0001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000fffffdfd00"}) [ 247.987309] ? rcu_softirq_qs+0x20/0x20 [ 247.987343] ? __fget+0x4d1/0x740 [ 247.987369] ? ksys_dup3+0x680/0x680 [ 247.996771] ? find_held_lock+0x36/0x1c0 [ 247.996794] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 247.996821] ? binder_ioctl_write_read.isra.42+0xb90/0xb90 [ 248.022516] do_vfs_ioctl+0x1de/0x1720 [ 248.026414] ? __lock_is_held+0xb5/0x140 [ 248.026434] ? ioctl_preallocate+0x300/0x300 [ 248.026449] ? __fget_light+0x2e9/0x430 [ 248.026465] ? fget_raw+0x20/0x20 [ 248.042338] ? __sb_end_write+0xd9/0x110 [ 248.046430] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 248.046445] ? fput+0x130/0x1a0 [ 248.046467] ? do_syscall_64+0x9a/0x820 [ 248.059231] ? do_syscall_64+0x9a/0x820 [ 248.063218] ? lockdep_hardirqs_on+0x421/0x5c0 [ 248.067809] ? security_file_ioctl+0x94/0xc0 [ 248.067829] ksys_ioctl+0xa9/0xd0 [ 248.067848] __x64_sys_ioctl+0x73/0xb0 [ 248.067867] do_syscall_64+0x1b9/0x820 [ 248.067885] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 248.067904] ? syscall_return_slowpath+0x5e0/0x5e0 [ 248.093782] ? trace_hardirqs_off_thunk+0x1a/0x1c 08:57:36 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000001f00"}) [ 248.093804] ? trace_hardirqs_off+0x310/0x310 [ 248.093822] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 248.093840] ? prepare_exit_to_usermode+0x291/0x3b0 [ 248.093865] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 248.103716] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 248.103729] RIP: 0033:0x457579 [ 248.103745] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 248.103753] RSP: 002b:00007f7aff636c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.113795] RAX: ffffffffffffffda RBX: 00007f7aff636c90 RCX: 0000000000457579 [ 248.145867] RDX: 0000000000000000 RSI: 0000000040046205 RDI: 0000000000000003 [ 248.145876] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 248.145885] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7aff6376d4 [ 248.145894] R13: 00000000004be7ea R14: 00000000004ce3b8 R15: 0000000000000006 [ 248.163145] binder: 9251:9252 ioctl 40046205 0 returned -12 08:57:36 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000fdfdffff00"}) [ 248.197987] device nr0 entered promiscuous mode 08:57:36 executing program 5 (fault-call:3 fault-nth:1): r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) [ 248.285561] binder: 9296:9297 ioctl 40046205 0 returned -22 08:57:36 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, 0xffffffffffffffff) 08:57:36 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000fffffdfd00"}) 08:57:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:57:36 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000000)=@nfc, 0x20000080, &(0x7f00000000c0), 0x23b, &(0x7f0000000100)}, 0x0) sendmmsg(r0, &(0x7f0000002c40)=[{{&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x40000c4}}, {{&(0x7f0000001240)=@can, 0x80, &(0x7f00000027c0), 0x0, &(0x7f0000002840)}}], 0x2, 0x20000041) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x10000000008001, 0x5000) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) 08:57:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:36 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000001f00"}) 08:57:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x2, 0x0) [ 248.712358] binder: 9305:9310 ioctl 40046205 0 returned -22 08:57:37 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x80, 0x0, 0x3, 0x80, 0x0, 0x7, 0x2, 0xb, 0x0, 0x1, 0x3, 0x101, 0x101, 0x8, 0x5, 0x20, 0xfffffffffffffff7, 0x5, 0xebf1, 0x3, 0x73a, 0x800, 0x8, 0x1, 0x3, 0x8000, 0x0, 0x9b, 0x40, 0xd2, 0x8, 0x7, 0x4, 0x49, 0x7, 0x1, 0x0, 0xfffffffffffffffa, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x16000, 0x8, 0x0, 0x3, 0x7, 0x3, 0x5}, r1, 0x7, r0, 0x2) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x61}}, &(0x7f0000f6bffb)='GPL\x00', 0x3e87, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 08:57:37 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000fffffdfd00"}) 08:57:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc0045878, 0x0) 08:57:37 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000001f00"}) 08:57:37 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, 0xffffffffffffffff) 08:57:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={0xffffffffffffffff, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:37 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000fdfdffff00"}) 08:57:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x4020940d, 0x0) 08:57:37 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@gettfilter={0x5c, 0x2e, 0x704, 0x70bd2b, 0x25dfdbfb, {0x0, r1, {0xf, 0xfff2}, {0xfff2, 0xffff}, {0x14, 0xffe4}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x1f}, {0x8, 0xb, 0xfff}, {0x8, 0xb, 0xa3}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x8}, {0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180), 0x4) sendmmsg(r3, &(0x7f0000007e00), 0x136a88c8311593c, 0x0) 08:57:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) syz_open_pts(r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 08:57:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc018620c, 0x0) 08:57:37 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000001f00"}) [ 249.648518] binder: 9379:9380 ioctl c018620c 0 returned -14 08:57:37 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000fdfdffff00"}) 08:57:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc0306201, 0x0) 08:57:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x10, 0x0) [ 249.759374] binder: 9393:9394 ioctl c0306201 0 returned -14 08:57:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) [ 249.853643] binder: 9402:9403 ioctl 10 0 returned -22 08:57:38 executing program 2 (fault-call:8 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:38 executing program 4 (fault-call:9 fault-nth:0): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:57:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046208, 0x0) 08:57:38 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000001f00"}) 08:57:38 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@gettfilter={0x5c, 0x2e, 0x704, 0x70bd2b, 0x25dfdbfb, {0x0, r1, {0xf, 0xfff2}, {0xfff2, 0xffff}, {0x14, 0xffe4}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x1f}, {0x8, 0xb, 0xfff}, {0x8, 0xb, 0xa3}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x8}, {0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180), 0x4) sendmmsg(r3, &(0x7f0000007e00), 0x136a88c8311593c, 0x0) 08:57:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0), 0x0, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40049409, 0x0) 08:57:38 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000fffffdfd00"}) [ 250.538351] FAULT_INJECTION: forcing a failure. [ 250.538351] name failslab, interval 1, probability 0, space 0, times 0 [ 250.564660] CPU: 1 PID: 9443 Comm: syz-executor4 Not tainted 4.19.0-rc5-next-20180925+ #79 [ 250.573081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.582444] Call Trace: [ 250.585048] dump_stack+0x1d3/0x2c4 [ 250.588695] ? dump_stack_print_info.cold.2+0x52/0x52 [ 250.593913] should_fail.cold.4+0xa/0x17 [ 250.597986] ? graph_lock+0x170/0x170 [ 250.601806] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 250.606927] ? graph_lock+0x170/0x170 [ 250.610738] ? graph_lock+0x170/0x170 [ 250.614554] ? get_pid_task+0xd6/0x1a0 [ 250.618461] ? lock_downgrade+0x900/0x900 [ 250.622624] ? check_preemption_disabled+0x48/0x200 [ 250.627660] ? find_held_lock+0x36/0x1c0 [ 250.631753] ? proc_fail_nth_write+0x9e/0x210 [ 250.636286] ? ttwu_stat+0x5c0/0x5c0 [ 250.640050] __should_failslab+0x124/0x180 [ 250.644300] should_failslab+0x9/0x14 [ 250.648120] kmem_cache_alloc+0x2be/0x730 [ 250.652284] ? wait_for_completion+0x8a0/0x8a0 [ 250.656893] getname_flags+0xd0/0x590 [ 250.660714] user_path_at_empty+0x2d/0x50 [ 250.664888] do_linkat+0x188/0xa90 [ 250.668450] ? __ia32_sys_symlink+0x80/0x80 [ 250.672813] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 250.678406] ? fput+0x130/0x1a0 [ 250.681700] ? do_syscall_64+0x9a/0x820 [ 250.685688] ? do_syscall_64+0x9a/0x820 [ 250.689679] ? lockdep_hardirqs_on+0x421/0x5c0 [ 250.694282] ? trace_hardirqs_on+0xbd/0x310 [ 250.698620] ? __ia32_sys_read+0xb0/0xb0 [ 250.702697] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 250.708075] ? trace_hardirqs_off_caller+0x300/0x300 [ 250.713201] __x64_sys_link+0x5e/0x80 [ 250.717012] do_syscall_64+0x1b9/0x820 [ 250.720914] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 250.726293] ? syscall_return_slowpath+0x5e0/0x5e0 [ 250.731244] ? trace_hardirqs_off+0x310/0x310 [ 250.735751] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 250.740780] ? recalc_sigpending_tsk+0x180/0x180 [ 250.745546] ? kasan_check_write+0x14/0x20 [ 250.749799] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 250.754661] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 250.759863] RIP: 0033:0x457579 [ 250.763065] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 250.781987] RSP: 002b:00007fbd1e22ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 08:57:39 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000fffffdfd00"}) 08:57:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x5452, 0x0) 08:57:39 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@gettfilter={0x5c, 0x2e, 0x704, 0x70bd2b, 0x25dfdbfb, {0x0, r1, {0xf, 0xfff2}, {0xfff2, 0xffff}, {0x14, 0xffe4}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x1f}, {0x8, 0xb, 0xfff}, {0x8, 0xb, 0xa3}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x8}, {0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180), 0x4) sendmmsg(r3, &(0x7f0000007e00), 0x136a88c8311593c, 0x0) [ 250.789705] RAX: ffffffffffffffda RBX: 00007fbd1e22ac90 RCX: 0000000000457579 [ 250.796985] RDX: 0000000000000000 RSI: 00000000206b3ff0 RDI: 0000000020f3bff8 [ 250.804262] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 250.811539] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbd1e22b6d4 [ 250.818815] R13: 00000000004f4bb3 R14: 00000000004d3740 R15: 0000000000000007 08:57:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046209, 0x0) 08:57:39 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000001f00"}) 08:57:39 executing program 4 (fault-call:9 fault-nth:1): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:57:39 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x200000, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000440)={"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"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") unshare(0x2000400) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='yeah\x00', 0x276) timer_create(0x0, &(0x7f0000000040)={0x0, 0x3, 0x0, @thr={&(0x7f0000000100)="e3a2d7a2ea668a88b07c75706928004865d76e5cc4aa22af86fce43d9d2fc4741d9ce3763aae6efcfbc963b31b303af5276c6b5d095ca35e99172b903fe132e6e07bceabdaece4c29a7787be4868860c4386c591ed4d3f20ce5e776d5f9c901a5230e0d628bc840caaee013f65341a28dd1b79155bdf5121beda0f2855bb7fba994b767a00109a03fd87dcb648b490b3d48431e8ed9445659e86132896c49ce2e94aa6b619a6a1d29177e69bab25da481497f68d00e2cff3fa7526dd", &(0x7f00000002c0)="682ab2323fc5b20de0af6a34e8c958cc1a59fdad641dbe050657311dbf9500454c751361b06b1e1cc3fc7cdeba7dc15372198a5cb69101d41b267c662db69d090b12982abf9d3556ba8a40eb0ac8ff8c7f521efd4f6f1de947a8b9223776c16c61d6611757c0d2953ca239ba05a9d346d4362a7513a3d012d08597067f0dd9b7ecc2da2edde84b1f0cc6ee5590b11938d02b1ae55e3cb0251161633b7740869b7e8a282983b071325d847cac751ff89b0c10f16a41e278d915cb13208e372ca0c88cd1b06aef57a1500c9a51b07086d53d7d866a87c3907c7bae80ce24e0d4a931f664c8a0ef98619070fcadfecc582f3997"}}, &(0x7f00000001c0)=0x0) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000900)={0x3003, 0x3000, 0x7, 0x7, 0x5}) timer_settime(r3, 0x0, &(0x7f0000000200)={{0x0, 0x1c9c380}, {0x77359400}}, &(0x7f0000000240)) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e21, 0x4, @remote}, 0x1c) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000840)=""/186) getsockopt$inet6_tcp_int(r1, 0x6, 0x1a, &(0x7f0000000000), &(0x7f0000000080)=0x4) 08:57:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:39 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000001f00"}) 08:57:39 executing program 1: ioperm(0x7fffffff, 0x50b7, 0x10000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x1) sync_file_range(r0, 0x8, 0x0, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x460, 0x4) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x38) [ 251.272070] binder: 9472:9481 ioctl 40046209 0 returned -22 08:57:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc020660b, 0x0) [ 251.395527] FAULT_INJECTION: forcing a failure. [ 251.395527] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 251.407388] CPU: 1 PID: 9502 Comm: syz-executor4 Not tainted 4.19.0-rc5-next-20180925+ #79 [ 251.415797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.425156] Call Trace: [ 251.427759] dump_stack+0x1d3/0x2c4 [ 251.431402] ? dump_stack_print_info.cold.2+0x52/0x52 [ 251.436606] ? lock_downgrade+0x900/0x900 [ 251.440772] ? check_preemption_disabled+0x48/0x200 [ 251.445826] should_fail.cold.4+0xa/0x17 [ 251.449903] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 251.455013] ? print_usage_bug+0xc0/0xc0 [ 251.455029] ? __lock_acquire+0x7ec/0x4ec0 [ 251.455046] ? graph_lock+0x170/0x170 [ 251.455070] ? mark_held_locks+0x130/0x130 [ 251.455088] ? graph_lock+0x170/0x170 [ 251.463390] ? __lock_acquire+0x7ec/0x4ec0 [ 251.463417] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 251.463434] ? _parse_integer+0x134/0x180 [ 251.463452] ? graph_lock+0x170/0x170 [ 251.471477] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 251.471492] ? _kstrtoull+0x188/0x250 [ 251.471511] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 251.471527] ? should_fail+0x22d/0xd01 [ 251.471541] ? graph_lock+0x170/0x170 [ 251.471566] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 251.479594] __alloc_pages_nodemask+0x34b/0xdd0 [ 251.479612] ? graph_lock+0x170/0x170 [ 251.479634] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 251.479655] ? check_preemption_disabled+0x48/0x200 [ 251.489336] ? find_held_lock+0x36/0x1c0 [ 251.489380] ? trace_hardirqs_off+0xb8/0x310 [ 251.489400] cache_grow_begin+0x91/0x8c0 [ 251.489421] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 251.557295] ? check_preemption_disabled+0x48/0x200 [ 251.562354] kmem_cache_alloc+0x665/0x730 [ 251.566526] getname_flags+0xd0/0x590 [ 251.570357] user_path_at_empty+0x2d/0x50 [ 251.574516] do_linkat+0x188/0xa90 [ 251.578075] ? __ia32_sys_symlink+0x80/0x80 [ 251.582407] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 251.587968] ? fput+0x130/0x1a0 [ 251.591258] ? do_syscall_64+0x9a/0x820 08:57:39 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000fdfdffff00"}) 08:57:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x5450, 0x0) 08:57:39 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000040)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x40440, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000002c0)={'security\x00'}, &(0x7f00000001c0)=0x54) r2 = accept(r1, &(0x7f0000000340)=@generic, &(0x7f00000000c0)=0xffffff3c) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000180)=0x4) [ 251.595238] ? do_syscall_64+0x9a/0x820 [ 251.599228] ? lockdep_hardirqs_on+0x421/0x5c0 [ 251.603842] ? trace_hardirqs_on+0xbd/0x310 [ 251.603867] ? __ia32_sys_read+0xb0/0xb0 [ 251.603885] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 08:57:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0, 0xff0f000000000000}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc0189436, 0x0) 08:57:40 executing program 4 (fault-call:9 fault-nth:2): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:57:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:40 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000001f00"}) [ 251.603903] ? trace_hardirqs_off_caller+0x300/0x300 [ 251.603928] __x64_sys_link+0x5e/0x80 [ 251.603946] do_syscall_64+0x1b9/0x820 [ 251.603961] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 251.603980] ? syscall_return_slowpath+0x5e0/0x5e0 [ 251.603999] ? trace_hardirqs_off+0x310/0x310 [ 251.604016] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 251.604034] ? recalc_sigpending_tsk+0x180/0x180 [ 251.604051] ? kasan_check_write+0x14/0x20 [ 251.604074] ? trace_hardirqs_off_thunk+0x1a/0x1c 08:57:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x5421, 0x0) [ 251.604098] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 251.604111] RIP: 0033:0x457579 [ 251.604127] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 251.604136] RSP: 002b:00007fbd1e22ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 251.604152] RAX: ffffffffffffffda RBX: 00007fbd1e22ac90 RCX: 0000000000457579 [ 251.604160] RDX: 0000000000000000 RSI: 00000000206b3ff0 RDI: 0000000020f3bff8 [ 251.604169] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 251.604178] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbd1e22b6d4 [ 251.604187] R13: 00000000004f4bb3 R14: 00000000004d3740 R15: 0000000000000007 08:57:40 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000fdfdffff00"}) 08:57:40 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000fffffdfd00"}) [ 251.869842] FAULT_INJECTION: forcing a failure. [ 251.869842] name failslab, interval 1, probability 0, space 0, times 0 08:57:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x5451, 0x0) [ 251.932200] CPU: 0 PID: 9541 Comm: syz-executor4 Not tainted 4.19.0-rc5-next-20180925+ #79 [ 251.940645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.949994] Call Trace: [ 251.950020] dump_stack+0x1d3/0x2c4 [ 251.950044] ? dump_stack_print_info.cold.2+0x52/0x52 [ 251.950065] ? user_path_at_empty+0x40/0x50 [ 251.950081] ? do_linkat+0x188/0xa90 [ 251.950100] ? __x64_sys_link+0x5e/0x80 [ 251.950118] ? do_syscall_64+0x1b9/0x820 [ 251.950150] should_fail.cold.4+0xa/0x17 08:57:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc0046209, 0x0) [ 251.956357] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 251.956374] ? kasan_check_write+0x14/0x20 [ 251.956396] ? trace_hardirqs_off+0xb8/0x310 [ 251.956414] ? graph_lock+0x170/0x170 [ 251.956436] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.005244] ? check_preemption_disabled+0x48/0x200 [ 252.010296] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 252.015863] ? find_held_lock+0x36/0x1c0 [ 252.019957] ? ttwu_stat+0x5c0/0x5c0 [ 252.023678] ? nd_jump_link+0x1d0/0x1d0 08:57:40 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000001f00"}) [ 252.027665] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 252.033220] __should_failslab+0x124/0x180 [ 252.033241] should_failslab+0x9/0x14 [ 252.033256] kmem_cache_alloc+0x2be/0x730 [ 252.033277] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.033292] ? getname_flags+0x26e/0x590 [ 252.033321] getname_flags+0xd0/0x590 [ 252.033342] do_linkat+0x1bd/0xa90 [ 252.041378] ? __ia32_sys_symlink+0x80/0x80 [ 252.041395] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 252.041410] ? fput+0x130/0x1a0 [ 252.041427] ? do_syscall_64+0x9a/0x820 08:57:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc0045878, 0x0) [ 252.041443] ? do_syscall_64+0x9a/0x820 [ 252.041463] ? trace_hardirqs_on+0xbd/0x310 [ 252.041475] ? __ia32_sys_read+0xb0/0xb0 [ 252.041497] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 252.073604] binder: 9555:9556 ioctl c0046209 0 returned -22 [ 252.075638] ? trace_hardirqs_off_caller+0x300/0x300 [ 252.075665] __x64_sys_link+0x5e/0x80 [ 252.075684] do_syscall_64+0x1b9/0x820 [ 252.075701] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 252.075722] ? syscall_return_slowpath+0x5e0/0x5e0 [ 252.126149] ? trace_hardirqs_off+0x310/0x310 [ 252.130657] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 252.135683] ? recalc_sigpending_tsk+0x180/0x180 [ 252.135703] ? kasan_check_write+0x14/0x20 [ 252.135727] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 252.135753] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 252.135770] RIP: 0033:0x457579 [ 252.149571] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 252.149581] RSP: 002b:00007fbd1e22ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 252.149599] RAX: ffffffffffffffda RBX: 00007fbd1e22ac90 RCX: 0000000000457579 [ 252.149608] RDX: 0000000000000000 RSI: 00000000206b3ff0 RDI: 0000000020f3bff8 [ 252.149618] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 252.149627] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbd1e22b6d4 [ 252.149636] R13: 00000000004f4bb3 R14: 00000000004d3740 R15: 0000000000000007 08:57:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x5460, 0x0) 08:57:40 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000fffffdfd00"}) 08:57:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0, 0x100000000000000}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:40 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000fdfdffff00"}) 08:57:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:40 executing program 4 (fault-call:9 fault-nth:3): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:57:40 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000001f00"}) 08:57:40 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000fdfdffff00"}) 08:57:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046207, 0x0) 08:57:40 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000fffffdfd00"}) [ 252.469404] FAULT_INJECTION: forcing a failure. [ 252.469404] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 252.481255] CPU: 0 PID: 9599 Comm: syz-executor4 Not tainted 4.19.0-rc5-next-20180925+ #79 [ 252.489672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.499036] Call Trace: [ 252.501643] dump_stack+0x1d3/0x2c4 [ 252.505299] ? dump_stack_print_info.cold.2+0x52/0x52 [ 252.510549] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 252.515491] ? kasan_check_read+0x11/0x20 [ 252.519649] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 252.524947] should_fail.cold.4+0xa/0x17 [ 252.529035] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 252.534155] ? is_bpf_text_address+0xd3/0x170 [ 252.538664] ? kernel_text_address+0x79/0xf0 [ 252.543098] ? __kernel_text_address+0xd/0x40 [ 252.547615] ? mark_held_locks+0x130/0x130 [ 252.551873] ? save_stack+0xa9/0xd0 [ 252.555512] ? save_stack+0x43/0xd0 [ 252.559148] ? __kasan_slab_free+0x102/0x150 [ 252.563569] ? kasan_slab_free+0xe/0x10 [ 252.567551] ? kmem_cache_free+0x83/0x290 [ 252.567571] ? putname+0xf2/0x130 [ 252.575173] ? filename_lookup+0x39a/0x520 [ 252.579414] ? user_path_at_empty+0x40/0x50 [ 252.579445] ? do_linkat+0x188/0xa90 [ 252.579464] ? do_syscall_64+0x1b9/0x820 [ 252.579482] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 252.579507] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.579528] ? should_fail+0x22d/0xd01 [ 252.606374] ? trace_hardirqs_on_caller+0x310/0x310 [ 252.611418] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 252.616543] ? kasan_check_write+0x14/0x20 [ 252.620804] __alloc_pages_nodemask+0x34b/0xdd0 [ 252.625489] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.631129] ? check_preemption_disabled+0x48/0x200 [ 252.636174] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 252.641201] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 252.646757] ? find_held_lock+0x36/0x1c0 [ 252.650857] ? trace_hardirqs_off+0xb8/0x310 [ 252.650878] cache_grow_begin+0x91/0x8c0 [ 252.650897] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 252.650915] ? check_preemption_disabled+0x48/0x200 08:57:40 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000fffffdfd00"}) 08:57:40 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000001f00"}) 08:57:40 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x549201, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f00000000c0)=0x8, &(0x7f0000000140)=0x1) connect(r0, &(0x7f00000001c0)=@un=@abs={0x1, 0x0, 0x4e22}, 0x80) sendto$inet6(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000240)=0x8, 0x4) recvmsg(r1, &(0x7f0000000400)={&(0x7f0000000280)=@nl=@proc, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000080)=""/36, 0xffffffffffffff1b}, 0x2000) fchdir(r0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000001c, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000300)=0x6, 0x4) [ 252.650934] kmem_cache_alloc+0x665/0x730 [ 252.659418] getname_flags+0xd0/0x590 [ 252.659441] do_linkat+0x1bd/0xa90 [ 252.659467] ? __ia32_sys_symlink+0x80/0x80 [ 252.659483] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 252.659501] ? fput+0x130/0x1a0 [ 252.694598] ? do_syscall_64+0x9a/0x820 [ 252.698586] ? do_syscall_64+0x9a/0x820 [ 252.702578] ? trace_hardirqs_on+0xbd/0x310 [ 252.706908] ? __ia32_sys_read+0xb0/0xb0 [ 252.710982] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 08:57:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc018620b, 0x0) [ 252.716365] ? trace_hardirqs_off_caller+0x300/0x300 [ 252.721489] __x64_sys_link+0x5e/0x80 [ 252.725305] do_syscall_64+0x1b9/0x820 [ 252.729237] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 252.729259] ? syscall_return_slowpath+0x5e0/0x5e0 [ 252.729279] ? trace_hardirqs_off+0x310/0x310 [ 252.729302] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 252.739591] ? recalc_sigpending_tsk+0x180/0x180 [ 252.739610] ? kasan_check_write+0x14/0x20 [ 252.739634] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 252.739659] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 252.768162] RIP: 0033:0x457579 [ 252.771374] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 252.790280] RSP: 002b:00007fbd1e22ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 252.790298] RAX: ffffffffffffffda RBX: 00007fbd1e22ac90 RCX: 0000000000457579 [ 252.790307] RDX: 0000000000000000 RSI: 00000000206b3ff0 RDI: 0000000020f3bff8 [ 252.790325] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 252.790335] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbd1e22b6d4 [ 252.790344] R13: 00000000004f4bb3 R14: 00000000004d3740 R15: 0000000000000007 [ 252.857645] binder: 9623:9627 ioctl c018620b 0 returned -14 08:57:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0, 0xff0f0000}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:41 executing program 4 (fault-call:9 fault-nth:4): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) [ 253.090408] FAULT_INJECTION: forcing a failure. [ 253.090408] name failslab, interval 1, probability 0, space 0, times 0 [ 253.101944] CPU: 1 PID: 9643 Comm: syz-executor4 Not tainted 4.19.0-rc5-next-20180925+ #79 [ 253.110473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.119814] Call Trace: [ 253.122404] dump_stack+0x1d3/0x2c4 [ 253.126036] ? dump_stack_print_info.cold.2+0x52/0x52 [ 253.131217] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 253.136755] ? refcount_sub_and_test_checked+0x203/0x310 [ 253.142221] should_fail.cold.4+0xa/0x17 [ 253.146273] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 253.151379] ? walk_component+0x3fe/0x25b0 [ 253.156107] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 253.161134] ? map_id_up+0x193/0x3d0 [ 253.164864] ? graph_lock+0x170/0x170 [ 253.168675] ? graph_lock+0x170/0x170 [ 253.172487] ? mark_held_locks+0x130/0x130 [ 253.176739] ? find_held_lock+0x36/0x1c0 [ 253.180815] ? __lock_is_held+0xb5/0x140 [ 253.184910] ? ttwu_stat+0x5c0/0x5c0 08:57:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) syz_open_pts(r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 08:57:41 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000001f00"}) 08:57:41 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 08:57:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046206, 0x0) [ 253.188649] __should_failslab+0x124/0x180 [ 253.192898] should_failslab+0x9/0x14 [ 253.196698] kmem_cache_alloc+0x2be/0x730 [ 253.200862] __d_alloc+0xc8/0xb90 [ 253.204339] ? shrink_dcache_for_umount+0x2b0/0x2b0 [ 253.209379] ? d_alloc_parallel+0x1f40/0x1f40 [ 253.213879] ? d_lookup+0x255/0x300 [ 253.217513] ? d_lookup+0x255/0x300 [ 253.221149] ? lockdep_hardirqs_on+0x421/0x5c0 [ 253.225744] ? lookup_dcache+0x22/0x140 [ 253.229726] ? trace_hardirqs_off_caller+0x300/0x300 [ 253.234857] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 253.239890] d_alloc+0x96/0x380 [ 253.243176] ? __d_lookup+0x9e0/0x9e0 [ 253.246984] ? __d_alloc+0xb90/0xb90 [ 253.250718] __lookup_hash+0xd9/0x190 [ 253.254531] filename_create+0x1e5/0x5b0 [ 253.258602] ? kern_path_mountpoint+0x40/0x40 [ 253.263117] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 253.268659] ? getname_flags+0x26e/0x590 [ 253.272734] do_linkat+0x1d5/0xa90 [ 253.276295] ? __ia32_sys_symlink+0x80/0x80 [ 253.280632] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 253.286175] ? fput+0x130/0x1a0 [ 253.289467] ? do_syscall_64+0x9a/0x820 [ 253.293449] ? do_syscall_64+0x9a/0x820 [ 253.297435] ? trace_hardirqs_on+0xbd/0x310 [ 253.301761] ? __ia32_sys_read+0xb0/0xb0 [ 253.305827] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 253.311208] ? trace_hardirqs_off_caller+0x300/0x300 [ 253.316337] __x64_sys_link+0x5e/0x80 [ 253.320151] do_syscall_64+0x1b9/0x820 [ 253.324045] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 253.329416] ? syscall_return_slowpath+0x5e0/0x5e0 [ 253.334357] ? trace_hardirqs_off+0x310/0x310 [ 253.338865] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 253.343887] ? recalc_sigpending_tsk+0x180/0x180 [ 253.348650] ? kasan_check_write+0x14/0x20 [ 253.352903] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 253.357767] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 253.362958] RIP: 0033:0x457579 [ 253.366155] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 253.385057] RSP: 002b:00007fbd1e22ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 253.392775] RAX: ffffffffffffffda RBX: 00007fbd1e22ac90 RCX: 0000000000457579 [ 253.400045] RDX: 0000000000000000 RSI: 00000000206b3ff0 RDI: 0000000020f3bff8 [ 253.407324] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 253.414597] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbd1e22b6d4 [ 253.421871] R13: 00000000004f4bb3 R14: 00000000004d3740 R15: 0000000000000007 08:57:41 executing program 4 (fault-call:9 fault-nth:5): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:57:41 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000fdfdffff00"}) [ 253.454731] binder: 9654:9656 ioctl 40046206 0 returned -22 08:57:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x1000000000000000) 08:57:41 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000001f00"}) 08:57:41 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x40122000000003, 0x11) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000000)='./file0\x00'}, 0x10) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000001c0), 0x4) sendmsg$kcm(r0, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000100)="f4001100002b2c25e994efd1000000000009110000000000003a00000000f68ab928abffb7a8d4f32ebdbed828847bbaeb4e", 0x32}], 0x1}, 0x0) close(0xffffffffffffffff) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") close(0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={"6e72300100"}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) getpid() recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000580)=@l2, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000700)=""/228, 0xe4}, {&(0x7f0000000800)=""/79, 0x4f}, {&(0x7f0000000880)=""/58, 0x3a}, {&(0x7f00000008c0)=""/233, 0xe9}], 0x4, &(0x7f0000000a80)=""/113, 0x71, 0x1}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'\x00', 0x200}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000004840)={&(0x7f00000046c0)=@can, 0x80, &(0x7f0000004800), 0x0, 0x0, 0x0, 0x81}, 0x40010040) 08:57:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0, 0x1000000}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:41 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000fffffdfd00"}) [ 253.603970] binder: 9672:9673 ioctl 40046205 1000000000000000 returned -22 08:57:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x6800000000000000) [ 253.752061] binder: 9693:9694 ioctl 40046205 6800000000000000 returned -22 08:57:42 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x40122000000003, 0x11) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000000)='./file0\x00'}, 0x10) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000001c0), 0x4) sendmsg$kcm(r0, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000100)="f4001100002b2c25e994efd1000000000009110000000000003a00000000f68ab928abffb7a8d4f32ebdbed828847bbaeb4e", 0x32}], 0x1}, 0x0) close(0xffffffffffffffff) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") close(0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={"6e72300100"}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) getpid() recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000580)=@l2, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000700)=""/228, 0xe4}, {&(0x7f0000000800)=""/79, 0x4f}, {&(0x7f0000000880)=""/58, 0x3a}, {&(0x7f00000008c0)=""/233, 0xe9}], 0x4, &(0x7f0000000a80)=""/113, 0x71, 0x1}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'\x00', 0x200}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000004840)={&(0x7f00000046c0)=@can, 0x80, &(0x7f0000004800), 0x0, 0x0, 0x0, 0x81}, 0x40010040) 08:57:42 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:57:42 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000001f00"}) 08:57:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x605000) 08:57:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) syz_open_pts(r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 08:57:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0, 0xff0f}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:42 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000fffffdfd00"}) [ 254.038067] binder: 9709:9710 ioctl 40046205 605000 returned -22 08:57:42 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x40122000000003, 0x11) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000000)='./file0\x00'}, 0x10) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000001c0), 0x4) sendmsg$kcm(r0, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000100)="f4001100002b2c25e994efd1000000000009110000000000003a00000000f68ab928abffb7a8d4f32ebdbed828847bbaeb4e", 0x32}], 0x1}, 0x0) close(0xffffffffffffffff) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") close(0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={"6e72300100"}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) getpid() recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000580)=@l2, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000700)=""/228, 0xe4}, {&(0x7f0000000800)=""/79, 0x4f}, {&(0x7f0000000880)=""/58, 0x3a}, {&(0x7f00000008c0)=""/233, 0xe9}], 0x4, &(0x7f0000000a80)=""/113, 0x71, 0x1}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'\x00', 0x200}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000004840)={&(0x7f00000046c0)=@can, 0x80, &(0x7f0000004800), 0x0, 0x0, 0x0, 0x81}, 0x40010040) 08:57:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x3f00) 08:57:42 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000001f00"}) 08:57:42 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r2) [ 254.206367] binder: 9735:9737 ioctl 40046205 3f00 returned -22 08:57:42 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000fdfdffff00"}) 08:57:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x600000000000000) 08:57:42 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x40122000000003, 0x11) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000000)='./file0\x00'}, 0x10) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000001c0), 0x4) sendmsg$kcm(r0, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000100)="f4001100002b2c25e994efd1000000000009110000000000003a00000000f68ab928abffb7a8d4f32ebdbed828847bbaeb4e", 0x32}], 0x1}, 0x0) close(0xffffffffffffffff) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") close(0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={"6e72300100"}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) getpid() recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000580)=@l2, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000700)=""/228, 0xe4}, {&(0x7f0000000800)=""/79, 0x4f}, {&(0x7f0000000880)=""/58, 0x3a}, {&(0x7f00000008c0)=""/233, 0xe9}], 0x4, &(0x7f0000000a80)=""/113, 0x71, 0x1}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'\x00', 0x200}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000004840)={&(0x7f00000046c0)=@can, 0x80, &(0x7f0000004800), 0x0, 0x0, 0x0, 0x81}, 0x40010040) 08:57:42 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000001f00"}) [ 254.379486] binder: 9762:9766 ioctl 40046205 600000000000000 returned -22 08:57:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x20000000) 08:57:43 executing program 0 (fault-call:8 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x5, 0x140) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000380)={0x2008}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f00000001c0)=0xc) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={[], 0x8, 0x7fff, 0xfff, 0x7, 0x9, r2}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000140)) r4 = gettid() kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r3, &(0x7f0000000000)={r3, r0}) ppoll(&(0x7f00000002c0)=[{r3}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r5 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) 08:57:43 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000fdfdffff00"}) 08:57:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x400000000000000) 08:57:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0, 0xff0f0000}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:43 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000001f00"}) [ 254.920194] binder: 9789:9790 ioctl 40046205 400000000000000 returned -22 08:57:43 executing program 4: pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f000000e000/0x4000)=nil, 0x4000}, 0x1}) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x1cf) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x8001, 0x4) clock_nanosleep(0x7, 0x1, &(0x7f0000000040), &(0x7f00000000c0)) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r2) 08:57:43 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000fffffdfd00"}) 08:57:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x80, 0x800) sendmsg$nl_netfilter(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x1e8, 0x3, 0xe, 0x200, 0x70bd25, 0x25dfdbfc, {0xf}, [@typed={0x8, 0x1b, @u32=0x6}, @typed={0x10, 0x5b, @str='/dev/ptmx\x00'}, @typed={0x8, 0x3, @u32=0x3}, @nested={0x1a0, 0x22, [@typed={0x14, 0x22, @ipv6=@remote}, @typed={0x8, 0x41, @ipv4=@loopback}, @generic="63b9b7881b110b1546d3fbd404961ed224703cc48804a8ff16059f4ffb2c3a13f1f2c17a6e2a529f8433c919b56f770ff6c683d9e7d997a7be97c86636445b998ac60819874d45bc46d1e42f1e7662390102d520cc71611c8859b3d3935f60a0a87581f0896db3ab7c0766e1c12c0a6c5bf3f6473563f35748f7a3747b4558a47e1a8a2845b5d3b493273c7386e2f5c306baca361eb75c074074de57", @generic="120bfd2664b3d8467e10c595349bbe6618808a1ed6322f620184f8aad28b6368b5cc979613999eefd4fdefa8022ee6e00a0a510ad8eda6b1ba53fc2f141354823c942482d9a02d2122579e6ac4f33c49a205bc43abb96d9a64559ecf649680432b791bb9e59e00e8348aed1630c0bad76281a37112f6c9b2177b737f6cd097f3aa589f7ddf3964b2ecba07bd63f207c302a847d443c9420ceabf89ac5d0e267ee6a138157678036e9567d5b4e9c5f6a926f17c1a6c1cf4bff1ab782302f330bf7b0e2fa76cc2416fe36b76d49a7c757e5d08aeb52603766eb6a834", @typed={0x8, 0x43, @u32=0x7f}]}, @typed={0x14, 0x96, @ipv6=@local}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000280)=0x8000) 08:57:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x4c00000000000000) 08:57:43 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010020000000084) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x21, &(0x7f0000000080), &(0x7f0000000040)=0x3) getrusage(0xffffffffffffffff, &(0x7f00000004c0)) close(r0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0xc) 08:57:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:43 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r2) 08:57:43 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000001f00"}) [ 255.276330] binder: 9822:9823 ioctl 40046205 4c00000000000000 returned -22 08:57:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x7300) 08:57:43 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x400002, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000180)=0x4) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x84000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x5, 0x80, 0x6, 0x3}, {0xfffffffffffff6d7, 0x7, 0x1000, 0x100}, {0x0, 0x7f, 0x8, 0x6}, {0x100, 0x4, 0x81, 0x101}]}, 0x10) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r1, r2) 08:57:43 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000fffffdfd00"}) 08:57:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x4c000000) [ 255.393554] binder: 9846:9849 ioctl 40046205 7300 returned -22 08:57:43 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000001f00"}) 08:57:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x10) [ 255.509533] binder: 9865:9866 ioctl 40046205 4c000000 returned -22 08:57:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x5, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:43 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000001f00"}) [ 255.614675] binder: 9879:9880 ioctl 40046205 10 returned -22 08:57:43 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000fffffdfd00"}) 08:57:44 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:57:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) 08:57:44 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000001f00"}) 08:57:44 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(0xffffffffffffffff, &(0x7f000000d8c0), 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="21000002"], 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0xc040, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r3, 0x4040ae72, &(0x7f0000000140)={0xffff, 0x0, 0x80000001, 0x4}) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000080)={0x2, 0x0, [{0x40000006, 0x7, 0x7, 0x20, 0x8, 0x1, 0x3ff}, {0x80000001, 0x5c0, 0x1, 0x1, 0x6, 0x6, 0x9}]}) recvfrom(r2, &(0x7f0000003540)=""/68, 0x44, 0x10062, &(0x7f0000003640)=@hci, 0x707000) 08:57:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x6, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) getrusage(0xfffffffffffffffc, &(0x7f0000000500)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x4, 0x40d80) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f00000000c0)=0x1d) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:44 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000fdfdffff00"}) 08:57:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x48000000) 08:57:44 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000001f00"}) 08:57:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x74000000) [ 256.325788] binder: 9928:9930 ioctl 40046205 48000000 returned -22 08:57:44 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000fffffdfd00"}) 08:57:44 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000fdfdffff00"}) 08:57:44 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x20) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) [ 256.423361] binder: 9944:9945 ioctl 40046205 74000000 returned -22 08:57:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x2, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) 08:57:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x68) 08:57:44 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000001f00"}) [ 256.601710] binder: 9967:9968 ioctl 40046205 68 returned -22 08:57:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0x2000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(r1) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x7fffffff, 0x8, 0x1e2}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000001c0)={0x9, 0x10000, 0x5, 0x4, 0x9, 0x0, 0x6, 0x8, r4}, &(0x7f0000000240)=0x20) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r5 = gettid() kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r6 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) 08:57:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) 08:57:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xe0700000000000) 08:57:45 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000fffffdfd00"}) 08:57:45 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) syncfs(r1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x3) mknod(&(0x7f0000000140)='./control/file0\x00', 0xa, 0x401) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000100)={0xb, 0x1000, 0x5}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x20000, 0x4) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000001c0)='./file1\x00') link(&(0x7f00000000c0)='./control/file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') fchmodat(r3, &(0x7f0000000200)='./control\x00', 0x8) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x9, 0xce9}) 08:57:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x3, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) [ 256.779766] binder: 9986:9987 ioctl 40046205 e0700000000000 returned -22 08:57:45 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000001f00"}) 08:57:45 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x117, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {r3, 0x13}}, 0x10) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000140)={0x0, r4}) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000180)=@req={0x1, 0x6, 0x7a, 0x5}, 0x10) dup2(r0, r2) 08:57:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xffffff7f) 08:57:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) 08:57:45 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000fffffdfd00"}) [ 256.978283] binder: 10015:10018 ioctl 40046205 ffffff7f returned -22 08:57:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) 08:57:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x507000) 08:57:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x4, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:45 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000001f00"}) 08:57:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000380)=ANY=[@ANYBLOB="0008000000000000ff0100000000000002000000896100000300000000000000080000000000000000010000000000000500000000000000000000000000000000000000000000000002000000000000000c0000000000000800000000000000fbffffffffffffff01ffffffffffffff0000000000000000000000000000000000060000000000000000000000000000ff010000000000000800000000000000ff030000000000000000000000000000000000000000000000000000000000000000000000000000"]) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x2000000000000000) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x800, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000240)=0x3) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000000)={r2, r0}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x4000, 0x0) write$FUSE_IOCTL(r4, &(0x7f00000000c0)={0x20, 0xfffffffffffffffe, 0x4, {0xfffffffffffffffe, 0x0, 0x0, 0x1}}, 0x20) ppoll(&(0x7f00000002c0)=[{r2}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r5 = syz_open_pts(r0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000100)={0x8001, 0x4f6, 0x4, 0x0, 0x8, 0xe1c, 0x2, 0xffffffff, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000004c0)={r6, 0x6}, &(0x7f0000000500)=0xc) ioctl$TCXONC(r5, 0x540a, 0x0) fsync(r2) 08:57:45 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000fdfdffff00"}) [ 257.140939] binder: 10034:10035 ioctl 40046205 507000 returned -22 08:57:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x2000000) 08:57:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) 08:57:45 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000100)=0x6, 0x4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 08:57:45 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000fdfdffff00"}) 08:57:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x730000) [ 257.291146] binder: 10052:10057 ioctl 40046205 2000000 returned -22 [ 257.319803] QAT: Invalid ioctl 08:57:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) 08:57:45 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000001f00"}) 08:57:45 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000fffffdfd00"}) 08:57:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0, 0x100000000000000}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x7) [ 257.517981] QAT: Invalid ioctl [ 257.552027] binder: 10091:10092 ioctl 40046205 7 returned -22 08:57:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000080)={0x1, 0x81, 0xffffffffffffffff, 0x8, 0x5}) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) 08:57:45 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0x4}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:57:45 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000001f00"}) 08:57:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x300000000000000) 08:57:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) 08:57:45 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000fffffdfd00"}) 08:57:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x70e000) 08:57:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x2000000000000000) [ 257.727101] binder: 10112:10113 ioctl 40046205 300000000000000 returned -22 08:57:46 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000001f00"}) [ 257.816778] binder: 10126:10128 ioctl 40046205 2000000000000000 returned -22 08:57:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0, 0x3f00000000000000}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x60500000000000) 08:57:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x8, 0x2) mknodat(r1, &(0x7f00000000c0)='./file0\x00', 0x814c, 0x4f) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000000)={r2, r0}) socket$key(0xf, 0x3, 0x2) ppoll(&(0x7f00000002c0)=[{r2}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:57:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x70e000) 08:57:46 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000000)=0xffffffff) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r2) 08:57:46 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000fdfdffff00"}) [ 257.994046] binder: 10145:10146 ioctl 40046205 60500000000000 returned -22 08:57:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x50700000000000) 08:57:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x70e000) 08:57:46 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000001f00"}) 08:57:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) 08:57:46 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000fffffdfd00"}) [ 258.139689] binder: 10167:10170 ioctl 40046205 50700000000000 returned -22 08:57:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xe07000) [ 258.279623] binder: 10189:10191 ioctl 40046205 e07000 returned -22 08:57:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0, 0x4000000000000000}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) 08:57:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x6) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:49 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000001f00"}) 08:57:49 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e22, @loopback}, {0x1, @broadcast}, 0x10, {0x2, 0x4e24, @rand_addr=0x2}, 'tunl0\x00'}) dup2(r0, r2) 08:57:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x9300) 08:57:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) 08:57:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0, 0x40000000}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) 08:57:49 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) utimes(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)={{}, {0x77359400}}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) [ 261.181485] binder: 10208:10210 ioctl 40046205 9300 returned -22 08:57:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x2) 08:57:49 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000fffffdfd00"}) 08:57:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) 08:57:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x500) [ 