0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000440)=0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x0, 0x1, 0x5, 0x3, 0x709}}) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) 16:28:11 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_mult,plier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x48000000, 0x12, r0, 0x0) [ 2048.910737] binder_alloc: binder_alloc_mmap_handler: 4981 20002000-20007000 already mapped failed -16 16:28:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="c520611ccca34b596377d3d79128a36f2797899a00f917af4bdacc57fb1f0ccecf99ce62f713dcdb8b6ffdecc4dba7", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000080)}) 16:28:11 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x7}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2048.986514] binder: 4986:5000 unknown command 1074595840 [ 2048.994275] binder: 4986:5000 ioctl c0306201 20007000 returned -22 [ 2049.011235] binder: 4986:5004 unknown command 1074595840 [ 2049.018925] binder: 4986:5004 ioctl c0306201 20007000 returned -22 [ 2049.031517] binder: 4982:5007 unknown command 0 16:28:11 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multi\nlier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x3, 0x12, r0, 0x0) [ 2049.053999] binder_alloc: binder_alloc_mmap_handler: 4999 20002000-20007000 already mapped failed -16 [ 2049.074285] binder: 4982:4994 ioctl c004aea7 200003c0 returned -22 [ 2049.128417] binder: 4982:5007 ioctl c0306201 200000c0 returned -22 16:28:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x7400000000000000, 0x12, r0, 0x0) [ 2049.177381] binder: binder_mmap: 5014 20002000-20007000 bad vm_flags failed -1 [ 2049.251777] binder: 4982:4994 unknown command 0 [ 2049.291261] binder: 4982:5017 ioctl c004aea7 200003c0 returned -22 [ 2049.301065] binder_alloc: binder_alloc_mmap_handler: 5027 20002000-20007000 already mapped failed -16 [ 2049.329261] binder: 4982:4994 ioctl c0306201 200000c0 returned -22 16:28:12 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:12 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffe0}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000080)=0x7, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) 16:28:12 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multi0lier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x8000000000000000, 0x12, r0, 0x0) 16:28:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0xc6, 0x240) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000100)=""/16) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="0a95b40cd97e0ea5ad4456c608400d24ab00046481cc", @ANYRES64=0x0, @ANYBLOB='\x00\b'], 0x0, 0x0, &(0x7f0000002000)}) 16:28:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x5000000, 0x12, r0, 0x0) [ 2049.797349] binder_alloc: binder_alloc_mmap_handler: 5040 20002000-20007000 already mapped failed -16 16:28:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6c00, 0x12, r0, 0x0) 16:28:12 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiXlier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="04000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) [ 2049.875959] binder: BC_ACQUIRE_RESULT not supported [ 2049.880369] binder_alloc: binder_alloc_mmap_handler: 5053 20002000-20007000 already mapped failed -16 [ 2049.881639] binder: 5038:5054 ioctl c0306201 20007000 returned -22 16:28:12 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffe0}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x600, 0x12, r0, 0x0) [ 2050.006044] binder: 5042:5064 unknown command 243194124 [ 2050.042514] binder: 5042:5064 ioctl c0306201 20007000 returned -22 [ 2050.063397] binder: 5075:5079 unknown command 4 [ 2050.069162] binder: 5075:5079 ioctl c0306201 20007000 returned -22 [ 2050.081724] binder: 5075:5083 unknown command 4 [ 2050.088133] binder: 5075:5083 ioctl c0306201 20007000 returned -22 16:28:13 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setflags(r1, 0x2, 0x1) r2 = socket$inet(0x2, 0x0, 0xffffffff80000001) timerfd_create(0x0, 0x80800) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000004, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0xf5) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x12, 0x0, 0x4000000000004, 0x78, 0x1000000}, 0x2c) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000080)={0xfffffffffffffffb, 0x87b9, 0x1ff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x3, &(0x7f0000005fd4)=[@acquire_done={0x4008630a}], 0x0, 0x0, &(0x7f0000002000)}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x2, 0x4) 16:28:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) bind$nfc_llcp(r2, &(0x7f00000000c0)={0x27, 0x1, 0x0, 0xc044c522fcca1c94, 0x101, 0x0, "2a9b902826a985114a64d94f846b1bc9f92757ac952b51e4b424caa97594f1774a6612e8148cfb0db1601fac2c79e0ff7f2f82329d0cee09ba9c08a871e45d", 0x29}, 0x60) 16:28:13 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiulier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:13 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x32f}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x7a00, 0x12, r0, 0x0) 16:28:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x48, 0x12, r0, 0x0) 16:28:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x7, 0x12, r0, 0x0) 16:28:13 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multi#lier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2050.814708] binder: BC_ACQUIRE_RESULT not supported 16:28:13 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:13 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040), 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1000000000012, 0xb9, 0x4, 0x20}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000000c0)) [ 2050.871855] binder: 5100:5119 unknown command 64 [ 2050.895464] binder: BC_ACQUIRE_RESULT not supported [ 2050.908810] binder: 5095:5114 ioctl c0306201 20007000 returned -22 [ 2050.918124] binder: 5124:5127 unknown command 64 [ 2050.933599] binder: 5095:5122 ioctl c0306201 20007000 returned -22 16:28:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x400000000000, 0x12, r0, 0x0) 16:28:13 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x3) clone(0x8283fd, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) socketpair(0xa, 0x6, 0x3, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000180)={&(0x7f0000000140)=[0x9, 0x0, 0xe, 0x7fff, 0x3, 0x2, 0x800], 0x7, 0x5, 0x4, 0x0, 0x3, 0xffffffff, {0x20, 0x1000, 0x0, 0x3, 0x9, 0x5, 0xfffffffffffffffc, 0x0, 0x7ea, 0x9, 0x11, 0x83e1, 0x3, 0x4, "0f42d3b3e6aadbb4af7a5ce991cc2215eb8f7a3d5c47d5cf5166a8a663b7e66f"}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) 16:28:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0xfffffffffffffffe) clone(0x30080200, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x3, &(0x7f0000005fd4)=ANY=[@ANYBLOB='\n\t\b@', @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) [ 2050.950077] binder: 5100:5119 ioctl c0306201 20007000 returned -22 [ 2050.959936] binder: binder_mmap: 5121 20002000-20007000 bad vm_flags failed -1 [ 2050.989460] binder: 5124:5127 ioctl c0306201 20007000 returned -22 16:28:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6, 0x12, r0, 0x0) 16:28:13 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multi*lier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:14 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x385}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x2000000000000000, 0x12, r0, 0x0) [ 2051.103299] binder: binder_mmap: 5149 20002000-20007000 bad vm_flags failed -1 [ 2051.128629] binder: BC_ACQUIRE_RESULT not supported 16:28:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x3f000000, 0x12, r0, 0x0) [ 2051.178901] binder: 5145:5156 ioctl c0306201 20007000 returned -22 16:28:14 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiclier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6c000000, 0x12, r0, 0x0) [ 2051.251014] binder: BC_ACQUIRE_RESULT not supported 16:28:14 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x9}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2051.369091] binder: 5145:5177 ioctl c0306201 20007000 returned -22 16:28:14 executing program 3: socketpair(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@gettaction={0x20, 0x32, 0x300, 0x70bd26, 0x25dfdbfd, {0x0, 0xa63, 0x7}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040001}, 0xd) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x4c000000, 0x12, r0, 0x0) 16:28:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.events\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x9}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000003c0)={r1, 0x4}, &(0x7f0000000400)=0x8) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x900, 0x0) r4 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x1ff, 0x420400) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0xffff}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={r5, 0x9}, &(0x7f0000000180)=0x8) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000480)={0x0, 0xfb, 0xbc, 0x4, 0x2, "5fa71066e80fce491cde1910c7995706", "e743c5ff15848b656d53271c77eadaf1f4841efbeed4f37dfda83dff0e8f98f3d045a3fec85a996d1ce934c0922b21bcad16ebcb1a748b20e050c4a5907680883d46523c02d8b2e9318505299cd4b9de02831dd4521aabff6e810f3462b24f0953ff957a752ed44c1df8acde0c19a7b3d8dc98c39f6ea2a34e2b881a373e054adb66c37f0caf73859ac9487f98273e81ee2ab314711187e6bca3ed42c9925b1916e50edb3040db"}, 0xbc, 0x3) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000200)={r5, @in={{0x2, 0x4e20}}, 0x4, 0x1b, 0x10000, 0x0, 0x3}, &(0x7f00000002c0)=0x98) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x3, &(0x7f0000005fd4)=ANY=[@ANYBLOB='\nc\b@', @ANYRES64=0x0, @ANYBLOB="ee00000000f3b500"], 0x0, 0x0, &(0x7f0000002000)}) 16:28:14 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiilier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:14 executing program 5: r0 = socket$inet6(0xa, 0x7fe, 0x5) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$notify(r0, 0x402, 0x24) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x117, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x1, {0xa, 0x4e20, 0x3ff, @ipv4={[], [], @loopback}, 0x7}, r2}}, 0x38) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) 16:28:14 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x751648d2}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x60000000, 0x12, r0, 0x0) [ 2051.793823] binder: 5208:5209 unknown command 64 [ 2051.803494] binder: 5208:5209 ioctl c0306201 20007000 returned -22 [ 2051.827283] binder: BC_ACQUIRE_RESULT not supported 16:28:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$pppoe(0x18, 0x1, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x3, &(0x7f0000005fd4)=[@acquire_done={0x4008630a}], 0x0, 0x0, &(0x7f0000002000)}) 16:28:14 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiolier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2051.844973] binder: 5211:5212 ioctl c0306201 20007000 returned -22 16:28:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x68, 0x12, r0, 0x0) 16:28:14 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xff0f}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x301500) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x2, 0x0, [0xffffffffffff9e88, 0x3, 0x7, 0xfffffffffffff88c, 0x8, 0x2, 0x4, 0x8001]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) [ 2051.994130] binder: BC_ACQUIRE_RESULT not supported [ 2052.000026] binder: 5240:5242 ioctl c0306201 20007000 returned -22 [ 2052.058832] binder: 5238:5244 unknown command 64 [ 2052.064193] binder: 5238:5244 ioctl c0306201 20007000 returned -22 16:28:15 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) preadv(r2, &(0x7f00000002c0), 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) r3 = semget$private(0x0, 0x4, 0xc4) semtimedop(r3, &(0x7f0000000300)=[{0xcd0c5deaf09776dd, 0x8, 0x800}, {0x0, 0x81, 0x1000}, {0x0, 0x9, 0x1000}, {0x0, 0xe4c, 0x1800}], 0x4, &(0x7f0000000340)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x5000, 0x12, r0, 0x0) 16:28:15 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multixlier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200008912, &(0x7f0000000000)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) 16:28:15 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x5b}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/217, 0xd9}], 0x1, &(0x7f0000000340)=""/48, 0x30, 0x6}, 0x10000) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xff, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x3, &(0x7f0000005fd4)=[@acquire_done={0x4008630a}], 0x0, 0x0, &(0x7f0000002000)}) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x2000, &(0x7f0000000140)='/dev/binder#\x00') 16:28:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffff7f00000000, 0x12, r0, 0x0) 16:28:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xa00, 0x12, r0, 0x0) [ 2052.683925] binder: BC_ACQUIRE_RESULT not supported [ 2052.703638] binder: 5263:5270 ioctl c0306201 20007000 returned -22 [ 2052.728047] binder: BC_ACQUIRE_RESULT not supported [ 2052.733150] binder: 5263:5277 ioctl c0306201 20007000 returned -22 16:28:15 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x3}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x4c00, 0x12, r0, 0x0) 16:28:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="b9c616dda1aca1e6b0f328336864dce84508775cfc5a9bd480a966cfbccf4fc70786c9e6b6e67a81fb22812434293d36e7908b7b41e8b4da5862fa6c3a0500da808359c7601822085eb9f27868f59b2738f6976a1a6c6f5a20cb6aeca258502a5d6458081c2e54f49e49c1ba813ff70e65d0630000000000000078b584383fa248fe969506dac29a9db01e2caeb4f609feced5f44b5fb9a70fcf8d6eff731d8d3151882b9031be6806ee5e9ad7fb7af5369ecb7c7b0a9e406e881447b767e89b06653a9e7ea574baecaf8a0b33d9c77e1c62ecc2419e7c3e1931fc9d2e074121389c3a2fc25d808a9947a93a6b88cabf4f9928e64ce582a7925fd616b07cb5ea9444de27b97dc73c966a035ddff0d53aa8b85f459fd0f5b6f3c32ac1a5368b161644766d94e1fc6968e623ee89b0dd856d5498314fa9fc15a42e06c3e4a0ef4e25328913888dd2973dff3716677825e29abc9c5adb81bbec95ae397fbb3cffb32cd66e9d975552", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) 16:28:15 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multi+lier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2052.802965] binder: 5269:5283 unknown command 64 [ 2052.809897] binder: 5269:5283 ioctl c0306201 20007000 returned -22 [ 2052.816913] binder: 5287:5288 unknown command 64 [ 2052.826580] binder: 5287:5288 ioctl c0306201 20007000 returned -22 [ 2052.898797] binder: 5302:5303 unknown command -585709895 [ 2052.911211] binder: 5302:5303 ioctl c0306201 20007000 returned -22 [ 2052.918819] binder: 5302:5305 unknown command -585709895 [ 2052.928338] binder: 5302:5305 ioctl c0306201 20007000 returned -22 16:28:16 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) r4 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000e00)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000f00)=0xe8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001680)={'eql\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000005a80)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@rand_addr}}, &(0x7f0000005b80)=0xe8) getsockname(r2, &(0x7f0000005bc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000005c40)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000005c80)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000005cc0)={@loopback, 0x0}, &(0x7f0000005d00)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000006140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x88080000}, 0xc, &(0x7f0000006100)={&(0x7f0000005d40)={0x3b0, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x1d4, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x12000000000000}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x4c51}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x7c, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r9}, {0x40, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r10}, {0xec, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3d63}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xff}}}]}}]}, 0x3b0}, 0x1, 0x0, 0x0, 0x50}, 0x840) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={r11, 0xf9}, 0x8) 16:28:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x3, 0x10001) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x55a4b04842087718}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x1, {0xa, 0x4e21, 0x100, @ipv4={[], [], @broadcast}, 0xdb}, r2}}, 0x38) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB='\nc\b@', @ANYRES64=0x0, @ANYBLOB="6e2ff0f1cbf0d42cde8a4eb838a88ce469b345424fff9acbdcdce7a80fe2e089c5b38020806a57756d17a053f2d05d0a3dced44e3d43f2180b3d12b3b4eb603ae23672c6c62b0fe5c5b7e7600cdf1f97291374856c340f07c8f5ff90e115c1d9f54c1f49c7e1892c7352465f1ee2c240fc082b266575ae9c364a7efd71137a2b487f407bc162e4b0df690fa8aea3ea45217cdb1351250c2cbb746db41056d9ee65aea62b4fc278e732abf93704a0801b63e35c0385357d29ef6d2520bcd41eafddc96737"], 0x0, 0x0, &(0x7f0000002000)}) socket$inet6(0xa, 0x0, 0x7) 16:28:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x79, r0, 0x0) 16:28:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100000000, &(0x7f0000000140)="5e451bcc38103fee627f7523417d969ca4b753f40e9a68fe5c4dedc9913c983de8908abd4577e40b373b4e18ca2bf73825533aed21d8d7deb0adcbfb3d682bfa377bdadf29c3f651b980ba702fcabb0e499aaec952d8f76e75a57df789322492f502bab18300c9a5ee31c66a2ab355572c9ddf6496e39d584b3cf57046d717fb79ebbaa137eea26d86bdb7e29285b20487beb8d52fb79afa716b7c") ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x7fe00000000, 0x100) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x28}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000002c0)={r2, 0x8, 0x1, 0xf48}, 0x10) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x65, 0x0, &(0x7f00000000c0)="75c7ccb277105a89b3aee41d4cd52671e885063830ab12109b152778ff64f156b505435b848a78503db162f39ffc01f61bcd11d0d86b8df5c74fc0a641d77cf2a1a6f20ab85f6121fd021d451e9364a796ce8f209eae5754d1facc8c1a78973a09530aa683"}) 16:28:16 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}, 0x22}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:16 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multi,lier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x6000000) [ 2053.629490] __ntfs_error: 142 callbacks suppressed [ 2053.629500] ntfs: (device loop2): parse_options(): Unrecognized mount option mft_zone_multi. [ 2053.667167] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier option argument: 0x0000000000000002"subj_type=)selinuxvmne [ 2053.695549] binder_alloc_mmap_handler: 16 callbacks suppressed [ 2053.695563] binder_alloc: binder_alloc_mmap_handler: 5329 20002000-20007000 already mapped failed -16 [ 2053.713743] ntfs: (device loop2): parse_options(): Unrecognized mount option lier. 16:28:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x68000000) [ 2053.768644] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier option argument: 0x0000000000000002"subj_type=)selinuxvmne [ 2053.768704] ntfs: (device loop2): parse_options(): Unrecognized mount option subj_type. [ 2053.804219] binder: BC_ACQUIRE_RESULT not supported [ 2053.825329] binder: BC_ACQUIRE_RESULT not supported [ 2053.833989] ntfs: (device loop2): parse_options(): Unrecognized mount option dont_hash. [ 2053.862967] binder: 5320:5337 ioctl c0306201 20007000 returned -22 16:28:16 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}, 0x5b}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x4c00000000000000) [ 2053.875056] binder_alloc: binder_alloc_mmap_handler: 5340 20002000-20007000 already mapped failed -16 [ 2053.887966] ntfs: (device loop2): parse_options(): Unrecognized mount option fu. [ 2053.910716] binder: 5328:5345 unknown command 64 [ 2053.917981] binder: 5320:5341 ioctl c0306201 20007000 returned -22 [ 2053.939940] ntfs: (device loop2): parse_options(): Unrecognized mount option mft_zone_multi. [ 2053.952069] ntfs: (device loop2): parse_options(): Unrecognized mount option lier. [ 2053.976518] ntfs: (device loop2): parse_options(): Unrecognized mount option subj_type. 16:28:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000080)={0x0, 0x3, 0x2, 0x7, 0x5, [{0x7, 0x2, 0x401, 0x0, 0x0, 0x4}, {0xd3ff, 0x100, 0x2}, {0x5, 0x200, 0x8, 0x0, 0x0, 0x4}, {0x800, 0x20, 0x100, 0x0, 0x0, 0x100}, {0x0, 0x10001, 0x7ff, 0x0, 0x0, 0x100}]}) [ 2053.997457] binder: 5328:5345 ioctl c0306201 20007000 returned -22 16:28:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x4000000000000000) [ 2054.038145] binder_alloc: binder_alloc_mmap_handler: 5355 20002000-20007000 already mapped failed -16 [ 2054.071320] binder: 5328:5345 unknown command 64 [ 2054.157085] binder: 5328:5345 ioctl c0306201 20007000 returned -22 [ 2054.169339] binder_alloc: binder_alloc_mmap_handler: 5364 20002000-20007000 already mapped failed -16 [ 2054.258303] binder: BC_ACQUIRE_RESULT not supported [ 2054.284932] binder: BC_ACQUIRE_RESULT not supported [ 2054.307993] binder: 5367:5373 ioctl c0306201 20007000 returned -22 [ 2054.319866] binder: 5367:5375 ioctl c0306201 20007000 returned -22 16:28:17 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0xfffffd72) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:17 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multi%lier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x68) 16:28:17 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={',ubj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:17 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x101000) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f00000000c0)) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000000800) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x3, &(0x7f0000005fd4)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) 16:28:17 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x4400, 0x0) r1 = accept(0xffffffffffffff9c, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x80) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000180)={@ipv4, 0x36, r2}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000380)="153f6234488dd25d76607040e45468ee3be4e2395ff3f29a0bb6e48b6a8f096d1e3e208170673f58845eef817f54e509d0e25fc48243dd14259b531473820aa8a2a49d252f07748565315e2d556c850a3719ae021703cfbbb0b5a393ca80980994bcb2fac71ee30e09439d05594b9b3216d2993f5a95c6688be2d9c52ebf9c02f2323cb3d045fc695f51def92eb8e2437ed7db7b") r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fcntl$getown(r4, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xe8) getresuid(&(0x7f0000000340)=0x0, &(0x7f0000000640), &(0x7f0000000680)) sendmsg$nl_route(r1, &(0x7f0000002b00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1ea25669430b99c6}, 0xc, &(0x7f0000002ac0)={&(0x7f00000006c0)=@getlink={0x23e0, 0x12, 0x325, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x0, 0x18000}, [@IFLA_VF_PORTS={0x232c, 0x18, [{0x11f0, 0x1, [@generic="2e26226108fc8263368bff4f7fbc674a88d1abca9b8c2f829b40a1d1e27414a45a8c384b9c5e787ed799dca3582cc3ba7eae5a02eb6ed74ca176323d37785b61225f0d54fac383ce00e0277f2d63f37fdd97a58b492761b1b36f5417ca4a3df7c5831d257a733b3aa723019b3ce9f47e52c70a8532adc1e1779c7afc1c610a89b0e91e4556f701f11d09b329e552dcb4ea5422ae1eecf29769ea9a5eb86228b45e85d332fec387307990aacde40599e67a41b3bae201ddc657f0d8a3d554d738121466885b0b3337db37b36634a4f5", @nested={0x10ec, 0x25, [@generic="163a56cbb179e1c5d8d33291aa67c6de688a319c423b10c04788b992b39305f8fe75aa4cdfd6bfe6f5c83f652e73fdbeb16de61e30ec60b5de67dc22ce4ecb4a5f7ef660cea0", @typed={0x8, 0x79, @uid=r5}, @generic="b0c4488092e5f61d7cea04d5e2fc41e7a1a3270c6142eb733ab942bbd941c47ce81b9fd86116f6997de43217953fd9e42038697b1747f38465d3f7992a28a2568145b9d7dd174a4d6347d35d358b10fc07c503ae26d51926badb5d33504a5e20aff089f662ed6b267ed99da73afdb51bf7c1f6e567584cf1160ccdcacd7ee9", @generic="1c6c7fba9c49804b8dc09f1c1e9840d8470975c5e4ab85", @typed={0x4, 0x3c}, @generic="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"]}, @generic="9a2193e821e4a957d4cf6db74e6d003e682fd577cf632101df2a2ef38cf9775e0c4523b8f984", @typed={0x8, 0x59, @pid=r6}]}, {0xe0, 0x1, [@typed={0xdc, 0x7, @binary="1d720fb94fcc5de25ece45ef5aadaa82b48fa7fd7cb28fe94fb6a842387bb311c462e485cb4a7c673cc435ff23f1712e0320cc22a855af3d316d40b348cd21625597c232abc9ce0d3a3ac092c3212a8444bdf38ebb12ce2192d1b2e3bb94a46d80923e9f881d6253e8b0d2c92b82f1171b8f10a44cece475736e094a7f6d60863ee9233ec0890cdf053024168d70fd272eda409443b9ba7509b8670a0ec3b3479261bedc630ee33721eb1640af0f7506429db2fa8ff3b3b01debb4c9d7fb4890302bc0e7ebfb86067b0582ebd12bde204541784754808d00"}]}, {0x1054, 0x1, [@nested={0x1050, 0x6b, [@generic="7bf39c71bdf198249065a64d28", @generic="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", @typed={0x14, 0x19, @ipv6=@dev={0xfe, 0x80, [], 0x1f}}, @typed={0x8, 0x75, @uid=r7}, @typed={0x8, 0x89, @uid=r8}, @typed={0x10, 0x5e, @str='/dev/autofs\x00'}, @typed={0x8, 0x85, @u32=0x5}]}]}, {0x4}]}, @IFLA_OPERSTATE={0x8, 0x10, 0x2}, @IFLA_XDP={0x8c, 0x2b, [@nested={0x88, 0x45, [@generic="5abe6937d86777cf89325ef650d3ce1ba1fc8d3667a959277bc44c928cedc1ce2304dfff09d8fe0b14908b8b39d8cbb60f87a77d5c6a6a7618736a1899bc6810aac702ce7cf4a80e239f8773029b15dc2bd5129099ac061b56f4f09a4ad78008346aead5501694361ce01242d160f0e848254d48bbcc3bec27", @typed={0x8, 0x5b, @uid=r9}]}]}]}, 0x23e0}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) 16:28:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x6000000000000000) 16:28:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x5000000) [ 2054.519986] binder: 5383:5393 unknown command 0 [ 2054.530551] binder: 5383:5401 unknown command 0 [ 2054.536514] binder_alloc: binder_alloc_mmap_handler: 5397 20002000-20007000 already mapped failed -16 [ 2054.550433] binder: 5383:5401 ioctl c0306201 20007000 returned -22 [ 2054.567867] binder: 5383:5393 ioctl c0306201 20007000 returned -22 16:28:17 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, &(0x7f0000000340)=0xc) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={@remote, @empty, @remote, 0x9, 0x9, 0x4, 0x0, 0x5, 0x0, r2}) bind$inet(r1, &(0x7f00000004c0)={0x2, 0x4e20}, 0x10) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000000)) sendto$inet(r1, &(0x7f0000a88f88), 0x220, 0x2000000020000000, &(0x7f0000000100)={0x2, 0x4004e23, @multicast1}, 0x145) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in6, @in6=@mcast1, 0x4e24, 0x5, 0x4e24, 0xffff, 0xa, 0x20, 0xa0, 0x73, 0x0, r4}, {0x67, 0x1, 0x2, 0x2, 0x2, 0x8, 0x6c6, 0x8000}, {0x9, 0x7, 0x4}, 0x2, 0x6e6bbf, 0x0, 0x0, 0x1, 0x2}, {{@in6=@local, 0x4d5, 0x6c}, 0xa, @in6=@ipv4={[], [], @multicast2}, 0x3501, 0x3, 0x1, 0x8000, 0x5, 0x1, 0xff}}, 0xe8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)=0x0) fsetxattr$security_capability(r1, &(0x7f0000000440)='security.capability\x00', &(0x7f0000000480)=@v3={0x3000000, [{0x4, 0x7}, {0x3d4, 0xfff}], r4}, 0x18, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000400)={0x0, 0x4, 0x6, 0x74, r5}) 16:28:17 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multillier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:17 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'lubj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2054.625903] binder: BC_ACQUIRE_RESULT not supported [ 2054.638012] binder_alloc: binder_alloc_mmap_handler: 5410 20002000-20007000 already mapped failed -16 16:28:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x500) 16:28:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x3, &(0x7f0000005fd4)=[@acquire_done={0x4008630a}], 0x0, 0x0, &(0x7f0000002000)}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x10180, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) write$FUSE_GETXATTR(r2, &(0x7f0000000140)={0x18, 0x0, 0x3, {0x6}}, 0x18) splice(r0, &(0x7f0000000080), r0, &(0x7f00000000c0), 0x100000000, 0x3) 16:28:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x4800) [ 2054.709153] binder: 5395:5408 ioctl c0306201 20007000 returned -22 16:28:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0xffffffffffffffcb, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) 16:28:17 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000580)={0x9, 0x8, 0xff, 0x3ff, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}]}) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000780)) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f00000001c0)="35b0ce482a86b01533a133279bc48fdcb24eb4dc5890da428967d3be990a5412e33f8a9b85cd051ad9610f1151fbdf9470b4653ed19ebfdf8db2fe701d584f4c721da34d2eec1f8d7f99833c41045b990e365f1f1df42f0eb50776533de826698bd4a611c8240619e95150e54979801b959d9dec99199adf59fbb306e4aa75755d3d548786f21684be9ed187e462ebb558b49caa3a8bf1e11923ead11e056840c2fa6ff6179558802abbe737f9c6444f2a9b1bf9a67519fb19c1ad7c3dca7a26", &(0x7f0000000280)="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", 0x2}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e22, 0x80000001, @empty, 0x9}}, 0x0, 0x800, 0x3, 0x4, 0x12}, &(0x7f00000006c0)=0x98) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000700)={r5, 0x2, 0x20, 0x1, 0x9}, &(0x7f0000000740)=0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x7) 16:28:17 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multi.lier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2054.825502] binder: 5433:5446 unknown command 64 [ 2054.840271] binder: 5447:5449 unknown command 64 [ 2054.845601] binder: 5433:5446 ioctl c0306201 20007000 returned -22 16:28:17 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'uubj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0xffffffffffffa) [ 2054.915614] binder: 5447:5449 ioctl c0306201 20007000 returned -22 16:28:17 executing program 5: r0 = perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x400, 0x3, 0xd3cd, 0x6, 0x0, 0xe6, 0x4000, 0x3, 0xffffffffffffff00, 0x10000, 0x503, 0x7, 0x2, 0x80000001, 0x4, 0x8, 0x1, 0x7ff, 0x9, 0x80000000, 0x1, 0x81, 0xffffffff, 0x8, 0x1, 0x0, 0x223, 0x5, 0x7, 0x100000000, 0x1, 0x7fc00000, 0x1ff, 0x5, 0x7, 0x3, 0x0, 0x1c, 0x0, @perf_config_ext={0x7fff, 0xe525}, 0x1, 0x3, 0x81, 0x7, 0x7, 0x4, 0x4}, 0xffffffffffffffff, 0xd, 0xffffffffffffff9c, 0x8) fsetxattr$security_smack_transmute(r0, &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f00000003c0)='TRUE', 0x4, 0x2) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={r2, 0x6, 0x1, 0xe03, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xa1d, 0x408400) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0xffffffffffffbc7d) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x80000003, 0x400000) ioctl$sock_bt_hci(r4, 0x20000000800448d2, &(0x7f0000000140)="7360927218ea33f5c2224c0d6195b0db8ad1fababcbf5e2d6df148b8f39f438be324779c9767701a1b8ccc4cc3d730ed3218157c896fa44336aa20dd20d410d09f7757bcecfd483ae1cdaa9df42461cc236cca0f55b2fa129867dc035233657c1e62f4f7092d68f03b86c3d9ba237f6d88836e736e30ed112841ef") ioctl$DRM_IOCTL_INFO_BUFS(r5, 0xc0106418, &(0x7f0000000040)={0x3, 0x4, 0x7, 0xa0a3, 0x11}) init_module(&(0x7f0000000080)='/dev/usbmon#\x00', 0xd, &(0x7f00000000c0)='eth1^\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RFLUSH(r6, &(0x7f0000000380)={0x7, 0x6d, 0x1}, 0x7) write$binfmt_aout(r7, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], 0xff) ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40086607, &(0x7f0000000440)) accept4$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = creat(&(0x7f0000000600)='./bus\x00', 0x13) write$binfmt_script(r8, &(0x7f0000000700)=ANY=[@ANYBLOB='k'], 0x1) syz_mount_image$ext4(&(0x7f0000000640)='ext3\x00', 0xfffffffffffffffd, 0x5, 0x1, &(0x7f00000020c0)=[{&(0x7f0000001fc0)}], 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f626c6f636b5f76616c69646974792c646174613d31726974656261636b2c686173682c736d61636b66736465663d75736572002c008eaea5150c8404ef3fe1ef5ae1ed6158239fcbb438f748b5b49564b5f2476a30c1743db000bc1cadb3dfca33591d"]) sendfile(r7, r7, &(0x7f0000000000), 0x8080fffffffe) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="bc84b82b", @ANYRES64=0x0, @ANYBLOB="00000000e0ff0000"], 0x21f, 0x0, &(0x7f00000002c0)="093b16b7cd3068f81cd88681236b78b6270fd0ba8fd194845488b9112ee7d13ec74087"}) 16:28:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000100)={0x3, 0x4, {0x51, 0x0, 0x4, {0x400, 0x7}, {0x2, 0x100}, @period={0x5d, 0x6394, 0x7, 0x4, 0x10001, {0x3817, 0x907, 0x0, 0x7fff}, 0x2, &(0x7f00000000c0)=[0xffffffff, 0x3f]}}, {0x56, 0x10001, 0xae, {0x0, 0x7f}, {0x9, 0x4}, @rumble={0x3, 0x5}}}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="2e9f9e24cc2520d5031e8703efdf0886fb3db6c1c6a9ba0a5770379c3794f5397e78e9d5525e5a01c6b8db80f9fecc77508e230d41d83ac9cbf5af7156824ff1fc3d68b8a9142df2f20c23804c86e1fc892c8e80183327df5bfccb0350d2f1286eb3434dd7fabf8b7f87153e0e00", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) 16:28:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x4c00) 16:28:18 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multidlier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:18 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'"ubj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x300) [ 2055.127799] binder: 5479:5490 unknown command 539348004 16:28:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x5) [ 2055.210258] binder: 5479:5490 ioctl c0306201 20007000 returned -22 16:28:18 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x6c00000000000000) 16:28:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="02630440", @ANYRES64=0x0, @ANYBLOB="1f00000000000000"], 0x0, 0x0, &(0x7f0000002000)}) 16:28:18 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'*ubj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:18 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multislier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x3, &(0x7f0000005fd4)=[@acquire_done={0x4008630a}], 0x0, 0x0, &(0x7f0000002000)}) 16:28:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x6c000000) [ 2055.773855] binder_alloc: binder_alloc_mmap_handler: 5529 20002000-20007000 already mapped failed -16 [ 2055.795712] binder: BC_ACQUIRE_RESULT not supported [ 2055.819156] binder: BC_ACQUIRE_RESULT not supported [ 2055.826540] binder: 5530:5537 ioctl c0306201 20007000 returned -22 16:28:18 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'#ubj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:18 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multi"lier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x48) 16:28:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0262044046310ce928ead30906c2011826d152cebca378bd51d89c80f8879f473bde4e063e5864a26f66d949d1e0b99df03786409701a7fb54323cb0c34e28d9e20673c2ea846f1ae36af26ca3cb58b4efa7ef2e785daa55a4b6ce240b6230c95d71", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) [ 2055.868736] binder_alloc: binder_alloc_mmap_handler: 5553 20002000-20007000 already mapped failed -16 [ 2055.906800] binder: 5530:5552 ioctl c0306201 20007000 returned -22 16:28:18 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f00000001c0)={0x3, 0x0, 0x2080, {0x1f000, 0x4000, 0x2}, [], "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", "488c84f7bd969a8ebf358370f549b9330824c31f60c0d52a0a5f52d686a292b122b8e8d07b57b98d146af54d8cbbe62601d24939cfe2fc94835484dc47cb44067e9ecb79517467af18e6d6f1516b3b6daccd287e7d79c670e0a9433a7fe0a4d5de485a4433c4ac2ea9db3095eabe4c8ec010b21273efb220831dfc541022e922e2fe85c31de2e79f2adef65c5129cad4334642aa55068e290b614be3c92ac88cdee9cda18a4f64d9bd8ab25f593f032aedff4a769de48842a3ad398018ec38cc459526015ca994c413abd86f162ccf8b611eca7b662a91e4dab049c92537272f4e245c5a4da31c484da1286e20eef8e4b723724ef7663f076acff4ad7ebc670b64f11b21e8c786f641264ae67bca1a21144a9aa667c44f6ea1392507636f72311c1a515cd45b22f712b5e782b329da0e60fa0886fa96581bd640f5c502812b45ffac6949efb86c12238d2b1d010ecca23715b30f1644aa22506a20a4eb4eb07b7d6c848b899109918f4608bee8c25768e3e2f345127817b9d044ae039b39d6418985643ce09ef6c93796569f0b3cff0530c38100f96b872fb7e140958002a32f88c70743a8dbb85ab3a83ac489ca7ba19dd1dcba5f9f2f214a2bf017f1d724ca6ffda381fa26339ee86f01ba47b20beee4f33aaeb7ceb118c8e0df437d336f8f2b71bde00a01bb5249508aac48955ae68d8991dca325e2066417d941599050f436dab316e7020b5a03167b2d226b904b527f6c3d987158e9ee45cc33f413a072ac5121b42696bb3b0b500f007559cbdc7e602032964a45fe0cbd3adf15b9863af6ae047522a2b004d6f4ba0d91369e44b77fd28758c60d8b8031f0e5e078fe142ebc0d70a5b1d36958d3db16eea581b8a0418ce54b5fbc14f1e11d8f617a747921ccb26f9ccc052c23c6923bbf815fd713d3be341fdd327a1ebc729d6a50437da4fb3dd375601ba0158dd39201bb6f50fdb04585bc6e4b9903f7e2b9a42ea05aeaf7150f7f0ccdd9fd7bc0dbd53e65e4da21101670ac47b7bbe4c412dc30d5eded6ab758919e6edbf7bf3c316d4707a2d66e1c12e7982ac7b4943453d7112238cf5b2a1b2c07fea091177633815dba3ef3805151fb7045ae073d96931a5a38d5e17980c9e72d366c94c7b4e260c39e029177cd87dfb87b95ec551935379d891901dbba6dd5b292939f342b5bcd0e9e3e5e69fcfbdc62a91bd4caa239c9f8420236d2a0bb4fdebd4eb2cb176cb0fb99135fc9627435f51f74a37eda3e8661d69ed2f29d61406e57cec9d964d1b83b89d5732a52ad05f5e8db6d198b95bceac75f847d1daeed8bef560749da73ac37f37a93570b53171f836b0a3632bee0b137edbd813ccf17c6ffdae00cb6ca7cfb97833cde3c288796c69e1eab7f5c14ab7fee693f5ef0b466757f4d1283cf4edc3506b06f6bb0c318ce26bc3854bd331176906addb1c4ed9ff3de6fee58be1e53b2c00aac168aba5b2949cb812e680aa527293c97014b782e0e2d1e09f8dd4625481cc91b2838989846fe4c740a3215d053c9744e58d7889a0bc5e6760161cb928316a392b75d93b8b9f7aa797685eb1e02d419127fe4fee7bcad314ff7c4a45a449582a210392ca8c8ab947eff0c7f506e4665807d890bf0302bc5b27e4f98513d55fef32434ab856c638b03b87a8a3f757f8378a0754fb6fabecf27261ccb5b2e7ede57057574fa177087f82ebbebab4b2236a0c8b005eb89dc3ee64d21636269d82f4966872fd3daf1bcfd9b1744f174b84fef4dd9f58dc3e965b0e63edd748393c227747dcee7e0943cbfb0ee1f915ada02ee42e011deb8e3b48fca5579a3617441af636e323938f7d652a7fdecbead9db720bc9597883526c48c5d03a67089024b4cad71f7bfe6ca12e21cd50d1c1336878074bad707733dbd89a578791d72293791613f70b362bf591bcad872eeca5371cdade36492584b0e21acf7e2a65cf6546a637a544396c4ebc7e3121edc2f250e036bf76662145c7249615fd01d52ffbe32085d4286851c80dee8b6ec226b3e30b861fae73d190c98b75f8688287dd4e880747cd7f9d1ce887160ef150d5d64507f1254543249ca3c9f64dfb685beaaeb9915fda625602c5a1825d3823a003ccacdaaa6f586a2a3ca21ce5353cec6e8e3a29c53cedd683002f145a328a5d40711dfd56108bd3de8de16335c26120ced310d415a009449c319e64eab06b0911ef57d7f7a34321418038c1c24f88342ea7bf448442c5d2653d244e972af265ff341a93d62d86d3f34dc96b26ab14322c3a5f23037d3a52d30761247d989f0addd07e9554fde6392d2adb2d9e92b25aed5008858673f8edb24cd3d89b79c09cf988d56b5dba96270b4cde3a52a3867f9f841373b038fac6161d17d7b772f23e7c64e160a91f74e4b6b938240b34870380ed0e716f4b2a135c4850e3d4aa48bfd97e66864726494a7031e8035054a59a2e00761b93efc1cdddd493babe42f25cb242b692320edd65025dfd868be25bf8fff2fee01552c62e92ea7839c5993c94e49608317eb09c89c3758280e11fe5723b25e16544a5c202ec5e10dd21f087134438efabe4745897087a96708b10d6f88c0675c05ae4e0e23d0169ea461156d3c92d9c9cd3ed1ef468c04b982c7e633ba211ab6260b49b9017cf48d84d1fc0b1e24b1e7d341168c88e1bf4167c07cea64ef8d6b578888175a692455afc6a7d9c365f5bc1deff074b4a0b12a413028260c1be43bc7ad9b902c8397eab8b3464b9d8179b5f1120a03ea1feb76f5f494a24d1f57af557b445a0ea5865e5bb3a113c4aadc7ecb7a860bec44e532051ff00181510249e2b8b6fa5892cb029353e1797fb1e373581fa111795026aa9b7b0182248a5633c666a773f3d103c78e55e091febfb790e8e993466e82e607092482109d37c9d500efe5db9724a9b818231f5cbc7432716aa97da5ea6a6445ec88a4c61c1fdda4f7646ca5b6cba0cf3a8aec0dac538d1203fa34f1b2eef2e5f2f730db562034751d9c1b3920497d4a5cab6cba3bcb00f0182fc987a1df9327e9aae409f94f32f341d3d65f50a2c80dec6e710d085a6c0ce58bbb9d305ef6417aa749eac43f5a3d01494c17c786e49a9cf15787194ec4229d9f1adbc4091949546af6690f4374aaecc4b738336131324f7ee5427f5508adff34ded72cbc57604787d850e8c43234e60a08622fb9816feaa229c09a0fa7b7258c1a27ae2676702ccbbbdb72c0e81e77e8cc03724acda121cb9fe94972a061c4bdb4f3df8654437ad6c618a0cfa7cd859b8ac80af4902351aeaf7fa8839f2e4764838cdeb5a5debe627dc23cc3d5ebb067c55b8233a60f291bad70ea478801c4e53bbdca95a3088d5f4a7c0cdb418f67305c1e205a718e3f85c17e25b6a44c612664b77178718b5b5b028f6d9ae1553b744ff74c83ed6547f21c194c884af03b875d47e7fa09d0bff9ddfacd70b671bb349adf6e47fd9ba38f15867c9d08287cd23993a3cb3f6761832412a83404eb2de7591c57b9969e1b5175148dc02a47ec0251401af3a299f2cc694a310cc05f36884c394151120626ef619cb6dd815023d67fbd02e0e3c3a012c935db7e4a6f65c01c47aa46102f237316585ceb75da3081ebb7225dc0c396b66dec09a122f5dc0918c39865e5aff71cea8ac37c4d72480ba6760df026964342af31d1aacd82e6fe5edc1ea9b738329fdcfc7320362e0b51783eaba9de418a2b9ed2fa417a4e676b592e8ece5d325e6df1493bc46b2a78fb76cba006617bb3c2965eb5ef8ba43b4602fbdc1b318aae7ab7be03a00b4cfeb8193a61b0c8d9edebb838382a2c4154a72c131288c9445bac07894d5b82ba6cef264dcd602df093d36b6ba6b11326c4970c59dc20159c12cd3e5fdda9251c1af66efafceae18049ff5a6e64bfb46c1bc262a1e3e2008f0763d971a49e19a6ebf2257d9837928cae70d925db101b829970ed4744e77a80b4f799e383a0a0e80f7f9be150c38f65991adc259bd095629fe8ba1f19548f10427cf8ed42114f212abbe0457ff0c62d37cf6cd24ff6b0347d516ed62f8f5f11386d0349417962f30f01250d03951ae303ed7b4ebd5c3ead16d854eb89794b000c2a15e7449aa33e0c1c5e38b5e212d80924869118e392f1c502c481bf3129b32962423fe2551dd309bfd3e1b182f9efec2c3df482d88bbbb3c4139c6e08bff2f59b5ca380c12bf0279064f7a9b69156a4a62814658febeaeac90e46a73fee6d75545191224bfd754c294f7ed24eac71f7145cabfabffe61906aedba7de94f28726518a7f7aeb0eff3790a4a9becb3c089e55da7e25b10d4db85d193c495d2351cc3f756c2e4389754d3049113844edb03d80a4217888bcecf689bf39ae761aab70f2f69e6c6188165f029d412bbed82dcabc629fa027186aa76f5219691f6ec1c986c22b0d046d40afd0f71b61352002301a3dfc88be9c7b32b48cf5414c43d571a46d73a32376f2f02907748493de1b67a161e8967907f4825dff79e9a9209f4f3ae490d6656dafd6c79d171e6c76df6d99413e9b0d703d1689bf18b68ba2c8fc829b014b906970d2c03bf454c4a4a1e936d56e5fa10925c80bef3c507e8efc395ef64d8d1b963e56194af4c09baa22f0cb30780adef39bc4f242b9903d85becafd35f4c060bfd1aa9a44f6b46c23d142b9e51d123f005971f8d1cd364310f6c906fab0364157dc401d29ff4f1856508882f9e07d60afc2f612ce0b2292060a94138e7eb3da4a5c43d6398dd7c67aaa9117d94299b323444c8920cb6134bf5e6b51c6ac813a95c78cff38d59281da45df6bd4733cb52e045f8445358319406f8bde4267f6973f8474f0d9993e3795e58333fe2a8cf94d658e921a9cbd85a7f5eae68582fd889bb3b286a5fe764c7c9d961c5fd3fbe9ad32c6b42a960d1f7ffdaf923d58d4ba3e605f6769f87a54cbe1a0a17e60d52671d6f62178c39904c5675337bb2f189391dafbab874d5d8dff113492607476bc27f66a9e254e076bde404714b955c9e81f8f88f30d6ad92f2c48729a35638d8c1bfc22d4612582b39b7d870cf1e13fd141895fb1736d264bbd5b595a5d43aee4e0046d3477adee35efbb95a1951e9044b57257edffe2f5e9a187505ed32a7ea9e3510b2f8e1812ca4da10c2b97543d98b26ad4e122df96ad3d4da435dffc6d8e884e24963b8232b5e3a68544c802b6b63a7b3498a57d8a60d97de0200fcaf0a374261e343a880f58e316d879d25a9c151f9c781be3365b95a362a24d8635ba15e3332304a00f1dd51e461458475ce8592a5d13bdcf9bcb2d21b017dd8ec61761357124dc6cab34ce3a3d861e2511844c2971f00d960d6767203d18b51041a820981438fb2570e67e1d4e4c292336e9e46bfecdf7a543aa8e3b3be9985354634a253609481bb3e68bf818db0dab70f3f6fcfecc5ed8b5fa275584b46c6b519248f709853eedc3dbb537e6aa4f97ea5f4513461db82938499858e086d619affd83d07a64aaa780207ba87c749653939b3e8b9deb40263284469b805ae138a9833de22453a6be6922a79406549ee6063db55ac85b4e957aaa89167c297f2535636689208e02a3c80f807b6d917eaec3a53b0fc80c47b2024e8a03742eb1bc6c1dcf596c2598d7546b0ae40ec468fa07605fdd60325bda4290e82afdb1e8db7412165d89e158f342b51b9cad9e6a45856d56f5aa720e75aad2daa3bd718448b21ad1b1a8140a9a53830f5d0b13ae481dda33d44aaadee99bbd631bb36aac0d2f20972722a2f88db2632a7bdade16f1281ea"}) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) socketpair(0xa, 0x6, 0x1f, &(0x7f0000000080)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) [ 2055.957178] binder: 5546:5563 unknown command 64 [ 2055.983047] binder: 5566:5566 unknown command 64 16:28:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x3f00000000000000) [ 2056.019910] binder: 5546:5563 ioctl c0306201 20007000 returned -22 [ 2056.046356] binder: 5582:5586 unknown command 1074029058 [ 2056.050254] binder: 5566:5566 ioctl c0306201 20007000 returned -22 16:28:19 executing program 4: r0 = memfd_create(&(0x7f0000000080)='/dev/binder#\x00', 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000000c0)={0xffffffff, 0x0, 0x7fff, 0x6, 0x8, 0xfffffffffffffffc, 0x8000, 0x7, 0x1f, 0x4, 0x8, 0xd38}) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x3, &(0x7f0000005fd4)=[@acquire_done={0x4008630a}], 0x0, 0x0, &(0x7f0000002000)}) 16:28:19 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'+ubj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:19 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multi-lier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2056.139140] binder_alloc: binder_alloc_mmap_handler: 5593 20002000-20007000 already mapped failed -16 16:28:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x400000000000000) [ 2056.185115] binder: 5582:5601 unknown command 1074029058 [ 2056.185787] binder: 