 562.813394][ T1058] watchdog+0xbb9/0xbd0 [ 562.817592][ T1058] kthread+0x332/0x350 [ 562.821954][ T1058] ? hungtask_pm_notify+0x50/0x50 [ 562.827019][ T1058] ? kthread_blkcg+0xe0/0xe0 [ 562.831650][ T1058] ret_from_fork+0x24/0x30 [ 562.836186][ T1058] Sending NMI from CPU 0 to CPUs 1: [ 562.841695][ C1] NMI backtrace for cpu 1 skipped: idling at native_safe_halt+0xe/0x10 [ 562.842631][ T1058] Kernel panic - not syncing: hung_task: blocked tasks [ 562.856972][ T1058] CPU: 0 PID: 1058 Comm: khungtaskd Not tainted 5.3.0-rc6+ #94 [ 562.864607][ T1058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.874940][ T1058] Call Trace: [ 562.878321][ T1058] dump_stack+0x1d8/0x2f8 [ 562.882949][ T1058] panic+0x25c/0x799 [ 562.886945][ T1058] ? nmi_trigger_cpumask_backtrace+0x21a/0x290 [ 562.893400][ T1058] watchdog+0xbcc/0xbd0 [ 562.897820][ T1058] kthread+0x332/0x350 [ 562.902083][ T1058] ? hungtask_pm_notify+0x50/0x50 [ 562.907159][ T1058] ? kthread_blkcg+0xe0/0xe0 [ 562.911872][ T1058] ret_from_fork+0x24/0x30 [ 562.917989][ T1058] Kernel Offset: disabled [ 562.922415][ T1058] Rebooting in 86400 seconds..