261.334040] binder: 10235:10236 ioctl 40046205 2 returned -22 [ 261.418328] binder: 10246:10248 ioctl 40046205 500 returned -22 08:57:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000004c0)=0x10000000000062) r1 = getpid() sched_getaffinity(r1, 0x8, &(0x7f00000001c0)) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000000)={r2, r0}) r4 = add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$invalidate(0x15, r4) ppoll(&(0x7f00000002c0)=[{r2}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x40000, 0x0) r6 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) setsockopt$packet_buf(r5, 0x107, 0x0, &(0x7f0000000500)="af78d7895837e741b34057388f074128b652081c805781762c17438b6e3da660f0f49a412fe5bd75069b8363af292f2e442d88b3fb3235986388776fd733c0e11d21d0fb241d2faa1232b21e8066ec207f4dbda80959eae9322824ece1df6bd03d9be678895428334670c127df4c1f3982bde87f049ca8baf8e1452e3924f7518606e8d39088ba69b91e78511d6d7772437837dc5e32d8d9f625b49b8366f8db80", 0xa1) kexec_load(0xffff, 0x3, &(0x7f0000000440)=[{&(0x7f0000000380)="940610e92fdac4086398f3b9d194da6140a98307f467f4d2770d32bcd5e35f56bcc2d1ee6eb1f2e49ec2b98a37e513867cef2178e91b9c6d7e11ac843fa2e28cbf4017211e354d4e628a39fa1bdbabd8452d8ac575e9a80c8407b424b9dd22a746f360310f6d6fc4a2ef2df4e348973c95090c35bc68ec010a2a2b3c", 0x7c, 0x2, 0xa5d}, {&(0x7f0000000280)="19ffc6b8f882e54e4a9c4478199e6ac83d4508a2924da07a4d3c667c1025", 0x1e, 0x80000001, 0x1}, {&(0x7f0000000400)="ad3577803a1fb206b8680e16050fd5700a7cfdb7d08867b42bbc8b6fe5077295ab", 0x21, 0x6, 0x7}], 0x150000) 08:57:49 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000001f00"}) 08:57:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) 08:57:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x4c00) 08:57:49 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r4 = getpgid(0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000000)=r4) unlink(&(0x7f00000000c0)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r2) 08:57:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0, 0xffffffff00000000}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) [ 261.603258] binder: 10257:10258 ioctl 40046205 4c00 returned -22 08:57:49 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000fffffdfd00"}) 08:57:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x700) 08:57:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) 08:57:50 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000001f00"}) [ 261.724519] binder: 10282:10283 ioctl 40046205 700 returned -22 08:57:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) 08:57:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) dup(r3) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x6) 08:57:50 executing program 4: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4000) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:57:50 executing program 1: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x70e000) 08:57:50 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000fffffdfd00"}) 08:57:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0, 0x3f000000}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) [ 261.979668] binder: 10310:10311 ioctl 40046205 6 returned -22 08:57:50 executing program 1: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x70e000) 08:57:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x74) 08:57:50 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000001f00"}) 08:57:50 executing program 1: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x70e000) 08:57:50 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) [ 262.119033] binder: 10330:10333 ioctl 40046205 74 returned -22 08:57:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xffefffffff7f0000) [ 262.278291] binder: 10350:10352 ioctl 40046205 ffefffffff7f0000 returned -22 08:57:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f00000000c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) r2 = dup(r1) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:57:50 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000fdfdffff00"}) 08:57:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:57:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x3f00000000000000) 08:57:50 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000001f00"}) 08:57:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0, 0x1000000}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) [ 262.398855] binder: 10361:10363 ioctl 40046205 0 returned -22 [ 262.428371] binder: 10364:10367 ioctl 40046205 3f00000000000000 returned -22 08:57:50 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f00000004c0)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000540)={0x0, 0x820c, 0x9, 0x3, 0x0}, &(0x7f0000000580)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000005c0)={r4, 0x200}, 0x8) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000240)={0x7, 0x9}) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket(0x1e, 0x1, 0x0) sendmsg(r6, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x2ef, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) fstat(r6, &(0x7f0000000180)) set_thread_area(&(0x7f0000000480)={0x20, 0x20001800, 0xffffffffffffffff, 0x1, 0x80, 0x64, 0x9, 0x5, 0x3}) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280), 0xffffffffffffffff, 0x4000000000000000}}, 0x152610) close(r6) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) r7 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) sendfile(r7, r5, &(0x7f0000000200), 0x0) write$sndseq(r7, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x4, 0x20, 0x7, 0xee6}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x1, 0x200, 0x8000, 0xa3, 0x5, 0x5, 0x100, 0x2, r8}, 0x20) dup2(r1, r3) 08:57:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0, 0x100000000000000}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x730000000000) 08:57:50 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000fdfdffff00"}) 08:57:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x7fffffffefff) [ 262.571532] binder: 10383:10384 ioctl 40046205 730000000000 returned -22 08:57:50 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000001f00"}) [ 262.655796] binder: 10396:10397 ioctl 40046205 7fffffffefff returned -22 08:57:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f00000000c0)='./file0\x00', 0x100000000, 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)="f4f9bf1455aaac3281854e", 0xb, 0x4aa}, {&(0x7f0000000240)="949bffbdcb5a468129a951bc9eaacf56bfe8f11de09aa2f6b9d3ea877a", 0x1d, 0x7}], 0x440, &(0x7f0000000380)={[{@utf8='utf8'}, {@dmode={'dmode', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@map_acorn='map=acorn'}, {@map_normal='map=normal'}, {@overriderock='overriderockperm'}]}) 08:57:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x60) 08:57:51 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000fffffdfd00"}) [ 262.763379] binder: 10409:10411 ioctl 40046205 60 returned -22 08:57:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x7a00000000000000) 08:57:51 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000001f00"}) 08:57:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0, 0x3f00}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) [ 262.913277] binder: 10431:10432 ioctl 40046205 7a00000000000000 returned -22 08:57:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) getrusage(0xfffffffffffffffc, &(0x7f0000000500)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x4, 0x40d80) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f00000000c0)=0x1d) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:51 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000fffffdfd00"}) 08:57:51 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) fchdir(r0) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x81004, &(0x7f0000000100)=ANY=[@ANYBLOB="6d6f644b3d300d30303030323030307bc55d54a6e49cccf45c300400090037373717373737372c6d6f64653d30303230303030303030303030303030303030303030"]) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:57:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x6c000000) [ 263.077280] ISOFS: Unable to identify CD-ROM format. 08:57:51 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000001f00"}) 08:57:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x10000000) [ 263.139017] binder: 10448:10454 ioctl 40046205 6c000000 returned -22 08:57:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:51 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000001f00"}) 08:57:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x3000000) [ 263.238338] binder: 10465:10466 ioctl 40046205 10000000 returned -22 08:57:51 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') r3 = dup2(r0, r1) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000000)) 08:57:51 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000fffffdfd00"}) [ 263.332249] binder: 10479:10482 ioctl 40046205 3000000 returned -22 08:57:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0, 0x4000}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) getrusage(0xfffffffffffffffc, &(0x7f0000000500)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x4, 0x40d80) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f00000000c0)=0x1d) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x506000) 08:57:51 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000001f00"}) 08:57:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xffffff7f00000000) [ 263.499960] binder: 10502:10503 ioctl 40046205 506000 returned -22 08:57:51 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000fffffdfd00"}) 08:57:51 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000001f00"}) [ 263.576829] binder: 10516:10517 ioctl 40046205 ffffff7f00000000 returned -22 08:57:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0xafa3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x4, 0x480000) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) ioctl$TCSBRK(r0, 0x5409, 0x4) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:57:51 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) lsetxattr$security_smack_entry(&(0x7f0000000000)='./control/file0\x00', &(0x7f00000000c0)='security.SMACK64IPOUT\x00', &(0x7f0000000100)='-\x00', 0x2, 0x1) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:57:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x500000000000000) 08:57:52 executing program 0: getrusage(0xffffffffffffffff, &(0x7f0000000380)) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x101, 0x10900) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f00000001c0)=0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r1, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000000)={r2, r1}) ppoll(&(0x7f00000002c0)=[{r2}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:57:52 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000fdfdffff00"}) [ 263.712005] binder: 10531:10536 ioctl 40046205 500000000000000 returned -22 08:57:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x6000) 08:57:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) getrusage(0xfffffffffffffffc, &(0x7f0000000500)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x4, 0x40d80) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f00000000c0)=0x1d) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:52 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000001f00"}) [ 263.845245] binder: 10555:10556 ioctl 40046205 6000 returned -22 08:57:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x930000) 08:57:52 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:57:52 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) iopl(0x80) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:57:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x400000000000) [ 264.033427] binder: 10585:10586 ioctl 40046205 400000000000 returned -22 08:57:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x10400, 0x0) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000180)={0xa, 0x1, 0x8000, 0x3}, 0xa) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:57:52 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000001f00"}) 08:57:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x6000000000000000) 08:57:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) r1 = socket$l2tp(0x18, 0x1, 0x1) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080), 0x10) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000000)={r2, r0}) ppoll(&(0x7f00000002c0)=[{r2}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TCXONC(r4, 0x540a, 0x0) 08:57:52 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0xfffffffffffffffe) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/23, 0x17}, {&(0x7f0000000240)=""/2, 0x2}, {&(0x7f0000000280)=""/30, 0x1e}, {&(0x7f00000002c0)=""/246, 0xf6}], 0x4) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f00000000c0)='./control\x00', 0x3, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="4aa2761cf6f4e02d3328d3088b294af721", 0x11, 0x1}], 0x20, &(0x7f0000000180)={[{@test_dummy_encryption='test_dummy_encryption'}, {@background_gc_on='background_gc=on'}, {@user_xattr='user_xattr'}, {@disable_roll_forward='disable_roll_forward'}]}) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:57:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) getrusage(0xfffffffffffffffc, &(0x7f0000000500)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) syz_open_pts(r0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x4, 0x40d80) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000000c0)=0x1d) 08:57:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x7000000) 08:57:52 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000fffffdfd00"}) [ 264.640691] binder: 10608:10610 ioctl 40046205 6000000000000000 returned -22 08:57:53 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000001f00"}) [ 264.716597] binder: 10625:10626 ioctl 40046205 7000000 returned -22 08:57:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x3f000000) 08:57:53 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000fdfdffff00"}) 08:57:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x7a00) [ 264.824821] binder: 10640:10642 ioctl 40046205 3f000000 returned -22 [ 264.902872] binder: 10657:10658 ioctl 40046205 7a00 returned -22 08:57:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) ioctl$TCXONC(r0, 0x540a, 0x7fff) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:53 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000fdfdffff00"}) 08:57:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x700000000000000) 08:57:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() r3 = accept4$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000001c0)=0x1c, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in=@remote, @in6=@local}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000080)={0xc0000000}) [ 264.997769] binder: 10663:10666 ioctl 40046205 700000000000000 returned -22 08:57:53 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x80050, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:57:53 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000001f00"}) 08:57:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x4c) 08:57:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) getrusage(0xfffffffffffffffc, &(0x7f0000000500)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x4, 0x40d80) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:53 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:57:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x5000000) [ 265.544641] binder: 10692:10696 ioctl 40046205 4c returned -22 08:57:53 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000001f00"}) 08:57:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x5) [ 265.625936] binder: 10705:10706 ioctl 40046205 5000000 returned -22 [ 265.682483] binder: 10712:10713 ioctl 40046205 5 returned -22 08:57:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r0, 0x0, 0xa, &(0x7f0000000080)='/dev/ptmx\x00', 0xffffffffffffffff}, 0x30) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)=r2, 0x4) fdatasync(r3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r4 = gettid() ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000240)={0x6ac708bb, 0xffffffffffffff5e, 0x6, 0x0, 0xe119}) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r5 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) 08:57:56 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000fffffdfd00"}) 08:57:56 executing program 4: pipe2(&(0x7f0000000100), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') openat$cgroup_ro(r1, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r1, r0) 08:57:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x48) 08:57:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) getrusage(0xfffffffffffffffc, &(0x7f0000000500)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:56 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000001f00"}) 08:57:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x6c) [ 268.083190] binder: 10727:10733 ioctl 40046205 48 returned -22 08:57:56 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000fdfdffff00"}) 08:57:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x200000000000000) [ 268.186668] binder: 10747:10749 ioctl 40046205 6c returned -22 08:57:56 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000001f00"}) 08:57:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000063) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = syz_open_procfs(r2, &(0x7f0000000080)='stat\x00') write$binfmt_elf64(r1, &(0x7f0000000f40)=ANY=[@ANYRES32=r2], 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e21, 0x6, @local, 0x2}}, 0x1f, 0xfb75, 0x7696, 0x200, 0x5ca}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000001c0)={r5, 0x1, 0x9, [0xe000000, 0x4, 0x3f, 0x100, 0x839c, 0x2, 0x800, 0x2, 0x200]}, &(0x7f0000000900)=0x1a) [ 268.265476] binder: 10760:10762 ioctl 40046205 200000000000000 returned -22 08:57:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000280)={0x100, 0x3, 0x8, 0x3, 0x80000001, 0x4, 0x0, 0x0, 0x401, 0x7fff, 0x8, 0x5}) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x7, 0x200000) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x80000001}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000240)={r3, 0x3f, 0x7}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r4 = gettid() kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r5 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) 08:57:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x4000) 08:57:56 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') r3 = dup2(r0, r1) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000100)={@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21}, 0x3, 0x2, 0x3, 0x3}}, {&(0x7f0000000000)=""/38, 0x26}, &(0x7f00000000c0), 0x1}, 0xa0) 08:57:56 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:57:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x6800) [ 268.426649] binder: 10782:10783 ioctl 40046205 4000 returned -22 08:57:56 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000001f00"}) 08:57:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) getrusage(0xfffffffffffffffc, &(0x7f0000000500)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) [ 268.517152] binder: 10795:10796 ioctl 40046205 6800 returned -22 08:57:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) pivot_root(&(0x7f0000001640)='./file0\x00', &(0x7f0000001680)='./file0\x00') ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = syz_open_dev$audion(&(0x7f0000009380)='/dev/audio#\x00', 0x1, 0x101002) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f00000093c0)=0x4, 0x4) r2 = epoll_create1(0x0) syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x29ffc771, 0x4, &(0x7f0000001500)=[{&(0x7f0000000380)="4b89ad2965bd1b5d367bf14db33bb1592c9d2ca65bec841e1dc55ad928d50572089bd2955066004a4bbfa683712195b8951a21ce195ce29ed4e2471d66d17058aa276d57f6090c4b3e8835fcb94519efeac71ec8d95c3ad71beaf91437bd51f48be306007872abadeba732d1ceef742af5f3f8df429c60e7f089e50a0f1472081c5a66fc9a87ecafbcb3727f71957151e68b902467398fd36f6f6857b692c8b51b4494abd3d5a6477e051444772b36", 0xaf, 0x1}, {&(0x7f0000000440)="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", 0x1000, 0x9}, {&(0x7f0000000240)="73a46326be81aea4a63648eac1117eeb70ed2a588c47ee399b76970df183ea5a2c1d814e5528134ba6a8498d4d990719aef615fb36c3b14dbd20aa8f9dd254735e3b1f44028e2fbe68ea7f5a0a61ab5b07eb83e2f00d1b7cc75fbf259fc3bb570be3ad5ecefd4c89dff66e", 0x6b, 0x4a6}, {&(0x7f0000001440)="0945fb194d5cf5e568f1e9b5bdeb2e30f05a43f570f1619d9786082f067d0e9743317f1c9c94ca2cdd6c47aa152f11409dc710b6012be8b0b72d3aa0f9befd7fe18d777668409d21545b9be8155ef16ef12f22875fdaca8320b2055a5d12c37d4849cffe6a21be1f305e412def3e81d03f9d268d8d93025ac0dfea483301e413e00880a5fe580a299c32c40dc6a9b37e4f3920482850a87c59541fc4839b2f58e488a6a9ef84644242bb5c16f6c4cd8c8b0ab8f73f", 0xb5, 0xddf}], 0x40000, &(0x7f0000001580)=ANY=[@ANYBLOB='meta,quota=on,nosuiddir,locktable=md5sumvmnet1#%Cnorgrplvb,acl,commit=0x0000000000000003,quota=on,\x00']) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000000)={r2, r0}) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) ioctl$SG_GET_VERSION_NUM(r4, 0x2282, &(0x7f0000001600)) ppoll(&(0x7f00000002c0)=[{r2}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r5 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) 08:57:56 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000fffffdfd00"}) 08:57:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x3) 08:57:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f00000001c0)={0x6, 0x5, 0x200}) r3 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x5fb3, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1b, &(0x7f0000000240)=""/124, &(0x7f00000000c0)=0x7c) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:57:56 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f00000000c0)=0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000200)) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000100)={0x52, 0x800, 0xac0, {0x1f, 0x4}, {0x7, 0x4}, @cond=[{0xffff, 0x3ff, 0x1, 0x10001, 0x5, 0x3}, {0x9, 0x1, 0xfff, 0x2f4f000000000, 0x40, 0x3}]}) setxattr$security_smack_transmute(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='security.SMACK64TRANSMUTE\x00', &(0x7f00000001c0)='TRUE', 0x4, 0x1) dup2(r1, r3) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0xfff) 08:57:56 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000001f00"}) 08:57:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x68000000) [ 268.696051] binder: 10821:10822 ioctl 40046205 3 returned -22 08:57:57 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000fffffdfd00"}) 08:57:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x600) [ 268.781137] binder: 10836:10838 ioctl 40046205 68000000 returned -22 08:57:57 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000001f00"}) 08:57:57 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000fdfdffff00"}) [ 268.903421] binder: 10857:10861 ioctl 40046205 600 returned -22 08:57:59 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') sendmsg$nfc_llcp(r1, &(0x7f0000001540)={&(0x7f00000000c0)={0x27, 0x1, 0x1, 0x6, 0x81, 0x8, "7c93921b4019135eb30d885d75efc272fbcb7fda5e836b99b97371837736e3ce43b0c20569a4305e88075ee2d9beb40ab0361de416f0e40b1485f0427457fa", 0x27}, 0x60, &(0x7f00000014c0)=[{&(0x7f0000000140)="9b809519158dbdc6e7ab230b814f338ec498946c1a36ad1064c90b5d48f5558d8d8b66f9b0561e3c825301d0c6c9e8d705f9cebe1095ec26a14c80034aa30cdcb5339ff5bd17e3eed9ee8b3562914610b1ee4f02c5377030ea9bf935f49da493071aa4972c957db8d573a826cdac849bb3dbd79203633145a9bb22e8451f92237868ebe6fcb2299bf2aea7ad4a97c91847cdc063a84cdeef997b0347efab81fad4226e5581ff773fedad65570643ee6f9bae392eacf48b81a0df089bdab0e95edef12169eeaa", 0xc6}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="06fd132b0ff95409fbe1acb07f6adf92e92989db46fca40c792ccb4c2db576734b0c9e069c5407c10c355b7aed26fae08f5580e7e681bb9b92643da185bb90da2f3772a6586b75b3f6029a51cc0671fc4646edec45761063d0e926a906ddc85cdfbb02d5632caaf09b2396da1d7df35b25885e63304be02a285e68fb5d59419025485fe1c2db600d1482d4145fe25a2303ac24e77a8de20d09425b0e5d52b3b52af6c9efabd4f50c2fc1d51a599cf17a5013f4ba318e41b869d4b25cd811a6fd9a233bbbbe353588ab063e4ea6583367e9e4", 0xd2}, {&(0x7f0000001340)="705fb5eaf2e319ea4b1825df43214211d6d612107bb3e5d3b598cc985b0ba97d556290dce61fd780f3444bbb7085278666085f35c1526f129ac2290a922fb6c7b2d6cfa2fe3b6bc73232b38e46677131bc23f2b7c08cc7a02a56f520791b2769eb4864b47b80decc85db8c0a43d8d81ffd82aa0a45efd25d08664f95b12f5a52d701f34bfa6d0cb55b1a88305180959ddf7b188da4532ae5993417ea9e2b5e0d7e90a41da6d6aa508fc3ed1147b21d478fbfa7d0e014f8b14ab7a16eab6f8c9eafc47554f99903306d4f3e8efc0ddf52fed68de966d44e0ecfa2467e", 0xdc}, {&(0x7f0000000000)="187a", 0x2}, {&(0x7f0000001440)="093f330c4499cd1e33eb6eece932ed256bbe52eb82737650383e876e828c36c3d02dbcd94bc0e8ac0c6afe5cdb107c102e707877d0ece7e4095e516d6f22a6139c0668dffdeac90f45b56f6fd0b67ee1e376364152db6dc2db58d681b00c9e48e10e61", 0x63}], 0x6, 0x0, 0x0, 0x4044004}, 0x8000) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r2) 08:57:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x400000) 08:57:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) getrusage(0xfffffffffffffffc, &(0x7f0000000500)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:59 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000001f00"}) 08:57:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) syz_open_pts(r0, 0x400000) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:57:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) select(0x40, &(0x7f00000003c0)={0x4, 0x70, 0x0, 0x1, 0x400, 0x200, 0x7fffffff, 0x6}, &(0x7f0000000400)={0x1ff, 0x6, 0x401, 0x8, 0x6, 0x1, 0x26d}, &(0x7f0000000440)={0x1, 0x3, 0x7, 0x9, 0x5, 0xffffffffffffff6e, 0x3, 0x918}, &(0x7f0000000480)={0x77359400}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000000)={r2, r0}) inotify_add_watch(r1, &(0x7f0000000280)='./file0\x00', 0x870) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000080), &(0x7f0000000200)=0x4) ppoll(&(0x7f00000002c0)=[{r2}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000004c0)={{0xa, 0x4e23, 0x6, @empty, 0x100000000}, {0xa, 0x4e24, 0x4, @remote, 0x6}, 0x1, [0xfffffffffffffffb, 0x0, 0x5, 0x1f, 0x7ff, 0x0, 0xffffffffffffffff]}, 0x5c) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 08:58:00 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x6c00000000000000) 08:58:00 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000001f00"}) 08:58:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x4800) 08:58:00 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000fdfdffff00"}) [ 271.826794] binder: 10899:10901 ioctl 40046205 6c00000000000000 returned -22 08:58:00 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r3 = semget(0x1, 0x2, 0x420) semctl$GETZCNT(r3, 0x0, 0xf, &(0x7f00000000c0)=""/66) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000180)=0x4) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) dup2(r0, r1) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80, 0x0) 08:58:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x705000) 08:58:00 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000001f00"}) [ 271.906626] binder: 10915:10916 ioctl 40046205 4800 returned -22 08:58:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) getrusage(0xfffffffffffffffc, &(0x7f0000000500)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:00 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:03 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000001f00"}) 08:58:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x7400000000000000) 08:58:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='setgroups\x00') bind$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x8, 0x1, 0x200, 0x6, 0x1, 0x1000}, 0x7}, 0xa) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000000)={r2, r0}) ppoll(&(0x7f00000002c0)=[{r2}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:58:03 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x80) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') ioctl$LOOP_SET_FD(r2, 0x4c00, r3) dup2(r0, r1) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f00000000c0)) 08:58:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x9) r1 = epoll_create1(0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000400)=""/118) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x48, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x68da9d5db290ac46}]}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000041) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f00000003c0)) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) r4 = syz_open_dev$amidi(&(0x7f0000000480)='/dev/amidi#\x00', 0x3, 0x200002) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r0) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) syz_open_pts(r0, 0x301182) r5 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) 08:58:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) getrusage(0xfffffffffffffffc, &(0x7f0000000500)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) [ 274.809290] binder: 10958:10960 ioctl 40046205 7400000000000000 returned -22 08:58:03 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x1000000) 08:58:03 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000001f00"}) 08:58:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x4000000) [ 274.924824] binder: 10977:10980 ioctl 40046205 1000000 returned -22 08:58:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) socketpair(0x14, 0x3, 0xfffffffffffffffe, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'ip6gretap0\x00', 0x0}) sendmsg(r1, &(0x7f0000000600)={&(0x7f00000003c0)=@can={0x1d, r2}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000440)="bc534d8208a4cb78fc3b92be7d7d6cb70afba564fe0c57e57b5143eb172a1e62", 0x20}, {&(0x7f0000000480)="aef8b964562ed2a766f8ac68c30edffffc5976acecd06151ea6e673ae7fc7a38e2982574cab27ed37695650ae21a3c2767912b0409cf01ccbd8557", 0x3b}, {&(0x7f00000004c0)="890b91c85bcf30831f8f2f0b17fd3f0a6f1eae53fb2b842089328f29564e1a2423b15fe89f3b1cd81db42db3afbaf26ef8558478cc21135fe3ee6de3ffc77e0bdbde53e3052be273e15673bb4b6f1358e16ec00dc426e0dbf8b02b98dc1c9b2f89ce4f6616678be3bd4fca459a0a0844f6c8e904aa8ec2b717fea826dd2d09910a6bd9e537898052036f3ef57d3a30b7702fa6ce10a8324ace51dfb124a7953d709506346815efd07447a1795d851c07d082783679c043bf7ac4f586b2a5a91e00a0fe9dbe3553be5abbe48677b5a3a28ef3dde626685e64c4862b3bc2a90839d8413e4255f5", 0xe6}], 0x3, &(0x7f00000007c0)=[{0x108, 0x1, 0xef31, "e47f98652c846d2ce200848606ef0a49b76bcc35e1bd4d70d0d88c7a09eca10b8d6bf8a86f7e4b43e17f1c4c0b3f7a1d70c4bfbb391efde4a88755f05dc7e00e807e425e1c197ff14a52ac676479eaa28ab50fa5ab4f3f1bb79d7845782512e264d1b2693ba627e074b9d9edda22b97e9e9891c953d7a8dcd39bab341854fa72107692861310b3828dd730c6251b81e1dce3bcc4a564238f2ce2a26f0b00d448295d84b0dfa992f4b695ffa8814467f752c9b975ff08c9d3ee51ea2ebdfbe76de5f7a65a329a3e2c498e0ece9d9ac6835009ac68029b3c245857b9cf4f6d13d9cd82491a5a632998f4508016f20bd340ae8ea341"}, {0x18, 0x10f, 0x1, "3a7e3611cb5494"}], 0x120, 0x44000}, 0x20008040) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000140)) r4 = gettid() kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r3, &(0x7f0000000000)={r3, r0}) ppoll(&(0x7f00000002c0)=[{r3}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r5 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) r6 = open(&(0x7f0000000080)='\x00', 0x400, 0x18) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0xef) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f00000001c0)={r7, 0x100000001}, &(0x7f0000000240)=0x8) 08:58:03 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x60000000) [ 275.024202] binder: 10997:10998 ioctl 40046205 4000000 returned -22 08:58:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) getrusage(0xfffffffffffffffc, &(0x7f0000000500)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) [ 275.161735] binder: 11015:11016 ioctl 40046205 60000000 returned -22 08:58:04 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'vcan0\x00', {0x2, 0x4e23, @broadcast}}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r2) 08:58:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x2000) 08:58:04 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) getrusage(0xfffffffffffffffc, &(0x7f0000000500)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 08:58:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x80000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x4b34, 0x5f) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:58:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x400) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:04 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x930000000000) [ 275.806019] binder: 11039:11041 ioctl 40046205 2000 returned -22 08:58:04 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:04 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000001f00"}) [ 275.887985] binder: 11054:11055 ioctl 40046205 930000000000 returned -22 08:58:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x4) 08:58:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) getrusage(0xfffffffffffffffc, &(0x7f0000000500)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:04 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x1, 0x4) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) ioctl$BLKALIGNOFF(r3, 0x127a, &(0x7f0000000000)) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') r4 = dup2(r0, r2) fcntl$setpipe(r4, 0x407, 0xd7d) 08:58:04 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000fdfdffff00"}) 08:58:04 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x6000000) [ 276.064401] binder: 11079:11087 ioctl 40046205 4 returned -22 [ 276.148267] binder: 11097:11098 ioctl 40046205 6000000 returned -22 08:58:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) fsetxattr$security_smack_transmute(r0, &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x3) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) epoll_create1(0x80000) 08:58:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) getrusage(0xfffffffffffffffc, &(0x7f0000000500)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x6b1) 08:58:04 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x300) 08:58:04 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:04 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000003240)={&(0x7f0000003200)='./control/file0\x00', 0x0, 0x18}, 0x10) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003300)={0xaa, 0x2}) sendmsg$nl_route_sched(r0, &(0x7f00000031c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003180)={&(0x7f0000000100)=@newtaction={0x3048, 0x30, 0x118, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x5}, [{0x188, 0x1, @m_ife={0x184, 0x7, {{0x8, 0x1, 'ife\x00'}, {0x74, 0x2, [@TCA_IFE_TYPE={0x8, 0x5, 0x5}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xffffffff7fffffff}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_TYPE={0x8, 0x5, 0x3}, @TCA_IFE_SMAC={0xc, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_SMAC={0xc}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_SMAC={0xc}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x4}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x100, 0x6, "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"}}}}, {0xd4, 0x1, @m_ipt={0xd0, 0x4, {{0x8, 0x1, 'ipt\x00'}, {0x78, 0x2, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x14, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TABLE={0x14, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TABLE={0x14, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x48, 0x6, "5c40001618747e5cc7314336a139e2d7cb80f2befc395a8a4aa76296f533cc12e2bbd3e6b8a4b66484f87aa9f506a9450842e18e6fe522caef72857884ded3ee2c3dd740"}}}}, {0x10c, 0x1, @m_ife={0x108, 0xf, {{0x8, 0x1, 'ife\x00'}, {0x74, 0x2, [@TCA_IFE_METALST={0x30, 0x6, [@IFE_META_TCINDEX={0x8, 0x5, @val=0x20}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x2}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x10001}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_TYPE={0x8, 0x5, 0x53}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x80}, @IFE_META_TCINDEX={0x8, 0x5, @val=0x10001}, @IFE_META_TCINDEX={0x8, 0x5, @val=0x4}]}, @TCA_IFE_SMAC={0xc, 0x4, @random="9d22f58fe080"}, @TCA_IFE_DMAC={0xc, 0x3, @remote}]}, {0x84, 0x6, "4ecf35348e4fcc7f46714eeb7364e644c1b392a74602e6a089596aefb4281cc55606389bba5ddfc6ccb3dfffc9496ccd0eb3604963875bc21838bbc004f2ed0ad1f11bdd2b73f57e71505bfdc17c9168cef752a1b0d95350d5a98c3838759b5804612056d75d4dad85375b900c627cd29e9f53ec44e2af9d3a942dd3c1"}}}}, {0x2bcc, 0x1, @m_pedit={0x2bc8, 0xd, {{0xc, 0x1, 'pedit\x00'}, {0x2ba4, 0x2, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x9, 0x5e, 0x10000000, 0x8, 0x7}, 0x3, 0x7fffffff, [{0x101, 0xfffffffffffffe00, 0x6, 0x0, 0x9, 0x7ff}]}, [{0x9, 0x91, 0x8, 0x10001, 0x9}, {0x200, 0x4, 0x401, 0x7, 0x1ff, 0x10000}, {0x8001, 0x9, 0x9, 0x6e14000000000000, 0x5, 0x3}, {0x8, 0x8, 0x885c, 0xae0, 0xfffffffffffffffe, 0x6}, {0x1, 0x7fffffff, 0xbb, 0x100000001, 0x2, 0xffffffffffff0001}, {0x0, 0x8, 0x2, 0x4, 0x7, 0x8}, {0x7fff, 0x9, 0x6, 0x0, 0x3, 0x5}, {0x101, 0x2, 0x8001, 0xfffffffffffffffc, 0x9, 0x3f}, {0x8, 0x400, 0x6, 0x2, 0x4, 0x7}, {0x9, 0x6, 0x6, 0x15, 0x9, 0x1}, {0x8, 0x6, 0x2, 0x2d6, 0x80}, {0x7f, 0x6, 0x5, 0x1, 0x9, 0x6}, {0xe21e, 0x7fffffff, 0x3, 0x80000000, 0x5}, {0x100000000, 0x1, 0x17e1e76c, 0x8001, 0x8001, 0x4}, {0x8ea6, 0x7bc, 0x9, 0x8402, 0x8, 0x9}, {0xffffffffffffffa9, 0xffffffff00000000, 0x1000, 0x1ad, 0x84f2, 0x3}, {0x4, 0x80000001, 0x7fff, 0x3, 0xf439, 0x7c}, {0x3600000, 0x505c, 0x30cc, 0x67a, 0x2, 0xffff}, {0x8, 0xbd8, 0x34ea, 0x80000001, 0x2, 0xffffffff87cb5647}, {0x6, 0x8, 0x100000000, 0x5, 0x0, 0x8001}, {0x3, 0x9, 0x0, 0x1ff, 0x1, 0x6f}, {0x4, 0x0, 0xbab, 0x0, 0x2, 0x505}, {0x80, 0x5, 0x80000000, 0x71bb, 0x8, 0x2c}, {0x401, 0x9, 0x80, 0x2, 0x8, 0x101}, {0x100, 0x7, 0x9, 0x2, 0x80000000, 0x63}, {0x4, 0x4, 0x8, 0x80000001, 0x401, 0x7}, {0xaab, 0xffffffff7fffffff, 0x7fffffff, 0x8eb, 0x80000001, 0x3}, {0x9, 0x4, 0x0, 0x20, 0x1, 0x101}, {0x8, 0x9, 0x9, 0x9, 0x10000}, {0x8000, 0x3, 0x8, 0x200, 0xb8, 0xcf6}, {0x9, 0x100, 0x0, 0x5, 0xf1, 0x9}, {0x90c3, 0x10000, 0x2, 0x4, 0x2b931bea, 0x8}, {0x7f, 0x80000000, 0x5, 0x9, 0x100000000, 0x800}, {0x1, 0xffffffffffffffff, 0xfffffffffffffeff, 0xfffffffffffffff9, 0xace, 0x4}, {0x0, 0x4c12, 0x20000, 0xffffffffffffff50, 0x14, 0xf8}, {0x10000, 0x4, 0x4f6, 0x7, 0x6, 0x3}, {0x1, 0x0, 0xc9bf, 0x3f, 0xec, 0x5}, {0x2ad3df0d, 0xfffffffffffffff9, 0x28000000000, 0x28, 0x0, 0x8000}, {0x6, 0x2, 0x8, 0x7f, 0x9, 0x9}, {0x8000, 0x800, 0x8, 0x0, 0xac10, 0x800}, {0x7, 0x0, 0x9, 0x4, 0x1, 0xff}, {0xffffffffffff65e3, 0x7, 0x8, 0x4, 0x48ef, 0x400}, {0xb55, 0x7ff, 0x2, 0x2, 0x400, 0xff}, {0x1, 0x1ff, 0x467, 0x5, 0x6, 0xba1}, {0x0, 0xffff, 0x1, 0xfff, 0x2, 0x6}, {0x0, 0x3f, 0x0, 0x3ff, 0x7fffffff, 0x3f}, {0x0, 0x0, 0xf10f669, 0x0, 0xc9d0, 0x4}, {0x7, 0x7, 0x0, 0x3064, 0x1}, {0x401, 0x6c, 0x6, 0x7ff, 0x8, 0x5}, {0x94, 0x9, 0x8, 0x7, 0x6, 0xd5}, {0x0, 0x6, 0x86, 0x400, 0x7, 0x4}, {0x7ff, 0x5c, 0x0, 0xe923, 0x800}, {0x7, 0xe8d, 0xe0f0, 0x10001, 0xffffffffffffff80, 0x9}, {0x3, 0x2040, 0x0, 0x200, 0x5, 0x1000}, {0x200, 0xffff, 0x6, 0x6, 0x10001, 0x100000001}, {0x3ff, 0x8001, 0xffffffffffff7fff, 0xffff, 0x2, 0x2}, {0x8001, 0x3, 0x7, 0x6, 0x8, 0xc6}, {0x3, 0x7fff, 0x4, 0x9, 0x3ff, 0x3}, {0x2, 0x1, 0x1000, 0x0, 0x9, 0x4}, {0x0, 0x147, 0x400, 0x10000, 0xfffffffffffffff8, 0x5}, {0x0, 0x600000000000, 0xffffffff, 0x5a90, 0x3ff, 0x7fff}, {0xffff, 0x200, 0x5, 0x0, 0x8000, 0x6}, {0x4b, 0x1, 0x4000000, 0x3, 0x6, 0x3fc0000}, {0x8, 0x6, 0x1, 0xe4d, 0x7c5, 0x893e}, {0x40, 0xfb, 0x0, 0x1ff, 0x40, 0xd5c}, {0x1f, 0x4, 0xfff, 0x5, 0x1, 0xe0b}, {0x9, 0xffffffff00000001, 0x5, 0x80000001, 0xfffffffffffffc6a, 0x7}, {0xd5, 0x3, 0x14, 0x16c00000, 0x8, 0xaec}, {0x1, 0x1, 0x4, 0x1, 0x7, 0xfffffffffffffffa}, {0x80000000, 0x4ba7, 0x800, 0x4, 0xffff, 0x100000000}, {0x7, 0xfffffffffffffff7, 0x80a, 0x6828, 0x9, 0x100000001}, {0x0, 0x7, 0x5, 0x3ff, 0x7, 0xffffffff}, {0x2, 0xaaa, 0x101, 0x4, 0x1000000000, 0x400}, {0x3, 0x80000001, 0x1f, 0xbe8d, 0x7f, 0x2}, {0x0, 0xae, 0x1000, 0x9, 0x8, 0x2b}, {0x0, 0x1000, 0x3, 0x3, 0x7fff, 0x7fffffff}, {0x4, 0x0, 0x100000001, 0x80000000, 0x81, 0x8}, {0x9, 0x3, 0xffff, 0x8, 0x7, 0x62fb}, {0x8, 0x8, 0xfffffffffffffff7, 0x61c, 0x9, 0x1}, {0x8000, 0x100, 0x6, 0x4, 0x8, 0xa74}, {0xb790, 0x0, 0x5, 0x400, 0x2, 0xfffffffffffffff9}, {0x4, 0x9, 0x4, 0x3ff, 0x6, 0x4}, {0x1, 0x700000, 0x7, 0x8, 0x1, 0x7b}, {0x10001, 0x1, 0x7, 0x3, 0x8, 0x7}, {0x200, 0xa58c, 0x9, 0x8, 0x8, 0x5e53a65c}, {0x6059fcdb, 0x2, 0x5, 0x8, 0x2, 0x4}, {0x1ff, 0x2, 0x50d, 0xf4, 0x9, 0x1}, {0x4, 0xff, 0x0, 0x3f, 0x10001, 0x80000000}, {0x7ff, 0x9b0b, 0x800, 0x1f, 0x1b5, 0x6}, {0x1, 0x2, 0x3, 0x1000, 0x100}, {0x898, 0x3, 0x6, 0xcbb, 0x2, 0x5}, {0x357f, 0x94b, 0x5, 0xc0a, 0x6, 0x652923f5}, {0x9, 0x4, 0x80, 0xffffffffffffffc8, 0xdf, 0x7}, {0x401, 0x800, 0x6, 0x5, 0x6, 0x800}, {0x6, 0xfffffffffffffffe, 0x1, 0x9, 0x7, 0x9}, {0x0, 0x1, 0xdb, 0x8, 0x9, 0x9}, {0x1f, 0x6, 0x40, 0xb95, 0x7fffffff, 0x4}, {0x5, 0x7ff, 0x8, 0x7, 0x4, 0x6}, {0x2, 0x4, 0x63, 0x1f, 0x9, 0x7}, {0x80000000, 0xb3, 0xffffffffffffff10, 0x3, 0x0, 0x7fff}, {0xfff, 0x1f, 0x10001, 0x2, 0x0, 0x100000000}, {0x2, 0x4, 0x4, 0x7, 0x4, 0x26}, {0x5, 0x80000001, 0x10, 0xfffffffffffffff7, 0x948c, 0x8473}, {0x9, 0x3, 0x5cca9158, 0x0, 0x7, 0xfffffffffffffff7}, {0x6cb, 0x6, 0x6, 0x1f, 0x101, 0x2}, {0x207750fe, 0x6, 0x7e, 0x9, 0x0, 0x1ff}, {0x9, 0x95, 0x70989c3b, 0x6, 0xffffffffffff6930, 0x9a3}, {0x2, 0x9416, 0x5, 0x3, 0x8, 0x7f}, {0xffffffffffffffe1, 0x1, 0x5, 0x5, 0xfff, 0x40}, {0xffffffffffffff00, 0x7ff, 0x6, 0xce17, 0x2, 0x3}, {0x80, 0x100000001, 0xfffffffffffffff8, 0x8, 0xaf4, 0x6}, {0xffffffffffffffff, 0x101, 0x3f, 0x800, 0x4, 0x8}, {0x0, 0x8, 0x4, 0x25, 0x5, 0x2}, {0x20, 0x7cc6, 0x5, 0xffffffffffffff88, 0x10001, 0x46}, {0x0, 0x2, 0x1, 0x3ff, 0xef1, 0xfffffffeffffffff}, {0x400, 0x80, 0x100, 0x1, 0x9, 0x2}, {0x100000000, 0x4, 0x0, 0x9, 0x981, 0x100}, {0x8, 0x8, 0x7fffffff, 0x8e, 0x10000, 0x9}, {0x100000000, 0xffffffff7fffffff, 0x4, 0x5, 0x7f, 0x81}, {0x7, 0x8, 0x100, 0x3f, 0xffffffff, 0x400000000}, {0x6, 0x7fff, 0x9, 0x1, 0xe691, 0x5}, {0x7ff, 0x5, 0x25c, 0x6, 0x9, 0x100}, {0x800, 0x7fff, 0x7, 0xffff, 0x47, 0x1}, {0x2, 0x4, 0x3f, 0x2, 0x0, 0x8}, {0xffffffffffffeb23, 0x8a7, 0x2, 0x2, 0x4, 0x81}, {0x10001, 0x2, 0x2, 0xe7d, 0x3, 0x870a}, {0xe83d, 0x8e, 0x5, 0x3, 0x1, 0x3}, {0xbd3, 0x1000, 0x4, 0x3f, 0x340, 0x6}], [{0x5}, {0x7, 0x1}, {0x6}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x7}, {0x6, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x7, 0x1}, {0x4}, {0x3}, {0x4}, {0x4}, {0x2}, {0x7}, {0x5, 0x1}, {0x5}, {0x7}, {0xba10695c7dd407c2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x7}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x3}, {0x3}, {0x5}, {0x6, 0x1}, {0x7}, {0xbf99428e9929e709, 0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x4}, {0x7, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x4}, {0x5}, {0x5, 0x1}, {0x3}, {0x7}, {0x3}, {0x3, 0x1}, {0x5}, {0x6, 0x1}, {0x7, 0x1}, {0x7, 0x1}, {0x7}, {0x5}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x7, 0x1}, {0x7}, {0x6, 0x1}, {0x7}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x6, 0x1}, {0x3}, {0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x4, 0x9, 0x8, 0xffffffffffffff81, 0x7}, 0x0, 0x18, [{0x8, 0x5, 0x1, 0x4, 0xdf, 0x6}, {0x400, 0x80000000, 0x3, 0x1, 0x6, 0x1}, {0xf00, 0x1f, 0x44, 0x20, 0x81, 0xffffffffffffbd32}]}, [{0xba74, 0x9, 0x65c, 0x9, 0x7, 0x7021}, {0x893, 0x1, 0x7113, 0x4, 0x0, 0x800}, {0x6, 0x7, 0x1000, 0x9, 0xfffffffffffffffe, 0x2000000000000000}, {0x4, 0x7, 0x0, 0x9, 0xffffffffffff9ddb, 0x77}, {0x9, 0x3fe000000000, 0xff, 0x5, 0x5, 0x9f6}, {0x8, 0x5, 0x8, 0x0, 0x766, 0x7}, {0x7, 0xdef3, 0xc07, 0x5, 0x10001, 0x8803}, {0x2, 0xa68, 0x8001, 0x0, 0x3, 0x2}, {0xff, 0x400, 0x100000001, 0x6, 0x8, 0x9}, {0x0, 0x1, 0xffffffff, 0x200, 0x80000001, 0x80000000}, {0xf, 0x200, 0x8, 0x1, 0x100, 0x100000000}, {0x80000000, 0x2, 0xfffffffffffffb27, 0x3a1, 0x3, 0x3}, {0x9, 0x17b0, 0x100, 0x7, 0x1, 0x10000}, {0x2, 0x4, 0x4, 0x5, 0x2, 0x8}, {0x2, 0xfc4, 0x80, 0x80000000, 0x7fff, 0x4}, {0xbc, 0x1, 0x2, 0x3ff, 0x235, 0x4}, {0x4, 0x1, 0x20000000, 0x3, 0x0, 0x5}, {0x1, 0x8, 0x9, 0x7, 0x81, 0x8000}, {0x10001, 0x40, 0x4, 0xffffffff, 0xfffffffffffeffff, 0x81}, {0x800, 0x5, 0x0, 0x9, 0x3, 0x6}, {0x7, 0xfffffffffffff3fc, 0x0, 0x7, 0x3, 0x7}, {0x2, 0x5, 0x5, 0x2, 0x7ff, 0xff}, {0x6a, 0x100000001, 0x3, 0x4, 0x5, 0x4}, {0xb8, 0xe27, 0x3, 0x0, 0x10001, 0x7ff}, {0x9, 0x3, 0x100, 0x3, 0x0, 0x7}, {0x5, 0xdd7, 0x4, 0x1ff, 0x9, 0x2}, {0x9, 0x80, 0x10001, 0x8, 0x0, 0x7}, {0x10000, 0x0, 0x8, 0x2, 0x8, 0x81bc000}, {0x4, 0x9, 0x400, 0x8, 0x3, 0x5}, {0x8000, 0x3, 0xd, 0x7, 0x40, 0x3}, {0x8, 0x0, 0x6, 0x8001, 0xfef, 0x80000001}, {0x7fff, 0xb550, 0x4, 0x1b86b17d, 0xded, 0xf0}, {0xfff, 0x2, 0x5, 0x400, 0x88, 0x7fffffff}, {0x3, 0x2aa2, 0x6, 0x8, 0x40, 0x8}, {0x3ff, 0x200, 0x5, 0x0, 0x101, 0xc081}, {0xffff, 0x5, 0x6, 0x3, 0x4, 0x2}, {0x4c41, 0x0, 0x3ff, 0xd2, 0x1, 0x80000001}, {0x401, 0x3ff, 0xa7d, 0x3ff, 0x0, 0x10001}, {0x5d850eeb, 0x6, 0x3ff, 0x20, 0x8000, 0x9}, {0x20000000000, 0x3, 0x10000, 0x800, 0x0, 0x8}, {0x3, 0x100000000, 0x8, 0x8000, 0x3}, {0x7fffffff, 0x0, 0x4, 0x2, 0x80, 0x10000}, {0xe41, 0x3, 0x3, 0x4, 0x40, 0x9}, {0x401, 0xf611, 0x8, 0x4, 0x2c, 0x4}, {0x8, 0x100000001, 0x9b, 0x2, 0xffffffff, 0x2}, {0x2, 0x656d, 0x8, 0x80, 0x7, 0x6}, {0x4b, 0x100000000, 0x6, 0x3, 0x9, 0x2}, {0x4, 0x3b6, 0x3, 0x6, 0x2, 0x7fff}, {0x9, 0xffffffffffff696f, 0x1, 0xb658, 0xffffffff, 0x8}, {0xffffffffffffffe0, 0x401, 0xfffffffffffffff7, 0x9, 0x7, 0x7f}, {0x80000000, 0x9, 0x7f, 0xffffffffffffffe0, 0x80, 0x6}, {0x1000, 0x2, 0x8, 0x4f33, 0xfffffffffffffffe, 0x20}, {0x3, 0x80000000, 0x9f3, 0x1800000000000000, 0xffffffffffffffff, 0x8000}, {0xffff, 0x4, 0x2, 0x2, 0x80, 0x2}, {0x101, 0xff9, 0x76, 0x7, 0x3, 0x2}, {0x9, 0x1, 0x3f, 0x9, 0x9, 0x8}, {0x0, 0x1000, 0x1, 0xbfb, 0x9, 0x8bf}, {0xd80, 0x2, 0x8, 0x6, 0x2, 0x9b}, {0x5, 0xfffffffffffffffa, 0x80, 0x3, 0x7452, 0x400}, {0x5a, 0x1000, 0xfffffffffffffff8, 0x5, 0xfffffffffffffffe, 0xfffffffffffffff7}, {0x4, 0x81, 0x7, 0x0, 0x1ff, 0x6}, {0x3f, 0x0, 0x1000, 0xf5a9, 0xffffffffffffff80, 0x7}, {0x0, 0x101, 0x5, 0x8, 0xfffffffffffffff7, 0x8}, {0x1, 0x5, 0x7, 0x4e3, 0x9}, {0x4, 0x401, 0x10000, 0x1000, 0x400, 0x9}, {0x2, 0x0, 0x6, 0x3d4b, 0x1, 0xffffffffffffffa4}, {0x5, 0x101, 0x2e44cfa5, 0x8, 0x6a}, {0x101, 0xf5bd, 0x2, 0x8e, 0x8}, {0x200, 0x28000, 0x400, 0x2, 0x80000001, 0x5}, {0x8, 0x7, 0x7, 0x20, 0x5, 0xf3e}, {0x1, 0x0, 0xfffffffffffffffa, 0x8, 0x7, 0x8}, {0x8, 0x100, 0x3f, 0x7, 0x80, 0xaee}, {0x9, 0x7, 0x5b8e3ac5, 0xa0, 0x8, 0x8}, {0x80000001, 0x66, 0x1f, 0x3, 0x0, 0x8}, {0x6, 0xfd4, 0x0, 0x2, 0x9337, 0x4}, {0x1, 0x7fff, 0x6, 0x8, 0x6, 0x7fff}, {0x326203cb, 0x20, 0x1fffffffc0, 0x14c, 0x9, 0x2}, {0xff, 0x6, 0x2, 0x8, 0x8, 0x8}, {0x100000000, 0x3, 0x4d, 0x2c65, 0xb4eb, 0x9}, {0x3, 0x2, 0x20, 0x0, 0x3, 0x79b9000000}, {0x7, 0x4a86, 0x80000001, 0x1, 0xfffffffffffffffd, 0x100000000}, {0x9, 0x100, 0x4, 0x4, 0x80, 0x1ff}, {0x200, 0x3, 0x8000, 0x3, 0xf5, 0x3}, {0x7fff, 0x6, 0x5, 0x0, 0x800, 0x6f8}, {0x7, 0x85, 0x100000001, 0x5, 0xffffffff}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x6}, {0xfffffffffffffb8b, 0x20, 0x2, 0x4, 0x7, 0x5}, {0x6, 0x7, 0xff, 0x0, 0x291a, 0x7}, {0x311, 0x9, 0xffffffffffff8001, 0x8, 0x63, 0x9}, {0x1, 0x200, 0x6, 0x3, 0x7, 0x4}, {0x8, 0x6, 0x380000, 0x3, 0xd0, 0x200}, {0x7f, 0xfff, 0x4, 0x6c54, 0x0, 0x6}, {0x8000, 0x10001, 0x100000001, 0x4, 0xef2, 0x8}, {0x8, 0x7f, 0x8, 0x9, 0x7f}, {0x4, 0x80000001, 0xdf0, 0x6, 0x0, 0x7f}, {0x4, 0x80, 0x64b3, 0x101, 0x0, 0x1}, {0x3, 0x9, 0x3f, 0xffff, 0x5, 0x4}, {0x9, 0x0, 0x200, 0x7, 0x8, 0x401}, {0xffffffff00000000, 0x81, 0x6, 0x7, 0x6, 0x100}, {0x401, 0x2, 0x95ca, 0x5, 0x8001, 0xfffffffffffffffa}, {0x200, 0x4, 0x3, 0xae42, 0x3, 0x3}, {0x20, 0x7f800000000000, 0x6, 0x2, 0x3, 0x6}, {0x6, 0x0, 0x5e29739b, 0xffff, 0x13f, 0x1}, {0x0, 0x3, 0x7fff, 0x9e, 0x2, 0x800}, {0xffffffff, 0xffff, 0xffff, 0x2, 0x5, 0x401}, {0x9, 0x8000, 0x0, 0x4, 0x1000, 0x7}, {0xf2, 0x8001, 0xd62, 0x800, 0xd99, 0x7}, {0x9, 0x3, 0x81, 0x7ff, 0x4, 0xd6}, {0x1d, 0x8, 0x100000001, 0x973d00000000, 0x9, 0x3}, {0x5, 0x9, 0x7, 0x8, 0x1, 0x7fff}, {0x0, 0x6, 0x6694, 0x10001, 0x2, 0x9}, {0x8, 0x6, 0x7, 0x1000, 0x80, 0x101}, {0x28, 0xfffffffffffff800, 0xffffffffffffffff, 0x6, 0x1, 0x8}, {0x40, 0x401, 0x7, 0x4, 0x9, 0x8001}, {0x7, 0x2, 0x3, 0x8, 0xc53d, 0x6}, {0x2, 0x3f, 0x200, 0x1, 0xac, 0x1}, {0x6, 0x100000001, 0x9, 0x20, 0x400, 0x4}, {0x6, 0x3, 0x5, 0x3, 0x0, 0x8}, {0x1, 0x8d, 0xec, 0x3, 0x4, 0x9}, {0x4, 0x1fd, 0x363df73d, 0x8, 0xff, 0x5}, {0x80000001, 0x81, 0x100000000, 0x8, 0x1, 0x3}, {0x20, 0x1, 0x11af63bb, 0x3, 0x1000, 0x6}, {0x800, 0x7, 0x1, 0x8, 0x2, 0x9}, {0x9, 0x5, 0xffffffffffffffff, 0xa434, 0x6, 0x3}, {0xf5, 0x9, 0x3, 0x40, 0x4, 0x1}, {0xfffffffffffffff8, 0x3ff, 0xe9c, 0x2, 0x7, 0x8}, {0x2, 0x0, 0x5, 0x8, 0x8, 0x9}, {0x3, 0x8000, 0x401, 0x7, 0x7fff, 0xc3}], [{0x7}, {0x2}, {0x5, 0x1}, {}, {0x1, 0x1}, {}, {0x3}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x7}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x7348fe44f1d06acf}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x7}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x7}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0xf82d2b166fce8c9c}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x7}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x7, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x6, 0x1}, {0x1, 0x1}, {0x3, 0xee25c0d9548fd1ca}, {0x5}, {0x2, 0x1}, {0x1, 0x2d3f3dcb5761b868}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x5}, {0x5}, {0x2, 0x1}, {0x5, 0x3ab08c2f57f10685}, {0x7, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x7}, {0x7, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x4}, {0x7, 0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x5}, {0x7, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x6, 0x1}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x38, 0x5, [@TCA_PEDIT_KEY_EX={0x34, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x8, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x1078528ad840392c}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x8}, @TCA_PEDIT_KEY_EX_CMD={0x8, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0xac8e, 0x2, 0x0, 0x400, 0x8f4}, 0x4, 0xe1fe, [{0x9, 0x8, 0x3f, 0x81, 0x9, 0x5}, {0x33a, 0x101, 0x469, 0x2, 0x6, 0x7fffffff}, {0x100, 0x0, 0x6, 0xfffffffffffffe00, 0x3, 0x9}, {0x7ff, 0x80000000, 0x7, 0x7, 0x6, 0x8}, {0x4, 0x3, 0x1, 0x8f00, 0x3f, 0x2}, {0x5, 0x1, 0x7, 0x226, 0x5, 0xfffffffffffffc00}, {0xffffffffffffa00f, 0x7f, 0xb191, 0x8001, 0x2, 0x5}]}, [{0x7fff, 0x8, 0x1ff, 0x8, 0x7, 0x2}, {0x5, 0xffffffffffffff80, 0xe89, 0x9, 0xfffffffffffffffa, 0x6}, {0x9, 0x8, 0x5, 0x0, 0x4, 0x34a}, {0xffffffffffffffff, 0x800, 0xfffffffffffffffb, 0x2, 0x9, 0x3}, {0x10000, 0x48, 0x101, 0x43, 0x2, 0x4}, {0x4, 0x3, 0x0, 0x5, 0x367a6646, 0x2}, {0x800, 0x10000, 0xffff, 0x100000000, 0xff, 0x1}, {0x67, 0x1, 0x1, 0x0, 0x0, 0x5}, {0x3, 0x100, 0x7, 0xc00000000000, 0x20, 0x6}, {0x1, 0x80000000, 0x7, 0x1, 0x7fffffff, 0x38000000000000}, {0x3, 0x8000, 0x3, 0xdbf, 0x91, 0x4}, {0x7, 0x2, 0xfffffffffffffff9, 0x1, 0x0, 0x7f}, {0x7b, 0x1, 0x101, 0x9, 0x3, 0x7}, {0x3, 0x79b, 0x1000, 0x800, 0x600, 0x2}, {0x6d0000000, 0x0, 0x2, 0x7fff, 0x8, 0x8}, {0x0, 0x81, 0x1f, 0x6, 0x2, 0x10000}, {0x7, 0x0, 0x100000001, 0x663, 0xc66, 0x40}, {0x9c, 0x4bb, 0x5, 0xbc, 0x2, 0x6}, {0x40, 0x40, 0x3, 0x401, 0xfff, 0x8d0}, {0x3f, 0x6, 0x2, 0x3, 0x100000000, 0xa41a}, {0x9, 0x0, 0x5d, 0x20, 0x6, 0x7}, {0x9, 0x2, 0x40, 0x0, 0x5, 0x6}, {0x2, 0x80000000, 0x7da, 0xcd4, 0x2, 0x7}, {0x4, 0x1, 0x3, 0x9, 0xfffffffffffffffa, 0xd82}, {0x0, 0xfffffffffffffff8, 0x10000, 0xfffffffffffffffe, 0x40, 0x401}, {0x0, 0x3, 0x65f1, 0x8000, 0xffffffffffffff80}, {0xffffffffffffffe0, 0x200, 0x80000001, 0xe7b, 0x7ff, 0x1}, {0xfffffffffffffffd, 0x1f, 0x80000000, 0x4000000, 0xaa45, 0x3}, {0x20, 0x7fff, 0x5, 0x7f, 0x6b5f70f, 0x400}, {0x7c0e, 0x7fff, 0x100000000, 0xffffffffffffffff, 0x3f, 0x6}, {0x80000001, 0x0, 0x7, 0x2, 0x9, 0x6}, {0xc68, 0x8, 0xf522, 0x5, 0x400, 0x8}, {0x1, 0x0, 0xba4, 0x6, 0x3, 0x9a44}, {0x2, 0x80000001, 0x18, 0x0, 0x7fffffff, 0xa54}, {0x7, 0x0, 