5582:5586 ioctl c0306201 20007000 returned -22 [ 2056.232352] binder: 5582:5601 ioctl c0306201 20007000 returned -22 [ 2056.252415] binder: 5606:5610 unknown command 64 [ 2056.261140] binder: 5606:5610 ioctl c0306201 20007000 returned -22 [ 2056.271785] binder_alloc: binder_alloc_mmap_handler: 5605 20002000-20007000 already mapped failed -16 16:28:19 executing program 5: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sync_file_range(r0, 0xa7da, 0x200, 0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x4300, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYBLOB="0062fbe1478960e48e98d3c6f3a0ac72177e4a1c3457689c888039695a4e425ee894278e34f4d589fa7e6648c7455ea4ede965872906f0024aed583c138095876321b3549c002a5101cec559b9002105fdbafeac4871500e4b96e04d2bc2deb6b04dcd37f754cb9002b5380961e6962c23c29d55954253c06a1ce7cef20000000000fcf68e5017c595c66a32f2ce52448eb0983c465c263406ac428ba2fd3d56c2cecca7faf0b8a9a4b9427472469014c1cc9e8c1af426d58afd3936c6e07a8eaa6fee704a52b8de75d656f74b8556bfd972468e2e6f7163e24dc61e35e363f197a17bd60f1c2dbc2074e19cc3962cc451d2d1f9fa74ae1a5a7f27e90bd5ec9582e08daddf48d8930fb0582cafae481dec9e160a489090cec134526d9d8a1cc286e77eb0f00265c1176fd469527b9442fd594ef1cd83045001b6d59b626ff0f3aa6c4f85f91970a82fac638f406a9a909f3ac1537b9eaa074873a731df1e9265b7d290ffad795c0bff7685fe8772c97525c22e419af1fe2ef79749e72181ef9e0992964a939165ef8091bc7403e65d16260fdd7434731c1f699c3e6b4367ebe6b561dbb8f2366534c31ea2e4e7e6c39377a5fd73cd54e57ea4485c4f2b92bdf1a12e4da65825be09b51a2a092ded7ff90308c87b4582074667beb0f319043792b9b03a72260bc19fa6fc7d529f84a6b4f5dbc40e90fe1f9e362cbf2e1591566989e1f8daf94bf47d0d4b66e3fca5026a5726f024717ad68e0fb3ed733f3638e2731a574fb984084ad7e847c7810ed350e9ea203d5da33d130bcda8b7e1a327d36e0bf0ab2bdb4032bab7ece7c2ecbe5cfbcc87c6c0c5a5e704df1d9be85d0b4274d9d90e4b0e5c8bd37320c0ed20c143248ba166ef4aafc0687860d179bda20738576cd3a8ffe79c8242df16bcae590302033155ce7a085ca39369578010013dba41538419a2d5d6bd55fd0b4dd614f074dee15b72aed224245dd929d1132729db9585b1dea5d308d40726a2b84014767d10c8c53d1ae8e20c2409eea52ea309069d53d1200fdb798756e1a356cb436c08ab04f69299a9f26d1092e8ced2b19dd8d5fcaee1c5d32e7e88c62fb8d6451f70e811b17cc38b749a791dfef66f9237d5985474932a5c8d9a8ff8da3482f02d9c4b5f000000000000000000000000"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000080)=""/191) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x22000, 0x0) setsockopt(r1, 0x665e, 0x7fff, &(0x7f00000001c0)="463e7ec17178aeaedfc6243bec671838ef96460f95674d1835cdfb6e70e4fa49c9fa61e0c628a8", 0x27) ioctl$RTC_AIE_ON(r3, 0x7001) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000140)) 16:28:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x2000000000000000) [ 2056.289799] binder: 5606:5616 unknown command 64 [ 2056.300155] binder: 5606:5616 ioctl c0306201 20007000 returned -22 16:28:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x1, 0x0) accept$inet(r1, 0x0, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x3, &(0x7f0000005fd4)=[@acquire_done={0x4008630a}], 0x0, 0x0, &(0x7f0000002000)}) openat$cgroup_ro(r0, &(0x7f0000000100)='pids.current\x00', 0x0, 0x0) 16:28:19 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'0ubj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:19 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multip.ier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x1000000) [ 2056.471006] binder: 5632:5641 unknown command 855925506 [ 2056.483777] binder: 5632:5641 ioctl c0306201 20007000 returned -22 [ 2056.494150] binder: 5632:5643 unknown command 855925506 [ 2056.500225] binder: 5632:5643 ioctl c0306201 20007000 returned -22 [ 2056.544851] binder: 5645:5646 unknown command 64 [ 2056.549900] binder: 5645:5646 ioctl c0306201 20007000 returned -22 [ 2056.559309] binder: 5647:5648 unknown command 64 [ 2056.571825] binder: 5647:5648 ioctl c0306201 20007000 returned -22 16:28:19 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000040)={0x0, @aes256}) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x200100, 0x0) 16:28:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x600) 16:28:19 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'.ubj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x180004400, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="0263043f", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'bcsh0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}}) 16:28:19 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multip/ier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000240)="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") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="f21be2bcba3974a9455251d6e50d6fdddba88f90595b909e45068e1a1c82358a1e0b10b35612d823ce37dae78f3fca84cce9800565e795a763d8901874549bf355a06c2642b1f7bf3efd103df8542d677e69892c80ec9017290e5ce989eebedbb5ed981fe5a2b8e29b262103f11edb28b7f3f3bbf350cfe237350d0b2de12a036978f292639c455cab55c18bce7c47a59d611a93a586896a9b888ae2932c8c7362", @ANYRES64=0x0, @ANYBLOB="00000000000000001b775ef158bf421e79a8af66755af4da3a3fe1c811a6ce320dec0f10670c73c71a03938c93f0f5399844c0225a23587b07a74aa0ceeac8b25669b7c6e21cfdaeb38c36ffbaf8546f85d19507dbfbb743aa17d80154dfd5f6651b65f9bf5a3108b0eea45630ca0a8100cac769c2925d28d5943289c586cf922aa2b9e35502b0ce67f10c78161580365ebe000988e6fef787b33076838311844db52988ae2eec14468238f8a6306e4c5ad93c"], 0x0, 0x0, &(0x7f0000002000)}) pwrite64(r0, &(0x7f0000000080)="806ac25db5d4394a9efc3c7232c06bad8110a05429ac1cdbd55ab1a992ecdfabefd03f0f23bf1d1726c18485d487cc66b319f5404308e16396baf61ed1b503af115d0a2f439de015880e0d2dc10e6eb9a7a0cfd440a01508a9681a3975d9d73d63f398b9d6421eb511a8e32c3efa97458f9ec6c8c94257e2dabebe228b034f0e9610ad", 0x83, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhci\x00', 0x2, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x7) ioctl$KDMKTONE(r1, 0x4b30, 0xfffffffffffffc01) 16:28:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x50) [ 2057.003511] binder: 5660:5677 ioctl 41009432 20000240 returned -22 [ 2057.040116] binder: 5658:5682 unknown command 1057252098 [ 2057.047002] binder: 5658:5682 ioctl c0306201 20007000 returned -22 16:28:19 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'cubj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:19 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multipuier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x400000) [ 2057.054759] binder: 5660:5683 unknown command 1949940412 [ 2057.065964] binder: 5660:5683 ioctl c0306201 20007000 returned -22 16:28:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0xde, 0x3, &(0x7f00000001c0)=ANY=[@ANYPTR, @ANYRES64=0x0, @ANYBLOB="0000010000080000ae56010b256863855e184bc58bd96d16abf6f52b975a6f03629b56586cc5631dfc53eae3e8a402134befff3c8806c6b2449de40300dc1a2ccddb92bcda863372e7813852d7f5ce01f39e71032ed9f997f549f6b2b7864e32335ef4f00cb05f0393c5739fd827aaa421fffee81ca5db90f4cbadabc1ffe99d9a209680191d7bbef8c4e4e7060a8a42359ccf3ef199a5f9d63d99952e6569eb147a87edceb28e558bac0c1cf4288fccb83b42a6920b42c860ba74547366b3e999cf597763c41f6c61bca8d2fa01"], 0x0, 0x0, &(0x7f0000002000)}) [ 2057.097541] binder: 5660:5678 ioctl 5418 20000140 returned -22 16:28:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x7a00000000000000) [ 2057.293758] binder: 5705:5706 unknown command 0 [ 2057.299147] binder: 5705:5706 ioctl c0306201 20007000 returned -22 [ 2057.310145] binder: 5707:5708 unknown command 0 [ 2057.315961] binder: 5707:5708 ioctl c0306201 20007000 returned -22 16:28:20 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x4c000000) 16:28:20 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'dubj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2057.823835] binder: 5658:5713 unknown command 1057252098 16:28:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$TIOCNOTTY(r1, 0x5422) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f00000000c0)={0x6, 0x9, 0x7}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="186b573f", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) 16:28:20 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multip,ier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x18000, 0x0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000140)) clone(0x40000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x3, &(0x7f0000005fd4)=[@acquire_done={0x4008630a}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='/dev/vhci\x00') syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) 16:28:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x40000000) [ 2057.866204] binder: 5658:5713 ioctl c0306201 20007000 returned -22 16:28:20 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'xubj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x20000000) [ 2057.979921] IPVS: ftp: loaded support on port[0] = 21 16:28:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x100000000000000) [ 2058.010826] binder: 5730:5743 unknown command 64 16:28:20 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multip0ier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:21 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'pubj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2058.098521] binder: 5730:5743 ioctl c0306201 20007000 returned -22 [ 2058.136403] binder: 5730:5743 unknown command 64 [ 2058.161459] binder: 5730:5743 ioctl c0306201 20007000 returned -22 [ 2058.174530] IPVS: ftp: loaded support on port[0] = 21 [ 2058.234907] binder: 5754:5766 unknown command 1062693656 [ 2058.256029] binder: 5754:5771 unknown command 1062693656 [ 2058.267621] binder: 5754:5771 ioctl c0306201 20007000 returned -22 [ 2058.297651] binder: 5754:5766 ioctl c0306201 20007000 returned -22 16:28:21 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) r3 = semget(0x3, 0x7, 0x14) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080)={0x0, 0x100000001}, 0x2) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000040)=[0x7ff, 0x800000000, 0x7, 0xce, 0xf9]) 16:28:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0xffffff7f00000000) 16:28:21 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multipLier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:21 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'%ubj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x8001, 0x280000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe67}}}, [0x100, 0x5c7, 0x4, 0x1, 0x100000001, 0x6, 0x0, 0x187, 0x1, 0x3, 0x2, 0x8, 0x1, 0x9, 0x61ee]}, &(0x7f00000001c0)=0x100) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x6, 0x9, 0x9, 0x1, r2}, 0x10) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) 16:28:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x200, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffd03, 0x3, &(0x7f0000005fd4)=[@acquire_done={0x4008630a}], 0xffffffffffffff80, 0x0, &(0x7f0000002000)}) [ 2058.718128] __ntfs_error: 131 callbacks suppressed [ 2058.718140] ntfs: (device loop2): parse_options(): Unrecognized mount option mft_zone_multipLier. [ 2058.720914] ntfs: (device loop1): parse_options(): Unrecognized mount option %ubj_type. [ 2058.723133] ntfs: (device loop2): parse_options(): Unrecognized mount option subj_type. [ 2058.723145] ntfs: (device loop2): parse_options(): Unrecognized mount option dont_hash. [ 2058.723155] ntfs: (device loop2): parse_options(): Unrecognized mount option fu. 16:28:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$getname(0x10, &(0x7f0000000080)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x3, &(0x7f0000005fd4)=[@acquire_done={0x4008630a}], 0x0, 0x0, &(0x7f0000002000)}) 16:28:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x600000000000000) [ 2058.725459] binder_alloc_mmap_handler: 10 callbacks suppressed [ 2058.725474] binder_alloc: binder_alloc_mmap_handler: 5778 20002000-20007000 already mapped failed -16 [ 2058.807692] ntfs: (device loop2): parse_options(): Unrecognized mount option mft_zone_multipLier. 16:28:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x6000) [ 2058.832963] binder_alloc: binder_alloc_mmap_handler: 5799 20002000-20007000 already mapped failed -16 [ 2058.841677] ntfs: (device loop2): parse_options(): Unrecognized mount option subj_type. [ 2058.851651] ntfs: (device loop1): parse_options(): Unrecognized mount option %ubj_type. [ 2058.873262] ntfs: (device loop2): parse_options(): Unrecognized mount option dont_hash. [ 2058.883433] binder: BC_ACQUIRE_RESULT not supported [ 2058.889740] ntfs: (device loop2): parse_options(): Unrecognized mount option fu. 16:28:21 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'-ubj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:21 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multip"ier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x6b6b6b00000000) [ 2058.978599] binder_alloc: binder_alloc_mmap_handler: 5807 20002000-20007000 already mapped failed -16 [ 2058.991509] binder: 5786:5804 ioctl c0306201 20007000 returned -22 [ 2058.996223] binder: 5809:5813 unknown command 64 [ 2059.015119] binder: 5809:5813 ioctl c0306201 20007000 returned -22 [ 2059.128842] binder_alloc: binder_alloc_mmap_handler: 5821 20002000-20007000 already mapped failed -16 16:28:22 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x7, 0x400) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000100)="7074f5aedf760dbb9200ba208e5884ae43ae0629", &(0x7f0000000200)}, 0x1d) 16:28:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r0, 0x29, 0xff, &(0x7f0000000080), &(0x7f00000000c0)=0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) 16:28:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x44, 0x3, &(0x7f0000000100)=[@reply={0x40406301, {0x3, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=[0x18, 0x40, 0x38, 0x0]}}], 0x0, 0x0, &(0x7f0000002000)}) 16:28:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x50000000000000) 16:28:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0xfaffffffffff0f00) [ 2059.732985] binder_alloc: binder_alloc_mmap_handler: 5832 20002000-20007000 already mapped failed -16 [ 2059.834726] binder: BC_ACQUIRE_RESULT not supported 16:28:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x4800000000000000) [ 2059.883106] binder: 5838:5851 unknown command 832 [ 2059.888523] binder: 5835:5842 ioctl c0306201 20007000 returned -22 16:28:22 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x101000, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) r2 = getegid() r3 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000002c0)=0xc) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x888, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xffffffff}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@fsname={'fsname', 0x3d, '+cgroup!em0bdev.'}}, {@fowner_gt={'fowner>', r3}}, {@obj_role={'obj_role', 0x3d, 'keyringwlan0'}}, {@fowner_gt={'fowner>', r4}}]}}) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r6 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) setsockopt$RDS_FREE_MR(r7, 0x114, 0x3, &(0x7f00000000c0)={{0xff, 0x100}, 0x50}, 0x10) 16:28:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x6b6b6b) [ 2059.935244] binder: 5852:5856 unknown command 832 [ 2059.940650] binder_alloc: binder_alloc_mmap_handler: 5855 20002000-20007000 already mapped failed -16 [ 2059.961563] binder: 5838:5851 ioctl c0306201 20007000 returned -22 16:28:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0xa00) [ 2060.019589] binder: 5852:5856 ioctl c0306201 20007000 returned -22 [ 2060.183810] binder: BC_ACQUIRE_RESULT not supported [ 2060.217653] binder: BC_ACQUIRE_RESULT not supported [ 2060.226714] binder: 5863:5872 ioctl c0306201 20007000 returned -22 [ 2060.252974] binder: 5863:5876 ioctl c0306201 20007000 returned -22 16:28:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x2) 16:28:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2000, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x18) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="026304ca48afbfd3ead73ff38716f24a1e15c8726ab2b3d2285a868bdb031f07541380590ef8b580ebaeabefca9dff8e4b0263a34ece5d109b8a2c61926ce35dabeff0567cc7da29e22223c2a6b1d29389b47e00c4a01953c3943f316867997bf1015fdbbe684f9a22c64cab8715370c3b82454969321b32aff8b710c18fbce50a5415f6f102422a5a6111f72ca619bfa5d2f25426f807fd3b77ae8483b757f3efcf6709ee7a4e886a6d5597df", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) 16:28:23 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multip#ier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:23 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'\nubj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x1, 0x2000) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f00000000c0)={"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"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x3, &(0x7f0000005fd4)=[@acquire_done={0x4008630a}], 0x0, 0x0, &(0x7f0000002000)}) 16:28:23 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xffffffffffffffff, 0x1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x6) 16:28:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x6800) 16:28:23 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multip-ier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:23 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'oubj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x300000000000000) [ 2060.873697] binder: 5898:5909 unknown command -905682174 [ 2060.918433] binder: 5900:5914 unknown command 64 [ 2060.924018] binder: 5898:5917 unknown command -905682174 [ 2060.945315] binder: 5898:5909 ioctl c0306201 20007000 returned -22 [ 2060.961602] binder: 5922:5926 unknown command 64 [ 2060.975783] binder: 5898:5917 ioctl c0306201 20007000 returned -22 [ 2060.984867] binder: 5900:5914 ioctl c0306201 20007000 returned -22 [ 2061.010808] binder_alloc: binder_alloc_mmap_handler: 5925 20002000-20007000 already mapped failed -16 [ 2061.019821] binder: 5922:5926 ioctl c0306201 20007000 returned -22 16:28:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x6800000000000000) 16:28:23 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiptier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = semget$private(0x0, 0x0, 0x200) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000000c0)=""/248) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') 16:28:24 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'iubj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x600, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000240)=0x40, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x43, "06f62094fd35a8cfa20d19ffff7f74b38b215de3c0e1a9182e456ef53871f8a6b66d3ee5d65591ff113937c10f27c9845525d7a67e15258f5bfac78b19148a28b4743a"}, &(0x7f0000000140)=0x4b) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e21, 0x4, @mcast1, 0x2}}}, 0x84) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x3, &(0x7f0000005fd4)=[@acquire_done={0x4008630a}], 0x0, 0x0, &(0x7f0000002000)}) 16:28:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x7000000) [ 2061.172368] binder_alloc: binder_alloc_mmap_handler: 5936 20002000-20007000 already mapped failed -16 [ 2061.257474] binder_alloc: binder_alloc_mmap_handler: 5945 20002000-20007000 already mapped failed -16 [ 2061.281213] binder: 5948:5952 unknown command 64 [ 2061.286326] binder: 5948:5952 ioctl c0306201 20007000 returned -22 [ 2061.311181] binder: 5953:5954 unknown command 64 [ 2061.320045] binder: 5953:5954 ioctl c0306201 20007000 returned -22 [ 2061.361564] binder: BC_ACQUIRE_RESULT not supported [ 2061.388089] binder: 5950:5956 ioctl c0306201 20007000 returned -22 [ 2061.430945] binder: BC_ACQUIRE_RESULT not supported [ 2061.458047] binder: 5950:5956 ioctl c0306201 20007000 returned -22 16:28:24 executing program 3: socketpair(0x1d, 0xfffffffffffffffc, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000005, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [], 0x7, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x1}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000300)={r2, 0xf, "940abe888961ef0b82f67cf5ef8b37"}, &(0x7f0000000340)=0x17) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000040)={0x5, 0x7fffffff, 0x4}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:24 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multip+ier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x3f00) 16:28:24 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'Xubj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f00000002c0)={'ah\x00'}, &(0x7f0000000300)=0x1e) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x81}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={r3, @in={{0x2, 0x4e21}}, 0x1, 0x1, 0x9, 0x200, 0x3}, 0x98) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000240)={0x0, 0x0}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000200)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioprio_get$pid(0x1, r4) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000280)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x3, &(0x7f0000005fd4)=ANY=[@ANYBLOB="0a638836", @ANYRES64=0x0, @ANYBLOB="000000f6ff000cb8"], 0x0, 0x0, &(0x7f0000002000)}) 16:28:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x4c) 16:28:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x101000, 0x0) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x17) ioctl$KVM_GET_CPUID2(r4, 0xc008ae91, &(0x7f00000001c0)={0x1, 0x0, [{}]}) readv(r3, &(0x7f0000000f80), 0x0) splice(r2, &(0x7f00000000c0), r2, &(0x7f0000000100), 0x0, 0x2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000200)={{0x3f, @loopback, 0x4e21, 0x3, 'sh\x00', 0x12, 0x81, 0x30}, {@multicast2, 0x4e22, 0x2003, 0x3, 0x6, 0x2}}, 0x44) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x1}, &(0x7f0000000300)=0x8) r6 = geteuid() fsetxattr$system_posix_acl(r2, &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x2}, [{0x2, 0x3, r6}], {0x4, 0x4}, [], {0x10, 0x1}, {0x20, 0x6}}, 0x2c, 0x2) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000340)={r5, 0x100000001}, 0x8) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000080)={0x5004, 0x2000}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="02630440", @ANYRES64=0x0, @ANYBLOB=' \b\x00\x00@\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) 16:28:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x3f000000) 16:28:24 executing program 3: socketpair(0x10000000, 0x1, 0x4000, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f00000000c0)=""/113) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x6) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = accept4$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev}, &(0x7f0000000240)=0x10, 0x80800) sendto$inet(r4, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x2d4) close(r2) bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x1, 0x1, 0x0, 0x7f, 0x9, "89b09c58915f60055c5fa8b6798c8032bd7664ad5d51273ce92db72451a2518f2033bf9db3aaa21d92980b340c811d09fe21f2ebe7a402fe89722d263a60fb", 0x36}, 0x60) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') getpeername$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x14) getpeername$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000500)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@ipv4={[], [], @broadcast}, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000680)=0xe8) accept4$packet(r1, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000007c0)=0x14, 0x80800) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000800)={{{@in=@rand_addr, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000900)=0xe8) accept$packet(r1, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000980)=0x14) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000e00)={{{@in=@rand_addr, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000f00)=0xe8) accept$packet(r1, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f80)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000fc0)={@remote, @dev, 0x0}, &(0x7f0000001000)=0xc) accept$packet(r1, &(0x7f0000001080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000010c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001100)={0x5c0, r5, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0xb0, 0x2, [{0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0xc7a2, 0xffffffff, 0x8, 0xfffffffffffffffc}, {0x2, 0x9, 0x4ed8, 0xfffffffffffff5ff}, {0x4, 0x10001, 0x0, 0xdef7}, {0xffffffffffff84fb, 0x10001, 0x4da2, 0x2}, {0xb4ac, 0x4, 0x6, 0x1c1}, {0xffffffff, 0x100, 0x0, 0x1000}, {0x8000, 0x10000000, 0x1000, 0x8000}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffff9824}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x1a8, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xd46e}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x100}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x20}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x1a8, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x32}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffffc1}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0xf8, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffd}}}]}}, {{0x8, 0x1, r18}, {0x8c, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}]}}]}, 0x5c0}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) r20 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x7fffffff, 0xfffffffffffffffd, r0, 0x3}, 0x2c) socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r20, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f00000002c0)={0x74, 0x3}) 16:28:24 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multip\nier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:24 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'s-bj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x7a000000) [ 2061.799837] binder_alloc: binder_alloc_mmap_handler: 5982 20002000-20007000 already mapped failed -16 [ 2061.834848] binder: 5971:5983 unknown command 54 [ 2061.878139] binder: 5989:5994 unknown command 54 16:28:24 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x6c00) [ 2061.902065] binder: 5971:5983 ioctl c0306201 20007000 returned -22 [ 2061.958572] binder: 5989:5994 ioctl c0306201 20007000 returned -22 16:28:24 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multip*ier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:24 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'slbj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x40000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB='\nc\b@', @ANYRES64=0x0, @ANYBLOB="0000000000000000ccad27c324e1e34781f714b05fffbf0a434bb0847a16900d91f2ad6563e9faec1a6912b4e0ef0cdf1d861e36f3c9ddc907ef0180000049a3b5d33bfcd9d6ec4a73e5f2b6b10d8bebf35c1c5a5e9d9913d1772bf91e110429289739c3b52ba6120cbab090126c67af0fa7f6ae5414151173c6f96db65887e6"], 0x0, 0x0, &(0x7f0000002000)}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) 16:28:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x2000) [ 2062.107420] binder: BC_ACQUIRE_RESULT not supported [ 2062.124934] binder: 6003:6012 ioctl c0306201 20007000 returned -22 [ 2062.174984] binder: BC_ACQUIRE_RESULT not supported [ 2062.212417] binder: 6003:6012 ioctl c0306201 20007000 returned -22 16:28:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x80, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x80, &(0x7f0000000200)=ANY=[@ANYBLOB='trans\x00\x00\x00\x00rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',uname=/dev/binder#\x00,fsuuid=793\x00ww75-\x0067s-agw8-5}8b-s6u46s8d,\x00']) munmap(&(0x7f0000ff7000/0x4000)=nil, 0x4000) pipe(&(0x7f00000015c0)={0xffffffffffffffff}) ioctl$TIOCNXCL(r2, 0x540d) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001780)={"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"}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000001b80)={"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"}) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f00000012c0)={'team_slave_0\x00', {0x2, 0x4e21, @rand_addr=0xffff}}) write$sndseq(r2, &(0x7f0000001400)=[{0x5d578bf8, 0x9, 0x6, 0x401, @tick=0xe596, {0x7524, 0x3}, {0x4, 0x5}, @control={0x80, 0x4, 0x8}}, {0x7, 0x5, 0x1ff, 0x9, @tick=0xfff, {0x207c6386, 0x1}, {0x8001, 0x5}, @ext={0xea, &(0x7f0000001300)="64497fabc181180c24c2dff41cb5922c2f3a280db42a2b70e03ee09bada664c293d920efc5afa32e638c5450655de2b44450499d4c46b466df73af8de2560ebaf27cef76a896853af1b54d540cf465add1862079359029fa63a9a0ae9a3c50c1fd3f4128949bb857e31cb4935330fe0b50649b2d0b95c4475e6d37e5e55f46fa9c30c1d16394b50f43cd37692045868e575aa84a024bd52669edae1bc9d017055b4af2c7f0ffe004f2d8e075d999ed2ee4a6f4f4636434d86fa4cd6bafb98d7064c04b84f09ced21d0e08c50295f1b7e4d813d9a9ac556cef2e4b24cc86a934a03a2c19ea3c5e86e781f"}}, {0x0, 0x1cf1, 0x8000, 0xffffffffffffff01, @time={0x0, 0x989680}, {0x7ff, 0x80000001}, {0x100000001, 0x25b8}, @connect={{0x101, 0x9}, {0x2, 0x81}}}, {0x6, 0xffff, 0x9, 0x77, @tick=0x6, {0x200, 0xe000000000000000}, {0x10000, 0x6}, @time=@time}, {0x1, 0x401, 0x8, 0x9, @tick=0x9b51, {0x8, 0x3}, {0x2d, 0x5}, @queue={0x0, {0x8, 0x1ff}}}, {0x3, 0x189, 0x500000, 0x4, @time={0x77359400}, {0x2d5966f2, 0x101}, {0x400, 0x1}, @result={0x0, 0xfff}}, {0x1e, 0x3f, 0x1d, 0x8, @time={0x77359400}, {0x3f}, {0xd8e, 0x100000001}, @connect={{0x7, 0x8}, {0x8, 0x543}}}], 0x150) write$9p(r2, &(0x7f00000002c0)="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", 0x1000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001580)='/dev/sequencer\x00', 0x1, 0x0) connect(r2, &(0x7f0000000100)=@ax25={0x3, {"1baea3a83e10ec"}}, 0x80) bind(r0, &(0x7f0000001600)=@pptp={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x80) write$P9_RREADLINK(r2, &(0x7f0000001680)=ANY=[@ANYBLOB="1000000017050500696c65300000000084dee5fd57348db1e5847f2c44c0b809a30e6d5181d8363f7d0706e2d7973240532581151156cd3f369f230495c939b35041ba07e269801be5989da99caa232169855c5b91d52adc55c26e0f484d84d5dd32e8da116ce53fd554d07b43d0e3b5bd367cf47a39b6c464d9eeca4232e4642f99641fe8e6daa78fd9aeeadf2f99460b7fd2a4d130d7340352db2e055834f7053a56a6a9f84fe486c97dede8af44c9a02eff4f44b858fa488fb40175a2a9bacc9779712a5731175c45db3b4790b13918a581c598bf745db0"], 0x10) 16:28:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x6b6b6b00) 16:28:25 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multipl\ner', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:25 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'s+bj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x6c) [ 2062.369362] IPVS: ftp: loaded support on port[0] = 21 16:28:25 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'sobj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2062.425141] binder: 6034:6050 unknown command 64 [ 2062.519227] binder: 6034:6050 ioctl c0306201 20007000 returned -22 [ 2062.692850] binder: 6034:6050 unknown command 64 [ 2062.705697] binder: 6034:6050 ioctl c0306201 20007000 returned -22 [ 2062.722311] IPVS: ftp: loaded support on port[0] = 21 16:28:25 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24}, 0x10) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x800) write$P9_RREMOVE(r1, &(0x7f0000000080)={0x7, 0x7b, 0x2}, 0x7) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x4000) 16:28:25 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multipl"er', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:25 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0xde2, 0x40) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000440)=@assoc_value={0x0, 0x20}, &(0x7f0000000200)=0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x80000001}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000300)={r1, 0x9, 0x200, 0x7, 0x2, 0x0, 0x3, 0x1090, {r2, @in={{0x2, 0x4e24, @broadcast}}, 0x3f, 0x1, 0x8, 0x4, 0x5}}, &(0x7f00000003c0)=0xb0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x9}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x6}, &(0x7f0000000140)=0x8) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02630440", @ANYRES64=0x0, @ANYBLOB="000000bc9c85b700ce492846dfdcabb078c064a7817fae6280aa0d01a026a78adf"], 0x0, 0x0, &(0x7f0000002000)}) 16:28:25 executing program 4: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) write$P9_RATTACH(r0, &(0x7f0000000100)={0x14, 0x69, 0x2, {0x0, 0x3, 0x6}}, 0x14) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x3, &(0x7f0000005fd4)=[@acquire_done={0x4008630a}], 0x0, 0x0, &(0x7f0000002000)}) 16:28:25 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'sxbj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x4000000) 16:28:25 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multipl%er', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2062.950207] binder: BC_ACQUIRE_RESULT not supported [ 2062.962432] binder: 6070:6083 ioctl c0306201 20007000 returned -22 [ 2062.991759] binder: BC_ACQUIRE_RESULT not supported 16:28:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x4) 16:28:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x24000, 0x7a283bb91feb21d8) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000001480)={0x7, &(0x7f00000000c0)=""/13, &(0x7f00000013c0)=[{0x8, 0xa3, 0xd007, &(0x7f0000000100)=""/163}, {0x9, 0x23, 0x2, &(0x7f00000001c0)=""/35}, {0xfc40, 0x32, 0x7, &(0x7f0000000200)=""/50}, {0x76, 0x53, 0x1, &(0x7f00000002c0)=""/83}, {0x80000001, 0x1000, 0x0, &(0x7f0000000340)=""/4096}, {0x1f, 0x7, 0x7fffffff, &(0x7f0000000240)=""/7}, {0x1, 0x57, 0x76, &(0x7f0000001340)=""/87}]}) [ 2063.013574] binder: 6070:6088 ioctl c0306201 20007000 returned -22 16:28:25 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="83000000a91b4fa8053a2b077d141991bbe39912f0e9e32041a75e43c5d016e00b70e57def01000000e64cb1c2229249731a10ac70acbb356df0c60fa3d3216576667c7f9f1b2c87e1d8700103a5c80822988686d4eeea839aef6486cd1bc7c6296ddaf1d3ac6f8fe970cbfc314e8fa13d56b579844d334dd4d5c1f272c64d8e04e4677092fe60659f51896455e588a5982e3f8a2b"], &(0x7f0000000100)=0x8b) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r2, 0xffffffffbff55002}, 0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x200000000000000) 16:28:26 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'sibj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:26 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multipl,er', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x700000000000000) [ 2063.234542] binder: 6102:6115 unknown command 64 [ 2063.240565] binder: 6102:6115 ioctl c0306201 20007000 returned -22 [ 2063.264560] binder: BC_ACQUIRE_RESULT not supported 16:28:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x2000000) 16:28:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) sync_file_range(r0, 0x8, 0x6, 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x3, &(0x7f0000005fd4)=[@acquire_done={0x4008630a}], 0x0, 0x0, &(0x7f0000002000)}) fallocate(r0, 0x10, 0x3ff, 0xda) [ 2063.290000] binder: BC_ACQUIRE_RESULT not supported [ 2063.307409] binder: 6106:6125 ioctl c0306201 20007000 returned -22 16:28:26 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'spbj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2063.338006] binder: 6106:6132 ioctl c0306201 20007000 returned -22 16:28:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x7a) 16:28:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x20000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f00000000c0)=0x7) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x8, &(0x7f0000000100)=[{0x99d, 0x9, 0x986, 0x10001}, {0x8, 0x2, 0x6, 0x7ff}, {0x4, 0xfffffffffffffffe, 0x0, 0x7fff}, {0x4, 0x200, 0x86e3}, {0xa5f4, 0x100000000, 0x8001, 0xa362}, {0x4, 0x6, 0x6, 0xffff}, {0x400, 0x4bc, 0x361}, {0x40, 0x401, 0x4, 0x2}]}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) 16:28:26 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multipli\nr', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0xa) [ 2063.652294] binder: 6160:6169 unknown command 64 [ 2063.658497] Unknown ioctl 1074026289 [ 2063.664765] binder: 6171:6171 unknown command 64 [ 2063.675229] binder: BC_ACQUIRE_RESULT not supported [ 2063.680880] binder: 6160:6169 ioctl c0306201 20007000 returned -22 [ 2063.689989] binder: 6171:6171 ioctl c0306201 20007000 returned -22 [ 2063.697020] Unknown ioctl 1074026289 [ 2063.701287] binder: 6163:6170 ioctl c0306201 20007000 returned -22 16:28:26 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = socket$inet(0x2, 0x4000000000000001, 0x3) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:26 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'ssbj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:26 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multipli"r', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0xffffff7f) 16:28:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000000)=0x100c800, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000100)={0x2e, 0x3, 0x0, {0x3, 0xd, 0x0, '/dev/binder#\x00'}}, 0x2e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x12, 0x3, &(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRESDEC=r1, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRESDEC=r0, @ANYRES16=0x0, @ANYRES64=r0, @ANYRES64=r0, @ANYPTR64, @ANYPTR]], @ANYRES64=0x0, @ANYRES16=r0], 0x0, 0x0, &(0x7f0000000200)}) 16:28:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getuid() r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x7ff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="cff3bd8b087e1f64e3317b4e86c9ab4a50d8e0760920847226f7800d98d158a2378ba52ce54ddc103d096e20faf50113a0a7f8d2649485d418935736804e8b466d39acd248c899a32ae09e424716c113a43d321b335d437c30db8b302df4cef23d9775b7117316b116a65b92ab6db3304e8d403eb557218ce30903c3d5ab2da24e221d502d334aebb0f046a18732c8a04fa359a77ea09397b2ee9736dd0c82fb0a33da88a64973d7e4583c53f62bd3f870dbaabdcbf0af8258093e0c57e85d07860d9c9a73aacab7ea37e40867683731da5e36", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) 16:28:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x500000) [ 2064.052852] __ntfs_error: 117 callbacks suppressed [ 2064.052864] ntfs: (device loop1): parse_options(): Unrecognized mount option ssbj_type. [ 2064.093519] ntfs: (device loop2): parse_options(): Unrecognized mount option mft_zone_multipli"r. [ 2064.124280] ntfs: (device loop1): parse_options(): Unrecognized mount option ssbj_type. [ 2064.138358] ntfs: (device loop2): parse_options(): Unrecognized mount option subj_type. [ 2064.158299] binder: 6184:6202 unknown command -1950485553 [ 2064.171743] binder: 6208:6211 unknown command -1950485553 [ 2064.178938] ntfs: (device loop2): parse_options(): Unrecognized mount option dont_hash. [ 2064.188521] binder_alloc_mmap_handler: 8 callbacks suppressed [ 2064.188537] binder_alloc: binder_alloc_mmap_handler: 6203 20002000-20007000 already mapped failed -16 [ 2064.211460] ntfs: (device loop2): parse_options(): Unrecognized mount option fu. 16:28:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0xa000000) 16:28:27 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'s,bj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2064.243400] binder: 6184:6202 ioctl c0306201 20007000 returned -22 [ 2064.291544] ntfs: (device loop2): parse_options(): Unrecognized mount option mft_zone_multipli"r. [ 2064.305953] binder: 6208:6211 ioctl c0306201 20007000 returned -22 [ 2064.313253] binder: 6205:6216 unknown command 32 [ 2064.317015] ntfs: (device loop2): parse_options(): Unrecognized mount option subj_type. 16:28:27 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000040)={0x6, 0x0, [{0x80000003, 0x80, 0x1, 0x2, 0x3, 0x20, 0xc0}, {0x8000001f, 0x5, 0x5, 0x7, 0x7ff, 0x1, 0x80000001}, {0x0, 0x6, 0x0, 0x9, 0xffffffff00000000, 0x0, 0xcbf9}, {0x6, 0x3, 0x31ec4455ff77ce80, 0xd8, 0x1800000000000, 0x4, 0xc8}, {0x4, 0x1, 0x1, 0x7ff, 0x1, 0x7fff, 0x3}, {0x7, 0x81, 0x1, 0x0, 0x1, 0x7, 0x8}]}) r3 = memfd_create(&(0x7f0000000240)='eth1:trusted\x00', 0x4) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000280)={0x3f, @local, 0x4e24, 0x4, 'nq\x00', 0x8, 0x3, 0x35}, 0x2c) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) ioctl$void(r4, 0x5450) fstat(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@loopback}}, &(0x7f00000004c0)=0xe8) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x10040, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend='noextend'}, {@msize={'msize', 0x3d, 0xdf65}}, {@afid={'afid', 0x3d, 0x1ff}}, {@cache_mmap='cache=mmap'}, {@access_any='access=any'}], [{@smackfshat={'smackfshat', 0x3d, 'nq\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x77, 0x74, 0x7a, 0x64, 0x77, 0x34, 0x39, 0x73], 0x2d, [0x3e, 0x7f, 0x39, 0x7f], 0x2d, [0x39, 0x77, 0x37, 0x3974a57099b7c569], 0x2d, [0x61, 0x3d, 0x7f, 0x37], 0x2d, [0x77, 0x37, 0x77, 0x73, 0x39, 0x7e, 0x31, 0x61]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x31, 0x0, 0x73, 0x37, 0x77, 0x77, 0x30], 0x2d, [0x66, 0x37, 0x77, 0x34], 0x2d, [0x33, 0x37, 0x38], 0x2d, [0x35, 0x75, 0x73, 0x64], 0x2d, [0x38, 0x0, 0x0, 0x7d, 0x64, 0x30, 0x66, 0x3f]}}}, {@subj_type={'subj_type'}}, {@fowner_gt={'fowner>', r5}}, {@smackfshat={'smackfshat', 0x3d, 'nq\x00'}}, {@euid_gt={'euid>', r6}}, {@smackfsdef={'smackfsdef', 0x3d, 'posix_acl_access}(vboxnet0'}}]}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x400000000000) [ 2064.337271] ntfs: (device loop2): parse_options(): Unrecognized mount option dont_hash. [ 2064.353282] binder_alloc: binder_alloc_mmap_handler: 6220 20002000-20007000 already mapped failed -16 [ 2064.369466] ntfs: (device loop2): parse_options(): Unrecognized mount option fu. 16:28:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8915, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="24630490", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) [ 2064.386242] binder: 6205:6216 ioctl c0306201 20007000 returned -22 16:28:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x3, &(0x7f0000005fd4)=[@acquire_done={0x4008630a}], 0x0, 0x0, &(0x7f0000002000)}) modify_ldt$write2(0x11, &(0x7f0000000240)={0x8000, 0x0, 0x400, 0x2d8f, 0x2, 0x998a, 0x7, 0x3, 0xffffffffffffff03, 0x100000001}, 0x10) statfs(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=""/107) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000008000000020000000072286a338c8aa3a008614445743f42d8a62cf706aff137c64aecacd0aa85aa2a2cfbd6a57bd11aad191b67f697f08654dcc2333271786d353211fd92e37fb759fdd04c639ff072c53d6a125a71788bda6a712fc3fa668681bb6d3c399a4ef74e05e5323596865953e02201dff084bb06ff577f78e379ec8e3ae629fb97b81406e2d1c3740058f4d7bbb763e873b82e62ad0900000000000000000000000000000000000000000000000000000000"]) r2 = dup3(r0, r0, 0x80000) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000280)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r2, 0x0, 0x18, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0xffffffffffffffff}, 0x30) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0xc) prctl$setptracer(0x59616d61, r3) 16:28:27 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multipli%r', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x8000000000000000) [ 2064.440838] binder_alloc: binder_alloc_mmap_handler: 6235 20002000-20007000 already mapped failed -16 16:28:27 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'scbj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x500000000000000) [ 2064.576912] binder_alloc: binder_alloc_mmap_handler: 6242 20002000-20007000 already mapped failed -16 [ 2064.632763] binder: 6241:6257 unknown command -1878760668 16:28:27 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multipli,r', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:27 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'sdbj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2064.697085] binder: 6241:6261 unknown command -1878760668 [ 2064.742949] binder: 6260:6263 unknown command 64 [ 2064.749212] binder: 6241:6261 ioctl c0306201 20007000 returned -22 [ 2064.763942] binder: 6241:6257 ioctl c0306201 20007000 returned -22 [ 2064.786831] binder: 6264:6265 unknown command 64 16:28:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_setup(0x800, &(0x7f0000000240)=0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vsock\x00', 0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000016c0)='/selinux/mls\x00', 0x0, 0x0) r4 = syz_open_dev$midi(&(0x7f0000001900)='/dev/midi#\x00', 0x1f4b, 0x0) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001a80)='/selinux/policy\x00', 0x0, 0x0) io_submit(r1, 0x6, &(0x7f0000001b00)=[&(0x7f0000001480)={0x0, 0x0, 0x0, 0x7, 0x7, r0, &(0x7f0000001340)="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", 0xff, 0x5, 0x0, 0x0, r2}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000014c0)="8148728d4878f187c0109349f1ba221d00d70d1e87b185ecc724651b7a10dc11ea7a15ad4ddd77e8c184708a9001713cff971d6ea9de76c34b5fc323b9271b05c53a37a239ca9b3245a8290862c889bea0de04d37bbbc77c355a5a95f0e2ae7fd8083c32ec697b019b6f4adb3596a582b881b43e7ba18b26c16b3c87acf916964860c6a14f6c15362ba2100dced46304d069b33bdbdd830b4d17dff7ae0187da6dff8b1252b9f45fd8d160c3bdd45c07054ac4cdb9", 