0xef600, 0x4, 0x40, 0x1}, {0x0, 0xcde7, 0x0, 0x7, 0x7}, {0x1, 0xff, 0x1, 0x4, 0x0, 0xffffffff00000001}, {0x401, 0x4, 0x1ff0968c, 0x5, 0x80000001, 0x3f}, {0x8000, 0x1, 0x4, 0xa6, 0x4, 0x4537}, {0x87, 0x6020, 0x100000001, 0x4, 0x3f, 0x9}, {0x5, 0x7, 0x1, 0x4cdc, 0x5, 0x9}, {0x20, 0x0, 0x1f, 0x80000001, 0x0, 0x3}, {0x8, 0x4, 0x3, 0x9, 0x8, 0x1}, {0x1, 0x2, 0x7, 0x2, 0xfffffffffffffffa, 0xfff}, {0x100, 0x2f16, 0x3ff, 0x8, 0x9, 0x8000}, {0x0, 0x6d99, 0x7, 0x9, 0x4, 0x3e}, {0x8, 0x6, 0x5df, 0x80, 0x1, 0xa6d9}, {0xfffffffffffffffc, 0x5, 0x44bea366, 0x4d5, 0x9, 0x1}, {0x5, 0x2, 0xfff, 0x1, 0x3f, 0x2}, {0x1, 0xdb, 0xfff, 0x100, 0x7, 0x7}, {0x8000, 0x8, 0x6, 0x4, 0xb4, 0x9}, {0x8, 0x2, 0x2, 0x8000, 0x1, 0xa3c}, {0x7ff, 0x401, 0x9f, 0x100000001, 0xbb44, 0x6}, {0x10001, 0x3, 0x3, 0x87c9, 0x1000, 0x6}, {0x401, 0x1f, 0x7, 0x2, 0x0, 0x1}, {0xfffffffffffffffc, 0x2, 0xb87, 0x7fffffff, 0x566, 0x3}, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x400}, {0x7f, 0x0, 0x81, 0x4, 0xffff, 0x9}, {0x0, 0x9, 0xeb3b, 0xfffffffffffffffe, 0x6, 0x8000000000}, {0x6, 0x2, 0x400, 0x5, 0xfff, 0x100000001}, {0xfffffffffffff800, 0x6, 0x29f, 0xffffffff, 0x0, 0x9}, {0x8001, 0x200, 0x100, 0x800, 0x1, 0xb1}, {0x7fffffff, 0x3, 0x0, 0x2, 0x9, 0x1}, {0x3, 0x3, 0x6, 0x2, 0x1, 0x8817}, {0x8, 0x6, 0x800, 0x6, 0x4, 0x9}, {0x800, 0xffffffff, 0x10000, 0x3, 0x68e, 0xffffffffffff8000}, {0xffffffff, 0x0, 0x924, 0xffff, 0xffffffff, 0x7f}, {0xfffffffffffeffff, 0x6, 0x800, 0x0, 0x7fdd, 0x55f}, {0x6, 0x0, 0xfffffffffffffffd, 0x8c, 0x630c, 0xffff}, {0x7, 0x8, 0x1, 0x100000001, 0x1f, 0x6}, {0x1000, 0x68c, 0x40, 0x100, 0xffff, 0x1}, {0x2, 0xfffffffffffffffd, 0x1000, 0x0, 0xfff, 0x8}, {0xa6, 0x0, 0x6, 0xffffffff, 0x7}, {0x8, 0xfffffffffffffffa, 0xfffffffffffff801, 0x9, 0x3ff, 0x2}, {0x21e, 0x6, 0x5, 0x3, 0x6, 0x1}, {0x800, 0x7, 0x4, 0x3, 0x1, 0x1}, {0x6, 0x5, 0x17d, 0xff, 0x101, 0x1}, {0x8, 0xffffffffffffffe0, 0x0, 0x80000001, 0x9}, {0xa4, 0x100000001, 0x0, 0x3, 0x9, 0x6}, {0x81, 0x10000, 0x9, 0x3e, 0x21, 0xb6a}, {0x9, 0x7, 0x7, 0xbe17, 0xffffffffffffff35, 0x6}, {0x0, 0x401, 0x8001, 0x5, 0x7ff, 0x4}, {0x1, 0x1, 0x10001, 0x2, 0x0, 0x7fffffff}, {0x65, 0xffffffffffffff3a, 0x101, 0x1ff, 0xfffffffffffffffd}, {0x4, 0x400, 0x1, 0x8a, 0x4, 0x2}, {0xfffffffffffffffe, 0x6, 0x1, 0x6, 0x0, 0x8}, {0xf065, 0x100000001, 0x7, 0x9, 0x8, 0x101}, {0x28, 0x0, 0x5, 0x5, 0x1, 0x7}, {0xc000000000, 0x1f, 0x7fffffff, 0x2, 0x4, 0x8}, {0x20, 0x4, 0xff, 0x100000001, 0x9, 0x3ee}, {0x6, 0x1ff0000000, 0xfffffffffffffff8, 0x9, 0x1f, 0x14ec}, {0x6, 0xffffffffffffff80, 0x0, 0x1000, 0x2, 0x6}, {0x200, 0x9, 0x3dc, 0x1, 0xefc, 0x10001}, {0xa9, 0x400, 0x1, 0x1, 0x6, 0xff}, {0xd, 0x1, 0xa3, 0xffffffffffffffe1, 0x1200000000000, 0x81}, {0x4, 0x10000, 0x3, 0xb042, 0x2, 0xfff}, {0x5ea, 0x6275, 0x1, 0x3, 0x4, 0xfffffffffffffffa}, {0x1000, 0x9, 0x40000000000000, 0x2, 0x5, 0x28}, {0xe5, 0x81, 0xffff, 0xc40, 0x8, 0x3}, {0x9455, 0x3ff, 0x2, 0x7, 0x8, 0xffffffff}, {0x100, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x9, 0x6, 0xec}, {0x80, 0x5, 0x9, 0x100, 0xfffffffffffffffb}, {0x4, 0x7, 0x3, 0x6, 0x100000000, 0x5}, {0x400000000, 0x3, 0x10000, 0x2, 0x8, 0x3}, {0x10000, 0x3, 0x9, 0x8, 0x6, 0x4}, {0x4, 0x1, 0x4, 0xfffffffffffff6d4, 0x26, 0x2}, {0x81, 0x5f, 0xffffffffffffff35, 0x3, 0x8, 0xffffffff7fffffff}, {0x8, 0xff, 0x6, 0x2, 0xff, 0x746}, {0x81, 0x9, 0x100000001, 0x8, 0x239, 0x101}, {0x81, 0x2503, 0x1, 0xfff, 0x7, 0x7}, {0x0, 0x2, 0x100000001, 0x0, 0x9, 0x9}, {0x7, 0x4, 0x9, 0x1, 0x3, 0x2}, {0x101, 0x10000, 0x2000000000, 0x3, 0xd3aa, 0x3f}, {0x4, 0x3, 0xb4b, 0xdf9, 0x5, 0x6}, {0x1ff, 0x80000001, 0x7, 0x2, 0xf8, 0x8000}, {0x0, 0xfe85, 0x0, 0x7, 0x0, 0xcffc}, {0x0, 0xfff, 0xffffffff, 0x1f, 0x4f75, 0x9}, {0x6, 0x10000, 0x1, 0x744e, 0x7, 0xffffffff}, {0x30e1, 0x10000, 0xce9, 0x2f, 0x7, 0x10000}, {0x0, 0x9, 0x8, 0x9, 0x100000000, 0x7bd}, {0x40, 0x3, 0x0, 0x7, 0xfffffffffffffd3c, 0x6}, {0x9, 0x7, 0x6, 0x3, 0x0, 0x1}, {0xffff, 0x5, 0x0, 0x0, 0x5, 0x4}, {0x1, 0x0, 0xfffffffffffffffb, 0x9, 0x8, 0x2}, {0x1, 0x0, 0x1, 0x8, 0xfffffffffffffff7, 0x7fffffff}, {0x6, 0x51c, 0x7, 0x2, 0x3}, {0x0, 0x10001, 0x0, 0x1800000000000, 0x6, 0x5}, {0x4, 0x4, 0x0, 0x80000001, 0x3}], [{0x7, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x7}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {0x7, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0xdf2095effd05aaa1, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x7}, {0x6}, {0x7, 0x1}, {0x3}, {0x5}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x6, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0xa2eeadcc0c017a58}, {0x4}, {0x7, 0x1}, {0x3}, {0x3, 0x1}, {}, {0x7}, {0x3}, {0x7}, {0x5}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {}, {0x7}, {0x5}, {0x7, 0x1}, {0x7, 0x1}, {}, {0x6}, {0x7, 0x1}, {0x1}, {0x7}, {0x2}, {0x2}, {}, {0x5}, {}, {0x3}, {0x7, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x5}, {0x6, 0x1}, {0x7}, {0x3}, {}, {0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x64194138efc78880}, {0x7, 0x1}, {0x3}, {0x2, 0x1}], 0x1}}]}, {0x10, 0x6, "a423d35fbb51671909"}}}}, {0x100, 0x1, @m_vlan={0xfc, 0xe, {{0xc, 0x1, 'vlan\x00'}, {0x1c, 0x2, [@TCA_VLAN_PUSH_VLAN_ID={0x8, 0x3, 0x5d3}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x8, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x8, 0x6, 0x1}]}, {0xcc, 0x6, "bef8d3bb6bab8b89a5c1fcdc1d69de838a36869f0c091536afbb545ea08910e9268dac8f1b3475ed58f423919dbc7f7b501a6b5d7964fb29ea587d84c6f7f181d527ee736f0c88a10727a1ba403b01be262963a8bcf10c3e8fe0bd5857b26908808bb63b807f63f81fbebe823b02e9cf783664844b4ec7b96fec3a30baf7660142b92a9017f09c07ad8cbdd0fc0c9ac67793d4172131b2948908b8e5d1ee1abc7cfc447e4e9e695db0852a59002f6d833ec2386f8e578f52898409839196fb1744c9a5866e7b0d89"}}}}]}, 0x3048}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:58:04 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000fffffdfd00"}) [ 276.347252] binder: 11120:11121 ioctl 40046205 300 returned -22 08:58:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x6c00) 08:58:04 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0x15, 0x5, 0x2, "32470389bd84b4083e61b5580eebaac3"}, 0x15, 0x1) r3 = openat(r1, &(0x7f0000000100)='./control/file0\x00', 0x300, 0x100) ioctl$KDMKTONE(r3, 0x4b30, 0x4) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r2) 08:58:04 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000001f00"}) [ 276.474286] binder: 11140:11142 ioctl 40046205 6c00 returned -22 08:58:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x6, 0x100) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r3, 0x2) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:58:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) getrusage(0xfffffffffffffffc, &(0x7f0000000500)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000140)) r1 = gettid() kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffffff, r0}) process_vm_readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 08:58:04 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000fdfdffff00"}) 08:58:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() r3 = fcntl$dupfd(r0, 0x406, r1) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000480)={0x0, 0x0, @pic={0x1, 0x9, 0x110, 0x401, 0x0, 0x6, 0xc29, 0xfff, 0x2, 0x1, 0xffffffffffffffd4, 0x7, 0x100, 0x9, 0x4, 0xffffffffffffffe1}}) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1, 0xfffffffffffffffe}], 0x1, &(0x7f0000000400)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = accept$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f00000001c0)=0x1c) setsockopt$inet6_dccp_int(r4, 0x21, 0x10, &(0x7f0000000240)=0x81, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000380)={0xbf46, 0x9, 0x3, 0x6, 0x7, 0x2}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f0000000280)={0x49e, 0x7}) write$nbd(r5, &(0x7f0000000440)=ANY=[@ANYPTR=&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRESOCT=r4]], 0x1) ioctl$NBD_DISCONNECT(r5, 0xab08) 08:58:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x7a) 08:58:04 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000fdfdffff00"}) 08:58:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x2000000000) [ 276.667451] binder: 11169:11170 ioctl 40046205 7a returned -22 08:58:05 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') write$P9_RREADDIR(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x4b) dup2(r0, r1) 08:58:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) getrusage(0xfffffffffffffffc, &(0x7f0000000500)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:05 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000001f00"}) [ 276.768422] binder: 11179:11180 ioctl 40046205 2000000000 returned -22 08:58:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x100000000000000) 08:58:05 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) [ 276.867244] binder: 11197:11199 ioctl 40046205 100000000000000 returned -22 08:58:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) syz_open_pts(r0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 08:58:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x7a000000) 08:58:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) getrusage(0xfffffffffffffffc, &(0x7f0000000500)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) [ 277.044768] binder: 11217:11221 ioctl 40046205 7a000000 returned -22 08:58:05 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x20010, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x6c, 0x0, &(0x7f0000000280)=[@free_buffer={0x40086303, r2}, @reply={0x40406301, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, &(0x7f0000000200), &(0x7f0000000240)=[0x38, 0x38, 0x40, 0x18, 0x40, 0x40, 0x18]}}, @register_looper, @release={0x40046306, 0x2}, @request_death={0x400c630e, 0x4, 0x4}], 0xda, 0x0, &(0x7f0000000300)="94b0ed1af8774eefc8b987cfa35b5b5a99a4353d4d924afa5c2894ce1eeb4aca74393be26d338fb00c3e3433c1d149f93e7bc63ac31a2609f77c685fb2635b308348657669212516105e13f9127d1af259dd91ee954dc795a26232eb7c687dbc9353c27f42e5519301117d81909eaf586db243379e335b0d87494fcf8e43edf4a12067ba19da502c14716ce7e06c76b4e58349acb75fe556e712be1edd38b4e734a9d784f42f5e55fed0d1a4668d9a31898a509799f2cb6d5f86bf6c27d3ed5c6f4b7e61d13ca9153c93e9ca453f991987dee08e5fc833362599"}) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x1) ioctl$KDENABIO(r1, 0x4b36) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000140)=[@in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e20, 0x3, @empty, 0x1ff}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e23, 0xc5, @remote, 0xa2}, @in6={0xa, 0x4e20, 0x81, @local, 0xe38}], 0x84) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x40, @local, 0x6}, @in6={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, [], 0xa}}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e24, @loopback}], 0x58) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r3) 08:58:05 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x8}) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x7400) 08:58:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) getrusage(0xfffffffffffffffc, &(0x7f0000000500)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:05 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x4800000000000000) [ 277.552939] binder: 11241:11242 ioctl 40046205 7400 returned -22 08:58:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) getrusage(0xfffffffffffffffc, &(0x7f0000000500)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:05 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000001f00"}) [ 277.645993] binder: 11252:11254 ioctl 40046205 4800000000000000 returned -22 08:58:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) fstatfs(r3, &(0x7f0000000380)=""/245) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x0, 0x10000, 0x8, 0x10000, 0x200}) 08:58:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() r3 = fcntl$dupfd(r0, 0x0, r1) sendmmsg(r3, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="760c72f968c356efa86c0a298b2cafa1e44ec3ffe537c945a72291c0007b8f9759c492a5eb", 0x25}, {&(0x7f00000001c0)="b13c", 0x2}, {&(0x7f0000000240)="334b5bd48d37c25fba18a04d753ef8526034dd2f26c6c687d233d18cc8ccd2efad52e79a39bb78179c1336a6e47afe6bd8b1a9384d97dea513027df86754b8f588b26f1f0b73fc34c64dc2fb4950a77eeb39", 0x52}], 0x3, &(0x7f00000003c0)=[{0xe0, 0x116, 0x1800000000000000, "8931db96d71267fed553d42dd659cef1920687c9146e6b820beca415a5d118ba4190cfdf3ad49f111f953d3f4c4f77ca3141d8085822147921cb2f3421b04c4c743dc93f28750859c85c81276b9a5511ca9f53a82002fc418e3d20f6d67e7f91e05e5ae8138d399f960f644ec9b41a3eefe567b91d20f6e06e1aa7f83db9e0f85f4ca613a9a0cb3c85a15b785f200c43e3f38aa3384839d374978d2e4f9ee7ac4e7720abd5646a0a11fe391f4bead6e3794542d36970dace3dc81403c986931a5ebabb4655e83a350824"}, {0xb0, 0x114, 0x3, "22352200d84d8059da5a30a5ededa4ce65a8fb10bc6f33d0fc521492961b8f3542c4eba796c3d71b0b4e53fbbe8ff583f59f63b91e6d24bc434574e4c6f33933089a2fbf07e934c45077fbe2ae2b26968657427466ddb3aec77ea6740565b32aee412ae1368966c21c700137d4c42758182005090a678aa4f7e90f8ad9b7ed7d51b40afe36f85483f6bb57ccfa2e19c11817edb79e88f2c511"}, {0x88, 0x111, 0x7f, "18711e63e3649c918db032f27ab6826f5e0a5c109ef9a9a3a302adc24167ab3e0c038a2489dbaabec00c8c512d0d3d738ef7b72e97c1823fcd8362c464a2025c94b2b68043e28d7d8e4e568d33fe975e7b5edab0d15c3d5fb7f68331c7b94e50fd8bf7cdc51c5caf2620609de8e6340837"}], 0x218, 0x4000001}, 0xffff}], 0x1, 0x44) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8040, 0x10) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) clock_gettime(0x0, &(0x7f0000000640)) ppoll(&(0x7f0000000740), 0x254a771f469f395, &(0x7f0000000700), &(0x7f0000000340)={0x200000400000003}, 0xfffffffffffffc1a) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:58:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x802) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) set_tid_address(&(0x7f0000000000)) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) getrusage(0xfffffffffffffffc, &(0x7f0000000500)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:06 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000fdfdffff00"}) 08:58:06 executing program 4: pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) mkdir(&(0x7f0000000280)='./file0\x00', 0x108) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x800) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r2, 0x10000}, &(0x7f0000000140)=0x8) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80, 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fcntl$setpipe(r1, 0x407, 0x80000) unlink(&(0x7f0000000000)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, 0xffffffffffffffff) 08:58:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) getrusage(0xfffffffffffffffc, &(0x7f0000000500)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) [ 277.912296] binder: 11282:11283 ioctl 40046205 0 returned -22 08:58:06 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:06 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000240)='./file1\x00') link(&(0x7f0000000000)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:58:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) pause() 08:58:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) getrusage(0xfffffffffffffffc, &(0x7f0000000500)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80}) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:06 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) [ 278.073822] binder: 11304:11305 ioctl 40046205 0 returned -22 08:58:06 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) fdatasync(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x1000000000005f) read(r1, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000000)={r2, r1}) ppoll(&(0x7f00000002c0)=[{r2}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:58:06 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:06 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x40000004) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:58:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x121) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x3, 0x4, 0x4, 0x7fff, 0x0, 0x1800, 0x10, 0x8, 0x7fffffff, 0x401, 0x0, 0x0, 0x87f, 0xffffffffffffff73, 0x5, 0x0, 0x3, 0x7ff, 0xbf8, 0xffffffff, 0x0, 0x5, 0x0, 0x3ff, 0x101, 0xffffffffffff4936, 0x47c, 0x8, 0x7, 0x5, 0xaf7, 0x3, 0x7f, 0x1, 0x8, 0xfffffffffffff801, 0x0, 0x40, 0x0, @perf_config_ext={0x9, 0x1}, 0x20002, 0x4a7, 0xd43, 0x5, 0x4, 0x1f, 0x2b37}, r2, 0xc, r4, 0x1) 08:58:06 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:06 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:06 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000fdfdffff00"}) 08:58:06 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:06 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:07 executing program 5: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x81) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000280)={0xb0, 0x7b}, 0x2) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x11) socketpair(0x4, 0x80001, 0xbaf, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000001190000042bbd7000fbdba2d88af5eeab7c2efe0e0036000008000200ac1414aa"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000380)=0x9) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000002c0)=""/185) 08:58:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) getrusage(0xfffffffffffffffc, &(0x7f0000000500)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:07 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0xfffffffffffffffe) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) r1 = socket(0x11, 0x1, 0x7) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0xffffffffffffffc1, 0xff}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={r2, 0xffffffffffffae24, 0x100000001, 0x101}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000380)={0x9, &(0x7f0000000240)=[{0xafbd, 0x2f, 0x2, 0x7}, {0x1, 0x9, 0x3, 0x8}, {0x7, 0x9, 0x0, 0x8}, {0x1, 0x1, 0x5, 0x2}, {0x5, 0x1ff, 0x200, 0x4}, {0x5, 0x6, 0xd4, 0x4}, {0x40, 0x1, 0xa5, 0x80000001}, {0x6, 0xb439, 0x81, 0x4}, {0x1000, 0x0, 0x6, 0x20}]}, 0x10) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000140)) r4 = gettid() kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r3, &(0x7f0000000000)={r3, r0}) ppoll(&(0x7f00000002c0)=[{r3}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) syz_open_pts(r0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f00000003c0)=0x8, 0x4) [ 278.895872] Unknown ioctl 35090 [ 278.905742] binder: 11374:11375 ioctl 40046205 0 returned -22 [ 278.914137] Unknown ioctl 35090 [ 278.925697] binder: 11374:11377 ioctl 40046205 0 returned -22 08:58:07 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x20}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:58:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x6822) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:07 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:07 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000340)={0x10800, 0x800, 0x8}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x100000001) socketpair(0x3, 0x7, 0xffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x23ffffffffffffff, 0x7}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000180)={r4, @in6={{0xa, 0x4e21, 0x1, @ipv4={[], [], @broadcast}, 0x5d6}}, 0x800, 0x3, 0x2, 0x6, 0x2}, &(0x7f0000000100)=0x2c) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x5, 0x4, 0x2, 0x5, 0x1, 0x8, 0xfff, 0x6fcffae9, r4}, 0x20) [ 279.290148] binder: 11414:11417 ioctl 40046205 0 returned -22 08:58:07 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:07 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80801, 0xff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x60013, r1, 0x5a) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x4) [ 279.388020] binder: 11426:11430 ioctl c0185879 20000340 returned -22 [ 279.407472] binder: 11426:11430 ioctl 40046205 100000001 returned -22 [ 279.542549] binder: 11440:11441 ioctl 40046205 0 returned -22 [ 279.549094] binder: 11440:11441 ioctl 40046205 4 returned -22 08:58:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:08 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f00000000c0)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f00000004c0)='./control\x00', 0x80000001, 0x4, &(0x7f0000000780)=[{&(0x7f0000000500)="f6db83f7db49c14810f4e8972d2bb20960624bf6131ef1def029ca669778e710ed84b0c2f9918e3835fc270736b6209a76633459301fb64570b2a6068a8da66b3829a1524e2109b0bfe73aeba19f237b51ccea7303ff4c0dd45a60adea30e43fc20866e6c4c333c04fbcdfc98478db46b9962c3670a32131d50526b3505375244d8b565c0500fb3619516a7171937056143bea0f8f970503224da08cd7b48288c57981e69fe4477236174cafb5b6", 0xae, 0x400000000000}, {&(0x7f00000005c0)="002f54190803fcaabb37b50121b024fc253b5c87bf9fec5190078870b82c4329401bc9a35240a458a9d448555cd89bd492d8d753814e247c8d32926e0180a9749040e1045f5b8da0fc46", 0x4a, 0x1ff}, {&(0x7f0000000640)="e035e371bc88240abb398befd602416095c247ef4ea90d00fbd485a1717c11d3a9adcec914544621f483a12638cc4ad39973304d5a28218f", 0x38}, {&(0x7f0000000680)="aad2b976a8cb20d91a0a37c263b180d288608c09fa116bced091199c2868a533df967efb56e92ba2f2b7fc18d46461c96ca7cb75e5b25d0ede389be078dfa0170a46ba1c41c5630285b46f6e3a5783bea196d811a380c6d7661ad34b3d586551521ede1739e59d595d77b077fd0117d6971e07f7a7ac536bdc8563f7e721cd9645f515117606fe736160f4959ded7e0168df268dd699d2613cc7dba8bff88f003b2ba3ef461f25735b02e3bc3712cd004ed7228826d95feddafbe14db0082444bb4acf808c75bf6375396e69ddf53b6c43eb701628fae427a08de9", 0xdb, 0x100000001}], 0x3000000, &(0x7f0000000800)='/\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:58:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = memfd_create(&(0x7f0000000380)='em0\x00', 0x6) getsockopt$packet_buf(r1, 0x107, 0x1f, &(0x7f00000003c0)=""/33, &(0x7f0000000400)=0x21) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x2015}) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000000)={r2, r0}) ppoll(&(0x7f00000002c0)=[{r2}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) r6 = request_key(&(0x7f00000001c0)='cifs.idmap\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)='.wlan0+self-\x00', 0xfffffffffffffffd) keyctl$get_persistent(0x16, r5, r6) ioctl$TCXONC(r4, 0x540a, 0x0) 08:58:08 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000fdfdffff00"}) 08:58:08 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x68) write$P9_RCREATE(r0, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x10, 0x3, 0x1}, 0x10000}}, 0x18) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0) 08:58:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0xbd6, 0x0, 0x40, 0x0, 0x0, 0x1400000000000, 0xfffffffffffffffe}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) 08:58:08 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:08 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='security.capability\x00') r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0) [ 279.896967] binder: 11459:11460 ioctl 40046205 0 returned -22 08:58:08 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:08 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001600)='/dev/full\x00', 0x4801, 0x0) signalfd(r0, &(0x7f00000017c0)={0x8000}, 0x8) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000000)=""/173, 0xad}, {&(0x7f00000000c0)=""/98, 0x62}, {&(0x7f0000000180)=""/205, 0xcd}, {&(0x7f0000000280)=""/29, 0x1d}, {&(0x7f00000002c0)=""/102, 0x66}, {&(0x7f0000000340)=""/14, 0xe}], 0x6, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0) r4 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x8, 0x109000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000001640)={0x0, @in={{0x2, 0x4e23, @remote}}}, &(0x7f0000001700)=0x84) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000001740)={r5, 0x6}, &(0x7f0000001780)=0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0x10, &(0x7f0000001500)={&(0x7f0000000500)=""/4096, 0x1000, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000015c0)={r4, 0x10, &(0x7f0000001580)={&(0x7f0000000440)=""/143, 0x8f, r6}}, 0x10) 08:58:08 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000001f00"}) [ 280.006167] binder: 11481:11482 ioctl 40046205 0 returned -22 08:58:08 executing program 1: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80}) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000180)=0x10000000000062) read(0xffffffffffffffff, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) r1 = gettid() kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000000)={r0}) process_vm_readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 08:58:08 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000fdfdffff00"}) 08:58:08 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0xfffffffffffffffb) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:58:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x2, 0x6, 0x8001, 0x8e, 0x0, 0x6, 0x4, 0x7ff, 0x5, 0x0, 0x51}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000580)) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000002c0)={0x0, 0x1f}, &(0x7f0000000300)=0x8) connect(r3, &(0x7f00000005c0)=@ax25={0x3, {"4acc11606a5394"}, 0x4}, 0x80) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f0000000640)={0x3f, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="de000000c9a0c6315fe2137063f418f8e0ae46b29dd372fc18b7b6dc0978305a2c76e31cd1f686fcdf39a9fcedec63ee5b00ad76721eb0ebeabda7d310bf1790fd2f965bc065bf66f004806718115b6f16f673e2eee0ad543a2542794818a14f97822f81fdd680ea50625944878cd8138fd8a274e006b9304aea80d592941cf59885d76c43234b9e5726237bd7b6cc792f7ab96637367b78b750da8148228a15245816d36ba98a1e4b3cacb9157e298828cc70b7306f4ef7c7fda3a042f88def5e13d9a58b2332c4601e531aa0b1749124a626316ec9d9ffd8e88c12f32cbd5f2cf8"], &(0x7f0000000440)=0xe6) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000480)={r5, 0x1, 0x9, 0x24, 0xd0a, 0x3894, 0x100, 0x9, {r6, @in6={{0xa, 0x4e21, 0x80000001, @empty, 0x10001}}, 0x5, 0x4, 0xfffffffffffffff9, 0x80000000, 0xde}}, &(0x7f0000000540)=0xb0) write(r1, &(0x7f0000000200)="e3d77f19a210fc0da923c939a22ac44458e25c7111b3f4e075a3bc698d2595a851f79010f2ffa9dc097c4fa555026c063ef848b20c5c155f01ef6c8b9466530d0f6a38acc9de63484e0b3e8515c9ffd567c71d3a876d1688f99969819f07da613eccd14dcc8290d45eaddf6024784d22d9f1d5dcb63c67a6fb49804fc8f130ac159e9b3e2e094963ff1fc3b9cd5d38e34ba9d8b7b5dbfe72f06fd50f2ccc22ec272f72842f4b6873f6a325c38a", 0xad) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="38a646207ef0621e1100000008000400000800002800030008000460e10000001400020069703667720000000030000000000000080007004e2400000800050866fb0008"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040841) 08:58:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) [ 280.347068] binder: 11527:11528 ioctl 40046205 0 returned -22 08:58:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x101042, 0x0) r3 = gettid() syz_open_pts(r2, 0x800) kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r1, &(0x7f0000000000)={r1, r0}) read(r1, &(0x7f0000000380)=""/233, 0xe9) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:58:09 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:09 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x200002, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) quotactl(0xfc00000000000000, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000200)="0659cffe452ef6e367d7b052b5b08ea60d9a5df073de82958028c1423869ba96be4f53be11d148c3acfe8ca4d8039177eb166bf88c3877351ed193c1d91dd2984a2dc0b2ff080ffc79a7a6bf443c74abbe51d4b560a27fd3ee65ea9713f6071819f6d2bdf94669869b5389cabd65f491d407cf6bda50bafd2dae0e4b4c5773adc31adda1c8035872cee59ff442a2") r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r2) 08:58:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000280)={0x2, 0x0, @local}, &(0x7f00000002c0)=0x10, 0x800) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) delete_module(&(0x7f00000000c0)='/dev/binder#\x00', 0x200) r5 = openat(r3, &(0x7f0000000040)='./file0\x00', 0x2000, 0x40) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000100)={0x4, 0xf8, &(0x7f0000000180)="cad360df824bb5a35fbecdd72970c22f1fbd61e243250eff19d5ea23a920efe56bb706de153358288cf6a629c99e9a81170adde4f394c924b3b90022581a4d9ead578a3d124813b8a01cbf85af04efdaa22b498e5cdcffedf666924790df0f0a590d4a6144453dd0f3192900e4434dda52753c65d2c46e1a6185556334e6686c7313070a09993edc70191f58208fc75a78c410dda3198c8b6a217791608aa0f3adc52601eceb36cccecd1ec906bc77ed173003fe7b9fa36a4bfb5477a1c322feb053826b601d046c4204c5d2d2650fa74a50a0de41d32e3b54ea0f41a09a48c784d0185d4212bfbc7e72fdff1f63ac2465a6b5c1ee1fd67b"}) ioctl$RTC_VL_READ(r5, 0x80047013, &(0x7f0000000080)) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) 08:58:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0xfffffffffffffffd, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000080)=""/11, 0xfffffffffffffff4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:09 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000006) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_buf(r1, 0x1, 0x3f, &(0x7f0000000000)=""/178, &(0x7f0000000100)=0xb2) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) [ 280.812455] binder: 11556:11557 ioctl 40046205 0 returned -22 08:58:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000080)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:09 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) [ 280.908735] binder: 11569:11572 ioctl 40046205 0 returned -22 08:58:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000080)=[0xee00, 0x0, 0x0]) setgroups(0x2, &(0x7f00000000c0)=[r2, r3]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:09 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000001f00"}) [ 281.047916] binder: 11588:11590 ioctl 40046205 0 returned -22 08:58:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x9, 0x0, 0x0, 0xb35, 0xfffffffffffffffc, 0x9, 0x0, 0xfffffffffffffffc}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x80) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0, 0xffffffff}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:12 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='./control/file0/file0\x00') dup2(r0, r1) 08:58:12 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400000080000) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000040)={r3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, r2, 0x0, 0x2, &(0x7f0000000100)='[\x00'}, 0x30) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x3ff, 0x3, 0x3, 0xffffffffffffffff, 0x0, 0x13a07c42, 0x4048, 0xa, 0x1, 0x7ff, 0x2, 0xeb4d, 0x5, 0x1, 0x615, 0x9, 0x4, 0xb15, 0x9, 0x80000001, 0x3, 0x3ff, 0x6, 0x7, 0x0, 0x0, 0x4, 0x9, 0x7fffffff, 0x7fff, 0x7fffffff, 0xfffffffffffffff8, 0x8, 0x1, 0x2, 0x4, 0x0, 0x800, 0x0, @perf_config_ext={0xffffffffffffffe0, 0x100000000}, 0x40, 0x4, 0x4, 0x0, 0x6, 0x9, 0x6}, r5, 0xa, 0xffffffffffffff9c, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000200), 0x4) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:12 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() socketpair(0x10, 0x1, 0xdc8, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000380)={0x6, {{0x2, 0x4e20, @local}}, 0x7aebad1345ae44c3}, 0x90) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r1}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) [ 283.968580] binder: 11611:11614 ioctl 40046205 0 returned -22 08:58:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x2) 08:58:12 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:12 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./file0\x00') link(&(0x7f0000000100)='./control\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:58:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) [ 284.078734] binder: 11630:11631 ioctl 40046205 2 returned -22 08:58:12 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000001f00"}) [ 284.183293] binder: 11645:11646 ioctl 40046205 0 returned -22 08:58:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f00000000c0)) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:58:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) r2 = memfd_create(&(0x7f0000000000)='/dev/binder#\x00', 0x1) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)=""/4096) 08:58:13 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:13 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x1, r1}) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f000000f000/0x4000)=nil, 0x4000, 0x1, 0x34, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x1f, 0x80000001, 0x0, 0x3, 0x7, 0x3}) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f0000000180)='syz0\x00') ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x4}) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000000c0)={0x2045, 0x200}) socket$inet_dccp(0x2, 0x6, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f00000001c0)='./control\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./control\x00', 0xa, 0x2) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r1, r1) 08:58:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x400, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000400)={0x20, 0x8000800000000000, 0x2, 0x4, 0xc534, 0xffff}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r2 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) shmat(r2, &(0x7f0000ffa000/0x2000)=nil, 0x5000) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000140)) r4 = gettid() kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r3, &(0x7f0000000000)={r3, r0}) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000240)) ppoll(&(0x7f00000002c0)=[{r3}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r5 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x121200, 0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$dsp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/dsp\x00', 0x2900, 0x0) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000600)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000700)=0xe8) write$P9_RSTATu(r6, &(0x7f0000000740)={0x74, 0x7d, 0x2, {{0x0, 0x5b, 0x7ff, 0x100000001, {0x10, 0x3, 0x7}, 0x0, 0x9, 0x5, 0x7, 0xa, '/dev/ptmx\x00', 0x13, 'posix_acl_access-lo', 0xb, '[eth1cgroup'}, 0x4, '!GPL', r7, r8, r9}}, 0x74) setsockopt$inet6_tcp_int(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 08:58:13 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000001f00"}) [ 284.802133] binder: 11666:11673 ioctl 40046205 0 returned -22 08:58:13 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1000008, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:58:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xffffffff, 0x101040) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000040)={'nat\x00'}, &(0x7f00000000c0)=0x54) 08:58:13 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000fdfdffff00"}) 08:58:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) getsockname(r1, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000380)=0x80) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f00000003c0)={0x0, 0x2, 0x6, 0x82d2}, &(0x7f0000000400)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000440)={r4, 0x9, 0x3, 0xfaf, 0xffffffffffffffc0, 0x20}, 0x14) [ 284.952012] binder: 11694:11695 ioctl 40046205 0 returned -22 08:58:13 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000), &(0x7f00000000c0)=0x14) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r2) [ 285.076162] binder: 11714:11715 ioctl 40046205 0 returned -22 08:58:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, 0xffffffffffffff9c, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:13 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000fdfdffff00"}) 08:58:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x10000000000003, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000000)=""/246) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xfffffefb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000240)=0x3ff) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000280)={0x1, 0x0, 0x10003, 0x4}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000003c0)={0x3, r3, 0x10003, 0x2}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000400)=""/226, &(0x7f0000000500)=0xe2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r4 = memfd_create(&(0x7f0000000380)="ae00", 0x6) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000000c0), &(0x7f00000001c0)=0xc) r5 = gettid() kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r1, &(0x7f0000000000)={r1, r0}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000540)) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r6 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) [ 285.179421] binder: 11721:11726 ioctl 40046205 0 returned -22 08:58:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:13 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:13 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) dup2(r0, r1) 08:58:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000080)={0x25, 0x9, 0x8}) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:13 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x400900) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0xffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa0000, 0x80) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) [ 285.658540] binder: 11747:11757 ioctl 40046205 0 returned -22 [ 285.671696] binder: 11747:11759 ioctl 40046205 0 returned -22 08:58:13 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:14 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200140, 0x0) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000040)) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)={0x6000, 0x4, 0x5, 0x80000000, 0x8, 0x3, 0x1ff, 0x1, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) [ 285.754524] binder: 11769:11772 ioctl 40046205 0 returned -22 [ 285.765751] binder: 11769:11777 ioctl 40046205 0 returned -22 08:58:14 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f00000004c0)=0xe8) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r3) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) kcmp(r4, r5, 0x5, r1, r0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000540)={0xffffffffffffffff, 0x3, 0xd8f, 0x3, 0x8001}) r6 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r6, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x40, 0x1, {"72cb21392dc7ef10d7ffd3e902829df60cd1d83adb8c9c63e985e9ecb3c6db9928463301fd8ea503"}}, {0x0, "d2d6e0e42a7c5e1e12046c78bf593d5236fb6d066ac914054c950d7d518427dfc6d0d96d4e0e4a031e736a78305a046b085af23f7c8ced8a2c360def12ebc0d9342c7742b140cba38b63808a359ebb21130c57c6ef45f230dff9d3c76c048fdcb6e4b6e7875219655d1bef3640a5d3c823ea02ab5542acc1c4c2370576b4dc5c6026b385cc3a4dbd5b88b36f73c8d58e8ea548678b8be5af3c40bc1b41cdff085dcab12454f6a2bd605609"}}, &(0x7f0000000280)=""/202, 0xed, 0xca, 0x1}, 0x20) link(&(0x7f0000000100)='./control\x00', &(0x7f0000000140)='./control/file0\x00') [ 285.878976] binder: 11790:11794 ioctl 40046205 0 returned -22 08:58:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$read_default(0x2, &(0x7f0000000180)=""/4096, 0x1000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8) write$P9_RFSYNC(r0, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:14 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(0xffffffffffffffff, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000240)=""/11, 0x283) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000280)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) sched_setattr(r2, &(0x7f00000001c0)={0x30, 0x7, 0x1, 0x3, 0x9, 0x9, 0x7f, 0x8000}, 0x0) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0x88001, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1, 0x60080) ioctl$KVM_GET_PIT(r4, 0xc048ae65, &(0x7f0000000380)) r5 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) 08:58:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, &(0x7f00000000c0)={0xdc31, 0x2}) 08:58:14 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) fcntl$setlease(r1, 0x400, 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)=0x5) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) socket$inet_udplite(0x2, 0x2, 0x88) unlink(&(0x7f0000000080)='./file0\x00') setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000001800)=0x5, 0x4) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f00000000c0)='./control\x00', 0x4, 0xa, &(0x7f00000016c0)=[{&(0x7f0000000100), 0x0, 0x9}, {&(0x7f0000000140)="476d36f5b70fbe1064c18629657c321774c97e44a5e5107676e160dcd486e129aa12acdc945dfd16c53033679966d4bdba450e1f4ca70d9a48024b10cbd044c100af7ca1658b2d6e5e052af868638805d17d14a3e463f272e5d86cb8162d05f91f2f24df48b0937bf6c3517e8b3c0b47fefff1bff8da9ad2ed3119b35fbd0f5392bb70862320b2c252adb79b210b3d19840dc7c90f966cd8e1360bb2f6fef596f43c194d45db901eceb8b62198b3da6a1a292efe3b0d2fa5", 0xb8, 0x80000000}, {&(0x7f0000000200)="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", 0x1000, 0x86c4}, {&(0x7f0000001200)="18b37846a4c70b8e891bb01ace541921bf48b8ba09bf10401433c753bf8c3505724e5de0025961c8cf300daad9dc082aaa333882965b7e0fe027f59776d8a33235cf54e0c5bbbc376c4467a5b952e1251300df36de04d7baa5bba1d4ee0fc51398f79c4f72e9a4c4d96e2e05d3ae9c98071bc784fb9ad89e53eaf7219d494b5f5b181f6f606574", 0x87, 0xf7}, {&(0x7f00000012c0)="deee3a61cfaa9f540ffb57b76e6cf6982b6b0b5c128a028e3f235c616cde7c644a0b500ed507d614d584f09991d9a58022938a8973b0d9af8f1ac0bf97068236184ff59c87c1222c25685d23499e0ff9d1b1e224c1422af741ac0b2090269475e0d44eae8eead71ef794715785c15103398055b8d4eead783504fc6c2af558c822b7f7d236dab10fa512d6d8ef8c8b62cc2be42a1c8f8d69d63837307424df619a0fa479ed7594da088f5b806b8f8134", 0xb0, 0x1}, {&(0x7f0000001380)="db16ce84046fb025b8f55bb264f2a8f6836b3b4804b4edbdbd33e3e3254ccd002b00ea4044295da46c49fc97a0eff14db0aeca0c1c05802cb39882589aa19f5164f3a0eb1a3db5eb5ec5a877ec5ca9a404619fedde0ec2b78896", 0x5a, 0x7}, {&(0x7f0000001400)="986d8d1134f587c23b8f0ed729f3d2099c705092bb898a01dc4ee926e95d64bc262a0c2d6145d785d270730d6218a066bfad52b18dafab680c05fd931a33a8cd58f7808afacd5a24c89cb7332d53668909841129b9e06104aa266a86b7a9b780895021ecd14f99bedd477b714c1038eafb4c430de647344a47a8eee785915748ee793d929d4e443e1c156c4738363a43e4d555dfcfdad9f1e804ebbf5a00ee", 0x9f, 0x8d4}, {&(0x7f00000014c0)="95fa8fe0cfd1a351a8a6caa102383e6b6da1562cfe377f9f1b551658cd0e7d05eb9dede55c0d145ec73dffd05f6217baa6dd99f950ba1ce0bc74e6f80eaad7e6d105eef520ae318be83862f2e1e8212e1a883ca718e11148c945a630efe7cb897578cab0ae6c9d5b3a417b20f9091fbad8de81c1cdb8ab77ca7523405722921ca3d2e4c0c2fcb7a71e4baa77aca4329ef1dfd372d7d60d55c20e2e42645f89564766cd3db988b8c9afaeeef7f1658690d4f8c9be30e1a6ad65e67d073544ac0ffa353f8d8dbd8d0479e9b2c577d0bb5168d1ee2226c0c804bb0cdb13697e4c993c4476a9a8bd7db04b9c8730ac4715efff3a2e89", 0xf4, 0x10000}, {&(0x7f00000015c0)="4fbac536b37aaa311fe588092749c17567e8b7494ece7e8d4707a84e15d0bff9ca5af56240d731dd0ddc9275f445a3e430daa8ea16ba7c72c5e34c96f8b123b0c0fd265e20ca0f8e2bc3ab3b3ce0757a4356f69aa59ed750fbc40010eda7131799dd7ce0", 0x64, 0x1}, {&(0x7f0000001640)="91cdfa93eead1aae6c9ac497b0da6c879b7f6bd8c565521c5178cd720e7e677583e77ba36d0bbb15753e74841226ef5793388960630b6ada15dd3b7d17db38ac42a11cf0faedf6cb41f33d7f", 0x4c, 0x6}], 0xa0, &(0x7f00000017c0)='keyring\x00') dup2(r0, r1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001840)='/dev/sequencer2\x00', 0x20400, 0x0) 08:58:14 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000fdfdffff00"}) [ 286.512865] binder: 11809:11815 ioctl 40046205 0 returned -22 08:58:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(0xffffffffffffffff, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r2, &(0x7f0000000040)="54792c0ab4b20ecd4ae5df04f324add74fc7be6de457707c54b94d8ac39a41bdfcf6aa0dfa52ba8fd454a5429eb4daebf87678ad2cd41660e4d12c60d6ff615f7e2c1eed380e76e445c7ead45a2fe724154d72b57772823d445845afa4b25c3ebbb5d2f69fb8795defbce7bc2fd21be2925ea3573f141c3c63686b501a843e"}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x7ff) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:14 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x42000, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000180)=""/4096) 08:58:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(0xffffffffffffffff, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) [ 286.634630] binder: 11835:11838 ioctl 40046205 0 returned -22 08:58:15 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) [ 286.761772] binder: 11855:11856 ioctl 40046205 0 returned -22 08:58:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffff0000, 0x2, &(0x7f0000000200)=[{&(0x7f0000000080)="f0fa51306624990bc5a4b4cba93a44823836bf7a9611aee84dd2ce2fe0f713226a71670f358f3e93f88deda72caa1bb2468163e4f79cb70adcc837c6ac5fbbbbd356dc7149bcd39972e83714a2ce5e8217d98bfbef2b80aacc295debe4ae0e9ed9936fe73568bedd8cba7c10cf8d14dfea5b3925fc12f1cea28e5144ebeaf0ef01a714eeb8be44ad0577310b52faa1b1f11d55a8f6f0e8f27b812f9bd4b08367e3c55ffc2244", 0xa6, 0xd7}, {&(0x7f0000000180)="67a8923cd61781c0f74a75a3fe931345fdd0298f41b07577767e5d525789a71ab7dbc8a37a5b9a28a80163acc0c8d177aabebc9d8b5cdcac227a5498b47160e63eec972b59", 0x45, 0x804000000000}], 0x2031491, &(0x7f0000000240)={[{@unhide='unhide'}, {@overriderock='overriderockperm'}, {@check_relaxed='check=relaxed'}, {@map_off='map=off'}]}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) epoll_create(0xffffffffffff7fff) 08:58:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() lseek(r1, 0x0, 0x1) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:15 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:15 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000000)) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x88000804) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r1, r2) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 08:58:15 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x80000000) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x9) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) [ 287.001893] binder: 11871:11886 ioctl 40046205 0 returned -22 08:58:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:15 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000000c0)={0x3, 0x10000}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3, 0x8a000) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') dup2(r0, r2) 08:58:15 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000001f00"}) [ 287.139524] binder: 11903:11905 ioctl 40046205 9 returned -22 [ 287.162595] binder: 11903:11905 ioctl 40046205 0 returned -22 [ 287.174643] binder: 11903:11911 ioctl 40046205 9 returned -22 [ 287.183172] binder: 11903:11912 ioctl 40046205 0 returned -22 08:58:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5, 0x80) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000040)={0x2, 0xfffffffffffffeff, 0x5}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x400000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) syz_open_pts(r0, 0x0) 08:58:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x100, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000040)={0x7b, 0x0, [0x0, 0x9, 0x5807, 0x7fffffff]}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:18 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000fdfdffff00"}) 08:58:18 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x101, 0x0) dup2(r0, r1) 08:58:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000400)={{0x2, 0x4e24, @rand_addr=0xff}, {0x1, @random="5bb4ec40cca3"}, 0x4, {0x2, 0x4e23, @rand_addr=0x5}, 'bond0\x00'}) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000000)={r2, r0}) ppoll(&(0x7f00000002c0)=[{r2}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x10002) write$UHID_INPUT2(r4, &(0x7f0000000240)={0xc, 0x19, "48e590a441cc25eaf0a821692310b3f42450ecf115356387c9"}, 0x1f) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x1, 0x0) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x100}, 0xc) r6 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) 08:58:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x1, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f00000000c0)) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) [ 290.027552] binder: 11939:11940 ioctl 40046205 0 returned -22 08:58:18 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) [ 290.070362] binder: 11939:11949 ioctl 40046205 0 returned -22 08:58:18 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) [ 290.177464] binder: 11964:11966 ioctl 40046205 0 returned -22 08:58:18 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:18 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:58:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4100, 0x2) ioctl$KDDELIO(r2, 0x4b35, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:18 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:18 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)={0x0, @aes256}) dup2(r0, r1) [ 290.321763] binder: 11991:11992 ioctl 40046205 0 returned -22 08:58:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x10}) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000080)) 08:58:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) splice(r0, &(0x7f00000001c0)=0x33, r0, &(0x7f0000000240), 0x0, 0x6) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x4, 0x2) setsockopt$RDS_RECVERR(r3, 0x114, 0x5, &(0x7f00000000c0), 0x4) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:58:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:18 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) [ 290.503686] binder: 12010:12011 ioctl 40046205 0 returned -22 08:58:18 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x1) r2 = memfd_create(&(0x7f0000000000)='/dev/binder#\x00', 0x7) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x3f) [ 290.570271] binder: 12019:12020 ioctl 40046205 0 returned -22 08:58:18 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x33, 0xffffffffffffffff, 0x0) getsockopt$netlink(r1, 0x10e, 0xf, &(0x7f00000000c0)=""/221, &(0x7f0000000000)=0xdd) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x2}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x400000000, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) userfaultfd(0x80800) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)="3a6367726f7570b05e6574683100") unlink(&(0x7f0000000080)='./file0\x00') close(r0) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000280)='./control/file0\x00') 08:58:18 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) [ 290.681016] binder: 12034:12036 ioctl 40046205 1 returned -22 08:58:19 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f00000000c0)={r3, 0x2}) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) [ 290.755056] binder: 12049:12051 ioctl 40046205 0 returned -22 08:58:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80, 0x0) mq_getsetattr(r4, &(0x7f00000000c0)={0x7c5, 0x44, 0x3, 0x4cdd, 0x4a49, 0x40000000000, 0x1f, 0x401}, &(0x7f00000001c0)) 08:58:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:19 executing program 0: syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x10001) socket$inet(0x2, 0xa, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x8e27912a1b16f77b, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) sysfs$2(0x2, 0x8, &(0x7f0000000340)=""/203) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r1, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000042000000f9ffffff0100696acf5e42f4004000000000000000000800000000000000000000"]) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000000)={r2, r1}) ppoll(&(0x7f00000002c0)=[{r2, 0xfffffffffffffffc}], 0x200000000000021b, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000080), 0x8) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000240)=0x1) r4 = syz_open_pts(r1, 0x3) ioctl$TCXONC(r4, 0x540a, 0x0) 08:58:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:19 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:19 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) [ 290.980538] binder: 12073:12076 ioctl 40046205 0 returned -22 [ 290.987844] syz-executor0 uses obsolete (PF_INET,SOCK_PACKET) 08:58:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x7) 08:58:19 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0xbd, 0x1, 0x6, "7dc0b9f274e30607a354c6595a4fdad2", "4340b9bff1c1927b6fddb1343007c5a504e53ac8034262f4078900843a8d1c820208aaaf714615ffe5157c25e4a076aaece11369c6f6e44371522f958807034b3d5c270090cd2e83d2e2ae97958886b31b2c0e7015350d3b43c5a6c8ca6a55586d0c4249243427a14e1ff4d36bfb532c372093751ea60345e33d7b071d8aadc40eebafb97f93c4ab9f5733a8b35e4ee294d598979c20af2a5f9219b6c2b3535709f23d9c3dd59e5f"}, 0xbd, 0x2) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000180)={0x6, 0x671, 0xd143, {0x77359400}, 0x7, 0x9}) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:58:19 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000fdfdffff00"}) 08:58:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) [ 291.125800] binder: 12094:12097 ioctl 40046205 7 returned -22 08:58:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, &(0x7f0000000080)=0x80, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000240)={0x1, 0x15, 0xc, 0x10, 0x5, 0x9000000, 0x5, 0xea, 0xffffffffffffffff}) ioperm(0x3, 0x441f, 0x7ff) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0xffffffff}, &(0x7f00000001c0)=0x8) 08:58:19 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:19 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000fdfdffff00"}) [ 291.266431] binder: 12113:12118 ioctl 40046205 0 returned -22 08:58:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) flock(r0, 0x7) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x20400) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1b, 0x1d, "e8054d4c5573865e04355d9d8cea431559fd284c9ba8ae1dd18816739c41f304d59db5213141d01343524d20edb39a8595de8610046f45a2833a507252f5b1b4", "c1a13dd1ebd03a3481428805b1ad462b99d241ae742ff14064e2ea0d8580509a", [0x9, 0x7fffffff]}) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) inotify_init1(0x80000) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={0xffffffffffffffff, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:19 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000000)=""/5) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:58:19 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) [ 291.388933] binder: 12133:12134 ioctl 40046205 0 returned -22 [ 291.413047] binder: 12133:12135 ioctl 40046205 0 returned -22 08:58:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x6) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:19 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:19 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) [ 291.534495] binder: 12152:12155 ioctl 40046205 0 returned -22 [ 291.551671] binder: 12152:12161 ioctl 40046205 0 returned -22 08:58:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) getsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f0000000180)=""/203, &(0x7f0000000080)=0xcb) modify_ldt$write2(0x11, &(0x7f0000000000)={0x44a, 0x0, 0xffffffffffffffff, 0x400, 0x81, 0x0, 0x3ff, 0x375, 0x3f, 0x5}, 0x10) 08:58:19 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) r2 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x5, 0x4000) getsockopt$nfc_llcp(r2, 0x118, 0x8000000001, &(0x7f0000000480)=""/111, 0x6f) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x5, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) lookup_dcookie(0x8, &(0x7f0000000200)=""/9, 0x9) ioctl$TCXONC(r4, 0x540a, 0x0) 08:58:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x2, 0x408600) dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x5) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2, 0x1) write$FUSE_LSEEK(r3, &(0x7f0000000040)={0x18, 0x0, 0x2, {0x4}}, 0x18) 08:58:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x8, 0xff, 0x14, 0x101, 0x4d, 0x8, 0x5, 0x101, 0x3c20, 0x9, 0xffffffff, 0x7b}) 08:58:20 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') io_setup(0x9, &(0x7f0000000100)=0x0) io_pgetevents(r3, 0x1ff, 0x2, &(0x7f0000000140)=[{}, {}], &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f0000000200)={&(0x7f00000001c0)={0x1}, 0x8}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000080400000000000038030000000000004802000048020000380300003803000038030000380300003803000004000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="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"], 0x468) link(&(0x7f0000000000)='./control\x00', &(0x7f00006b3ff0)='./control/file0\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x80) dup2(r0, r1) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x4dda580e, 0x4) 08:58:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:20 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x80000) pwritev(r1, &(0x7f0000001480)=[{&(0x7f0000000380)="57e47679ff0cd2b28f4941d4832ac3328e27fd9481ac01f687b5eb3c47d273a92c39ccfc5bd15b86afe953f06ec1afe940cbf8c60c1ca4ca1f5f04651494e9a53d8813bd204b898d6d61750b4776e100e6d4ed7525b866a89db915e69cdda8e70952827be0cbd1957f8a62053ecf9669dd68f09e5690b5efef4959dba405dbc1f3cc5a361e7bc7d921cd8bf3255d09577f6e5d39c26e37058d18a3d48e7f27e318302c20bfd87f38c674b59f358c99ab9fea089c80413b36b404697a919ab6fb18eba949f7a00ae5c2148041a2e5aa1ad92523d725b918b24f04df4ba244c4", 0xdf}, {&(0x7f0000000480)="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", 0x1000}], 0x2, 0x49) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r3, @ANYBLOB="08002bbd7000fbdbdf250b0000001800030014000600fe8000000000000000080000000000aa28000100080005000200000008000500030000000c00070020000000060000000800080004000000380003000800030003000000080003000000000008000500ac1414bb14000600fe80000000000000000000000000001308000800070000004400030008000500e00000021400020073697430000000000000000000000000080007004e2200001400060000000000000000000000000000000001080007004e20000014000200080009001f00000008000500ff01000014000100080002007b0000000800050001000000"], 0xf8}, 0x1, 0x0, 0x0, 0x408d0}, 0x4000841) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000040)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000014c0)={'ip_vti0\x00', 0x3000}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:20 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1d) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x60000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xdc, &(0x7f0000000380)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, @in6={0xa, 0x4e20, 0x8, @mcast1, 0x2}, @in6={0xa, 0x4e20, 0x3096, @ipv4={[], [], @broadcast}, 0xfffffffffffffffe}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e23, 0x77fc, @mcast2, 0x9}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e21, 0x6, @local, 0x6}, @in6={0xa, 0x4e23, 0x3f, @local, 0x2}, @in={0x2, 0x4e24}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000240)={r4, 0x1, 0xffffffffffffffff}, 0x8) r5 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) [ 291.911129] binder: 12204:12205 ioctl 40046205 0 returned -22 08:58:20 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fd) pipe(&(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) bind$vsock_dgram(r2, &(0x7f0000001680)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000000)={0x0, 0x9, 0x2, 0x5f48, 0x7624e8aa, 0x9}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x5d21) 08:58:20 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000fdfdffff00"}) 08:58:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair(0x2, 0x80000, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0x75d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000080)=""/160) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x8, 0x22040) write$FUSE_OPEN(r4, &(0x7f00000001c0)={0x20, 0x0, 0x8, {0x0, 0x3}}, 0x20) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) [ 292.038687] binder: 12229:12232 ioctl 40046205 5d21 returned -22 [ 292.047491] binder: 12229:12234 ioctl 40046205 5d21 returned -22 08:58:20 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x7}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r3, 0x1}, &(0x7f0000000140)=0x8) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r2) 08:58:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000000)={r2, r0}) ppoll(&(0x7f00000002c0)=[{r2}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) ioctl$void(r4, 0x5450) ioctl$TCXONC(r4, 0x540a, 0x0) 08:58:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = semget$private(0x0, 0x6, 0x40) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000200)=0xb4) semctl$GETVAL(r4, 0x0, 0xc, &(0x7f00000001c0)=""/6) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000140)=0x8, 0x4) sendto$inet(r5, &(0x7f0000000280)="93", 0x1, 0x80fe, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) ppoll(&(0x7f00000002c0), 0x0, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r6 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x2280, 0x0) 08:58:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:20 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0xb, 0x6, 0x81, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDSETMODE(r2, 0x4b3a, 0x20) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:20 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r0, 0x80000) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x0, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x5) [ 292.320914] binder: 12262:12264 ioctl 40046205 0 returned -22 08:58:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xfffffd49) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) symlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='./file0\x00') r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:20 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:20 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) mq_timedsend(r0, &(0x7f0000000000)="f2968ceba3c1748ce6ca86b73a43e1f8102b2f35be6ef2f7df508aa2b5b20da0", 0x20, 0x8, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x1, 0x4) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000100)=0x0) syz_open_procfs(r3, &(0x7f0000000140)='net/ip_tables_names\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) [ 292.455607] binder: 12289:12292 ioctl 40046205 0 returned -22 [ 292.472436] binder: 12289:12294 ioctl 40046205 0 returned -22 08:58:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x7fe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) socket$rds(0x15, 0x5, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x117080, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000040)) geteuid() 08:58:20 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000fdfdffff00"}) 08:58:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x6, 0x1a1b42) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x3f}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000380)={r3, @in6={{0xa, 0x4e21, 0x1, @empty, 0x21}}, 0xfffffffffffffff7, 0x3}, &(0x7f0000000240)=0x90) r4 = gettid() kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r5 = epoll_create1(0x80000) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000280)={0x0, 0x0, {0x36, 0x38, 0x9, 0xb, 0x1, 0x200, 0x3, 0xd5, 0x1}}) r6 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) 08:58:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:20 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x200, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xfffffffffffffff7) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x40, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x7, 0x10001, 0x6, 0x4}, {0xd1, 0x3f, 0x9, 0x70}, {0x4, 0x3, 0xffffffffffff7216, 0x5}, {0x2, 0x3eb0, 0x5e, 0x3}]}, 0x10) 08:58:20 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:21 executing program 5: r0 = dup(0xffffffffffffffff) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f0000000200)=0x10) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000100)=0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000300)={@empty, 0x0}, &(0x7f0000000340)=0x14) bind$can_raw(r0, &(0x7f0000000380)={0x1d, r2}, 0x10) r3 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x7c, 0x2) sendto$unix(r0, &(0x7f0000000400)="97f9cbcf45e8e1a2476fd15667eaada8a25282d74bf550804d91038ab388325bfe07168a5ab762fd85eeadc5492d08d3be1e907d28468e957780266e87e00a94de6ec28ccee21b04c7c221aa80461364e179dde677e264fa9b95b9c33c762ee979e2813fe5eb503fbd7e7b18beeeae2152fa5ff305eeffdfa278370c3ae69eb097736d0aed91172fb922cebf6390055efadfe0377c882f6fac60ec359ebe00c4a18b2ebeb79885015a83020f3b2d04ec74d278c5a00dc1d02c0b10ef59c5b9725016ab5e5400e902110b2feca307a551d5340ea1b9", 0xd5, 0x20000014, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) r4 = perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0xfffffffffffffff7, 0xffffffffffffffd2, 0x100000000, 0x2, 0x0, 0x5, 0x1, 0x9, 0x40, 0xffff, 0x200, 0x0, 0xc51, 0x4, 0x3, 0x1, 0x8, 0x81, 0x4, 0x7, 0x6, 0x0, 0x80, 0x4a, 0x1, 0x3, 0x1, 0x0, 0x8, 0x2, 0x6, 0x6, 0x5, 0x6, 0x9, 0x200, 0x0, 0x687ddb73, 0x6, @perf_bp={&(0x7f0000000040)}, 0x300, 0xffff, 0x1, 0x6, 0x5, 0x4, 0x1}, r1, 0xf, r3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f00000003c0)={0x90000012}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x5e}) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, 0x0) getsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000240), &(0x7f0000000280)=0x4) [ 292.708298] binder: 12318:12322 ioctl 40046205 fffffffffffffff7 returned -22 08:58:21 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r2) 08:58:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000380)=""/4096) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x7f) ioctl$TIOCNXCL(r3, 0x540d) 08:58:23 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000000c0)='-wlan1\x00', 0x1) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000100)=0xa888) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x20, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e22, 0x80000001, @dev={0xfe, 0x80, [], 0x15}, 0x7fff}, {0xa, 0x4e21, 0xffffffff, @empty, 0x8}, 0xffffffff00000001, [0x7, 0x7f, 0x5, 0x400, 0x4, 0x0, 0x7, 0x1e6]}, 0x5c) 08:58:23 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') epoll_create(0xf98) dup2(r0, r1) 08:58:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000380)={0x0, {{0xa, 0x4e23, 0x20, @dev={0xfe, 0x80, [], 0x1c}, 0x800}}, 0x1, 0xa, [{{0xa, 0x4e20, 0xc1, @dev={0xfe, 0x80, [], 0x21}, 0x1}}, {{0xa, 0x4e21, 0x2, @local, 0x200}}, {{0xa, 0x4e23, 0x6, @mcast2, 0x6}}, {{0xa, 0x4e22, 0x2752, @dev={0xfe, 0x80, [], 0x1a}, 0x6}}, {{0xa, 0x4e23, 0x6, @empty, 0x6}}, {{0xa, 0x4e21, 0x71, @local, 0x3c0e62fa}}, {{0xa, 0x4e21, 0x200, @ipv4, 0x5}}, {{0xa, 0x4e20, 0x6, @local, 0x20}}, {{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0x10000}}, {{0xa, 0x4e23, 0x3ff, @loopback, 0x2}}]}, 0x590) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r1, &(0x7f0000000000)={r1, r0}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x4000, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f00000001c0)) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r5 = syz_open_pts(r0, 0xc0100) ioctl$TCXONC(r5, 0x540a, 0x0) 08:58:24 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) [ 295.763338] binder: 12361:12363 ioctl 40046205 0 returned -22 08:58:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r0 = epoll_create1(0x80000) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000000)=""/69) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) 08:58:24 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000080)='\tD\n:', 0x4, 0xfffffffffffffffd) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000180)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@rand_addr}}, &(0x7f00000000c0)=0xe8) r3 = getegid() keyctl$chown(0x4, r1, r2, r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:24 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000100)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000140)={{0x40, 0x76e}, 'port0\x00', 0x8, 0x4, 0xa0000000000000, 0x2, 0xf3, 0x8, 0x101, 0x0, 0x0, 0x800}) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:58:24 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) [ 295.935184] binder: 12390:12393 ioctl 40046205 0 returned -22 08:58:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10200044}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x38, r2, 0x202, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r1, &(0x7f0000000000)={r1, r0}) r4 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r5 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x40, 0x20180) connect$l2tp(r5, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @local}, 0x1, 0x1, 0x0, 0x1}}, 0x2e) r6 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) 08:58:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8, 0x80) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000080)={0x8, 0x9, 0x1}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400202) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0), 0x0, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:24 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:24 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) [ 296.152901] binder: 12417:12418 ioctl 40046205 0 returned -22 [ 296.177005] binder: 12417:12424 ioctl 40046205 0 returned -22 08:58:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x8243, 0x2000) ioctl$sock_ifreq(r1, 0x8921, &(0x7f0000000040)={'veth1_to_bond\x00', @ifru_addrs=@ethernet={0x6, @remote}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000003c0)=@assoc_value={0x0, 0x8}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={r4}, 0x8) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000280)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000380)={r5, r6}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000300)={r5, r7}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) socketpair(0x13, 0x7, 0x2, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xb) setsockopt$inet6_int(r1, 0x29, 0x78, &(0x7f0000000340)=0x80000001, 0x4) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f00000001c0)={0x400, {{0x2, 0x4e23, @local}}}, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000002c0)={'team0\x00', r8}) 08:58:27 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x5}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000100)={r3, @in6={{0xa, 0x4e21, 0x10001, @dev={0xfe, 0x80, [], 0x18}, 0x81}}}, 0x84) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r2) 08:58:27 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000fdfdffff00"}) 08:58:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0), 0x0, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x1, 0x3) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000001840)={0x0}, &(0x7f0000001880)=0xc) r4 = getuid() r5 = getegid() r6 = getpid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000018c0)={{{@in=@broadcast, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f00000019c0)=0xe8) getgroups(0x5, &(0x7f0000001a00)=[0xee01, 0xee01, 0xee00, 0xee00, 0xee00]) r9 = getpid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002dc0)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f0000002ec0)=0xe8) lstat(&(0x7f0000002f00)='./file0\x00', &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgid(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002fc0)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f00000030c0)=0xe8) r14 = getegid() r15 = getpgid(0x0) fstat(r1, &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000003180)='./file0\x00', &(0x7f00000031c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000003240)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003280)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f0000003380)=0xe8) fstat(r1, &(0x7f00000033c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000003440)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003480)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000003580)=0xe8) lstat(&(0x7f00000035c0)='./file0\x00', &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000003740)=[{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000380)="e9860c85225c93859d2ab00f9c8108f764e6d430101874c874928fdd6c0bf3b3bae6bc61f4275ea1e1f1fea35659fb81dfd3e6a846daf8791e70f447ac86c340a82ee079147a424369ea34f9e97604e8a387492ee615e9cdd619d66aed4237f06854f4eaeda09c16eecd535f55834fe8021c6501ff0e775dc601062a4466d46644f77730a8b093e5b5bdc5f3765ec417a78a09ddd73c77e81b1e78f2afc76a7392a9c091ca55253267571ee2711ad84f356502ebcfc2d9e04bca80898526044c01971f568d06e33bc6157d7afc1af6773d2362a208fc0746b87884cc8e8dd59ea5e05706d918f188373d20b217a7845b5b9ffbe3", 0xf4}, {&(0x7f00000000c0)="105cc2713fa1d23a274f", 0xa}], 0x2, &(0x7f0000000480)=[@rights={0x18, 0x1, 0x1, [r0, r1]}, @rights={0x28, 0x1, 0x1, [r0, r1, r1, r0, r1]}, @rights={0x30, 0x1, 0x1, [r1, r1, r1, r0, r1, r1, r1]}], 0x70, 0x10}, {&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000000580)="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", 0x1000}], 0x1, 0x0, 0x0, 0x8004}, {&(0x7f00000015c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001640)="63668954a721ec25d4752f7511ffc797fb5622077f100bb858e74c638e8a", 0x1e}, {&(0x7f0000001680)="6afeb88c7362a9d83565d07026e81d8a16317c2cf429c83d0d5977f2", 0x1c}, {&(0x7f00000016c0)="bc2d11fa8e013b121056b7784ff16516cc0c58cbc586d9109934c696b74cd6", 0x1f}, {&(0x7f0000001700)="9c14211e9fe941edbd72ffb7289b121f9effb27370da3e461218de40d4d9f9f822895fbbf6d64247dd3c8828203880ab60e346e30f848d1575041246597945974f5a3fbcdc9789bc4ccb00c274302c5efc368d11eb1555e86de215fcac378ea89a56626b8208b2ed7b7b5b634c1b2e8cf16a6d2895e4bd58ac9daa3a4bdc6966fca6077955d50b0622e379bb4aa949f1d3ad0422cf99a8e786b2422ffad00d03e760d62e4248a95d5121db442562a84a37190a9d7394dd0778b174e10e3edec75a89e64b7196a5d42a9e2ade18f1063520c5e700", 0xd4}], 0x4, &(0x7f0000001a40)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}], 0x40, 0x4000000}, {&(0x7f0000001a80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002d40)=[{&(0x7f0000001b00)="25d3ee076223a5380d62c7ff5ba91a37535b4715a574ad4c7fc3e2dd68fd6393e2", 0x21}, {&(0x7f0000001b40)="86e82f5458804c8067a5f452d5643490aaf4a76b22ba972fec1ec40dfa341a64b0de3818c4e212b547a5b8c30b9b7904bf38aff64619b0a0185f1da25ef70a8063ba88925cc7eca152cfdf34bee8af902f4819338e6fe0b3d95db2d4093a4d2a7f5d487e4efcd0a57b055750c6204672ad739c2a8fb973eaf50725e53b4927c3104206e9b1e401eb63cf272da40fd00fc269cd48619c0c9a4c40b29f3fc2671e5a338dc28ce10058fb211ea7ca6553f970ff44d8872a583947c335dc78fa14a6571aa4f34a59ee695f94fc1e80c1c1c7b4cef8e5c2aaf5420774c7f68533a52beba8b8845fbebb0a", 0xe8}, {&(0x7f0000001c40)="bb9a75c4541d2f30fd04d3e8a10ff4dde1ce0ba71da6bc484a61a0e282c6aaeb2006e1904d839808cd540bf3bc5ba6eb076bb3a50869a4edc9f582758d052e65a24a825d3b9c318998fb0ac5213ad4bb2ec71ee1d37d04cfff5085d68c38a11b6a6e5eba7fb18f1984c9e9d8d8b7a7b74c16d4e55cc7bef1b48af1db62bb", 0x7e}, {&(0x7f0000001cc0)="50649d9a46aeea3ae8bb25668a395d03ee705a924e17da99d19732c9c0000d47c9b505716c5a34da97b606d1850b", 0x2e}, {&(0x7f0000001d00)="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", 0x1000}, {&(0x7f0000002d00)="549184a6292da0fa235e91eb91a8e047f78dfe0195665e5cd05f80012e0186dc5ad1453389b72d31e5d9a7d980574ab8698a397cd5", 0x35}], 0x6, &(0x7f0000003680)=[@cred={0x20, 0x1, 0x2, r9, r10, r11}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @rights={0x18, 0x1, 0x1, [r0, r1]}, @cred={0x20, 0x1, 0x2, r15, r16, r17}, @cred={0x20, 0x1, 0x2, r18, r19, r20}, @cred={0x20, 0x1, 0x2, r21, r22, r23}], 0xb8, 0x4000}], 0x4, 0x44050) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r24 = gettid() kcmp$KCMP_EPOLL_TFD(r24, r24, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r25 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r25, 0x540a, 0x0) 08:58:27 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) [ 299.225132] binder: 12448:12455 ioctl 40046205 0 returned -22 08:58:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup3(r1, r1, 0x80000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x430140, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x8, 0x101000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xfa) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000000)={0x8, 0xffffffffffffff00, 0x7, 0x7, 0x3, [{0x4bb4, 0x4, 0x998, 0x0, 0x0, 0x800}, {0x3ff, 0x9, 0xff, 0x0, 0x0, 0x1600}, {0x69ae, 0x100, 0x942d, 0x0, 0x0, 0x304}]}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000e0ffffff000000000000000000000000000000add7e8693119c90dc1465fdb4eb95e61f05817543d3716fdb352615600f8e9b68d141bf2efb76b98295bea67504f99e706db093e414265eeb5e5c1a9d209b56a35333984494c53253e51ef289c6d0d8d444c873f9b7660fe783d00d22bdba0b247d9890c4e6c35dd1461be88a4c88e6d8d8795f8fc3c0bbf6da6a241d73431ed319e05c3065dee327241bcc8670d6c7fe0b3b31773dc0a087fb30330"]) 08:58:27 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) [ 299.389557] binder: 12472:12476 ioctl 40046205 0 returned -22 08:58:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0), 0x0, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x5, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:27 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:27 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000140)=""/168, 0xa8) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x3}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x6) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r2) 08:58:27 executing program 5: pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x84800) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000300), &(0x7f0000000340)=0x40) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x4, 0x3, 0xf5, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write2(0x11, &(0x7f0000000240)={0x100000001, 0x1000, 0x1000, 0x2, 0x3f, 0x4, 0x8, 0x101, 0xbb, 0x9}, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xbc8}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000180)={r5, @in6={{0xa, 0x4e23, 0x20, @mcast1, 0x8}}}, 0x84) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xf, 0x7fffffff, 0xffffffff, 0x3ff, 0x3d, 0x1}, 0x2c) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000000)) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x6, 0x1, 0x1000, 0x0, r5}, 0x10) 08:58:27 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xffffffffffffff8e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) sendmsg(r1, &(0x7f0000000780)={&(0x7f0000000380)=@ipx={0x4, 0x800000, 0x2, "9c7fc04625eb", 0x4}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000280)="876db6bde98f", 0x6}, {&(0x7f0000000400)="5c5394cfa25eef461e7cfefbab24fda3b7465f435c1a64151d9828eb6b0d114dc3795731f8981740350caffc007db10614c9601d81a5e78f6bc7d51ce0d3d0c18c422172b8064fe23edc257d192d18c59dedd53a58c7375e78c284d9e610bb6e259996b46a03c143c0a805db64e89745d3", 0x71}, {&(0x7f0000000480)="6fd47dd298bae1f7b3b9b8422c7cfde16cb048803636b5447b3ff980e1fd951e6f854c9bb3590d2679955fb9234476c62448501a44c1f6ece4e975d259664f2ca845e2aa1abdfa7cff11448bf00c0e2f6b190329b31909a0894163b70db1ce392bc83a2da0d8ede580dff9c332893dbdd63236", 0x73}, {&(0x7f0000000500)="e816a18db06e01dbb1e6b134e8cf09777356d1c173b1967ef444", 0x1a}, {&(0x7f0000000540)="825dd6d6c5a986a55c36890ab934368c6dac7aacd5267dfd2c31efdf8423b6deb35c54fa18ea95eda9f906ff75af50d9724ccd802dee0a3a2f1b147c060ecd8769d9f14eb897bbef3aca5861f8f00691d4b3a52db97b4c0f3861fb3d601a8644639b235a3838b272ca60290b1dc83646cf47c0311ec2c3dcb39a2221beb1d8bc9ef7e6ef2c89f2844e2e53762527a3cc672df7f61a1710249ab7e728747e6f6e8f46cbdb3dd439a056498b786303a00093285d10355e92f47cdb343dc019256f4c06d291ac8896ee56a29357a861333036c3f322dc63a5", 0xd7}, {&(0x7f0000000640)="80d1e7ae191962b4ce", 0x9}, {&(0x7f0000000680)="27bf0e3689631e12d73b18c0d5a4c8d660df3ebfc144ef0d39afd2339de46ca1cd8eea6703b29a510a551a", 0x2b}, {&(0x7f00000006c0)="25bc79c4f3853b614170bcad37ba98d72d3dfe1fdf89a7ce84bb1dd5923c152527495769c7d4045d61174ccf99b971b8", 0x30}], 0x8, 0x0, 0x0, 0x20000885}, 0x40) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r1}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x200, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x200800, 0x100) renameat(r3, &(0x7f00000000c0)='./file0\x00', r4, &(0x7f0000000240)='./file0\x00') ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r5 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) [ 299.580327] binder: 12501:12502 ioctl 40046205 0 returned -22 08:58:27 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 08:58:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x2000000}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x5, 0x1) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x4, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x9000000000000000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) [ 299.707243] binder: 12518:12520 ioctl 40046205 0 returned -22 08:58:28 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0xad8, 0x20000) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4000, 0x0) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000040)={0xfffffffffffffff7, 0x9a9, 0xac0}) 08:58:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000000)='/dev/binder#\x00', 0x1) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x5, 0xe8d, 0xfffffffffffffffd, 0x7, 0x60, 0x7b}, 0x1c) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) [ 299.837394] binder: 12536:12537 ioctl 40046205 0 returned -22 [ 299.916061] binder: 12547:12549 ioctl 40046205 0 returned -22 08:58:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0xc00000}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23, 0x400, @dev={0xfe, 0x80, [], 0x1e}, 0xc9}}}, &(0x7f00000000c0)=0x84) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:28 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdfdffff00"}) 08:58:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/79, 0x4f}], 0x3, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:28 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x8000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, 'posix_acl_access)^'}}, {@mmap='mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '-}vboxnet0+'}}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}]}}) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r2) 08:58:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000080)=""/116) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000280)={0x4, 0x8, 0x8, 0x7, 0xfffffffffffffffc, 0xfff, 0x80000001, 0x4, 0x5, 0x1, 0x100000000, 0x8001}) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$l2tp(0x18, 0x1, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000240)=0x30) 08:58:28 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) [ 300.386444] binder: 12567:12571 ioctl 40046205 0 returned -22 08:58:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000001c0)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000180)=0x80, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@remote}}, &(0x7f0000000280)=0xe8) sendmsg$nl_netfilter(r4, &(0x7f0000001a00)={&(0x7f0000000240), 0xc, &(0x7f00000019c0)={&(0x7f0000000480)={0x1504, 0x8, 0xb, 0x0, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x8}, [@generic="54352e236e5c379524c6926bff8cdb99fb71e36257204ce66d2ff38defcbd2448f7a066d5c05e977209bde526a0bccb09a12e318555365a1f0b7b52f79c44a62ce6175388845073b1d4e6846e530f5eebd3f31bc82c0fcdfb333142bb52f45ac39ababa79fbc6d3bb3dac2b49eb1ed09ecc6b422f459b9d737", @generic="0462c638ba031b36bc6e58fb5feb314af8eeca4601a0d72d04f82fcbee0de3fc088b2eaa93402c1c34641281e9bbea888ac72921f6138860b1eb0c0a0de3cdfb8d36a672cccf8965769df07c9025", @generic="ace932da1e7c67b5f6f9f40dc71cf79f166217c86606a9f08468f134ecfccb98f1b8057321df567a", @typed={0x14, 0x3a, @ipv6=@remote}, @typed={0x8, 0x3f, @uid=r5}, @generic="d408a09ed75d901b07dcf621e59c5150e16549aabf47d910f3f6a6a743e3ad4d64446f554c4f587dcbd121697cb6faf7bd5f9fd994a123232a728427735add7325f26554c9b14ae8664db0fe7b98d177fc9ad03b2a7ac9f72749f33a274d086504b5f51f34598a7f18eb5b53cffb16ce64dabf6037e768ec72c642f42bd5066e47796edb2d61b81fabe9bf0fe91cdc0581e9e49b717f01ca6e9da0fea4342976c78c90a53608b490d1687ec6be9a6d7a45dcc186f7884c30c9bb3c9816c33da16787df94d010eda7b6b865cb3c92ef52da2e932132c7db4cabaef76acf4d00f57b7e19d8a055317c9dffd95925724b58e798f7ff", @typed={0x8, 0x40, @pid=r2}, @nested={0x1204, 0xc, [@typed={0x18, 0x4e, @str='&!em1/em0(eth0\'$@\x00'}, @generic="291b2bbbd66eb967b58f29fe60c06eccc1d57d12b23b36e13d75561883420b13d8e559a0b9b34a15a84a9155c0ebc260eb7d59085ac1251140ae92b0a6b59d5d8b06ed1fc79c5535d13258f738e3e815372ac93a6bbae094cd4b601804bb22c788ad21a552d72559c37f0d4e8d0790fbde99bbe5497d6e4816ded5cb44fe789e89b0024b1a8156737e7bc1aa07de176315cf6b800e5fbe1dd1a3be449475d0d21b6f0e93a6a31c82c5d53676218cc66188552c6a26e3ad38fe772b367fccf141d5bd5d35e87c6fc16c4ade2bf5e9b89251d74d07f76d5a73960c8fce7973cc39e943b94f8193cf5dd97ab2ff", @generic="7bb0f4fc672adf5bb0c93ecf0c52ac569660f1d0807efd48ec0b5a2111eaf453b4b6e6e98b2feb4f880e45156d4eee7d63a0ca751ce90fcb52e91a6c77fe20945cf53d2e0360018d5b099ef13998a3990fc52fecaf55aa19a2dc12d0fc2c5cb0941aeaa6c7b468c0795f43b7806a93c15c3a29901e031d05c9fb1afc5f949d8d9ac4237d5ccfcca01c800d724776db0ff5ff938edb1aa307ed61013a289a401547026370638301ea43e645bdb6d5dce485ab8f3e46ae6f18dec8ba63cd2db051d6530454a90525a4e6f16375341a55b53d2814e5d1a12f973d0967f6f1f41a396c87b27fe32d70c8a08a28877741b8275afad8b6e1d8075a02294e", @generic="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"]}, @generic="96320ea58e4c29984635ca02e5187eeaaf0ecc2c4905b23d35f4892e29b975b40d5af9f19df820cd467087b261cdf5fa898750fabc3983685af212353b890bf6cce43c940c74e3deea8ee42e9e71ff8171eb386fe39f5e49dcc73288cf1c480c5a230c9f8ff1af69960d4fae6f35ef779ab93994196c05af36cb094d26048c0418f6fc60c2478a63a352e13c3f00b502e70adae56255c4f70ef99d201f4bdcdac7c6a4ec903eadd64a080afd687e6f98bc6450bb03b747f78aa11f88fec6b979e852afc67ec5da664151bcaf265fb44b4f7b8fbe0de91322ae478ea84fae2c87eaff"]}, 0x1504}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 08:58:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:31 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdfdffff00"}) 08:58:31 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xcc, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r1, r1) dup2(r0, r2) 08:58:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000080)={0x9, 0xa82, 0x8, 0x9, 0x4, 0x6, 0xffff, 0x401, 0xef, 0x3, 0x0, 0x200}) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f00000000c0)={r1, r1, 0x2}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/171, 0xab}], 0x2, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:31 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xffffffffffffffff, 0x40840) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r3, 0xffff}}, 0x10) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) [ 302.808135] binder: 12598:12599 ioctl 40046205 0 returned -22 08:58:31 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r1 = gettid() r2 = perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x1f, 0x2, 0x800, 0xc0000000000, 0x0, 0x1, 0x60000, 0x5, 0x5, 0x9, 0x2, 0xbf4, 0x5, 0x9, 0x4b, 0x0, 0x7, 0x8, 0x5, 0x80000000, 0x100000000, 0x5, 0x9, 0x10001, 0xfffffffffffffffa, 0x8, 0xff, 0x3, 0x6, 0x7f, 0xb7, 0xffffffff, 0xffffffffffffffff, 0xaa34, 0x8, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x8000, 0x3, 0x2, 0x7, 0x9, 0x100000001}, r1, 0x7, 0xffffffffffffff9c, 0x1) r3 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x1, 0x200001) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e21, @rand_addr=0x7}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e22, 0x0, @mcast1, 0x3}, @in6={0xa, 0x4e22, 0x390b521, @ipv4={[], [], @remote}, 0x598}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, [], 0x18}, 0x5}, @in6={0xa, 0x4e21, 0x7ff, @mcast2, 0x6}], 0xb0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x401) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:31 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x2b0, 0x5, 0xc6, 0x40000000000001bc}) [ 302.988988] binder: 12631:12633 ioctl 40046205 0 returned -22 [ 302.999842] binder: 12631:12633 ioctl 40046205 0 returned -22 [ 303.068492] binder: 12647:12648 ioctl 40046205 0 returned -22 [ 303.083853] binder: 12647:12648 ioctl c04064a0 20000100 returned -22 08:58:31 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@local, @in=@remote}}, {{@in=@remote}}}, &(0x7f0000000000)=0xe8) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r2) 08:58:31 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x82d5) 08:58:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffff207, 0x680100) pipe2(&(0x7f0000000340), 0x80000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000400)={0x4, 0x70, 0x2, 0x6, 0x4, 0x7, 0x0, 0x63f, 0x0, 0xf, 0x7, 0x9, 0x1, 0x2, 0x200, 0x1, 0x8, 0xffffffffffffff7f, 0x7, 0x9f5, 0x5, 0xdb3, 0x6f8, 0x7f, 0x1, 0x3, 0xc48, 0x100000001, 0x4, 0x7, 0xea9, 0x3ff, 0x40, 0x7, 0x100, 0xbfd5, 0x0, 0x7ff, 0x0, 0x5, 0x0, @perf_bp={&(0x7f00000003c0), 0x1}, 0x100, 0x1, 0x8, 0x3, 0x20, 0x3ff, 0xffff}, 0xffffffffffffffff, 0xc, 0xffffffffffffff9c, 0xb) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xffffffff) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000002c0)='/dev/zero\x00') setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000280)=0x5, 0x4) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x3}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000180)={r4, 0x7}, &(0x7f00000001c0)=0x8) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400080, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000200)={r4, 0x7}, 0x8) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000040)={0x8, 0x1, 0x9, 0xdfd6, 0x1ff}, 0xc) [ 303.247036] binder: 12659:12661 ioctl 40046205 0 returned -22 [ 303.256890] binder: 12659:12661 ioctl 40046205 0 returned -22 08:58:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x200400) sendmsg$nl_netfilter(r3, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="0401000006001800ef947e69f248b636bd4b39af720cf05c586836bdc5ed3d0781196a09ab03de73bf5a07effafe0819ac942b816d4cfc37faa973ead5c859855135f0eff6145338e990076e49c59c672511e05e63944fae40f6dd2a3b141cb0da8afb9896ffcad6b3e12b6ecb10522866f619deebec201ca7c80e6de2cf0713a43cea9d21daa27a6c3dfb134e1e23a5220d9e1d3426a97fcc44f7dbcce4787bf30bd86051ee02279438852be875f94845d24f76f59a6a57b857e0bb91673d3bd9960ffdfc1b19fd294ea69f37d98818e61b0793012ac4c575bb2ec985e3007e26ec6f0e00000594be50362ac12d498ec89dc91d734fd545ac6023a0e46f6e6e6c40640128109011d89f938c6daf9d88a5ea730c1664b02e4500052bf541b7ddd7cb2f47aa72b494f183114f91785ab80f5d999a9f317501b7d9c240368321eeff60667ff67d562befc3111b62cd0f00d0f095f5ca617aee648fe9c8388e15db136a99cef2231c2ed481704953085a3304f3c7f5ebe122af33fa53a3052e043c4bac67fae0817ad8a6547ebbc4cbe83c3190d412f93f9cbae65b5690de102d88ee9c50210d6800197b2d02f556e2a28b40b61c0eb4754620b657c7bc03fa1f879c7be5841f3dd6b5808c8ce100000000000000000000000000000000"], 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$sock_netdev_private(r3, 0x89fe, &(0x7f00000004c0)="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") 08:58:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:34 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) name_to_handle_at(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0xfc, 0xfe, "95ccd893da4ff406dae7fb17e6b65b0527c86f47e21f8b4b95920ec5126a25fa9dfab99bace98be8ce59fc286295aaca09ef583dbabc8ce4c5c26f41269ef84ada5a670de9ef6f23baf376db83c26821727ecb3293d4145536283fcc35908c66e60281b7f68a27a5ccf07545f40717f7846ad6e9e46c078e4dbc314778a6382984f1c8688140dd9d26bb49209c826bc4822cf28637295c3bcf53bd3bfbc4d729535f92c36e7b1f9c39b1f02a20b3c8b4fd9e0125882a22bbe7c2c7acf37fb581e76a49bd9d10d005637ed6f427b6ee9afd3fb667cd9fd7cf8b455a524154a79a7308629cdf20aee198e501e2746b1b8f7f01461a"}, &(0x7f0000000280), 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xff) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) setsockopt$inet_dccp_buf(r3, 0x21, 0x2, &(0x7f0000000040)="8c3a659730de31a30cc69be9c72b8f9723a4afd9d38a4b3716d50c485342101af64d04c46ded2fe96d6120d4ffca58220e1b517c76ebac93e0e0259c26d7714083ea0daa064fb0bf8cd8d62bea898be9da3e00a052a0b6c0b1b68d8405f9d80c5c037ffda7c3fa986fe86da9bb758e687194f1ecf72bf367901cd328c5f66f276436b5c246e3a4123780d3e9136e893cdd3f13e06c50b6e2260ba0", 0x9b) 08:58:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) connect$vsock_dgram(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711, @host}, 0x10) r2 = gettid() inotify_init() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:34 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r2) r4 = fcntl$getown(r1, 0x9) fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x3, r4}) 08:58:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1f, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x10000, 0x0) r5 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x1, 0x40000) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x10000, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x80, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x400, 0x0) r9 = syz_open_dev$usb(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x6, 0xc000) r10 = memfd_create(&(0x7f0000000280)='/dev/binder#\x00', 0x5) r11 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x40, 0x0) r12 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x203, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x88, r3, 0xc04, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x81) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:34 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdfdffff00"}) [ 305.827836] binder: 12681:12682 ioctl 40046205 ff returned -22 08:58:34 executing program 5: syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x200000) signalfd(0xffffffffffffffff, &(0x7f0000002680)={0xfffffffffffffff9}, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003c00), 0x800) r1 = dup(r0) recvmmsg(0xffffffffffffffff, &(0x7f0000004880)=[{{&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/234, 0xea}, {&(0x7f0000000080)=""/53, 0x35}], 0x3, &(0x7f0000000100), 0x0, 0x10001}, 0x7}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000001280)=""/9, 0x9}, {&(0x7f00000012c0)=""/18, 0x12}, {&(0x7f0000001300)=""/63, 0x3f}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/159, 0x9f}, {&(0x7f0000002400)=""/223, 0xdf}], 0x6, 0x0, 0x0, 0x4}, 0x1}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002580)=""/45, 0x2d}, {&(0x7f00000025c0)=""/139, 0x8b}, {&(0x7f0000002680)}, {&(0x7f00000026c0)=""/24, 0x18}, {&(0x7f0000002700)=""/245, 0xf5}], 0x5, 0x0, 0x0, 0x6}, 0x20}, {{&(0x7f0000002880)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/135, 0x87}, {&(0x7f00000039c0)=""/148, 0x94}, {&(0x7f0000003a80)=""/150, 0x96}], 0x4, 0x0, 0x0, 0xc6c9}}, {{&(0x7f0000003b80)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000003c00), 0x0, 0x0, 0x0, 0x6}, 0x55}, {{&(0x7f0000003c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000003cc0)=""/126, 0x7e}, {&(0x7f0000003d40)=""/64, 0x40}, {&(0x7f0000003d80)=""/63, 0x3f}], 0x3, &(0x7f0000003e00)=""/45, 0x2d, 0x1f}, 0x1000}, {{&(0x7f0000003e40)=@nfc_llcp, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000003ec0)=""/138, 0x8a}, {&(0x7f0000003f80)=""/28, 0x1c}], 0x2, &(0x7f0000004000)=""/200, 0xc8, 0xfffffffffffff000}, 0x400}, {{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000004100)=""/42, 0x2a}, {&(0x7f0000004140)=""/152, 0x98}, {&(0x7f0000004200)=""/22, 0x16}, {&(0x7f0000004240)=""/98, 0x62}], 0x4, &(0x7f0000004300)=""/4, 0x4, 0xfffffffffffffa06}, 0x9}, {{&(0x7f0000004340)=@ethernet={0x0, @random}, 0x80, &(0x7f0000004740)=[{&(0x7f00000043c0)=""/15, 0xf}, {&(0x7f0000004400)=""/233, 0xe9}, {&(0x7f0000004500)}, {&(0x7f0000004540)=""/38, 0x26}, {&(0x7f0000004580)=""/85, 0x55}, {&(0x7f0000004600)=""/152, 0x98}, {&(0x7f00000046c0)=""/89, 0x59}], 0x7, &(0x7f00000047c0)=""/159, 0x9f, 0xffffffffffffffc1}, 0x97e2}], 0x9, 0x40010001, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000004ac0)={@remote, @mcast2, @mcast1, 0x5, 0x798f, 0x4, 0x0, 0xaf, 0x20082, r2}) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0) 08:58:34 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) memfd_create(&(0x7f0000000040)='/dev/binder#\x00', 0x4) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x80, 0x10000, 0x9, 0x8, 0x0, 0x4, 0x2802, 0x9, 0x100, 0x8, 0x80000001, 0x401, 0x7, 0x9, 0x6, 0x5, 0x20, 0x8, 0xffffffffffffffc1, 0x3, 0x20, 0x101, 0x0, 0x0, 0x8, 0x7, 0x100, 0x0, 0x401, 0x3, 0x7, 0x4, 0x7, 0x47, 0x6, 0x2bfb, 0x0, 0xad, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0x10b4, 0x2, 0x2, 0x5, 0x100000001, 0x1, 0x3ff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) [ 305.952565] binder: 12703:12705 ioctl 40046205 0 returned -22 08:58:34 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e23, 0x8, @empty, 0x80000000}, {0xa, 0x4e23, 0xc10d, @dev={0xfe, 0x80, [], 0x1e}, 0xffff}, 0x6, [0x80000001, 0x10000, 0x6000000000000000, 0x80000000, 0x1, 0x1, 0x4, 0xfdc4]}, 0x5c) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) [ 306.070641] binder: 12720:12723 ioctl 40046205 0 returned -22 [ 306.079803] binder: 12720:12723 ioctl 40046205 0 returned -22 08:58:34 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x430, 0x18200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x80000000) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000040)) 08:58:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0), 0x0, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x2}) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x9, 0xfffffffffffffff8, 0x7, 0xffffffffffffff01, 0x1, 0x81, 0x80, 0x40, 0xffffffffffffff7f, 0x8b, 0x6, 0x1}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) process_vm_readv(r2, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/42, 0x2a}, {&(0x7f00000001c0)=""/13, 0xd}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/165, 0xa5}, {&(0x7f00000004c0)=""/173, 0xad}, {&(0x7f0000000580)=""/46, 0x2e}, {&(0x7f00000005c0)=""/84, 0x54}], 0x8, &(0x7f0000001900)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/118, 0x76}, {&(0x7f0000001740)=""/93, 0x5d}, {&(0x7f00000017c0)=""/12, 0xc}, {&(0x7f0000001800)=""/204, 0xcc}], 0x5, 0x0) ioctl$TIOCLINUX6(r3, 0x541c, &(0x7f0000000080)={0x6, 0x10001}) 08:58:34 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x1) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000140)='./control/file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:58:35 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write$P9_RLOPEN(r0, &(0x7f0000000000)={0x18, 0xd, 0x2, {{0x30, 0x2, 0x5}, 0x10000}}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x5, 0x10100) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) [ 306.752946] binder: 12743:12745 ioctl 40046205 0 returned -22 [ 306.763040] binder: 12743:12751 ioctl 40046205 0 returned -22 08:58:35 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) 08:58:35 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) [ 306.896255] binder: 12773:12774 ioctl 40046205 0 returned -22 08:58:35 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0), 0x0, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) [ 306.965642] binder: 12783:12785 ioctl 40046205 0 returned -22 08:58:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$sock_int(r2, 0x1, 0x3f, &(0x7f0000000000)=0x2, 0x4) [ 307.080305] binder: 12798:12799 ioctl 40046205 0 returned -22 08:58:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x50080, 0x40) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f00000000c0)={0x2, 0x8000}) write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz1\x00', {0x7ff, 0x80000001, 0x80, 0x8}, 0x53, [0x1, 0x4, 0x7fffffff, 0x2, 0x1, 0x3, 0x9, 0x8, 0x200, 0x400, 0x9, 0x3, 0x0, 0x4, 0xfffffffffffffff7, 0xfff, 0x200, 0x100000000, 0x6, 0x9, 0x5, 0x7f, 0x0, 0x9, 0x8, 0x2, 0x5, 0x9, 0x9, 0x0, 0x1, 0x1, 0x401, 0x401, 0xfffffffffffffc00, 0x7, 0xb7bc, 0x30c0d047, 0x8000, 0x8, 0x20, 0x1, 0x0, 0x7fff, 0x9, 0x0, 0x5, 0x5, 0x2, 0x30, 0x6, 0xe2, 0xffff, 0xffff, 0x4, 0x7fffffff, 0x3, 0x59, 0x100000001, 0x4, 0x6f, 0x7ff, 0x0, 0x3], [0x4, 0x3ff, 0x20, 0x5, 0x8, 0x8, 0x0, 0x4, 0x5, 0xffffffffffffffa7, 0x6d, 0x5, 0x0, 0xff, 0x3, 0x5, 0x927, 0x8, 0x7f, 0x2, 0x81, 0x4, 0xde6c, 0x4, 0x1, 0x1, 0xffffffff, 0x5, 0x0, 0x6, 0xffff, 0x7f, 0x2, 0x7, 0x9, 0x0, 0x7, 0x263, 0x9, 0x9, 0xffffffffffff7831, 0x8001, 0xe00000, 0x7, 0x2c9b, 0xcd4, 0xffffffffffff0000, 0x7, 0x3b31, 0xff, 0x0, 0x7fffffff, 0x0, 0x7, 0x7, 0x4, 0x787e, 0xfffffffffffffffb, 0x5, 0x10001, 0x3, 0xb43a, 0x7, 0x1ff], [0x0, 0x0, 0x5, 0x1f, 0x0, 0x4, 0x6f50, 0x7348, 0xfffffffffffffffe, 0x9, 0x7f78f4a7, 0x660, 0xff, 0x58, 0xaa, 0x3f, 0xfff, 0x0, 0x2, 0x4eb6, 0x1f, 0x5, 0x1, 0x8001, 0x7fffffff, 0x0, 0x3, 0x80000001, 0x4000000000000, 0x80000000, 0x5, 0x20, 0x20, 0x3, 0x7ff, 0x81, 0x8, 0x6, 0x0, 0x3, 0xff, 0x6, 0x20, 0x10001, 0xfffffffffffffffa, 0x1, 0x0, 0x80000000, 0x3, 0x7, 0x8, 0x0, 0x2, 0x1ff, 0x40, 0x7, 0x2, 0x7, 0x2, 0x4, 0x45a, 0x8001, 0x7fff, 0x6], [0x4, 0x0, 0x1, 0x2, 0x3, 0x2, 0x0, 0x2e6c, 0x7fff, 0x2, 0x4c00000000000000, 0x9, 0xe8dd, 0xffffffffffffffff, 0x0, 0x62e, 0xfffffffffffffffa, 0x2, 0x5, 0x40, 0x1f, 0x80000001, 0x1, 0xffff, 0x7f, 0x4c000000000, 0x9, 0x0, 0x6b5, 0x1, 0x1, 0x8, 0x3, 0x7, 0x1, 0x4000, 0x5, 0x5, 0x7f, 0x1, 0x4, 0x6, 0xad, 0x5, 0x8, 0x27f3, 0x6a, 0x8, 0xff, 0x0, 0xc2, 0x7, 0xfffffffffffffff9, 0x8, 0x8001, 0x20, 0x0, 0x80000001, 0x8, 0x3, 0x5, 0x3, 0x6, 0x4]}, 0x45c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80000, 0x0) setsockopt$inet_int(r3, 0x0, 0x5, &(0x7f0000000040)=0xfffffffffffffff9, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:38 executing program 2: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000080)=0x3f) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000180)=0x10000000000062) read(0xffffffffffffffff, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) r0 = epoll_create1(0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhci\x00', 0x48200, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r0, &(0x7f0000000000)={r0}) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r1, 0x8200) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x2800, 0x0) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) 08:58:38 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000080)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:38 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000000c0)=""/137) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:58:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0), 0x0, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:38 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) [ 309.766650] binder: 12811:12812 ioctl 40046205 0 returned -22 08:58:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x40, 0x0) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x82) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={@remote, @dev={0xfe, 0x80, [], 0x1b}, @mcast1, 0x9, 0x6, 0x100000000, 0x100, 0x3, 0x40000040, r3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='trusted.overlay.upper\x00', &(0x7f0000000340)={0x0, 0xfb, 0xbc, 0x4, 0x1f, "5c9b288173243e6ac7a0b679434a9a68", "0f5d381c51e8ce214304d458d7c30a5d360ed431888363b7df51a2a25873aebafab71c65eb9847fb8dbc1b55bb3bd346ede7636dd94af4343f023f1274e95b052447b6a74a7eb4e76b70f5e13aa1aee64c719195831f97c7824f414bfadcf6a9bfd56872948d2fcf2c099c7cd25f85220765436cd3093f2a5ffc61edde629a80706e707d1f91bc854bad2f9d815f37c9c10c8ea46411c4c20fd25516fdccc979ed504101943899"}, 0xbc, 0x2) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) [ 309.815425] binder: 12811:12826 ioctl 40046205 0 returned -22 08:58:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x8040) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xfed7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) gettid() r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x10200, 0x0) getpeername$llc(r2, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000280)=0x10) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) syz_open_pts(r0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x40002, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000003c0)=0x1c, 0x5519e2d8db94a94b) ioctl$TCXONC(r0, 0x540a, 0x200) 08:58:38 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdfdffff00"}) [ 309.891801] binder: 12838:12839 ioctl 40046205 0 returned -22 08:58:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:38 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:38 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000000)={0x9, 0x4, 0x211}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./control\x00', &(0x7f0000000140)='vfat\x00', 0x1100020, &(0x7f0000000180)='(vboxnet0^:trustedtrusted+\x00') write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) socket$inet_smc(0x2b, 0x1, 0x0) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) [ 310.003203] binder: 12854:12856 ioctl 40046205 0 returned -22 08:58:38 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) r3 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:38 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:38 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdfdffff00"}) 08:58:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x0, 