0xb5, 0x2, 0x0, 0x2}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x2, 0x0, r0, &(0x7f00000015c0)="17af213bfcae8e8c2c577af0a0eb4220e80d1fbe0d66492a910558aa6917ed69c317fe338a01f521917146888dbce5a7272a4ede44847703bbdcca45af9e71bc1818bedbcc76406f7eb31e157c7511f15ef06df0521227961a5d39c604205921b889dbec985ac0940fe3f5a22ee0cc40d83b4cc7db108ad62b29c2704989ee5ad831e54903c177c1132164ba45e838b29eb81a28833d3325a96620f9de42d3d95aa249bea4f2c3b8e9c10e59f0bac7298870d89d52778895c95d021c60dfdc14232b9c7773ec547f7374821492f5054179685442155bda714ace30192b6f50cd0c1c95b81906ad0bf0d2d0afb91449600ac3", 0xf2, 0x0, 0x0, 0x1, r3}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x6, 0x3, r0, &(0x7f0000001740)="e19533aec379511eb522309cc36cec8022595dc54d8eeca47339f1d48c9453a848bba5b5ed0db7e36b34fe864bbf3fc62fae1cb8ac308d571f75e0705c01c6cb61e2eb40e42b445f4ce1efb7f2450d2ce2777dcf9b3441d15f2333d005eca303eac134199a85ed66ca5a57e474424e399f9285cf62646452132725a3dc20a473927cb3fe8224b5adac000b56b275c638b034c31feccecc3b74ee1fe4c4d4", 0x9e, 0xf4, 0x0, 0x1, r0}, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x5, 0x5, r0, &(0x7f0000001840)="fae1da5e623eb03d8886c51c9d8a765b7ec3e2576d27bdd02356a7a528c50a0e1ecfa61558c7a48381aea65f1cace450bacc198b7811655d263a38c850f8c2b00182aa3b61d6f74e824c6f8e7a0b89d6a30daf8e4c4b79be193ffcdb5849cdb7a90a0ac3f7ffd3dc4dbd9d1feeb0624895f9d9d6582061ed5c01f8600899906d0ad9a1b1d03118f4", 0x88, 0xfffffffffffffffc, 0x0, 0x3, r4}, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x7, 0x6, r0, &(0x7f0000001980)="e2c68be00d7b22b0027f0fc32093be179540ab2da913f185e33dbc9bfb70e9d2ec31b2a03a3222bdf26a462066184bd8cade7c2594d05ccd10d76d9fc15052cb16798f6f116079b633043f75e86957d1071975a3996aaec4e2d212c0a8660028ff9ba829d6e373ae0e1d7cfc80f065f0f5cdbdc79f0707dde77872f0d3fdb9683b6b6fb5b90d66ac79433cf129ca89eef2f0983be5b1d79ec525ad47b2d4c24ccdf5c0f2a20d018e181d7504d061a75330630d2cf583b81d85b6279f7b110580e73d8f6ecea8c5aba99fbdacc014bc7564b9156976be847dd0e473d659b19e", 0xdf, 0x80000001, 0x0, 0x3, r5}]) r6 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/vcs\x00', 0x0, 0x0) readv(r6, &(0x7f00000012c0)=[{&(0x7f0000000080)=""/99, 0x63}, {&(0x7f0000000100)=""/89, 0x59}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/93, 0x5d}, {&(0x7f0000000200)=""/44, 0x2c}], 0x5) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) [ 2064.791624] binder: 6264:6265 ioctl c0306201 20007000 returned -22 [ 2064.800945] binder: 6260:6263 ioctl c0306201 20007000 returned -22 16:28:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x3, &(0x7f0000005fd4)=[@acquire_done={0x4008630a}], 0x0, 0x0, &(0x7f0000002000)}) [ 2064.941018] binder_alloc: binder_alloc_mmap_handler: 6271 20002000-20007000 already mapped failed -16 [ 2065.050920] binder: BC_ACQUIRE_RESULT not supported [ 2065.103473] binder: BC_ACQUIRE_RESULT not supported [ 2065.117333] binder: 6278:6281 ioctl c0306201 20007000 returned -22 [ 2065.125438] binder: 6278:6283 ioctl c0306201 20007000 returned -22 [ 2065.168569] binder: 6285:6287 unknown command 64 [ 2065.188092] binder: 6288:6290 unknown command 64 16:28:28 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) getpeername$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) 16:28:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x1000000000000) 16:28:28 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplie,', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:28 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'s*bj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) fgetxattr(r1, &(0x7f0000000080)=@known='trusted.overlay.origin\x00', &(0x7f00000000c0)=""/233, 0xe9) [ 2065.232778] binder: 6285:6287 ioctl c0306201 20007000 returned -22 [ 2065.237888] binder: 6288:6290 ioctl c0306201 20007000 returned -22 16:28:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102002000, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000100)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x4000, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f00000000c0)=0x93, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x3, &(0x7f0000005fd4)=[@acquire_done={0x4008630a}], 0x0, 0x0, &(0x7f0000002000)}) 16:28:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0xa00000000000000) [ 2065.326587] binder_alloc: binder_alloc_mmap_handler: 6298 20002000-20007000 already mapped failed -16 16:28:28 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplie\n', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2065.414843] binder: BC_ACQUIRE_RESULT not supported [ 2065.433619] binder_alloc: binder_alloc_mmap_handler: 6311 20002000-20007000 already mapped failed -16 16:28:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x3000000) 16:28:28 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'sXbj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2065.479030] binder: BC_ACQUIRE_RESULT not supported 16:28:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x7400) [ 2065.507637] binder: 6297:6309 ioctl c0306201 20007000 returned -22 [ 2065.532823] binder: 6297:6319 ioctl c0306201 20007000 returned -22 [ 2065.548527] binder_alloc: binder_alloc_mmap_handler: 6323 20002000-20007000 already mapped failed -16 16:28:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x4000) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x101, 0x9cc}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x2, 0x2, 0x99, 0x1, 0x0}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @local}}, 0x3f61, 0x9, 0x2, 0x7, 0x20}, &(0x7f0000000400)=0x98) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000002d40)={0x0, 0x6b, "696c63a47371fd38b21f6419b6c834684ef478402fce7829c8f02354ed272f49a984e160d5d599f83e7738c22b15375346c905fea3a5d9a146a2f72f9bd4cc9ce7ed55aeb94bfb28b7c350cb3abf8bc7442efb590c5b8056eb1258daddfff0602c98136024830af9527ce2"}, &(0x7f0000002dc0)=0x73) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000002e00)={0x0, 0x7}, &(0x7f0000002e40)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000002e80)={0x0, 0xffffffff}, &(0x7f0000002ec0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000002f00)={0x0, 0x4}, &(0x7f0000002f40)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000003300)={0x0, 0xb17, 0x30}, &(0x7f0000003340)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000003380)={0x0, 0x2, 0x30}, &(0x7f00000033c0)=0xc) sendmmsg$inet_sctp(r2, &(0x7f00000039c0)=[{&(0x7f0000000100)=@in6={0xa, 0x4e21, 0x4000000000000000, @loopback, 0x1}, 0x1c, &(0x7f0000000140), 0x0, &(0x7f0000000440)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x8004, 0x3, 0x0, r3}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x7f}}, @init={0x18, 0x84, 0x0, {0x4, 0x0, 0x6, 0x1}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x6}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x7}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x4, 0x2, 0x3ff, 0x5, 0x40, 0xfff, 0x818, r4}}, @authinfo={0x18, 0x84, 0x6, {0x1}}, @sndinfo={0x20, 0x84, 0x2, {0xfffffffffffffffb, 0x1, 0x8, 0xbd, r5}}, @authinfo={0x18, 0x84, 0x6, {0x8001}}], 0x100, 0x4008000}, {&(0x7f0000000540)=@in6={0xa, 0x4e22, 0x14000000000000, @dev={0xfe, 0x80, [], 0xf}, 0x5}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="910c8ad02809b9bc5cf79d90afef0eca073ad708295d0eeec4d2890e0391519eb0808f3594f1d3c1b986be351f410277d522ae33134fd28313bbcc8234f074a635c20bc3e70f5c9219fce6eac5426a079e0fe3b5fe90006ea4f36a3fc67147503677800eccb4ed7551996e222bdd92e4d14aa2dde77c2aa17ad899b4da8358f84ef0e40fc87f8a9e63a3dbe174e2be74", 0x90}, {&(0x7f0000001640)="eecc2fb983c5e49d", 0x8}, {&(0x7f0000001680)="58bfe8063cde119427228b7c458b4a3fa50c369f66cb2002fd086b407047ac2e116e3c169bc721c48081126a4a65ee939648c4241587132cadc5ba8f434300bcf856745dac4c003aa98d41caff64ba741ea089878763c492725900958e97c8909d5ff5686a858590c5174926ec5e136ccf6bd18393b1939d34780583901674f00c3dfd419512262420101196f3a52dab76c7b53fd08d2c1a96e309e5e36a95b800b452d3f4bff5a29a067df03aaeddd2ab9e44054493b216904fad73d935e9f3b2e8d67a56cde8e240ab5ffbe9534f943819e563ac77853bdb4615b530e10316094e", 0xe2}, {&(0x7f0000001780)="2e1c4417b9d39211bc03fa2b8d02f3d5f2c12d44d394a0464ab292352f59cb95085ca5c697e45ef4cb5396df6e2223a73671ff073f726ef182de2d97160a58176b2b5b8799904d4fbfff9f4311922c938df7e07b7e3e53fccb2bf716cc678e988cbc85500c8dfcf0057ff7e6ca717de7cafc380f43f16d9faa7b9f013a147c4c024b32e449273f497e2bf641e2ef9011a4bf2c36ef71e697a8cccca348d7ea8ab81d98ea0e9e795589360f1dfba60a6bc12d8f2487a89478723025293383aebcd13bd2f2241dd4fca5120d69d34fc892f07fe7fe", 0xd4}], 0x5, &(0x7f0000001900)=[@dstaddrv6={0x20, 0x84, 0x8, @remote}], 0x20, 0x80}, {&(0x7f0000001940)=@in6={0xa, 0x4e24, 0x200, @mcast1, 0x72aa}, 0x1c, &(0x7f0000002b40)=[{&(0x7f0000001980)="a033e99a7498416859fc94cdd3ea5023058ede709bace87eefc82a759f1545ad78a160500eb7bd011dbf5ecf7a8a0b8c1c9ad33e3c8094985d136a8a4e9dba3d9be715e6a23174ea5f7459d8e1911d6071116961ac36fee756fc02722a02294357979202763c5c0c827fdf221a3471ade96bb3f56f7c64bc760915f12a4846e8d8b6ced0ad5cf95e235a9bbf37f9e9ea20ac37da7b486d05493a50899787f6ac3d657ef88b5832683fad4859bb4b863b6214676ced729ee4ca5ea59ee1bc55452e66925952576bfcd71d6652a8f932e74ec6b3ba0b128064ad2cf3b9ac6cc535af6d5f3b", 0xe4}, {&(0x7f0000001a80)="8045ff4763d370781e855734c03e806a0bd1e4d870d861", 0x17}, {&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000002ac0)="3ecc3f36c4a2c6221ca0d65f7e32b1fdb6c845333cafc5410ce5f9017165e70bfb58077b7684d65c1d777ca2e2f12d69a543a3225810d108c80753e229f5db977f1ebd2f025d18c72de4", 0x4a}], 0x4, 0x0, 0x0, 0x8000}, {&(0x7f0000002b80)=@in6={0xa, 0x4e23, 0xffffffff, @mcast1, 0x2}, 0x1c, &(0x7f0000002d00)=[{&(0x7f0000002bc0)="f9ddea6434c4a789fa39490b0745806acac5fd4d5f8f504d6223a6fe9631e343f359df3399c658da7dcd8d84f0382a8517e5ca0877def69b564f414231593bd9de0e335b246058fc12efd393198b7d56a3751f72267626b91f65d828e0e577bc6cabd010c831bd391c46af0b16e2d1663dc81b", 0x73}, {&(0x7f0000002c40)="83b3c4765b1ff982b2abfa2d8fe192d8ccc6786e78bf22c4d5ebc12e62111e1c56345d8b0e82dc27e2457a6141bf9c261ab3854488ef6c089367dcd5ca59851c243364d810bd4ab87d4942cf37b5fe35ac2b04f9b83747b99c3ffc3b5cecfbf7ef5316bc4742b78e9644f37db1c9dd74ebe56b3606f8a9695f15d3e9e61778a94b", 0x81}], 0x2, &(0x7f0000002f80)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x2}}, @sndrcv={0x30, 0x84, 0x1, {0x7f, 0x101, 0x1, 0xdd8, 0x7, 0x1b, 0x8, 0xffffffff, r6}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x101}}, @sndrcv={0x30, 0x84, 0x1, {0x1b, 0x4, 0x8009, 0x7, 0x81, 0xffff, 0x0, 0x2, r7}}, @authinfo={0x18, 0x84, 0x6, {0x3}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x8}}, @authinfo={0x18, 0x84, 0x6, {0x1ff}}, @sndrcv={0x30, 0x84, 0x1, {0x73f, 0xfa8a, 0x8000, 0x1, 0x7a, 0x1ff, 0x281c, 0x401, r8}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0xfff, 0x8206, 0x8, 0x6, 0x2, 0x2, 0x6, r9}}, @init={0x18, 0x84, 0x0, {0xed8, 0xc, 0x6, 0x1e8}}], 0x150, 0x800}, {&(0x7f0000003100)=@in6={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, [], 0x1b}, 0xfffffffffffffe00}, 0x1c, &(0x7f00000032c0)=[{&(0x7f0000003140)="71703f676b681b74699a1a112c9bbd78a32c262eac87af5e6538208a4f7537bc90a5b40564d351d5a212e0fe7a55203f73efd6ea0cdb38fcac9168b0533363d5b68ded34eea9c4ec304b63e46afe0dfe92473e1e8cc01a4e3b9c3c3a9a3c0d7ca045e9bf8bdb4770ac4038", 0x6b}, {&(0x7f00000031c0)}, {&(0x7f0000003200)="1d6b85c9f4fd4a0c835694e6d5a4ce2e3a06567477bcd159384972dd82075196ace18ff39012bd71eea9aab1661e7df58751385d305444a611623353ba601040d69b0c7dd72045b3400b7186a14599ad59a297a5d05138e294c22938b5e6dd90bc06926bc7156e4fe351b19ac137a9e0697f95da98fc93fafa3c8ecd0ac58d6f3c34a9a83b611627153c0f482142ac5dc3c3cc9c", 0x94}], 0x3, &(0x7f0000003400)=[@sndinfo={0x20, 0x84, 0x2, {0x4d, 0x1, 0xfffffffffffffffb, 0xffffffffffff0001, r10}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @authinfo={0x18, 0x84, 0x6, {0x1f}}, @init={0x18, 0x84, 0x0, {0x8, 0x3ff, 0x4, 0x8}}, @init={0x18, 0x84, 0x0, {0x9, 0x3, 0x8, 0x7}}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0x1ff, 0x201, 0x9, 0x8, 0x6387, 0x7fff, 0x200, r11}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}], 0xd0, 0x20040800}, {&(0x7f0000003500)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, &(0x7f0000003940)=[{&(0x7f0000003540)="5a8240fa9bad620e9628e39fbbc79a3505b31bbcaa3cdb7806ccef190cdf51dc8d57ef0ef72532", 0x27}, {&(0x7f0000003580)="677c792f98b068c4c46e4221332af59b661d4178c486d02b6248113517298e1c6479ad33eabdd9a0d6615d521dddbd525f51e7ede7cf9db15b48f251164159b10ea95686deb0f8fa7167e9df7f148144e1619fd7c909ca8c4641c5ce820519a1a55aaf62fb8d5c04e00aa76020d928d0f1ee642db485b816d48705db13cc6d8c653ce7e4fb46c790b7", 0x89}, {&(0x7f0000003640)="12eb5380519e7e5f21d85a431c6f707ec530ae6597557ebc7765237bf2257b76c6954e6a8ffc4a0b70e0cf9f1837c1974e13ef2b87e3c86e4bbc557daeb5b2824192fd870016b26a32d208d67e9e9cdce92f4872aea0e73b19a12db0f6b7b76d069b57090565a60c5e471794a6abce68adca22b07e553789d5d92ec6b420633ccc442a65dd21dd896f6f4c75429b8f87d4743567210862db261e2868d132994a17abecb8551a5f8bc4a6", 0xaa}, {&(0x7f0000003700)}, {&(0x7f0000003740)="a2012f6eec208990cd514f328bf444864b107ee77f196ee3f51be5a1a2acc9ff079551918d02a34c358dcc96297f2e969fca5820e246c119c995b55fbb18ac826050b872dd77957d26ae9df29d5aecb42bd831272b15d7a2ab863ff878a71724e512a91619a4450b0009144a0de646097e7be35cf68edf9ada13dac507deddba84855aa211440ea39d5808cff595e555e45029b6dcaf4e6a81d60fdd3183258af5c46946e520c39bee8be19c0fffb73b229e736b8d9561bf7160a5aa677f4e01588cc0554612433f9edfd38d", 0xcc}, {&(0x7f0000003840)="451b9fb7c96b7100aff592fc0830c6b5b5019c02c45efebe9127c123f614d4793a7ab23c00aa8ef2ca0280a068636ce0fc58aed4cf5710e2f9c0c959df29b5da5244a9ce1e87f800da6d5ba83e418219774d7c9ae564f94807935ee0a910e5cefc29fd30b8aecf7b67d205b82ede3ab545bf2de6bd9a8f7aabd7a3368bc0196aca601da317c3c4647d4cc35ff83a8fab02f6848a40d1819bb553a380b0606186973967568a77b97c0f15cb955a8bd3b4c90e971d89b7a6f0da283617bacf", 0xbe}, {&(0x7f0000003900)}], 0x7, 0x0, 0x0, 0x20000040}], 0x6, 0x44) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000000080)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) [ 2065.750734] binder: 6325:6334 unknown command 64 [ 2065.781404] binder: 6325:6334 ioctl c0306201 20007000 returned -22 [ 2065.878065] binder: 6325:6341 unknown command 64 [ 2065.903028] binder: 6325:6341 ioctl c0306201 20007000 returned -22 16:28:29 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplie"', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:29 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'s"bj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x74) 16:28:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffda8, 0x0, &(0x7f0000000180)=[@reply={0x40406301, {0x3, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[0x60, 0x0, 0x28, 0x38, 0x68, 0x30, 0x18, 0x20, 0x78]}}], 0x1e9, 0x0, &(0x7f0000002000)}) 16:28:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="0ae3a74e46f19507161c08c8d270ace1ebde0dfd0e6d0c9768cc022ab3172f8e99c5a1896dd7aca435513b4dd9e08ef11354cb44ee9e5af8ad82a605ac5f6fa416a7761dbcabc2c97fc8e447b051d4a6eee40e0d3a327ba423e5a0d5c167c06c918e45a0bde6cce91c94b130", @ANYRES64=0x0, @ANYBLOB="008f770000000000"], 0x0, 0x0, &(0x7f0000002000)}) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x697, 0x1) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x1) 16:28:29 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x3, @local, 0xfffffffffffffffb}, {0xa, 0x4e24, 0x100000000, @empty, 0x6}, r4, 0x2}}, 0x48) 16:28:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x60) 16:28:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x2, 0x103200) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000000c0)=0x10, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x21020017fa, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000100)=0x800, 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) [ 2066.321417] binder: 6355:6374 unknown command -1779349938 16:28:29 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplie%', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x7400000000000000) [ 2066.366007] binder: 6380:6383 unknown command -1779349938 [ 2066.396875] binder: 6355:6374 ioctl c0306201 20007000 returned -22 16:28:29 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'s\nbj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2066.443535] binder: 6380:6383 ioctl c0306201 20007000 returned -22 16:28:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x48000000) 16:28:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x2) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x3, &(0x7f0000005fd4)=[@acquire_done={0x4008630a}], 0x0, 0x0, &(0x7f0000002000)}) [ 2066.489393] binder_alloc: binder_alloc_mmap_handler: 6391 20002000-20007000 already mapped failed -16 16:28:29 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x2c, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x60000000) 16:28:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) [ 2066.615225] binder_alloc: binder_alloc_mmap_handler: 6405 20002000-20007000 already mapped failed -16 [ 2066.648801] binder: BC_ACQUIRE_RESULT not supported [ 2066.653990] binder: 6402:6416 ioctl c0306201 20007000 returned -22 [ 2066.827156] binder: 6423:6429 unknown command 64 [ 2066.847207] binder: 6430:6430 unknown command 64 [ 2066.853779] binder: BC_ACQUIRE_RESULT not supported [ 2066.861457] binder: 6423:6429 ioctl c0306201 20007000 returned -22 [ 2066.875372] binder: 6428:6433 ioctl c0306201 20007000 returned -22 [ 2066.877088] binder: 6430:6430 ioctl c0306201 20007000 returned -22 16:28:30 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) socket$inet(0x2, 0x3, 0xe5afa8b) 16:28:30 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'s#bj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:30 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x5b, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = dup2(r0, r0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x3, &(0x7f0000005fd4)=[@acquire_done={0x4008630a}], 0x0, 0x0, &(0x7f0000002000)}) 16:28:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x74000000) 16:28:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)={r0}) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000005c0)={0x80, 0x0, 0x7}, 0xc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) r3 = socket(0x3, 0x6, 0x4) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000080)=0xdd, &(0x7f00000000c0)=0x4) 16:28:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x700) [ 2067.165465] binder: BC_ACQUIRE_RESULT not supported [ 2067.173847] binder: 6441:6451 ioctl c0306201 20007000 returned -22 16:28:30 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x22, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2067.258002] binder: BC_ACQUIRE_RESULT not supported 16:28:30 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'s0bj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x7a00) [ 2067.279653] binder: 6455:6470 ioctl ae60 0 returned -22 [ 2067.295653] binder: 6455:6470 unknown command 64 [ 2067.305539] binder: 6471:6471 ioctl ae60 0 returned -22 [ 2067.311930] binder: 6471:6475 unknown command 64 [ 2067.317272] binder: 6455:6470 ioctl c0306201 20007000 returned -22 16:28:30 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0xaf, 0x10}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r1}, &(0x7f0000000180)=0x8) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) 16:28:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x101800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffffffffff7, @remote, 0xffffffffffff0001}, r2}}, 0x30) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000080)='./file0\x00', r3}, 0xfffffffffffffedf) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x3, &(0x7f0000005fd4)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) [ 2067.342044] binder: 6471:6475 ioctl c0306201 20007000 returned -22 [ 2067.342548] binder: 6441:6464 ioctl c0306201 20007000 returned -22 [ 2067.484306] binder: BC_ACQUIRE_RESULT not supported [ 2067.494289] binder: 6491:6493 ioctl c0306201 20007000 returned -22 [ 2067.504224] binder: 6492:6495 unknown command 0 [ 2067.512683] binder: 6492:6495 ioctl c0306201 20007000 returned -22 16:28:30 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) 16:28:30 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x25, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x5000) 16:28:30 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'s%bj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl(r0, 0xa547, &(0x7f0000000100)="153f6234d25d7660700000") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="75dd7bc67b3d4cbaf4db08ac7b39f704892bb79aae13873927c18d77da376d06f56374ae59d004a247f9efb1e355082b268a8b5c42a6b30882d8b7541040f98f00", 0x41, 0xfffffffffffffffc) keyctl$update(0x2, r2, &(0x7f0000000240)="a56956ed3d4691bcf163e2f627a3405cd1bf829be246a5215c944b8b3f80bae350a0a13ff5e7967ba0aad617dc39864c84e31faf971b989316d8e6a0897acf6204ba2a92b6aa3027ef3cd97f07245e117c04946ef3a374bd3c10b46b82", 0x5d) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) 16:28:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x7ff) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000180), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x3, &(0x7f0000005fd4)=ANY=[@ANYBLOB='\nc\b@', @ANYRES64=0x0, @ANYBLOB="0000000100008000"], 0x0, 0x0, &(0x7f0000002000)}) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x1) sendto$llc(r1, &(0x7f0000000080)="d6ca36968ba1a7d364772ef79a88900df3df5a349abf7fb744a242ebcdd0ac0633e110b58928eeb9316da948d1f02e57deac0ce34f798b3db47b428df3a91a0863d06fc268ca39296e", 0x49, 0x2000c000, &(0x7f0000000100)={0x1a, 0xffff, 0x8, 0x800, 0x20000, 0x7, @dev={[], 0x10}}, 0x10) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) 16:28:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x3) [ 2068.123064] binder: BC_ACQUIRE_RESULT not supported 16:28:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:31 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'s.bj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f00000000c0)=0x400) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB='\nc\b@', @ANYRES64=0x0, @ANYBLOB="00000000000000003e3e9772fb33d8ee597c224104ffd7c14550b6c870355c5bcb00330bc30477cfef38e92cef77d27b70"], 0x0, 0x0, &(0x7f0000002000)}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x808, 0x5}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={r2, 0x2, 0x1, 0x4, 0x87, 0x6}, 0x14) 16:28:31 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x3bb}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x20000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) [ 2068.207657] binder: 6505:6519 ioctl c0306201 20007000 returned -22 [ 2068.402825] binder: 6557:6558 unknown command 64 [ 2068.409627] binder: 6557:6558 ioctl c0306201 20007000 returned -22 16:28:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x543200, 0x20) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f0000000200)={0x2, 0xb5, 0xa0c, 0x400, 0x7, 0x81}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="2ef1b709", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80, 0x0) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000240)) fcntl$setflags(r1, 0x2, 0x1) 16:28:31 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'su,j_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1c) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, {0x401, 0x0, 0x3, 0x3, 0x400, 0x1}}, 0x8) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x2) 16:28:31 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080), 0x4) 16:28:31 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1b, &(0x7f00000000c0)=""/23, &(0x7f0000000100)=0x17) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r4 = socket$inet6(0xa, 0x8000000000000802, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x10000, &(0x7f00000001c0)=""/164) sendmsg$inet_sctp(r4, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x4e20, 0x0, @mcast2, 0x9}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000d40)="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", 0x57d}], 0x1}, 0x8000) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000d00)=0x3, 0x4) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f00009f0ffc), 0x4) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)=r2) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) fchmodat(r0, &(0x7f00000002c0)='./file0\x00', 0x7c58604950a323ad) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2ec) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:31 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x100000}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@loopback, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@multicast2}}, &(0x7f0000000400)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f0000000600)={@loopback, @rand_addr, 0x0}, &(0x7f0000000640)=0xc) accept4(0xffffffffffffff9c, &(0x7f0000000740)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000007c0)=0x80, 0x0) accept$packet(r0, &(0x7f0000000800)={0x11, 0x0, 0x0}, &(0x7f0000000840)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000008c0)={{{@in=@rand_addr, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f00000009c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000a80)={@broadcast, @empty, 0x0}, &(0x7f0000000ac0)=0xc) clock_gettime(0x0, &(0x7f00000037c0)={0x0, 0x0}) recvmmsg(0xffffffffffffff9c, &(0x7f00000036c0)=[{{&(0x7f0000000b00), 0x80, &(0x7f0000000e40)=[{&(0x7f0000000b80)=""/29, 0x1d}, {&(0x7f0000000bc0)=""/203, 0xcb}, {&(0x7f0000000cc0)=""/219, 0xdb}, {&(0x7f0000000dc0)=""/79, 0x4f}], 0x4, &(0x7f0000000e80)=""/53, 0x35, 0x3}, 0x3}, {{&(0x7f0000000ec0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000f40)=""/74, 0x4a}, {&(0x7f0000000fc0)=""/141, 0x8d}, {&(0x7f0000001080)=""/90, 0x5a}, {&(0x7f0000001100)=""/184, 0xb8}, {&(0x7f00000011c0)=""/74, 0x4a}], 0x5, &(0x7f00000012c0)=""/31, 0x1f, 0x101}, 0x6}, {{&(0x7f0000001300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000003480)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/35, 0x23}, {&(0x7f00000023c0)=""/16, 0x10}, {&(0x7f0000002400)=""/47, 0x2f}, {&(0x7f0000002440)=""/20, 0x14}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x6, &(0x7f0000003500)=""/181, 0xb5, 0x18000000}, 0x1a21}, {{&(0x7f00000035c0)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000003640), 0x0, &(0x7f0000003680)=""/19, 0x13, 0x1}, 0x40}], 0x4, 0x40, &(0x7f0000003800)={r10, r11+30000000}) accept(0xffffffffffffffff, &(0x7f0000003840)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000038c0)=0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000003900)={'bpq0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003940)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000003a40)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000003e40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003e00)={&(0x7f0000003a80)={0x360, r1, 0x0, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r3}, {0xbc, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xf479}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r5}, {0x130, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r12}, {0xfc, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r13}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x8080}, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x8, 0x14010, r0, 0x0) r16 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) write$FUSE_LK(r16, &(0x7f00000000c0)={0x28, 0x0, 0x1, {{0x9, 0x9, 0x1, r17}}}, 0x28) 16:28:32 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'su\nj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2069.087534] __ntfs_error: 115 callbacks suppressed [ 2069.087548] ntfs: (device loop2): parse_options(): Unrecognized mount option subj_type. 16:28:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpgrp(0x0) sched_setscheduler(r1, 0xffffffffffffffff, &(0x7f00000000c0)) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) [ 2069.134159] ntfs: (device loop2): parse_options(): Unrecognized mount option dont_hash. [ 2069.145512] binder: 6577:6587 unknown command 163049774 [ 2069.160641] ntfs: (device loop2): parse_options(): Unrecognized mount option fu. 16:28:32 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x16, 0xba, 0x4, 0x78, 0x10000000000000, r0, 0x3}, 0x2c) r4 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x6, 0x101000) fsetxattr(r0, &(0x7f0000000240)=@random={'osx.', '/dev/vcs#\x00'}, &(0x7f0000000280)='/dev/vcs#\x00', 0xa, 0x1) fsetxattr$trusted_overlay_opaque(r4, &(0x7f00000001c0)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x78) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="03f2e52959b8ecd6f309019c6494348d297a251c4919019c4f6f4eb57ac2d7a4984281778b0103f74e36ed6f6f17979d25e632d358afaacce7ce5c24454aff8bb5940bcc3037f7d3b42e5cd8b850a402b841869222afa7df9717fe02accf5c07d5570ce7e9b78a2ab3f7144e08735d6b91d2e9c003d67e7b29f22b0f70631a383f74f6452978ee", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) [ 2069.196450] binder: 6577:6603 unknown command 163049774 [ 2069.205828] binder_alloc_mmap_handler: 9 callbacks suppressed [ 2069.205844] binder_alloc: binder_alloc_mmap_handler: 6600 20002000-20007000 already mapped failed -16 [ 2069.220158] binder: 6577:6587 ioctl c0306201 20007000 returned -22 [ 2069.230708] binder: 6577:6603 ioctl c0306201 20007000 returned -22 16:28:32 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4003}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x1000000000) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000000)) r2 = getpgid(0xffffffffffffffff) ioprio_set$pid(0x0, r2, 0xf2f9) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000240), &(0x7f0000000280)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=0x0, &(0x7f0000000180)=0x4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000001c0)={r3, 0x4}, &(0x7f0000000200)=0x8) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) utime(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x5, 0x9}) [ 2069.248804] ntfs: (device loop1): parse_options(): Unrecognized mount option su [ 2069.248804] j_type. 16:28:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101100, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0x1000, "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"}, &(0x7f00000011c0)=0x1008) sendto(r1, &(0x7f0000001240)="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", 0x1000, 0x8010, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000001200)={r2, 0x6, 0x9, [0x1f, 0x6, 0x8, 0xfffffffffffffffc, 0x8, 0x6, 0x8, 0x80000001, 0x1]}, 0x1a) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x28, 0xb01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r1, 0x0) [ 2069.302621] binder: 6610:6611 ioctl 80045300 20000000 returned -22 [ 2069.317633] binder_alloc: binder_alloc_mmap_handler: 6610 20002000-20007000 already mapped failed -16 [ 2069.329918] ntfs: (device loop1): parse_options(): Unrecognized mount option su [ 2069.329918] j_type. [ 2069.369196] ntfs: (device loop2): parse_options(): Unrecognized mount option subj_type. [ 2069.381361] ntfs: (device loop2): parse_options(): Unrecognized mount option dont_hash. [ 2069.390684] ntfs: (device loop2): parse_options(): Unrecognized mount option fu. 16:28:32 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'su"j_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:32 executing program 4: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendfile(r1, r0, &(0x7f0000000040), 0xe0) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000040)) 16:28:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000040), 0x4) [ 2069.418710] binder_alloc: binder_alloc_mmap_handler: 6621 20002000-20007000 already mapped failed -16 [ 2069.430771] audit: type=1400 audit(1540139312.335:1842): avc: denied { map } for pid=6623 comm="syz-executor0" path="/dev/vcs" dev="devtmpfs" ino=14669 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file permissive=1 [ 2069.450809] binder: 6620:6626 unknown command 702935555 [ 2069.481423] binder: 6620:6630 unknown command 702935555 [ 2069.487742] ntfs: (device loop2): parse_options(): Unrecognized mount option subj_type. [ 2069.498303] binder: 6620:6626 ioctl c0306201 20007000 returned -22 [ 2069.515012] binder: 6620:6630 ioctl c0306201 20007000 returned -22 16:28:32 executing program 5: clock_gettime(0x0, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) 16:28:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x102) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:32 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xc900}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2069.535217] binder_alloc: binder_alloc_mmap_handler: 6635 20002000-20007000 already mapped failed -16 16:28:32 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'su%j_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2069.612252] binder_alloc: binder_alloc_mmap_handler: 6640 20002000-20007000 already mapped failed -16 [ 2069.685211] binder: BC_ACQUIRE_RESULT not supported [ 2069.695257] binder: 6652:6658 ioctl c0306201 20007000 returned -22 16:28:33 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) r4 = getpgrp(0xffffffffffffffff) write$FUSE_LK(r0, &(0x7f0000000040)={0x28, 0x0, 0x6, {{0x1, 0x101, 0x2, r4}}}, 0x28) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) 16:28:33 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x3, 0x200000) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000140)={[{0x33, 0x10000, 0xdf, 0x2, 0xaf, 0x8000, 0x3, 0x80000001, 0x3348, 0xfffffffffffffffb, 0x5, 0x1, 0x8}, {0x2, 0x2, 0x7ff, 0x1, 0x8bac, 0x6f8e, 0x9, 0x0, 0x9, 0x0, 0x7, 0xffffffffffffffc9, 0x100000001}, {0x6, 0x0, 0x1, 0x80000001, 0x6, 0x0, 0x1f, 0x9, 0x0, 0x4, 0x1, 0x81dc, 0x2}], 0x7}) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000000c0)) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, 0xffffffffffffffff, 0x0) 16:28:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) membarrier(0x1, 0x0) clone(0x201, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) 16:28:33 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xff0f}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:33 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'sub\n_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:33 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c4673000200faff3c46dc000000006e0100000000a4e24000000000000000f4010000000000f336f1aa00030038000100ffff0000d9ba05000070010000004000000000000000050000000000000001800000000000000100000000000000060000ec05000000000000800000000005402fc8e76d86f7afad21f1dfde89256d81fe0fe797a94935e51d088d8fa16dd8cbf0d6b2054d53e2c8b190c043c04c206c9657712327654e700dac1c8bc9905e26f80000003d47c9ad1d000000000000000000004d86a89ba98dde000000000000000000000000"], 0xd9) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 16:28:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102002000, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3f, 0x800) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000140)={0x6, 0x0, [{0x80000007, 0x5, 0xffffffffffffff80, 0xad60, 0x1}, {0x80000007, 0x8, 0x1, 0x6, 0x9848}, {0x0, 0xab4, 0x2, 0xeb, 0x6}, {0x0, 0x5, 0x10001, 0x20, 0x36}, {0x80000007, 0x10001, 0x3ff, 0xffffffffffff136b, 0x4}, {0xc0000001, 0xfffffffffffffbff, 0x9, 0x8, 0x3ff}]}) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x4e21, @local}}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffffffffffffffd) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x20, 0x401, "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", 0x42, 0x7, 0x5ad8, 0x8000, 0x6, 0x1a2, 0x101, 0x1}, r2}}, 0x120) 16:28:33 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'sub"_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2070.260901] binder: 6683:6687 ioctl 891b 20000000 returned -22 16:28:33 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2c03}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2070.330932] binder: 6683:6687 ioctl 891b 20000000 returned -22 16:28:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x3ffff, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000040)={0x400, 0x1, {0xffffffffffffffff, 0x2, 0x57, 0x2, 0x100000000}}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={r1, 0x0, 0x3, 0x1ff}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) [ 2070.373134] binder: BC_ACQUIRE_RESULT not supported [ 2070.406996] binder: 6669:6691 ioctl c0306201 20007000 returned -22 16:28:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) ioctl$KVM_GET_REGS(r0, 0x80047210, &(0x7f0000000500)) 16:28:33 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'sub%_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2070.454170] binder_alloc: binder_alloc_mmap_handler: 6710 20002000-20007000 already mapped failed -16 [ 2070.472661] binder_alloc: binder_alloc_mmap_handler: 6710 20002000-20007000 already mapped failed -16 16:28:33 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x1, 0x5, 0x9}) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x20000000}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @local}}, [0x3ff, 0x3, 0x6, 0xb392, 0x1, 0x1, 0x7, 0xfffffffffffffff9, 0xffffffff, 0x4, 0x3, 0x0, 0x7, 0x9, 0x1]}, &(0x7f0000000300)=0x100) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000340)={r4, 0x8}, 0x8) 16:28:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0xffffffffffffffe2, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) 16:28:33 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x14}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:33 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'sub,_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000040)=0xd6e0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) ioctl$KVM_GET_REGS(r0, 0x80047210, &(0x7f0000000500)) 16:28:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x30}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r2, 0x3c}, &(0x7f0000000140)=0x8) mmap(&(0x7f0000005000/0xe000)=nil, 0xe000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) [ 2071.118569] binder_alloc: binder_alloc_mmap_handler: 6732 20002000-20007000 already mapped failed -16 16:28:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="695866a8", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x10001, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000180)={0x6, 0x3, 0x1, 0x5, 0x0, 0x100000001, 0xff, 0x9, 0x0}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000200)={r3, 0x8000000000000000, 0x800}, &(0x7f0000000240)=0x8) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000140)) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) 16:28:34 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj\ntype', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socket$inet(0x2, 0xa, 0xc3a) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000004000/0x2000)=nil, 0x1, 0x4, 0x20, &(0x7f0000ffd000/0x3000)=nil, 0xbc}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) [ 2071.235102] binder_alloc: binder_alloc_mmap_handler: 6750 20002000-20007000 already mapped failed -16 16:28:34 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x6}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2071.354617] QAT: Invalid ioctl [ 2071.372029] QAT: Invalid ioctl [ 2071.376679] binder_alloc: binder_alloc_mmap_handler: 6762 20002000-20007000 already mapped failed -16 [ 2071.382338] binder: 6759:6771 unknown command -1469687703 [ 2071.394592] binder: 6759:6772 ioctl 4b31 20000140 returned -22 16:28:34 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj"type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2071.401230] binder: 6759:6771 ioctl c0306201 20007000 returned -22 [ 2071.421980] binder: 6759:6773 unknown command -1469687703 [ 2071.457096] binder: 6759:6773 ioctl c0306201 20007000 returned -22 16:28:34 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x82) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f00000001c0)) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x802, 0x0) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f00000000c0)) 16:28:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) ioctl$KVM_GET_REGS(r0, 0x80047210, &(0x7f0000000500)) 16:28:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="ae98edec98bef073", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 16:28:34 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x104}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:34 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj,type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0xfffffffffffffffc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000100)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x2020808, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1, @ANYBLOB="2c02"]) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000300)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x8, 0x140010, r0, 0x0) [ 2072.054900] binder: 6784:6791 unknown command -319973202 [ 2072.081281] binder: 6784:6804 unknown command -319973202 [ 2072.104033] binder: 6784:6791 ioctl c0306201 20007000 returned -22 16:28:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10810, r0, 0x0) 16:28:35 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4000}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:35 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_\nype', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:35 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f00000000c0)="3febc67cdd1567b8c71c0dc5a14951376597e1a940ad39ce049ce7507efdaf5e70d10fbb233dc21c8b3e1ec562581f4c51df53ef20a7556772b2", 0x3a, 0x40, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x698, 0x350, 0x0, 0x4d8, 0x218, 0x350, 0x5c8, 0x5c8, 0x5c8, 0x5c8, 0x5c8, 0x6, &(0x7f0000000040), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x10, "79bc0142f4f8d53afb02cb46442a4e9e6e3043d29f8810ab5bbe114139a4"}}}, {{@uncond, 0x0, 0xc8, 0x110}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, [], 0x17}, @ipv6=@remote, 0x20, 0xf, 0x7fffffff}}}, {{@ipv6={@empty, @empty, [0xff000000, 0xffffff00, 0xff0000ff, 0xffffffff], [0xffffff00, 0xff000000, 0xff000000, 0x96428075fb6fc1ce], 'team_slave_1\x00', '\x00', {0xff}, {}, 0x96, 0x7, 0x1, 0x20}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@dev={0xfe, 0x80, [], 0xd}, 0x40, 0x28, 0x600000000000000}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0x9085, 0x1, 0x1, [0x64, 0x7f, 0x8, 0xffffffffffff221e, 0x4a73, 0x2, 0x3, 0x5, 0x80000001, 0x0, 0x2, 0x8, 0x5a, 0x9, 0x8, 0x1], 0x1}}, @common=@inet=@set3={0x50, 'set\x00', 0x3, {{0xfc00000000000, 0x7, 0x1}, {0x56, 0xfffffffffffffffb}, {0xffff, 0x2}, 0x7fff}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xc8, 0xf0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000008c0)='veth1_to_team\x00') ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x0) 16:28:35 executing program 0: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffff9c, 0x0, 0xc, &(0x7f0000000040)='%%(:cpuset#\x00', 0xffffffffffffffff}, 0x30) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) kcmp(r0, r1, 0x6, r2, r3) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r4, 0x0) [ 2072.215571] binder: 6784:6804 ioctl c0306201 20007000 returned -22 16:28:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x40000) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) rt_sigreturn() ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) 16:28:35 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x5b}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) ioctl$KVM_GET_REGS(r0, 0x80047210, &(0x7f0000000500)) 16:28:35 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x810, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) signalfd4(r1, &(0x7f0000000040)={0xc67f}, 0x8, 0x80000) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf9de, 0x240) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000140)=""/145) 16:28:35 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_"ype', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:35 executing program 5: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000240)) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000200)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000280)={{}, 'port0\x00', 0xc, 0x10, 0x0, 0x0, 0x7fff}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="b805000000b9008000000f01c1f080a4b000600000000fc3180f09c744240000000000c744240200080000c7442406000000000f0114240f08f3a5650f050f20da0f01cf", 0x44}], 0x1, 0x1, &(0x7f0000000380), 