0x2080) renameat(r2, &(0x7f0000000040)='./file0\x00', r3, &(0x7f00000000c0)='./file0\x00') ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) [ 310.180430] binder: 12879:12880 ioctl 40046205 0 returned -22 08:58:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000280)=""/11, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/nexpire_quiescent_template\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000480)=0xe9) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000004c0)={r2, 0x10001, 0x8, 0x9}, 0x10) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000040)="ce80b83496") ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f00000001c0)={0x0, 0x1ff, 0x7, 0x7}) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r3 = epoll_create1(0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000140)={0x3}) r4 = gettid() kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r3, &(0x7f0000000000)={r3, r0}) ppoll(&(0x7f00000002c0)=[{r3}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r5 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) 08:58:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0x121000) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x3, 0x0, [{0x6, 0x1, 0x0, 0x0, @msi={0x1000, 0x0, 0x6}}, {0x200, 0x2, 0x0, 0x0, @irqchip={0x4, 0x1}}, {0x0, 0x4, 0x0, 0x0, @irqchip={0x1, 0xffffffffffff8000}}]}) fcntl$setpipe(r0, 0x407, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:39 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:39 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) fsetxattr$security_smack_transmute(r1, &(0x7f0000000380)='security.SMACK64TRANSMUTE\x00', &(0x7f00000003c0)='TRUE', 0x4, 0x2) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x10000000001}) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x400) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) clone(0x80000, &(0x7f00000001c0)="b30986c31b12003779d6022b217a8b6f6d8016134d13dd7fcc9c4849f9272a4ca7aad34b772bd698945546d32b9fbde0800b319d79c11856d2f9a7d821f03c464bbfe3afa2ce39e3be6fabb7736fe497a46ebf7ee9ee7a7d2ea9e283bfcd6e2a2a8514245a0d5aa65d8860eb8b0f49a4a51dba87722282499e19c7722dd9892d6dd292f38cf4e1b176d90590d7ac518908d3615ba3b7c3b14a0bb18e0aab722bf21b1375ff92e90253025df5334a7efbbcfed6d251d1f131c32bb9c21be73d82ad10cd37c3f96a619fdac388e56278a589df09cc3953ce046645c5cd7de4f8db", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc) preadv(r1, &(0x7f0000000600)=[{&(0x7f0000000400)=""/95, 0x5f}, {&(0x7f0000000480)=""/15, 0xf}, {&(0x7f00000004c0)=""/94, 0x5e}, {&(0x7f0000000540)=""/32, 0x20}, {&(0x7f0000000580)=""/76, 0x4c}], 0x5, 0x0) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./control\x00') dup2(r0, r3) 08:58:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) uselib(&(0x7f0000000080)='./file0\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0xa400, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000240)={'nat\x00'}, &(0x7f00000001c0)=0x78) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:58:39 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) [ 310.825479] binder: 12912:12917 ioctl 40046205 0 returned -22 08:58:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) syz_open_pts(r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 08:58:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000540)='/dev/audio\x00', 0x200, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000580), &(0x7f00000005c0)=0x18) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:39 executing program 4: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) connect$nfc_llcp(r0, &(0x7f0000000200)={0x27, 0x1, 0x0, 0x6, 0x8, 0x6, "2543f940a21ef52ae47449dda8e50fe2004007c44e59759549a38bd284e0647feb4e946983e56ca8a0a77760e2b3739417348011ddbf023273d976b650550a", 0x3c}, 0x60) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x80, 0x4402) ioctl(r0, 0x8000, &(0x7f0000000180)="8a3114b1651cded36b6ef935a3c42a31fb14105bd1b9c2efdcf152219ad5bdbf1da9d643e253aeacaad37b5c33f31d188e4e9ddb40b1de2247f81dfac83e3367d623b9aa725591e299db87bfd7af3ed58d1b26bfc48e2d6a7c64d42735408ebc55de6b8d3ba5750d6aa6f83b") mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f00000000c0)={'gretap0\x00', {0x2, 0x4e20, @local}}) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000000)) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x3, 0x0) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r2) 08:58:39 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f0000000380)=0xc) prlimit64(r2, 0x0, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000140)) getsockname(r1, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, &(0x7f0000000480)=0x80) accept4$alg(r4, 0x0, 0x0, 0x800) r5 = gettid() kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r3, &(0x7f0000000000)={r3, r0}) ppoll(&(0x7f00000002c0)=[{r3}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r6 = syz_open_pts(r0, 0x200640041) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000003c0)=r5) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x400, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x1, 0x0) getpeername$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c) ioctl$TCXONC(r6, 0x540a, 0x0) [ 311.016356] binder: 12940:12945 ioctl 40046205 0 returned -22 08:58:39 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x400000000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x2880, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xfffffffffffffff9}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000100)={r3, 0x6, 0x7fffffff}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/224, 0xe0) 08:58:39 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdfdffff00"}) 08:58:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2180, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x300, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x3, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x9) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) [ 311.137209] binder: 12963:12964 ioctl 40046205 0 returned -22 08:58:39 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = syz_open_dev$sndpcmp(&(0x7f00000004c0)='/dev/snd/pcmC#D#p\x00', 0x8817, 0x2140) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000500)=@sack_info={0x0, 0x1, 0x6}, &(0x7f0000000540)=0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000580)={r2, 0xf6, "b5cd534892dcff443f4565d5ead82f2cd3f1763cd80c6032565f3141a3b21aaf5c03652b35704e9aa17c93bbc27f81d0e743548f80d348317ffdf93011639de644ce5f2f79590ab890a7e8075c35b6da8efbc2fa1f9279773044a942ebcb5480ece0a649f6619cd8aa929e6cdee2089817a41b935cbac6698d7114590e4ded601a005334a890398a99604264a77c41b69a1f7362841f6f1ea18f115ca4b9d0c975c460bb4fa8666aa88cab35afeaf7b3df914538bdfd0181984eab2975518fb5c37c6fdb022607eb95fc70735600aa301d898e6e7bdd6be8c27d586d490c3856e8fc945b1ded1febdb8fee676c62e11e3cddd0745218"}, &(0x7f0000000680)=0xfe) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000140)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_dccp_buf(r4, 0x21, 0xf, &(0x7f0000000240)=""/121, &(0x7f0000000480)=0x79) r5 = gettid() r6 = socket$inet6(0xa, 0x80000, 0x3) ioctl$sock_inet6_tcp_SIOCATMARK(r6, 0x8905, &(0x7f0000000080)) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000380)=""/206) kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r3, &(0x7f0000000000)={r3, r0}) ppoll(&(0x7f00000002c0)=[{r3}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r7 = syz_open_pts(r0, 0x0) r8 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x7, 0x450080) ioctl$SG_GET_LOW_DMA(r8, 0x227a, &(0x7f00000001c0)) ioctl$TCXONC(r7, 0x540a, 0x0) 08:58:39 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) [ 311.231936] binder: 12976:12977 ioctl 40046205 0 returned -22 [ 311.268371] binder: 12976:12986 ioctl 40046205 0 returned -22 08:58:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x400000000}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)={&(0x7f0000000080)='./file0\x00', r4}, 0x10) 08:58:40 executing program 1: sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[]}}, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000224, 0x0) 08:58:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4100, 0x20) ioctl$TIOCCONS(r2, 0x541d) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:40 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) [ 311.909416] binder: 13013:13016 ioctl 40046205 0 returned -22 08:58:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x2c0, 0x0) fcntl$setpipe(r1, 0x407, 0x119a) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x40001) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f0000000380)={"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"}) 08:58:40 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000000)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0x10001}, @raw32={[0xfff, 0x22ebcf97, 0x4]}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:58:40 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000000805, 0x0, &(0x7f0000000140)) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{}, {0x77359400}}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x400003) 08:58:40 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000200)='syz0') [ 312.043251] binder: 13029:13030 ioctl 8912 400200 returned -22 08:58:40 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x100) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:58:40 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) [ 312.116444] binder: 13029:13038 ioctl 8912 400200 returned -22 08:58:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x403, 0xfe) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000040)) bind$llc(r2, &(0x7f0000000180)={0x1a, 0x337, 0x3f, 0x7f, 0xffffffffffffffc0, 0x100, @broadcast}, 0x10) getgid() [ 312.248634] binder: 13055:13056 ioctl 40046205 0 returned -22 08:58:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x800, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000080)={0x6, 0x3}) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:40 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdfdffff00"}) 08:58:40 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) 08:58:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x5, 0x200000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000002c0)={0x8, 0x120, 0xfa00, {0x2, {0x9, 0x1, "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", 0xe9, 0x5, 0x101, 0x8000, 0x3d64c52c, 0xe04e, 0x1ff}, r3}}, 0x128) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x401ffd, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x100b}}, 0x20) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x31f, 0xffffffffffffffff, 0x200, 0x6, 0x6, @local}, 0x10) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r5, 0x280000000}}, 0x18) getpeername$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) [ 312.367749] binder: 13069:13071 ioctl 40046205 0 returned -22 08:58:40 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:40 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x80000000000046, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f79805854fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") sendfile(r0, r1, &(0x7f0000000000), 0x2b428a52) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) 08:58:40 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000180)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000000)='./control/file0\x00') dup2(r0, r1) 08:58:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xffffffffffffff0e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x2000}) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000080)={0x80000001, 0xffffffff7fffffff, 0x54, 0xffffffff, 0x1, 0x3, 0x3, 0x6, 0x3, 0x1ff, 0x1, 0xc1}) 08:58:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000400)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) futex(&(0x7f00000001c0)=0x2, 0x3, 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)=0x1, 0x1) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x6) r4 = socket(0x2, 0x6, 0x20) ioctl$sock_SIOCGIFCONF(r4, 0x8910, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'ip6gre0\x00', @ifru_flags=0x1000}}) accept4$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x80800) 08:58:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) shmget(0x0, 0x1000, 0x10, &(0x7f0000fff000/0x1000)=nil) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:40 executing program 1: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x20, @local}, 0x10) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x5}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) [ 312.596243] binder: 13084:13085 ioctl 40046205 0 returned -22 08:58:40 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:40 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x101000, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f00000002c0)) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x100}}, 0x24040001) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) quotactl(0x3f, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000180)="caf8742793b1f271a79d5ecbb0237af4c0aff18394987da5ba91ba38821bba02a4146759b8e0f6903a7c90dd1b5e14743b614f0a96be48636f49176dcbb00581a095d242ad59bd8cb64fc2a2bba006a017ae8db7178a9067be96de1e534801a4ea6977eb7e7e6546b5f502b563a4c8f2deaa224efe2d9a6ef7e7a82f4df5074bc165a32b9b591bed40fa64324a2b7c651bd1596d9adcc5b6ab75a4c7da5c5ec04c158b2b") r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x1, 0x420000) getsockopt$packet_int(r4, 0x107, 0xe, &(0x7f0000000100), &(0x7f0000000240)=0x4) 08:58:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000001380)=0xfffffffffffff801, 0x4) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x1, 0x0) setsockopt$packet_buf(r3, 0x107, 0xd, &(0x7f00000001c0)="fff379eca962be7b8fc17ea3157c6c62b23d59d1bc6a272d24f3492a33588fdf33e2c9438dbb577aa6eb6e07913f749cbae05e8879486b84ec350ba89e1a3ecf3dd3c5573f36b6f5574ec969689dc260dfb6a01ea7e5ea6dfaa5bb3ad3769d19470505744d5a995c2f6f13dddeae318c700c9dadff15bd98bb6461857b09bdffa689b17d76e2172f32bdc7c83cf62e0ea25c9c355474982649f0234b49dbb8d0e9a60959ed34d4bc08d8e38a168dd8243d1852d0c0772c8760ded59401f170ef02ffee60d30727a282f43bded98692c06df588dbf41248e36742d2c2597c92", 0xdf) read(r0, &(0x7f0000000380)=""/4096, 0x1000) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:58:41 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$void(r0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x20000, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(0xffffffffffffffff, r0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) mknod$loop(&(0x7f0000000040)='./control\x00', 0x109, 0x1) fallocate(0xffffffffffffffff, 0x18, 0x6ea7, 0x1) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=unix,', {[{@cache_fscache='cache=fscache'}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}, {@access_uid={'access', 0x3d, r3}}]}}) 08:58:41 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) [ 312.746512] binder: 13110:13111 ioctl 40046205 0 returned -22 08:58:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x9, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$midi(&(0x7f0000000340)='/dev/midi#\x00', 0x6b, 0x208040) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x7fff) r2 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x1, 0x8010040) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000100)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@rand_addr}}, &(0x7f0000000200)=0xe8) r4 = getegid() mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x100000, &(0x7f0000000380)=ANY=[@ANYBLOB='vd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303032303030302c757365725f895a3d68c8", @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',default_permissions,max_read=0x0000000000000002,blksize=0x0000000000000a00,blksize=0x0000000000000c00,\x00']) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:41 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000000)) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x121000, 0x0) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000080)=[0x6, 0x7ff]) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) [ 312.866365] binder: 13125:13126 ioctl 40046205 0 returned -22 [ 312.875935] binder: 13125:13129 ioctl 40046205 0 returned -22 08:58:41 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2, 0x40000) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000080)) [ 312.944805] QAT: Invalid ioctl [ 312.948412] binder: 13139:13141 ioctl 40046205 0 returned -22 [ 313.018961] binder: 13150:13151 ioctl 40046205 0 returned -22 [ 313.038230] 9pnet: p9_fd_create_unix (13153): problem connecting socket: ./file0: -111 08:58:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:41 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x31, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000fa3000/0x4000)=nil, &(0x7f0000007d00)) mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000f4c000)=""/4096) 08:58:41 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) sched_rr_get_interval(r2, &(0x7f0000000040)) [ 313.558434] binder: 13167:13170 ioctl 40046205 0 returned -22 08:58:42 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) socketpair$inet(0x2, 0x2, 0x89a, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e24, 0x234, @loopback, 0x2}}, 0x7ff, 0x800, 0x4000000000, 0x3f}, 0x98) 08:58:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000380)={0x3, {{0x2, 0x4e22, @local}}}, 0x88) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000000)={r2, r0}) ppoll(&(0x7f00000002c0)=[{r2}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:58:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f00000000c0)=""/11, 0x23d) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:42 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x8000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, 'posix_acl_access)^'}}, {@mmap='mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '-}vboxnet0+'}}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}]}}) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r2) 08:58:42 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) [ 313.808819] binder: 13187:13188 ioctl 40046205 0 returned -22 08:58:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x5a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r1 = open(&(0x7f0000000000)='\x00', 0x20000, 0x2) ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:42 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) [ 313.849852] binder: 13187:13188 ioctl 40046205 0 returned -22 08:58:42 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x8, 0xc00) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) [ 313.938239] binder: 13209:13212 ioctl 40046205 0 returned -22 [ 313.952031] binder: 13209:13215 ioctl 40046205 0 returned -22 08:58:42 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdfdffff00"}) 08:58:42 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x7f, 0x0, 0xfffffffffffffffd, 0x0, @tick=0x80000000, {0x9d}, {}, @time=@time={0x77359400}}], 0x30) r3 = semget$private(0x0, 0x3, 0x100) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f00000000c0)=""/230) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) [ 314.046291] binder: 13227:13230 ioctl 40046205 0 returned -22 08:58:42 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x8000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, 'posix_acl_access)^'}}, {@mmap='mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '-}vboxnet0+'}}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}]}}) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r2) 08:58:42 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000001c0)=ANY=[@ANYBLOB="8000d64c00000400000003000001"]) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000000)={r2, r0}) ppoll(&(0x7f00000002c0)=[{r2}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:58:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x2) write$P9_RREADLINK(r1, &(0x7f0000000040)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x7f) 08:58:42 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f"}) 08:58:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x9, 0x18000) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, {0x546e, 0x80000001, 0xffffffffffffff80, 0x7, 0x3e, 0x1}}, 0x8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f00000001c0)=0x1) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000240)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000000)={r2, r2}) ppoll(&(0x7f00000002c0)=[{r2}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:58:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 08:58:42 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd"}) 08:58:42 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) tee(r2, r1, 0x7, 0x2) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r3) [ 314.273429] binder: 13254:13259 ioctl 40046205 7f returned -22 08:58:42 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x8000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, 'posix_acl_access)^'}}, {@mmap='mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '-}vboxnet0+'}}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}]}}) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r2) 08:58:42 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) [ 314.402121] binder: 13274:13275 ioctl 40046205 0 returned -22 08:58:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000e0ffffff000000000000000000000000000000add7e8693119c90dc1465fdb4eb95e61f05817543d3716fdb352615600f8e9b68d141bf2efb76b98295bea67504f99e706db093e414265eeb5e5c1a9d209b56a35333984494c53253e51ef289c6d0d8d444c873f9b7660fe783d00d22bdba0b247d9890c4e6c35dd1461be88a4c88e6d8d8795f8fc3c0bbf6da6a241d73431ed319e05c3065dee327241bcc8670d6c7fe0b3b31773dc0a087fb30330"]) 08:58:42 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:42 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) fadvise64(r0, 0x0, 0x200, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() r3 = socket$inet6(0xa, 0x80000, 0x7fffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x9, 0x5, 0x0, 0x74, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000001c0)={r4, 0x27, "1ddee542cb75e99191723e26f1b7873470df678a30ebf9a6eb0fe4f63a20a4658c0e76dbb1aafd"}, &(0x7f0000000240)=0x2f) ptrace$pokeuser(0x6, r2, 0x0, 0xff) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r5 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x2) 08:58:42 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:58:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x480040, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:42 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdfdffff00"}) 08:58:43 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:43 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x8000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'posix_acl_access)^'}}, {@mmap='mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '-}vboxnet0+'}}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}]}}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') 08:58:43 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:43 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000000)={'syzkaller1\x00', {0x2, 0x4e23, @broadcast}}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') inotify_init() dup2(r0, r1) 08:58:43 executing program 5: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) mq_timedsend(r0, &(0x7f0000000000)="f2968ceba3c1748ce6ca86b73a43e1f8102b2f35be6ef2f7df508aa2b5b20da0", 0x20, 0x8, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x1, 0x4) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000100)=0x0) syz_open_procfs(r3, &(0x7f0000000140)='net/ip_tables_names\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:58:43 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdfdffff00"}) 08:58:43 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00'}) 08:58:43 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffd"}) 08:58:45 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x9) setreuid(0x0, r3) setreuid(r3, r4) r5 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:58:45 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:45 executing program 5: syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x10001) socket$inet(0x2, 0xa, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x8e27912a1b16f77b, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) sysfs$2(0x2, 0x8, &(0x7f0000000340)=""/203) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r1, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000042000000f9ffffff0100696acf5e42f4004000000000000000000800000000000000000000"]) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000000)={r2, r1}) ppoll(&(0x7f00000002c0)=[{r2, 0xfffffffffffffffc}], 0x200000000000021b, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000080), 0x8) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000240)=0x1) r4 = syz_open_pts(r1, 0x3) ioctl$TCXONC(r4, 0x540a, 0x0) 08:58:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) r3 = dup3(r0, r1, 0x80000) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f00000003c0)={r4, 0x1, &(0x7f00000001c0)=[0x8ca], &(0x7f0000000240)=[0x9, 0x1, 0xc6c, 0x800, 0x80000000, 0xffffffffffff55a1], 0x13, 0x6, 0x40, &(0x7f0000000280)=[0x7f, 0x80000000, 0x8, 0x9, 0x20, 0x1d60000000000000], &(0x7f0000000380)=[0x14, 0x400, 0x1, 0x1, 0xa4, 0x5, 0x7fff, 0x62, 0x800, 0x7fff]}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r5 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0106438, &(0x7f0000000440)={0x84, r6}) 08:58:45 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x8000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'posix_acl_access)^'}}, {@mmap='mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '-}vboxnet0+'}}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}]}}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') 08:58:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000640)='/dev/rtc0\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000240)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000440)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000140)) r4 = gettid() kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r3, &(0x7f0000000000)={r3, r0}) timer_create(0x6, &(0x7f00000001c0)={0x0, 0x2a, 0x1, @tid=r4}, &(0x7f0000000380)=0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540)='/dev/hwrng\x00', 0x400, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timer_settime(r5, 0x0, &(0x7f0000000400)={{r6, r7+10000000}}, &(0x7f0000000500)) ppoll(&(0x7f00000002c0)=[{r3}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r8 = syz_open_pts(r2, 0x0) ioctl$TCXONC(r8, 0x540a, 0x0) 08:58:46 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:46 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_mount_image$nfs4(&(0x7f0000000280)='nfs4\x00', &(0x7f00000002c0)='./control/file0\x00', 0x5, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000300)="a705fdcf68858dbec8f6bea8a241c34879e34b7374d15dc164b7cb66a506d871118f0cf56f76e3cbf103398293854cd2888943fdfc7c2c261035ae0b810374a8e4a177cf9cae86edcd6243d4a48f7e4c80e05375e198abb907a02eff9e200134bc282ceca92262f02a2c87e14abf877748a46eee54bc0c82b03670a29c62dc856b507a518507467129f511112d792677a30aed307f3aaec25a", 0x99}, {&(0x7f00000003c0)="faf8722e2fd1afaf4491be1c673b71a0058c176938e9c2fbe942039246bafa9c07b21ec78a97e46ce8426c34bca186154cb9f82f25d70552147e7092e5e3bec93ca7e1a8515e2e910c560323bdd9772953309c723bbd9a80653d1c0d0943ab478d563d67226dff579efc665f262d588727206fdce3b844725d9ee0b525ea403dcbce", 0x82}, {&(0x7f0000000480)="4d0d91ef679720a955e2c2d0402927309000e0b7f945b31a92fe1c6979d4bb32e7b7d1acd1526299ad383f4a7c5de1e0f90e612984b9260cf1e8f2175ffa9445d2339c95d17f65d348fd919baef9c47f301f84112df543c9d842dacbd11197d9", 0x60, 0x400}, {&(0x7f0000000500)="121772901aa2b071f907877ef1d00b033d07117b07e8629e", 0x18, 0x7}, {&(0x7f0000000540)="38eeeda66be1954cd6d1dde52598bd7252fecb8d98e59bed3e981879adb7ca0e92e60cf29273a47770de42d8679eae85ea2cca630d71251b9cee576c6bb739d5337b3bdf3fdee95600875f62ce87c8f49bf0e2b35f4610a3aa0aad937e768f1785ec288f645ae29c59cca0406ef602f24f5142ab8e298055", 0x78, 0x2}], 0x400, &(0x7f0000000640)='{cpuset&cgroup[$&\x00') unlink(&(0x7f0000000080)='./file0\x00') getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f00000001c0)={'broute\x00', 0x0, 0x3, 0xd0, [], 0x3, &(0x7f0000000000)=[{}, {}, {}], &(0x7f00000000c0)=""/208}, &(0x7f0000000240)=0x78) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:58:46 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdfdffff00"}) 08:58:46 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00'}) 08:58:46 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff"}) 08:58:46 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:46 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() socketpair(0x10, 0x1, 0xdc8, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000380)={0x6, {{0x2, 0x4e20, @local}}, 0x7aebad1345ae44c3}, 0x90) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r1}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:58:46 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000180)=""/157, &(0x7f0000000000)=0x9d) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r2) r4 = getuid() timer_create(0x5, &(0x7f0000000380)={0x0, 0x0, 0x2, @thr={&(0x7f0000000240)="04042beb23d09c05be3cf800675a9e322d85b2de9da149a3ea64044a9a319456a11dd09578a7c61658fa53b68c27ef3218265794c00d9a123a14eb56be7b017b59672f55e15a30310657dbf60388a40d2a826bc354df72e5bbac0c9f9dc120bad6477488bfa66309", &(0x7f00000002c0)="1b9274462c16ba77385ab153d1af6c7c107571275665d0f1da2af87713087cc773a5c70ae13d058e2186b4e2c347f36e659c4cd1cb3fe1bee9d59839a75a2b57b6ab19e77a1b9211156221d35786b62afc0d2e6b362ee0b348bbae61081b9d54fa5c3c23db7fb3f6ffd8951799961ba6874a7193dfeea1dadb5fd4a8feae3a7321f3f7b44a2dac0cbd"}}, &(0x7f00000003c0)=0x0) timer_getoverrun(r5) r6 = getegid() write$FUSE_ENTRY(r1, &(0x7f00000000c0)={0x90, 0x0, 0x4, {0x0, 0x0, 0x7, 0x27e5, 0x2, 0x4, {0x4, 0x0, 0x9, 0x4, 0x80000001, 0x5, 0x2, 0x6, 0xbc, 0xb7, 0x9, r4, r6, 0x2, 0x1}}}, 0x90) 08:58:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000001c0)={'bpq0\x00', 0x5}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) read(r0, &(0x7f0000000380)=""/4096, 0x1000) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f00000000c0)={r2, r0}) ppoll(&(0x7f00000002c0)=[{r2}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x80) 08:58:46 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x8000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'posix_acl_access)^'}}, {@mmap='mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '-}vboxnet0+'}}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}]}}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) 08:58:46 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:46 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0xfffffffffffffffd}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xdb6b5ef4b81a475b, 0x11, r1, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0)={0x1fc0000000000000, 0x20, 0x6, 0x4, 0x1}, 0x14) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) dup2(r0, r2) 08:58:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x80) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) syz_open_dev$usb(&(0x7f0000000400)='/dev/bus/usb/00#/00#\x00', 0x8, 0x80) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x400, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r3, r4}}, 0x18) r5 = gettid() kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r1, &(0x7f0000000000)={r1, r0}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x4000, 0x0) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r6 = syz_open_pts(r0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f0000000440)={0x4f, "fad8b1ac046b86639c39a7c59d930cfcf9941d3fd79f241b93c713e866c0a64761448824620206e35e2a28255ff24a8ef17b49bbef6de733e774f304fd734fb7dd166e201a2defbb83b8f55b68e624"}) ioctl$TCXONC(r6, 0x540a, 0x0) 08:58:46 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000fdfdffff00"}) 08:58:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x400) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:46 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) 08:58:47 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x1, 0x2, 0x1, r0}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clone(0x2106001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f00000000c0)) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r2) 08:58:47 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:47 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdfdffff00"}) 08:58:47 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00'}) 08:58:47 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff"}) 08:58:47 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x8000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'posix_acl_access)^'}}, {@mmap='mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '-}vboxnet0+'}}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}]}}) 08:58:47 executing program 5 (fault-call:8 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) setxattr$security_smack_transmute(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0x4, 0x3) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x88000, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:47 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000000c0)={0x6, 0x0, 0x6}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r1, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x2) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000000)={r2, r1}) ppoll(&(0x7f00000002c0)=[{r2}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000380)=""/4096) 08:58:47 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:47 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdfdffff"}) 08:58:47 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00'}) 08:58:47 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00'}) 08:58:47 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:58:47 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f"}) 08:58:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:48 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd"}) [ 319.735502] serio: Serial port ptm5 08:58:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000004c0)=0x1c, 0x800) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000500), &(0x7f0000000540)=0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000001c0)="ae9a6d22e2cc33e81ab8d86475f592ccb0b7b195e486dd76fc55", 0x1a, 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000400)="698a816fa6d6f142df46bbeae8b75ff43d926b4512096c7632864470afbc4a8d8edd7529d2c212f27be8ff231bff3fb0890032236829b612c1b3e8ec1639bebd8bf906c9d2b9918949ccd7e43a7c4e200f5a772dc5", 0x55, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000280)=[{&(0x7f0000000240)="0378e8", 0x3}], 0x1, r4) r5 = gettid() kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r2, &(0x7f0000000000)={r2, r0}) ppoll(&(0x7f00000002c0)=[{r2}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r6 = syz_open_pts(r0, 0x80000000000000) ioctl$TCXONC(r6, 0x540a, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000580)={0x1, [0x3ff]}, 0x6) 08:58:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) gettid() ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000080)) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:48 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:48 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f00000006c0)='./file0/file0\x00', 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhci\x00', 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:58:48 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x8000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'posix_acl_access)^'}}, {@mmap='mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '-}vboxnet0+'}}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}]}}) 08:58:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x3, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:48 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00'}) 08:58:48 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x8000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'posix_acl_access)^'}}, {@mmap='mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '-}vboxnet0+'}}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}]}}) 08:58:48 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x36, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:58:48 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x8000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'posix_acl_access)^'}}, {@mmap='mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '-}vboxnet0+'}}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}]}}) 08:58:48 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffd"}) 08:58:48 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) syz_emit_ethernet(0xaa, &(0x7f00000001c0)={@local, @random="58345da1b6e2", [{[{0x9100, 0x8, 0x5, 0x1}], {0x8100, 0x2, 0x5b88387a, 0x1}}], {@ipv4={0x800, {{0x1a, 0x4, 0x7, 0x9, 0x94, 0x66, 0x1, 0x6, 0xeb, 0x0, @local, @loopback, {[@rr={0x7, 0x17, 0x2400000, [@rand_addr=0x7ff, @rand_addr=0xa73, @rand_addr=0x5, @loopback, @local]}, @cipso={0x86, 0xf, 0x1, [{0x1, 0x9, "6eb06621041cfe"}]}, @ssrr={0x89, 0x2b, 0xfffffffffffffffc, [@local, @empty, @multicast2, @multicast1, @empty, @remote, @local, @empty, @loopback, @broadcast]}]}}, @dccp={{0x4e21, 0x4e23, 0x4, 0x1, 0x8, 0x0, 0x0, 0x1, 0xfffffffffffffa41, "877e87", 0x1000, "1f4ee0"}, "43480ee94322f6323fa09a69a9d7f2b4f9c10f49899083620a2920d4"}}}}}, &(0x7f0000000280)={0x0, 0x4, [0x7b3, 0x75f, 0x580, 0xb3e]}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) rt_sigpending(&(0x7f00000000c0), 0x8) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)={0x0, @aes256}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) creat(&(0x7f000009aff8)='./file0\x00', 0x0) accept4(r1, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000180)=0x80, 0x0) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r2) 08:58:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x100000001, 0x0, 0x101, 0xfffffffffffffdfe, 0x6, 0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd, 0x3, 0x120}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000080)={0x1ff, 0x9, 0x3}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0xfffffffffffffffd}) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:51 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x8000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'posix_acl_access)^'}}, {@mmap='mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '-}vboxnet0+'}}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}]}}) 08:58:51 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}) 08:58:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x4, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:51 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) r3 = add_key(&(0x7f0000001100)='.request_key_auth\x00', &(0x7f0000001140)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000100)="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", 0x1000, r3) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x8}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r2, r1) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000001180)=0x5, 0x4) 08:58:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000080)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)) r3 = gettid() ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000000c0)) kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:58:51 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdfdff"}) 08:58:51 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00'}) 08:58:51 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00'}) 08:58:51 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdfd"}) 08:58:51 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00'}) 08:58:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.SMACK64IPOUT\x00', &(0x7f00000001c0)='/dev/ptmx\x00', 0xa, 0x2) 08:58:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:52 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x8000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'posix_acl_access)^'}}, {@mmap='mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '-}vboxnet0+'}}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}]}}) 08:58:52 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00'}) 08:58:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x5, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x5) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000001c0)=0x15388633, 0x4) r2 = epoll_create1(0x80001) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000000)={r2, r0}) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f0000000080)=0x1f) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:58:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x3) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x20000) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)) r2 = gettid() r3 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x8, 0x100) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0, 0x2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000240)={r4, 0x180000000000, 0x4efd, 0x1ff}, &(0x7f0000000280)=0x10) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) syz_open_pts(r0, 0x400000) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r5 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) 08:58:52 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x3a) write$P9_RLINK(r1, &(0x7f0000000000)={0x7, 0x47, 0x1}, 0x7) r2 = userfaultfd(0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x201, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000240), 0x4) getegid() setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000100)={0xd, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x108) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick=0x3, {}, {}, @control={0x7fffffff, 0x5c, 0x4}}], 0x30) fcntl$notify(r4, 0x402, 0x10) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000280)={0x8, 0x7fff}) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r2) 08:58:52 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00'}) 08:58:52 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff"}) 08:58:52 executing program 4: pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x80000) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./control/file0\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U-', 0x100}, 0x28, 0x1) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:58:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x6, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:52 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f"}) 08:58:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = socket(0x17, 0x0, 0x7a6c5957) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x301000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000001c0)={0x9, &(0x7f0000000380)=[{}, {}, {}, {}, {0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000280)={r4, 0x1}) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000080)=0xb3ae, &(0x7f00000000c0)=0x1) r5 = gettid() kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r3, &(0x7f0000000240)={r2, r0, 0x400}) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f00000004c0)={@ipv4={[], [], @local}}, &(0x7f0000000500)=0x14) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) open_by_handle_at(r3, &(0x7f0000000400)={0x9f, 0x5, "8a0ea44e51cb6433b5ac199f56a4da9f49fd8f364adb1e1557d0c9bfec2abd3442c85ffa94dffc38aad48249b6607ef9545becc1e64e614d098eb3cd224a9eaa55012fe35f5ea5fdb66ad0b8959395ef03e473a996ed36610dcef215abf68356d52fabe90af449c5ca2b900882a22cbac3399249e6dcdfb974e66d59f3b6fa232639c5ded1bd4c0bf50fcbf36f1814d9e14b381f1675a9"}, 0x40040) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r6 = syz_open_pts(r0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000540)=0x10000) ioctl$VT_RELDISP(r0, 0x5605) r7 = request_key(&(0x7f0000000580)='id_resolver\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000600)='/dev/ptmx\x00', 0xfffffffffffffffd) keyctl$read(0xb, r7, &(0x7f0000000640)=""/4096, 0x1000) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000001640)=ANY=[@ANYBLOB="00000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000007f00000000000000000000000200000000000000070000000000000007000000000000000000000000000000000000000000000000000000000000000400000002000000ff00000000009d01000000000000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) ioctl$TCXONC(r6, 0x540a, 0x0) 08:58:53 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x8000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@uname={'uname', 0x3d, 'posix_acl_access)^'}}, {@mmap='mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '-}vboxnet0+'}}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}]}}) 08:58:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f00000002c0), 0x2cb, &(0x7f0000000300)={r3, r4+10000000}, &(0x7f0000000340)={0x10007fffffff}, 0x9be5ffbfb93d62f3) r5 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) 08:58:53 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00'}) 08:58:53 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x88, 0x0, &(0x7f0000000180)=[@request_death={0x400c630e, 0x0, 0x2}, @register_looper, @transaction_sg={0x40486311, {{0x3, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x30, 0x10, &(0x7f0000000100)=[@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3, 0x0, 0x4}], &(0x7f0000000140)=[0x28, 0x38]}, 0xa3}}, @decrefs, @register_looper, @release={0x40046306, 0x2}, @dead_binder_done={0x40086310, 0x3}, @release={0x40046306, 0x3}], 0x19, 0x0, &(0x7f0000000240)="a4789b4065521cd056a735ae36d2fe9026c564d182940bd379"}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000000)={0x896efea000000000}, 0x4) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') setsockopt$inet_dccp_buf(r2, 0x21, 0x8f, &(0x7f00000002c0)="46c1ef2f93ddf6ddef6cb48bdf0b8d0cf27b1f2847abf0f5995bda3a7f51708f3f9700b62a89371e01d1ff660182cadff1fed4cc768a8dc686381f3cc6c24364d59cd388bb6bcd986f3217dbff60ed4133ac128ad73526b62485d24bafea20699c2fa387edea32fa8f9b96fa9caf0fec18ffe20b125df2f8300230ebfeffe14d17cdadf0f42482c21442647e6c8e68b028fe354707e7d04f42069925ed47b949f8b3212f254ffdc7cba2dce4c9dbea38402a06ccf972669fed5ee59d65d4515c6838b554fc173ac729a7762ed6a1db41535ae9dea1f17897764975dd7be7cae2e1f6d45ec32da8a711f73cf6787efb06a598a4", 0xf3) dup2(r0, r1) 08:58:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x2, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:53 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fd"}) 08:58:53 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x8000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@uname={'uname', 0x3d, 'posix_acl_access)^'}}, {@mmap='mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '-}vboxnet0+'}}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}]}}) [ 325.011166] 9pnet: Insufficient options for proto=fd 08:58:53 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00'}) 08:58:53 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x8000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@uname={'uname', 0x3d, 'posix_acl_access)^'}}, {@mmap='mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '-}vboxnet0+'}}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}]}}) [ 325.089295] 9pnet: Insufficient options for proto=fd 08:58:53 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00'}) 08:58:53 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00'}) [ 325.174751] 9pnet: Insufficient options for proto=fd 08:58:53 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x2}) dup2(r0, r1) 08:58:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r0, 0x2000}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000080)={0x400}, 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:56 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r1 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x8000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'posix_acl_access)^'}}, {@mmap='mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '-}vboxnet0+'}}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}]}}) 08:58:56 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, "717565756530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff"}) 08:58:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0, 0x3f00000000000000}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = socket$pptp(0x18, 0x1, 0x2) setsockopt(r1, 0x101, 0xf4, &(0x7f0000000080)="d5eddcaa22609a953e23790d751302eca8e680e9fe91332d4c9c5a8d29e1f4a933fd5eb36efa77ea33fbe55d89e10af054e5ab27030ea74913d4581e7b5a0c7edde0983e0dcb4632a2", 0x49) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x5, 0x48101) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000240)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000140)) r4 = gettid() kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r3, &(0x7f0000000000)={r3, r0}) ppoll(&(0x7f00000002c0)=[{r3}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r5 = syz_open_pts(r0, 0x100) ioctl$TCXONC(r5, 0x540a, 0x0) 08:58:56 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0xd) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 08:58:56 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x1f00000000000000}) 08:58:56 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0xfdfdffff00000000}) 08:58:56 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x1f000000}) 08:58:56 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0xfdfdffff}) 08:58:56 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x1f00}) 08:58:56 executing program 4 (fault-call:3 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) [ 328.268874] FAULT_INJECTION: forcing a failure. [ 328.268874] name failslab, interval 1, probability 0, space 0, times 0 [ 328.280342] CPU: 1 PID: 13909 Comm: syz-executor4 Not tainted 4.19.0-rc5-next-20180925+ #79 [ 328.288820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.298161] Call Trace: [ 328.300783] dump_stack+0x1d3/0x2c4 [ 328.300803] ? dump_stack_print_info.cold.2+0x52/0x52 [ 328.309612] should_fail.cold.4+0xa/0x17 [ 328.313678] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 328.318784] ? graph_lock+0x170/0x170 [ 328.322578] ? print_usage_bug+0xc0/0xc0 [ 328.326651] ? graph_lock+0x170/0x170 [ 328.330451] ? find_held_lock+0x36/0x1c0 [ 328.334508] ? ttwu_stat+0x5c0/0x5c0 [ 328.338232] __should_failslab+0x124/0x180 [ 328.342486] should_failslab+0x9/0x14 [ 328.346299] kmem_cache_alloc_trace+0x2d7/0x750 [ 328.350988] ? _raw_spin_unlock+0x2c/0x50 [ 328.355151] binder_get_thread+0x255/0x880 [ 328.359413] ? binder_free_ref+0xa0/0xa0 [ 328.363474] ? ttwu_stat+0x5c0/0x5c0 [ 328.367177] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 328.372704] ? rcu_pm_notify+0xc0/0xc0 [ 328.376599] ? __might_sleep+0x95/0x190 [ 328.380574] ? binder_ioctl_write_read.isra.42+0xb90/0xb90 [ 328.386209] binder_ioctl+0x270/0x1940 [ 328.390106] ? binder_ioctl_write_read.isra.42+0xb90/0xb90 [ 328.395717] ? find_held_lock+0x36/0x1c0 [ 328.399777] ? __fget+0x4aa/0x740 [ 328.403249] ? lock_downgrade+0x900/0x900 [ 328.407401] ? check_preemption_disabled+0x48/0x200 [ 328.412414] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 328.417337] ? kasan_check_read+0x11/0x20 [ 328.421474] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 328.426736] ? rcu_softirq_qs+0x20/0x20 [ 328.430700] ? __fget+0x4d1/0x740 [ 328.434146] ? ksys_dup3+0x680/0x680 [ 328.437865] ? find_held_lock+0x36/0x1c0 [ 328.441928] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 328.446865] ? binder_ioctl_write_read.isra.42+0xb90/0xb90 [ 328.452473] do_vfs_ioctl+0x1de/0x1720 [ 328.456350] ? __lock_is_held+0xb5/0x140 [ 328.460400] ? ioctl_preallocate+0x300/0x300 [ 328.464794] ? __fget_light+0x2e9/0x430 [ 328.468770] ? fget_raw+0x20/0x20 [ 328.472226] ? __sb_end_write+0xd9/0x110 [ 328.476280] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 328.481801] ? fput+0x130/0x1a0 [ 328.485078] ? do_syscall_64+0x9a/0x820 [ 328.489053] ? do_syscall_64+0x9a/0x820 [ 328.493027] ? lockdep_hardirqs_on+0x421/0x5c0 [ 328.497603] ? security_file_ioctl+0x94/0xc0 [ 328.502110] ksys_ioctl+0xa9/0xd0 [ 328.505567] __x64_sys_ioctl+0x73/0xb0 [ 328.509443] do_syscall_64+0x1b9/0x820 [ 328.513336] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 328.518703] ? syscall_return_slowpath+0x5e0/0x5e0 [ 328.523619] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 328.528465] ? trace_hardirqs_off+0x310/0x310 [ 328.532947] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 328.537947] ? prepare_exit_to_usermode+0x291/0x3b0 [ 328.542950] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 328.547799] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 328.552980] RIP: 0033:0x457579 [ 328.556221] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 328.575125] RSP: 002b:00007fbd1e26cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 328.582817] RAX: ffffffffffffffda RBX: 00007fbd1e26cc90 RCX: 0000000000457579 [ 328.590078] RDX: 000000000070e000 RSI: 0000000040046205 RDI: 0000000000000003 [ 328.597341] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 328.604617] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbd1e26d6d4 [ 328.611885] R13: 00000000004be7ea R14: 00000000004ce3b8 R15: 0000000000000006 [ 328.628931] binder: 13907:13909 ioctl 40046205 70e000 returned -12 08:58:56 executing program 2: openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x480000, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:57 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x8000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'posix_acl_access)^'}}, {@mmap='mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '-}vboxnet0+'}}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}]}}) 08:58:57 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0xfffffdfd}) 08:58:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0, 0x4000000000000000}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:57 executing program 4 (fault-call:3 fault-nth:1): r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) 08:58:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = getpid() ptrace$peekuser(0x3, r2, 0x1) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:58:57 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x1f00000000000000]}) 08:58:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) 08:58:57 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0xfdfdffff00000000]}) 08:58:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046208, 0x70e000) 08:58:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc020660b, 0x70e000) 08:58:57 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x1f000000]}) 08:58:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x200040, 0x0) accept(r2, &(0x7f0000000240)=@ipx, &(0x7f00000000c0)=0x80) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000380)={{0x7fffffff, 0x5}, 'port0\x00', 0x10, 0x80000, 0x1, 0x7f, 0x2, 0x9, 0xcd2d, 0x0, 0x7, 0x9ad}) 08:58:57 executing program 1: r0 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x8000, &(0x7f0000000100)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname', 0x3d, 'posix_acl_access)^'}}, {@mmap='mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '-}vboxnet0+'}}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}]}}) 08:58:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40049409, 0x70e000) 08:58:57 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0xfdfdffff]}) 08:58:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0, 0x1000000}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000080)=0x3ad, &(0x7f00000000c0)=0x2) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:58:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) fremovexattr(r0, &(0x7f0000000080)=@random={'os2.', 'mime_type\\\x00'}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:58 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x1f00]}) 08:58:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc0046209, 0x70e000) [ 329.742430] 9pnet: Insufficient options for proto=fd 08:58:58 executing program 1: r0 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x8000, &(0x7f0000000100)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname', 0x3d, 'posix_acl_access)^'}}, {@mmap='mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '-}vboxnet0+'}}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}]}}) 08:58:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x5421, 0x70e000) 08:58:58 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0xfffffdfd]}) 08:58:58 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0xfffffdfd]}) 08:58:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc0189436, 0x70e000) [ 329.881654] 9pnet: Insufficient options for proto=fd 08:58:58 executing program 1: r0 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x8000, &(0x7f0000000100)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname', 0x3d, 'posix_acl_access)^'}}, {@mmap='mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '-}vboxnet0+'}}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}]}}) 08:58:58 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x1f00000000000000]}) [ 330.006528] 9pnet: Insufficient options for proto=fd 08:58:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0, 0x3f000000}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x5452, 0x70e000) 08:58:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x5, 0xe79, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x9}}, 0x0, 0x40, 0x3d, "1dc61218f8db40955b360fd8b639f6816ba068ac51da050e00bee08d5389afd847219c1a14effa1702f5afcfe7e9c42dba2ee401f3c6a3df23d28cfba3a170fce9f84d4ceec0eb78996502d6a26e9e5d"}, 0xd8) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000480)={'raw\x00'}, &(0x7f0000000500)=0x54) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r3, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)=r5, 0x4) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x1, 0x20, 0x100000001, 0x7f, 0x401}) ioctl$TCXONC(r4, 0x540a, 0x0) 08:58:58 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'posix_acl_access)^'}}, {@mmap='mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '-}vboxnet0+'}}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}]}}) 08:58:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f00000001c0)=0xe8) pipe2$9p(&(0x7f0000000ac0), 0x800) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000480)={{{@in=@rand_addr, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000000580)=0xe8) getresuid(&(0x7f00000005c0), &(0x7f0000000600)=0x0, &(0x7f0000000640)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000700)={{{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000800)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000940)=0xe8) getresgid(&(0x7f0000000980)=0x0, &(0x7f00000009c0), &(0x7f0000000a00)) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000a40)={{}, {0x1, 0x5}, [{0x2, 0x1, r1}, {0x2, 0x1, r2}, {0x2, 0x2, r3}, {0x2, 0x2, r4}, {0x2, 0x1, r6}, {0x2, 0x2, r8}, {0x2, 0x3, r9}], {0x4, 0x4}, [{0x8, 0x5, r10}], {0x10, 0x1}, {0x20, 0x2}}, 0x64, 0x2) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r0, &(0x7f0000000140)) r12 = syz_open_procfs(r5, &(0x7f0000000b00)='net/arp\x00') r13 = socket(0x1, 0x6, 0x81) bind$xdp(r12, &(0x7f0000000b40)={0x2c, 0x4, r7, 0xe, r13}, 0x10) r14 = gettid() rt_tgsigqueueinfo(r5, r14, 0x38, &(0x7f0000000f00)={0x32, 0x926, 0x480, 0x4}) kcmp$KCMP_EPOLL_TFD(r14, r14, 0x7, r11, &(0x7f0000000000)={r11, r0}) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r13, 0x0, 0x10, &(0x7f0000000dc0)={{{@in, @in=@loopback}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000000ec0)=0xe8) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) ppoll(&(0x7f00000002c0)=[{r11}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r12, 0xc1105518, &(0x7f0000000c80)={{0x4, 0x3, 0x7, 0x2, 'syz1\x00', 0xc7}, 0x2, 0x1, 0x0, r5, 0x7, 0x6, 'syz1\x00', &(0x7f0000000c40)=['\\&\x00', 'net/arp\x00', '\x00', 'wlan0\x00', '\x00', 'system.posix_acl_default\x00', 'net/arp\x00'], 0x34, [], [0x1, 0x7fffffff, 0x2, 0x3f]}) r15 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r15, 0x540a, 0x0) 08:58:58 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0xfdfdffff00000000]}) 08:58:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc018620b, 0x70e000) 08:58:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x2, 0x70e000) 08:58:58 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0xfdfdffff]}) 08:58:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x5450, 0x70e000) 08:58:58 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x1f000000]}) 08:58:58 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x1f00]}) 08:58:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0, 0x40000000}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc0306201, 0x70e000) 08:58:58 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x1f00]}) 08:58:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x3, 0x3, 0x9}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc0045878, 0x70e000) 08:58:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f00000001c0)={0x27, 0x2e, 0x16, 0x18, 0xffff, 0xd5, 0x3, 0xd3, 0xffffffffffffffff}) r4 = syz_open_pts(r0, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x40, 0x115000) setsockopt$packet_buf(r5, 0x107, 0xd, &(0x7f0000000380)="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", 0x1000) ioctl$TCXONC(r4, 0x540a, 0x0) 08:58:59 executing program 1: pipe2(&(0x7f0000000040), 0x0) r0 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname', 0x3d, 'posix_acl_access)^'}}, {@mmap='mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '-}vboxnet0+'}}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}]}}) 08:58:59 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0xfffffdfd]}) 08:58:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0, 0x3f00}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc018620c, 0x70e000) 08:58:59 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x1f00000000000000]}) 08:58:59 executing program 1: pipe2(&(0x7f0000000040), 0x0) r0 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname', 0x3d, 'posix_acl_access)^'}}, {@mmap='mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '-}vboxnet0+'}}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}]}}) [ 331.058813] 9pnet: Insufficient options for proto=fd 08:58:59 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0xfdfdffff00000000]}) 08:58:59 executing program 1: pipe2(&(0x7f0000000040), 0x0) r0 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname', 0x3d, 'posix_acl_access)^'}}, {@mmap='mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '-}vboxnet0+'}}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}]}}) [ 331.138189] binder: 14137:14139 ioctl c018620c 70e000 returned -1 [ 331.150893] 9pnet: Insufficient options for proto=fd 08:58:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x5460, 0x70e000) [ 331.233911] 9pnet: Insufficient options for proto=fd 08:58:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x4020940d, 0x70e000) 08:58:59 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x1f000000]}) 08:58:59 executing program 2: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000180)=0x10000000000062) read(0xffffffffffffffff, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) r1 = gettid() kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000000)={r0}) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) syz_open_pts(0xffffffffffffffff, 0x0) epoll_create1(0x80000) 08:58:59 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@uname={'uname', 0x3d, 'posix_acl_access)^'}}, {@mmap='mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '-}vboxnet0+'}}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}]}}) 08:58:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) tee(r0, r0, 0x4, 0x4) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) [ 331.382195] 9pnet: Insufficient options for proto=fd 08:58:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0, 0x4000}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:58:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046207, 0x70e000) 08:58:59 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0xfdfdffff]}) 08:58:59 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@uname={'uname', 0x3d, 'posix_acl_access)^'}}, {@mmap='mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '-}vboxnet0+'}}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}]}}) 08:58:59 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x400, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) socketpair$inet6(0xa, 0x80806, 0x3, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000180)=0x10000000000062) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x8000, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x7dfc, 0x47aa00) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000380)=r4) read(r1, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) syncfs(r4) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000140)) r6 = gettid() kcmp$KCMP_EPOLL_TFD(r6, r6, 0x7, r5, &(0x7f0000000000)={r5, r1}) ppoll(&(0x7f00000002c0)=[{r5}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r7 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r7, 0x540a, 0x0) 08:58:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x5451, 0x70e000) [ 331.541451] 9pnet: Insufficient options for proto=fd 08:58:59 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@uname={'uname', 0x3d, 'posix_acl_access)^'}}, {@mmap='mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '-}vboxnet0+'}}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}]}}) 08:58:59 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0xfdfdffff]}) [ 331.653590] 9pnet: Insufficient options for proto=fd 08:58:59 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x1f00]}) 08:58:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc0045878, 0x70e000) 08:58:59 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'posix_acl_access)^'}}, {@mmap='mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '-}vboxnet0+'}}, {@version_u='version=9p2000.u'}]}}) 08:58:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x400001, 0x0) sendto$llc(r3, &(0x7f00000000c0)="6919907312715a", 0x7, 0x44, &(0x7f00000001c0)={0x1a, 0x0, 0x2, 0x605, 0x3, 0x73d7, @broadcast}, 0x10) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000380)={0x5, 0x400, 0xffffffff, 'queue0\x00', 0x7}) 08:59:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0, 0x100000000000000}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:59:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x400000) 08:59:00 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0xfffffdfd]}) 08:59:00 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x1f00000000000000]}) 08:59:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) r3 = dup3(r1, r1, 0x80000) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$P9_RSTAT(r3, &(0x7f0000000240)={0x58, 0x7d, 0x1, {0x0, 0x51, 0x3, 0x9, {0x2, 0x3, 0x7}, 0x40100000, 0x1, 0x5, 0x7, 0xa, '/dev/ptmx\x00', 0x2, '\'.', 0x8, 'vboxnet1', 0xa, '/dev/ptmx\x00'}}, 0x58) 08:59:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x506000) 08:59:00 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 08:59:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x40000}) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:59:00 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x1f000000]}) 08:59:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x705000) [ 332.090657] binder: 14262:14265 ioctl 40046205 506000 returned -22 08:59:00 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'posix_acl_access)^'}}, {@mmap='mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '-}vboxnet0+'}}]}}) 08:59:00 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 08:59:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x730000) 08:59:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x1, 0x80, 0x84, 0xfffffffffffffff7, 0x0, 0x1000, 0x10000, 0x8, 0x1, 0x4, 0x9, 0x6, 0x1, 0x3, 0xfffffffffffffff7, 0x401, 0xfffffffffffff066, 0x357c, 0xe6, 0x6, 0x200, 0x3, 0x41, 0x8, 0x3000000, 0x5, 0x7fff, 0x948, 0x5, 0x101, 0x1, 0xa43, 0x99, 0x6, 0x50f66b5c, 0x400, 0x0, 0x100000001, 0x0, @perf_bp={&(0x7f0000000080)}, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, 0xffffffff}, r2, 0xb, 0xffffffffffffffff, 0x1) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = memfd_create(&(0x7f0000000b80)='/dev/ptmx\x00', 0x2) getsockopt$packet_buf(r4, 0x107, 0x3, &(0x7f0000000bc0)=""/213, &(0x7f0000000cc0)=0xd5) 08:59:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000066) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x8000000000000) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:59:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x8000101, 0x0, 0x2, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x4}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:59:00 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) 08:59:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x930000) 08:59:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x20000000) 08:59:00 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 08:59:01 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x1f000000]}) 08:59:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x7fffffffefff) [ 332.810021] binder: 14333:14336 ioctl 40046205 7fffffffefff returned -22 08:59:01 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'posix_acl_access)^'}}, {@mmap='mmap'}, {@privport='privport'}]}}) 08:59:01 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 08:59:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) open$dir(&(0x7f0000000040)='./file0\x00', 0x84480, 0x27) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) [ 333.444274] binder: 14349:14351 ioctl 80087601 20000000 returned -22 08:59:03 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x1f00]}) 08:59:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = dup3(r0, r0, 0x80000) ioctl$RTC_VL_CLR(r3, 0x7014) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:59:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000e, 0x812, r0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x101080, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000040), &(0x7f0000000080)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) 08:59:03 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'posix_acl_access)^'}}, {@mmap='mmap'}]}}) 08:59:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x80000) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r4 = gettid() kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r1, &(0x7f0000000000)={r1, r0}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000002c0)={r5, 0x20000, 0x8000}, 0x8) process_vm_readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) r6 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) 08:59:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(r1) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mq_notify(r3, &(0x7f00000001c0)={0x0, 0x1d, 0x1, @thr={&(0x7f0000000380)="51c085698cfd4aaa2cd071bf99a951f0877932e7b87e7959147346d508e058c2bbbfa8e3b18e89520a60006f1941c630476c1a286e7abd054e0c4470fbf2c6100ac7099ca3ce677d766e484120a67fa0e680216e0230e932146d0ecbe962d48cca7f792f8db2143abc54e7b972637f3afdcb5944849c11034d98f2816f22bd8328e0217de30b910fbb3c70b8021843ab0201b79e049c1803c57d71277ef1a0e2063da29593f01a2bd1d44734489a644bbfc8bcb855916d7cec0909f598ce24fa5162d72403a0dab542d7b69c297af9cfa5e1bce3d6a09d889c9f35e846115775f7db362eccae0d8c419f47ae5ce1d5500e6a", &(0x7f00000000c0)="5a723dee7fae5806844beddd88995e75f9fcc050ffce857f"}}) r4 = gettid() kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r2, &(0x7f0000000000)={r2, r0}) ppoll(&(0x7f00000002c0)=[{r2}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r5 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) 08:59:03 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 08:59:03 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x2a5, 0x4, 0x75be, 0x8, 0x0, 0x7, 0x5, 0x280, 0x40, 0x312, 0x7, 0x524, 0x38, 0x2, 0xdd3, 0x5, 0x1}, [{0x70000003, 0xcdd, 0x1f, 0x7, 0x5, 0x3, 0x8, 0xffffffff}], "92a7e45ec574e327dca99f25327047e3522d7062ac3be004a4aaf44b3c3fd3d55df77b0d26a271c29b7a6629ab2da9b971120174ff78c52146349dbfd14232f4b51df3a179ec2649c8ec670edf214eeb7e23a5a9f4d3a311a2557a8b78941bf7c6ff439ef9ed7104661a32f1c44b23204462ed37757644ebaade911e0767cc6adcd69d00f5d3778203307502d50e1fa60ac4d93ea7fc4101fdc3f6bd07da317877b8f9cf732a", [[], [], [], [], [], [], []]}, 0x81e) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x6) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x70e000) [ 335.646214] binder: binder_mmap: 14362 20ffc000-20fff000 bad vm_flags failed -1 08:59:04 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) 08:59:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffffb}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2cdd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x2e3, &(0x7f0000000480)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/self/net/pfkey\x00', 0x80, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000001500)=""/174, &(0x7f00000015c0)=0xae) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000400)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r4, 0x3}}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001440)=0x0) r6 = getpgrp(0xffffffffffffffff) rt_tgsigqueueinfo(r5, r6, 0x3, &(0x7f0000001480)={0xd, 0x4b, 0x9, 0x3f}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) ioctl(r3, 0x3, &(0x7f0000000440)="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") 08:59:04 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 08:59:04 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 08:59:04 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) 08:59:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x9, 0x400000) write$FUSE_POLL(r4, &(0x7f00000000c0)={0x18, 0x0, 0x4, {0x2d10}}, 0x18) syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x63, 0x400) 08:59:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x1a5400, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e23}, @in={0x2, 0x0, @local}, @in6={0xa, 0x4e22, 0x3, @remote, 0x5a24}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @loopback}], 0x5c) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000000)={r2, r0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000380)={&(0x7f00000000c0)=[0x6, 0x3, 0x7, 0x400, 0x7fff, 0x2], 0x6, 0x0, 0x4, 0x7, 0x3, 0x2, {0x3, 0xff, 0x1, 0x7f, 0x3, 0x7, 0x100000001, 0x81, 0x7, 0x0, 0x2d7b, 0x9e, 0x5, 0x20000000400000, "436feed8b005da76820eebe89c8f6e66eb8a21da8259405aa9ffd1bdf3c82627"}}) ppoll(&(0x7f00000002c0)=[{r2}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:59:04 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'posix_acl_access)^'}}]}}) 08:59:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) ioctl$KDSETLED(r0, 0x4b32, 0x31) r2 = gettid() fstat(r1, &(0x7f00000002c0)) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x100, 0x0) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:59:07 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) 08:59:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000080)='/dev/binder#\x00', 0xfffffffffffffffe) r4 = request_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000180)='*/wlan1procposix_acl_accessGPLnodev!-$,-(#md5sum@,(posix_acl_access\\cpuset\\\x00', 0xfffffffffffffff9) keyctl$negate(0xd, r3, 0x100, r4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) dup3(r0, r1, 0x80000) 08:59:07 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:59:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x7, 0x1, 0x8, 0x6, 0x0, 0x100000001, 0x8, 0x4, 0x0, 0x9}) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x3, 0x400000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f00000001c0)=0xa22e) 08:59:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) socket$unix(0x1, 0x58890a5cadd05218, 0x0) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:59:07 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 08:59:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x6) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) 08:59:07 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) 08:59:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x1, 0x448041) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x0, 0x0, 0x3, 0x7, 0x3, 0x5c9a, 0x6}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x1a, 0x2000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x400000000ff) ioctl$TIOCLINUX5(r2, 0x541c, &(0x7f0000000180)={0x5, 0x6f0000000000, 0x8, 0x2, 0x9}) r4 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x200000) ioctl$KVM_S390_UCAS_UNMAP(r4, 0x4018ae51, &(0x7f0000000080)={0x1, 0x6, 0x3}) 08:59:07 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 08:59:07 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) [ 339.377593] binder: 14475:14476 ioctl 40046205 400000000ff returned -22 [ 339.396206] binder: 14475:14476 ioctl 40046205 400000000ff returned -22 08:59:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) syz_open_pts(r0, 0x0) r3 = dup3(r0, r0, 0x80000) ioctl$TCXONC(r3, 0x540a, 0x401) 08:59:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x8070e003) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xff, 0x200) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x1) r3 = inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x8) inotify_rm_watch(r2, r3) 08:59:10 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 08:59:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x1}) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:59:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x7, 0x1, 0x8, 0x6, 0x0, 0x100000001, 0x8, 0x4, 0x0, 0x9}) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x3, 0x400000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f00000001c0)=0xa22e) 08:59:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x9, &(0x7f00000000c0)=[0xee00, 0x0, 0xee00, 0xee01, 0xee01, 0xffffffffffffffff, 0xee00, 0xee00, 0xee01]) setregid(r1, r2) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000140)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)=0x0) ptrace$setsig(0x4203, r4, 0x5, &(0x7f0000000380)={0x3f, 0x100, 0x40}) r5 = gettid() r6 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x400000, 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000400)={0x0}) signalfd(r0, &(0x7f0000000480)={0x9}, 0x8) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000440)={r7}) kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r3, &(0x7f0000000000)={r3, r0}) ppoll(&(0x7f00000002c0)=[{r3}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r8 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r8, 0x540a, 0x0) 08:59:10 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) 08:59:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001ff) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) [ 342.309337] binder: 14500:14509 ioctl 40046205 8070e003 returned -22 08:59:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xffffffffffff56ba) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x80800) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000040)=0x5, 0x4) 08:59:10 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 08:59:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x28002, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0x7fff, 0x8, 0x7c4, 0x401, 0x1000, 0x2}, 0x5}, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) [ 342.429597] binder: 14528:14530 ioctl 40046205 ffffffffffff56ba returned -22 08:59:10 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 08:59:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f00000000c0)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000000)={r2, r0}) process_vm_readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:59:11 executing program 4: socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100), 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) utimensat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={{0x77359400}, {0x77359400}}, 0x100) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = gettid() ioprio_get$pid(0x2, r1) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000006}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e1f, 0x0, @ipv4={[], [], @loopback}}, 0x1c) syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x6, 0x0) r2 = semget$private(0x0, 0x0, 0x0) semop(r2, &(0x7f00000001c0)=[{0x0, 0x3}], 0x1) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000027, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc, 0x11030, r3, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f0000000040)={0x1, "0f"}, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x70e000) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 08:59:11 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) 08:59:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) r3 = dup3(r1, r1, 0x80000) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$P9_RSTAT(r3, &(0x7f0000000240)={0x58, 0x7d, 0x1, {0x0, 0x51, 0x3, 0x9, {0x2, 0x3, 0x7}, 0x40100000, 0x1, 0x5, 0x7, 0xa, '/dev/ptmx\x00', 0x2, '\'.', 0x8, 'vboxnet1', 0xa, '/dev/ptmx\x00'}}, 0x58) 08:59:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000000)={r2, r0}) ppoll(&(0x7f00000002c0)=[{r2}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vsock\x00', 0x7d, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000480), &(0x7f00000004c0)=0x8) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x4000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@ipv4={[], [], @dev}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f00000001c0)={@remote, @remote, r6}, 0xc) 08:59:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000000c0)=0x0) tgkill(r1, r2, 0x3e) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000140)) r4 = gettid() kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r3, &(0x7f0000000000)={r3, r0}) ppoll(&(0x7f00000002c0)=[{r3}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r5 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) r6 = memfd_create(&(0x7f00000001c0)='/dev/ptmx\x00', 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f0000000380)={0x9, 0x108, 0xfa00, {r7, 0x27, "eb2695", "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"}}, 0x110) 08:59:11 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) 08:59:11 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 08:59:11 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) 08:59:11 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 08:59:11 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x40a080, 0x0) read$FUSE(r0, &(0x7f0000000380), 0x1000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r1, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000000)={r2, r1}) ppoll(&(0x7f00000002c0)=[{r2}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) r5 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$set_timeout(0xf, r5, 0x3) 08:59:11 executing program 1 (fault-call:3 fault-nth:0): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:59:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) epoll_create1(0x80000) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() socket$inet_smc(0x2b, 0x1, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0xa2101, 0x0) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000003c0)="24fc047b46f1c24b1a1c7197d5b43c475754d71d7de9b779e86988ffbaf396cda3f2dac0ea84adcd4dcadccb676a1c1ef13b2d4036a62be062b9c28a034dc8243228c8de807bc618b14042016bcaf93369e46bfec555d8ce6902e23639ebee") r3 = syz_open_pts(r0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1, 0x0) prctl$setptracer(0x59616d61, r2) ioctl$BLKRRPART(r4, 0x125f, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x7, 0x177, 0x16f, 0x0, 0x7ff, 0x7fff, 0x0, 0x8, 0x0, 0xa, 0x1, 0x3f, 0x1, 0x7, 0x6, 0x4, 0x8, 0xa, 0x8, 0xfffffffffffff800, 0x0, 0x10001, 0x8, 0x3, 0x80, 0xd80, 0x4, 0x28000000000000, 0x7f, 0x4, 0x80, 0x10000, 0x7, 0xfffffffffffffffe, 0x5, 0x3ff, 0x2, 0x0, 0x0, 0x82bc, 0x0, @perf_config_ext={0x401, 0x40}, 0x20, 0x3ff, 0x20, 0x51733c6e56f96d3e, 0x4, 0x33d7, 0x9}, r4, 0xf, r4, 0x8) ioctl$TCXONC(r3, 0x540a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000340)={0x2, 0x2, 0x4, 0x8, r2}) [ 343.741568] FAULT_INJECTION: forcing a failure. [ 343.741568] name failslab, interval 1, probability 0, space 0, times 0 [ 343.792341] CPU: 0 PID: 14624 Comm: syz-executor1 Not tainted 4.19.0-rc5-next-20180925+ #79 [ 343.800890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 343.810243] Call Trace: [ 343.812820] dump_stack+0x1d3/0x2c4 [ 343.816450] ? dump_stack_print_info.cold.2+0x52/0x52 [ 343.821636] ? get_pid_task+0xd6/0x1a0 [ 343.825536] should_fail.cold.4+0xa/0x17 [ 343.829587] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 343.834694] ? graph_lock+0x170/0x170 [ 343.838497] ? __f_unlock_pos+0x19/0x20 [ 343.842489] ? lock_downgrade+0x900/0x900 [ 343.846657] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 343.852182] ? proc_fail_nth_write+0x9e/0x210 [ 343.856665] ? proc_cwd_link+0x1d0/0x1d0 [ 343.860735] ? find_held_lock+0x36/0x1c0 [ 343.864823] ? ttwu_stat+0x5c0/0x5c0 [ 343.868576] ? __lock_is_held+0xb5/0x140 [ 343.872648] __should_failslab+0x124/0x180 [ 343.876885] should_failslab+0x9/0x14 [ 343.880682] __kmalloc_track_caller+0x2d0/0x750 [ 343.885372] ? strncpy_from_user+0x510/0x510 [ 343.889797] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 343.895392] ? strndup_user+0x77/0xd0 [ 343.899194] memdup_user+0x2c/0xa0 [ 343.902736] strndup_user+0x77/0xd0 [ 343.906371] ksys_mount+0x3c/0x140 [ 343.909916] __x64_sys_mount+0xbe/0x150 [ 343.913911] do_syscall_64+0x1b9/0x820 [ 343.917794] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 343.923161] ? syscall_return_slowpath+0x5e0/0x5e0 [ 343.928086] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 343.932933] ? trace_hardirqs_off+0x310/0x310 [ 343.937419] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 343.942435] ? prepare_exit_to_usermode+0x291/0x3b0 [ 343.947465] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 343.952328] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 343.957519] RIP: 0033:0x457579 [ 343.960728] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 343.979624] RSP: 002b:00007f102e828c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 08:59:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xffff, 0x400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x100) clone(0x1098800, &(0x7f0000000180)="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", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000001180)="232253c293951755e5a38054578baad458342d3be7ef4d48862bdbb17ff8f36723a213cf91b65aa206446e500e244d9fddb6e99089f40abc9528882255f40a2bd1067ba12a085b94c91341f652d4900a03b07b97cff79ac67e2fdcc4ab36e688b5911ed8c1b214fa7a8b689566e0b7b289f172adad38a8e250b465e0fdfbc0d3724b6a5874e323cdf6ad35523669cd01551e84714c4df299ab532318563de0ef3efd8cbbc40331c7b05a7da181b317711bbbd5c09c6881bbc8878cabe2851a3febbffd0860ab953d747c8377aa9b65ee8d5d8fc639ccb4de8cd36c2d512bb68474df67d435ce978939777b57322fc9a1b17deb3543931cebba6ce947913458") ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) [ 343.987347] RAX: ffffffffffffffda RBX: 00007f102e828c90 RCX: 0000000000457579 [ 343.994646] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 344.001930] RBP: 000000000072bf00 R08: 0000000020000100 R09: 0000000000000000 [ 344.009194] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f102e8296d4 [ 344.016463] R13: 00000000004c281d R14: 00000000004d3b60 R15: 0000000000000007 08:59:12 executing program 1 (fault-call:3 fault-nth:1): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:59:12 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) 08:59:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r4, &(0x7f0000000380)="d8f0703f669da57fc91a9e476884c7831f023dfb06e2a7156559fa2abe35fc87616e466257af8404311d5f15375c76d1aca7e2f461d220266774a353a1661c354a432b4d363ca4da95b230dc70d88389f304eee51fb9a5187ba76a333cf648267b3d8ced9080def8b05cfb9260eac18bb095e266a2d378f4a92954a800b97098091c771007ef7663406a5940a989972e578b35b903b46e8be13ab849c0ab3ee4"}, 0x10) ioctl$TCXONC(r3, 0x540a, 0x0) 08:59:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$inet(0x1e, 0x3, 0x5, &(0x7f0000000080)={0x0, 0x0}) sendmmsg(r6, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) pipe2(&(0x7f00000001c0), 0x80800) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0x2, 0x0, 0x3, 0x9, 0x125f9ed7, 0x10001, 0xfffffffffffffffb, 0x9, 0x7, 0x8, 0x5}, 0xb) ioctl$TCXONC(r3, 0x540a, 0x0) [ 344.106763] FAULT_INJECTION: forcing a failure. [ 344.106763] name failslab, interval 1, probability 0, space 0, times 0 [ 344.168609] CPU: 0 PID: 14646 Comm: syz-executor1 Not tainted 4.19.0-rc5-next-20180925+ #79 [ 344.177146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 344.186502] Call Trace: [ 344.189109] dump_stack+0x1d3/0x2c4 [ 344.192762] ? dump_stack_print_info.cold.2+0x52/0x52 [ 344.197972] ? __kernel_text_address+0xd/0x40 [ 344.202489] ? unwind_get_return_address+0x61/0xa0 [ 344.207453] should_fail.cold.4+0xa/0x17 [ 344.211537] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 344.216647] ? graph_lock+0x170/0x170 [ 344.220449] ? __kmalloc_track_caller+0x14a/0x750 [ 344.225299] ? memdup_user+0x2c/0xa0 [ 344.229035] ? graph_lock+0x170/0x170 [ 344.232857] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 344.237634] ? find_held_lock+0x36/0x1c0 [ 344.241727] ? ttwu_stat+0x5c0/0x5c0 [ 344.245455] ? lock_release+0x970/0x970 [ 344.249429] ? ttwu_stat+0x5c0/0x5c0 [ 344.249450] ? usercopy_warn+0x110/0x110 [ 344.249473] __should_failslab+0x124/0x180 [ 344.257232] should_failslab+0x9/0x14 08:59:12 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x102d) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r1, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40000, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000140)) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000003c0)=0x4004) r4 = gettid() write$FUSE_INIT(r2, &(0x7f00000002c0)={0x50, 0x0, 0x5, {0x7, 0x1b, 0x7, 0x2, 0x6, 0x8, 0x5, 0x1}}, 0x50) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r3, &(0x7f0000000000)={r3, r1}) process_vm_readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) r5 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x6811, 0x80) 08:59:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x7ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) 08:59:12 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 344.257248] kmem_cache_alloc_trace+0x2d7/0x750 [ 344.257270] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 344.257289] ? _copy_from_user+0xdf/0x150 [ 344.265310] copy_mount_options+0x5f/0x430 [ 344.265340] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 344.265367] ksys_mount+0xd0/0x140 [ 344.292982] __x64_sys_mount+0xbe/0x150 [ 344.296976] do_syscall_64+0x1b9/0x820 [ 344.300872] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 344.306225] ? syscall_return_slowpath+0x5e0/0x5e0 [ 344.311150] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 344.316000] ? trace_hardirqs_off+0x310/0x310 [ 344.320511] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 344.325542] ? prepare_exit_to_usermode+0x291/0x3b0 [ 344.330620] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 344.335487] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 344.340685] RIP: 0033:0x457579 [ 344.343888] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 344.362792] RSP: 002b:00007f102e828c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 344.370507] RAX: ffffffffffffffda RBX: 00007f102e828c90 RCX: 0000000000457579 [ 344.377782] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 344.385058] RBP: 000000000072bf00 R08: 0000000020000100 R09: 0000000000000000 [ 344.392337] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f102e8296d4 [ 344.399622] R13: 00000000004c281d R14: 00000000004d3b60 R15: 0000000000000007 08:59:12 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) 08:59:12 executing program 1 (fault-call:3 fault-nth:2): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:59:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x10000000}) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) fcntl$addseals(r1, 0x409, 0x4) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:59:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x8, 0x1f}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000001c0)={r3, 0x7, 0x30, 0xe8}, &(0x7f0000000240)=0x18) r4 = gettid() r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40002090}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000eeba40324ab29ddbc71e4cddc40ef6e2605278b79e0b88b738805eea135129cca112d4f25c410053a264cd560f9696831af7b6ad52671b1e6f8842c18818a7aed48d3cd686b7110a4eb5e4132cac9a071b1b72b1b2abacab0b9672e88230bdfcc1254e728ac523d6bfc618e87bed21a2ad09985fa8864d2e67c1379a4fe9df69058126119188553fec6a750111c1eff08212030ee473276ea1840483963d3d0f1208df15c708718a04fec58842b48389e1d1e297b4aefb152fa2724d6d77784143f85ac272f891e04fc5c97c09554e7b59411a2e665afa3ab9031404eff70a62ee3feadc10c9a304b4d4896ba35ccfb834cf790ee0", @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf25100000002000010008000500010000000c00070008000000080000000800060077727200"], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x40) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r6 = syz_open_pts(r0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000280)={r3, 0x7fff}, 0x8) ioctl$TCXONC(r6, 0x540a, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000400)='/dev/dri/card#\x00', 0x20, 0x200) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000700)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x4, 0x3, 0x4}) 08:59:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18, 0x0, 0x7, {0x80000000}}, 0x18) 08:59:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) [ 344.553643] FAULT_INJECTION: forcing a failure. [ 344.553643] name failslab, interval 1, probability 0, space 0, times 0 [ 344.590555] CPU: 0 PID: 14688 Comm: syz-executor1 Not tainted 4.19.0-rc5-next-20180925+ #79 [ 344.599065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 344.608429] Call Trace: [ 344.611029] dump_stack+0x1d3/0x2c4 [ 344.611054] ? dump_stack_print_info.cold.2+0x52/0x52 [ 344.611077] ? find_held_lock+0x36/0x1c0 [ 344.611109] should_fail.cold.4+0xa/0x17 [ 344.619899] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 344.633090] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 344.638029] ? kasan_check_read+0x11/0x20 [ 344.642191] ? graph_lock+0x170/0x170 [ 344.646007] ? rcu_softirq_qs+0x20/0x20 [ 344.649990] ? rcu_softirq_qs+0x20/0x20 08:59:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) [ 344.653969] ? unwind_dump+0x190/0x190 [ 344.657932] ? find_held_lock+0x36/0x1c0 [ 344.662026] ? ttwu_stat+0x5c0/0x5c0 [ 344.665747] ? save_stack+0xa9/0xd0 [ 344.669394] ? kmem_cache_alloc_trace+0x152/0x750 [ 344.674277] ? copy_mount_options+0x5f/0x430 [ 344.678784] __should_failslab+0x124/0x180 [ 344.683049] should_failslab+0x9/0x14 [ 344.686894] kmem_cache_alloc+0x2be/0x730 [ 344.691067] ? find_held_lock+0x36/0x1c0 [ 344.695178] getname_flags+0xd0/0x590 [ 344.699009] user_path_at_empty+0x2d/0x50 [ 344.703168] do_mount+0x180/0x1d90 [ 344.706716] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 344.712261] ? rcu_pm_notify+0xc0/0xc0 [ 344.716157] ? copy_mount_string+0x40/0x40 [ 344.720407] ? copy_mount_options+0x5f/0x430 [ 344.724824] ? rcu_read_lock_sched_held+0x108/0x120 [ 344.729846] ? kmem_cache_alloc_trace+0x353/0x750 [ 344.734701] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 344.740244] ? _copy_from_user+0xdf/0x150 [ 344.744406] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 344.749950] ? copy_mount_options+0x315/0x430 [ 344.754461] ksys_mount+0x12d/0x140 [ 344.758101] __x64_sys_mount+0xbe/0x150 [ 344.762090] do_syscall_64+0x1b9/0x820 [ 344.765987] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 344.771370] ? syscall_return_slowpath+0x5e0/0x5e0 [ 344.776305] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 344.781170] ? trace_hardirqs_off+0x310/0x310 [ 344.785672] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 344.790702] ? prepare_exit_to_usermode+0x291/0x3b0 [ 344.795735] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 344.800611] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 344.805805] RIP: 0033:0x457579 [ 344.809004] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 344.827906] RSP: 002b:00007f102e828c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 344.835623] RAX: ffffffffffffffda RBX: 00007f102e828c90 RCX: 0000000000457579 [ 344.842913] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 08:59:13 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) [ 344.850201] RBP: 000000000072bf00 R08: 0000000020000100 R09: 0000000000000000 [ 344.857469] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f102e8296d4 [ 344.864740] R13: 00000000004c281d R14: 00000000004d3b60 R15: 0000000000000007 08:59:13 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) 08:59:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) r3 = syz_open_pts(r0, 0x402003) ioctl$TCXONC(r3, 0x540a, 0x0) 08:59:13 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) 08:59:13 executing program 1 (fault-call:3 fault-nth:3): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:59:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x204001, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) 08:59:13 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x3ff, 0x2000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x55}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20008800) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r2, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000440)) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200040, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000140)) r5 = gettid() kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r4, &(0x7f0000000000)={r4, r2}) ppoll(&(0x7f00000002c0), 0x0, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r6 = syz_open_pts(r2, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) [ 345.125912] FAULT_INJECTION: forcing a failure. [ 345.125912] name failslab, interval 1, probability 0, space 0, times 0 [ 345.158503] CPU: 0 PID: 14732 Comm: syz-executor1 Not tainted 4.19.0-rc5-next-20180925+ #79 [ 345.167008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.176375] Call Trace: [ 345.178953] dump_stack+0x1d3/0x2c4 [ 345.182604] ? dump_stack_print_info.cold.2+0x52/0x52 [ 345.187804] ? filename_lookup+0x39a/0x520 [ 345.192046] ? user_path_at_empty+0x40/0x50 [ 345.196382] ? do_mount+0x180/0x1d90 [ 345.200105] ? ksys_mount+0x12d/0x140 [ 345.203920] ? do_syscall_64+0x1b9/0x820 [ 345.207986] should_fail.cold.4+0xa/0x17 [ 345.212062] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 345.212080] ? kasan_check_write+0x14/0x20 [ 345.212101] ? trace_hardirqs_off+0xb8/0x310 08:59:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) gettid() ioctl$TCSBRKP(r0, 0x5425, 0x800) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 08:59:13 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) 08:59:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x240000) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'irlan0\x00', 0x2}, 0x18) [ 345.212121] ? graph_lock+0x170/0x170 [ 345.221458] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 345.221484] ? graph_lock+0x170/0x170 [ 345.221505] ? find_held_lock+0x36/0x1c0 [ 345.221541] ? ttwu_stat+0x5c0/0x5c0 [ 345.246798] ? lock_downgrade+0x900/0x900 [ 345.250957] __should_failslab+0x124/0x180 [ 345.250976] should_failslab+0x9/0x14 [ 345.250991] kmem_cache_alloc_trace+0x2d7/0x750 [ 345.251009] ? kasan_check_write+0x14/0x20 [ 345.251038] vfs_new_fs_context+0x5e/0x77c [ 345.251062] do_mount+0x613/0x1d90 08:59:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) [ 345.263765] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 345.263787] ? copy_mount_string+0x40/0x40 [ 345.263808] ? copy_mount_options+0x5f/0x430 [ 345.263829] ? kmem_cache_alloc_trace+0x353/0x750 [ 345.272332] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 345.300379] ? _copy_from_user+0xdf/0x150 [ 345.304562] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 345.310117] ? copy_mount_options+0x315/0x430 [ 345.310140] ksys_mount+0x12d/0x140 [ 345.310174] __x64_sys_mount+0xbe/0x150 [ 345.310193] do_syscall_64+0x1b9/0x820 08:59:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x3, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="f28572b2e304378e43dbaa27efc8b3375ccf0a06d36c13a158408ddb3d849bb393cbc0d8f6ed1ff2920d66c2db08cafde4a572293c46e8bd16dd5c974117402aa2dbb8a5800523637bb225bf2eb8", 0x4e, 0x2}], 0x20, &(0x7f00000001c0)) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) [ 345.318343] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 345.331532] ? syscall_return_slowpath+0x5e0/0x5e0 [ 345.336468] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 345.341348] ? trace_hardirqs_off+0x310/0x310 [ 345.345859] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 345.350885] ? prepare_exit_to_usermode+0x291/0x3b0 [ 345.355959] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 345.360819] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 345.366015] RIP: 0033:0x457579 [ 345.369218] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 345.388118] RSP: 002b:00007f102e828c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 345.388136] RAX: ffffffffffffffda RBX: 00007f102e828c90 RCX: 0000000000457579 [ 345.388145] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 345.388154] RBP: 000000000072bf00 R08: 0000000020000100 R09: 0000000000000000 [ 345.388164] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f102e8296d4 [ 345.388173] R13: 00000000004c281d R14: 00000000004d3b60 R15: 0000000000000007 08:59:13 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 08:59:13 executing program 1 (fault-call:3 fault-nth:4): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 345.518911] FAULT_INJECTION: forcing a failure. [ 345.518911] name failslab, interval 1, probability 0, space 0, times 0 [ 345.551345] CPU: 1 PID: 14771 Comm: syz-executor1 Not tainted 4.19.0-rc5-next-20180925+ #79 [ 345.559873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.569251] Call Trace: [ 345.571842] dump_stack+0x1d3/0x2c4 [ 345.575489] ? dump_stack_print_info.cold.2+0x52/0x52 [ 345.580682] ? filename_lookup+0x39a/0x520 [ 345.584911] ? user_path_at_empty+0x40/0x50 [ 345.589232] ? do_mount+0x180/0x1d90 [ 345.592947] ? ksys_mount+0x12d/0x140 [ 345.596777] ? do_syscall_64+0x1b9/0x820 [ 345.600833] should_fail.cold.4+0xa/0x17 [ 345.604911] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 345.610014] ? kasan_check_write+0x14/0x20 [ 345.614238] ? trace_hardirqs_off+0xb8/0x310 [ 345.618631] ? graph_lock+0x170/0x170 [ 345.622434] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 345.627979] ? graph_lock+0x170/0x170 [ 345.631781] ? find_held_lock+0x36/0x1c0 [ 345.635848] ? ttwu_stat+0x5c0/0x5c0 [ 345.639557] ? lock_downgrade+0x900/0x900 [ 345.643697] __should_failslab+0x124/0x180 [ 345.647930] should_failslab+0x9/0x14 [ 345.651722] kmem_cache_alloc_trace+0x2d7/0x750 [ 345.656376] ? kasan_check_write+0x14/0x20 [ 345.660603] vfs_new_fs_context+0x5e/0x77c [ 345.664863] do_mount+0x613/0x1d90 [ 345.668404] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 345.673974] ? copy_mount_string+0x40/0x40 [ 345.678214] ? copy_mount_options+0x5f/0x430 [ 345.682636] ? kmem_cache_alloc_trace+0x353/0x750 [ 345.687479] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 345.693005] ? _copy_from_user+0xdf/0x150 [ 345.697156] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 345.702722] ? copy_mount_options+0x315/0x430 [ 345.707231] ksys_mount+0x12d/0x140 [ 345.710864] __x64_sys_mount+0xbe/0x150 [ 345.714865] do_syscall_64+0x1b9/0x820 [ 345.718763] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 345.724123] ? syscall_return_slowpath+0x5e0/0x5e0 [ 345.729051] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 345.733891] ? trace_hardirqs_off+0x310/0x310 [ 345.738390] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 345.743397] ? prepare_exit_to_usermode+0x291/0x3b0 [ 