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f00000003c0), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000020000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="f2a766ba610066ed48b813c4830f000000000f23d00f21f835300000000f23f866ba2000edc441175d392e67450f01cb0fc72cbe67400f001066ba4100b0a8ee36420f015900", 0x46}], 0x1, 0x0, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x1) ioctl(r4, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r5 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02630440", @ANYRES64=0x0, @ANYBLOB="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"], 0x0, 0x0, &(0x7f0000002000)}) 16:28:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f0000000600)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000640)={@mcast1, 0x71, r2}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:35 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xff03}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:35 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_%ype', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:35 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x605e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xae03000000000000, &(0x7f0000000140)={0xa, 0x5, 0xb, 0x13a}, 0x2c) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r4 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="4f4b2e0a2e581a8038c3ec8dff25c1c7ab5dc44e38c3721a70f6df7d42036d7a8c3320f762b20bfba1535fddf43224832a2f2281fdcf6ca455d65eb1d8944a", 0x3f}, {&(0x7f0000000100)}], 0x2, r4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4}}, &(0x7f0000000400)=0xe8) fsetxattr$security_capability(r1, &(0x7f00000002c0)='security.capability\x00', &(0x7f0000000440)=@v3={0x3000000, [{0x20, 0x3}, {0x200, 0x3}], r5}, 0x18, 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000280)={0x345, 0x1}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r7, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) epoll_create(0x80000000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x102, 0x0) getdents(r1, &(0x7f0000000140)=""/125, 0x7d) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) write$selinux_load(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578835c294cdf1196f23631cf6164a8f4b58972cd7a9f6aa9ad99215cdbc1186006b9a66cb839c9b1b7838508000000435107a861b6df74f6db6629232fcf77c4a01440d8f5f4b58139534a6e55892fcfe2c21c789161ff183b0f319069308af09d9f6e982a53334e6109e6880fd6992b4069f8084cc26ee92bdf953587f12130e3149dfc5443bac263c00072f9da3d4b1712a18d805dfa78cc2049bdb264053ca87bdb38fbe97b6ec4ef03dfd6bba24d14eaa809e3fab5333463a242e8b2b31b4fe4bdd1dca6557b6d27a2ec636ef0e49e164c2245e221c09f17687bc8d475e73c8eb6a2e25fe363534c"], 0x87) 16:28:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x10000000) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:35 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x9}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2072.842138] binder: BC_ACQUIRE_RESULT not supported [ 2072.882605] binder: 6872:6887 ioctl c0306201 20007000 returned -22 16:28:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) ptrace$getsig(0x4202, r2, 0x7f, &(0x7f0000000140)) 16:28:36 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000080), 0x4) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="85", 0x1, 0x48800, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0xb400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 16:28:36 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_,ype', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:36 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xc003}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:36 executing program 3: socketpair(0x18, 0xfffffffffffffffc, 0x46, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x3ff}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000340)={r1, 0x50b305d1, 0x30}, &(0x7f0000000380)=0xc) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2000, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000140)={[], 0x0, 0xdfb, 0xffffffffffffffff, 0x0, 0x6, 0x7000, 0x0, [], 0x1}) ioctl$RTC_UIE_OFF(r2, 0x7004) 16:28:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="b6718211742054eb8e8df8570f3727ff5e5d7adabc5c7f", 0x17}], 0x1, 0x5) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) fanotify_init(0x9, 0x2) [ 2073.655600] binder: BC_ACQUIRE_RESULT not supported [ 2073.671501] binder: 6935:6937 ioctl c0306201 20007000 returned -22 [ 2073.695466] binder: BC_ACQUIRE_RESULT not supported 16:28:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) symlinkat(&(0x7f0000000540)='./file0\x00', r0, &(0x7f0000000580)='./file0\x00') r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xfaee5764378749ef, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @rand_addr}, &(0x7f00000000c0)=0xc) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000140)={r2, 0x1, 0x6, @remote}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8010}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="a4020000", @ANYRES16=r3, @ANYBLOB="000229bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="7c00020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400eefeffff08000600", @ANYRES32=r2, @ANYBLOB="060000001100010061637469000000002300000000000000020000000000080003000700000008000400", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="4400020040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f61646361737400000008000100", @ANYRES32=r2, @ANYBLOB="44000200400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400dbcb000008000600", @ANYRES32=r2], 0x2a4}}, 0x4001) [ 2073.713024] binder: 6935:6943 ioctl c0306201 20007000 returned -22 16:28:36 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_t\npe', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:36 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xca00}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x28912, &(0x7f00000001c0)="153f4b34488dd25d7660708c358a9ff934062a792ae5606d3523f5b081cfc394b2e1606568045699d78f3eeb7b1978c4581690a2479b7477e0ecf596e228") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) r2 = dup3(r0, r1, 0x80000) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f0000000080)={0x5, 0x5e4, 0xfffffffffffffffb, 0x2}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x57, "68a117d135da27b78910d21ff9d178f9fd638bb385f04d82016b86288a2353bf8580866079ecb5ceee59127466e24ccfd9963045de0f899430067cceff0cc4d5deb5a95ebef413bc0a80faf71392db1595975bd9b51275"}, &(0x7f0000000140)=0x5f) sendfile(r1, r1, 0x0, 0x10001) 16:28:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40000, 0x0) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x7, &(0x7f0000000140)={0x4}, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) getrandom(&(0x7f0000000040)=""/12, 0xa, 0x2) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:36 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_t"pe', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2074.022214] binder: BC_ACQUIRE_RESULT not supported [ 2074.048458] binder: BC_ACQUIRE_RESULT not supported [ 2074.059804] binder: 6969:6976 ioctl c0306201 20007000 returned -22 [ 2074.064465] binder: 6969:6979 ioctl c0306201 20007000 returned -22 16:28:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x840000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2711, &(0x7f0000af0fe7)=""/13, &(0x7f000033bffc)=0x23e) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x200, 0x0) 16:28:37 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xc000}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000000c0)=@srh={0x89, 0x2, 0x4, 0x1, 0x1000, 0x48, 0xfffffffffffffe01, [@local]}, 0x16d) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x20000) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000140)=""/85, &(0x7f0000000040)=0x55) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10111, r1, 0x0) 16:28:37 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x14000, 0x0) r1 = geteuid() getgroups(0x3, &(0x7f0000000240)=[0xee01, 0xee01, 0xee00]) write$FUSE_ATTR(r0, &(0x7f00000002c0)={0x78, 0xfffffffffffffffe, 0x6, {0x2, 0xfffffffffffffff7, 0x0, {0x5, 0x0, 0x81, 0x100, 0x3, 0x1ff, 0x3, 0x80, 0x6, 0x4, 0x4ca, r1, r2, 0x9, 0x1}}}, 0x78) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="d9cf3643a70ef7f075294ff7eb3eff119eb7a22e73bafb950000000000000000", @ANYRES64=0x0, @ANYBLOB="1177fc000000"], 0x0, 0x0, &(0x7f0000002000)}) mknod$loop(&(0x7f0000000340)='\x00', 0x4, 0x1) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f00000000c0)={0x59, 0x0, 0x3, 0xd5c, [], [], [], 0x459, 0x7, 0x3, 0x80, "f9c13e5b5bf7251844abbdec0376505a"}) 16:28:37 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_t,pe', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:37 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000ffe000/0x1000)=nil}) sendto$inet(r1, &(0x7f00000011c0), 0x0, 0x20000003, &(0x7f0000001200)={0x2, 0x4004e23, @multicast1}, 0x10) r2 = getpgrp(0x0) ptrace$setregs(0xf, r2, 0x1, &(0x7f0000000080)="fb6e9435a62f742d3b821208d4366e70bc718482845759a89f71dc1d8a549135c09cd626069a7260442d82fa039eb071d25a56c58777a87d2ab5be7241771932bcfc5f021ca414e1fd92d7272076ce279c69c8fb46765cf44e3a60931cc7a4470d725d6d9bf0b886a1e9ecaae03f91545de72d89c44208692d15fc2178af1684743dbbfea24062acc0e5a44043b6f3281b95d1bde3b260e5c680294aa53de6fab4056003c51e70bf4e23c7e3336040da7a") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) ioctl$sock_netdev_private(r1, 0x89f1, &(0x7f00000001c0)="119bb3150d5cbbbcb8551766b58626e9c4e852fe8e2ca4633ddb53cd8323dfcd14c4c5b40486ef39278f031936c392782e3b840b0adaed1d2fdfca706597d498fb6a8d19ed6bdc9d07a92a2f04075ee84a9c59e0137ead3c003d3e22c09906be15ce7984eed983e70d74689e5d85cafd18a7c568584361b730211d8108509a075e2d43cf070893b9d77350a8590c7161056c49cfd31902d7bd96ad8e97371acb1022b23122be84dc3028c171f27f7b502ac107fba16cc92b6e0e295304228557d7c5ea02b49b6206d7c5e8649ba08cc7229fa41ad882c6c199a11ca93b837b5210446027a424af33ddde979bedcbe4c7a3b2a0e35c4be75a9473a52bcee6bdc90b9e5a656a007396f2d98b3a9345cd71d3a19c2bc5522013ef96a02a1f115d19383741bcac832ecf3615270ebe519982ad8aac9eae4d553803674a85e2a44bf7d9295dc35b5509f74b87f94ba828836297202b54c44a302ad5ca1c45a0fae6db2a4e09d46c469ea59fb3493ac413f9e3b248f2fdaf1dfb05e5dce10cf434e47cd5acf28f4251a997655615a67b2569109be9698e1503dd5990281d9a8102894999e3b6ec417358fd26887da4b8a30fbc98a5dc6cfe5341b7ef181e18cdeaa1605d647ca339edb09c00f47b3237d47247981659a56ce2bfed8579c4d2eec2660d4a7695a9b5f7793f6262960a71cf2e062497267172b1503b0dfe521967df85d4c0e230ceea6b2fb76523156f91d96ba4601f324e72086586e1250e84822d20a4887650a8949ec7c05f11144752ee45be0f0e6ae43e1ced2e850e15af8707db20794ff2f8637f29a96664f8de407317a28b69ac2c674ae5c73bb7e2ce593ba295fe4a3639b18007e87fec31d1cbc6e4abc47c4c970011aadc80f281cc5da3e10da878fdf6839e572395e9f618cf86ac12b85ab8fc692f6fd9762fc77b3d50bd657a280356f9f1a0e403bb5821a1e0ead4e6f2c3c96aeeb0593b64aa3e3ebf62258a122acb45823b4e2c57b77c9e98e8ba0723ccd4e69aa4e1bd1d768482d1dcd174dce560adff9c9660d5221ddf5f246b79944669c2b7cf36d510f02e428c9a3e29d7c8482ff78e8063cf6f4598e230b096c7ded13ab4979dc58f7719911631436a4b22e6e9d40f3c4cca8aaa250ff543432c91282b5a6060627cbb4fcacd4156026f350e08ed4fcb0d1ca9037a6bce7ed319324e444bd9be1d0b90c6c4fe3c2341e5ce162ddae1d8a1c6f1761427ad76369a75fb8bd193f77e201751e328df1ce20538f91b2fe1e1f2a8013f1ef7258f985416ab44d8d75b8ae06ed8bc1b7e863c151d13527327ba616f7a70a4c1b25585a67dc7a02a1c76af2000f81c88bc1522f0c6300f09944f0c849f6e5238a3146d7d0fd9e84188202b0d64abb08214be66fab20f2590320937d3c4f1aaece177bade6afb648b592cbf7d70a42069a9bd4f2f8187dc1bb5f5bf53b4a9d1524833e40643c69b70af7d9981e83d2f3a428e14136b17beeb50979241c1aeee045dca59c3f08ec9a9c194b6109c786d8b1c40b9d8d64620a49ac2c2f9872c1ef8d365ed28e0a8c059285dc9603510e300408f6103e81cb973023ee1337a21a030a29d437333401f9260c2feaf4b74a434cb35ec86420a9a5392f3089367694028e7ef2a4de97615095e66ef08578846f9179fde8a4d7a2a6e823dbf83beae4bd4be09efe942855e373b6272433ed3ac4757b19fbbdf2e48a7129c62e1f2ccbe013380916f87c741bae614428d51fc1233454b8d6a74927840651d0a212633325d95cd181ff61c3f9469a838fe4f014267515ca0bd3464ed05705de7189f12840b3e8fb013f9eb768c74f05a6a91f3683477d3450ed18949d6bfdbd551fd86d518f44ab1e0e852b262cd0eb508c5437fcad5d2a63f239e8e6540226ad82e7cd791f796d5ff4198feefda6fd2b227c9b9b937fd3cb6710fa04ed98c2c39a5cef314b0d7563fd423d05011c8cd584d0c37d2730ce8655a1d152eceac8d885a718499770e627daf6d64fab4f46fc3e23137827fea5e605cf26465d56c82980bd2f41578eab910d991c5042c9f494f4a82ad88f8ffefbeff705f3f10dc2964b952fa59bd8e4c15b76b00dc9e91bc7a33d5f59e1d1686ca68a3f7239bd8bd43cd6ff338c2dea0a316b86b4f9bf0fe78fae34fb1e3d1e336334990664fca18b36ef4c3f5bcd6031d85d58e097b207de810bc9a4120607f774308f50adb8075f9d9e42b0b49e45054e7bacbd1f7eae939fdae08ead65b4464f00de2e46c04e179fa6f2f614290b0113b872ae79200a0da7d4fe5804f46c656871eb3b3e599c3875cf91b01ec1b03807d0c804fcc730e1476d50836a2c4eac157920f20e8a3098f063b10959ccdcfd9f324c6d7c385bd2900c7fca0d931e738c4cf11ffbc76eef6f0012a0be76c123e081c4b8dc39fccb8a9efd235a4d9eea12d9304c8420dd3c370ebb34f253b7322ff1f03c0020e8b75d95d86c68faa158f1f51be92cfa72423e373fedc8d486370417dad56898be115cc14690bd8a068ed1e4027ed8d5a73bc2746b70dbad3ba25bb9181cbc8c20d56861a3b1ba65c92e34cce7da1a6de016fb4cfbdcdc1b2d0073e85c3dc1f1e0ec6f6ec177157d64fc5e760fa30ef020c0f6d2f0b9eb7ef7a3b812fa24b8ca503317b3dd780bee24de576288d9a44791840ed025a2310ff5abf42feab28a43f03557ac42d93d5322ad40ac6e33f2aa1c50b9b4cedfc8054a5d21309f5dc2e9dacced28606e567430df377818a06f92d5deca6d859f437ae3129d1c2bfec6e8e2915c0a9bb62082422844ea86b2519efd872869c03830cfb19c2c5fde41590106620d0a8bd265b0ea0ce40144ed26d8f96e6e65df7fed4f127c4fd844b72873f6b07551bf57dc6eca8bf62a6e382c20c23ece7c12ae2f691b1427fe444538dd6aabd3fd5ceb00ca991ba951bd191a7f226c7a98174f9a9f3724a4e4daa1c3362583544aa6edbe4487d38ab36a85eb4dc61dc36e924da4ff77a657e52af9520ed7a07f2bce1ef6f9a25ad841195f216a55871253f329457c100d3bb053108bbc16129fd87437a848f769dc8370987a91938dc39a5d076772586128ed597db2a14dbc2baa437c458c5b995e0f6ed62e01016a63e02e848761855487ba2691c069908db3b8b58a83bfe04b8478576a4863215850edcaba87e0ba5a091cff7389927044f478ed2a548f6bd7155d41eccb9999f6d5be13d59f32be794f206eb11572ab996ade2fed02fbc2aec940f8308e975355b098026dde9d92ab1dcae33a6228fc4cddcbaf6cfbce433ded583ac8761609a1aa9f224f4eb7fcc90da99dbd3a03367ff252f4803a3be82919c0ddf7ac457863ca94387fc2447b8beb6588c32e995f22ef0a0f5fd7bb8e598a6a5403df094a9a24daac99bc22ac0e13e06dd5eb424fbdf8c615ad9f1eaa54da139a7d7e6bd3116f9bb55042c5497b5238b1328a5b8e02ec85117284cc6eb6e72880586dd372348f2c542eeb3d2003bc583427a07e34292e31683a72bc3fecb70083cae961fdaf5dd95af69a895be47b7f2ad1ae48987904a3c6f80daa8dfaf66740e22d95e33a09c348b53faedc9d17a4bb04d69656872f462c6a59c011e5f167d0de53fb5175f6f06d7357f60e5fbae54fbf296138af605c4e22e020c5e795948d44d96fa014b6adf3d02cad5a7f9dcb9993d98c8816bc3661880038c4e0ca5286b496336194d5d1c2d1df5cb837f16e88067b92f5fdb579fc04ee8cc071b6599db4f3e0d82d9ef1b82eb8f2dfa647cebf8ce149a52e8771c5ad64554e556fc0f978450dbeba461005b03cc6334f49a4c56da3a3ff276c16896394ca98d42eccceac80507941618ed2c6620c62c69c0211e2673583e1605d3b4b189d880854d5b75581f605567d116abdb692c97b9d1a110f870f848d77d200f33f91e33877fc07956331c66c1361ab2e7a661bb6d85fd503936b421ed44d3f8e318b383a9c768ad915e800ca774ddaa3cbdf14999017f99147e479052ebc8af133484192d8125f88124ac9999d2b06d6039a8adef4851806d749b4a49da3c8585f98846fdcdfb8652d73735dc4c01bf0cabea2040139039c2741ccdc7305bec5dd920b7178e99f06adcef8b685b7d7caa28137ee4c99940fdde03db5e94e5ea3ed0c30cd0e829725a2fafb5fbda9c11465612e4bfefd8e337b8b7db10d4a904fec24ef5d1017ac61a32c07b9bb94864ba810568449b78fed45ef73585b60deba71e055fd20e015f0fba1cfb8cc1ce6f77dc4ababf8b2ab92a7c1b3fe2c92bef9cc50e7939f27879f7b5a10e4192d2253c8890d4561393e91f0e134b2f124d42ffad91cf2df68b842d705afd13b386c2acb618ee492c09e2b475a013efbef884d600bcbdb9a13e2d2f33583c6de89a3157a8f2cbd0202e3fdc0bac3de4d5423148091858136457745acca83be67d668f7f73c259c1487d49f0b740aa2a3f13a65c0dca4a36bd217579778b7c3cce07906cbdbf1c666b898c877e67e5902d3eab7fb7868cd72c9ee6d6f8e04f453ed2e7b51477bce98a81670b22b01a7861f31c14d2a41e8ae75a22466ed205382c02c6f9c945ce0bb982e1804a929cd23a79974d878920cdde76c83de2e1d124a039f97ad4196adbbd07cf73a90d0573a81ba4b4cbc1a0b7cf23af0a0668bfa1e2242fbc00fa0213854853b436a817d0a9280c72e616d2c122fd5bee26a32a641d3eb463c5dafa904f15b1f785af7102e768384b85369e3ba4a2610215ca08e40669d3ed0298758f5bb2369d277c30b98ef8ce2a76db794a909a8573f9716d73fe8829d7a9c486dd11b490ab0fed967fba764aa833f76c2029f50fa771c3e71f07e950644e57644bb55735f4c007de67047d1ac4f0d7ec9d8b640bb0341801b8419b9fe5276475d529ad0b5b7143292981c357e03d5b7589e410d43e42588d667a2100c8fff2e5321b211c96633c993593195fa01a815c5ca5aaedbe6fd5faf74fb723bf60056dea671e74a640bd40650a8a77c93de1e953053061fe225e08e00fba62fac7b0808f90b25b67c2e278944ae723f20af5cb048d4c638674b143d0190ee38e774e5a6e3a21d2bae65b28e17208e6d26824ac0991ae256c14813b32d156df15953ff62a665dccde1d55add110f50699fb7bd16807d5aaec3f36bec28cb33457ba4a328cdd79b9948745a17fc04187d76978f27d6895e101050c0149067c2200c1224098290caa844784b3a6178bbf51200b10068ae387694dfd75c60236d4c3b7bba70ccbcb41165c71fcd7fa73e3a9fe7f77d92c9d07d803ac29a7901143cba3961cbd072d008b7eed82cc7a207d0e924929a253919a9322e079673d24851d5f36e7c8e631316b2654662836fb37db46eddd9a884df56c8690027e37f13f8b41faca74d46d3b84ae3cd76ad42cce349fe53a68eab2f9c939c71aa59611e1ed37d90085866fccad1810847e4ab05b6b17971c39e4025eb49bb780c91a6b83bbecd3006a106121ce791af4e44e760baad636f6c54d1568d346ddf68ff63fb20693fd8f57b15b89e094560668eb99251b6d8d0c558a3968df37b1a9bebe75a54db164094193198d67b1770fe8b13fc7a7375f5ee43b8b0fc04f4f68b910eb78c2e9969a6bb8c081afe57db703bed1604a9f300638a6513e3b88cae4fb5f234a8c6d855d898ebd4816c5992ce31ddab977c20fb646b316d5724f660c89b5ca85cc65f695dffa89865b9b00487de458e975f44bd3732df1e16684270ca8c3d5e05f3fbcc3074794a966afafba84428fd27de7b6") [ 2074.803015] kauditd_printk_skb: 110 callbacks suppressed [ 2074.803033] audit: type=1400 audit(1540139317.705:1843): avc: denied { map } for pid=6986 comm="syz-executor0" path="/dev/input/mice" dev="devtmpfs" ino=16552 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mouse_device_t:s0 tclass=chr_file permissive=1 [ 2074.842390] ntfs: (device loop2): parse_options(): Unrecognized mount option subj_type. [ 2074.871676] ntfs: (device loop1): parse_options(): Unrecognized mount option subj_t. [ 2074.876485] ntfs: (device loop2): parse_options(): Unrecognized mount option dont_hash. [ 2074.903309] ntfs: (device loop2): parse_options(): Unrecognized mount option fu. [ 2074.903995] ntfs: (device loop1): parse_options(): Unrecognized mount option pe. [ 2074.937812] binder: 6994:7005 unknown command 1127665625 [ 2074.969077] ntfs: (device loop2): parse_options(): Unrecognized mount option subj_type. 16:28:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:37 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) lsetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@random={'trusted.', 'eth1posix_acl_access'}, &(0x7f0000000280)='eth1posix_acl_access', 0x14, 0x1) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="557b941d76350000000300000000000000000000000400000000000000140000000000000065746831706f7369785f6163040061d6f60f8105ecce306de510b863076996fce5898c70c1f90e165672d0d23a3e348601e048d41e8f06ba29ad874a6034e172c77efd118700bcddd1f8574a3b2b93def2d7daaadbaf0a0b8b18b8611d1872cc12b0fec9434017ec0c2bdcdb0e96a8a126481d1a3f1d782ae8081ae234ab190fa296deacd770c533af957327e8"], 0x35) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) pread64(r1, &(0x7f0000000080)=""/134, 0x86, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) r3 = semget$private(0x0, 0x0, 0x289ee59aeb5e9920) semctl$SEM_STAT(r3, 0x0, 0x12, &(0x7f00000001c0)=""/19) [ 2074.996458] ntfs: (device loop2): parse_options(): Unrecognized mount option dont_hash. [ 2075.006822] ntfs: (device loop1): parse_options(): Unrecognized mount option subj_t. [ 2075.014991] ntfs: (device loop1): parse_options(): Unrecognized mount option pe. [ 2075.023812] binder: 6994:7012 unknown command 1127665625 [ 2075.051797] binder: 6994:7005 ioctl c0306201 20007000 returned -22 [ 2075.060302] binder: 6994:7012 ioctl c0306201 20007000 returned -22 [ 2075.089752] binder_alloc_mmap_handler: 15 callbacks suppressed 16:28:38 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_ty+e', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2075.089767] binder_alloc: binder_alloc_mmap_handler: 7014 20002000-20007000 already mapped failed -16 16:28:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockname$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="0263b140", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) 16:28:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400, 0x0) r2 = shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ffd000/0x1000)=nil) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0xe8) getgroups(0x2, &(0x7f0000000280)=[0xee00, 0xffffffffffffffff]) getresuid(&(0x7f0000000680)=0x0, &(0x7f00000006c0), &(0x7f0000000580)) r6 = getgid() ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000380)=0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)=0x0) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000400)={{0x7f, r3, r4, r5, r6, 0x8, 0x40}, 0xfffffffffffffffd, 0x40, 0x10000, 0xfff, r7, r8, 0x8}) write$selinux_create(r1, &(0x7f0000000080)=@access={'system_u:object_r:ld_so_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x2}, 0x42) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00000002c0)) clone(0x890400, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:38 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x8003}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f00000002c0)=""/4096) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) [ 2075.192942] Unknown ioctl 35075 [ 2075.204848] Unknown ioctl 21545 [ 2075.214157] binder_alloc: binder_alloc_mmap_handler: 7022 20002000-20007000 already mapped failed -16 [ 2075.234899] Unknown ioctl 35075 [ 2075.238406] Unknown ioctl 21545 [ 2075.243010] binder_alloc: binder_alloc_mmap_handler: 7022 20002000-20007000 already mapped failed -16 16:28:38 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_ty,e', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) 16:28:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x401) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) [ 2075.320556] binder: 7029:7032 unknown command 1085367042 [ 2075.326106] binder: 7029:7032 ioctl c0306201 20007000 returned -22 16:28:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) r1 = gettid() r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x2000, 0x0) futimesat(r2, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x0, 0x2710}}) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x0, r1}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000240)=0x400, 0x4) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7, 0x600002) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x80, 0x4) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000280)) 16:28:38 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2075.389343] binder_alloc: binder_alloc_mmap_handler: 7037 20002000-20007000 already mapped failed -16 16:28:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) [ 2075.482233] binder_alloc: binder_alloc_mmap_handler: 7050 20002000-20007000 already mapped failed -16 [ 2075.512653] binder: BC_ACQUIRE_RESULT not supported [ 2075.527370] binder: BC_ACQUIRE_RESULT not supported [ 2075.554802] binder: 7043:7061 ioctl c0306201 20007000 returned -22 [ 2075.566276] binder: 7051:7058 ioctl c0306201 20007000 returned -22 [ 2075.600735] binder_alloc: binder_alloc_mmap_handler: 7064 20002000-20007000 already mapped failed -16 16:28:38 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet6_buf(r0, 0x29, 0x2f, &(0x7f0000000040)="0f13851b1403bad137d4fff07da99008bc7b5e2a6633ec643c4024aded65324640bd742450fd1d85ca4a28a2b1f7849177e7bde7f8d5497eae2f21f56d7f366b86fd2092bcba085c04c98a0eb9c7647b9d", 0x51) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:38 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_ty0e', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:38 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x80, 0x0) r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x200, 0x0) ioctl(r0, 0x4000000000008912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) renameat2(r1, &(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00', 0x5) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000180)=0x20) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="10900243", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) 16:28:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x400, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x100000001, 0x0) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000080)={0x0, 0x7530}, 0x10) 16:28:38 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x12}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f00000002c0)=""/4096) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) [ 2076.079274] binder_alloc: binder_alloc_mmap_handler: 7073 20002000-20007000 already mapped failed -16 16:28:39 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_tyse', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:39 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x3}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2076.122152] binder: 7077:7092 unknown command 1124241424 [ 2076.150661] binder: 7077:7092 ioctl c0306201 20007000 returned -22 [ 2076.216193] binder_alloc: binder_alloc_mmap_handler: 7073 20002000-20007000 already mapped failed -16 [ 2076.239013] binder: 7077:7092 unknown command 1124241424 [ 2076.244523] binder: 7077:7092 ioctl c0306201 20007000 returned -22 16:28:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000b, 0x14, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x80, 0x80000) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000140)=""/118) 16:28:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x4, 0x501000) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="02630440", @ANYRES64=0x0, @ANYBLOB="0200000000000000"], 0x0, 0x0, &(0x7f0000002000)}) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffff9c, 0x0, 0xd, &(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) r3 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000000080)={0x7, 0x70, 0x0, 0xfffffffffffffffb, 0x1000, 0x3, 0x0, 0x20, 0x2000, 0x0, 0x81, 0x6, 0x46, 0x6, 0x56, 0x9, 0x55c60d15, 0x7ff, 0x3, 0x8, 0x3, 0x5, 0x0, 0x9, 0x4, 0x572784f2, 0x6, 0x5, 0x1, 0x10d6, 0x10001, 0x3, 0x5, 0xdba7, 0x1, 0x9, 0x4, 0x9, 0x0, 0x100, 0x0, @perf_config_ext={0x1, 0x1}, 0x0, 0x1, 0x401, 0x0, 0x3, 0x9, 0x4}, r2, 0xe, r3, 0x2) [ 2076.280537] binder: BC_ACQUIRE_RESULT not supported [ 2076.286550] binder: 7086:7097 ioctl c0306201 20007000 returned -22 16:28:39 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_tyoe', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) [ 2076.488958] binder_alloc: binder_alloc_mmap_handler: 7122 20002000-20007000 already mapped failed -16 [ 2076.498173] binder: BC_ACQUIRE_RESULT not supported [ 2076.506548] binder_alloc: binder_alloc_mmap_handler: 7122 20002000-20007000 already mapped failed -16 [ 2076.506675] binder: 7120:7126 ioctl c0306201 20007000 returned -22 16:28:39 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt(r0, 0x7, 0x4, &(0x7f0000000080)="440c16eb8ce0408fabc3b60a5939f173826c24457d3ebc0bfc0a077962f15d56b582b6e170a9c81d968259656a8057d4906e7d4c0332ea1e197774e9b6c4dfc7d6183f0c82fa0378785ea4e89ca411697a7d0b46b0ad62efa60987aa924f654dc15d7013ef26c884cf3f63bd29ebd48f34e68ed76c33930175c03c1522188d05177c9153c979442f988c8f1b875fd54329ba5262b845251a394c67015f946c3c89f92a731db5ffcb97202daa", 0xac) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x7a9ab0d108c6d021, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x10003, 0x1, 0xd000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 16:28:39 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f00000002c0)=""/4096) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) 16:28:39 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x10}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) sendmmsg$nfc_llcp(r1, &(0x7f0000002640)=[{&(0x7f0000000140)={0x27, 0x1, 0x1, 0x2, 0x2, 0x5, "18c183f15f7ea8c15c185108c405e9c8bff38501b9eea152f2b631095deedeb3eb4a840013fb8585259e17405374f41a3c06e1955ad4cfe4dd88ee007d9d85", 0x5}, 0x60, &(0x7f0000001580)=[{&(0x7f00000001c0)="80cf306ffee9a7fe560f2c44defe23eec6b136ce1d98fbd4786d1556c0d5a597f1623ce63c97ac431bef7c5316721641c10fcd4c1a50af05be36b0cb4fc595336b127465e44232f9bf5087d57bc68fde58c93b2797af3d444fa8c549c9e481d685fcb414b1e6b5b83b575e8e8e7b4267404607fe654b45f5f3e413e3ac703c30815fe5978eebc071bc058313f73e3d9c7fceedf9d3cb4a1a3e276e849252a38b59ef2d0e3c0d59df14881fcd2d7e6f65dd63246f7c058e3681391cca6045b1f7a69338ba4825c8eb6b8043d7ab17065509e47d815363914450cb2365bf43639bc9f10a641d072babf1e3bb984ae2a6b42444b5da80b7df33adee7aa7f0611734ab9f3ded3b0acf57aa4225e6ba35245709aa71895eaae425540ebf3d7b1d6f4f084f92a08c760f02b0829805b7fcb47212c6ae7fa66eaf8d2e6c603859d35cf96be0c34c7093a4f3ee36a6b920ac23666e459f72125bb87f630ea73f27bb9ad461932e01a4837836fa425dc0c5b84a591aee109b9b45fd9f0d84031ec3c7f7929868880ca4f6f8494d290be11238cad1cd17449fe08cf8acab51a530dac4b2eddd5b8eb5d87cd05e89eb517caecf88afe69c79c764fd59341c1e86543991e2f6208740a029c65c5bcdbe9f45d2e026b79375cd204c3ddb79d793668cc22e90b8128d053eb24205835d18935d2b76381953b2713dab40baf4fe4b8584d9513029d01663995339d5c656b919b1b4c6f193bdc360c1de9a887718065a77ee7f3a0d1fc89df78b1799857846c4f147d90c4d03f49a16a0a0719588d620b0450b71a88c4fcc901500437f720bf44e39d670e22f63b8490b0493c5af7246f7653fe3a3359fb49e5cba5a0f8f8f53863e4aa9608697614c9aa058f1a410991e966b503bbc56d54c334888198e8ad81990da09b9a166b4a35d53fcb67ffdf55aa6a86c36e4417d29e11385b8fd332720f66aa20bb71882266415c11f064f341b6030a60dab9ab12aad1ab6948c7bac14cf7bf8223d2885a5ec6fbc5040e0a24bb50f10a817780c5c0c0daf977f5ba65ecaffcb0f86ff87d80afd5c43aacc9c25b0ce02920881c1ad4a0420cf7d1e19b30348b70d8cf485e09fe16f5600738379f765bd9827f57ea9e6a786f4f75bde068ff5d444f29d4af05b1c5bea519bab8434aa74d63f0d58b81ecb4c6279436e6b92ecbf96ed412a4d47f433f06dedb2e4af500a1c816c51f453da5b3d08d558012d8996ed4ea729124840e0ae1e4fcdcfa4ad9ab2b01838eec2aaa208733d15511b4add63016ad67bbbe3d5b685efc331edecd4749964b325360147ebed25b71507ca0eda7b83b48f859a93e8c7a5734edb913e039ee51926aadd4cbb61630ffad4aa8ac0fcbc354d6fabb9c4198f9970dcc60e908bc6342a9ce4b80a794bc1b58480e0debf5c18ece805b95be8248c81227deda86a15b55f55da5ce52ffc484bf4387ee82f814825aba4383ded03725244e63fd895cd95afa7fb3d3d159fb8565a1d1c500df516cbe7c2215e875ee7a0351fade7d1f7dbfd33609fb902e4f8d7fb6cc4c889b04a03f8d8c04baeffc848bdc2158fac51db7d861dbb89aa879e67aaa1e4c7e0e22e2f8edc527343634c47806897b5b6eb9fb42ae2c658f5e24015a8b1fb9da64b2fd98e333f2adf94ed5a5c8cf369b2cefbeb7bfe6248c1793efc075ece03d852aebe29c9c7f65d331d1c55eb6e44793022104adfaa22781a2bb19985f2c59b0031b4c602cef1cbfb82a56624e64617d1096995f8c4484ff1a92a4be57faff63f69927d999b38086ea6685df0b7c51f3c85f9ff6dbdb68e0f4582ebc488a4c1ed3c1a7516f962356417a97c9a462983e0acf53f6138c5b89a1742ce3c087d001a72821e644b7d1db7eb6e656bc533c91a5222d99659a0b92ebcb29f002e34e758d0e5fb8fa44a859f09a9a6fdffcc494a5e950819a73d69c7b2cb9074d0a18431327a5ff573bbfd2e0196cc683a0cbd5f8b15d715d14ace2269db3c54ac895200dcfad086cc17f3a16774bf1d873aabff034da5da96b96e4d007f461b22e0abdd1b42e0afefd035745eee4d127a5070294602998406cfcbb6354aa6ebd8bceca2426b502a8ec87245ead05f3438a2ded3eff45e690a422ee14c9df04387e8b1ed4cc44c6bae4a38122396171f5a1914aa649f94c584885dbf84ad326cca3249d3cc0b949256855b025e21142ac82789db14e6f7c1d25bc6445eeb53065b42e5b92e1ba0f9255255520bf409dccc934335450f66d66ec5c9df6d6fee46498590e1073a2792f141c545afde2f8da8994a9cb826bf5775d446cdebfee224e62e4e916f093940569541dc1af6b1d04c656e1ae0d9769c32885bb5845cb4e9b84701d32b72d7f87358a8b6c29efbea3c7e802efe0f5b703fcffbec7862e183e510ebf603fc26662544b83695be425cabce31865aa15f9c399958d4db098f32d95b329e59d5deebf84a3218feb5b23da18ea88b566c4d168384abb25a92815ad2deed0dad7e279e94ead71b3ba829e3ad39b6acd9c7c2afb46fc4760e2bf4e622336bc2688e695bbbe2bc7adbd998a1b044626be316eb3eb5cea087b4f8a606ef6427bb8fdbe8c6b39e5648eac4103a4d7213ee22c31365427543fe7d56d9898cc3d3acc7c2a9010f77337047ca5fa60b69c115db06a8e5497f510bc89ba3b8316a8686b72d3cb9b9aa385e766799284d6a0efa87ae6b72050f30591fe932ba4d4d80e19cff3ec21a50404623e9c77a1d826253f6040830992c866469629f2a1f23d75114f99f00bac46e05951e60e0502f5b4a8b0b15cea48f0c6a02263212fd30ff6400ba97d35836c7596ba872ca3e97babdb330eaaf36c76c9cf43b0a5fc6f48f848527f3192d762512271ab009957ddef15b5258bd570238d89b82c44cc35817d2efba77b17fe9e422645b3d6f36925db1c40213702b8799f1c581c5705d9de7a5d63441790728148a57132cdea9ce3716afed44f309e17fa2e6da089722fe5f5fb36e2fc2af7a876795947534a2a06e384c5c872e8a6c36b81d7a372ad9543d8d216f99ff6ba582b02cddc56bdfbb459b6cafef0f1480ef974aca6df46a33233d1628a891c45b613b4d28c6ff4e9182c5f103d6ac87e42fadb5122f11ffad63698e1e97f9715e72364299ef48c369c08f77d45014d4019159037842470e9ec0ca54c54c6c63e56c2661b4f77f786c4ae03d7757ca5bb3eb4bb51f912a12406be52f8a285d08de7e2f3bf02546dd47238d93e19832e929639d75089e96198173e1ee81b87e011039cd96ddde6f1af5df71744f56b04bd7bebf2cf48d17ca6831b687a3ed0cbb5ea097a777bf66ff05283e12234bc4fdb2da6f1dd86dffbd97dce495d78cd8dde0fdbb4a10bdb5d1d9ab3927761de33174f095928a7a98670e63d6c7b6b8431046e71291b61be86e3cbf21a30cad4fcd0b2d36a8d3e4b5cf0676d4765475a2ae6bc9d95c5a04ba667e224601298dea060859de9127b152c3213e4a889a04e524bb54777814b93b7ac0c33f703704e179c3693bd1e65120b24aef77bdb48d0abf0d5f08c09da090b11d984779bf38527b933e8b0f936f45cdf84ee7df7b39711b9bf90f357d99aead749461ea37bac28a8f42e791db1a4469b599378633e152f6572ef9bbd6e9efc574cbffed04505c0e0e7a3cf4c8f0dc9f1a59e02c0c22afe6123129679ebeccae8525e4e7715323d328fb94d2b1d7865b8e8aae65053d793b22c50189cee2027c9c883737ee94e4db15b8983d0f5c810ee8ab9bf49e279dcd169754f1d0f9b02ac4c028d8da26e3cbaa38ac935627798556e19655e585b477e2968549d5b28d83071d26c2bb487f842d0dafb464f227b9c6ded5b430ec3d648d70ef73075b53f3315a8aa710c98f515a7372f2af3f9290b84de4ae0a366f87fb739618975130dbf7e65c26adc3a28aaea4aad32e910bc3d55aaf702151fcadddcf8cb3d593bdd64fbe3feab628c0564b49ae22658e995c11dd228081312c20fdc585818023deae2a45100bd748b65488b13171fd1df88d863f1fc53970b3417a34dbf0ec486849eafb975783d67e62d25ee649f9c9d00c196b546e10cf5c0251573784f8f8b5cd7e1b1e8ffd3726a29ebf3b0a2864fc83f07d77b9ef6c96f414e34e761c7e7776ed5a20ea4b4f73758bd5c3487fe8c4185b7b47ccc6e6e2426b41df2453bd267ead94f4b9a1a983675251b35db6d46f245fecb2fd4e94255f81e958bf711ac30165ff054bd2131eb15523027aed9fc261570821405f53d9d5396c04290d97aece50d9f1f05b59047bb4321c69fd4d213752cc5cb19c50720d53880005d8e9f889e51b5cd9fd0c570507bc61b3652856df149a46daef9b4c7babc2c2c3dba109591f504d5a8462abf08a38976cd3a1d6299da102c599e207c4b39172ce118dcf1626cdb9defd8ceb478006446f5f31156197d1db1390f5f21a5be19464e3a77644a07b558c29d259eb4539e8129f3d626a67b5a25171502e7ed0977b11f31729714ff06b7b094b7ba46f51d81766f91e92d0ce862c0dfa3586a6b53d62064b964a3e4062b81feaba0a3d001491fbd918b5085cfaf9f71ae4a62c54db8140b9510cad9723a192326f3b181a26671cf228acad00f3a47370e03448aa15d3749eca87227fe1fc67431f840de5005b50871d04afe62fd77610d1e611397bf21b8ad02955788e18f91bd59f1b033c65f7ffa3be67bbd08cc53b71e575f62f680eb81c883a9f4156a37eeda7ee1eb571036d31c2a703fe5791f4e9a76420512fbd047ccd0ff9c8b0893b6db6685e64a1601d51a571d53ddb2ffa39c8170cba1a021d08651fd6bb913c514b3d630a04f9f37c038822c3fcd7be56f357b1cbba69367deb8caf77c1799928a4b6300208792feba5afb06eb5a5ebbd8df6d94b41c460cf42088e672509038b5c08e58dfe362bd758b0b693af73887bed0b6175850c89b0a696d026ecf8311ebc8366675e03e63c3d41892551130d2927841e679043e694691606cdeb3ef3e7e56c090cf294bb38b72602694ba7e249858ac5ed0954187706cb99a39fd080f9772437c59732c68baf30160876ddac1f7b568973c3ae7fbb0008be6d07a39fe3edc70978701d08d01a73905be0a1aa7d532614f347c309b13b819b99f45ab1956f9ed9808a4f7cdf3bcf996cab6401fb48c13f69633c8a58a737c0cdae3be78700408578c01f4259fd1dff66b0aa2d89ccf70025cddf9afdd623d86f1e803a69467e9049378e0a0ca6892db23d5a5ca1ec5847a2d01a07ff01cc7d694db331d7050dfc1dbaa1f67530dad9697bb6fff5a6b7ea79f1e1dea21bf92c0c20d945e16732454a87244aec1a0e4c73785e495f9c8d1be179521b10ad8d32f5a05b5f89cd96d5f77ef63c05263ae48df9f839296d8c21476ef9e05283f56665226b929c54c38ada7e052d312c0f27949d97eb659fa4781246d7ec18975dc839a908101b5a9371afdbdfa1a767ae08b2127b13801736711e4ce5bbd2583cf2715748e4c901610b154e984a27b6eb67ca706a6a837b80d75472a5d94d0991472884a480d69b63c47bce5a3b2d170ff290597477596c7537b4e0ced75ee137bc41bc54281a30bb15b597d04dccbf7d26d6c7af752310aa9fe178f59287dab583f562c695c95755b6ac44313858a472a2bb447dad6a9f1c1ab637bdbffeda50b095fbb7074b3309c1ee73e45de22a3dbc28e3de2f393918fd00b4bda13578c9850dec1186ee16cc8f235aa93dc0c05dfbe89a8b18ec7fa7e117bbdec67f0db4a2", 0x1000}, {&(0x7f00000011c0)="84953152191f7d9ad03903398815d8aae67fa8b6380fe708b5d4c7fd36138cceb5a8e8050bd7162d132a5a2182194db73137a079fb01f3c2730bbe6e7bf4f10562f9ec214263b3071d72f85aa63e193a926953c74e1569670f50f24f8f079bf164e1a7b3456f873931897d1f99be0530c4fb2d24d7872a4e163c36d57dfa34f957642075eea8d1e89ff2d171929de267d17c4145ae5c79a182894d5a171a307844e4c1e92b2931f4d4cd5674212e5a63c1de8a96bf1ae8ce8adf8f653f51f72c05adab2494dbd57a16bc1cdab6613f2840d442332f8fce0ee1330502addaa91d4776b7c961348ebeca48bea67bc36749b273465e6f603e61a83f8c3d", 0xfc}, {&(0x7f00000012c0)="cb621efa7bc49cb9b254f659e71e1dc096f22a4d1ccb0a005c3dec322f45a8ee1e8c4eb2ee00c03331f4d0e21470ae72d62e513503e78529313dc0b78c162275ac40ffce757179f830c79a45a3fc75ed2a2fcf850d68b15d945aa1675ec0c8a9abd7e62ddea1cd1a96983c5f19e32c9e8656038520c68c467351c8e6465943c7154c1e8f9ed4b367cbf57eea3e888f75477a6f9a91943a8d8dbbf7", 0x9b}, {&(0x7f0000001380)="eae5c630d2de4d5afcf5c3c83875b42588859bfcc065993e9dcf0a41de5f9e9ca6d3da3a5c424e128d7524fca1ef82f699c56e857223e3d975a9add8f7f4d81c73b56843718f57e9c7601bdaa0b12bd974891e41582056abda292046a4fd429cde89fd120ac9fd0ab39177ba4db22ef90cc74936023b1532fc5979b12f470a7c19d4c8e125340f0a3fef5e3e672aef5729861e57c566afeeb57ed5676c9a68215dbff8c4451ec427422e67f1fd1eb374b1ae8e98c0a7af8d2c58beafd54ee7ad937271c061219e2de64b2ecd5ddaf0749972902b809c65ee88d5d06a603a952d70fb", 0xe2}, {&(0x7f00000000c0)="0991f7dcb95a9dabea695fa6faf94dec988a9fc776dad7b4ec66337a95d7406690ddf54742ab00b352d502fb24773084992d62c4640514bb8804bcc079e97c", 0x3f}, {&(0x7f0000001480)="08c5d70094bffdf95ca2d697d6678019d63ddc8b6032776c7d2a921cd3a6e8118cab5e49a0aa698775ffda86e484b63db46269e2a527fac9460aedce0303424b80dccefeee9d181f70f6424adb9ca18818f3821b574ab2f27ff038ccf7e227cff007767035cd09fd6cbb42159c2459649ed84dd091436ad8c90146ce940f8ec8e47d73481d2612162b89a6726c0ba48d2466a4d6a77e3be5fc0f7d11ac933c6b4c46dfadb509bc6d046e2a", 0xab}, {&(0x7f0000001540)="7deda92e42881b008c209863b7", 0xd}], 0x7, &(0x7f0000001600)={0x1010, 0x110, 0x8001, "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"}, 0x1010, 0x1}], 0x1, 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x501080, 0x0) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x26) 16:28:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="c3fcb3fa87e4c8e1d326ef2604c7022674f68648af52c025efb9887db5f9c337280397fd2b483f75cdd6307bd89e7d6587ed65e1da8c7cacec1ee159ff7f70dd36fe6e30abd93343cb757970d96640b14277deb0b5db8c92074200000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) 16:28:39 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_ty"e', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getrusage(0x0, &(0x7f0000000140)) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x13, r0, 0x0) [ 2076.984219] binder: 7137:7138 unknown command -88867645 [ 2077.025922] binder: 7137:7156 unknown command -88867645 [ 2077.048190] binder: 7137:7138 ioctl c0306201 20007000 returned -22 16:28:40 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_ty-e', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2077.075552] binder: 7137:7156 ioctl c0306201 20007000 returned -22 16:28:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x7fe) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:40 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x5b00}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x200, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000000c0)) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="630400", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) 16:28:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x80) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x40, 0xb, 0x0, 0x0, "ec5dba6a43355db097eb9ed9755b259fe0eb407b54980ac0ed8d4e1f9278395769873a09cccaceea4425884c1f994974459c71b8e126836a0ac7fb6ac20e01e4", "ecd80cbb975e10a45543c56200f6d59fcb39cc00c4f76c62cc63f924e29e4fbf", [0x8, 0x200]}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) [ 2077.182742] binder: BC_ACQUIRE_RESULT not supported [ 2077.233929] binder: 7136:7173 ioctl c0306201 20007000 returned -22 [ 2077.345094] binder: 7195:7196 unknown command 1123 [ 2077.360791] binder: 7195:7196 ioctl c0306201 20007000 returned -22 16:28:40 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000001c0)={0x81, {{0x2, 0x4e22}}, {{0x2, 0x4e22, @remote}}}, 0x108) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000140)}, 0xfffffffffffffcb8) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000080)={0xff, @remote, 0x4e22, 0x4, 'fo\x00', 0x34, 0x40, 0x47}, 0x2c) 16:28:40 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_tyie', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:40 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x5}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:40 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x9, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000140)="d3314ad1f8349fb5ecb3383b8a97cf583c008b291ade43515f2e4a5132186ea922ccfa65f63bd6627638261d9842f3fb97e7a1bfcd297659430b08fb37c784ab475589cdab2c9513") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000000)={'nat\x00'}, &(0x7f00000000c0)=0x78) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, 0xffffffffffffffff, 0x0) 16:28:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440", @ANYRES64=0x0, @ANYBLOB="01000004004af6e0000000"], 0x0, 0x0, &(0x7f0000002000)}) 16:28:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000002c0)=""/4096) 16:28:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000340)=0xe, 0x800) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000380)=0x8, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2080, 0x0) recvfrom$inet(r2, &(0x7f0000000140)=""/167, 0xa7, 0x40000000, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x2}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000200)={0x4, 0x4, 0x0, [{0x5, 0x20, 0x8, 0x5, 0xe0, 0x800, 0x1}, {0x3, 0x3, 0xeb5a, 0x7, 0xf1c6, 0x5, 0x400}, {0x3, 0x2ea, 0x5, 0x2, 0x5, 0xc86, 0x4}, {0x8001, 0x3, 0x4, 0x7, 0x79, 0x1, 0x1}]}) 16:28:40 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_tyXe', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2077.952947] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20002 16:28:40 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x7}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2078.030012] binder: BC_ACQUIRE_RESULT not supported 16:28:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440", @ANYRES64=0x0, @ANYBLOB="000000000000000000000000000000008c9284fd837e6cfb6535e52a7bfb887e84756ce512e60019bcd731b151d3feabb354434238c92e736794dd2801be6357f3ca2a947efaf713c3d46dd0ce82dcf70d6742e55be61b317b7c4702ef31e7a99fcfa595bbeee6bc500c8f5f74d7c12aea999e3dd5ff7e0c0689f7c4e56cc511f7c06c0030a3e908b895139fcff915479d931918664d1c02c22e31e58cb33de6694568370f16980494a88d39c0716de2f84c1dfc96099f1cef3642957f63fb443f787e78a64a1478d2f425"], 0x0, 0x0, &(0x7f0000002000)}) 16:28:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) pkey_alloc(0x0, 0x1) [ 2078.057140] binder: BC_ACQUIRE_RESULT not supported [ 2078.071231] binder: 7208:7229 ioctl c0306201 20007000 returned -22 [ 2078.080303] binder: 7208:7239 ioctl c0306201 20007000 returned -22 [ 2078.252017] binder: BC_ACQUIRE_RESULT not supported [ 2078.267717] binder: 7258:7260 ioctl c0306201 20007000 returned -22 16:28:41 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_create1(0x80000) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f00000001c0)="215d49cc52c96ca34b5ddb3719112a", &(0x7f00000000c0)="3f72a690ce50ab7342d2ec13eb5ccd1c0488d5c092e759b7edc5dc682f2379b494bd30a588dad83ab3d738a29ef3bb54a25b7d9a79d03448eefde00b6cdd02bca90300000011ad90071015", 0x2}, 0x20) 16:28:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f00000001c0)='/dev/adsp#\x00', 0xf11, 0x101000) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000200)) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x8001}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r3, 0x69}, &(0x7f0000000180)=0xc) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:41 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}, 0x22}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:41 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_tyue', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:41 