345.748415] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 345.753250] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 345.758427] RIP: 0033:0x457579 [ 345.761618] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 345.780519] RSP: 002b:00007f102e828c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 345.788241] RAX: ffffffffffffffda RBX: 00007f102e828c90 RCX: 0000000000457579 [ 345.795494] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 345.802754] RBP: 000000000072bf00 R08: 0000000020000100 R09: 0000000000000000 [ 345.810028] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f102e8296d4 [ 345.817297] R13: 00000000004c281d R14: 00000000004d3b60 R15: 0000000000000007 08:59:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = accept(0xffffffffffffffff, &(0x7f0000000240)=@l2, &(0x7f00000001c0)=0x80) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000009c0)={'veth1_to_bridge\x00', &(0x7f0000000380)=@ethtool_test={0x1a, 0x3, 0x3, 0x2, [0x2, 0x7fffffff]}}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) getpeername(0xffffffffffffff9c, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000002c0)=0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@remote, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f00000005c0)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f0000000980)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000018}, 0xc, &(0x7f0000000940)={&(0x7f0000000600)=@updpolicy={0x308, 0x19, 0x600, 0x70bd2b, 0x25dfdbff, {{@in=@multicast1, @in=@loopback, 0x4e23, 0x0, 0x4e21, 0x1, 0x2, 0x20, 0x20, 0x15, r3, r4}, {0x3, 0x828, 0x0, 0x5, 0x61b8, 0x981, 0xa3b6, 0x230b}, {0x3, 0x0, 0xffffffff7fffffff, 0x7}, 0x5, 0x0, 0x2, 0x0, 0x3}, [@srcaddr={0x14, 0xd, @in=@rand_addr=0xdc}, @lifetime_val={0x24, 0x9, {0x8, 0x100000000, 0x5, 0x562d}}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in6=@mcast1, 0x0, 0x2}}, @lifetime_val={0x24, 0x9, {0x100000001, 0x7fff, 0xcbab}}, @algo_auth_trunc={0x130, 0x14, {{'wp256-generic\x00'}, 0x710, 0x1e0, "709ca8698f1e8d8bdf7fe5c4deba602e60de99f9401084a9c0598a1b92f3c5cedd1e415639208fe6249934f839cd591c13dac8e6aac97522bbaec9190bad2b573f425d44f7a2b3f97f9407210f11367e0f7a430a6159cca8c6d2be0699ee7bd5e54fe6eabe9a4fde22001b310105dc8954e723afdca6833c53d0440f4bd599dbd712fd0c15af81c8f90cc1c587e59f20c4e388b2a642a94329bddc3c8bd019224f435657231fc912883dfdcd76bd872d446a4b1f339c170e87b8717b5c6494c254bef09435191300545d24447f1f59b7f472f230437fbc3db3a1088e633208138e6c"}}, @algo_auth={0x88, 0x1, {{'wp256\x00'}, 0x1f0, "4b2c6259d7ee860b53c2ec8636a1bdc8e8ddc4f87c736ace738e8d537a9f3b867e4f26cbadcfa5a8afa467735d306b9af18852df873496c01734b8dc055a"}}, @replay_val={0x10, 0xa, {0x70bd2c, 0x70bd26, 0x2}}]}, 0x308}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000140)) r6 = gettid() kcmp$KCMP_EPOLL_TFD(r6, r6, 0x7, r5, &(0x7f0000000000)={r5, r0}) r7 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r7, 0x540a, 0x0) 08:59:16 executing program 4: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) r3 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) write$P9_RSTATu(r1, &(0x7f0000000200)={0xbf, 0x7d, 0x1, {{0x0, 0x98, 0x2, 0x7, {0x40, 0x3, 0x2}, 0x2000000, 0x0, 0x1, 0x8, 0xe, '/dev/snapshot\x00', 0xe, '/dev/snapshot\x00', 0x8, 'userem1\'', 0x41, "2d73656c696e7578766d6e657431656d316574683170726f635c7d706f7369785f61636c5f616363657373292623706f7369785f61636c5f616363657373b9212e"}, 0x12, '}]\\vboxnet0keyring', r2, r3, r4}}, 0xbf) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x882, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r5, 0x40045731, &(0x7f0000000080)=0x100000000) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, 0x78e002) 08:59:16 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) 08:59:16 executing program 1 (fault-call:3 fault-nth:5): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:59:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x1, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffffffffffffff8, 0x0, 0x100000001, 0x9}, 0x8) fcntl$getownex(r1, 0x10, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:59:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x80000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f00000006c0)={0x0, &(0x7f00000005c0)=""/202}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r3 = gettid() r4 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@nfc_llcp, &(0x7f00000001c0)=0x80, 0x800) getsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000240), &(0x7f0000000280)=0x10) kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000540)={0xfffffffffffffffa, 0x8, 0x4, 0x400}) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r5, r6) r7 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r7, 0x540a, 0x0) [ 348.197829] FAULT_INJECTION: forcing a failure. [ 348.197829] name failslab, interval 1, probability 0, space 0, times 0 [ 348.244116] CPU: 0 PID: 14787 Comm: syz-executor1 Not tainted 4.19.0-rc5-next-20180925+ #79 [ 348.252625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.261979] Call Trace: [ 348.264578] dump_stack+0x1d3/0x2c4 [ 348.268226] ? dump_stack_print_info.cold.2+0x52/0x52 [ 348.273440] ? kernel_text_address+0x79/0xf0 [ 348.277873] should_fail.cold.4+0xa/0x17 [ 348.281978] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 348.287104] ? graph_lock+0x170/0x170 [ 348.290919] ? save_stack+0xa9/0xd0 08:59:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) 08:59:16 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 348.294576] ? save_stack+0x43/0xd0 [ 348.298213] ? kmem_cache_alloc_trace+0x152/0x750 [ 348.303071] ? vfs_new_fs_context+0x5e/0x77c [ 348.307491] ? do_mount+0x613/0x1d90 [ 348.311215] ? ksys_mount+0x12d/0x140 [ 348.315040] ? __x64_sys_mount+0xbe/0x150 [ 348.319203] ? do_syscall_64+0x1b9/0x820 [ 348.323275] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 348.328659] ? find_held_lock+0x36/0x1c0 [ 348.332755] ? ttwu_stat+0x5c0/0x5c0 [ 348.336482] ? debug_mutex_init+0x2d/0x60 [ 348.340653] __should_failslab+0x124/0x180 [ 348.344901] should_failslab+0x9/0x14 [ 348.348716] kmem_cache_alloc_trace+0x2d7/0x750 [ 348.353404] ? rcu_read_lock_sched_held+0x108/0x120 [ 348.358477] ? kmem_cache_alloc_trace+0x353/0x750 [ 348.363358] legacy_init_fs_context+0x187/0x230 [ 348.368035] ? put_fs_context+0x5a0/0x5a0 [ 348.372212] vfs_new_fs_context+0x3f4/0x77c [ 348.376552] do_mount+0x613/0x1d90 [ 348.380098] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 348.385652] ? copy_mount_string+0x40/0x40 [ 348.389903] ? copy_mount_options+0x5f/0x430 08:59:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r1 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x6cd5, 0xbc, 0x1, 0x0, 0xfffffffffffffffa, 0x1, 0xb, 0x9909, 0x1f21eeda, 0x7ff, 0x80000001, 0x3b9, 0x3, 0x7, 0x4, 0x8000, 0x8, 0x648c, 0x1, 0x0, 0x5, 0x7, 0x8, 0xffff, 0x100, 0xfffffffffffffffa, 0x100, 0x7, 0x1, 0x72, 0x3, 0x31, 0x5, 0x8001, 0xe9b3, 0x0, 0x8, 0x2, @perf_config_ext={0x1000, 0x7a}, 0x10, 0x3ff, 0x7fffffff, 0x4, 0x7f, 0x5, 0x10000}, 0x0, 0xa, 0xffffffffffffff9c, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xffffffffffff35c5) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) [ 348.394346] ? kmem_cache_alloc_trace+0x353/0x750 [ 348.399219] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 348.404764] ? _copy_from_user+0xdf/0x150 [ 348.404786] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 348.404802] ? copy_mount_options+0x315/0x430 [ 348.404823] ksys_mount+0x12d/0x140 [ 348.404842] __x64_sys_mount+0xbe/0x150 [ 348.404864] do_syscall_64+0x1b9/0x820 [ 348.404880] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 348.404899] ? syscall_return_slowpath+0x5e0/0x5e0 08:59:16 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) [ 348.404914] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 348.404933] ? trace_hardirqs_off+0x310/0x310 [ 348.404950] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 348.404970] ? prepare_exit_to_usermode+0x291/0x3b0 [ 348.414680] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 348.414705] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 348.414718] RIP: 0033:0x457579 [ 348.414734] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 08:59:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xffffffffffffff7f, 0x400000) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) [ 348.414742] RSP: 002b:00007f102e828c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 348.414760] RAX: ffffffffffffffda RBX: 00007f102e828c90 RCX: 0000000000457579 [ 348.414774] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 348.473596] RBP: 000000000072bf00 R08: 0000000020000100 R09: 0000000000000000 [ 348.521967] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f102e8296d4 [ 348.529249] R13: 00000000004c281d R14: 00000000004d3b60 R15: 0000000000000007 08:59:16 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) 08:59:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8800, 0x20) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000000c0)={0x9, 0x7, 0x0, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0xffffffffffffffff, 0x7b83, 0xffffffffffffff80, 0x0, 0x44, 0xfff, 0x0, 0x2, 0x80000000}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000003c0)) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000000)={r2, r0}) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/127, 0x7f}], 0x1, 0x0) process_vm_readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:59:16 executing program 1 (fault-call:3 fault-nth:6): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:59:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000080)={r1, r0, 0x1000}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:59:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = semget(0x3, 0x7, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe8) r4 = getegid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) getresgid(&(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280)) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f00000002c0)={{0x7, r3, r4, r5, r6, 0x80, 0x2}, 0xfffffffffffffe01, 0xc6, 0x1}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) [ 348.732992] FAULT_INJECTION: forcing a failure. [ 348.732992] name failslab, interval 1, probability 0, space 0, times 0 [ 348.758884] CPU: 0 PID: 14849 Comm: syz-executor1 Not tainted 4.19.0-rc5-next-20180925+ #79 [ 348.767400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.776761] Call Trace: [ 348.776787] dump_stack+0x1d3/0x2c4 [ 348.776812] ? dump_stack_print_info.cold.2+0x52/0x52 [ 348.776832] ? is_bpf_text_address+0xd3/0x170 [ 348.776865] should_fail.cold.4+0xa/0x17 [ 348.776900] ? __save_stack_trace+0x8d/0xf0 [ 348.776920] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 348.783128] ? graph_lock+0x170/0x170 [ 348.783146] ? save_stack+0xa9/0xd0 [ 348.783179] ? kasan_kmalloc+0xc7/0xe0 [ 348.783192] ? kmem_cache_alloc_trace+0x152/0x750 [ 348.783208] ? legacy_init_fs_context+0x187/0x230 [ 348.783222] ? vfs_new_fs_context+0x3f4/0x77c [ 348.783236] ? do_mount+0x613/0x1d90 [ 348.783253] ? ksys_mount+0x12d/0x140 [ 348.839284] ? __x64_sys_mount+0xbe/0x150 [ 348.843420] ? do_syscall_64+0x1b9/0x820 [ 348.847467] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 348.852821] ? find_held_lock+0x36/0x1c0 [ 348.856880] ? check_preemption_disabled+0x48/0x200 [ 348.861884] ? ttwu_stat+0x5c0/0x5c0 [ 348.865587] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 348.871115] __should_failslab+0x124/0x180 [ 348.875368] should_failslab+0x9/0x14 [ 348.879169] kmem_cache_alloc_trace+0x2d7/0x750 [ 348.883833] ? legacy_init_fs_context+0x187/0x230 [ 348.888693] ? rcu_read_lock_sched_held+0x108/0x120 [ 348.893708] ? kmem_cache_alloc_trace+0x353/0x750 [ 348.898540] ? rcu_read_lock_sched_held+0x108/0x120 [ 348.903563] apparmor_fs_context_alloc+0x43/0xa0 [ 348.908331] security_fs_context_alloc+0x54/0xb0 [ 348.913097] vfs_new_fs_context+0x446/0x77c [ 348.917409] do_mount+0x613/0x1d90 [ 348.920937] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 348.926465] ? copy_mount_string+0x40/0x40 [ 348.930691] ? copy_mount_options+0x5f/0x430 [ 348.935089] ? kmem_cache_alloc_trace+0x353/0x750 [ 348.939928] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 348.945451] ? copy_mount_options+0x315/0x430 [ 348.949939] ksys_mount+0x12d/0x140 [ 348.953570] __x64_sys_mount+0xbe/0x150 [ 348.957538] do_syscall_64+0x1b9/0x820 [ 348.961415] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 348.966768] ? syscall_return_slowpath+0x5e0/0x5e0 [ 348.971684] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 348.976529] ? trace_hardirqs_off+0x310/0x310 [ 348.981036] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 348.986067] ? prepare_exit_to_usermode+0x291/0x3b0 [ 348.991101] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 348.995963] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 349.001154] RIP: 0033:0x457579 [ 349.004360] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 349.023256] RSP: 002b:00007f102e828c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 08:59:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000080)={0x2, 0x8, [0x7, 0x7]}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8fe4, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r2 = epoll_create1(0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000000)={r2, r0}) ppoll(&(0x7f00000002c0)=[{r2}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x800000000c69d) write$P9_RAUTH(r1, &(0x7f00000001c0)={0x14, 0x67, 0x1, {0x1, 0x3, 0x8}}, 0x14) 08:59:17 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 08:59:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) 08:59:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000440)=0x2, 0x4) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x800, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) [ 349.030974] RAX: ffffffffffffffda RBX: 00007f102e828c90 RCX: 0000000000457579 [ 349.038239] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 349.045494] RBP: 000000000072bf00 R08: 0000000020000100 R09: 0000000000000000 [ 349.052747] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f102e8296d4 [ 349.060010] R13: 00000000004c281d R14: 00000000004d3b60 R15: 0000000000000007 08:59:17 executing program 1 (fault-call:3 fault-nth:7): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:59:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xc, 0x20400) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000040)=""/29, &(0x7f0000000080)=0x1d) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) 08:59:17 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) [ 349.172139] FAULT_INJECTION: forcing a failure. [ 349.172139] name failslab, interval 1, probability 0, space 0, times 0 [ 349.184917] CPU: 0 PID: 14879 Comm: syz-executor1 Not tainted 4.19.0-rc5-next-20180925+ #79 [ 349.193441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.202799] Call Trace: [ 349.205408] dump_stack+0x1d3/0x2c4 [ 349.209056] ? dump_stack_print_info.cold.2+0x52/0x52 [ 349.214268] ? __save_stack_trace+0x8d/0xf0 08:59:17 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) [ 349.218614] should_fail.cold.4+0xa/0x17 [ 349.222699] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 349.227819] ? save_stack+0xa9/0xd0 [ 349.231458] ? save_stack+0x43/0xd0 [ 349.235095] ? kasan_kmalloc+0xc7/0xe0 [ 349.238993] ? apparmor_fs_context_alloc+0x43/0xa0 [ 349.243948] ? graph_lock+0x170/0x170 [ 349.247772] ? ksys_mount+0x12d/0x140 [ 349.251578] ? __x64_sys_mount+0xbe/0x150 [ 349.255732] ? do_syscall_64+0x1b9/0x820 [ 349.259821] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 349.265195] ? ksys_mount+0x12d/0x140 [ 349.269006] ? do_syscall_64+0x1b9/0x820 [ 349.273105] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 349.278493] ? find_held_lock+0x36/0x1c0 [ 349.282590] ? ttwu_stat+0x5c0/0x5c0 [ 349.286340] __should_failslab+0x124/0x180 [ 349.290625] should_failslab+0x9/0x14 [ 349.294433] __kmalloc_track_caller+0x2d0/0x750 [ 349.299140] ? apparmor_fs_context_alloc+0x7e/0xa0 [ 349.304078] ? legacy_parse_monolithic+0xde/0x1e0 [ 349.308933] kmemdup+0x24/0x50 [ 349.312137] legacy_parse_monolithic+0xde/0x1e0 [ 349.316821] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 349.321604] do_mount+0x6e9/0x1d90 [ 349.325155] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 349.330708] ? copy_mount_string+0x40/0x40 [ 349.334994] ? copy_mount_options+0x5f/0x430 [ 349.339404] ? kmem_cache_alloc_trace+0x353/0x750 [ 349.344237] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 349.349760] ? _copy_from_user+0xdf/0x150 [ 349.353912] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 349.359447] ? copy_mount_options+0x315/0x430 [ 349.363957] ksys_mount+0x12d/0x140 [ 349.367644] __x64_sys_mount+0xbe/0x150 [ 349.371621] do_syscall_64+0x1b9/0x820 [ 349.375496] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 349.380856] ? syscall_return_slowpath+0x5e0/0x5e0 [ 349.385778] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 349.390610] ? trace_hardirqs_off+0x310/0x310 [ 349.395122] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 349.400140] ? prepare_exit_to_usermode+0x291/0x3b0 [ 349.405185] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 349.410050] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 349.415256] RIP: 0033:0x457579 [ 349.418447] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 349.437364] RSP: 002b:00007f102e828c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 349.445060] RAX: ffffffffffffffda RBX: 00007f102e828c90 RCX: 0000000000457579 [ 349.452315] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 349.459581] RBP: 000000000072bf00 R08: 0000000020000100 R09: 0000000000000000 [ 349.466835] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f102e8296d4 [ 349.474097] R13: 00000000004c281d R14: 00000000004d3b60 R15: 0000000000000007 08:59:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0), 0x0, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) syz_open_pts(r0, 0x2400) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40000, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 08:59:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2, 0x0) write$P9_RLERROR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="160000000701000d002f6465762f62696e646572230084012e914e78a3797cd9c9769c1629c7d495962d6e0bbade11e77c9562c4f4097c35b54007689a4eba397475e19b99b2ac1dadcf5b3e2bdc7c78cac861e86a670f58382986e169ea828d7981edc6c58adabfccdb7f53a579bae1407f973c"], 0x16) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$nfs4(&(0x7f0000000040)='nfs4\x00', &(0x7f0000000080)='./file0\x00', 0xe12, 0xa, &(0x7f0000000740)=[{&(0x7f0000000180)="e406384f279ccb0aa66defe92216e12532e87aded6c9f18715748b630f7308cc444a6ee020797f1887580aa0bf06ccc767982602d87a0bd64679246fa6f56e9f961afa4a2c0c332ae99143d1a797ed68fef570674d6cdf4e11de3fa6461448a2548e8d5a8308a5f83e3e2653d8c22ecafbc878826c11c5f8182a56d46134e3c6b516fa", 0x83, 0x40}, {&(0x7f0000000240)="73b6fdcb2af83a9b62d6156563f8389ea020dc91cd035e2b23bb044113be5cae9cb15e4a2df53bbacccaf591196572e20b3c4b2f0e23a113d8905d345e118fd2a32cb6de15e2e50caab70a4ea13f389cffd7b5c4b6f63978448da7be246f039e9ac615493309e6cc7d5b6594483c12386217ead35d4a0cd016481aa3bcce89135b26ef74c3bee27e407cd1eb8e45009ed4003cd697e9d15866eb8c6ca084548b94c4827920e37c653b69525c58c5504d60e6eb2a394c87", 0xb7, 0x1}, {&(0x7f0000000300)="9d62b20e92c5dd7ae609092935d87e1cfeb4889bc242d2e11b5be0a035", 0x1d, 0x401}, {&(0x7f0000000340)="428643fe766c843708a63902398cefaa89572cb35692c59c5afd913f311d037a21ec6e592e682a939e066d30241a1dd1fd17327ca3651638182d1549bb463d03bd6a0a2d2a3222cfcde446b8009e212eb8e9526b3af81ac21306e7a784fe5e92eba6094ef580bb97840350a4ba51", 0x6e, 0x1ff}, {&(0x7f00000003c0)="adc81d1801139ceedf8c8a8cd0a5b298619c35568034fc8b0a53b03f9b0d85c4ffe3027586ae44b383860968b99f71", 0x2f, 0x8}, {&(0x7f0000000400)="bc0f59dcd3111ba7c65d3bd610d27a1fc2c7026072a89e33e53f31e55b65950b2c01473f5cbebc7ff2f9689338c74604bce3194279885421cba1cdb62ae41016199277cb16c90ea5d434dc466d0520cb69c0f42b4cbff224d1274b2d895487cbf31dc9b9b1676377f5850c8f1346f90906545642af5a052e62690b167f6d38359fbd9a941c369a6561931325e2d715c712821cc76d7e80e982b3281657d45c5d03e991914bc58d35d02a600df4381f7a2f681df7316cbe7cfff132ed6adb49dc67c414a8e56e528dc02bcfd489bac35bb71cc3580e3545eab35e93", 0xdb, 0x3}, {&(0x7f0000000500)="bbe3ebb6af8ba9f4ac20f9e4f2319347b9ff8e6b0b650216dd6555e581c3f974c1a6271c404afda6e5580e0bea", 0x2d}, {&(0x7f0000000540)="bbd3b215ff7a0eadd251d5867df99aeaec2cdba363a0e8f9005b2076355026293c17e58641a5a5712a5dee9040644e4a9f9c3b6e5d9c3f3d3f36058d5535ad94098a77c0c221470bda20074058defda426ddb13dc8cf8115e84c4d6d3ead3516a2cdca52ded1e060a7dff4308ea2cae24328f924a728b4e11f46c8649b147a2540c49b3a112f239760b08a5454fde2c85e201e3bb1188fafbfade2722c18d5493bfaba07320747f671ac69d9f27424e5c251429c4b307eaa0c67dfe1e600173f9cbbb753cad542b9dfde798919da8a8ad9ab01eb76c0bc4977ff60f3eb25ed", 0xdf, 0x9}, {&(0x7f0000000640)="67b2e49153c200a351f9a5037fc52ae44cfc697f218c5f68af7512c106952ae8a8b3c53c1af16ebf1ed47db4025fdd1d930fc06e3fb41207856a8f9fc53d4099f7692efde72ac9e590c137c1dbe569441a2c1f6f10711649cc08ea102381ee96e39419fb465f692946c93ccfe8b296d2f4c12b9ce70aa1cb879bd80b1de22223351720144e94ad9a6cf29694c633e61699", 0x91, 0x2}, {&(0x7f0000000700)="2b1f030fc9c7da", 0x7, 0x7}], 0x0, &(0x7f0000000840)='*keyring\x00') ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) 08:59:20 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) 08:59:20 executing program 1 (fault-call:3 fault-nth:8): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:59:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x10000, 0x22000) write$FUSE_DIRENT(r1, &(0x7f0000000380)={0xd8, 0x0, 0x7, [{0x3, 0x2, 0xa, 0x0, '/dev/ptmx\x00'}, {0x6, 0xf4d, 0xa, 0x8, '/dev/ptmx\x00'}, {0x1, 0x3, 0xa, 0x8000, '/dev/ptmx\x00'}, {0x1, 0x6, 0xa, 0x2, '/dev/ptmx\x00'}, {0x3, 0x2, 0xa, 0x1, '/dev/ptmx\x00'}]}, 0xd8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000000)={r2, r0}) ppoll(&(0x7f00000002c0)=[{r2}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:59:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x24400) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000000c0)={0x7, 0xfffffffffffff825, 0x8, 0x5, 0x6}) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) [ 351.808597] FAULT_INJECTION: forcing a failure. [ 351.808597] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 351.865843] CPU: 0 PID: 14903 Comm: syz-executor1 Not tainted 4.19.0-rc5-next-20180925+ #79 [ 351.874423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.883778] Call Trace: [ 351.886390] dump_stack+0x1d3/0x2c4 [ 351.890041] ? dump_stack_print_info.cold.2+0x52/0x52 [ 351.890074] should_fail.cold.4+0xa/0x17 [ 351.890095] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 351.890115] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 351.899380] ? graph_lock+0x170/0x170 08:59:20 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) [ 351.913584] ? unwind_dump+0x190/0x190 [ 351.917500] ? find_held_lock+0x36/0x1c0 [ 351.921589] ? lock_release+0x970/0x970 [ 351.925581] ? ttwu_stat+0x5c0/0x5c0 [ 351.929301] ? save_stack+0x43/0xd0 [ 351.932926] ? __might_sleep+0x95/0x190 [ 351.936907] __alloc_pages_nodemask+0x34b/0xdd0 [ 351.941597] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 351.946652] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 351.952182] ? check_preemption_disabled+0x48/0x200 [ 351.957189] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 351.962714] ? rcu_pm_notify+0xc0/0xc0 [ 351.966610] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 351.972148] alloc_pages_current+0x10c/0x210 [ 351.976588] get_zeroed_page+0x14/0x50 [ 351.980510] legacy_validate+0x133/0x220 [ 351.984590] ? logfc+0x770/0x770 [ 351.987957] vfs_get_tree+0x144/0x5c0 [ 351.991751] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 351.996509] do_mount+0x70c/0x1d90 [ 352.000060] ? copy_mount_string+0x40/0x40 [ 352.004312] ? retint_kernel+0x2d/0x2d [ 352.008242] ? copy_mount_options+0x239/0x430 [ 352.012746] ? copy_mount_options+0x249/0x430 [ 352.017245] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 352.022778] ? copy_mount_options+0x315/0x430 [ 352.027299] ksys_mount+0x12d/0x140 [ 352.030935] __x64_sys_mount+0xbe/0x150 [ 352.034896] do_syscall_64+0x1b9/0x820 [ 352.038772] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 352.044127] ? syscall_return_slowpath+0x5e0/0x5e0 [ 352.049050] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 352.053885] ? trace_hardirqs_off+0x310/0x310 [ 352.058380] ? prepare_exit_to_usermode+0x291/0x3b0 [ 352.063387] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 352.068242] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 352.073454] RIP: 0033:0x457579 [ 352.076670] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 352.095568] RSP: 002b:00007f102e828c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 352.103262] RAX: ffffffffffffffda RBX: 00007f102e828c90 RCX: 0000000000457579 08:59:20 executing program 1 (fault-call:3 fault-nth:9): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 352.110522] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 352.117799] RBP: 000000000072bf00 R08: 0000000020000100 R09: 0000000000000000 [ 352.125051] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f102e8296d4 [ 352.132301] R13: 00000000004c281d R14: 00000000004d3b60 R15: 0000000000000007 08:59:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) 08:59:20 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) [ 352.196475] FAULT_INJECTION: forcing a failure. [ 352.196475] name failslab, interval 1, probability 0, space 0, times 0 [ 352.210879] CPU: 0 PID: 14934 Comm: syz-executor1 Not tainted 4.19.0-rc5-next-20180925+ #79 [ 352.219385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.228735] Call Trace: [ 352.228761] dump_stack+0x1d3/0x2c4 [ 352.228786] ? dump_stack_print_info.cold.2+0x52/0x52 [ 352.228821] should_fail.cold.4+0xa/0x17 [ 352.244275] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 352.249492] ? graph_lock+0x170/0x170 [ 352.253300] ? check_preemption_disabled+0x48/0x200 [ 352.253334] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 352.253373] ? rcu_pm_notify+0xc0/0xc0 [ 352.253394] ? find_held_lock+0x36/0x1c0 [ 352.263951] ? ttwu_stat+0x5c0/0x5c0 [ 352.263973] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 352.264001] __should_failslab+0x124/0x180 [ 352.264019] should_failslab+0x9/0x14 [ 352.264037] kmem_cache_alloc_trace+0x2d7/0x750 [ 352.293884] v9fs_mount+0x61/0x8f0 [ 352.297427] ? v9fs_drop_inode+0x150/0x150 [ 352.301661] legacy_get_tree+0x131/0x460 [ 352.305744] vfs_get_tree+0x1cb/0x5c0 [ 352.309558] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 352.314335] do_mount+0x70c/0x1d90 [ 352.317888] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 352.323441] ? copy_mount_string+0x40/0x40 [ 352.327693] ? copy_mount_options+0x5f/0x430 [ 352.332116] ? kmem_cache_alloc_trace+0x353/0x750 [ 352.336976] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 352.342524] ? _copy_from_user+0xdf/0x150 [ 352.346676] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 352.352199] ? copy_mount_options+0x315/0x430 [ 352.356686] ksys_mount+0x12d/0x140 [ 352.360301] __x64_sys_mount+0xbe/0x150 [ 352.364273] do_syscall_64+0x1b9/0x820 [ 352.368146] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 352.373497] ? syscall_return_slowpath+0x5e0/0x5e0 [ 352.378412] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 352.383249] ? trace_hardirqs_off+0x310/0x310 [ 352.387782] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 352.392785] ? prepare_exit_to_usermode+0x291/0x3b0 [ 352.397848] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 352.402693] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 352.407876] RIP: 0033:0x457579 [ 352.411067] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 352.429953] RSP: 002b:00007f102e828c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 352.437653] RAX: ffffffffffffffda RBX: 00007f102e828c90 RCX: 0000000000457579 08:59:20 executing program 1 (fault-call:3 fault-nth:10): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 352.444920] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 352.452185] RBP: 000000000072bf00 R08: 0000000020000100 R09: 0000000000000000 [ 352.459452] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f102e8296d4 [ 352.466713] R13: 00000000004c281d R14: 00000000004d3b60 R15: 0000000000000007 [ 352.486728] binder: 14940:14944 ioctl 40046205 2 returned -22 08:59:20 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) [ 352.580760] FAULT_INJECTION: forcing a failure. [ 352.580760] name failslab, interval 1, probability 0, space 0, times 0 [ 352.607657] CPU: 0 PID: 14957 Comm: syz-executor1 Not tainted 4.19.0-rc5-next-20180925+ #79 [ 352.616182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.625520] Call Trace: [ 352.628094] dump_stack+0x1d3/0x2c4 [ 352.631709] ? dump_stack_print_info.cold.2+0x52/0x52 [ 352.636888] should_fail.cold.4+0xa/0x17 [ 352.640937] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 352.646032] ? graph_lock+0x170/0x170 [ 352.649843] ? is_bpf_text_address+0xac/0x170 [ 352.654337] ? lock_downgrade+0x900/0x900 [ 352.658477] ? check_preemption_disabled+0x48/0x200 [ 352.663479] ? find_held_lock+0x36/0x1c0 [ 352.667536] ? ttwu_stat+0x5c0/0x5c0 [ 352.671252] ? __kernel_text_address+0xd/0x40 [ 352.675742] __should_failslab+0x124/0x180 [ 352.679966] should_failslab+0x9/0x14 [ 352.683755] __kmalloc_track_caller+0x2d0/0x750 [ 352.688427] ? save_stack+0xa9/0xd0 [ 352.692040] ? save_stack+0x43/0xd0 [ 352.695663] ? v9fs_session_init+0xdd/0x1bb0 [ 352.700070] kstrdup+0x39/0x70 [ 352.703257] v9fs_session_init+0xdd/0x1bb0 [ 352.707490] ? rcu_pm_notify+0xc0/0xc0 [ 352.711368] ? find_held_lock+0x36/0x1c0 [ 352.715418] ? v9fs_show_options+0x7e0/0x7e0 [ 352.719809] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 352.725338] ? check_preemption_disabled+0x48/0x200 [ 352.730357] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 352.735876] ? rcu_pm_notify+0xc0/0xc0 [ 352.739748] ? v9fs_mount+0x61/0x8f0 [ 352.743449] ? rcu_read_lock_sched_held+0x108/0x120 [ 352.748448] ? kmem_cache_alloc_trace+0x353/0x750 [ 352.753276] v9fs_mount+0x7c/0x8f0 [ 352.756798] ? v9fs_drop_inode+0x150/0x150 [ 352.761015] legacy_get_tree+0x131/0x460 [ 352.765065] vfs_get_tree+0x1cb/0x5c0 [ 352.768847] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 352.773591] do_mount+0x70c/0x1d90 [ 352.777114] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 352.782653] ? copy_mount_string+0x40/0x40 [ 352.786890] ? copy_mount_options+0x5f/0x430 [ 352.791283] ? kmem_cache_alloc_trace+0x353/0x750 [ 352.796112] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 352.801631] ? _copy_from_user+0xdf/0x150 [ 352.805763] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 352.811299] ? copy_mount_options+0x315/0x430 [ 352.815801] ksys_mount+0x12d/0x140 [ 352.819413] __x64_sys_mount+0xbe/0x150 [ 352.823376] do_syscall_64+0x1b9/0x820 [ 352.827246] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 352.832595] ? syscall_return_slowpath+0x5e0/0x5e0 [ 352.837522] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 352.842361] ? trace_hardirqs_off+0x310/0x310 [ 352.846840] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 352.851866] ? prepare_exit_to_usermode+0x291/0x3b0 [ 352.856893] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 352.861724] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 352.866895] RIP: 0033:0x457579 [ 352.870080] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 352.888968] RSP: 002b:00007f102e828c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 352.896675] RAX: ffffffffffffffda RBX: 00007f102e828c90 RCX: 0000000000457579 [ 352.903928] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 352.911178] RBP: 000000000072bf00 R08: 0000000020000100 R09: 0000000000000000 [ 352.918426] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f102e8296d4 [ 352.925678] R13: 00000000004c281d R14: 00000000004d3b60 R15: 0000000000000007 08:59:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x20, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x3, 0xfbfffffffffffffd, 0xfffffffffffffffd, 0x8}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f00000003c0)=""/11, 0xb) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x8, 0x60402) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000002c0)={'IDLETIMER\x00'}, &(0x7f0000000300)=0x1e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000000)={r2, r0}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x2a5adbe27cc51a44, 0x0) process_vm_readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:59:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x2800000000000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x200100, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) getsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000000000)=""/77, &(0x7f0000000080)=0x4d) 08:59:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() r3 = dup2(r0, r0) accept$alg(r3, 0x0, 0x0) ioctl(r1, 0x0, &(0x7f0000000080)) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:59:23 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 08:59:23 executing program 1 (fault-call:3 fault-nth:11): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:59:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6) r1 = epoll_create1(0x0) r2 = memfd_create(&(0x7f00000003c0)="70707030637075736574657468318c2123656d31736563757269747900", 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp(r2, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @rand_addr=0x2}}}, 0x2e) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f00000000c0)=""/44, 0x2c, 0xffffffffffffffff}}, 0x10) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_mreqsrc(r6, 0x0, 0x42f, &(0x7f0000001bc0)={@multicast1, @dev={0xac, 0x14, 0x14, 0x16}, @loopback}, 0xc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001d40)={r4, 0x1f8, &(0x7f0000000280)={&(0x7f0000001d80)=""/216, 0xffffffffffffff22, r5}}, 0x305) r7 = gettid() kcmp$KCMP_EPOLL_TFD(r7, r7, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r8 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r8, 0x540a, 0x0) poll(&(0x7f0000000380)=[{r6, 0x610}, {r4, 0x2400}], 0x2, 0x7) stat(&(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000001880), &(0x7f00000018c0)=0x0, &(0x7f0000001900)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001940)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000001a40)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001a80)={0x0, 0x0, 0x0}, &(0x7f0000001ac0)=0xc) sendmsg$unix(r8, &(0x7f0000001b80)={&(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001740)=[{&(0x7f0000000540)="b34a808c4363bb3506f22743123a3291ef8c0dc41b8946d822e87eb10b810717e6b22e07053b2fb6a0b1e5a51f63c9c950a24a7a57c272d911d43e8f656b39587ca10b4cf3e5535ced20e663e44199cda3306679a7da1cd8c197cae00f4740d13f1ce2c3097bd8ddaba653a6175c1b1337a93accfac3e4f4698376d3ba8c2e4fd1964952e638dddd48904dd22e20e8d8c538a0c3f34002a359fc9042570eaf1427", 0xa1}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="7d4a0224444f6321facc8165991a5f518fd4a1eab20cfcdae947d7f54df00b3e0dcdf9bab3ba76752516ea18af72eea53358d7fc102ae6065753f2c2c83ef5af6bd2dee4dc52de7b8fde116d3d01468a58513b89cce628d3ecef1a0eda8128d4d183cf8d1739d2ad31aff477fecd9d9f8abe66a3561413d528c543133f49816d0c3dd817d5a6f61406", 0x89}, {&(0x7f00000016c0)="9e2ed2e7fbbfdffe", 0x8}, {&(0x7f0000001700)="b63d0130709d8e2d97f07c60bb08703c", 0x10}], 0x5, &(0x7f0000001b00)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r8, @ANYBLOB="2000000000000600000000001d000000", @ANYRES32=r7, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000020000000000200000000000000000000", @ANYRES32=r7, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x4}, 0x0) 08:59:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fe) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) [ 354.929360] FAULT_INJECTION: forcing a failure. [ 354.929360] name failslab, interval 1, probability 0, space 0, times 0 08:59:23 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) [ 354.983717] CPU: 0 PID: 14968 Comm: syz-executor1 Not tainted 4.19.0-rc5-next-20180925+ #79 [ 354.992235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.992242] Call Trace: [ 354.992268] dump_stack+0x1d3/0x2c4 [ 354.992291] ? dump_stack_print_info.cold.2+0x52/0x52 [ 354.992315] ? __kernel_text_address+0xd/0x40 [ 354.992349] ? unwind_get_return_address+0x61/0xa0 [ 355.013075] should_fail.cold.4+0xa/0x17 [ 355.013097] ? fault_create_debugfs_attr+0x1f0/0x1f0 08:59:23 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 355.013121] ? graph_lock+0x170/0x170 [ 355.013137] ? save_stack+0x43/0xd0 [ 355.013155] ? kasan_kmalloc+0xc7/0xe0 [ 355.043160] ? __kmalloc_track_caller+0x14a/0x750 [ 355.048016] ? kstrdup+0x39/0x70 [ 355.051400] ? v9fs_session_init+0xdd/0x1bb0 [ 355.055817] ? v9fs_mount+0x7c/0x8f0 [ 355.059537] ? vfs_get_tree+0x1cb/0x5c0 [ 355.063520] ? do_mount+0x70c/0x1d90 [ 355.067239] ? ksys_mount+0x12d/0x140 [ 355.071050] ? __x64_sys_mount+0xbe/0x150 [ 355.071077] ? do_syscall_64+0x1b9/0x820 [ 355.071095] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 355.071116] ? check_preemption_disabled+0x48/0x200 [ 355.079325] ? find_held_lock+0x36/0x1c0 [ 355.093752] ? ttwu_stat+0x5c0/0x5c0 [ 355.097703] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 355.103267] __should_failslab+0x124/0x180 [ 355.107519] should_failslab+0x9/0x14 [ 355.111343] __kmalloc_track_caller+0x2d0/0x750 [ 355.116036] ? save_stack+0xa9/0xd0 [ 355.119683] ? v9fs_session_init+0x115/0x1bb0 [ 355.124189] kstrdup+0x39/0x70 [ 355.127399] v9fs_session_init+0x115/0x1bb0 08:59:23 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) [ 355.131727] ? rcu_pm_notify+0xc0/0xc0 [ 355.135628] ? find_held_lock+0x36/0x1c0 [ 355.139709] ? v9fs_show_options+0x7e0/0x7e0 [ 355.144129] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.149683] ? check_preemption_disabled+0x48/0x200 [ 355.154712] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 355.154728] ? rcu_pm_notify+0xc0/0xc0 [ 355.154752] ? v9fs_mount+0x61/0x8f0 [ 355.154772] ? rcu_read_lock_sched_held+0x108/0x120 [ 355.172900] ? kmem_cache_alloc_trace+0x353/0x750 [ 355.177765] v9fs_mount+0x7c/0x8f0 08:59:23 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) [ 355.181337] ? v9fs_drop_inode+0x150/0x150 [ 355.185592] legacy_get_tree+0x131/0x460 [ 355.189681] vfs_get_tree+0x1cb/0x5c0 [ 355.193494] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 355.198265] do_mount+0x70c/0x1d90 [ 355.201820] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 355.207379] ? copy_mount_string+0x40/0x40 [ 355.211625] ? copy_mount_options+0x5f/0x430 [ 355.216048] ? kmem_cache_alloc_trace+0x353/0x750 [ 355.220908] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 355.220926] ? _copy_from_user+0xdf/0x150 [ 355.220947] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.220963] ? copy_mount_options+0x315/0x430 [ 355.220983] ksys_mount+0x12d/0x140 [ 355.221006] __x64_sys_mount+0xbe/0x150 [ 355.230687] do_syscall_64+0x1b9/0x820 [ 355.230706] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 355.230725] ? syscall_return_slowpath+0x5e0/0x5e0 [ 355.230740] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 355.230760] ? trace_hardirqs_off+0x310/0x310 [ 355.230779] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 355.276868] ? prepare_exit_to_usermode+0x291/0x3b0 08:59:23 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) [ 355.281902] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 355.286761] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 355.291954] RIP: 0033:0x457579 [ 355.295158] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 355.314065] RSP: 002b:00007f102e828c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 355.314083] RAX: ffffffffffffffda RBX: 00007f102e828c90 RCX: 0000000000457579 [ 355.314093] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 355.314102] RBP: 000000000072bf00 R08: 0000000020000100 R09: 0000000000000000 [ 355.314111] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f102e8296d4 [ 355.314121] R13: 00000000004c281d R14: 00000000004d3b60 R15: 0000000000000007 08:59:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000002c0)={0x0, r2, 0x80}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000140)) r4 = gettid() kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r3, &(0x7f0000000340)={r3, r0}) process_vm_readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) r5 = syz_open_pts(r0, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x80000001) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000300)) ioctl$TCXONC(r5, 0x540a, 0x0) 08:59:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, 0xfffffffffffffffc) keyctl$describe(0x6, r1, &(0x7f0000000180), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x400, 0x0) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000040)=""/82) 08:59:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x248840, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7293397b}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000001c0)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:59:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = request_key(&(0x7f0000000080)='blacklist\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000001c0)='.\x00', 0xfffffffffffffffa) r2 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate(0xc, r1, &(0x7f0000000240)="4588c902d0852ce87c7637deb34904f9fb078b6524036e408e6dc6e5d3cf87e8ebe6676766f4584f193794756e0f2243e334e06512ab4af400948be2d7dd2fb5919f16a0e5cea4e26191ac9ef415e24daae76ee23ce61311857d6ac2fd0b86497f66ca72918069a3211c6c21bf3e97b8f57aff76", 0x74, r2) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r3 = epoll_create1(0xfffffffffffffffd) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000140)) r4 = gettid() kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r3, &(0x7f0000000000)={r3, r0}) ppoll(&(0x7f00000002c0)=[{r3}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r5 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) 08:59:26 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) 08:59:26 executing program 1 (fault-call:3 fault-nth:12): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 357.950699] FAULT_INJECTION: forcing a failure. [ 357.950699] name failslab, interval 1, probability 0, space 0, times 0 [ 357.962459] CPU: 1 PID: 15029 Comm: syz-executor1 Not tainted 4.19.0-rc5-next-20180925+ #79 [ 357.971187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.980545] Call Trace: [ 357.983150] dump_stack+0x1d3/0x2c4 [ 357.986797] ? dump_stack_print_info.cold.2+0x52/0x52 [ 357.992007] ? graph_lock+0x170/0x170 [ 357.995829] should_fail.cold.4+0xa/0x17 [ 357.999909] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 358.005026] ? find_held_lock+0x36/0x1c0 [ 358.009103] ? graph_lock+0x170/0x170 [ 358.012922] ? is_bpf_text_address+0xac/0x170 [ 358.017450] ? lock_downgrade+0x900/0x900 [ 358.021609] ? check_preemption_disabled+0x48/0x200 [ 358.026644] ? find_held_lock+0x36/0x1c0 [ 358.030734] ? ttwu_stat+0x5c0/0x5c0 [ 358.034465] ? unwind_get_return_address+0x61/0xa0 [ 358.039420] __should_failslab+0x124/0x180 [ 358.043665] should_failslab+0x9/0x14 08:59:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x5, 0x802) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) [ 358.047470] kmem_cache_alloc_trace+0x2d7/0x750 [ 358.052145] ? save_stack+0xa9/0xd0 [ 358.055782] ? save_stack+0x43/0xd0 [ 358.059417] ? kasan_kmalloc+0xc7/0xe0 [ 358.063312] ? __kmalloc_track_caller+0x14a/0x750 [ 358.068171] ? kstrdup+0x39/0x70 [ 358.071547] p9_client_create+0x11b/0x1769 [ 358.075794] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 358.081167] ? check_preemption_disabled+0x48/0x200 [ 358.086202] ? find_held_lock+0x36/0x1c0 [ 358.090272] ? p9_client_read+0xb50/0xb50 [ 358.094447] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.100000] ? check_preemption_disabled+0x48/0x200 [ 358.105033] ? __lockdep_init_map+0x105/0x590 [ 358.109531] ? lockdep_init_map+0x9/0x10 [ 358.113583] ? kasan_check_write+0x14/0x20 [ 358.117815] ? __init_rwsem+0x1cc/0x2a0 [ 358.121805] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 358.126915] ? rcu_read_lock_sched_held+0x108/0x120 [ 358.131926] ? save_stack+0xa9/0xd0 [ 358.135561] v9fs_session_init+0x217/0x1bb0 [ 358.139877] ? v9fs_session_init+0x217/0x1bb0 [ 358.144358] ? rcu_pm_notify+0xc0/0xc0 08:59:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) [ 358.148238] ? find_held_lock+0x36/0x1c0 [ 358.152311] ? v9fs_show_options+0x7e0/0x7e0 [ 358.156743] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.162281] ? check_preemption_disabled+0x48/0x200 [ 358.167288] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 358.172825] ? rcu_pm_notify+0xc0/0xc0 [ 358.176741] ? v9fs_mount+0x61/0x8f0 [ 358.180467] ? rcu_read_lock_sched_held+0x108/0x120 [ 358.185489] ? kmem_cache_alloc_trace+0x353/0x750 [ 358.190361] v9fs_mount+0x7c/0x8f0 [ 358.193919] ? v9fs_drop_inode+0x150/0x150 [ 358.198162] legacy_get_tree+0x131/0x460 [ 358.202232] vfs_get_tree+0x1cb/0x5c0 [ 358.202248] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 358.202266] do_mount+0x70c/0x1d90 [ 358.202282] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 358.202302] ? copy_mount_string+0x40/0x40 [ 358.224148] ? copy_mount_options+0x5f/0x430 [ 358.228566] ? kmem_cache_alloc_trace+0x353/0x750 [ 358.233426] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 358.238970] ? _copy_from_user+0xdf/0x150 [ 358.243130] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.248679] ? copy_mount_options+0x315/0x430 [ 358.253196] ksys_mount+0x12d/0x140 [ 358.256836] __x64_sys_mount+0xbe/0x150 [ 358.260836] do_syscall_64+0x1b9/0x820 [ 358.264743] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 358.270125] ? syscall_return_slowpath+0x5e0/0x5e0 [ 358.275056] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 358.279885] ? trace_hardirqs_off+0x310/0x310 [ 358.284373] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 358.289383] ? prepare_exit_to_usermode+0x291/0x3b0 [ 358.294390] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 358.299240] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 358.304417] RIP: 0033:0x457579 [ 358.307598] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 358.326483] RSP: 002b:00007f102e828c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 358.334176] RAX: ffffffffffffffda RBX: 00007f102e828c90 RCX: 0000000000457579 [ 358.341444] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 08:59:26 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 08:59:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = syz_open_dev$sndpcmp(&(0x7f0000000380)='/dev/snd/pcmC#D#p\x00', 0x1, 0x100) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x3) r2 = epoll_create1(0x80003) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) r3 = gettid() r4 = accept$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r4, &(0x7f0000000000)={r1, r1}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000000c0)=0x6) ppoll(&(0x7f00000002c0)=[{r2}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r5 = syz_open_pts(r0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000080)={0x3, 0xb17f}) ioctl$TCXONC(r5, 0x540a, 0x0) 08:59:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r0, r1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={0x0, 0xfffffffffffffffb}, &(0x7f00000000c0)=0x8) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000100)={r4, 0x4}, 0x8) getsockname$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYBLOB="81007c0046e3b29e6d1139ea515564c720095961f422058c835d9878a6f478fdb5a9a76f2e5b520d49627767acbdfd0400c08ef027767640395ffa9b440d080b46b5923350b72b93961142927d54c689ed150a5a7f267407b83e16cead3b3296edece5dff0d161b8417594fb69e540e2313fccfdb8b22a364c8473bdba26b7abac6d814b87"], 0x84) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000300)={0x1, @time={r5, r6+10000000}, 0x0, {0x639, 0x800}, 0x1658, 0x1, 0x100000000}) [ 358.348696] RBP: 000000000072bf00 R08: 0000000020000100 R09: 0000000000000000 [ 358.356053] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f102e8296d4 [ 358.363308] R13: 00000000004c281d R14: 00000000004d3b60 R15: 0000000000000007 08:59:26 executing program 1 (fault-call:3 fault-nth:13): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:59:26 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) [ 358.442332] binder: 15067:15068 ioctl 4040534e 20000300 returned -22 08:59:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xa50c, 0x200000) ioctl$RTC_WIE_OFF(r3, 0x7010) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) [ 358.500849] FAULT_INJECTION: forcing a failure. [ 358.500849] name failslab, interval 1, probability 0, space 0, times 0 [ 358.537495] CPU: 1 PID: 15075 Comm: syz-executor1 Not tainted 4.19.0-rc5-next-20180925+ #79 08:59:26 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 358.546015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.555374] Call Trace: [ 358.557980] dump_stack+0x1d3/0x2c4 [ 358.561631] ? dump_stack_print_info.cold.2+0x52/0x52 [ 358.566836] ? is_bpf_text_address+0xd3/0x170 [ 358.571380] should_fail.cold.4+0xa/0x17 [ 358.575457] ? __save_stack_trace+0x8d/0xf0 [ 358.579788] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 358.584910] ? graph_lock+0x170/0x170 [ 358.588722] ? save_stack+0xa9/0xd0 [ 358.592363] ? kasan_kmalloc+0xc7/0xe0 [ 358.596259] ? kmem_cache_alloc_trace+0x152/0x750 08:59:26 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) [ 358.601117] ? p9_client_create+0x11b/0x1769 [ 358.605537] ? v9fs_session_init+0x217/0x1bb0 [ 358.610039] ? v9fs_mount+0x7c/0x8f0 [ 358.613762] ? legacy_get_tree+0x131/0x460 [ 358.618006] ? vfs_get_tree+0x1cb/0x5c0 [ 358.621988] ? do_mount+0x70c/0x1d90 [ 358.625715] ? ksys_mount+0x12d/0x140 [ 358.629530] ? find_held_lock+0x36/0x1c0 [ 358.633621] ? check_preemption_disabled+0x48/0x200 [ 358.638649] ? ttwu_stat+0x5c0/0x5c0 [ 358.642393] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 08:59:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6, 0x80001) connect$llc(r2, &(0x7f0000000040)={0x1a, 0x337, 0x800, 0x10000, 0x5, 0x100, @dev={[], 0xc}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) [ 358.647953] __should_failslab+0x124/0x180 [ 358.652202] should_failslab+0x9/0x14 [ 358.656013] __kmalloc_track_caller+0x2d0/0x750 [ 358.660688] ? p9_client_create+0x11b/0x1769 [ 358.665109] ? rcu_read_lock_sched_held+0x108/0x120 [ 358.670137] ? kmem_cache_alloc_trace+0x353/0x750 [ 358.670155] ? p9_client_create+0x490/0x1769 [ 358.670174] kstrdup+0x39/0x70 [ 358.670191] p9_client_create+0x490/0x1769 [ 358.670210] ? check_preemption_disabled+0x48/0x200 [ 358.670232] ? p9_client_read+0xb50/0xb50 [ 358.670259] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.679491] ? check_preemption_disabled+0x48/0x200 [ 358.679512] ? __lockdep_init_map+0x105/0x590 [ 358.679533] ? lockdep_init_map+0x9/0x10 [ 358.679551] ? kasan_check_write+0x14/0x20 [ 358.679569] ? __init_rwsem+0x1cc/0x2a0 [ 358.723373] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 358.728408] ? rcu_read_lock_sched_held+0x108/0x120 [ 358.733442] ? save_stack+0xa9/0xd0 [ 358.737091] v9fs_session_init+0x217/0x1bb0 [ 358.741420] ? v9fs_session_init+0x217/0x1bb0 [ 358.745924] ? rcu_pm_notify+0xc0/0xc0 08:59:27 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) [ 358.749828] ? find_held_lock+0x36/0x1c0 [ 358.753912] ? v9fs_show_options+0x7e0/0x7e0 [ 358.758345] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.763901] ? check_preemption_disabled+0x48/0x200 [ 358.768936] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 358.774481] ? rcu_pm_notify+0xc0/0xc0 [ 358.778392] ? v9fs_mount+0x61/0x8f0 [ 358.782121] ? rcu_read_lock_sched_held+0x108/0x120 [ 358.787150] ? kmem_cache_alloc_trace+0x353/0x750 [ 358.792016] v9fs_mount+0x7c/0x8f0 [ 358.792038] ? v9fs_drop_inode+0x150/0x150 [ 358.792059] legacy_get_tree+0x131/0x460 [ 358.803884] vfs_get_tree+0x1cb/0x5c0 [ 358.807693] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 358.807712] do_mount+0x70c/0x1d90 [ 358.807732] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 358.821541] ? copy_mount_string+0x40/0x40 [ 358.825798] ? copy_mount_options+0x5f/0x430 [ 358.830221] ? kmem_cache_alloc_trace+0x353/0x750 [ 358.835084] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 358.840634] ? _copy_from_user+0xdf/0x150 [ 358.844800] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.850363] ? copy_mount_options+0x315/0x430 [ 358.854886] ksys_mount+0x12d/0x140 [ 358.858528] __x64_sys_mount+0xbe/0x150 [ 358.862514] do_syscall_64+0x1b9/0x820 [ 358.866417] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 358.871794] ? syscall_return_slowpath+0x5e0/0x5e0 [ 358.876734] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 358.881593] ? trace_hardirqs_off+0x310/0x310 [ 358.886101] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 358.891130] ? prepare_exit_to_usermode+0x291/0x3b0 [ 358.896165] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 358.901015] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 358.906200] RIP: 0033:0x457579 [ 358.909392] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 358.928278] RSP: 002b:00007f102e828c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 358.935974] RAX: ffffffffffffffda RBX: 00007f102e828c90 RCX: 0000000000457579 [ 358.943228] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 08:59:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) r3 = syz_open_pts(r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00000002c0)={0x0, 0x5}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000340)={r5, 0x2, 0xffffffff}, 0x8) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20000, 0x0) ioctl$KDENABIO(r6, 0x4b36) ioctl$TCXONC(r3, 0x540a, 0x0) 08:59:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x40) 08:59:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x800) write$FUSE_GETXATTR(r1, &(0x7f0000000400)={0x18, 0x1000000000, 0x8, {0x1}}, 0x18) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000dc0)=0x94) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x4000) shutdown(0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xfffffffffffffff7, &(0x7f0000000440)={&(0x7f0000000e00)=ANY=[@ANYBLOB="50000f000e91ca21dc709160d283a14fe5ad04cd083d91fc2759034b50af9feeb1176f2095f64c56aed77c229cfd217c9dbe", @ANYRES16=r3, @ANYBLOB="000228bd0000000000000c00030006000000000000000c00060001000000000000000c00080033cb997be44a1d0000000c00030070000042a898650000000000f1edc5f2b7903d8b1457dd866dbaf945c01ddc4ea8145de78b302ab5304e7acb9a91d0a0e2eea8420f89fa96e4191ac1ffb8fbeebdd88e19c36f3eec03e5110f6ac96576f59fe5c94066f10ffb"], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r4 = epoll_create1(0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x1, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f00000004c0)) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x501100, 0x0) r7 = add_key(&(0x7f0000000c40)='id_resolver\x00', &(0x7f0000000c80)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000cc0)="ecf76d2679f6c6f0afc441d250cbf05e1088816c3e0d870bb3f0df8eed815a2fe8c7cac30b3c8d85f7ad72a98fcfd13228f9acd6eba4f1fb937f0de797a93a8875b2e0925899688d2d6e7c8534cd8e2b7c5ae22ce593c50357090aa305cea8afb655964d83540b5555dd6710c799fb5473e2d028e8d2a8a44339db0bb1921794a8fee73e44ed7a1c67c66bc00dc9b5cb3f0dbee3a97cd97fa33dfdae6f9c7c57a888b22d5ab166f142500b742dc2f3790bfccef0c1cbbe1d2e219d885a50ac0b3909ff482f63f7d05d9ef5440286a31c", 0xd0, 0xffffffffffffffff) keyctl$setperm(0x5, r7, 0x0) ioctl$SCSI_IOCTL_SYNC(r6, 0x4) vmsplice(r5, &(0x7f0000000b80)=[{&(0x7f0000000640)="f06939feff5c76ae7ccc6e50242b1132fc0bc1c9030ad4124aba5da53d9c7c92fe0ee76c6f9f52f6611edd0d810a8331523f769c5bc14c91b13bfcdc114d3626fbe3c78eb7bc57b550df96d5c3fd9b43758694b0f256877fc5cf476e0a98747246d43829ffc88864542bd7b5c95f7b0db727ce6bd8dac0a070c5a02989e32cd71ab6b1bad7dc65aa237d603f8c0001e3fd620a9b828a64fabf1984748b57703d77127c245880c17bf1d5ae056d7c7a941f42bedab20f3241044f7b495e9acef5a9445f65782c3be10923a322405aca4b65745d64c2edca67898599ff529ac9893a81fec7a81268dc6e00cfff1f1f4b791c", 0xf1}, {&(0x7f0000000740)="f334fbb23dea747bea9a4f67c3d0d40f92b6a832f8c8e51b9b4932d00c8827750dc2649fac8e2774f0cf824194d7403a2591d92492368145fcc73b1fb031f4b4068defe9a18faea209bd98f43b17bdfe7c15a5006fd59f1c4f2d982631767d", 0x5f}, {&(0x7f00000007c0)="d8d0d7343ae352f492532146c21e10e1f43dce50b16f767f12984d78cad8e4416328cf25ca95a6b828b695e48b45c9a4f7f1d83f9a3f85e5a9f1ae29870ee703e12a676fb460bfa0cb9b5ee2ac2825194c29a6b592b3c8908ff405e7046aea4b3852b97dea05e3f3e9358e6403dbb600b8479febdbac7414cb1d7074dff135180f2a8a4b332c1dd63ee36527731660b0aaa3f6a248083e3f9eae9b4aeb", 0x9d}, {&(0x7f00000005c0)="0708c1384035f02f1b7a2b4f54982a0b5622ae92e4034cece0e7d243b78d", 0x1e}, {&(0x7f0000000880)="b4c1bf5c4ba8650a7298811b06d36febc1f5e44f50bb070ed59538f639e29a95f4639f047d55fdf97d2f110e30067248216092ea1837ceaab7c06859cd5033ec1bb41d8d709d191e88906b747c5cf84c559c46845e0f64278f5ee210c529e5f43ff72bf6ee0bf31110a635e539783737c447ad334b9f29e97bf60b80e6061536a82dd41bac8cbb0ba4d575b83fcb3eb8320afe45775d5ae34021f2929f7eac9911f9ed249c4b3c02d6c93e10033372af8c7d9032b4645e01a15c5cd0dbb677a0280d4014648fa1ebe6d3212fb7ce9bc233a7ea8abf2d1eba3c4670c2f5a0c4ab6a", 0xe1}, {&(0x7f0000000980)="d45fae7c15c1176f4448ee9af9de6f3eadb26bc43abde9", 0x17}, {&(0x7f00000009c0)="5d4d5b712adb429e1be2892b32a930b9fc7bead864e19da572b170e6f6e5ddf39ed674468fe4a2ea8591495693009f4b4b7704f4329f239da1771626da7102640225860bd40dd4b387366d879577eb83f865e5e3993929b9cfea2b10b7e0813fc097f9e3c4ba752e91a6bc669f1d3557020986757870f3b64712c1429beaebc76720d953f54f3c09381e2593b30afcfbab15a57eccf06bd924e23d1b527539dca30f906645e197", 0xa7}, {&(0x7f0000000a80)="0587e311a28173e96762ab5c9a1b5ed5504f9316f444969b7fb24725d96d8d149785e8a19a80ad697967a77f9a4938929a0f5a3016baafc62aa25b4a4a5ff9b9191ff398e70fecee5120502edf64efa281fcc582598f80405376c87521a19ca0529fc0c5e0075fa5ec464dd650566a3853fe0a24de48c82705360b91fe74e45617975a0c468e9e42cd178f9722e189342c93415b2dbe5354393c35688f53b81ba2657b729c0dbb24d418efd85ac1", 0xae}, {&(0x7f0000000b40)="b13f23398565ac26a4", 0x9}], 0x9, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000280)={0x2}) r8 = gettid() setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000000c0)=@int=0x6, 0x4) kcmp$KCMP_EPOLL_TFD(r8, r8, 0x7, r4, &(0x7f0000000000)={r4, r0}) ppoll(&(0x7f00000002c0)=[{r4}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r9 = syz_open_pts(r0, 0x0) write$FUSE_NOTIFY_STORE(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="c5ffffff040100000000000009001f0000000001040026fb54f98fd1024600000000000000000000000000000000000000000000"], 0x2c) ioctl$TCXONC(r9, 0x540a, 0x0) [ 358.950480] RBP: 000000000072bf00 R08: 0000000020000100 R09: 0000000000000000 [ 358.957746] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f102e8296d4 [ 358.965023] R13: 00000000004c281d R14: 00000000004d3b60 R15: 0000000000000007 08:59:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x10001) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r0, &(0x7f0000000000)={r1, r0}) r3 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x2, 0x8100) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x1, 0x4) ppoll(&(0x7f00000000c0)=[{r3, 0x8}, {r3, 0x20}, {r1, 0x8011}, {r1, 0x2008}], 0x4, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:59:27 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 08:59:27 executing program 1 (fault-call:3 fault-nth:14): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:59:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) pwritev(r0, &(0x7f0000000180)=[{}, {&(0x7f0000000040)="7c2970e91f59ecdbcfcc358429be0cff634f21b2380ccc4b1976755f3e78528bc79c9459b2985e2d95635f47d98811cab74cbd2ee89593efbfe3630de6821f1ebeb6ca3554a0df0de7f0d14e4c342abd9b7fa7fe502b97640f0e78fa96abba11bb35419fac44758ea8c01667dd48b34c1c2392e899695e16c4d3deadf75b60bd43709ce422110c539eb5cfb178e74b58e0d39f50059c52a474b3f53641a1686d5d08d1d498f5fcf6235f4be673dee959c2c59f43383e43d028a2bd055b1fb7528d3561285083693e4312e244e7439d34badc558536e99e050ec0289a8e7be8ad", 0xe0}], 0x2, 0x0) [ 358.995925] binder: 15103:15106 ioctl 40046205 40 returned -22 [ 359.075181] FAULT_INJECTION: forcing a failure. [ 359.075181] name failslab, interval 1, probability 0, space 0, times 0 [ 359.103498] CPU: 1 PID: 15113 Comm: syz-executor1 Not tainted 4.19.0-rc5-next-20180925+ #79 [ 359.112012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 359.121365] Call Trace: [ 359.123962] dump_stack+0x1d3/0x2c4 [ 359.127597] ? dump_stack_print_info.cold.2+0x52/0x52 [ 359.132791] ? kernel_text_address+0x79/0xf0 [ 359.137214] should_fail.cold.4+0xa/0x17 [ 359.141280] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 359.146391] ? graph_lock+0x170/0x170 [ 359.150192] ? save_stack+0xa9/0xd0 [ 359.153821] ? save_stack+0x43/0xd0 [ 359.157451] ? kasan_kmalloc+0xc7/0xe0 [ 359.161346] ? kstrdup+0x39/0x70 [ 359.164712] ? p9_client_create+0x490/0x1769 [ 359.169118] ? v9fs_session_init+0x217/0x1bb0 [ 359.173614] ? v9fs_mount+0x7c/0x8f0 [ 359.177333] ? legacy_get_tree+0x131/0x460 [ 359.181567] ? vfs_get_tree+0x1cb/0x5c0 [ 359.185538] ? do_mount+0x70c/0x1d90 [ 359.189252] ? ksys_mount+0x12d/0x140 [ 359.193054] ? __x64_sys_mount+0xbe/0x150 [ 359.197204] ? find_held_lock+0x36/0x1c0 [ 359.201299] ? ttwu_stat+0x5c0/0x5c0 [ 359.205034] __should_failslab+0x124/0x180 [ 359.209274] should_failslab+0x9/0x14 [ 359.213076] __kmalloc_track_caller+0x2d0/0x750 [ 359.217751] ? match_strdup+0x57/0x80 [ 359.221557] kmemdup_nul+0x31/0xa0 [ 359.225099] match_strdup+0x57/0x80 [ 359.228726] p9_client_create+0x690/0x1769 [ 359.232970] ? p9_client_read+0xb50/0xb50 [ 359.237129] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.242671] ? check_preemption_disabled+0x48/0x200 [ 359.247692] ? __lockdep_init_map+0x105/0x590 [ 359.252191] ? lockdep_init_map+0x9/0x10 [ 359.256252] ? kasan_check_write+0x14/0x20 [ 359.260487] ? __init_rwsem+0x1cc/0x2a0 [ 359.264465] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 359.269490] ? rcu_read_lock_sched_held+0x108/0x120 [ 359.274513] ? save_stack+0xa9/0xd0 [ 359.278150] v9fs_session_init+0x217/0x1bb0 [ 359.282473] ? v9fs_session_init+0x217/0x1bb0 [ 359.286965] ? rcu_pm_notify+0xc0/0xc0 [ 359.290865] ? find_held_lock+0x36/0x1c0 [ 359.294940] ? v9fs_show_options+0x7e0/0x7e0 [ 359.299359] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.304901] ? check_preemption_disabled+0x48/0x200 [ 359.309922] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 359.315462] ? rcu_pm_notify+0xc0/0xc0 [ 359.319368] ? v9fs_mount+0x61/0x8f0 [ 359.323086] ? rcu_read_lock_sched_held+0x108/0x120 [ 359.328100] ? kmem_cache_alloc_trace+0x353/0x750 [ 359.332955] v9fs_mount+0x7c/0x8f0 [ 359.336503] ? v9fs_drop_inode+0x150/0x150 [ 359.340736] legacy_get_tree+0x131/0x460 [ 359.344808] vfs_get_tree+0x1cb/0x5c0 [ 359.348612] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 359.353372] do_mount+0x70c/0x1d90 [ 359.356913] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 359.362455] ? copy_mount_string+0x40/0x40 [ 359.366698] ? copy_mount_options+0x5f/0x430 [ 359.371107] ? kmem_cache_alloc_trace+0x353/0x750 [ 359.375960] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.381499] ? copy_mount_options+0x315/0x430 [ 359.386005] ksys_mount+0x12d/0x140 [ 359.389637] __x64_sys_mount+0xbe/0x150 [ 359.393619] do_syscall_64+0x1b9/0x820 [ 359.397507] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 359.402876] ? syscall_return_slowpath+0x5e0/0x5e0 [ 359.407806] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 359.412654] ? trace_hardirqs_off+0x310/0x310 [ 359.417153] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 359.422172] ? prepare_exit_to_usermode+0x291/0x3b0 [ 359.427192] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 359.432046] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 359.437244] RIP: 0033:0x457579 [ 359.440439] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 359.459344] RSP: 002b:00007f102e828c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 359.467054] RAX: ffffffffffffffda RBX: 00007f102e828c90 RCX: 0000000000457579 08:59:27 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) [ 359.474329] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 359.481599] RBP: 000000000072bf00 R08: 0000000020000100 R09: 0000000000000000 [ 359.488871] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f102e8296d4 [ 359.496136] R13: 00000000004c281d R14: 00000000004d3b60 R15: 0000000000000007 08:59:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x4010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000440)={0x0}) r5 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x80010, r0, 0x57) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xa8, 0x0, &(0x7f00000001c0)=[@increfs_done={0x40106308, r3, 0x2}, @free_buffer={0x40086303, r4}, @reply={0x40406301, {0x4, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)=[@flat={0x77622a85, 0x10b, r5, 0x2}, @fda={0x66646185, 0xa, 0x3, 0x16}, @fd={0x66642a85, 0x0, r1, 0x0, 0x4}], &(0x7f00000000c0)=[0x28, 0x38, 0x38]}}, @transaction={0x40406300, {0x4, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x18, 0x30, &(0x7f0000000100)=[@fd={0x66642a85, 0x0, r2, 0x0, 0x1}], &(0x7f0000000180)=[0x40, 0x20, 0x30, 0x40, 0x30, 0x30]}}], 0x67, 0x0, &(0x7f0000000280)="36b112a4795a49f79ae8750c65b102895e34bcaeca542c93486fe3226749af19503c868380b8009287b0800cbfcedb5ccf49338ed43f19177e89683958e42d1568bcb2076ef0f824bb1b0887d3e1bbccf7a34d803fb7ea2436f792f710da3299f188e66440cfd6"}) r6 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x200) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x2) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000340)) 08:59:27 executing program 1 (fault-call:3 fault-nth:15): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:59:27 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 08:59:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000080)) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) [ 359.693533] binder: 15142:15143 BC_INCREFS_DONE u0000000000000000 no match [ 359.722433] FAULT_INJECTION: forcing a failure. [ 359.722433] name failslab, interval 1, probability 0, space 0, times 0 [ 359.728451] binder: 15142:15143 BC_FREE_BUFFER u0000000000000000 no match [ 359.751837] CPU: 0 PID: 15145 Comm: syz-executor1 Not tainted 4.19.0-rc5-next-20180925+ #79 [ 359.759644] binder: 15142:15143 got reply transaction with no transaction stack [ 359.760342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 359.760349] Call Trace: [ 359.760384] dump_stack+0x1d3/0x2c4 [ 359.760409] ? dump_stack_print_info.cold.2+0x52/0x52 [ 359.760445] should_fail.cold.4+0xa/0x17 [ 359.767996] binder: 15142:15143 transaction failed 29201/-71, size 80-24 line 2741 [ 359.777228] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 359.777255] ? graph_lock+0x170/0x170 [ 359.777279] ? is_bpf_text_address+0xac/0x170 [ 359.777298] ? lock_downgrade+0x900/0x900 [ 359.805508] ? check_preemption_disabled+0x48/0x200 [ 359.805530] ? find_held_lock+0x36/0x1c0 [ 359.813831] ? ttwu_stat+0x5c0/0x5c0 [ 359.813852] ? __kernel_text_address+0xd/0x40 [ 359.830780] __should_failslab+0x124/0x180 [ 359.830809] should_failslab+0x9/0x14 [ 359.830834] __kmalloc_track_caller+0x2d0/0x750 [ 359.839557] ? save_stack+0xa9/0xd0 [ 359.839575] ? parse_opts+0x176/0x510 [ 359.839594] kstrdup+0x39/0x70 [ 359.858628] parse_opts+0x176/0x510 [ 359.862270] ? trace_hardirqs_off+0xb8/0x310 [ 359.866693] ? do_raw_spin_unlock+0xa7/0x2f0 [ 359.871112] ? p9_fd_poll+0x2b0/0x2b0 [ 359.874925] ? kasan_check_write+0x14/0x20 [ 359.879191] ? trace_hardirqs_off+0xb8/0x310 [ 359.883616] ? kfree+0x107/0x230 [ 359.886989] ? kfree+0x107/0x230 [ 359.890377] ? lockdep_hardirqs_on+0x421/0x5c0 [ 359.894982] p9_fd_create+0x8b/0x3f0 [ 359.898705] ? p9_fd_show_options+0x1c0/0x1c0 [ 359.903210] ? p9_client_create+0xbe5/0x1769 [ 359.907634] p9_client_create+0x858/0x1769 [ 359.911883] ? p9_client_read+0xb50/0xb50 [ 359.916075] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.921627] ? check_preemption_disabled+0x48/0x200 [ 359.926655] ? __lockdep_init_map+0x105/0x590 [ 359.931158] ? lockdep_init_map+0x9/0x10 [ 359.935237] ? kasan_check_write+0x14/0x20 [ 359.939472] ? __init_rwsem+0x1cc/0x2a0 [ 359.943434] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 359.948530] ? rcu_read_lock_sched_held+0x108/0x120 [ 359.953535] ? save_stack+0xa9/0xd0 [ 359.957158] v9fs_session_init+0x217/0x1bb0 [ 359.961472] ? v9fs_session_init+0x217/0x1bb0 [ 359.966230] ? rcu_pm_notify+0xc0/0xc0 [ 359.970121] ? find_held_lock+0x36/0x1c0 [ 359.974175] ? v9fs_show_options+0x7e0/0x7e0 [ 359.978571] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.984098] ? check_preemption_disabled+0x48/0x200 [ 359.989104] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 359.994625] ? rcu_pm_notify+0xc0/0xc0 [ 359.998504] ? v9fs_mount+0x61/0x8f0 [ 360.002209] ? rcu_read_lock_sched_held+0x108/0x120 [ 360.007231] ? kmem_cache_alloc_trace+0x353/0x750 [ 360.012082] v9fs_mount+0x7c/0x8f0 [ 360.015612] ? v9fs_drop_inode+0x150/0x150 [ 360.019832] legacy_get_tree+0x131/0x460 [ 360.023897] vfs_get_tree+0x1cb/0x5c0 [ 360.027688] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 360.032433] do_mount+0x70c/0x1d90 [ 360.035960] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 360.041502] ? copy_mount_string+0x40/0x40 [ 360.045730] ? copy_mount_options+0x5f/0x430 [ 360.050160] ? kmem_cache_alloc_trace+0x353/0x750 [ 360.055011] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 360.060558] ? _copy_from_user+0xdf/0x150 [ 360.064708] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.070230] ? copy_mount_options+0x315/0x430 [ 360.074717] ksys_mount+0x12d/0x140 [ 360.078360] __x64_sys_mount+0xbe/0x150 [ 360.082350] do_syscall_64+0x1b9/0x820 [ 360.086229] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 360.091580] ? syscall_return_slowpath+0x5e0/0x5e0 [ 360.096494] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 360.101333] ? trace_hardirqs_off+0x310/0x310 [ 360.105831] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 360.110849] ? prepare_exit_to_usermode+0x291/0x3b0 [ 360.115871] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 360.120716] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 360.125891] RIP: 0033:0x457579 [ 360.129075] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 08:59:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000080)={r1, r0, 0xfffffffffffffffd}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:59:28 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) 08:59:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) unshare(0x10000800) 08:59:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r3 = syz_open_pts(r0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xfffffffffffff001, 0x242000) fcntl$getflags(r4, 0x40b) ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, 0x58, 0x3, 0x81, &(0x7f0000ffd000/0x1000)=nil, 0x4}) ioctl$TCXONC(r3, 0x540a, 0x0) [ 360.147971] RSP: 002b:00007f102e828c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 360.155672] RAX: ffffffffffffffda RBX: 00007f102e828c90 RCX: 0000000000457579 [ 360.162926] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 360.170195] RBP: 000000000072bf00 R08: 0000000020000100 R09: 0000000000000000 [ 360.177448] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f102e8296d4 [ 360.184703] R13: 00000000004c281d R14: 00000000004d3b60 R15: 0000000000000007 [ 360.193580] 9pnet: Insufficient options for proto=fd 08:59:28 executing program 1 (fault-call:3 fault-nth:16): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:59:28 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 08:59:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x4e24, @multicast1}}) r3 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1, 0x400) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000ffe8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff7526253c8fc3da64830d495fc366f75e97a6c12d7d01000000c3908b95fcf8175743a3b96087b945a3f5d2b200f2c209e90b7f207dd00b73eab3a96ce16a8f72cd1d5027c6b04b64baa0210f86440a1975c25f03bf7ef35c8705300000000000000000000000000000"], 0xc8) 08:59:28 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) unshare(0x40000000) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$LOOP_SET_FD(r1, 0x4c00, r1) unlink(&(0x7f00000000c0)='./file0\x00') r2 = geteuid() getpeername$netlink(r1, &(0x7f0000000300), &(0x7f0000000400)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000100)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f00000003c0)=@req) chown(&(0x7f0000000280)='./file0\x00', r2, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000380)) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x2b) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) read(r0, &(0x7f00000004c0)=""/89, 0xfffffffffffffd62) setresuid(r2, r3, r2) sendto$unix(r1, &(0x7f00000002c0)="004e897e7b337b40f4ce0b7f1a82c7257f1cb2463b8dfcd993dba6e76e", 0x1d, 0x90, 0x0, 0x0) [ 360.292746] FAULT_INJECTION: forcing a failure. [ 360.292746] name failslab, interval 1, probability 0, space 0, times 0 [ 360.329138] CPU: 0 PID: 15167 Comm: syz-executor1 Not tainted 4.19.0-rc5-next-20180925+ #79 [ 360.337655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.347015] Call Trace: [ 360.349621] dump_stack+0x1d3/0x2c4 [ 360.349655] ? dump_stack_print_info.cold.2+0x52/0x52 [ 360.358452] ? rcu_softirq_qs+0x20/0x20 [ 360.358478] should_fail.cold.4+0xa/0x17 [ 360.358500] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 360.371614] ? kernel_text_address+0x79/0xf0 [ 360.376060] ? __kernel_text_address+0xd/0x40 [ 360.380570] ? graph_lock+0x170/0x170 [ 360.384379] ? __save_stack_trace+0x8d/0xf0 [ 360.388717] ? find_held_lock+0x36/0x1c0 08:59:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fchmod(r0, 0x60) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$rds(0x15, 0x5, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) [ 360.392814] ? ttwu_stat+0x5c0/0x5c0 [ 360.396546] ? _parse_integer+0x134/0x180 [ 360.400718] __should_failslab+0x124/0x180 [ 360.404972] should_failslab+0x9/0x14 [ 360.408782] __kmalloc_track_caller+0x2d0/0x750 [ 360.413471] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 360.419020] ? rcu_pm_notify+0xc0/0xc0 [ 360.422919] ? match_number.isra.0+0xbf/0x220 [ 360.427432] kmemdup_nul+0x31/0xa0 [ 360.430984] match_number.isra.0+0xbf/0x220 [ 360.435327] ? match_strdup+0x80/0x80 [ 360.439140] ? match_wildcard+0x3c0/0x3c0 [ 360.443310] match_int+0x23/0x30 [ 360.446707] parse_opts+0x32e/0x510 [ 360.446731] ? p9_fd_poll+0x2b0/0x2b0 [ 360.446749] ? kasan_check_write+0x14/0x20 [ 360.446774] ? trace_hardirqs_off+0xb8/0x310 [ 360.454191] ? kfree+0x107/0x230 [ 360.454205] ? kfree+0x107/0x230 [ 360.454224] ? lockdep_hardirqs_on+0x421/0x5c0 [ 360.454251] p9_fd_create+0x8b/0x3f0 [ 360.477858] ? p9_fd_show_options+0x1c0/0x1c0 [ 360.482380] ? p9_client_create+0xbe5/0x1769 [ 360.486803] p9_client_create+0x858/0x1769 08:59:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) [ 360.491061] ? p9_client_read+0xb50/0xb50 [ 360.495229] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.500783] ? check_preemption_disabled+0x48/0x200 [ 360.505816] ? __lockdep_init_map+0x105/0x590 [ 360.510334] ? lockdep_init_map+0x9/0x10 [ 360.514413] ? kasan_check_write+0x14/0x20 [ 360.518657] ? __init_rwsem+0x1cc/0x2a0 [ 360.522645] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 360.527680] ? rcu_read_lock_sched_held+0x108/0x120 [ 360.532712] ? save_stack+0xa9/0xd0 [ 360.536379] v9fs_session_init+0x217/0x1bb0 [ 360.540716] ? v9fs_session_init+0x217/0x1bb0 [ 360.545220] ? rcu_pm_notify+0xc0/0xc0 [ 360.549125] ? find_held_lock+0x36/0x1c0 [ 360.553209] ? v9fs_show_options+0x7e0/0x7e0 [ 360.557629] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.563180] ? check_preemption_disabled+0x48/0x200 [ 360.568220] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 360.573766] ? rcu_pm_notify+0xc0/0xc0 [ 360.577672] ? v9fs_mount+0x61/0x8f0 [ 360.581410] ? rcu_read_lock_sched_held+0x108/0x120 [ 360.586436] ? kmem_cache_alloc_trace+0x353/0x750 [ 360.591301] v9fs_mount+0x7c/0x8f0 [ 360.594867] ? v9fs_drop_inode+0x150/0x150 [ 360.599113] legacy_get_tree+0x131/0x460 [ 360.603191] vfs_get_tree+0x1cb/0x5c0 [ 360.607007] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 360.611778] do_mount+0x70c/0x1d90 [ 360.613672] IPVS: ftp: loaded support on port[0] = 21 [ 360.615337] ? copy_mount_string+0x40/0x40 [ 360.615367] ? retint_kernel+0x2d/0x2d [ 360.615394] ? copy_mount_options+0x239/0x430 [ 360.615413] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 360.615432] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 08:59:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x200400) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000040)={{0x4, 0x1f}, 'port1\x00', 0x2, 0x10004, 0xfffffffffffffffb, 0x372f, 0x5, 0x9, 0x4, 0x0, 0x5, 0x20}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) [ 360.615450] ? copy_mount_options+0x315/0x430 [ 360.648062] ksys_mount+0x12d/0x140 [ 360.651707] __x64_sys_mount+0xbe/0x150 [ 360.655697] do_syscall_64+0x1b9/0x820 [ 360.659596] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 360.664969] ? syscall_return_slowpath+0x5e0/0x5e0 [ 360.669909] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 360.674799] ? trace_hardirqs_off+0x310/0x310 [ 360.679314] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 360.684376] ? prepare_exit_to_usermode+0x291/0x3b0 [ 360.689414] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 360.694278] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 360.699476] RIP: 0033:0x457579 [ 360.702679] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 360.721583] RSP: 002b:00007f102e828c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 360.729301] RAX: ffffffffffffffda RBX: 00007f102e828c90 RCX: 0000000000457579 [ 360.736582] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 360.743854] RBP: 000000000072bf00 R08: 0000000020000100 R09: 0000000000000000 [ 360.751129] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f102e8296d4 [ 360.758403] R13: 00000000004c281d R14: 00000000004d3b60 R15: 0000000000000007 08:59:29 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) [ 360.798888] 9pnet: Insufficient options for proto=fd 08:59:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x20800, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x1, 0xff}) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:59:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) socket$bt_hidp(0x1f, 0x3, 0x6) socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket(0x5, 0xf, 0x2) getsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000000)={@local, @loopback}, &(0x7f0000000040)=0x8) 08:59:29 executing program 1 (fault-call:3 fault-nth:17): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:59:29 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 08:59:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x3}) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x9, 0x100) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000380)}}, 0x10) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 08:59:29 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) [ 361.139627] FAULT_INJECTION: forcing a failure. [ 361.139627] name failslab, interval 1, probability 0, space 0, times 0 [ 361.185264] CPU: 1 PID: 15210 Comm: syz-executor1 Not tainted 4.19.0-rc5-next-20180925+ #79 [ 361.193782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.203135] Call Trace: [ 361.203161] dump_stack+0x1d3/0x2c4 [ 361.203185] ? dump_stack_print_info.cold.2+0x52/0x52 [ 361.203217] should_fail.cold.4+0xa/0x17 [ 361.203236] ? kernel_text_address+0x79/0xf0 [ 361.203257] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 361.203275] ? unwind_get_return_address+0x61/0xa0 [ 361.203298] ? __save_stack_trace+0x8d/0xf0 [ 361.203331] ? graph_lock+0x170/0x170 [ 361.203363] ? save_stack+0xa9/0xd0 [ 361.203388] ? find_held_lock+0x36/0x1c0 [ 361.203431] ? ttwu_stat+0x5c0/0x5c0 [ 361.203449] ? _parse_integer+0x134/0x180 [ 361.203478] __should_failslab+0x124/0x180 [ 361.203499] should_failslab+0x9/0x14 [ 361.203516] __kmalloc_track_caller+0x2d0/0x750 [ 361.203540] ? match_number.isra.0+0xbf/0x220 [ 361.203562] kmemdup_nul+0x31/0xa0 [ 361.203581] match_number.isra.0+0xbf/0x220 [ 361.203599] ? match_strdup+0x80/0x80 [ 361.203616] ? match_wildcard+0x3c0/0x3c0 [ 361.203639] match_int+0x23/0x30 [ 361.203658] parse_opts+0x32e/0x510 [ 361.203682] ? p9_fd_poll+0x2b0/0x2b0 [ 361.203701] ? kasan_check_write+0x14/0x20 [ 361.203725] ? trace_hardirqs_off+0xb8/0x310 [ 361.203746] ? kfree+0x107/0x230 [ 361.203761] ? kfree+0x107/0x230 [ 361.203780] ? lockdep_hardirqs_on+0x421/0x5c0 [ 361.203803] p9_fd_create+0x8b/0x3f0 [ 361.203822] ? p9_fd_show_options+0x1c0/0x1c0 08:59:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000040)={0x100001000, 0x7}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) munlockall() [ 361.203843] ? p9_client_create+0xbe5/0x1769 [ 361.203874] p9_client_create+0x858/0x1769 [ 361.203902] ? p9_client_read+0xb50/0xb50 [ 361.203933] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.203952] ? check_preemption_disabled+0x48/0x200 [ 361.203984] ? __lockdep_init_map+0x105/0x590 [ 361.204016] ? lockdep_init_map+0x9/0x10 [ 361.204030] ? kasan_check_write+0x14/0x20 [ 361.204046] ? __init_rwsem+0x1cc/0x2a0 [ 361.204066] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 361.229179] ? rcu_read_lock_sched_held+0x108/0x120 [ 361.229199] ? save_stack+0xa9/0xd0 [ 361.238440] v9fs_session_init+0x217/0x1bb0 [ 361.238457] ? v9fs_session_init+0x217/0x1bb0 [ 361.238474] ? rcu_pm_notify+0xc0/0xc0 [ 361.257759] ? find_held_lock+0x36/0x1c0 [ 361.257787] ? v9fs_show_options+0x7e0/0x7e0 [ 361.257808] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.265821] ? check_preemption_disabled+0x48/0x200 [ 361.265843] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 361.274978] ? rcu_pm_notify+0xc0/0xc0 [ 361.275004] ? v9fs_mount+0x61/0x8f0 [ 361.275021] ? rcu_read_lock_sched_held+0x108/0x120 [ 361.275039] ? kmem_cache_alloc_trace+0x353/0x750 [ 361.282887] v9fs_mount+0x7c/0x8f0 [ 361.282908] ? v9fs_drop_inode+0x150/0x150 [ 361.282925] legacy_get_tree+0x131/0x460 [ 361.282947] vfs_get_tree+0x1cb/0x5c0 [ 361.282964] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 361.282982] do_mount+0x70c/0x1d90 [ 361.282997] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 361.283019] ? copy_mount_string+0x40/0x40 [ 361.283040] ? copy_mount_options+0x5f/0x430 [ 361.283057] ? kmem_cache_alloc_trace+0x353/0x750 [ 361.283077] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 361.283091] ? _copy_from_user+0xdf/0x150 [ 361.283111] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.294392] ? copy_mount_options+0x315/0x430 [ 361.294415] ksys_mount+0x12d/0x140 [ 361.294436] __x64_sys_mount+0xbe/0x150 [ 361.294457] do_syscall_64+0x1b9/0x820 [ 361.301867] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 361.301887] ? syscall_return_slowpath+0x5e0/0x5e0 [ 361.301902] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 361.301921] ? trace_hardirqs_off+0x310/0x310 [ 361.301938] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 361.301956] ? prepare_exit_to_usermode+0x291/0x3b0 [ 361.301979] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 361.302003] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 361.302016] RIP: 0033:0x457579 [ 361.302032] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 361.302041] RSP: 002b:00007f102e828c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 361.302073] RAX: ffffffffffffffda RBX: 00007f102e828c90 RCX: 0000000000457579 [ 361.302082] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 361.302091] RBP: 000000000072bf00 R08: 0000000020000100 R09: 0000000000000000 [ 361.302100] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f102e8296d4 [ 361.302109] R13: 00000000004c281d R14: 00000000004d3b60 R15: 0000000000000007 [ 361.378775] 9pnet: Insufficient options for proto=fd [ 361.466553] IPVS: ftp: loaded support on port[0] = 21 [ 361.598124] Unknown ioctl -1072667636 08:59:30 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) unshare(0x40000000) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$LOOP_SET_FD(r1, 0x4c00, r1) unlink(&(0x7f00000000c0)='./file0\x00') r2 = geteuid() getpeername$netlink(r1, &(0x7f0000000300), &(0x7f0000000400)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000100)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f00000003c0)=@req) chown(&(0x7f0000000280)='./file0\x00', r2, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000380)) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x2b) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) read(r0, &(0x7f00000004c0)=""/89, 0xfffffffffffffd62) setresuid(r2, r3, r2) sendto$unix(r1, &(0x7f00000002c0)="004e897e7b337b40f4ce0b7f1a82c7257f1cb2463b8dfcd993dba6e76e", 0x1d, 0x90, 0x0, 0x0) 08:59:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) syz_extract_tcp_res(&(0x7f0000000000), 0x8, 0x5) 08:59:30 executing program 1 (fault-call:3 fault-nth:18): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:59:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r4 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000100)=0x120, 0x36b) write(r4, &(0x7f00000001c0), 0x2c1) recvmmsg(r4, &(0x7f0000000d80), 0x262, 0x2000, &(0x7f00000000c0)) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) ppoll(&(0x7f00000002c0)=[{r1}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) r5 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) 08:59:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) fcntl$setflags(r0, 0x2, 0x1) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCGPTPEER(r0, 0x5441, 0x42) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x0) setpriority(0x3, r2, 0x7f) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 08:59:30 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 08:59:30 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) [ 362.646685] FAULT_INJECTION: forcing a failure. [ 362.646685] name failslab, interval 1, probability 0, space 0, times 0 [ 362.693563] CPU: 0 PID: 15248 Comm: syz-executor1 Not tainted 4.19.0-rc5-next-20180925+ #79 [ 362.702105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.711465] Call Trace: [ 362.714067] dump_stack+0x1d3/0x2c4 [ 362.717713] ? dump_stack_print_info.cold.2+0x52/0x52 [ 362.722912] ? parse_opts+0x3ba/0x510 [ 362.726719] ? p9_fd_create+0x8b/0x3f0 [ 362.730613] ? p9_client_create+0x858/0x1769 [ 362.735029] ? v9fs_session_init+0x217/0x1bb0 [ 362.739537] ? legacy_get_tree+0x131/0x460 [ 362.743788] should_fail.cold.4+0xa/0x17 [ 362.747858] ? do_raw_spin_unlock+0xa7/0x2f0 [ 362.752279] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 362.757403] ? kasan_check_write+0x14/0x20 [ 362.761651] ? graph_lock+0x170/0x170 [ 362.765462] ? kfree+0x107/0x230 [ 362.768842] ? lockdep_hardirqs_on+0x421/0x5c0 [ 362.773438] ? trace_hardirqs_on+0xbd/0x310 [ 362.777777] ? find_held_lock+0x36/0x1c0 [ 362.781869] ? ttwu_stat+0x5c0/0x5c0 [ 362.785595] ? p9_fd_poll+0x2b0/0x2b0 [ 362.789407] ? kasan_check_write+0x14/0x20 [ 362.793671] __should_failslab+0x124/0x180 [ 362.797916] should_failslab+0x9/0x14 [ 362.801726] kmem_cache_alloc_trace+0x2d7/0x750 [ 362.806398] ? kfree+0x107/0x230 [ 362.809780] ? lockdep_hardirqs_on+0x421/0x5c0 [ 362.814388] p9_fd_create+0x1a7/0x3f0 [ 362.818197] ? p9_fd_show_options+0x1c0/0x1c0 [ 362.822709] ? p9_client_create+0xbe5/0x1769 [ 362.827127] p9_client_create+0x858/0x1769 [ 362.831399] ? p9_client_read+0xb50/0xb50 [ 362.835568] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.841114] ? check_preemption_disabled+0x48/0x200 [ 362.846179] ? __lockdep_init_map+0x105/0x590 [ 362.850685] ? lockdep_init_map+0x9/0x10 [ 362.854769] ? kasan_check_write+0x14/0x20 [ 362.859008] ? __init_rwsem+0x1cc/0x2a0 [ 362.862996] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 362.868033] ? rcu_read_lock_sched_held+0x108/0x120 [ 362.873059] ? save_stack+0xa9/0xd0 [ 362.876704] v9fs_session_init+0x217/0x1bb0 [ 362.881039] ? v9fs_session_init+0x217/0x1bb0 [ 362.885539] ? rcu_pm_notify+0xc0/0xc0 [ 362.889439] ? find_held_lock+0x36/0x1c0 [ 362.893521] ? v9fs_show_options+0x7e0/0x7e0 [ 362.897938] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.903481] ? check_preemption_disabled+0x48/0x200 [ 362.908515] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 362.914061] ? rcu_pm_notify+0xc0/0xc0 [ 362.917967] ? v9fs_mount+0x61/0x8f0 [ 362.921689] ? rcu_read_lock_sched_held+0x108/0x120 [ 362.926710] ? kmem_cache_alloc_trace+0x353/0x750 [ 362.931568] v9fs_mount+0x7c/0x8f0 [ 362.935123] ? v9fs_drop_inode+0x150/0x150 [ 362.939372] legacy_get_tree+0x131/0x460 [ 362.943449] vfs_get_tree+0x1cb/0x5c0 [ 362.947260] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 362.952029] do_mount+0x70c/0x1d90 [ 362.955576] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 362.961124] ? copy_mount_string+0x40/0x40 [ 362.965375] ? copy_mount_options+0x5f/0x430 [ 362.969790] ? kmem_cache_alloc_trace+0x353/0x750 [ 362.974653] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.980215] ? copy_mount_options+0x315/0x430 [ 362.984721] ksys_mount+0x12d/0x140 [ 362.988375] __x64_sys_mount+0xbe/0x150 [ 362.992406] do_syscall_64+0x1b9/0x820 [ 362.996300] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 363.001684] ? syscall_return_slowpath+0x5e0/0x5e0 [ 363.006618] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 363.011472] ? trace_hardirqs_off+0x310/0x310 [ 363.015978] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 363.021020] ? prepare_exit_to_usermode+0x291/0x3b0 [ 363.026048] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 363.030906] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 363.036101] RIP: 0033:0x457579 [ 363.039303] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 363.058213] RSP: 002b:00007f102e828c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 363.065927] RAX: ffffffffffffffda RBX: 00007f102e828c90 RCX: 0000000000457579 [ 363.073196] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 363.080472] RBP: 000000000072bf00 R08: 0000000020000100 R09: 0000000000000000 [ 363.087740] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f102e8296d4 08:59:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10400, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/42, &(0x7f0000000080)=0x2a) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) [ 363.095026] R13: 00000000004c281d R14: 00000000004d3b60 R15: 0000000000000007 [ 363.115644] IPVS: ftp: loaded support on port[0] = 21 08:59:31 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) 08:59:31 executing program 1 (fault-call:3 fault-nth:19): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:59:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000280)=0x5) read(r0, &(0x7f0000000040)=""/11, 0xb) ppoll(&(0x7f0000000080)=[{r0, 0xc}, {r0, 0x100}], 0x2, &(0x7f00000000c0), &(0x7f00000001c0)={0x2ab9}, 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000000640)={0x7, 0x7, 0xff, 0x0, '\x00', 0x3}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00.6fmle0'], 0x14) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x0, 0x0) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) umount2(&(0x7f0000000500)='./file0\x00', 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='cpuset\x00') fallocate(r3, 0x12, 0x37e, 0x1000f4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000600)='/dev/hwrng\x00', 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000540)={0x9500000000000000, 0x1000, 0x0, 0x1, 0x13}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000400), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000140)) r6 = gettid() kcmp$KCMP_EPOLL_TFD(r6, r6, 0x7, r5, &(0x7f0000000000)={r5, r0}) 08:59:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x20040) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x70e000) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x0) flistxattr(r2, &(0x7f0000000040)=""/25, 0x19) [ 363.296689] FAULT_INJECTION: forcing a failure. [ 363.296689] name failslab, interval 1, probability 0, space 0, times 0 [ 363.344010] CPU: 0 PID: 15277 Comm: syz-executor1 Not tainted 4.19.0-rc5-next-20180925+ #79 [ 363.352520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.352529] Call Trace: [ 363.352554] dump_stack+0x1d3/0x2c4 [ 363.352578] ? dump_stack_print_info.cold.2+0x52/0x52 [ 363.352601] ? mark_held_locks+0x130/0x130 [ 363.352627] should_fail.cold.4+0xa/0x17 [ 363.352649] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 363.352678] ? graph_lock+0x170/0x170 [ 363.352697] ? find_held_lock+0x36/0x1c0 [ 363.352729] ? find_held_lock+0x36/0x1c0 [ 363.390636] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 363.390659] ? ttwu_stat+0x5c0/0x5c0 [ 363.398774] ? trace_hardirqs_on+0xbd/0x310 [ 363.398791] ? kasan_check_read+0x11/0x20 [ 363.398809] ? add_wait_queue+0x1b9/0x2b0 [ 363.420191] __should_failslab+0x124/0x180 [ 363.420211] should_failslab+0x9/0x14 [ 363.420226] kmem_cache_alloc+0x2be/0x730 [ 363.420243] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 363.420260] ? add_wait_queue+0x1b9/0x2b0 [ 363.432414] p9_client_prepare_req.part.6+0xcf/0x940 [ 363.432436] ? trace_9p_protocol_dump+0x3a0/0x3a0 [ 363.432457] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 363.441685] ? userfaultfd_poll+0x22b/0x3a0 [ 363.441703] ? init_once_userfaultfd_ctx+0xd0/0xd0 [ 363.441722] ? p9_pollwait+0x83/0x210 [ 363.451644] ? p9_conn_create+0x720/0x720 [ 363.451662] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 363.451682] p9_client_rpc+0x231/0x1320 [ 363.451696] ? p9_fd_poll+0x1e0/0x2b0 [ 363.451713] ? p9_conn_create+0x565/0x720 [ 363.466137] ? p9_client_prepare_req.part.6+0x940/0x940 [ 363.466162] ? ksys_dup3+0x680/0x680 [ 363.479632] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 363.479648] ? rcu_pm_notify+0xc0/0xc0 [ 363.479672] ? p9_fd_create+0x1a7/0x3f0 [ 363.496905] ? rcu_read_lock_sched_held+0x108/0x120 [ 363.496923] ? kmem_cache_alloc_trace+0x353/0x750 [ 363.496936] ? kfree+0x107/0x230 [ 363.496956] ? lockdep_hardirqs_on+0x421/0x5c0 [ 363.514022] ? p9_fd_show_options+0x1c0/0x1c0 [ 363.514050] p9_client_create+0x9b7/0x1769 [ 363.523897] ? p9_client_read+0xb50/0xb50 [ 363.536312] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 363.536351] ? check_preemption_disabled+0x48/0x200 [ 363.536377] ? __lockdep_init_map+0x105/0x590 [ 363.555298] ? lockdep_init_map+0x9/0x10 [ 363.555327] ? kasan_check_write+0x14/0x20 [ 363.555346] ? __init_rwsem+0x1cc/0x2a0 [ 363.568102] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 363.568130] ? rcu_read_lock_sched_held+0x108/0x120 [ 363.582097] ? save_stack+0xa9/0xd0 [ 363.585744] v9fs_session_init+0x217/0x1bb0 [ 363.585761] ? v9fs_session_init+0x217/0x1bb0 [ 363.585779] ? rcu_pm_notify+0xc0/0xc0 [ 363.598461] ? find_held_lock+0x36/0x1c0 [ 363.602541] ? v9fs_show_options+0x7e0/0x7e0 [ 363.606957] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 363.606976] ? check_preemption_disabled+0x48/0x200 [ 363.606997] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 363.623056] ? rcu_pm_notify+0xc0/0xc0 [ 363.626956] ? v9fs_mount+0x61/0x8f0 [ 363.630671] ? rcu_read_lock_sched_held+0x108/0x120 [ 363.630690] ? kmem_cache_alloc_trace+0x353/0x750 [ 363.630715] v9fs_mount+0x7c/0x8f0 [ 363.630736] ? v9fs_drop_inode+0x150/0x150 [ 363.630754] legacy_get_tree+0x131/0x460 [ 363.640608] vfs_get_tree+0x1cb/0x5c0 [ 363.640626] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 363.640645] do_mount+0x70c/0x1d90 [ 363.640661] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 363.640680] ? copy_mount_string+0x40/0x40 [ 363.648438] ? copy_mount_options+0x5f/0x430 [ 363.648458] ? kmem_cache_alloc_trace+0x353/0x750 [ 363.648480] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 363.664623] ? _copy_from_user+0xdf/0x150 [ 363.664648] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 363.664667] ? copy_mount_options+0x315/0x430 [ 363.683645] ksys_mount+0x12d/0x140 [ 363.698820] __x64_sys_mount+0xbe/0x150 [ 363.710900] do_syscall_64+0x1b9/0x820 [ 363.714813] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 363.720217] ? syscall_return_slowpath+0x5e0/0x5e0 [ 363.725151] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 363.730000] ? trace_hardirqs_off+0x310/0x310 [ 363.734502] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 363.739528] ? prepare_exit_to_usermode+0x291/0x3b0 [ 363.744561] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 363.749424] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 363.754614] RIP: 0033:0x457579 [ 363.757817] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 363.776719] RSP: 002b:00007f102e828c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 363.784451] RAX: ffffffffffffffda RBX: 00007f102e828c90 RCX: 0000000000457579 [ 363.791725] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 363.799009] RBP: 000000000072bf00 R08: 0000000020000100 R09: 0000000000000000 [ 363.806278] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f102e8296d4 [ 363.813548] R13: 00000000004c281d R14: 00000000004d3b60 R15: 0000000000000007 [ 363.831292] kasan: CONFIG_KASAN_INLINE enabled [ 363.835910] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 363.860052] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 363.866386] CPU: 1 PID: 15277 Comm: syz-executor1 Not tainted 4.19.0-rc5-next-20180925+ #79 [ 363.874881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.884246] RIP: 0010:p9_client_prepare_req.part.6+0x47c/0x940 [ 363.890368] Code: ff 0f 87 fc fc ff ff e8 f2 0d eb f9 0f be 85 a4 fe ff ff 4c 89 f2 48 c1 ea 03 89 85 a4 fe ff ff 48 b8 00 00 00 00 00 fc ff df <0f> b6 14 02 4c 89 f0 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 2b [ 363.909294] RSP: 0018:ffff88018f2a71e0 EFLAGS: 00010203 [ 363.914673] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90002e5e000 [ 363.921945] RDX: 000000000000000b RSI: ffffffff87924bce RDI: 0000000000000282 [ 363.929214] RBP: ffff88018f2a7358 R08: ffff88019658a300 R09: ffffed003b5a5b57 [ 363.936492] R10: ffffed003b5a5b57 R11: ffff8801dad2dabb R12: ffff8801c95d7840 [ 363.943788] R13: 0000000000002000 R14: 000000000000005e R15: 0000000000002000 [ 363.944725] kobject: 'loop2' (000000007c4486eb): kobject_uevent_env [ 363.951063] FS: 00007f102e829700(0000) GS:ffff8801dad00000(0000) knlGS:0000000000000000 [ 363.951088] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 363.951096] CR2: 00007f40de4eb518 CR3: 00000001ce469000 CR4: 00000000001406e0 [ 363.951111] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 363.979015] kobject: 'loop2' (000000007c4486eb): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 363.979280] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 364.003254] Call Trace: [ 364.005851] ? trace_9p_protocol_dump+0x3a0/0x3a0 [ 364.010731] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 364.015934] ? userfaultfd_poll+0x22b/0x3a0 [ 364.020264] ? init_once_userfaultfd_ctx+0xd0/0xd0 [ 364.022663] kobject: 'loop2' (000000007c4486eb): kobject_uevent_env [ 364.025203] ? p9_pollwait+0x83/0x210 [ 364.035399] ? p9_conn_create+0x720/0x720 [ 364.039556] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.045106] p9_client_rpc+0x231/0x1320 [ 364.049084] ? p9_fd_poll+0x1e0/0x2b0 [ 364.052892] ? p9_conn_create+0x565/0x720 [ 364.057043] ? p9_client_prepare_req.part.6+0x940/0x940 [ 364.062424] ? ksys_dup3+0x680/0x680 [ 364.066144] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 364.071704] ? rcu_pm_notify+0xc0/0xc0 [ 364.075600] ? p9_fd_create+0x1a7/0x3f0 [ 364.079580] ? rcu_read_lock_sched_held+0x108/0x120 [ 364.084603] ? kmem_cache_alloc_trace+0x353/0x750 [ 364.089443] ? kfree+0x107/0x230 [ 364.092818] ? lockdep_hardirqs_on+0x421/0x5c0 [ 364.097922] ? p9_fd_show_options+0x1c0/0x1c0 [ 364.102431] p9_client_create+0x9b7/0x1769 [ 364.106673] ? p9_client_read+0xb50/0xb50 [ 364.110831] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.116380] ? check_preemption_disabled+0x48/0x200 [ 364.121401] ? __lockdep_init_map+0x105/0x590 [ 364.125904] ? lockdep_init_map+0x9/0x10 [ 364.129980] ? kasan_check_write+0x14/0x20 [ 364.134240] ? __init_rwsem+0x1cc/0x2a0 [ 364.138217] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 364.143239] ? rcu_read_lock_sched_held+0x108/0x120 [ 364.148262] ? save_stack+0xa9/0xd0 [ 364.151901] v9fs_session_init+0x217/0x1bb0 [ 364.156226] ? v9fs_session_init+0x217/0x1bb0 [ 364.160720] ? rcu_pm_notify+0xc0/0xc0 [ 364.164612] ? find_held_lock+0x36/0x1c0 [ 364.168682] ? v9fs_show_options+0x7e0/0x7e0 [ 364.173092] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.178634] ? check_preemption_disabled+0x48/0x200 [ 364.183655] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 364.189211] ? rcu_pm_notify+0xc0/0xc0 [ 364.193121] ? v9fs_mount+0x61/0x8f0 [ 364.196840] ? rcu_read_lock_sched_held+0x108/0x120 [ 364.201884] ? kmem_cache_alloc_trace+0x353/0x750 [ 364.206735] v9fs_mount+0x7c/0x8f0 [ 364.210299] ? v9fs_drop_inode+0x150/0x150 [ 364.214557] legacy_get_tree+0x131/0x460 [ 364.218624] vfs_get_tree+0x1cb/0x5c0 [ 364.222433] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 364.227197] do_mount+0x70c/0x1d90 [ 364.230787] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 364.236336] ? copy_mount_string+0x40/0x40 [ 364.240576] ? copy_mount_options+0x5f/0x430 [ 364.244986] ? kmem_cache_alloc_trace+0x353/0x750 [ 364.249834] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 364.255383] ? _copy_from_user+0xdf/0x150 [ 364.259535] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.265074] ? copy_mount_options+0x315/0x430 [ 364.269572] ksys_mount+0x12d/0x140 [ 364.273232] __x64_sys_mount+0xbe/0x150 [ 364.277225] do_syscall_64+0x1b9/0x820 [ 364.281134] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 364.286522] ? syscall_return_slowpath+0x5e0/0x5e0 [ 364.291457] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 364.296303] ? trace_hardirqs_off+0x310/0x310 [ 364.300824] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 364.305866] ? prepare_exit_to_usermode+0x291/0x3b0 [ 364.310884] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 364.315732] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 364.320920] RIP: 0033:0x457579 [ 364.324118] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 364.343031] RSP: 002b:00007f102e828c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 364.350743] RAX: ffffffffffffffda RBX: 00007f102e828c90 RCX: 0000000000457579 08:59:32 executing program 2: 08:59:32 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 08:59:32 executing program 2: [ 364.358008] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 364.365275] RBP: 000000000072bf00 R08: 0000000020000100 R09: 0000000000000000 [ 364.372540] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f102e8296d4 [ 364.379816] R13: 00000000004c281d R14: 00000000004d3b60 R15: 0000000000000007 [ 364.387108] Modules linked in: 08:59:32 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x80, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) [ 364.422643] kobject: 'loop2' (000000007c4486eb): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 364.436031] ---[ end trace 9e163bbccd47734b ]--- [ 364.443310] RIP: 0010:p9_client_prepare_req.part.6+0x47c/0x940 [ 364.449380] Code: ff 0f 87 fc fc ff ff e8 f2 0d eb f9 0f be 85 a4 fe ff ff 4c 89 f2 48 c1 ea 03 89 85 a4 fe ff ff 48 b8 00 00 00 00 00 fc ff df <0f> b6 14 02 4c 89 f0 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 2b [ 364.470254] RSP: 0018:ffff88018f2a71e0 EFLAGS: 00010203 [ 364.475805] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90002e5e000 [ 364.483646] RDX: 000000000000000b RSI: ffffffff87924bce RDI: 0000000000000282 [ 364.491989] RBP: ffff88018f2a7358 R08: ffff88019658a300 R09: ffffed003b5a5b57 [ 364.499388] R10: ffffed003b5a5b57 R11: ffff8801dad2dabb R12: ffff8801c95d7840 [ 364.506847] R13: 0000000000002000 R14: 000000000000005e R15: 0000000000002000 [ 364.514318] FS: 00007f102e829700(0000) GS:ffff8801dac00000(0000) knlGS:0000000000000000 [ 364.523307] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 364.529407] CR2: 0000001b30723000 CR3: 00000001ce469000 CR4: 00000000001406f0 [ 364.536866] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 364.544311] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 364.551775] Kernel panic - not syncing: Fatal exception [ 364.558092] Kernel Offset: disabled [ 364.561714] Rebooting in 86400 seconds..