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:28:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000080)={0x5, 0x0, [{0x2, 0x3, 0x0, 0x0, @adapter={0x3, 0x3ad78a4f, 0x3, 0x7ff, 0x8}}, {0x8000, 0x3, 0x0, 0x0, @msi={0x6, 0xc40, 0x7fffffff}}, {0x81, 0x5, 0x0, 0x0, @sint={0x4, 0x6}}, {0x1, 0x1, 0x0, 0x0, @irqchip={0x4, 0x2}}, {0x2, 0x0, 0x0, 0x0, @msi={0x1000, 0x7, 0x9}}]}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0263c34ad926a765f7e52d92c5e866abcc11c1860cde8d05dd4cc07b1c2b1628c4be37b4bf1f3313e144f4ae4ef8172aa10261be7815388d91b18d6f14dffda2c5bee12c6d717b1fb98f358f3cd719be798c2ed6e8123193d2b1d59bb18fcdd7449024fef383fbf97087b7f3457c7a905171718ac050e0cbd065e4e4758638b2aa8d6e893b132e0f3dfeb21fbab4192d1d7c46abde59d7c0a7a1d7", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) 16:28:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000300)='/dev/dmmidi#\x00', 0x3ff, 0x101000) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000340)=@srh={0xbf, 0xe, 0x4, 0x7, 0x4, 0x50, 0x100000000, [@remote, @remote, @remote, @loopback, @mcast2, @remote, @mcast1]}, 0x78) 16:28:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x2, 0x7, 0x8, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r2, @in={{0x2, 0x4e22, @rand_addr=0x3}}}, &(0x7f0000000200)=0x84) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:41 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}, 0x5b}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2078.866917] binder: 7274:7289 unknown command 1254318850 [ 2078.905078] binder: 7274:7294 unknown command 1254318850 16:28:41 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_ty#e', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2078.925566] binder: 7274:7289 ioctl c0306201 20007000 returned -22 16:28:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x100000001, 0xc000) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000140)="83731fa825a28e6169ebb5b0835a396e0f2548badf05f1f2f9eabe2c33811b3f5dea6cbbcb8dd75430079a5cbbc807abd3aa0a015d55a36b7553826935095757ce4274658afabb0828b0c95f1aebd7d8", 0x50}, {&(0x7f0000000440)="d975c6aab9d51b21d7fdabb29482d9cb04eb1d102a8e0db49f0bb8d9c2d454b283e7eabed5aea864c5529396b18d2850b3947058369d6526959ab99a6bc9e214c539b11ec76b748c46e39a8dc875d3cb44f905062b4f4031251a46dd7033b4dc00b6c3ef6c4b1197a8dd0aa11c0655785afa9d76c504dd613784e61925136dad470723f7abab32d88a6285c5eddf8f30caef70e34dcab144a17492ca91436d99b35f5a5ae48a89ec2eb884f13bd90c7e25d4f1fa9bd1ac233bd0e55593e717dffaac9c9faf35ee6c9905940bc1c7cd1fd869297063ed65cba4a3ab", 0xdb}, {&(0x7f00000002c0)="0f10ef0430d7bbe17812af0eb15f666a8b0fa1a9c653e07a9c7ef35359f7b71ae0d986fca9cdd87c4894a15d618d972027ff3275389a822050179f3b0261813866db7b0244289503f94863251b59552de541", 0x52}, {&(0x7f0000000340)="d32bb77fbfc454120e3bdb24fe3eb216ef583c8177d16c6785d6069bdc5cb6d9a4590519a631531a7ec04198f5a71f9b4a04c8537d36e02d7388487547743e497af5cca8449085a47b4717c529594179775cb9fd01b71e8fe8cdbcb6f0b0511a2c592a2d53d58124905704cb52fa997825aa89359ed94bf170c4e2c02904ac109f7c48b89f7bfe7897ada14e4b392207c916a04708a7f11d4b0c47695f84103bab6c28477479a57484ff9b80ba62b94a8b4a7e0b9ea6f0115f24c7ddf95c90e5d9149904a8be828ed06d1f6d4f7d3388f5d4cad0183331e9aa7b2b3a89ff298b0a37c431f918fb96cf9cbd69e1", 0xed}], 0x4) r2 = msgget(0x3, 0x400) r3 = geteuid() lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0x0, r1, 0x0, 0x9, &(0x7f0000000600)='eth1ppp0\x00', 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={r7, 0xffffffffffffffff, 0x0, 0x2bf, &(0x7f0000000780)='nodevem1GPL/(\x00', r8}, 0x30) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000700)={{0xfffffffffffeffff, r3, r4, r5, r6, 0x40, 0x2}, 0x4, 0x7fff, 0xe341, 0x100000001, 0xfffffffffffff000, 0x4, r7, r9}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:41 executing program 5: r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/create\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x12, 0x1, 0x6, 0x7ff, 0x2, 0x3e, 0x8001, 0x3db, 0x38, 0x52, 0xeb91, 0x5, 0x20, 0x1, 0x5, 0xb5, 0x5}, [{0x7, 0x8, 0x7, 0x1486, 0x9, 0x10001, 0x3, 0x7fe0000}], "4a607a0fd1a6eacd5dce2703f586f3f93642ef1aaf401a17b928e5aebd", [[], [], [], [], []]}, 0x575) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) fchdir(r3) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x40, 0x0) write$UHID_SET_REPORT_REPLY(r4, &(0x7f00000000c0)={0xe, 0x7, 0x9, 0x3, 0x53, "329397e82cf02bcd87e4e4bbed97e8ac1b978e2187a863de5a189e07c4f19d1762e58fcc8348f966960cbc880223f8fe4117bccb1736f24cde374be1f8d7adf43ffb2a5f843817764f62a52bdb64cb3f78c502"}, 0x5f) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) [ 2078.994976] binder: 7274:7294 ioctl c0306201 20007000 returned -22 [ 2079.149157] binder: BC_ACQUIRE_RESULT not supported [ 2079.154767] binder: 7320:7321 ioctl c0306201 20007000 returned -22 [ 2079.165825] binder: BC_ACQUIRE_RESULT not supported [ 2079.171828] binder: 7320:7323 ioctl c0306201 20007000 returned -22 16:28:42 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="153f6234488dd2") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000480), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[{0x3, 0xc91}], 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000340)={'nat\x00', 0x2, [{}, {}]}, 0x48) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000500)={{{@in6, @in6=@loopback}}, {{@in=@local}, 0x0, @in6}}, &(0x7f00000000c0)=0xe8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:28:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0xcb, "18f9388420f5889794cd7d9426d7e09479d1b04d64b58b9330b80fda90656ba7d2e5fc2c3c4ec66483bd57d7873207479b609ca83ef249dc60259913ea8bbde2b3c98bc52ca63e88e76675889f25ecc5cad25be018a4480f1e2d1dbc1c1b3228d6a75df6c2a93257322d6fa62bd5b9f2ed9639b00004f78f024c8c2d320406c8e7b174e8c852eecf2e9f20772fe84aa46cc868f23be693b1aa19bf33ff2941914a93d271e52201e8ac632d73eabf4df586cbf5b99c1d76d8ff156aa40182d5611184f2d652fb90c2672fe0"}, &(0x7f0000000040)=0xd3) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r2, 0x8000}, 0xc) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:42 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_ty*e', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:42 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}, 0x6c}, {@mft_zone_multiplier={'mft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="3c3a94bd", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x4, 0xe0043) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x6, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e22, @multicast2}, 0x100, 0x80000001, 0x0, 0x6, 0xda, &(0x7f0000000180)='ip6gre0\x00', 0xfffffffffffffff7, 0x5, 0x1ff}) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f00000000c0)=""/89) r3 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000140)={@dev={0xfe, 0x80, [], 0xd}, 0x1000, 0xc8e5949efdd27393, 0x2, 0x1, 0x6, 0x10000, 0xfffffffffffffffc}, 0x20) 16:28:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:42 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={',ft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000002, 0x12, r0, 0x0) r1 = request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000000c0)='\x00', 0xfffffffffffffffa) keyctl$instantiate(0xc, r1, &(0x7f0000000140)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', '/dev/binder#\x00', 0x20, 0x65caf15c, 0x20, [0x76, 0x61, 0x3b, 0x37, 0x39, 0x75]}, 0x3f, 0xfffffffffffffffa) 16:28:42 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_ty.e', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2079.794107] binder: 7337:7351 unknown command -1114359236 [ 2079.826643] binder: 7337:7358 unknown command -1114359236 [ 2079.851670] binder: 7337:7351 ioctl c0306201 20007000 returned -22 [ 2079.861824] __ntfs_error: 81 callbacks suppressed [ 2079.861834] ntfs: (device loop2): parse_options(): Unrecognized mount option . [ 2079.880309] ntfs: (device loop2): parse_options(): Unrecognized mount option ft_zone_multiplier. 16:28:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) r1 = socket(0x8, 0xa, 0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$RTC_AIE_OFF(r2, 0x7002) r3 = getuid() sendmsg$nl_netfilter(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="c8020000000700022abd7000fedbdf25030000098c021e00fd486a2e7b01699401780a5814dceb3d856f62b7655e922b55192788d092940671646d2ec8f82a4662e896ed373e2dc584c66e33dee653bd22674df744259a2cd9e641f5f37cbb88d26e792486a00bad4ef70738c68d17220949c30db9ab59384c579ed4645870aadbd69594bf62ce13992fe9ef0dd1ab172fd5f83ebf031f9110d51592b5b2dab244bd2e7350312bfc3c3dafe74ae6a389d49bf37df3ca4c7c633c985961aa2d5850770c5280f41dcf49871666cc6e1a7cca721faef4710e371613b68d1497d99c2d1e31a5223f89465fa33dcda08bd396cc2d593f2ae7e19032979bb5bcb721a51ac3f7ab6a0d764b49be0457e955dfc3dc26272578f611cad5972a04f509ac612e0ac4251e128c71c312c759aa38c7bb08c1f7775cf8f0165e9622e41b7414fec5990d3a4c1fa3b1c07c343216350dae6e15102933369cd0213a51d31266b77725c46d6a30d5c86462dd8abb1add51fa8bcbfa447ed32e802a3598e148d9775eaddb0dae6822c63bab6c3b9e3ec4758646f00ce1517589aacab0c0ae5b5cf8244188e877e831d0b7e5b38d6528263827e756358102314af3adeeaf7a6884c72b38ee3a00af03fde708ce92b0216f74b707e814e767f3e166c0000d00a5663db69082867f99908c3a34ab3fbf7c7ffbe95dd49bf398cc625414845a516625ec5d8d4c3f8a7e9dbb6f223c43fe215dc5dd8f9eb952a5014c74defb5455e46c88e01f70d61a029f124c1d6935117e3fcc2fa3de363225d62f2df0bf9ba2b5c872506fba84a3da170eff35f34e58308c775ac1bb778f7e239c51720ee9cdc334df1cf38eb216122c61b679a509220cd799abd632f9645694132eba3d37103b5dfbe431c1ab7f4ec069196c0c651f407adc301bf0820d54d1000008005e00", @ANYRES32=r0, @ANYBLOB='\b\x00-\x00', @ANYRES32=r3, @ANYBLOB="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"], 0x3b0}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) [ 2079.898079] ntfs: (device loop2): parse_options(): Unrecognized mount option subj_type. [ 2079.907925] binder: 7337:7358 ioctl c0306201 20007000 returned -22 [ 2079.909879] ntfs: (device loop2): parse_options(): Unrecognized mount option dont_hash. [ 2079.923431] binder: binder_mmap: 7359 20002000-20005000 bad vm_flags failed -1 [ 2079.941905] ntfs: (device loop1): parse_options(): Unrecognized mount option subj_ty.e. 16:28:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000180)={0x9, {{0xa, 0x4e21, 0x1, @loopback, 0x7ff}}}, 0x88) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000440)='/dev/audio#\x00', 0x7ffffffa, 0x101000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f00000002c0)={{0x7, 0x9}, 'port0\x00', 0x40, 0x2, 0x20, 0x2000000040000000, 0x31a, 0xc88, 0x5, 0x0, 0x4, 0x8}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000080)=""/253) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000003c0), 0x4) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000380)=0x5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) [ 2079.946874] ntfs: (device loop2): parse_options(): Unrecognized mount option fu. [ 2080.005761] ntfs: (device loop1): parse_options(): Unrecognized mount option subj_ty.e. [ 2080.030551] ntfs: (device loop2): parse_options(): Unrecognized mount option . [ 2080.038115] ntfs: (device loop2): parse_options(): Unrecognized mount option ft_zone_multiplier. [ 2080.047267] ntfs: (device loop2): parse_options(): Unrecognized mount option subj_type. [ 2080.071364] binder: BC_ACQUIRE_RESULT not supported [ 2080.076474] binder: 7382:7383 ioctl c0306201 20007000 returned -22 [ 2080.097812] binder: BC_ACQUIRE_RESULT not supported [ 2080.112374] binder: 7384:7384 ioctl c0306201 20007000 returned -22 16:28:43 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r1, 0x1) sendmsg$rds(r1, &(0x7f00000008c0)={&(0x7f0000000080)={0x2, 0x4e23}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/9, 0x9}, {&(0x7f0000000180)=""/31, 0x1f}], 0x2, &(0x7f0000000740)=[@rdma_dest={0x18, 0x114, 0x2, {0x400, 0xffffffffffffb8f9}}, @rdma_args={0x48, 0x114, 0x1, {{0x7, 0x1ff}, {&(0x7f0000000200)=""/200, 0xc8}, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/59, 0x3b}, {&(0x7f0000000340)=""/61, 0x3d}, {&(0x7f0000000380)=""/35, 0x23}, {&(0x7f00000003c0)=""/245, 0xf5}], 0x4, 0x0, 0x7a}}, @rdma_args={0x48, 0x114, 0x1, {{0x3, 0xffffffff}, {&(0x7f0000000500)=""/120, 0x78}, &(0x7f0000000600)=[{&(0x7f0000000580)=""/124, 0x7c}], 0x1, 0x47, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0x6, 0xc6}, &(0x7f0000000640)=0x3, &(0x7f0000000680)=0x17, 0x7ff, 0x3, 0x5, 0x800, 0x10, 0x112}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1f}, &(0x7f00000006c0)=0x3ff, &(0x7f0000000700)=0x6, 0xffffffffffffff4d, 0x6, 0x348, 0x7d, 0x28}}], 0x158, 0x6c28923b4f4098fc}, 0x10) r2 = socket$inet(0x2, 0x400000000000001e, 0xfffffffffffffffe) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') 16:28:43 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) sendmsg$nl_netfilter(r0, &(0x7f00000013c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x222c000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x1254, 0x6, 0xe, 0x800, 0x70bd2c, 0x25dfdbfe, {0xf, 0x0, 0x4}, [@nested={0xc4, 0x5a, [@generic="e1e28150a770a388572baff6d87fef540e3be07fb9945965dfe8e31f7c32dc57766aa41a7d7b1d4b61bde3277c2d5453774db92e0d145a8d0453cc6a96ec2fbd9a8466b4f7fae8c6a77e3332e573696a716589d7fed1e85b3b586becdadcbc7aa80d3e7c91d307a43fb3942ae521e1ed0321c964951e4bd5683a73c05e876aa017e1624b2c76b042aaf668e6700299b90ce4fc3dea10de168bd2142e9f0e58ef5db3e3eb519699ce3d867b564c0e6af7e5ad4da9f13a55", @typed={0x8, 0x7c, @u32=0xffff}]}, @nested={0x117c, 0xe, [@generic="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", @generic="eef5c740376b5d466f722b10a72ea5aafece860cf6549919cbee771394710647616114d5f4b9cbaeb094113050948b0e61b06f851425679609490c656275c729df7470f46370ce6be53c87b060628f272b5e7acf404971a3ba2f112b463d73af65c898a198d2a59875493aeae96ff55dd2ddf0593d829b003c54d2c1280f9056b2c6ed93c36644230cbff2fc5930be27bce318c38fdc360ae2d999d761c01950c913f6da8ac14ae220386d013be210f4ce3ab24c2d06c855c43884df2688a37d24", @generic="c6860a13385110237ae7c2c093fc053b9d2a1ce8c185857c68ea9db9658bdea4c111b3b2716a479582215923e661c2fcd6b3eb03b2688f4674cab80909c8baa37d9933141d1d35dca200e564077fc6ef632be918b769bffef21083f59029c4d68946b2725e49568984c8ed5f12b3c64a10f3177827e7c9071ceede83bf15dd63056c9d5d9f6093eee89d678c72f3356130e55e7c6e9b089201737cdac3762ad006e991be44ed149039f4d241ec30258ca1796d1ef2"]}]}, 0x1254}}, 0x8090) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000001400)={0x0, 0xffff}, &(0x7f0000001440)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000001480)=r2, 0x4) 16:28:43 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'\nft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:43 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_tyce', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x1, &(0x7f0000000280)) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) 16:28:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) [ 2080.682737] binder: BC_ACQUIRE_RESULT not supported [ 2080.688228] binder: 7396:7403 ioctl c0306201 20007000 returned -22 [ 2080.697506] binder_alloc_mmap_handler: 21 callbacks suppressed [ 2080.697522] binder_alloc: binder_alloc_mmap_handler: 7394 20002000-20007000 already mapped failed -16 [ 2080.732093] binder: BC_ACQUIRE_RESULT not supported [ 2080.735074] binder_alloc: binder_alloc_mmap_handler: 7394 20002000-20007000 already mapped failed -16 16:28:43 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'"ft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:43 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_tyxe', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x8000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) [ 2080.802814] binder: 7396:7409 ioctl c0306201 20007000 returned -22 16:28:43 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000040)="0b2d25b67ab178adfe6eb7c59d2cd113cfa27f80e5a1b136cd881f560eee60eb76ca00990253c131eb7b4e187e684d17775b38aac09a2524aa63cb69db3bd248a2e21a8344e504c36e2b198070b57f3ee8ff239b0449aea60958f0c6e16ac9b90ccdafa89678a3b35d832003af3bb397c5625bbb59c8ec2d562760e2586370fd684f498588aef1f5d2ad8629357d9fb0353c222fd87eb556db13ab2843526c9cd2", &(0x7f0000000100)="ddc22380b22c3887db4f7fc77cf058759f12361aabec2ad2e1175ca9fc1e36bbca3c0dc3dd3384051c689dbd7e0e718406162ae29b674c59479a"}, 0x20) fsetxattr$security_smack_entry(r0, &(0x7f0000000200)='security.SMACK64IPOUT\x00', &(0x7f0000000240)='-GPL\x00', 0x5, 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x80020) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) r3 = getpgrp(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000380)={{0x5, 0x3, 0x6, 0x3, 'syz1\x00', 0xfffffffffffffffd}, 0x4, 0x20, 0x1, r3, 0x5, 0x1, 'syz0\x00', &(0x7f0000000300)=['GPL}vboxnet1\x00', 'security.SMACK64IPOUT\x00', '%\x00', 'selinux\x00', 'security.SMACK64IPOUT\x00'], 0x43, [], [0xef, 0x80000000, 0x0, 0xff]}) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000280)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) r5 = semget(0x3, 0x3, 0x230) semctl$IPC_INFO(r5, 0x0, 0x3, &(0x7f00000002c0)=""/27) 16:28:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440", @ANYRES64=0x0, @ANYBLOB="f5ffffffffffffff30b750b532d434ebf70bbcf3a0de3beeb7a26e5f43ea4b246e3d5c577b685dd1aec6d906ad303b8e6864c1a21716e0ac4972d3f86a7b62abdaf928d9619f3f3436cd39417b6770c848ed00f270c7143e757149778ba2e4c8e77832682874156997ffcd4a8a8cff71aedeeaca0b06b457f7bd8cd08e7a44e6b680742dca7699c4eca718e7b02c2c62e07466155ec84f8f3235d9fa64e40454ef8fb5b71fad7fa7d6d1c49b2360e8316a9b6b545f7379d9f261ce78454519fa97c3fabd93ebedfd40a0106fbd16886af29ad2a404375597638d3366ca"], 0x0, 0x0, &(0x7f0000002000)}) [ 2080.878323] binder_alloc: binder_alloc_mmap_handler: 7425 20002000-20007000 already mapped failed -16 16:28:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) mount$9p_virtio(&(0x7f0000000000)='/dev/binder#\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x42, &(0x7f00000001c0)={'trans=virtio,', {[{@msize={'msize', 0x3d, 0x100}}, {@cache_loose='cache=loose'}, {@cache_none='cache=none'}, {@dfltuid={'dfltuid', 0x3d, r1}}, {@cache_mmap='cache=mmap'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@dont_appraise='dont_appraise'}, {@smackfstransmute={'smackfstransmute', 0x3d, '{./'}}]}}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:43 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0xa, "1fa11c1fa14e9002e546"}, &(0x7f0000000100)=0x12) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r2, 0x3, 0x8}, 0xc) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) write$binfmt_aout(r1, &(0x7f0000000200)={{0x10f, 0x1, 0x1ff, 0x2f7, 0xc5, 0xa84, 0x364, 0x8001}, "b9df4d25ba44ae2b1be6c822a4d09399f049dee962cbb8aa25fa746b4d86b51d853c9d7cba4808ade860e85f5a62a32ab59959a1a0c8c24934df1951152d8f2ec26ff2ecdfa5896f6d173032539108103604a409438de1831fc6dd0a6e3ed756acff1d7e9d10b82d82ece3d6bb12cb3be23c8dc0b8de0dbe529336036ca3d649c8af33afd4f11ec03dcaa2bca32a23eb85da92e0b04c9ba909cc5bebf869063dd8d8eadd5c53e018cb8b5374d2629bb7", [[], [], [], [], [], [], [], [], [], []]}, 0xad0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000080)=0xfffffffffffffff9, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x3, 0xb9, 0x4, 0x661}, 0x2c) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:43 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'%ft_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:43 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_tyde', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:44 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:28:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x7000)=nil, 0x7000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) [ 2081.058127] binder_alloc: binder_alloc_mmap_handler: 7447 20002000-20007000 already mapped failed -16 16:28:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x100000, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x80000001, 0x80000) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000240)={0x1fe, 0x0, &(0x7f0000ffb000/0x2000)=nil}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x1, 0x200) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0x7ff, @mcast2, 0x3}}, 0x7, 0x3, 0x2, 0xff, 0x89}, &(0x7f0000000340)=0x98) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000380)={r4, 0x436, 0x8, [0x3, 0x20, 0x6, 0x4, 0x2, 0xec, 0x5, 0x200]}, &(0x7f00000003c0)=0x18) accept4$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x10, 0x800) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f00000004c0)=0x1ff) setsockopt$sock_void(r3, 0x1, 0x28, 0x0, 0x0) accept$nfc_llcp(r2, &(0x7f0000000000), &(0x7f00000000c0)=0x60) fcntl$getownex(r3, 0x10, &(0x7f0000000480)={0x0, 0x0}) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x17c2, 0x88, 0x1ff, 0x9, 0x0, 0x800, 0x40, 0x1, 0x1000, 0x10000, 0x0, 0x7, 0x3, 0x6, 0x100, 0x8, 0x7, 0x0, 0x4, 0x7fffffff, 0x401, 0x6, 0x4, 0x8b9, 0x9, 0x6, 0x8, 0x100000001, 0x5, 0x4, 0x2, 0x6, 0x9316, 0x8, 0x1, 0x7f, 0x0, 0x81, 0x1, @perf_config_ext={0x800, 0x2}, 0x1, 0xa53c, 0x1f, 0x0, 0x3, 0x400, 0x3f}, r5, 0x3, r1, 0x8) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:44 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_tyle', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2081.138597] binder_alloc: binder_alloc_mmap_handler: 7463 20002000-20007000 already mapped failed -16 [ 2081.162465] binder: BC_ACQUIRE_RESULT not supported [ 2081.211254] binder: BC_ACQUIRE_RESULT not supported [ 2081.222693] binder: 7456:7461 ioctl c0306201 20007000 returned -22 16:28:44 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'m"t_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2081.257242] binder: 7456:7476 ioctl c0306201 20007000 returned -22 [ 2081.257823] binder_alloc: binder_alloc_mmap_handler: 7479 20002000-20007000 already mapped failed -16 16:28:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440", @ANYRES64=0x0, @ANYBLOB="000000000000000048fb429ed0cf0b36d832cfce9a801048b6495fec9f076a4709bc2b0bf56b3f6746ce3b083ff6f7227c553d96b1f048a33b48e64f72a7dd7e572c6cc581c238b046ccb7800ea5e60835f2009445cb261c80734aff607e0f39cae3c87f666cb4d7b6324d168ae675"], 0x0, 0x0, &(0x7f0000002000)}) 16:28:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x31e2, 0x80) r2 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xb98e, 0x80000) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000001c0)={0x2, r2, 0x1}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x400, 0x0) getsockname$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:44 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_ty\ne', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xc0, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7fffffff}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x15}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8011}, 0x10) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) [ 2081.429041] binder_alloc: binder_alloc_mmap_handler: 7496 20002000-20007000 already mapped failed -16 [ 2081.508681] binder_alloc: binder_alloc_mmap_handler: 7508 20002000-20007000 already mapped failed -16 [ 2081.509137] binder: BC_ACQUIRE_RESULT not supported [ 2081.546878] binder: BC_ACQUIRE_RESULT not supported [ 2081.552715] binder: 7504:7515 ioctl c0306201 20007000 returned -22 [ 2081.582914] binder: 7504:7510 ioctl c0306201 20007000 returned -22 16:28:44 executing program 3: socketpair(0x0, 0x0, 0x3, &(0x7f0000000140)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:44 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'m%t_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:44 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_ty%e', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = memfd_create(&(0x7f0000000080)='/dev/binder#\x00', 0x2) bind$vsock_dgram(r1, &(0x7f00000000c0), 0x10) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40046302}], 0x0, 0x0, &(0x7f0000002000)}) 16:28:44 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:28:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000140)={0x8, "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", 0x1000}, 0x1006) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) [ 2081.992119] binder: BC_ACQUIRE_RESULT not supported [ 2082.011273] binder_alloc: binder_alloc_mmap_handler: 7535 20002000-20007000 already mapped failed -16 [ 2082.026664] binder: 7521:7530 ioctl c0306201 20007000 returned -22 16:28:45 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_typ"', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:45 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'m,t_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2082.098193] binder: BC_ACQUIRE_RESULT not supported [ 2082.117331] binder_alloc: binder_alloc_mmap_handler: 7549 20002000-20007000 already mapped failed -16 16:28:45 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x9, 0x200) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000340)={0x0, 0x21a, 0x10, 0x7, 0x2}, &(0x7f0000000380)=0x18) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={r1, @in6={{0xa, 0x4e20, 0x400, @mcast1, 0x1}}, 0x9, 0x81, 0x7, 0x10001}, &(0x7f0000000480)=0x98) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x140) read$eventfd(r3, &(0x7f0000000040), 0x8) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r2, 0x0) [ 2082.158771] binder: 7521:7548 ioctl c0306201 20007000 returned -22 16:28:45 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_typ%', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:45 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78, 0x10, r1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@mcast1, @in=@local, 0x4e20, 0x3, 0x4e20, 0x8, 0xa, 0xa0, 0x20, 0x0, 0x0, r4}, {0xfffffffffffffffd, 0x1, 0x26c1, 0x0, 0x7, 0x80000000, 0xffff, 0x6}, {0x7a, 0x1, 0x40, 0x40}, 0x61, 0x6e6bb8, 0x1, 0x1, 0x3, 0x1}, {{@in=@multicast2, 0x4d5, 0x7f}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x3, 0x6, 0xffff, 0x6, 0x7}}, 0xe8) 16:28:45 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'m.t_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x500, 0x12, r0, 0x0) 16:28:45 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:28:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = dup2(r0, r0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:45 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_typ,', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$void(r0, 0x5450) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x500, 0x12, r0, 0x0) [ 2082.834475] binder: 7577:7584 ioctl 401054d6 0 returned -22 [ 2082.842121] binder: 7577:7590 ioctl 401054d6 0 returned -22 16:28:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) ioctl$void(r0, 0xc0045878) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:45 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_typ\n', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:45 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'m/t_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x101803) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000000036abb5b2b1b592a7e7a800000000000000000000beedc6c718e6ef1818924f0f9461db7194e27a3dd4c205"]) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000040)={@multicast1, @broadcast}, &(0x7f0000000140)=0x8) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) fcntl$notify(r0, 0x402, 0x8) 16:28:46 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78, 0x800000000000000, 0xffffffffffffffff, 0xff}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x500, 0x12, r0, 0x0) 16:28:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ff4000/0xb000)=nil, 0xb000, 0x200000a, 0x130, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x80, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x3, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000000), &(0x7f0000000040)=[0x18, 0x0]}}, @release={0x40046306, 0x3}, @dead_binder_done={0x40086310, 0x4}, @enter_looper, @decrefs={0x40046307, 0x3}, @increfs={0x40046304, 0x2}, @increfs_done={0x40106308, r1, 0x1}], 0x2, 0x0, &(0x7f00000000c0)="9b53"}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:46 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x2c, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:46 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'m\nt_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:46 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) [ 2083.698820] binder: 7636:7637 got transaction to invalid handle [ 2083.712928] binder: 7636:7637 transaction failed 29201/-22, size 0-16 line 2855 16:28:46 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x5b, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2083.740024] binder: 7636:7652 got transaction to invalid handle [ 2083.770478] binder: 7636:7652 transaction failed 29201/-22, size 0-16 line 2855 16:28:46 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mf\n_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x0) 16:28:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000000000, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8000000000, 0x20011, r0, 0xffffffffffffffff) clone(0x2000, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = memfd_create(&(0x7f00000001c0)='*cgroup/vmnet0wlan0user^+nodev\x00', 0x1) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000200)=""/103, 0x13a000, 0x1000, 0x80}, 0x18) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000002c0)={'mangle\x00', 0x2, [{}, {}]}, 0x48) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:getty_log_t:s0\x00', 0x21, 0x1) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x5, 0x18080) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000140), &(0x7f0000000180)=0x10) 16:28:46 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x22, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:47 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000012c0)={0x0, @in6={{0xa, 0x4e23, 0x7fffffff, @mcast2, 0x2}}, 0x4, 0x7}, &(0x7f0000001380)=0x90) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000013c0)={r3, 0x56, 0x2, [0x4, 0x5]}, &(0x7f0000001400)=0xc) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x280081, 0x0) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) write$UHID_INPUT(r1, &(0x7f00000001c0)={0x8, "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", 0x1000}, 0x1006) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000001200)={0x0, @in6={{0xa, 0x4e22, 0xdf, @mcast2, 0x10001}}, 0x4, 0xf0a4, 0x200, 0x27d0, 0x19}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000100)={r6, 0x7, 0x10000}, 0x8) write$FUSE_LSEEK(r0, &(0x7f0000000040)={0x18, 0x0, 0x5, {0xfffffffffffffaf7}}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:47 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mf"_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) fcntl$setstatus(r0, 0x4, 0x6800) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x480200, 0x0) 16:28:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x0) 16:28:47 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:28:47 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x25, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80000, 0x0) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000040)) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) getresgid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) write$FUSE_ATTR(r1, &(0x7f0000000200)={0x78, 0x0, 0x5, {0x5, 0x7fffffff, 0x0, {0x2, 0x460, 0x9, 0x7, 0x4, 0x20, 0x2, 0xdb, 0x100000001, 0x0, 0xfffffffffffffff9, r2, r3, 0x6, 0x4}}}, 0x78) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x2) 16:28:47 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, 'Rselinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x3, 0x100fff) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'yam0\x00', 0x4000}) 16:28:47 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mf%_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:48 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @multicast2}, 0xfffffffffffffe16) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x0) 16:28:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="726db1e12012c58a4eacc1366622765e5aed22dc5d0ee109d0701e17bf5554a7880ead559d27d5ea7bdcbff1158be7771802580d12a0ab0e6b5e80d8119b3092ecd51e490f9d0bbbad1f75a644d5b62e396cf877e3a47a492465c08be974e089def2", 0x62}], 0x1, &(0x7f00000001c0)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x800}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0xe6d}, @assoc={0x18, 0x117, 0x4, 0xd9f0}], 0x90, 0x80}, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:48 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, 'xselinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:48 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:28:48 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mf,_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) [ 2085.516364] __ntfs_error: 135 callbacks suppressed [ 2085.516374] ntfs: (device loop2): parse_options(): Unrecognized mount option mf. [ 2085.546064] ntfs: (device loop2): parse_options(): Unrecognized mount option _zone_multiplier. [ 2085.566363] ntfs: (device loop1): parse_options(): Unrecognized mount option subj_type. [ 2085.584129] ntfs: (device loop2): parse_options(): Unrecognized mount option subj_type. 16:28:48 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000040)="3d75a096445ea71ae149ceacb6ded0e83045fb57a11fcbf9f6efffd0839ac95515f8b4bbbe4ca9aa70af1196f12d2f78a3965ff71f1d45a70771239c32a0a9022066bbbac2345f84ea23528fde5850c056bc2e011c9a88d0937ace4c01e2637017b79a0e40e93c1175baeb9191d95098721c160b0e8b56a3d094aec4d7711d6c9078aeaee30114d2da155d5b0f5398d04d378fe2fa833cf6b0da4b9ade23b319079c78f57746d45fd001ffae1e7f71f39bfa10540f3a578c84c0ce3556865f6d1dd1bb5ab3fc0803fde52dc20d13", 0xce, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x0) [ 2085.614184] ntfs: (device loop2): parse_options(): Unrecognized mount option dont_hash. [ 2085.641901] ntfs: (device loop1): parse_options(): Unrecognized mount option subj_type. [ 2085.656155] ntfs: (device loop2): parse_options(): Unrecognized mount option fu. 16:28:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x4000000000) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:48 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, 'aselinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2085.714887] binder_alloc_mmap_handler: 23 callbacks suppressed [ 2085.714903] binder_alloc: binder_alloc_mmap_handler: 7786 20002000-20007000 already mapped failed -16 [ 2085.771111] ntfs: (device loop2): parse_options(): Unrecognized mount option mf. [ 2085.788345] ntfs: (device loop2): parse_options(): Unrecognized mount option _zone_multiplier. 16:28:48 executing program 3: socketpair(0x0, 0xf, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x5) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x2, 0x4) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e24, @multicast2}}, 0x4, 0x2, 0x81, 0x9, 0x6}, &(0x7f0000000380)=0x98) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4000004, 0x78}, 0x27) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000080)=""/154) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000040)=0x1) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000008, 0x30, r0, 0x0) [ 2085.816312] binder_alloc: binder_alloc_mmap_handler: 7796 20002000-20007000 already mapped failed -16 [ 2085.817452] ntfs: (device loop1): parse_options(): Unrecognized mount option subj_type. 16:28:48 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mfl_zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:48 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:28:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xc0c9, 0x8400) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) [ 2085.912654] binder_alloc: binder_alloc_mmap_handler: 7802 20002000-20007000 already mapped failed -16 16:28:48 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, 'rselinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:48 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000040)={0x1300000000000000, 0x2001, 0x4, 0x1, 0x14}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:48 executing program 0: r0 = socket(0xf, 0x5, 0xf08) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0xe90}, &(0x7f0000000140)=0x8) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r1, 0x0) [ 2086.007472] binder_alloc: binder_alloc_mmap_handler: 7823 20002000-20007000 already mapped failed -16 16:28:49 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft"zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2086.085474] binder_alloc: binder_alloc_mmap_handler: 7838 20002000-20007000 already mapped failed -16 16:28:49 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000055c0)='/dev/full\x00', 0xfffffffffffffffd, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f00000000c0)={0x0, 0x3ff, 0x401}) recvmmsg(r0, &(0x7f00000053c0)=[{{&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000280)=""/38, 0x26}, {&(0x7f00000002c0)=""/194, 0xc2}, {&(0x7f00000003c0)=""/15, 0xf}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x4, &(0x7f0000001440)=""/4096, 0x1000, 0x3}, 0x9}, {{&(0x7f0000002440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002640)=[{&(0x7f00000024c0)=""/32, 0x20}, {&(0x7f0000002500)=""/112, 0x70}, {&(0x7f0000002580)=""/178, 0xb2}], 0x3, 0x0, 0x0, 0x2}, 0xfffffffffffffffd}, {{&(0x7f0000002680)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002800)=[{&(0x7f0000002700)=""/8, 0x8}, {&(0x7f0000002740)=""/84, 0x54}, {&(0x7f00000027c0)=""/58, 0x3a}], 0x3, &(0x7f0000002840)=""/141, 0x8d, 0x2}, 0x40}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002900)=""/184, 0xb8}], 0x1, &(0x7f0000002a00)=""/101, 0x65, 0x3e03}, 0x106}, {{&(0x7f0000002a80)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002b00)=""/169, 0xa9}, {&(0x7f0000002bc0)=""/121, 0x79}], 0x2, &(0x7f0000002c80)=""/14, 0xe, 0xffffffffffffff12}, 0xfffffffffffffe01}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/37, 0x25}, {&(0x7f0000003d00)=""/233, 0xe9}, {&(0x7f0000003e00)=""/230, 0xe6}, {&(0x7f0000003f00)=""/212, 0xd4}, {&(0x7f0000004000)=""/64, 0x40}], 0x6, &(0x7f00000040c0)=""/210, 0xd2, 0x2}, 0x3f}, {{0x0, 0x0, &(0x7f0000005280)=[{&(0x7f00000041c0)=""/130, 0x82}, {&(0x7f0000004280)=""/4096, 0x1000}], 0x2, &(0x7f00000052c0)=""/208, 0xd0, 0x4}, 0x80000001}], 0x7, 0x2000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005580)={'team0\x00', r3}) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000056c0)=ANY=[@ANYBLOB="0ab0524eb3d0cf3e81b46cabc7f2e160f63c0ab4f476378bd37290a93f9995c80d824303117645dd8b4c659b1936c8790647327feb3b65f851bcfe88be61e07deaf1d162edc80e062fa93cbe97e62f6b93fd54618cd23361dcdb008ffb571b528f6c1afc7e41a47a917e119266107145344cbf76991d6f71b2a474", @ANYBLOB="e80000006f13928acdb90ce93fe9bef1b6db2270cbe01bbabaf95159540ed7cf974828854ba3bf17f4b86e5738fdd632dac4fcc32c548f712da94b01a9f52d819dd3c9e1c5d556caa7ca06987ce9030618aebc6f77862ee22a2803a7a024026619f20cf8d251839b040080b48f756a896fda396e6598eb54d7d22d9f53aadb2bcb38b152977d8c8d9536108f11ff7211162b4fb73b1c27ba68548b30a39f7ac88cf6a3a50faf6f8a365faabac421538a1e949ec0823aae3f2c81735432c5da43654944036e36010e3b75bed6ef173034068cd9502c550220437a5103051a1471fd967580b3b5b7560686e896"], &(0x7f0000000140)=0x2) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000180)={0x0, 0x634c}, 0x8) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0xfffffffffffffffe, 0x10011, r4, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r4, 0x0) 16:28:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x0) 16:28:49 executing program 0: syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x7, 0x200001) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x4000, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000140)=""/71, &(0x7f0000000040)=0x47) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) [ 2086.208093] binder: 7855:7857 ioctl 5429 20000000 returned -22 [ 2086.225636] binder: 7855:7857 ioctl 5429 20000000 returned -22 16:28:49 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, 'sselinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:49 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft,zone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1042}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd4, r2, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffff7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xaed}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x2}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) [ 2086.287367] binder_alloc: binder_alloc_mmap_handler: 7864 20002000-20007000 already mapped failed -16 16:28:49 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:28:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x400, 0x3) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0x400) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000040)) [ 2086.379150] binder_alloc: binder_alloc_mmap_handler: 7874 20002000-20007000 already mapped failed -16 [ 2086.396579] binder_alloc: binder_alloc_mmap_handler: 7870 20002000-20007000 already mapped failed -16 16:28:49 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft\nzone_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2086.486678] binder_alloc: binder_alloc_mmap_handler: 7885 20002000-20007000 already mapped failed -16 [ 2086.501433] binder: 7885:7887 ioctl 40086607 200000c0 returned -22 [ 2086.511109] binder_alloc: binder_alloc_mmap_handler: 7885 20002000-20007000 already mapped failed -16 [ 2086.522919] binder: 7885:7888 ioctl 40086607 200000c0 returned -22 16:28:49 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040), 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x0) 16:28:49 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, 'Bselinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x10000000, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fdatasync(r0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x2) 16:28:49 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_,one_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:49 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:28:49 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x5, 0x40000) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@rand_addr, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8) getpeername$packet(0xffffffffffffff9c, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f00000008c0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000900)={0x0, @broadcast, @multicast2}, &(0x7f0000000940)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000a80)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000ac0)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000bc0)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000f40)={&(0x7f0000000040), 0xc, &(0x7f0000000f00)={&(0x7f0000000c00)=ANY=[@ANYBLOB="f4020000", @ANYRES16=r1, @ANYBLOB="0e0728bd7000fddb0100000008000100", @ANYRES32=r2, @ANYBLOB="800202003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="5c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000002c000400800010020400000003000001ff0300007f004005fdffffff020005020900000001000507010000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000000c00040072616e646f6d00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000008000300030000000800040093f0000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r6, @ANYBLOB="080007000000000040000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000800000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f61646361737400000008000100", @ANYRES32=r7, @ANYBLOB="500002004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e6700000000"], 0x2f4}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) faccessat(r0, &(0x7f0000000280)='./file0\x00', 0x180, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r8, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r8, 0x0) ioctl$SG_GET_PACK_ID(r8, 0x227c, &(0x7f00000002c0)) 16:28:49 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_\none_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000000000000, 0x10, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) fcntl$getflags(r0, 0x40a) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x63) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) [ 2087.056241] binder: 7919:7922 ioctl 227c 200002c0 returned -22 16:28:50 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, 'Cselinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@md5={0x1, "858db7e7d1a36067583a6ce14b011e26"}, 0x11, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x200080, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20000, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000180)) 16:28:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x0) 16:28:50 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000040)={0xd549, 0x2, 'client0\x00', 0xb03292b812d06f25, "e2ced43648631a2c", "8391ca0da3785e410180fadd6743333f0f3e7ad930aad4cb86e6269b9cd865c0", 0x1, 0xe10}) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:50 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_"one_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) r1 = semget$private(0x0, 0x7, 0x500) semop(r1, &(0x7f0000000080)=[{0x4, 0x6, 0x1800}, {0x2, 0xff, 0x1800}, {0x7, 0x6, 0x1800}, {0x5, 0x7f, 0x800}, {0x2, 0x6, 0x1800}, {0x2, 0x4, 0x800}, {0x2, 0xc1c, 0x1000}], 0x7) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x40, 0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000001140)={0x10000, 0x0, 0x3, 0x39, 0x7f, 0x1d5, 0x9, 0x1, 0x0}, &(0x7f0000001180)=0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000011c0)={r3, 0x0, 0x10}, &(0x7f0000001200)=0xc) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x2000, 0x0) read$FUSE(r4, &(0x7f0000000140), 0x1000) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:50 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, '%selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x0) 16:28:50 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:28:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000000)='vboxnet0\x00', 0x1) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1300000065ffff08000000060039503230303075a864a7855aea01b3fe40ea5f4a0adfd5b21048993b94c9490a2034b20244"], 0x13) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x0) 16:28:50 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, 'gselinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:50 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_%one_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x400, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) socket$bt_hidp(0x1f, 0x3, 0x6) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) 16:28:51 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, 'iselinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:51 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000080)={0x3, {0x2, 0x4e20, @loopback}, {0x2, 0x4e22, @local}, {0x2, 0x4e21, @local}, 0x0, 0x200, 0x800, 0x6, 0xffff, &(0x7f0000000040)='ipddp0\x00', 0x5, 0x80000000, 0x7d77}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x8000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = socket$rds(0x15, 0x5, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x40040, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000140)={0x6, 0x2, 0x2, {0x77359400}, 0x100000000}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='bridge_slave_0\x00', 0x10) 16:28:51 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:28:51 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_z,ne_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:51 executing program 5: mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, 0xffffffffffffffff, 0x0) 16:28:51 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, '\nselinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:51 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, 'hselinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x80002, 0x0) bind$rds(r1, &(0x7f0000000300)={0x2, 0x4e22, @remote}, 0x10) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x20011, r0, 0x0) clone(0x2210200, 0x0, 0xfffffffffffffffe, &(0x7f0000000400), 0xffffffffffffffff) mmap$binder(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x10000000, 0x12, r0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]) times(&(0x7f0000000000)) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3, 0x40000) 16:28:51 executing program 5: mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, 0xffffffffffffffff, 0x0) 16:28:51 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_z\nne_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 16:28:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x800, 0x0) bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x21}}}, 0x1e) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:52 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@nat={'nat\x00', 0x1b, 0x5, 0x5e0, 0x3f0, 0x110, 0x0, 0x3f0, 0x3f0, 0x510, 0x510, 0x510, 0x510, 0x510, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0xc8, 0x110}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x10, @ipv6=@mcast2, @ipv6=@local, @icmp_id=0x68, @port=0x4e23}}}, {{@ipv6={@empty, @local, [0xffffffff, 0xffffffff], [0xffffffff, 0xff000000, 0xffffff00, 0xff], 'ifb0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x7e, 0x40000000, 0x4, 0x2}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@srh1={0x90, 'srh\x00', 0x1, {0xbf, 0x3f, 0x40, 0x6, 0x4, @remote, @dev={0xfe, 0x80, [], 0x1c}, @empty, [0xffffffff, 0xffffff00], [0xffffffff, 0xff000000, 0x0, 0xff000000], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 0xa90}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x800000000000000}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x8, 0x40, 0x1}}, @common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x10, 0x9, 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x1e, @ipv6=@local, @ipv4=@remote, @port=0x4e23, @icmp_id=0x67}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@dccp={0x30, 'dccp\x00', 0x0, {0x4e23, 0x4e20, 0x4e23, 0x4e20, 0x2, 0x0, 0x40, 0xfff}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x40, 0x8, 0x737}, {0x1, 0x5}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) bpf$MAP_CREATE(0x0, &(0x7f0000000880)={0xa, 0x1f, 0x0, 0x1002e8e4, 0x20, r0, 0x63d1}, 0x2c) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000080)={0x401, {{0x2, 0x4e24, @multicast2}}}, 0x88) time(&(0x7f0000000040)) 16:28:52 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_z"ne_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:52 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:28:52 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, 'mselinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:52 executing program 5: mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, 0xffffffffffffffff, 0x0) 16:28:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x76ce, 0x80) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000040)) 16:28:52 executing program 0: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000040)={0xffff, 0x6, 0x100000000, 0x7, 0x9}) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffd) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r1, 0x0) 16:28:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x101001, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:52 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_z%ne_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:52 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, 'Oselinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:52 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:28:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x0) 16:28:53 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f00000000c0)=0xe8) r3 = getgid() write$FUSE_ATTR(r1, &(0x7f00000002c0)={0x78, 0x0, 0x5, {0x400, 0x10001, 0x0, {0x2, 0x10000, 0x4, 0x10001, 0x2, 0x6, 0xfff, 0x401, 0xde86, 0x10, 0x40, r2, r3, 0x1, 0x81}}}, 0x78) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23}, 0xffffffffffffffa0) sendto$inet(r4, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) setsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000040)="7910b6d83b8b3104aa21a34abb6ba0d9eb8d615f2ccdbf29cbaf59890469de309775aba41cc1a94d81cdeb56f87bd717c9bef43b749e5601", 0x38) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xfff, 0x2100) shmget(0x2, 0x2000, 0x100, &(0x7f0000ffd000/0x2000)=nil) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:53 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, 'Iselinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:53 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zo\ne_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:28:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x400, 0x3) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0x400) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000040)) 16:28:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x0) 16:28:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) [ 2090.524356] binder: 8110:8114 ioctl 40086607 200000c0 returned -22 [ 2090.536998] __ntfs_error: 128 callbacks suppressed [ 2090.537010] ntfs: (device loop2): parse_options(): Unrecognized mount option mft_zo [ 2090.537010] e_multiplier. 16:28:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) [ 2090.568201] ntfs: (device loop2): parse_options(): Unrecognized mount option subj_type. [ 2090.580494] ntfs: (device loop1): parse_options(): Unrecognized mount option subj_type. [ 2090.591445] ntfs: (device loop2): parse_options(): Unrecognized mount option dont_hash. [ 2090.607378] binder: binder_mmap: 8126 20002000-20007000 bad vm_flags failed -1 [ 2090.615272] ntfs: (device loop2): parse_options(): Unrecognized mount option fu. 16:28:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x0) 16:28:53 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r2, 0x2, 0x18}, 0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0xcd) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) [ 2090.642933] ntfs: (device loop1): parse_options(): Unrecognized mount option subj_type. [ 2090.679194] ntfs: (device loop2): parse_options(): Unrecognized mount option mft_zo [ 2090.679194] e_multiplier. 16:28:53 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, 'Vselinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) [ 2090.708504] ntfs: (device loop2): parse_options(): Unrecognized mount option subj_type. [ 2090.725468] binder: binder_mmap: 8135 20002000-20007000 bad vm_flags failed -1 [ 2090.734271] ntfs: (device loop2): parse_options(): Unrecognized mount option dont_hash. 16:28:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) [ 2090.784213] ntfs: (device loop2): parse_options(): Unrecognized mount option fu. [ 2090.823951] binder: binder_mmap: 8146 20002000-20007000 bad vm_flags failed -1 16:28:53 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zo"e_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:53 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x9f0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r3, 0x0, 0x101}) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) msgget$private(0x0, 0x0) r4 = geteuid() quotactl(0x8, &(0x7f0000000100)='./file0\x00', r4, &(0x7f00000001c0)="283744a353f372cbbbc2c2bb88bc155a026062efb211e0a3482015044914441f53c1e309587b6e65174a5489f8b5099a8e702757321949f210747ed717428c2d80fef13729dae56520756d677c669d5673dac11d3edead59af6d91374d2691969cd9d06b0c0a7e0952547eb36277e12b36639dbcf858e19bd6b6d3dfc42941035acc9ee43d9ed885147aa8cbbe1ee67bc9f9ec1e98e59a9276203ce86c5399fa9e728b74a07761bd04d3866f7d1c9ba116fcac628ef32a5121b5db13b9c8d78f2f7d2c404117c2ec71e763") setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) 16:28:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:28:53 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ',selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2090.911470] binder: binder_mmap: 8156 20002000-20007000 bad vm_flags failed -1 16:28:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) 16:28:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x0) 16:28:53 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zo%e_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:54 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, 0xffffffffffffffff, 0x0) [ 2091.049313] binder: binder_mmap: 8168 20002000-20007000 bad vm_flags failed -1 16:28:54 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, 'Gselinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) 16:28:54 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zo,e_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2091.225168] binder: binder_mmap: 8184 20002000-20007000 bad vm_flags failed -1 16:28:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:54 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, 'Mselinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:54 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x24) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x12, 0xb9, 0x4, 0x78}, 0x2c) write$P9_ROPEN(r0, &(0x7f0000000080)={0x18, 0x71, 0x1, {{0x23, 0x3, 0x5}, 0x3}}, 0x18) socketpair$packet(0x11, 0x2, 0x300, &(0x7f00000000c0)) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000100)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000001c0)={0x81, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e22, @loopback}}}, 0x108) 16:28:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x0) 16:28:54 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zon\n_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:54 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, 'Kselinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:28:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x10, r0, 0x0) 16:28:54 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zon"_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:54 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, 'Eselinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:54 executing program 0: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, 0xffffffffffffffff, 0x0) 16:28:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x0) 16:28:55 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x5, 0x1f, 0x1, "1929f4735aa7f3a217d30168511df05f5d84c90111c42f57704678a75e4cc109870ef23b087d34f68aeb146033efab28ad4332e3d5d411b82db03a1085c8f88e", "3a980932efe309259ec5265f41cc02e89c1dd51b14cc43a01ff8b610996abd07a1a0ff56ea110a5289d4e91439e000aa0c649941d39bbea35c9dd965c86251f5", "63073b45feb25c619ef53d5c8e142438a68d93e28c1153c49d4d2ca3b4b83f75", [0x100, 0x6]}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:55 executing program 0 (fault-call:2 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) 16:28:55 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, 'Nselinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:55 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zon%_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2092.263172] FAULT_INJECTION: forcing a failure. [ 2092.263172] name failslab, interval 1, probability 0, space 0, times 0 [ 2092.282507] CPU: 1 PID: 8259 Comm: syz-executor0 Not tainted 4.19.0-rc8+ #74 [ 2092.289768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2092.289776] Call Trace: [ 2092.289804] dump_stack+0x1c4/0x2b6 [ 2092.289829] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2092.289861] should_fail.cold.4+0xa/0x17 [ 2092.289886] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2092.289910] ? __lock_acquire+0x7ec/0x4ec0 [ 2092.324159] ? graph_lock+0x170/0x170 [ 2092.327994] ? graph_lock+0x170/0x170 [ 2092.331904] ? find_held_lock+0x36/0x1c0 [ 2092.335994] ? __lock_is_held+0xb5/0x140 [ 2092.336026] ? ___might_sleep+0x1ed/0x300 [ 2092.336044] ? arch_local_save_flags+0x40/0x40 [ 2092.336059] ? print_usage_bug+0xc0/0xc0 [ 2092.336084] __should_failslab+0x124/0x180 [ 2092.344376] should_failslab+0x9/0x14 [ 2092.344394] kmem_cache_alloc+0x2be/0x730 [ 2092.344411] ? __lock_acquire+0x7ec/0x4ec0 [ 2092.344428] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2092.344442] ? may_expand_vm+0x1e3/0x810 [ 2092.344462] vm_area_dup+0x7a/0x230 [ 2092.357355] ? vm_area_alloc+0x1d0/0x1d0 [ 2092.357379] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2092.357400] __split_vma+0xae/0x570 [ 2092.357416] ? find_vma+0x34/0x190 [ 2092.386440] do_munmap+0x308/0xf50 [ 2092.386469] mmap_region+0x6a4/0x1cd0 [ 2092.386498] ? __x64_sys_brk+0x7d0/0x7d0 [ 2092.395688] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2092.395749] ? inode_has_perm.isra.58+0x17a/0x210 [ 2092.421192] ? mpx_unmapped_area_check+0xd8/0x108 [ 2092.426085] ? arch_get_unmapped_area_topdown+0xc2/0x940 [ 2092.431574] ? selinux_file_open+0x5c0/0x5c0 [ 2092.436110] ? arch_get_unmapped_area+0x750/0x750 [ 2092.440995] ? lock_acquire+0x1ed/0x520 [ 2092.445017] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2092.450594] ? selinux_mmap_addr+0x2d/0x110 [ 2092.455069] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2092.460645] ? security_mmap_addr+0x80/0xa0 [ 2092.465007] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2092.470585] ? get_unmapped_area+0x292/0x3b0 [ 2092.475031] do_mmap+0xa22/0x1230 [ 2092.478524] ? mmap_region+0x1cd0/0x1cd0 [ 2092.482614] ? vm_mmap_pgoff+0x1b5/0x2c0 [ 2092.486735] ? down_read_killable+0x1f0/0x1f0 [ 2092.491272] ? security_mmap_file+0x174/0x1b0 [ 2092.495815] vm_mmap_pgoff+0x213/0x2c0 [ 2092.499775] ? vma_is_stack_for_current+0xd0/0xd0 [ 2092.504666] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2092.510251] ? check_preemption_disabled+0x48/0x280 [ 2092.515320] ksys_mmap_pgoff+0x4da/0x660 [ 2092.519416] ? do_syscall_64+0x9a/0x820 [ 2092.523427] ? find_mergeable_anon_vma+0xd0/0xd0 [ 2092.528215] ? trace_hardirqs_on+0xbd/0x310 [ 2092.532581] ? __ia32_sys_read+0xb0/0xb0 [ 2092.536679] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2092.542108] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2092.547600] __x64_sys_mmap+0xe9/0x1b0 [ 2092.551531] do_syscall_64+0x1b9/0x820 [ 2092.555457] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2092.560863] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2092.565830] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2092.570735] ? trace_hardirqs_on_caller+0x310/0x310 [ 2092.575800] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2092.580859] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2092.585924] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2092.590809] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2092.596025] RIP: 0033:0x457569 16:28:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:28:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) [ 2092.599255] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2092.618187] RSP: 002b:00007f53ba05dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2092.625952] RAX: ffffffffffffffda RBX: 00007f53ba05dc90 RCX: 0000000000457569 [ 2092.633266] RDX: 000ffffffffffffa RSI: 0000000000004048 RDI: 0000000020002000 [ 2092.640565] RBP: 000000000072bf00 R08: 0000000000000003 R09: 0000000000000000 [ 2092.647863] R10: 0000000000000012 R11: 0000000000000246 R12: 00007f53ba05e6d4 [ 2092.655165] R13: 00000000004c283b R14: 00000000004d3be8 R15: 0000000000000004 16:28:55 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zon,_multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:55 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, 'Dselinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4052, 0xffffffffffffa, 0x12, r0, 0x0) [ 2092.729741] binder: binder_mmap: 8274 20002000-20007000 bad vm_flags failed -1 16:28:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4009, 0xffffffffffffa, 0x12, r0, 0x0) [ 2092.831593] binder_alloc_mmap_handler: 24 callbacks suppressed [ 2092.831612] binder_alloc: binder_alloc_mmap_handler: 8275 20002000-20007000 already mapped failed -16 [ 2092.853285] binder: binder_mmap: 8281 20002000-20007000 bad vm_flags failed -1 16:28:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) [ 2092.943700] binder: binder_mmap: 8290 20002000-20007000 bad vm_flags failed -1 [ 2093.015469] binder_alloc: binder_alloc_mmap_handler: 8296 20002000-20007000 already mapped failed -16 16:28:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4063, 0xffffffffffffa, 0x12, r0, 0x0) 16:28:56 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone"multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:56 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, 'Uselinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:56 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:28:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x0, 0x12, r0, 0x0) 16:28:56 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000040)="e8136cbd2252f400e17e985176721061347c09596627b119ab0525d644d2c609dd0d59a09406b8f422cfc806ddcb1f67357c88f669bd88463294de90cc3229c5d613df921cfaa1eaaafa9d139578c349cb4081268ca49a041795ab19aade4a705d4fbbf2dbf72a50ccdeadf50efc", 0x6e) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0x10001, 0x3, 0x78, 0x0, r0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) r4 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xe8) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000440)={@ipv4={[], [], @multicast2}, 0x0}, &(0x7f0000000480)=0x14) recvmmsg(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/78, 0x4e}, {&(0x7f0000000540)=""/86, 0x56}], 0x2, 0x0, 0x0, 0xf943}, 0x9}, {{0xfffffffffffffffe, 0x0, &(0x7f0000000740)=[{&(0x7f0000000600)=""/17, 0x11}, {&(0x7f0000000640)=""/218, 0xda}], 0x2, &(0x7f0000000780)=""/30, 0x1e, 0xb8}, 0x7f}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000007c0)=""/73, 0x49}, {&(0x7f0000000840)}, {&(0x7f0000000880)=""/31, 0x1f}, {&(0x7f00000008c0)=""/184, 0xb8}, {&(0x7f0000000980)=""/62, 0x3e}], 0x5, &(0x7f0000000a40)=""/234, 0xea, 0x10000}, 0x1fd}, {{&(0x7f0000000b40)=@nl=@unspec, 0x80, &(0x7f0000001f80)=[{0xfffffffffffffffd}, {&(0x7f0000000bc0)=""/175, 0xaf}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/79, 0x4f}, {&(0x7f0000001d00)=""/149, 0x95}, {&(0x7f0000001dc0)=""/246, 0xf6}, {&(0x7f0000001ec0)=""/178, 0xb2}], 0x7, &(0x7f0000002000)=""/36, 0x24, 0x65b3}, 0x99e}, {{&(0x7f0000002040)=@nfc_llcp, 0x80, &(0x7f0000002300)=[{&(0x7f00000020c0)=""/21, 0x15}, {&(0x7f0000002100)=""/87, 0x57}, {&(0x7f0000002180)=""/218, 0xda}, {&(0x7f0000002280)=""/101, 0x65}], 0x4, &(0x7f0000002340)=""/155, 0x9b, 0x6}, 0x8}, {{&(0x7f0000002400)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002480)=""/150, 0x96}, {&(0x7f0000002540)=""/178, 0xb2}, {&(0x7f0000002600)}, {&(0x7f0000002640)=""/130, 0x82}], 0x4, &(0x7f0000002740)=""/72, 0x48, 0x40}, 0x5}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f00000027c0)=""/141, 0x8d}, {&(0x7f0000002880)=""/67, 0x43}, {&(0x7f0000002900)=""/104, 0x68}], 0x3, &(0x7f00000029c0)=""/215, 0xd7, 0x3}, 0x20}], 0x7, 0x40012022, &(0x7f0000002c80)={0x77359400}) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000002c0)=[0x7, 0x1]) getsockname(r0, &(0x7f0000002cc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002d40)=0x80) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002e80)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@multicast1}}, &(0x7f0000002e00)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000003240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003200)={&(0x7f0000002f80)={0x244, r4, 0x10, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x228, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x4, 0x9, 0xfffffffffffff169, 0x3}, {0x2, 0x2, 0xfffffffffffffff9, 0x100000001}, {0x40, 0x5, 0x7, 0x9}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xc113}}, {0x8, 0x6, r7}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0xe9, 0x5, 0x100000000, 0xffffffff}, {0x9, 0x4, 0x1, 0x3}, {0x5, 0xdc2b, 0x2, 0x5}, {0x1, 0x6, 0x7b1bedb9, 0x81}, {0x1000, 0x1, 0x1, 0x9}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffa}}, {0x8, 0x6, r9}}}]}}]}, 0x244}, 0x1, 0x0, 0x0, 0x20040000}, 0x14) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)={@local, @dev={0xac, 0x14, 0x14, 0x11}, 0x1, 0x3, [@multicast2, @broadcast, @local]}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r1, 0x50, &(0x7f0000000240)}, 0x10) 16:28:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x4, 0x12, r0, 0x0) [ 2093.223607] binder: binder_mmap: 8299 20002000-20007000 bad vm_flags failed -1 16:28:56 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone,multiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2093.274572] binder_alloc: binder_alloc_mmap_handler: 8309 20002000-20007000 already mapped failed -16 16:28:56 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, '[selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xfffffffff001d, 0x12, r0, 0x0) 16:28:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x10, r0, 0x0) 16:28:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x52, r0, 0x0) 16:28:56 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone\nmultiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:56 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, 'Sselinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x6b6b6b00) [ 2093.552845] binder: binder_mmap: 8343 20002000-20007000 bad vm_flags failed -1 16:28:56 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:28:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x10, r0, 0x0) 16:28:56 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) 16:28:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x74000000) 16:28:56 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, 'bselinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x10, r0, 0x0) 16:28:56 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_\nultiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:56 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488d") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:28:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x7a000000) [ 2094.108439] binder: binder_mmap: 8368 20002000-20007000 bad vm_flags failed -1 16:28:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, 0xffffffffffffffff, 0x0) 16:28:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x6800) [ 2094.187696] binder: binder_mmap: 8385 20002000-20007000 bad vm_flags failed -1 16:28:57 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, 'dselinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:57 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_"ultiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x60) 16:28:57 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r0, r0}) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x3000000) 16:28:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, 0xffffffffffffffff, 0x0) 16:28:57 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488d") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:28:57 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_%ultiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:57 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, '"selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x4c00) [ 2095.029347] binder: binder_mmap: 8416 20002000-20007000 bad vm_flags failed -1 16:28:58 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, 'Fselinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x400000000000) 16:28:58 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_,ultiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, 0xffffffffffffffff, 0x0) 16:28:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x7400) [ 2095.209626] binder: binder_mmap: 8447 20002000-20007000 bad vm_flags failed -1 16:28:58 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) write$P9_RWALK(r0, &(0x7f0000000040)={0x4a, 0x6f, 0x2, {0x5, [{0xa, 0x0, 0x5}, {0x8, 0x0, 0x5}, {0x80, 0x2, 0x2}, {0x80, 0x1, 0x5}, {0x8, 0x626, 0x5}]}}, 0x4a) 16:28:58 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, 'fselinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x68) 16:28:58 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_m,ltiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:58 executing program 5 (fault-call:2 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x0) 16:28:58 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488d") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:28:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x600000000000000) [ 2095.933660] __ntfs_error: 152 callbacks suppressed [ 2095.933671] ntfs: (device loop1): parse_options(): Unrecognized mount option subj_type. [ 2095.948760] FAULT_INJECTION: forcing a failure. [ 2095.948760] name failslab, interval 1, probability 0, space 0, times 0 [ 2095.950093] ntfs: (device loop2): parse_options(): Unrecognized mount option mft_zone_m. [ 2095.977262] ntfs: (device loop2): parse_options(): Unrecognized mount option ltiplier. [ 2095.990995] binder: binder_mmap: 8489 20002000-20007000 bad vm_flags failed -1 [ 2095.999307] ntfs: (device loop2): parse_options(): Unrecognized mount option subj_type. [ 2096.005930] CPU: 0 PID: 8484 Comm: syz-executor5 Not tainted 4.19.0-rc8+ #74 [ 2096.014704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2096.018509] ntfs: (device loop2): parse_options(): Unrecognized mount option dont_hash. [ 2096.024109] Call Trace: [ 2096.024146] dump_stack+0x1c4/0x2b6 [ 2096.024168] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2096.043782] should_fail.cold.4+0xa/0x17 [ 2096.047886] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2096.050573] ntfs: (device loop2): parse_options(): Unrecognized mount option fu. [ 2096.053018] ? __lock_acquire+0x7ec/0x4ec0 [ 2096.053039] ? graph_lock+0x170/0x170 [ 2096.068656] ? graph_lock+0x170/0x170 [ 2096.072497] ? find_held_lock+0x36/0x1c0 [ 2096.076609] ? __lock_is_held+0xb5/0x140 [ 2096.080739] ? ___might_sleep+0x1ed/0x300 [ 2096.084922] ? arch_local_save_flags+0x40/0x40 [ 2096.090067] ? print_usage_bug+0xc0/0xc0 [ 2096.094167] __should_failslab+0x124/0x180 [ 2096.098440] should_failslab+0x9/0x14 [ 2096.102275] kmem_cache_alloc+0x2be/0x730 [ 2096.106450] ? __lock_acquire+0x7ec/0x4ec0 [ 2096.110743] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2096.116308] ? may_expand_vm+0x1e3/0x810 [ 2096.120406] vm_area_dup+0x7a/0x230 [ 2096.124061] ? vm_area_alloc+0x1d0/0x1d0 [ 2096.128151] ? memset+0x31/0x40 [ 2096.131465] __split_vma+0xae/0x570 [ 2096.135512] ? find_vma+0x34/0x190 [ 2096.139088] do_munmap+0x308/0xf50 [ 2096.142662] mmap_region+0x6a4/0x1cd0 [ 2096.146503] ? __x64_sys_brk+0x7d0/0x7d0 [ 2096.150593] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2096.156340] ? inode_has_perm.isra.58+0x17a/0x210 [ 2096.161219] ? mpx_unmapped_area_check+0xd8/0x108 [ 2096.166097] ? arch_get_unmapped_area_topdown+0xc2/0x940 [ 2096.171571] ? selinux_file_open+0x5c0/0x5c0 [ 2096.176013] ? arch_get_unmapped_area+0x750/0x750 [ 2096.180885] ? lock_acquire+0x1ed/0x520 [ 2096.184890] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2096.190456] ? selinux_mmap_addr+0x2d/0x110 [ 2096.194810] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2096.200381] ? security_mmap_addr+0x80/0xa0 [ 2096.204762] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2096.210332] ? get_unmapped_area+0x292/0x3b0 [ 2096.214787] do_mmap+0xa22/0x1230 [ 2096.218278] ? mmap_region+0x1cd0/0x1cd0 [ 2096.222369] ? vm_mmap_pgoff+0x1b5/0x2c0 [ 2096.226461] ? down_read_killable+0x1f0/0x1f0 [ 2096.230988] ? security_mmap_file+0x174/0x1b0 [ 2096.235521] vm_mmap_pgoff+0x213/0x2c0 [ 2096.239453] ? vma_is_stack_for_current+0xd0/0xd0 [ 2096.244324] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2096.249898] ? check_preemption_disabled+0x48/0x280 [ 2096.254960] ksys_mmap_pgoff+0x4da/0x660 [ 2096.259049] ? do_syscall_64+0x9a/0x820 [ 2096.263056] ? find_mergeable_anon_vma+0xd0/0xd0 [ 2096.267838] ? trace_hardirqs_on+0xbd/0x310 [ 2096.272184] ? __ia32_sys_read+0xb0/0xb0 [ 2096.276270] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2096.281660] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2096.287149] __x64_sys_mmap+0xe9/0x1b0 [ 2096.291076] do_syscall_64+0x1b9/0x820 [ 2096.294990] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2096.300381] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2096.305335] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2096.310207] ? trace_hardirqs_on_caller+0x310/0x310 [ 2096.315267] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2096.320313] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2096.325366] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2096.330248] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2096.335462] RIP: 0033:0x457569 [ 2096.338681] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2096.357636] RSP: 002b:00007f85868cfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2096.365376] RAX: ffffffffffffffda RBX: 00007f85868cfc90 RCX: 0000000000457569 [ 2096.372668] RDX: 000000006b6b6b00 RSI: 0000000000004048 RDI: 0000000020002000 16:28:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:28:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x4c00000000000000) [ 2096.379984] RBP: 000000000072bf00 R08: 0000000000000003 R09: 0000000000000000 [ 2096.387276] R10: 0000000000000012 R11: 0000000000000246 R12: 00007f85868d06d4 [ 2096.394567] R13: 00000000004c283b R14: 00000000004d3be8 R15: 0000000000000004 16:28:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x7000000) [ 2096.426014] ntfs: (device loop2): parse_options(): Unrecognized mount option mft_zone_m. [ 2096.435378] ntfs: (device loop1): parse_options(): Unrecognized mount option subj_type. [ 2096.448323] ntfs: (device loop2): parse_options(): Unrecognized mount option ltiplier. [ 2096.448345] binder: binder_mmap: 8500 20002000-20007000 bad vm_flags failed -1 [ 2096.466342] ntfs: (device loop2): parse_options(): Unrecognized mount option subj_type. 16:28:59 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')pelinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x500) [ 2096.548520] binder: binder_mmap: 8508 20002000-20007000 bad vm_flags failed -1 16:28:59 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x8, 0xffffffffffffff32) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x2090c037, 0x8720, 0x8, 0x9, 0x1, 0x7, 0x1ff, 0xff, r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:28:59 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_m.ltiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x2000000000000000) 16:28:59 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')%elinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:59 executing program 5 (fault-call:2 fault-nth:1): r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x0) 16:28:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x500000000000000) [ 2096.816534] binder: binder_mmap: 8526 20002000-20007000 bad vm_flags failed -1 16:28:59 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_m#ltiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:28:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x4c000000) 16:28:59 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')delinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:28:59 executing program 3: socketpair(0x1, 0xf, 0x94f0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4004e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000040)=0xa7c3) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) [ 2096.919836] binder: binder_mmap: 8537 20002000-20007000 bad vm_flags failed -1 [ 2096.972913] FAULT_INJECTION: forcing a failure. [ 2096.972913] name failslab, interval 1, probability 0, space 0, times 0 16:28:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x6c000000) 16:28:59 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000200)={0x492f, 0x0, 0x1, 0x0, 0x0, [{r1, 0x0, 0x4}]}) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0xd146) getpeername$packet(r2, &(0x7f0000000240), &(0x7f0000000280)=0x14) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x7, 0x20}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000000c0)={r5, 0x6}, &(0x7f0000000100)=0x8) [ 2097.023798] binder: binder_mmap: 8558 20002000-20007000 bad vm_flags failed -1 [ 2097.108845] CPU: 0 PID: 8552 Comm: syz-executor5 Not tainted 4.19.0-rc8+ #74 [ 2097.116106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2097.125489] Call Trace: [ 2097.128121] dump_stack+0x1c4/0x2b6 [ 2097.131801] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2097.137031] ? graph_lock+0x170/0x170 [ 2097.140871] should_fail.cold.4+0xa/0x17 [ 2097.140894] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2097.140912] ? graph_lock+0x170/0x170 [ 2097.150197] ? graph_lock+0x170/0x170 [ 2097.150213] ? lock_acquire+0x1ed/0x520 [ 2097.150227] ? graph_lock+0x170/0x170 [ 2097.150250] ? find_held_lock+0x36/0x1c0 [ 2097.150267] ? __lock_is_held+0xb5/0x140 [ 2097.150294] ? ___might_sleep+0x1ed/0x300 [ 2097.150314] ? arch_local_save_flags+0x40/0x40 [ 2097.182668] ? kasan_check_write+0x14/0x20 [ 2097.186945] __should_failslab+0x124/0x180 [ 2097.191216] should_failslab+0x9/0x14 [ 2097.195047] kmem_cache_alloc+0x2be/0x730 [ 2097.199224] ? __vma_adjust+0xab6/0x1810 [ 2097.203319] vm_area_dup+0x7a/0x230 [ 2097.207037] ? vm_area_alloc+0x1d0/0x1d0 [ 2097.211131] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2097.216707] __split_vma+0xae/0x570 [ 2097.220799] ? find_vma+0x34/0x190 [ 2097.224380] do_munmap+0x387/0xf50 [ 2097.227966] mmap_region+0x6a4/0x1cd0 [ 2097.231805] ? __x64_sys_brk+0x7d0/0x7d0 [ 2097.235900] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2097.241479] ? inode_has_perm.isra.58+0x17a/0x210 [ 2097.246362] ? mpx_unmapped_area_check+0xd8/0x108 [ 2097.251248] ? arch_get_unmapped_area_topdown+0xc2/0x940 [ 2097.256757] ? selinux_file_open+0x5c0/0x5c0 [ 2097.261206] ? arch_get_unmapped_area+0x750/0x750 [ 2097.266085] ? lock_acquire+0x1ed/0x520 [ 2097.270107] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2097.275695] ? selinux_mmap_addr+0x2d/0x110 [ 2097.280092] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2097.285669] ? security_mmap_addr+0x80/0xa0 [ 2097.290027] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2097.295594] ? get_unmapped_area+0x292/0x3b0 [ 2097.300044] do_mmap+0xa22/0x1230 [ 2097.303538] ? mmap_region+0x1cd0/0x1cd0 16:29:00 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_m-ltiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2097.307632] ? vm_mmap_pgoff+0x1b5/0x2c0 [ 2097.311760] ? down_read_killable+0x1f0/0x1f0 [ 2097.316295] ? security_mmap_file+0x174/0x1b0 [ 2097.320831] vm_mmap_pgoff+0x213/0x2c0 [ 2097.324787] ? vma_is_stack_for_current+0xd0/0xd0 [ 2097.329658] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2097.335225] ? check_preemption_disabled+0x48/0x280 [ 2097.340288] ksys_mmap_pgoff+0x4da/0x660 [ 2097.344379] ? do_syscall_64+0x9a/0x820 [ 2097.348385] ? find_mergeable_anon_vma+0xd0/0xd0 [ 2097.352823] binder: binder_mmap: 8570 20002000-20007000 bad vm_flags failed -1 [ 2097.353169] ? trace_hardirqs_on+0xbd/0x310 [ 2097.364875] ? __ia32_sys_read+0xb0/0xb0 [ 2097.368959] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2097.374354] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2097.379845] __x64_sys_mmap+0xe9/0x1b0 [ 2097.383787] do_syscall_64+0x1b9/0x820 [ 2097.387768] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2097.393163] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2097.398119] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2097.402990] ? trace_hardirqs_on_caller+0x310/0x310 [ 2097.408035] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2097.413082] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2097.418128] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2097.423015] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2097.428376] RIP: 0033:0x457569 [ 2097.431597] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2097.450526] RSP: 002b:00007f85868cfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 16:29:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x74) 16:29:00 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')"elinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2097.458267] RAX: ffffffffffffffda RBX: 00007f85868cfc90 RCX: 0000000000457569 [ 2097.465566] RDX: 000000006b6b6b00 RSI: 0000000000004048 RDI: 0000000020002000 [ 2097.472863] RBP: 000000000072bf00 R08: 0000000000000003 R09: 0000000000000000 [ 2097.480162] R10: 0000000000000012 R11: 0000000000000246 R12: 00007f85868d06d4 [ 2097.487455] R13: 00000000004c283b R14: 00000000004d3be8 R15: 0000000000000004 16:29:00 executing program 5 (fault-call:2 fault-nth:2): r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x0) 16:29:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x7a) 16:29:00 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:29:00 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_moltiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:00 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$int_out(r1, 0x2, &(0x7f0000000040)) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x15, 0xb9, 0x2, 0x78, 0x1}, 0xffffffffffffff04) dup(r1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:29:00 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')*elinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x68000000) 16:29:00 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_mXltiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x7a00) [ 2097.801831] binder: binder_mmap: 8617 20002000-20007000 bad vm_flags failed -1 16:29:00 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, '),elinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2097.872469] FAULT_INJECTION: forcing a failure. [ 2097.872469] name failslab, interval 1, probability 0, space 0, times 0 [ 2097.901743] CPU: 1 PID: 8634 Comm: syz-executor5 Not tainted 4.19.0-rc8+ #74 [ 2097.909008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2097.918512] Call Trace: [ 2097.921131] dump_stack+0x1c4/0x2b6 [ 2097.924797] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2097.924823] ? is_bpf_text_address+0xd3/0x170 [ 2097.924854] should_fail.cold.4+0xa/0x17 [ 2097.938639] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2097.938668] ? save_stack+0xa9/0xd0 [ 2097.938683] ? save_stack+0x43/0xd0 [ 2097.938695] ? kasan_kmalloc+0xc7/0xe0 [ 2097.938706] ? kasan_slab_alloc+0x12/0x20 [ 2097.938746] ? kmem_cache_alloc+0x12e/0x730 [ 2097.938759] ? vm_area_dup+0x7a/0x230 [ 2097.938777] ? __split_vma+0xae/0x570 [ 2097.971625] ? do_munmap+0x387/0xf50 [ 2097.975375] ? mmap_region+0x6a4/0x1cd0 [ 2097.979387] ? do_mmap+0xa22/0x1230 [ 2097.983141] ? vm_mmap_pgoff+0x213/0x2c0 [ 2097.987245] ? ksys_mmap_pgoff+0x4da/0x660 [ 2097.991512] ? __x64_sys_mmap+0xe9/0x1b0 [ 2097.995606] ? do_syscall_64+0x1b9/0x820 [ 2097.999699] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2098.005140] ? find_held_lock+0x36/0x1c0 [ 2098.009259] ? graph_lock+0x170/0x170 [ 2098.013107] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2098.018682] ? check_preemption_disabled+0x48/0x280 [ 2098.023788] ? check_preemption_disabled+0x48/0x280 [ 2098.028860] __should_failslab+0x124/0x180 [ 2098.033151] should_failslab+0x9/0x14 [ 2098.037107] kmem_cache_alloc+0x47/0x730 [ 2098.041215] ? rcu_read_lock_sched_held+0x108/0x120 [ 2098.046283] anon_vma_clone+0x140/0x710 [ 2098.050306] ? unlink_anon_vmas+0xa60/0xa60 [ 2098.054679] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2098.060294] __split_vma+0x183/0x570 [ 2098.064050] ? find_vma+0x34/0x190 [ 2098.067638] do_munmap+0x387/0xf50 [ 2098.071248] mmap_region+0x6a4/0x1cd0 [ 2098.075100] ? __x64_sys_brk+0x7d0/0x7d0 [ 2098.079197] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2098.084797] ? inode_has_perm.isra.58+0x17a/0x210 [ 2098.090048] ? mpx_unmapped_area_check+0xd8/0x108 [ 2098.094927] ? arch_get_unmapped_area_topdown+0xc2/0x940 [ 2098.100414] ? selinux_file_open+0x5c0/0x5c0 [ 2098.104863] ? arch_get_unmapped_area+0x750/0x750 [ 2098.109784] ? lock_acquire+0x1ed/0x520 [ 2098.113793] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2098.119360] ? selinux_mmap_addr+0x2d/0x110 [ 2098.123709] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2098.129306] ? security_mmap_addr+0x80/0xa0 [ 2098.133657] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2098.139240] ? get_unmapped_area+0x292/0x3b0 [ 2098.143688] do_mmap+0xa22/0x1230 [ 2098.147208] ? mmap_region+0x1cd0/0x1cd0 [ 2098.151307] ? vm_mmap_pgoff+0x1b5/0x2c0 [ 2098.155490] ? down_read_killable+0x1f0/0x1f0 [ 2098.160019] ? security_mmap_file+0x174/0x1b0 [ 2098.164552] vm_mmap_pgoff+0x213/0x2c0 [ 2098.168482] ? vma_is_stack_for_current+0xd0/0xd0 [ 2098.173354] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2098.178929] ? check_preemption_disabled+0x48/0x280 [ 2098.183997] ksys_mmap_pgoff+0x4da/0x660 [ 2098.188181] ? do_syscall_64+0x9a/0x820 [ 2098.192195] ? find_mergeable_anon_vma+0xd0/0xd0 [ 2098.196993] ? trace_hardirqs_on+0xbd/0x310 [ 2098.201345] ? __ia32_sys_read+0xb0/0xb0 [ 2098.205437] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2098.210838] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2098.216330] __x64_sys_mmap+0xe9/0x1b0 [ 2098.220267] do_syscall_64+0x1b9/0x820 [ 2098.224190] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2098.229598] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2098.234648] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2098.239529] ? trace_hardirqs_on_caller+0x310/0x310 [ 2098.244587] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2098.249639] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2098.254700] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2098.259616] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2098.264833] RIP: 0033:0x457569 [ 2098.268065] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2098.286999] RSP: 002b:00007f85868cfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2098.294785] RAX: ffffffffffffffda RBX: 00007f85868cfc90 RCX: 0000000000457569 [ 2098.302087] RDX: 000000006b6b6b00 RSI: 0000000000004048 RDI: 0000000020002000 [ 2098.309537] RBP: 000000000072bf00 R08: 0000000000000003 R09: 0000000000000000 [ 2098.316831] R10: 0000000000000012 R11: 0000000000000246 R12: 00007f85868d06d4 16:29:00 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x2}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={r3, 0x7f}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=0x0, &(0x7f0000000200)=0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={r4, 0x5}, &(0x7f0000000400)=0x8) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x9, 0x2000) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x3, 0x2, 0x6f4a, 0x3, 0x0}, &(0x7f0000000080)=0xfffffffffffffe46) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={r6, 0x80000000000000, 0x400}, 0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r6, 0x6}, 0x8) 16:29:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x6c00) [ 2098.324146] R13: 00000000004c283b R14: 00000000004d3be8 R15: 0000000000000004 [ 2098.366197] binder_alloc: binder_alloc_mmap_handler: 8611 20002000-20007000 already mapped failed -16 16:29:01 executing program 5 (fault-call:2 fault-nth:3): r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x0) 16:29:01 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_mlltiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0xffffff7f00000000) 16:29:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:29:01 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')xelinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0xfaffffffffff0f00) [ 2098.513339] binder: binder_mmap: 8661 20002000-20007000 bad vm_flags failed -1 16:29:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0xffffff7f) 16:29:01 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_miltiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x5000000) [ 2098.676185] FAULT_INJECTION: forcing a failure. [ 2098.676185] name failslab, interval 1, probability 0, space 0, times 0 16:29:01 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')-elinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2098.754178] binder: binder_mmap: 8686 20002000-20007000 bad vm_flags failed -1 [ 2098.772622] CPU: 1 PID: 8677 Comm: syz-executor5 Not tainted 4.19.0-rc8+ #74 [ 2098.779946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2098.779954] Call Trace: [ 2098.779981] dump_stack+0x1c4/0x2b6 [ 2098.780010] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2098.800963] ? kernel_text_address+0x79/0xf0 [ 2098.805414] should_fail.cold.4+0xa/0x17 [ 2098.809513] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2098.814785] ? graph_lock+0x170/0x170 [ 2098.818621] ? graph_lock+0x170/0x170 [ 2098.818641] ? lock_acquire+0x1ed/0x520 [ 2098.818658] ? find_held_lock+0x36/0x1c0 [ 2098.818677] ? __lock_is_held+0xb5/0x140 [ 2098.818703] ? ___might_sleep+0x1ed/0x300 [ 2098.826534] ? arch_local_save_flags+0x40/0x40 [ 2098.826555] ? do_raw_spin_unlock+0xa7/0x330 [ 2098.826579] __should_failslab+0x124/0x180 [ 2098.834755] should_failslab+0x9/0x14 [ 2098.834773] kmem_cache_alloc+0x2be/0x730 [ 2098.834794] ? __vma_adjust+0x1810/0x1810 [ 2098.864350] vm_area_alloc+0x7a/0x1d0 [ 2098.868182] ? arch_release_thread_stack+0x10/0x10 [ 2098.873158] mmap_region+0x9d4/0x1cd0 [ 2098.877004] ? __x64_sys_brk+0x7d0/0x7d0 [ 2098.881097] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2098.886674] ? inode_has_perm.isra.58+0x17a/0x210 [ 2098.891582] ? mpx_unmapped_area_check+0xd8/0x108 [ 2098.896470] ? selinux_file_open+0x5c0/0x5c0 [ 2098.900917] ? arch_get_unmapped_area+0x750/0x750 [ 2098.905797] ? lock_acquire+0x1ed/0x520 [ 2098.909812] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2098.915391] ? selinux_mmap_addr+0x2d/0x110 [ 2098.919774] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2098.925348] ? security_mmap_addr+0x80/0xa0 [ 2098.929706] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2098.935419] ? get_unmapped_area+0x292/0x3b0 [ 2098.939936] do_mmap+0xa22/0x1230 [ 2098.943434] ? mmap_region+0x1cd0/0x1cd0 [ 2098.947526] ? vm_mmap_pgoff+0x1b5/0x2c0 [ 2098.951624] ? down_read_killable+0x1f0/0x1f0 [ 2098.956152] ? security_mmap_file+0x174/0x1b0 [ 2098.960687] vm_mmap_pgoff+0x213/0x2c0 [ 2098.964645] ? vma_is_stack_for_current+0xd0/0xd0 [ 2098.969516] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2098.975083] ? check_preemption_disabled+0x48/0x280 [ 2098.980152] ksys_mmap_pgoff+0x4da/0x660 [ 2098.984259] ? do_syscall_64+0x9a/0x820 [ 2098.988280] ? find_mergeable_anon_vma+0xd0/0xd0 [ 2098.993074] ? trace_hardirqs_on+0xbd/0x310 [ 2098.997433] ? __ia32_sys_read+0xb0/0xb0 [ 2099.001532] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2099.006939] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2099.012436] __x64_sys_mmap+0xe9/0x1b0 [ 2099.016363] do_syscall_64+0x1b9/0x820 [ 2099.020281] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2099.025695] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2099.030686] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2099.035589] ? trace_hardirqs_on_caller+0x310/0x310 [ 2099.040634] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2099.045691] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2099.050799] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2099.055680] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2099.060928] RIP: 0033:0x457569 [ 2099.064151] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2099.083153] RSP: 002b:00007f85868cfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2099.090901] RAX: ffffffffffffffda RBX: 00007f85868cfc90 RCX: 0000000000457569 [ 2099.098199] RDX: 000000006b6b6b00 RSI: 0000000000004048 RDI: 0000000020002000 [ 2099.105503] RBP: 000000000072bf00 R08: 0000000000000003 R09: 0000000000000000 [ 2099.112800] R10: 0000000000000012 R11: 0000000000000246 R12: 00007f85868d06d4 [ 2099.120099] R13: 00000000004c283b R14: 00000000004d3be8 R15: 0000000000000004 16:29:02 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000080)) socketpair(0x10000000000, 0x0, 0x0, &(0x7f0000000140)) r1 = socket$inet(0x2, 0x7, 0x155) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000900000003000000d80200000000000030010000300100003001000000000000400200004002000040020000400200004002000003000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="0100000000234300fcf9747c0596b859d39b0eaa00000000000000000000000000000000000000001f64161ccadf84b6"], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80030010000000000000000000000000000000000000000000000002800727066696c7465720000000000000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000009000000000000004800435400000000000000000000000000000000000000000000000000000000000003007e5e0000ff0300006e657462696f732d6e7300000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80010010004000000000000000000000000000000000000000000002800727066696c746572000000000000000000000000000000000000000000000400000000000000280074746c00000000000000000000000000000000000000000000000000000003060000000000002800434f4e4e5345434d41524b000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000a8fc19b6e266be6fca5975e8e4635f5290c391b72cb3509942393596c339e37fea096ce810b9fb63167e7a7db50ca4a823bc2da74cd4c3bebae06c9317c456828ba1c85a54b8515c4dc34932161e9261d6d404ae8bb1797ebe1b113157740bd06168fe193b936b856b38229f3b9a000000"], 0x338) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:29:02 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_mpltiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:02 executing program 5 (fault-call:2 fault-nth:4): r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x0) 16:29:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x6000000) 16:29:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:29:02 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')+elinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:02 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_m+ltiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:02 executing program 3: r0 = socket$inet(0x2, 0x5, 0x1) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$rds(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000340), 0x0, &(0x7f0000000480)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000c40)={0x0, r1, 0x0, 0x4, &(0x7f0000000c00)='nbd\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000c80)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000d80)=0xe8) stat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000e80)={r6, r7, r8}, 0xc) getsockopt$inet_buf(r2, 0x0, 0x2f, &(0x7f0000000640)=""/80, &(0x7f0000000bc0)=0x50) write$P9_RLERRORu(r1, &(0x7f0000000440)={0x11, 0x7, 0x1, {{0x4, 'nbd\x00'}, 0x7ff}}, 0x11) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000006c0)=ANY=[@ANYBLOB="66696c740000000000000000000000000000000000000000000000000007000000040000008004000060020000600200000000000098030000980300009803000004000000c2a1d925c64238ead28d750c9cdfd262512fe867a7ae1d3f", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000109000000000400000100000001000000ac1414aa7f000001ffffffff000000ffaaaaaaaaaaaa000000000000000000000000000000000000ff00ff00000000000000000000000000ffffffffffff000000000000000000000000000000000000ffff00ffffff00000000000000000000fffa010000020006020007ff697036746e6c300000000000000000007465616d5f736c6176655f300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000180000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaaaa000000000000000000000180c200000300000000000000000000ac1414bbe000000208000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d45520000000000000000000000000000000000000000000180000073797a3100000000000000000000000000000000000000000000000017000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4d0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0xe934d3f633362a39, 0x7fff, {"c84bebfd2d88ce7b850210b9924204c7f7ecbd14af32c450340d4e75862241d036ba3ac1c3faf089bd6c4b1379c4e683d6345336c99ebadd329c5bcc47c882c5971a2d41087abc8c497d9b3269447d1f53ca45dacb48b06f61160d9ebdca7d4f10f1af"}}, {0x0, "e7d8fa0cd006dbd39ed5ef8822d6605bdfbb98cea1a2980444a46f4f3cee62bccb2e90c499bf26053898c01903fb80cb8cd3fd9b4f2e7866feb248eb3ee8dee36272eba6a9d3ce23d98e4032a8ac74e809d69fb60c5774788cfd2f52e35736350260df732c7f05bdaa8710bbd953a940c517e34218cdf5e6e95da4a55358aac55e21d9d21f32b7f00fb9e73c09488914ac785fecb4abe8e8423b56bdc8bd1a8683467df7"}}, &(0x7f0000000080)=""/136, 0x122, 0x88, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r9, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1080}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0xa0, r11, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffff}, @NBD_ATTR_SOCKETS={0x44, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r1}, {0x8, 0x1, r10}, {0x8, 0x1, r2}, {0x8, 0x1, r1}, {0x8, 0x1, r1}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffc1}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x101}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) perf_event_open$cgroup(&(0x7f00000005c0)={0x5, 0x70, 0x8, 0xffffffffffffffff, 0x3a9, 0x2f, 0x0, 0xee92, 0x80000, 0x0, 0xfffffffffffffff7, 0x1, 0x0, 0x1, 0x5, 0x4, 0x10000, 0x5, 0x1, 0x8, 0x1000, 0xfffffffffffff026, 0x9, 0x32bb48e5, 0x3, 0xff, 0x7, 0x8001, 0x10000, 0xff, 0x0, 0x6, 0x9, 0x0, 0x7, 0x4, 0x1c0, 0x9, 0x0, 0xfffffffffffff800, 0x1, @perf_bp={&(0x7f0000000400), 0x4}, 0x42ca, 0x5, 0x7f, 0x7, 0x4, 0x100, 0xfffffffffffffff9}, r2, 0x5, 0xffffffffffffffff, 0x0) 16:29:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x6c00000000000000) [ 2099.395765] binder: binder_mmap: 8708 20002000-20007000 bad vm_flags failed -1 [ 2099.435599] binder_alloc: binder_alloc_mmap_handler: 8720 20002000-20007000 already mapped failed -16 16:29:02 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')#elinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:02 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_m0ltiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x6) [ 2099.543628] binder: binder_mmap: 8730 20002000-20007000 bad vm_flags failed -1 16:29:02 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x212) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) accept4$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14, 0xc2d07cadf5df3157) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x2, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0x3c}], &(0x7f0000000080)='GPL\x00', 0x7ff, 0x4c, &(0x7f00000000c0)=""/76, 0x41f00, 0x1, [], r2, 0xf}, 0x48) 16:29:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x0) 16:29:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x4c) 16:29:02 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_mxltiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:29:02 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')ielinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x6c) 16:29:02 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000040)={0x1, 0xffffffff, 0x6, 0x152e4f5f, 0x81, 0x9, 0x20, 0x0, 0x0, 0x40, 0x527000000000000, 0xf3f}) read(r1, &(0x7f0000000080)=""/19, 0x13) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0x0, 0x10, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:29:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x48) [ 2099.856494] binder_alloc: binder_alloc_mmap_handler: 8769 20002000-20007000 already mapped failed -16 16:29:02 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_m%ltiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:02 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000040)={0x5, 0x2, 0x100000001}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) unshare(0x400) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000080), &(0x7f0000000140), 0x2}, 0x20) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) 16:29:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x4800000000000000) 16:29:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x4002) 16:29:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4069, 0x6b6b6b00, 0x12, r0, 0x0) 16:29:03 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')\nelinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x700000000000000) [ 2100.104464] binder: binder_mmap: 8801 20002000-20007000 bad vm_flags failed -1 16:29:03 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_msltiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x6000000000000000) [ 2100.203403] binder: binder_mmap: 8811 20002000-20007000 bad vm_flags failed -1 [ 2100.213294] binder: binder_mmap: 8811 20002000-20007000 bad vm_flags failed -1 16:29:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x4002) 16:29:03 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')0elinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2100.269274] binder_alloc: binder_alloc_mmap_handler: 8822 20002000-20007000 already mapped failed -16 [ 2100.322388] binder: binder_mmap: 8824 20002000-20007000 bad vm_flags failed -1 [ 2100.325509] binder_alloc: binder_alloc_mmap_handler: 8822 20002000-20007000 already mapped failed -16 16:29:03 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_m"ltiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2100.365108] binder: binder_mmap: 8824 20002000-20007000 bad vm_flags failed -1 16:29:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x20000000) [ 2100.506589] binder: binder_mmap: 8842 20002000-20007000 bad vm_flags failed -1 16:29:03 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xfffffffffffff3ea}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYBLOB="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"], 0xfe) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:29:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x4002) 16:29:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b02, 0x12, r0, 0x0) 16:29:03 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ').elinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x600) 16:29:03 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_mdltiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0xffffffffffffa) [ 2100.969110] __ntfs_error: 142 callbacks suppressed [ 2100.969121] ntfs: (device loop1): parse_options(): Unrecognized mount option subj_type. [ 2100.969371] ntfs: (device loop2): parse_options(): Unrecognized mount option mft_zone_mdltiplier. [ 2100.989331] binder: binder_mmap: 8850 20002000-20007000 bad vm_flags failed -1 [ 2101.003105] ntfs: (device loop2): parse_options(): Unrecognized mount option subj_type. 16:29:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x2000000) 16:29:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x0) [ 2101.020273] ntfs: (device loop2): parse_options(): Unrecognized mount option dont_hash. [ 2101.032233] ntfs: (device loop2): parse_options(): Unrecognized mount option fu. [ 2101.041927] ntfs: (device loop1): parse_options(): Unrecognized mount option subj_type. [ 2101.083940] ntfs: (device loop2): parse_options(): Unrecognized mount option mft_zone_mdltiplier. [ 2101.102834] ntfs: (device loop2): parse_options(): Unrecognized mount option subj_type. [ 2101.113878] ntfs: (device loop2): parse_options(): Unrecognized mount option dont_hash. [ 2101.125654] ntfs: (device loop2): parse_options(): Unrecognized mount option fu. 16:29:04 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')lelinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x4000) [ 2101.138379] binder: binder_mmap: 8878 20002000-20007000 bad vm_flags failed -1 [ 2101.176350] binder: binder_mmap: 8850 20002000-20007000 bad vm_flags failed -1 16:29:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x6b6b6b) [ 2101.195353] binder: binder_mmap: 8886 20002000-20007000 bad vm_flags failed -1 16:29:04 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) write$binfmt_elf64(r1, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x7, 0x0, 0x1, 0x5, 0x2, 0x3f, 0x80a1000000000, 0x126, 0x40, 0x393, 0x5, 0x400000, 0x38, 0x1, 0x400, 0xfffffffffffffffe, 0x6}, [{0x4, 0x6, 0x8, 0x9, 0x7, 0xfffffffffffffffb, 0x3a3, 0x7ff}], "455560bc1997c7755fb756bf201de3c33edcba", [[], [], []]}, 0x38b) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:29:04 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_m\nltiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b60, 0x12, r0, 0x0) 16:29:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x1000000) 16:29:04 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')uelinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x0) 16:29:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x5) [ 2101.872525] binder: binder_mmap: 8902 20002000-20007000 bad vm_flags failed -1 [ 2101.878694] binder_alloc: binder_alloc_mmap_handler: 8903 20002000-20007000 already mapped failed -16 [ 2101.914267] binder_alloc: binder_alloc_mmap_handler: 8903 20002000-20007000 already mapped failed -16 16:29:04 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000002500)=[{{&(0x7f0000000040)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/216, 0xd8}], 0x1, &(0x7f00000002c0)=""/180, 0xb4, 0x6}, 0x1}, {{&(0x7f0000000380)=@un=@abs, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/182, 0xb6}], 0x1, &(0x7f00000004c0)=""/70, 0x46, 0x3}, 0x9}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/204, 0xcc}, {&(0x7f0000000740)=""/97, 0x61}, {&(0x7f00000007c0)=""/183, 0xb7}, {&(0x7f0000000880)=""/114, 0x72}, {&(0x7f0000000900)=""/173, 0xad}, {&(0x7f00000009c0)=""/121, 0x79}, {&(0x7f0000000a40)=""/187, 0xbb}], 0x8, 0x0, 0x0, 0x800}, 0x1}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000b80)}, {&(0x7f0000000bc0)=""/172, 0xac}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/64, 0x40}, {&(0x7f0000001cc0)=""/107, 0x6b}, {&(0x7f0000001d40)=""/16, 0x10}, {&(0x7f0000001d80)=""/124, 0x7c}], 0x7, &(0x7f0000001e80)=""/181, 0xb5, 0x1}, 0x1}, {{&(0x7f0000001f40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001fc0)=""/125, 0x7d}], 0x1, &(0x7f0000002080)=""/78, 0x4e, 0x2}, 0x8}, {{&(0x7f0000002100)=@un=@abs, 0x80, &(0x7f0000002340)=[{&(0x7f0000002180)=""/253, 0xfd}, {&(0x7f0000002280)=""/163, 0xa3}], 0x2, 0x0, 0x0, 0x3f}, 0x3bd7}, {{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000002380)=""/104, 0x68}, {&(0x7f0000002400)=""/132, 0x84}], 0x2, 0x0, 0x0, 0x3}, 0x100000000}], 0x7, 0x2061, &(0x7f00000026c0)={0x0, 0x1c9c380}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002780)={'vcan0\x00', r3}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:29:04 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_m*ltiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:04 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')oelinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x400000) 16:29:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x4, 0x12, r0, 0x0) 16:29:05 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_mcltiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2102.137354] binder: binder_mmap: 8942 20002000-20007000 bad vm_flags failed -1 16:29:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x7) 16:29:05 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')celinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2102.186075] binder_alloc: binder_alloc_mmap_handler: 8947 20002000-20007000 already mapped failed -16 16:29:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x100000000000000) 16:29:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x0) 16:29:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x60000000) [ 2102.272641] binder_alloc: binder_alloc_mmap_handler: 8947 20002000-20007000 already mapped failed -16 [ 2102.287159] binder: binder_mmap: 8961 20002000-20007000 bad vm_flags failed -1 16:29:05 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_mu-tiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2102.390212] binder: binder_mmap: 8968 20002000-20007000 bad vm_flags failed -1 16:29:05 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) stat(0xfffffffffffffffe, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getuid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f00000002c0)=0xe8) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getgid() lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010004000000000002000300", @ANYRES32=r2, @ANYBLOB="0e000200fc3aee8b56092ba74428be65db4473fae3748ebc172502b23053d93e8f97d92df38cdfadf8beddb31bca56c30f4d373f37a011576101852037c7a9904e247948a0502eaf7b0ee5c96c55eb7655ec581a59b3c894eb0800000000000000d2f16cb1d2a07821c473a552edee3ea4", @ANYRES32=r3, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="02000500", @ANYRES32=r6, @ANYBLOB="040002000000000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r8, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000500", @ANYRES32=r11, @ANYBLOB="10000400000000002000070000000000"], 0x74, 0x3) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) ioctl$TIOCNXCL(r0, 0x540d) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r12, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:29:05 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_muttiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:05 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')Xelinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x700) 16:29:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b74, 0x12, r0, 0x0) 16:29:05 executing program 4 (fault-call:2 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:29:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x4800) [ 2102.961114] binder_alloc: binder_alloc_mmap_handler: 8982 20002000-20007000 already mapped failed -16 16:29:05 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')s,linuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:06 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_mu.tiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:06 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = socket$inet(0x2, 0x5, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x2a, "8607864039d1d34c7c5e2e54ea712c378b2f846962f4cf23e5d4cc4d4c9ab20991c1cb5408ea690764c8"}, &(0x7f0000000080)=0x32) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={r1, 0x5, 0x1, [0x6]}, 0xa) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:29:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x300000000000000) 16:29:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b03, 0x12, r0, 0x0) [ 2103.154531] FAULT_INJECTION: forcing a failure. [ 2103.154531] name failslab, interval 1, probability 0, space 0, times 0 16:29:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x3) [ 2103.224013] binder: binder_mmap: 9016 20002000-20007000 bad vm_flags failed -1 [ 2103.260062] CPU: 0 PID: 9010 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #74 [ 2103.267317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2103.276692] Call Trace: [ 2103.276752] dump_stack+0x1c4/0x2b6 [ 2103.276780] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2103.276803] ? find_held_lock+0x36/0x1c0 [ 2103.276829] should_fail.cold.4+0xa/0x17 [ 2103.276852] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2103.301533] ? check_preemption_disabled+0x48/0x280 [ 2103.306584] ? graph_lock+0x170/0x170 [ 2103.306601] ? find_held_lock+0x36/0x1c0 [ 2103.306627] ? __f_unlock_pos+0x19/0x20 [ 2103.306647] ? find_held_lock+0x36/0x1c0 16:29:06 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')s\nlinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:06 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f00000001c0), &(0x7f0000000200)=0x8) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) [ 2103.306679] ? ___might_sleep+0x1ed/0x300 [ 2103.318569] ? kasan_check_write+0x14/0x20 [ 2103.318590] ? arch_local_save_flags+0x40/0x40 [ 2103.318620] ? wait_for_completion+0x8a0/0x8a0 [ 2103.318643] __should_failslab+0x124/0x180 [ 2103.318664] should_failslab+0x9/0x14 [ 2103.318681] kmem_cache_alloc+0x2be/0x730 [ 2103.318697] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2103.318756] ? check_preemption_disabled+0x48/0x280 [ 2103.326990] getname_flags+0xd0/0x5a0 [ 2103.327010] getname+0x19/0x20 [ 2103.327026] do_sys_open+0x383/0x700 [ 2103.327047] ? filp_open+0x80/0x80 [ 2103.327068] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2103.327091] __x64_sys_open+0x7e/0xc0 [ 2103.327111] do_syscall_64+0x1b9/0x820 [ 2103.340537] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2103.340559] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2103.340574] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2103.340592] ? trace_hardirqs_on_caller+0x310/0x310 [ 2103.340611] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2103.340630] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2103.340652] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2103.340676] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2103.352920] RIP: 0033:0x4111a1 [ 2103.352939] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2103.352948] RSP: 002b:00007fbbc769e7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2103.352966] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 16:29:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x2) [ 2103.352976] RDX: 0000000000000000 RSI: 0000000000004002 RDI: 00007fbbc769e850 [ 2103.352985] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 2103.352994] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fbbc769f6d4 [ 2103.353004] R13: 00000000004c4bde R14: 00000000004d7f80 R15: 0000000000000004 [ 2103.369187] binder: binder_mmap: 9025 20002000-20007000 bad vm_flags failed -1 [ 2103.481678] binder: binder_mmap: 9025 20002000-20007000 bad vm_flags failed -1 16:29:06 executing program 4 (fault-call:2 fault-nth:1): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:29:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x4) 16:29:06 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_mu,tiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:06 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')s"linuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b04, 0x12, r0, 0x0) 16:29:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x200000000000000) 16:29:06 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_muLtiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x7400000000000000) 16:29:06 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')s%linuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2103.748568] binder: binder_mmap: 9062 20002000-20007000 bad vm_flags failed -1 [ 2103.819624] binder_alloc_mmap_handler: 1 callbacks suppressed [ 2103.819643] binder_alloc: binder_alloc_mmap_handler: 9061 20002000-20007000 already mapped failed -16 [ 2103.841533] FAULT_INJECTION: forcing a failure. [ 2103.841533] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2103.853407] CPU: 1 PID: 9066 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #74 [ 2103.853419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2103.853423] Call Trace: [ 2103.853453] dump_stack+0x1c4/0x2b6 [ 2103.853477] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2103.853496] ? print_usage_bug+0xc0/0xc0 [ 2103.853512] ? __lock_acquire+0x7ec/0x4ec0 [ 2103.853539] should_fail.cold.4+0xa/0x17 [ 2103.853563] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2103.864390] binder: binder_mmap: 9069 20002000-20007000 bad vm_flags failed -1 [ 2103.870365] ? __lock_acquire+0x7ec/0x4ec0 [ 2103.870388] ? mark_held_locks+0x130/0x130 [ 2103.870406] ? graph_lock+0x170/0x170 [ 2103.870421] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2103.870436] ? _kstrtoull+0x188/0x250 [ 2103.870451] ? _parse_integer+0x180/0x180 [ 2103.870464] ? graph_lock+0x170/0x170 [ 2103.870479] ? lock_release+0x970/0x970 [ 2103.870501] ? arch_local_save_flags+0x40/0x40 [ 2103.915376] ? find_held_lock+0x36/0x1c0 [ 2103.915400] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2103.915420] ? should_fail+0x22d/0xd01 [ 2103.928612] ? get_pid_task+0xd6/0x1a0 [ 2103.928634] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2103.928651] ? check_preemption_disabled+0x48/0x280 [ 2103.928674] __alloc_pages_nodemask+0x34b/0xde0 [ 2103.936649] ? find_held_lock+0x36/0x1c0 [ 2103.936670] ? __alloc_pages_slowpath+0x2d70/0x2d70 [ 2103.936688] ? __f_unlock_pos+0x19/0x20 [ 2103.936708] ? find_held_lock+0x36/0x1c0 [ 2103.994778] ? ___might_sleep+0x1ed/0x300 [ 2103.999053] ? trace_hardirqs_off+0xb8/0x310 [ 2104.003507] cache_grow_begin+0x91/0x8c0 [ 2104.007606] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2104.010550] binder: binder_mmap: 9081 20002000-20007000 bad vm_flags failed -1 16:29:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x7a00000000000000) [ 2104.013179] ? check_preemption_disabled+0x48/0x280 [ 2104.013206] kmem_cache_alloc+0x665/0x730 [ 2104.013223] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2104.013247] ? check_preemption_disabled+0x48/0x280 [ 2104.013271] getname_flags+0xd0/0x5a0 [ 2104.044283] getname+0x19/0x20 [ 2104.047510] do_sys_open+0x383/0x700 [ 2104.051266] ? filp_open+0x80/0x80 [ 2104.054846] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2104.060526] __x64_sys_open+0x7e/0xc0 [ 2104.064372] do_syscall_64+0x1b9/0x820 [ 2104.068289] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2104.073689] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2104.078756] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2104.083636] ? trace_hardirqs_on_caller+0x310/0x310 [ 2104.089200] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2104.094269] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2104.099332] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2104.104219] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2104.108682] binder_alloc: binder_alloc_mmap_handler: 9061 20002000-20007000 already mapped failed -16 [ 2104.109442] RIP: 0033:0x4111a1 [ 2104.109461] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2104.109470] RSP: 002b:00007fbbc769e7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2104.109493] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 2104.156206] RDX: 0000000000000000 RSI: 0000000000004002 RDI: 00007fbbc769e850 [ 2104.163513] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 2104.170818] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fbbc769f6d4 [ 2104.178118] R13: 00000000004c4bde R14: 00000000004d7f80 R15: 0000000000000004 16:29:07 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) socket$unix(0x1, 0x5, 0x0) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:29:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x6b6b6b00000000) 16:29:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b07, 0x12, r0, 0x0) 16:29:07 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_mu#tiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:07 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')se.inuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:07 executing program 4 (fault-call:2 fault-nth:2): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:29:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x4000000) [ 2104.443187] binder: binder_mmap: 9097 20002000-20007000 bad vm_flags failed -1 [ 2104.455594] binder: binder_mmap: 9094 20002000-20007000 bad vm_flags failed -1 [ 2104.471769] binder: binder_mmap: 9094 20002000-20007000 bad vm_flags failed -1 16:29:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x300) 16:29:07 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')se"inuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2104.501872] binder: binder_mmap: 9112 20002000-20007000 bad vm_flags failed -1 16:29:07 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_mu/tiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x48000000) 16:29:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b48, 0x12, r0, 0x0) [ 2104.650987] FAULT_INJECTION: forcing a failure. [ 2104.650987] name failslab, interval 1, probability 0, space 0, times 0 [ 2104.670369] binder: binder_mmap: 9130 20002000-20007000 bad vm_flags failed -1 [ 2104.683512] CPU: 0 PID: 9131 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #74 [ 2104.690791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2104.690798] Call Trace: [ 2104.690827] dump_stack+0x1c4/0x2b6 [ 2104.690852] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2104.690878] ? is_bpf_text_address+0xd3/0x170 [ 2104.716238] should_fail.cold.4+0xa/0x17 [ 2104.716262] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2104.716286] ? graph_lock+0x170/0x170 [ 2104.716308] ? save_stack+0xa9/0xd0 [ 2104.732951] ? save_stack+0x43/0xd0 [ 2104.736602] ? kasan_kmalloc+0xc7/0xe0 [ 2104.736615] ? kasan_slab_alloc+0x12/0x20 [ 2104.736632] ? kmem_cache_alloc+0x12e/0x730 [ 2104.736645] ? __alloc_file+0xa8/0x470 [ 2104.736658] ? alloc_empty_file+0x72/0x170 [ 2104.736671] ? path_openat+0x170/0x5160 [ 2104.736691] ? find_held_lock+0x36/0x1c0 [ 2104.744819] ? ___might_sleep+0x1ed/0x300 [ 2104.744840] ? arch_local_save_flags+0x40/0x40 [ 2104.744859] ? check_preemption_disabled+0x48/0x280 [ 2104.744891] __should_failslab+0x124/0x180 [ 2104.783816] should_failslab+0x9/0x14 [ 2104.787660] kmem_cache_alloc+0x2be/0x730 [ 2104.791856] ? rcu_read_lock_sched_held+0x108/0x120 [ 2104.796921] selinux_file_alloc_security+0xb4/0x190 [ 2104.801990] security_file_alloc+0x4c/0xa0 [ 2104.806275] __alloc_file+0x12a/0x470 [ 2104.810121] ? file_free_rcu+0xd0/0xd0 [ 2104.814045] ? find_held_lock+0x36/0x1c0 [ 2104.818147] ? is_bpf_text_address+0xac/0x170 [ 2104.822677] ? lock_downgrade+0x900/0x900 [ 2104.826890] ? check_preemption_disabled+0x48/0x280 [ 2104.831948] alloc_empty_file+0x72/0x170 [ 2104.836133] path_openat+0x170/0x5160 [ 2104.839962] ? rcu_bh_qs+0xc0/0xc0 [ 2104.843530] ? unwind_dump+0x190/0x190 [ 2104.847463] ? __lock_is_held+0xb5/0x140 [ 2104.851666] ? graph_lock+0x170/0x170 [ 2104.855497] ? path_lookupat.isra.43+0xc00/0xc00 [ 2104.860283] ? unwind_get_return_address+0x61/0xa0 [ 2104.865364] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2104.870415] ? expand_files.part.8+0x571/0x9a0 [ 2104.875034] ? find_held_lock+0x36/0x1c0 [ 2104.879136] ? __alloc_fd+0x347/0x6e0 [ 2104.883077] ? lock_downgrade+0x900/0x900 [ 2104.887248] ? getname+0x19/0x20 [ 2104.890652] ? kasan_check_read+0x11/0x20 [ 2104.894831] ? do_raw_spin_unlock+0xa7/0x330 [ 2104.899270] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2104.903882] ? __lock_is_held+0xb5/0x140 [ 2104.907977] ? _raw_spin_unlock+0x2c/0x50 [ 2104.912152] ? __alloc_fd+0x347/0x6e0 [ 2104.915980] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2104.921555] do_filp_open+0x255/0x380 [ 2104.925464] ? may_open_dev+0x100/0x100 [ 2104.929487] ? get_unused_fd_flags+0x122/0x1a0 [ 2104.934207] ? __alloc_fd+0x6e0/0x6e0 [ 2104.938049] do_sys_open+0x568/0x700 [ 2104.941804] ? filp_open+0x80/0x80 [ 2104.945377] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2104.950867] __x64_sys_open+0x7e/0xc0 [ 2104.954704] do_syscall_64+0x1b9/0x820 [ 2104.958659] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2104.964055] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2104.969087] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2104.973966] ? trace_hardirqs_on_caller+0x310/0x310 [ 2104.979017] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2104.984066] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2104.989121] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2104.994005] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2104.999219] RIP: 0033:0x4111a1 [ 2105.002440] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2105.021458] RSP: 002b:00007fbbc769e7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2105.029200] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 2105.036493] RDX: 0000000000000000 RSI: 0000000000004002 RDI: 00007fbbc769e850 [ 2105.043790] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 2105.051224] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fbbc769f6d4 [ 2105.058518] R13: 00000000004c4bde R14: 00000000004d7f80 R15: 0000000000000004 [ 2105.088934] binder_alloc: binder_alloc_mmap_handler: 9140 20002000-20007000 already mapped failed -16 [ 2105.133167] binder_alloc: binder_alloc_mmap_handler: 9140 20002000-20007000 already mapped failed -16 16:29:08 executing program 3: socketpair(0x1f, 0x4, 0x7fff, &(0x7f0000000140)) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r1 = add_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="f742befb6cc8668c677d393344ece3f2ac1948954b6b300530f0f0fa86856985291970c6fd40e09729186151583ec4a532d39d9b09b95be765568473a8ca171a0b240ed03c31ae958488f6", 0x4b, 0xffffffffffffffff) request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='{cpusetem0\x00', r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:29:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x6000) 16:29:08 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')se\ninuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b68, 0x12, r0, 0x0) 16:29:08 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_mu"tiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:08 executing program 4 (fault-call:2 fault-nth:3): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) [ 2105.288957] binder: binder_mmap: 9149 20002000-20007000 bad vm_flags failed -1 [ 2105.318242] binder: binder_mmap: 9149 20002000-20007000 bad vm_flags failed -1 16:29:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x6800000000000000) 16:29:08 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')se*inuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:08 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_mu\ntiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2105.406650] FAULT_INJECTION: forcing a failure. [ 2105.406650] name failslab, interval 1, probability 0, space 0, times 0 [ 2105.440800] binder: binder_mmap: 9170 20002000-20007000 bad vm_flags failed -1 [ 2105.460331] binder_alloc: binder_alloc_mmap_handler: 9161 20002000-20007000 already mapped failed -16 [ 2105.461329] CPU: 1 PID: 9168 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #74 [ 2105.476913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2105.476920] Call Trace: [ 2105.476943] dump_stack+0x1c4/0x2b6 [ 2105.476966] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2105.476987] ? is_bpf_text_address+0xd3/0x170 [ 2105.477011] should_fail.cold.4+0xa/0x17 [ 2105.477031] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2105.497767] ? graph_lock+0x170/0x170 [ 2105.497787] ? save_stack+0xa9/0xd0 [ 2105.497802] ? save_stack+0x43/0xd0 [ 2105.497815] ? kasan_kmalloc+0xc7/0xe0 [ 2105.497828] ? kasan_slab_alloc+0x12/0x20 [ 2105.497843] ? kmem_cache_alloc+0x12e/0x730 [ 2105.497856] ? __alloc_file+0xa8/0x470 [ 2105.497867] ? alloc_empty_file+0x72/0x170 [ 2105.497882] ? path_openat+0x170/0x5160 [ 2105.497900] ? find_held_lock+0x36/0x1c0 [ 2105.551032] ? ___might_sleep+0x1ed/0x300 [ 2105.551872] binder_alloc: binder_alloc_mmap_handler: 9161 20002000-20007000 already mapped failed -16 [ 2105.555193] ? arch_local_save_flags+0x40/0x40 [ 2105.555213] ? check_preemption_disabled+0x48/0x280 [ 2105.555249] __should_failslab+0x124/0x180 [ 2105.555271] should_failslab+0x9/0x14 [ 2105.582257] kmem_cache_alloc+0x2be/0x730 [ 2105.586427] ? rcu_read_lock_sched_held+0x108/0x120 [ 2105.591465] selinux_file_alloc_security+0xb4/0x190 [ 2105.596502] security_file_alloc+0x4c/0xa0 [ 2105.600765] __alloc_file+0x12a/0x470 [ 2105.604579] ? file_free_rcu+0xd0/0xd0 [ 2105.608486] ? find_held_lock+0x36/0x1c0 [ 2105.612573] ? is_bpf_text_address+0xac/0x170 [ 2105.617087] ? lock_downgrade+0x900/0x900 [ 2105.621254] ? check_preemption_disabled+0x48/0x280 [ 2105.626285] alloc_empty_file+0x72/0x170 [ 2105.630363] path_openat+0x170/0x5160 [ 2105.634178] ? rcu_bh_qs+0xc0/0xc0 [ 2105.637741] ? unwind_dump+0x190/0x190 [ 2105.641656] ? __lock_is_held+0xb5/0x140 [ 2105.645741] ? graph_lock+0x170/0x170 [ 2105.649563] ? path_lookupat.isra.43+0xc00/0xc00 [ 2105.654332] ? unwind_get_return_address+0x61/0xa0 [ 2105.659279] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2105.664309] ? expand_files.part.8+0x571/0x9a0 [ 2105.668909] ? find_held_lock+0x36/0x1c0 [ 2105.672993] ? __alloc_fd+0x347/0x6e0 [ 2105.676806] ? lock_downgrade+0x900/0x900 [ 2105.680963] ? getname+0x19/0x20 [ 2105.684357] ? kasan_check_read+0x11/0x20 [ 2105.688521] ? do_raw_spin_unlock+0xa7/0x330 [ 2105.692946] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2105.697542] ? __lock_is_held+0xb5/0x140 [ 2105.701627] ? _raw_spin_unlock+0x2c/0x50 [ 2105.701645] ? __alloc_fd+0x347/0x6e0 16:29:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b7a, 0x12, r0, 0x0) [ 2105.701662] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2105.701690] do_filp_open+0x255/0x380 [ 2105.709650] ? may_open_dev+0x100/0x100 [ 2105.709681] ? get_unused_fd_flags+0x122/0x1a0 [ 2105.709698] ? __alloc_fd+0x6e0/0x6e0 [ 2105.709739] do_sys_open+0x568/0x700 [ 2105.709760] ? filp_open+0x80/0x80 [ 2105.709781] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2105.709801] __x64_sys_open+0x7e/0xc0 [ 2105.748019] do_syscall_64+0x1b9/0x820 [ 2105.751922] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2105.757304] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2105.762250] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2105.762271] ? trace_hardirqs_on_caller+0x310/0x310 [ 2105.762290] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2105.762308] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2105.762331] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2105.772193] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2105.772207] RIP: 0033:0x4111a1 [ 2105.772225] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2105.772240] RSP: 002b:00007fbbc769e7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2105.822062] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 2105.829345] RDX: 0000000000000000 RSI: 0000000000004002 RDI: 00007fbbc769e850 [ 2105.836626] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 2105.843904] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fbbc769f6d4 [ 2105.851180] R13: 00000000004c4bde R14: 00000000004d7f80 R15: 0000000000000004 16:29:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x2000) [ 2105.863205] binder: binder_mmap: 9181 20002000-20007000 bad vm_flags failed -1 [ 2105.892162] binder: binder_mmap: 9181 20002000-20007000 bad vm_flags failed -1 16:29:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x400000000000000) [ 2105.930613] binder: binder_mmap: 9184 20002000-20007000 bad vm_flags failed -1 [ 2105.991084] binder: binder_mmap: 9191 20002000-20007000 bad vm_flags failed -1 16:29:09 executing program 3: socketpair(0x0, 0xfffffffffffffffd, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000000c0)=0x8, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000100)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) fsetxattr$security_smack_transmute(r2, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x1) 16:29:09 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_mu0tiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:09 executing program 4 (fault-call:2 fault-nth:4): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:29:09 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')se0inuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b4c, 0x12, r0, 0x0) 16:29:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x8000000000000000) [ 2106.159376] __ntfs_error: 126 callbacks suppressed [ 2106.159388] ntfs: (device loop1): parse_options(): Unrecognized mount option subj_type. [ 2106.199008] ntfs: (device loop2): parse_options(): Unrecognized mount option mft_zone_mu0tiplier. 16:29:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x1000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x2002, 0x0) getsockopt$inet_dccp_int(r1, 0x21, 0x1a, &(0x7f00000001c0), &(0x7f0000000200)=0x4) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xffffffffffffa, 0x4000000000012, r0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x4000002000) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000040)={0xeecc, 0x80, 0x6, 0x1, 0x3, 0x1000}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000140)={0x1000, 0x4, 0x0, {}, 0x4, 0x7894}) flistxattr(r1, &(0x7f0000000240)=""/192, 0xc0) [ 2106.209076] binder: binder_mmap: 9202 20002000-20007000 bad vm_flags failed -1 [ 2106.218862] ntfs: (device loop2): parse_options(): Unrecognized mount option subj_type. [ 2106.233360] ntfs: (device loop2): parse_options(): Unrecognized mount option dont_hash. [ 2106.247882] ntfs: (device loop1): parse_options(): Unrecognized mount option subj_type. [ 2106.253605] ntfs: (device loop2): parse_options(): Unrecognized mount option fu. [ 2106.264128] FAULT_INJECTION: forcing a failure. [ 2106.264128] name failslab, interval 1, probability 0, space 0, times 0 [ 2106.275954] CPU: 0 PID: 9213 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #74 [ 2106.283162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2106.292524] Call Trace: [ 2106.295137] dump_stack+0x1c4/0x2b6 [ 2106.298796] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2106.304022] should_fail.cold.4+0xa/0x17 [ 2106.308105] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2106.313222] ? graph_lock+0x170/0x170 [ 2106.317034] ? graph_lock+0x170/0x170 [ 2106.320851] ? snd_lookup_oss_minor_data+0x41/0x160 [ 2106.325893] ? find_held_lock+0x36/0x1c0 [ 2106.329986] ? ___might_sleep+0x1ed/0x300 [ 2106.334145] ? arch_local_save_flags+0x40/0x40 [ 2106.338767] __should_failslab+0x124/0x180 [ 2106.343021] should_failslab+0x9/0x14 [ 2106.346844] kmem_cache_alloc_trace+0x2d7/0x750 [ 2106.351523] ? wait_for_completion+0x8a0/0x8a0 [ 2106.356116] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 2106.361585] ? refcount_add_not_zero_checked+0x330/0x330 [ 2106.367053] snd_card_file_add+0xbb/0x460 [ 2106.371222] ? snd_component_add+0x180/0x180 [ 2106.375647] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2106.381197] ? refcount_inc_checked+0x29/0x70 [ 2106.385804] snd_pcm_oss_open+0x18f/0x17a0 [ 2106.390073] ? lock_downgrade+0x900/0x900 [ 2106.394234] ? check_preemption_disabled+0x48/0x280 [ 2106.399273] ? snd_pcm_oss_release_file.part.23+0xa0/0xa0 [ 2106.404817] ? graph_lock+0x170/0x170 [ 2106.408656] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 2106.413945] ? rcu_bh_qs+0xc0/0xc0 [ 2106.417498] ? graph_lock+0x170/0x170 [ 2106.421317] ? find_held_lock+0x36/0x1c0 [ 2106.425398] ? m_show+0x5d0/0x5d0 [ 2106.428864] ? soundcore_open+0x44f/0x6d0 [ 2106.433038] ? lock_downgrade+0x900/0x900 [ 2106.437203] ? kasan_check_read+0x11/0x20 [ 2106.441364] ? do_raw_spin_unlock+0xa7/0x330 [ 2106.445784] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2106.450406] ? kasan_check_write+0x14/0x20 [ 2106.454651] ? do_raw_spin_lock+0xc1/0x230 [ 2106.458902] ? snd_pcm_oss_release_file.part.23+0xa0/0xa0 [ 2106.464451] soundcore_open+0x508/0x6d0 [ 2106.468443] ? sound_devnode+0xf0/0xf0 [ 2106.472344] chrdev_open+0x25a/0x710 [ 2106.476071] ? cdev_put.part.0+0x50/0x50 [ 2106.480147] ? errseq_sample+0xe5/0x130 [ 2106.484150] do_dentry_open+0x499/0x1250 [ 2106.488225] ? selinux_capable+0x40/0x40 [ 2106.492297] ? cdev_put.part.0+0x50/0x50 [ 2106.496371] ? chown_common+0x730/0x730 [ 2106.500373] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2106.505938] ? security_inode_permission+0xd2/0x100 [ 2106.510979] ? inode_permission+0xb2/0x560 [ 2106.515239] vfs_open+0xa0/0xd0 [ 2106.518534] path_openat+0x12bf/0x5160 [ 2106.522433] ? rcu_bh_qs+0xc0/0xc0 [ 2106.525986] ? unwind_dump+0x190/0x190 [ 2106.529904] ? path_lookupat.isra.43+0xc00/0xc00 [ 2106.534674] ? unwind_get_return_address+0x61/0xa0 [ 2106.539616] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2106.544647] ? expand_files.part.8+0x571/0x9a0 [ 2106.549252] ? find_held_lock+0x36/0x1c0 [ 2106.553336] ? __alloc_fd+0x347/0x6e0 [ 2106.557153] ? lock_downgrade+0x900/0x900 [ 2106.561313] ? getname+0x19/0x20 [ 2106.564706] ? kasan_check_read+0x11/0x20 [ 2106.568883] ? do_raw_spin_unlock+0xa7/0x330 [ 2106.573303] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2106.577905] ? __lock_is_held+0xb5/0x140 [ 2106.581987] ? _raw_spin_unlock+0x2c/0x50 [ 2106.586149] ? __alloc_fd+0x347/0x6e0 [ 2106.589961] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2106.595522] do_filp_open+0x255/0x380 [ 2106.599342] ? may_open_dev+0x100/0x100 [ 2106.603349] ? get_unused_fd_flags+0x122/0x1a0 [ 2106.607970] ? __alloc_fd+0x6e0/0x6e0 [ 2106.611837] do_sys_open+0x568/0x700 [ 2106.615566] ? filp_open+0x80/0x80 [ 2106.619120] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2106.624588] __x64_sys_open+0x7e/0xc0 [ 2106.628405] do_syscall_64+0x1b9/0x820 [ 2106.632306] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2106.637706] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2106.642665] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2106.647520] ? trace_hardirqs_on_caller+0x310/0x310 [ 2106.652549] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2106.657581] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2106.662616] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2106.667476] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2106.672676] RIP: 0033:0x4111a1 [ 2106.675877] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2106.694792] RSP: 002b:00007fbbc769e7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2106.702521] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 2106.709800] RDX: 0000000000000000 RSI: 0000000000004002 RDI: 00007fbbc769e850 [ 2106.717076] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 2106.724620] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fbbc769f6d4 [ 2106.731919] R13: 00000000004c4bde R14: 00000000004d7f80 R15: 0000000000000004 16:29:09 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')se,inuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2106.794679] ntfs: (device loop2): parse_options(): Unrecognized mount option mft_zone_mu0tiplier. [ 2106.813669] binder: binder_mmap: 9214 20002000-20006000 bad vm_flags failed -1 [ 2106.828011] ntfs: (device loop2): parse_options(): Unrecognized mount option subj_type. 16:29:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b0d, 0x12, r0, 0x0) 16:29:09 executing program 4 (fault-call:2 fault-nth:5): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:29:09 executing program 0: r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xffffffffffffa, 0x1e, r1, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x410000) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0xffffffff, 0xff, 0x4, 0x1000000000000000, 0x5, 0x133, 0x8000, 0xc05, 0x3], 0xa, 0x0, 0x3f, 0x3, 0x4, 0xffffffe000000000, {0x7a0, 0x8, 0xfffffffffffffffb, 0x433a, 0xfff, 0x0, 0x4, 0x8, 0x5, 0x800, 0xfffffffffffffff8, 0x2, 0x401, 0x1, "42721a169edf0210a5158051e221c4de6625d10b7e6ef964f091ffd448af1b61"}}) [ 2106.846075] binder: binder_mmap: 9214 20002000-20006000 bad vm_flags failed -1 [ 2106.855377] ntfs: (device loop2): parse_options(): Unrecognized mount option dont_hash. [ 2106.873619] ntfs: (device loop1): parse_options(): Unrecognized mount option subj_type. 16:29:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x4) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$getregset(0x4204, r1, 0x203, &(0x7f0000000140)={&(0x7f0000000100)=""/60, 0x3c}) getsockopt$inet6_buf(r0, 0x29, 0xff, &(0x7f00000002c0)=""/129, &(0x7f0000000380)=0x81) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [{0x20, 'syz1\x00'}, {0x20, 'eth0security'}, {0x20, 'syz1\x00'}, {0x20, 'loGPL'}, {0x20, "6c6f5c8f5ead7573657273656375726974796574683170707030656d3029"}], 0xa, "1c6f5e930b7a3ca5ce6cdafaa7a38cca71e67ec4c4be319c354e8d0cfe5b034d33bafa17ffecd198f05530555dc85818529e4f6801203705ae9fb9b8e3a6694208d323e20757154aad9bf9f60f803b0fe393dfb0589de7a4a4d9745679c3847ac7a27ad62f873f12364b7819bb24a343e86fd639ea721b41ffb7dadcc65afbf00e6b72283791"}, 0xcf) r2 = fcntl$dupfd(r0, 0x406, r0) openat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xffffffffffffa, 0x12, r0, 0x0) 16:29:09 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_muutiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:09 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getpeername$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x10) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000100)=0x8) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0xffffffffffffff99) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) 16:29:09 executing program 0: clone(0x2000, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000000c0)={r1, 0x2}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, 0xffffffffffffffff, 0x0) eventfd2(0x4, 0x800) 16:29:09 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')se+inuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2107.016898] binder: binder_mmap: 9235 20ff9000-20ffd000 bad vm_flags failed -1 [ 2107.024714] binder_alloc: binder_alloc_mmap_handler: 9231 20002000-20007000 already mapped failed -16 [ 2107.106612] FAULT_INJECTION: forcing a failure. [ 2107.106612] name failslab, interval 1, probability 0, space 0, times 0 [ 2107.130812] CPU: 1 PID: 9255 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #74 [ 2107.138055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2107.138088] Call Trace: [ 2107.150045] dump_stack+0x1c4/0x2b6 [ 2107.153699] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2107.158919] ? __mutex_lock+0x85e/0x1700 [ 2107.163000] should_fail.cold.4+0xa/0x17 [ 2107.163024] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2107.163041] ? graph_lock+0x170/0x170 [ 2107.163063] ? snd_pcm_oss_look_for_setup+0x1b8/0x310 [ 2107.181200] ? graph_lock+0x170/0x170 [ 2107.185017] ? lock_downgrade+0x900/0x900 [ 2107.185037] ? graph_lock+0x170/0x170 [ 2107.185054] ? find_held_lock+0x36/0x1c0 [ 2107.197070] ? find_held_lock+0x36/0x1c0 [ 2107.201145] ? __lock_is_held+0xb5/0x140 [ 2107.205247] ? ___might_sleep+0x1ed/0x300 [ 2107.209417] ? arch_local_save_flags+0x40/0x40 [ 2107.214014] ? kasan_check_write+0x14/0x20 [ 2107.219180] __should_failslab+0x124/0x180 [ 2107.223432] should_failslab+0x9/0x14 [ 2107.227255] kmem_cache_alloc_trace+0x2d7/0x750 [ 2107.231959] snd_pcm_oss_open+0x7ea/0x17a0 [ 2107.236226] ? check_preemption_disabled+0x48/0x280 [ 2107.241270] ? snd_pcm_oss_release_file.part.23+0xa0/0xa0 [ 2107.246821] ? graph_lock+0x170/0x170 [ 2107.250640] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 2107.255937] ? rcu_bh_qs+0xc0/0xc0 [ 2107.259490] ? graph_lock+0x170/0x170 [ 2107.263311] ? find_held_lock+0x36/0x1c0 [ 2107.267386] ? wake_up_q+0x100/0x100 [ 2107.271114] ? m_show+0x5d0/0x5d0 [ 2107.274583] ? soundcore_open+0x44f/0x6d0 [ 2107.278757] ? lock_downgrade+0x900/0x900 [ 2107.282930] ? do_raw_spin_unlock+0xa7/0x330 [ 2107.287356] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2107.291956] ? kasan_check_write+0x14/0x20 [ 2107.296203] ? do_raw_spin_lock+0xc1/0x230 [ 2107.300465] ? snd_pcm_oss_release_file.part.23+0xa0/0xa0 [ 2107.306028] soundcore_open+0x508/0x6d0 [ 2107.310021] ? sound_devnode+0xf0/0xf0 [ 2107.313921] chrdev_open+0x25a/0x710 [ 2107.317650] ? cdev_put.part.0+0x50/0x50 [ 2107.321738] ? errseq_sample+0xe5/0x130 [ 2107.325751] do_dentry_open+0x499/0x1250 [ 2107.329831] ? selinux_capable+0x40/0x40 [ 2107.333906] ? cdev_put.part.0+0x50/0x50 [ 2107.337983] ? chown_common+0x730/0x730 [ 2107.341976] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2107.347530] ? security_inode_permission+0xd2/0x100 [ 2107.352574] ? inode_permission+0xb2/0x560 [ 2107.356831] vfs_open+0xa0/0xd0 [ 2107.360126] path_openat+0x12bf/0x5160 [ 2107.364027] ? rcu_bh_qs+0xc0/0xc0 [ 2107.367576] ? unwind_dump+0x190/0x190 [ 2107.371498] ? path_lookupat.isra.43+0xc00/0xc00 [ 2107.376277] ? unwind_get_return_address+0x61/0xa0 [ 2107.381222] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2107.386264] ? expand_files.part.8+0x571/0x9a0 [ 2107.390871] ? find_held_lock+0x36/0x1c0 [ 2107.394959] ? __alloc_fd+0x347/0x6e0 [ 2107.398777] ? lock_downgrade+0x900/0x900 [ 2107.402944] ? getname+0x19/0x20 [ 2107.406328] ? kasan_check_read+0x11/0x20 [ 2107.410496] ? do_raw_spin_unlock+0xa7/0x330 [ 2107.414918] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2107.419517] ? __lock_is_held+0xb5/0x140 [ 2107.423604] ? _raw_spin_unlock+0x2c/0x50 [ 2107.427767] ? __alloc_fd+0x347/0x6e0 [ 2107.431588] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2107.437159] do_filp_open+0x255/0x380 [ 2107.440983] ? may_open_dev+0x100/0x100 [ 2107.445000] ? get_unused_fd_flags+0x122/0x1a0 [ 2107.449604] ? __alloc_fd+0x6e0/0x6e0 [ 2107.453429] do_sys_open+0x568/0x700 [ 2107.457159] ? filp_open+0x80/0x80 [ 2107.460725] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2107.466196] __x64_sys_open+0x7e/0xc0 [ 2107.470024] do_syscall_64+0x1b9/0x820 [ 2107.473929] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2107.479307] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2107.484256] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2107.489122] ? trace_hardirqs_on_caller+0x310/0x310 [ 2107.494162] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2107.499198] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2107.504246] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2107.509115] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2107.514315] RIP: 0033:0x4111a1 [ 2107.517525] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2107.536443] RSP: 002b:00007fbbc769e7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2107.544185] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 2107.551486] RDX: 0000000000000000 RSI: 0000000000004002 RDI: 00007fbbc769e850 16:29:10 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_mu+tiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2107.558768] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 2107.566055] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fbbc769f6d4 [ 2107.573339] R13: 00000000004c4bde R14: 00000000004d7f80 R15: 0000000000000004 16:29:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x800003, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/user\x00', 0x2, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) 16:29:10 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000004, 0xfffffffffffffffe) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a00)="c1aa7654722693a247518373c09482f3c604197189ba0b2ec763f34e1de6edc9d6c9fcb559b964291c19f6008881b79da91ad7b15745014cb2ee292f14b7403ca06d0293c00ac0c35bfd293131c83bae6b5deb7cb8c6fdfff731ec", 0x5b}, {&(0x7f0000000a80)="b6c3ba0ae597119cb764d031d1f558dd112c1ad546a17f6087619f5940be3129f814dabbb4f61ce25c16f3e22b24e81c3730451041673a154c7b903621efc987e61eb0a4701c227d9f6b4ee4d857be095ff99642553b1437ec667facae11c72d519415bb215a3d1f94f1a17e7e180ae4310ed27398f8acaef5d0367dc160d47dee4e3bba1f2ea7f1fe24cd4dd13fa55785af070b9671f64ff16199d927cc51aa26ddf70b33977be1240ddd94d5e83ef26bcea8fae99c2a184a41e3126f1121427658b1d283c115b3efd8a4c7d755fa44783d1115e01e62c9d0e84d72d60504252183cec5182edda5321e808a044f8b8a1d", 0xf1}, {&(0x7f0000000b80)="cfefed6f9327ed024d6ac533ed7313bda29e874434cbc63facfc7d562a10966c741bbb4083d104968fa0bdb3c66e78e86b64c936425215cc10a4b627dc84b795ab9ab1892dfc234fedd2b9075d83e796ab787facd53ea59611bdd5c2e2e31a8178ba4cc8c777621c894561d99464e360ed06969cb1aca031b3cf2a023808d501b4fb1987a296382b8f5d1791efb1bf3a9c767aedfd205bce06454f965799dae58057d778fa6a266da3aba2ca8820d39e4ce6dc959f166737dd873f08c5c6e381e6119466b3a369857ffe42b8065e7cee994524955fe43fe5dc9e6187f1e5b31d982ef80dcc", 0xe5}, {&(0x7f0000000c80)="19b45851f46aa3a56593921a0dc9dbe14f7be4f3c9766b4ee2f1944a1b33a44537437680e5deaf263a42168112db7871760eff4727b4782d2f2c589373fb2eba8ec9e26b1f00d99221cdd520699febfa961722755170895099c2aaca82f4403efb255bf7647cf2ba296ca4724d89fa4d811e9af5b5c8e0d212643e7daccc70925e22ae8b859ced00198a56032d97a93411e2227205ae392a016c661dfe5005e1efe5f8221613c489f7d1de769e9678634f777a4fc134c200a2d68bc6688e567dbdcfcd36b4073d4b01a2d477e4484fffc561b402c31f", 0xd6}], 0x4, &(0x7f0000000dc0)=[{0xb8, 0x108, 0x9, "b4919ddb8104dc233029575421e89e89e374c7d9d214e746f41a6696610145b11b4fd52ca0d34c4020f6319914c516bf0bde01fc7639165ce2847ca7a302ada1250ad0c1829ee55dd2b857f9c77a2e7636e14f8ed898c2645a60c3f6ede883975076a0d886fbee45df476b17c3050f880e5ba93015bab18397a608b612c1009b3c44f92035a17e7668dce9037e458d87af78fb1462c1a917dc389a3a8b47b847518868c986"}, {0xf0, 0x3a, 0x605fc1c3, "9b1c09621bd4cad9d5312d38d5cf95e8e17d97a48fcba2a870131c1685a60dd5a7cea96f24a95a0b72c1e56536097fd7d3a9ca6e79228260050e24673a9392af19cf88b6054e6a9bee4764d844263a4866a77f502f70fdce749c5075e674a7ed9a72dd3600f6abd3c08f7fb145b61ad22586146e8a6133f13ac1646746954872e8af11202a23b81a615807b770b98994fed49ac220f3f1829ae3df808aedaaebd0b34369b07ac3865bc17e4678712e3d40cb7d72dee7f9ba4402dbca86e41e415b53f61f29e752ab0e5feedcba68da02c64cd57b4e439ea56f"}, {0x78, 0x0, 0x2, "6e179312c1830f8e49b58904079557ab3a9c03c098ee1312ac0156b78f793ce0f7b5afc92d1b6e772d9ae6714798d975af2a30f1f53378c02cc450f845e7596acd31663995259db051183ce09d72519988d2dbc91ba7946d0e6784d0ff359fb37cddd2b7"}, {0x30, 0x0, 0x9, "174c07d0a2405b519732987c76ba669940f7a0d181bc968efb1f7a7d405adf"}, {0x80, 0x104, 0x1, "496938f3cf29c005dc06e887b64516289b80913e223714cbfd7926fa13c2ff9a9d63b057cc1824bb4db361fd75223ebceda05cfa28263e7f47c652b81f8ce1a41bda7da91dcf5be5f51612e064b8d2016050a603217ca233f36efb26425f4ade84452224049bc546dbfe3c86"}, {0x58, 0x119, 0x8, "0262ef60c83d03547565cb197cd708772bbfe656243043fc005e205ce501fb2f98a62d2f51c2dce5fb8f109832327d3d23f4cdf0c9ef2f60aec797fdea8a822c608d3c3e07"}, {0xf0, 0x111, 0x6e, "a0eb599986b45b32eab701b5e220b5c6afd65968ff2636ed777a2ae7a139932f5e03c2bb345569eb760b3527c960d15146504f7abe8e44604c5f3ffe0e3c9002e668b43e8da9ce207e61ebdf0b4f9e29d9a897d886d15600d8c8762eaaa4f979b5c9c3e5cc02dd00622d9b89e5c8889cf3536d22f433b12de5200d3089f1d2e09dcd2c19b9a388b91538b564ab5a2eefd3ea2e0b7b2a816bc6ecc43c22b50e4ab6c4141ca3801c516618643fdc4cd994bd255944af99fea7e0c9b262fe2b947033ad4dc0130ba7b3ce38ec26dbfb1d81e85afd2622a1a222e3fa18655ec0cc"}, {0x18, 0x0, 0x4, "cd4d3a1ff720"}], 0x430, 0x50}, 0x10) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000700)=0x0) timer_create(0x3, &(0x7f0000000980)={0x0, 0x2, 0x3, @tid=r3}, &(0x7f00000009c0)) r4 = getuid() fstat(r2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000880)={0x1, 0x100000000, 0x0, 0xf4, 0x8, 0x4, 0xddf1, 0x5, 0x0}, &(0x7f00000008c0)=0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000900)={r6, 0x6}, &(0x7f0000000940)=0x8) sendmsg$unix(r0, &(0x7f0000000840)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f00000001c0)="540fcd5ad9e8fa60ac4627ff251512e8cd2caf17d2ff675341120a0849cb62eec97382767d9e87dab56035ca4670d0327824925b9489ab903b62912c0f194649aee22c74a5e0c681a841ece775546844fb06464f72ae9a4468a44bec4153e2d30ea882d302cc880da703ac8f6866adc5f5cf7be14b2ba1a1a499e4c204993dacb17a0640652fc7e29faf5cd217baa43509ce4d6c749d0b3ddd305dc04114241937d9c4d268500110e0aecfbb19929401", 0xb0}, {&(0x7f0000000280)="fec3c9ee1e79044a002fc95d2db05d4180e692bd8a454167dc5720c594ea734c0c3434e00f90e8cc69b1f384e42cccd2a7dd34a583bb17c4a1a8f7a98192422a21bebaca71ecdcef5b40ca498dc6439e07f3b15818117a2b577f8f80dd6562d296f125bedc0390d628327fe06edfe738113a4df30ee18908515d4c5df29493e24004", 0x82}, {&(0x7f0000000340)="7956393ec4c151e2319dda061e5cebcbaaabcaebea72b048430242ec2bc1fa4702130e150aa618608827efc3ce038eb855049ffbda64be4a04e25d892c9552b15a071566037db5b4933e72837f78a4763dd864f1ddbeeee8436b3fba10bc8f674ea91baaa8f3ce34fbbc25a9a5bf8fb78b0ca31e7972e7f1c2a5d4ebe02255d0b718ca3e26208cf8b3a65d47222b3a42165817372493e58cc9bfbd4057d937e661aed3f8671d63", 0xa7}, {&(0x7f0000000400)="4fc0ff10c1b82e8b83aebb2c8f53efa34ebd5269a1aa885e164b119b520bd3e2706f86e6cee908b51c4e01da0e4126126891d429ff98e55be7040f11383af3bee959cc7152eef1a1cdb41e440700a258962d05a3d638839d6f2903ef8340fa35fe55392bb2ef42c0bd8ce2c126d995d02375035c5348", 0x76}, {&(0x7f0000000480)="5ed8d1230457105d1bd52621a68e2a12332b1d8ee68d373fc2c23656d0ca600de9c63c5287bd8659da27b37007118fd15cd6d4b02dd92599060c2a08e0d9cf05730b24089dcb6fdfe59ad73d38a93b9090ff1137ca3a420c97574004f85cd6f9e5725c45f5994578d7b76830fdd464a732a5d3e681c72f88a873c4cddedcfa1b1bd062409606cf0022701fbcd695bd80eab20c536d65eee3c45e0a4e9ee88b4bc5c2e046c72db475b60d537a8259581a2fdea69c7da956e03438740547ee52b64b175e08be9f68934f2392b345da4d383e25d5a523ad40cb1e8ead81e2d6be0b7ea7", 0xe2}, {&(0x7f0000000580)="cc75ff7361ab26924f483e1721ad7016832456bd0f049c9fcb311bfd562b4eed1d33d816265c7565c3724561ed59ae896729a64f", 0x34}, {&(0x7f00000005c0)='$7', 0x2}, {&(0x7f0000000600)="b20b8c6ecdc6487a0fb545385ad2b16a36232fe61aa0c65dcfc85be95d4bce951e27b7e1cab32cb763f7f6b38ba3bbefe6bb6c4ba00d5c0ba6951f404bb7509b371772bf", 0x44}], 0x8, &(0x7f00000007c0)=[@rights={0x18, 0x1, 0x1, [r1, r0]}, @rights={0x20, 0x1, 0x1, [r1, r0, r1]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}], 0x58, 0x8000}, 0x40800) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) bind$bt_rfcomm(r1, &(0x7f0000001240)={0x1f, {0x3, 0x9, 0x101, 0x6, 0x1, 0x2}, 0x7}, 0xa) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r7, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x8, 0x57d, 0xfff, 0x400, 0x400, 0x939, 0x6, 0x1, 0xa603, 0x8001, 0x4, 0x5, 0x7e}, {0x5, 0xb181, 0x5, 0xfffffffffffffffb, 0x7, 0x29d, 0x4, 0x9, 0x8, 0x3}, {0x8, 0x1, 0x4, 0x9, 0x4, 0x7, 0x67, 0x155, 0x1, 0x9, 0x81, 0x0, 0xfff}], 0x2}) [ 2107.610426] binder_alloc: binder_alloc_mmap_handler: 9231 20002000-20007000 already mapped failed -16 16:29:10 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, "297365c8696e7578766d6e65743147504c"}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2107.662850] binder: binder_mmap: 9266 20002000-20007000 bad vm_flags failed -1 16:29:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b05, 0x12, r0, 0x0) 16:29:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) epoll_pwait(r1, &(0x7f0000000180)=[{}, {}], 0x2, 0x3f, &(0x7f00000001c0)={0x7}, 0x8) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x4000, 0x0) sendto$inet(r2, &(0x7f0000000040)="8c160a2ca3dcad5a98c078f1a42003f51068ab95e253c8", 0x17, 0x4, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) 16:29:10 executing program 4 (fault-call:2 fault-nth:6): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:29:10 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_mu*tiplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:10 executing program 3: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f00000000c0)={0x5, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e22, @multicast2}, 0x50, 0x5, 0x1f, 0x0, 0x4277, &(0x7f0000000080)='ip6_vti0\x00', 0x1, 0x100000000, 0x4}) socketpair(0x0, 0x0, 0x100000, &(0x7f0000000140)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) [ 2107.835991] binder: binder_mmap: 9284 20002000-20007000 bad vm_flags failed -1 16:29:10 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, "29736514696e7578766d6e65743147504c"}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2107.878596] binder: binder_mmap: 9284 20002000-20007000 bad vm_flags failed -1 16:29:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x0, &(0x7f0000000100)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x4000, 0x0) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f00000000c0)={0x6, 0x3}) [ 2107.923220] binder_alloc: binder_alloc_mmap_handler: 9291 20002000-20007000 already mapped failed -16 16:29:10 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_mul"iplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2108.001349] binder: 9305:9311 ioctl 0 20000100 returned -22 [ 2108.011195] binder: binder_mmap: 9305 20002000-20007000 bad vm_flags failed -1 [ 2108.022945] binder: 9314:9314 ioctl 0 20000100 returned -22 16:29:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x4000) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) 16:29:11 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')seXinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2108.051203] FAULT_INJECTION: forcing a failure. [ 2108.051203] name failslab, interval 1, probability 0, space 0, times 0 [ 2108.087714] binder_alloc: binder_alloc_mmap_handler: 9291 20002000-20007000 already mapped failed -16 16:29:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x4, 0x400000) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000001c0)=0x49c3, 0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x4) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000140)=0x4) syz_open_procfs(r1, &(0x7f0000000000)='setgroups\x00') [ 2108.119357] binder: binder_mmap: 9324 20002000-20007000 bad vm_flags failed -1 [ 2108.140949] CPU: 0 PID: 9319 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #74 [ 2108.148207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2108.157577] Call Trace: [ 2108.160191] dump_stack+0x1c4/0x2b6 [ 2108.163853] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2108.169085] should_fail.cold.4+0xa/0x17 [ 2108.173187] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2108.178317] ? graph_lock+0x170/0x170 [ 2108.182134] ? kernel_text_address+0x79/0xf0 [ 2108.186554] ? graph_lock+0x170/0x170 [ 2108.186571] ? unwind_get_return_address+0x61/0xa0 [ 2108.186592] ? __save_stack_trace+0x8d/0xf0 [ 2108.186616] ? find_held_lock+0x36/0x1c0 [ 2108.186635] ? __lock_is_held+0xb5/0x140 [ 2108.186661] ? ___might_sleep+0x1ed/0x300 [ 2108.195403] ? arch_local_save_flags+0x40/0x40 [ 2108.195420] ? lock_release+0x970/0x970 [ 2108.195439] ? find_held_lock+0x36/0x1c0 [ 2108.195462] __should_failslab+0x124/0x180 [ 2108.195483] should_failslab+0x9/0x14 [ 2108.195503] kmem_cache_alloc_trace+0x2d7/0x750 [ 2108.238046] ? _raw_read_unlock+0x2c/0x50 [ 2108.242212] ? snd_ctl_get_preferred_subdevice+0x139/0x190 [ 2108.247861] snd_pcm_attach_substream+0x43f/0xc00 [ 2108.252748] snd_pcm_open_substream+0x99/0x400 [ 2108.257352] ? snd_pcm_hw_constraints_complete+0x6a0/0x6a0 [ 2108.262999] snd_pcm_oss_open+0x964/0x17a0 [ 2108.267267] ? snd_pcm_oss_release_file.part.23+0xa0/0xa0 [ 2108.272831] ? graph_lock+0x170/0x170 [ 2108.276651] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 2108.281969] ? rcu_bh_qs+0xc0/0xc0 [ 2108.285547] ? graph_lock+0x170/0x170 [ 2108.289390] ? find_held_lock+0x36/0x1c0 [ 2108.293468] ? wake_up_q+0x100/0x100 [ 2108.297197] ? m_show+0x5d0/0x5d0 [ 2108.300660] ? soundcore_open+0x44f/0x6d0 [ 2108.304819] ? lock_downgrade+0x900/0x900 [ 2108.308990] ? do_raw_spin_unlock+0xa7/0x330 [ 2108.313415] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2108.318013] ? kasan_check_write+0x14/0x20 [ 2108.322259] ? do_raw_spin_lock+0xc1/0x230 [ 2108.326509] ? snd_pcm_oss_release_file.part.23+0xa0/0xa0 [ 2108.332064] soundcore_open+0x508/0x6d0 [ 2108.336059] ? sound_devnode+0xf0/0xf0 [ 2108.339964] chrdev_open+0x25a/0x710 [ 2108.343694] ? cdev_put.part.0+0x50/0x50 [ 2108.347782] ? errseq_sample+0xe5/0x130 [ 2108.351782] do_dentry_open+0x499/0x1250 [ 2108.355857] ? selinux_capable+0x40/0x40 [ 2108.359929] ? cdev_put.part.0+0x50/0x50 [ 2108.364006] ? chown_common+0x730/0x730 [ 2108.367994] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2108.373546] ? security_inode_permission+0xd2/0x100 [ 2108.378579] ? inode_permission+0xb2/0x560 [ 2108.382830] vfs_open+0xa0/0xd0 [ 2108.386126] path_openat+0x12bf/0x5160 [ 2108.390026] ? rcu_bh_qs+0xc0/0xc0 [ 2108.393579] ? unwind_dump+0x190/0x190 [ 2108.397490] ? path_lookupat.isra.43+0xc00/0xc00 [ 2108.402251] ? unwind_get_return_address+0x61/0xa0 [ 2108.407193] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2108.412221] ? expand_files.part.8+0x571/0x9a0 [ 2108.416828] ? find_held_lock+0x36/0x1c0 [ 2108.420910] ? __alloc_fd+0x347/0x6e0 [ 2108.424740] ? lock_downgrade+0x900/0x900 [ 2108.428898] ? getname+0x19/0x20 [ 2108.432282] ? kasan_check_read+0x11/0x20 [ 2108.436442] ? do_raw_spin_unlock+0xa7/0x330 [ 2108.440867] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2108.445458] ? __lock_is_held+0xb5/0x140 [ 2108.449539] ? _raw_spin_unlock+0x2c/0x50 [ 2108.453697] ? __alloc_fd+0x347/0x6e0 [ 2108.457525] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2108.463085] do_filp_open+0x255/0x380 [ 2108.466901] ? may_open_dev+0x100/0x100 [ 2108.470906] ? get_unused_fd_flags+0x122/0x1a0 [ 2108.475499] ? __alloc_fd+0x6e0/0x6e0 [ 2108.479323] do_sys_open+0x568/0x700 [ 2108.483050] ? filp_open+0x80/0x80 [ 2108.486608] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2108.492074] __x64_sys_open+0x7e/0xc0 [ 2108.495897] do_syscall_64+0x1b9/0x820 [ 2108.499794] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2108.505175] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2108.510115] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2108.514968] ? trace_hardirqs_on_caller+0x310/0x310 [ 2108.519995] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2108.525028] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2108.530064] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2108.534928] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2108.540125] RIP: 0033:0x4111a1 [ 2108.543328] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2108.562232] RSP: 002b:00007fbbc769e7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 16:29:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b06, 0x12, r0, 0x0) [ 2108.569953] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 2108.577229] RDX: 0000000000000000 RSI: 0000000000004002 RDI: 00007fbbc769e850 [ 2108.584502] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 2108.591784] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fbbc769f6d4 [ 2108.599056] R13: 00000000004c4bde R14: 00000000004d7f80 R15: 0000000000000004 16:29:11 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_mul%iplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x600000, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000040)={0x1, 0x1, {0x24, 0x3, 0x12, 0x1, 0x3, 0x5, 0x3, 0xf7, 0x1}}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) [ 2108.627915] binder: binder_mmap: 9328 20002000-20007000 bad vm_flags failed -1 [ 2108.650502] binder: binder_mmap: 9329 20002000-20007000 bad vm_flags failed -1 [ 2108.660047] binder: binder_mmap: 9329 20002000-20007000 bad vm_flags failed -1 [ 2108.688203] binder: binder_mmap: 9336 20002000-20007000 bad vm_flags failed -1 16:29:11 executing program 4 (fault-call:2 fault-nth:7): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:29:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b6c, 0x12, r0, 0x0) 16:29:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x200000, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0xb2) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x40000) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x1000000, 0x10010, r0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000140)=""/66) 16:29:11 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xf, 0x4, 0x7, 0xecf6, 0x2, 0xffffffffffffff9c, 0x100000000}, 0x2c) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000080)={0x7fff, 0x0, 0x6, 0x34, &(0x7f0000000040)=""/52, 0xe1, &(0x7f00000001c0)=""/225, 0xef, &(0x7f00000002c0)=""/239}) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:29:11 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')seLinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:11 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_mul,iplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000040)=""/22) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) [ 2108.818778] binder: binder_mmap: 9347 20002000-20007000 bad vm_flags failed -1 16:29:11 executing program 0: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040)=0x80000000, 0x4) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r1, 0x0) [ 2108.860070] binder: binder_mmap: 9359 20002000-20007000 bad vm_flags failed -1 [ 2108.882558] FAULT_INJECTION: forcing a failure. [ 2108.882558] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2108.902998] binder_alloc: binder_alloc_mmap_handler: 9354 20002000-20007000 already mapped failed -16 [ 2108.907959] binder: binder_mmap: 9367 20002000-20007000 bad vm_flags failed -1 [ 2108.917300] CPU: 0 PID: 9366 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #74 [ 2108.927010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2108.936369] Call Trace: [ 2108.936394] dump_stack+0x1c4/0x2b6 [ 2108.936416] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2108.936446] should_fail.cold.4+0xa/0x17 [ 2108.951897] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2108.951919] ? kasan_check_read+0x11/0x20 [ 2108.951936] ? graph_lock+0x170/0x170 [ 2108.951953] ? rcu_bh_qs+0xc0/0xc0 [ 2108.951973] ? graph_lock+0x170/0x170 [ 2108.972365] ? rcu_bh_qs+0xc0/0xc0 [ 2108.975916] ? unwind_dump+0x190/0x190 [ 2108.979837] ? __lock_is_held+0xb5/0x140 [ 2108.983921] ? ___might_sleep+0x1ed/0x300 [ 2108.988082] ? lock_release+0x970/0x970 [ 2108.992071] ? arch_local_save_flags+0x40/0x40 [ 2108.996669] ? save_stack+0xa9/0xd0 [ 2109.000313] ? __might_sleep+0x95/0x190 [ 2109.004305] __alloc_pages_nodemask+0x34b/0xde0 [ 2109.008989] ? __alloc_pages_slowpath+0x2d70/0x2d70 [ 2109.014016] ? graph_lock+0x170/0x170 [ 2109.017834] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2109.023388] ? check_preemption_disabled+0x48/0x280 [ 2109.028417] ? check_preemption_disabled+0x48/0x280 [ 2109.033453] ? __lock_is_held+0xb5/0x140 [ 2109.037534] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2109.043086] alloc_pages_current+0x10c/0x210 [ 2109.047500] ? _raw_read_unlock+0x2c/0x50 [ 2109.051658] __get_free_pages+0xc/0x40 [ 2109.055562] snd_malloc_pages+0x5c/0x80 [ 2109.059554] snd_pcm_attach_substream+0x45f/0xc00 [ 2109.064419] snd_pcm_open_substream+0x99/0x400 [ 2109.069019] ? snd_pcm_hw_constraints_complete+0x6a0/0x6a0 [ 2109.074666] snd_pcm_oss_open+0x964/0x17a0 [ 2109.078932] ? snd_pcm_oss_release_file.part.23+0xa0/0xa0 [ 2109.084476] ? graph_lock+0x170/0x170 [ 2109.088787] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 2109.094074] ? rcu_bh_qs+0xc0/0xc0 [ 2109.097627] ? graph_lock+0x170/0x170 [ 2109.101451] ? find_held_lock+0x36/0x1c0 [ 2109.105522] ? wake_up_q+0x100/0x100 [ 2109.109250] ? m_show+0x5d0/0x5d0 [ 2109.112736] ? soundcore_open+0x44f/0x6d0 [ 2109.116902] ? lock_downgrade+0x900/0x900 [ 2109.121072] ? do_raw_spin_unlock+0xa7/0x330 [ 2109.125497] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2109.130097] ? kasan_check_write+0x14/0x20 [ 2109.134347] ? do_raw_spin_lock+0xc1/0x230 [ 2109.138600] ? snd_pcm_oss_release_file.part.23+0xa0/0xa0 [ 2109.144150] soundcore_open+0x508/0x6d0 [ 2109.148142] ? sound_devnode+0xf0/0xf0 [ 2109.152129] chrdev_open+0x25a/0x710 [ 2109.155857] ? cdev_put.part.0+0x50/0x50 [ 2109.159937] ? errseq_sample+0xe5/0x130 [ 2109.163938] do_dentry_open+0x499/0x1250 [ 2109.168011] ? selinux_capable+0x40/0x40 [ 2109.172082] ? cdev_put.part.0+0x50/0x50 [ 2109.176155] ? chown_common+0x730/0x730 [ 2109.180143] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2109.185696] ? security_inode_permission+0xd2/0x100 [ 2109.190760] ? inode_permission+0xb2/0x560 [ 2109.195016] vfs_open+0xa0/0xd0 [ 2109.198310] path_openat+0x12bf/0x5160 [ 2109.202211] ? rcu_bh_qs+0xc0/0xc0 [ 2109.205765] ? unwind_dump+0x190/0x190 [ 2109.209679] ? path_lookupat.isra.43+0xc00/0xc00 [ 2109.214452] ? unwind_get_return_address+0x61/0xa0 [ 2109.219597] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2109.224625] ? expand_files.part.8+0x571/0x9a0 [ 2109.229229] ? find_held_lock+0x36/0x1c0 [ 2109.233307] ? __alloc_fd+0x347/0x6e0 [ 2109.237120] ? lock_downgrade+0x900/0x900 [ 2109.241277] ? getname+0x19/0x20 [ 2109.244663] ? kasan_check_read+0x11/0x20 [ 2109.248847] ? do_raw_spin_unlock+0xa7/0x330 [ 2109.253274] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2109.257866] ? __lock_is_held+0xb5/0x140 [ 2109.261949] ? _raw_spin_unlock+0x2c/0x50 [ 2109.266126] ? __alloc_fd+0x347/0x6e0 [ 2109.269943] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2109.275504] do_filp_open+0x255/0x380 [ 2109.279317] ? may_open_dev+0x100/0x100 [ 2109.283319] ? get_unused_fd_flags+0x122/0x1a0 [ 2109.287912] ? __alloc_fd+0x6e0/0x6e0 [ 2109.291748] do_sys_open+0x568/0x700 [ 2109.295480] ? filp_open+0x80/0x80 [ 2109.299035] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2109.304505] __x64_sys_open+0x7e/0xc0 [ 2109.308320] do_syscall_64+0x1b9/0x820 [ 2109.312217] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2109.317593] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2109.322531] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2109.327390] ? trace_hardirqs_on_caller+0x310/0x310 [ 2109.332419] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2109.337449] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2109.342483] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2109.347347] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2109.352567] RIP: 0033:0x4111a1 [ 2109.355773] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2109.374679] RSP: 002b:00007fbbc769e7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2109.382412] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 2109.389687] RDX: 0000000000000000 RSI: 0000000000004002 RDI: 00007fbbc769e850 [ 2109.396976] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 2109.404254] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fbbc769f6d4 16:29:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xffffffffffffa, 0x12, r0, 0x4) 16:29:12 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_mulliplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2109.411531] R13: 00000000004c4bde R14: 00000000004d7f80 R15: 0000000000000004 16:29:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x79, r0, 0x0) 16:29:12 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')se#inuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:12 executing program 4 (fault-call:2 fault-nth:8): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:29:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000000c0)=0x0) rt_tgsigqueueinfo(r1, r2, 0x8, &(0x7f0000000140)={0x6, 0x70000, 0x80000001}) r3 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x4, 0x4100) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f00000001c0)={0x2, {0x5, 0x1, 0x8001, 0x4, 0x1, 0x3}}) 16:29:12 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_mul\niplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2109.618549] binder: binder_mmap: 9389 20002000-20007000 bad vm_flags failed -1 16:29:12 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x2, 0x2) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000240), &(0x7f0000000200)=0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0)="a48418ecddcd4f133902065bf4e55b690c62e1482347aa5685aa8b4050abd280411c25aafcebd9f5d0c48b41ae6b67b91ac8c8ef21004f5b35a6ca1b052b83cffc16e9fe3ec9fea5e088bd52bc14df8b16c4bdbab1ab6ea15825dcd775c73dc9cbdb0cf86e6e97648b60432f61746929", &(0x7f00000001c0)="d9677aaf61aef9a43ef5b83d1c60ba33496762eb50eba001e1", 0x2}, 0x20) 16:29:12 executing program 0: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00'}, &(0x7f00000000c0)=0xc) modify_ldt$read_default(0x2, &(0x7f0000000240)=""/78, 0x4e) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)) 16:29:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x2000000) 16:29:12 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')se-inuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:12 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_mult\nplier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2109.727884] FAULT_INJECTION: forcing a failure. [ 2109.727884] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2109.777226] binder_alloc: binder_alloc_mmap_handler: 9411 20002000-20007000 already mapped failed -16 [ 2109.793346] CPU: 1 PID: 9405 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #74 [ 2109.800561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2109.809926] Call Trace: [ 2109.812534] dump_stack+0x1c4/0x2b6 [ 2109.816186] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2109.821403] should_fail.cold.4+0xa/0x17 [ 2109.825480] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2109.830601] ? kasan_check_read+0x11/0x20 [ 2109.834761] ? graph_lock+0x170/0x170 [ 2109.838573] ? rcu_bh_qs+0xc0/0xc0 [ 2109.842132] ? graph_lock+0x170/0x170 [ 2109.845941] ? rcu_bh_qs+0xc0/0xc0 [ 2109.849492] ? unwind_dump+0x190/0x190 [ 2109.850585] binder_alloc: binder_alloc_mmap_handler: 9411 20002000-20007000 already mapped failed -16 [ 2109.853402] ? __lock_is_held+0xb5/0x140 [ 2109.853489] ? xfs_attr3_leaf_to_node+0xea0/0x11c0 [ 2109.853517] ? ___might_sleep+0x1ed/0x300 [ 2109.875968] ? lock_release+0x970/0x970 [ 2109.879958] ? arch_local_save_flags+0x40/0x40 [ 2109.884551] ? __lock_is_held+0xb5/0x140 [ 2109.888634] ? __might_sleep+0x95/0x190 [ 2109.892633] __alloc_pages_nodemask+0x34b/0xde0 [ 2109.897338] ? __alloc_pages_slowpath+0x2d70/0x2d70 [ 2109.902369] ? graph_lock+0x170/0x170 [ 2109.902391] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2109.902411] ? check_preemption_disabled+0x48/0x280 [ 2109.902427] ? check_preemption_disabled+0x48/0x280 [ 2109.902453] ? __lock_is_held+0xb5/0x140 [ 2109.911792] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2109.911813] alloc_pages_current+0x10c/0x210 [ 2109.911828] ? _raw_read_unlock+0x2c/0x50 [ 2109.911848] __get_free_pages+0xc/0x40 [ 2109.911866] snd_malloc_pages+0x5c/0x80 [ 2109.911886] snd_pcm_attach_substream+0x4be/0xc00 [ 2109.911916] snd_pcm_open_substream+0x99/0x400 [ 2109.957335] ? snd_pcm_hw_constraints_complete+0x6a0/0x6a0 [ 2109.962981] snd_pcm_oss_open+0x964/0x17a0 [ 2109.967259] ? snd_pcm_oss_release_file.part.23+0xa0/0xa0 [ 2109.972806] ? graph_lock+0x170/0x170 [ 2109.976625] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 2109.981914] ? rcu_bh_qs+0xc0/0xc0 [ 2109.985501] ? graph_lock+0x170/0x170 [ 2109.989322] ? find_held_lock+0x36/0x1c0 [ 2109.993397] ? wake_up_q+0x100/0x100 [ 2109.997130] ? m_show+0x5d0/0x5d0 [ 2110.000594] ? soundcore_open+0x44f/0x6d0 [ 2110.004758] ? lock_downgrade+0x900/0x900 [ 2110.008930] ? do_raw_spin_unlock+0xa7/0x330 [ 2110.013352] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2110.017950] ? kasan_check_write+0x14/0x20 [ 2110.022198] ? do_raw_spin_lock+0xc1/0x230 16:29:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x3) [ 2110.026459] ? snd_pcm_oss_release_file.part.23+0xa0/0xa0 [ 2110.032010] soundcore_open+0x508/0x6d0 [ 2110.036007] ? sound_devnode+0xf0/0xf0 [ 2110.039911] chrdev_open+0x25a/0x710 [ 2110.043643] ? cdev_put.part.0+0x50/0x50 [ 2110.047731] ? errseq_sample+0xe5/0x130 [ 2110.051746] do_dentry_open+0x499/0x1250 [ 2110.055819] ? selinux_capable+0x40/0x40 [ 2110.055836] ? cdev_put.part.0+0x50/0x50 [ 2110.055857] ? chown_common+0x730/0x730 [ 2110.055875] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2110.055897] ? security_inode_permission+0xd2/0x100 [ 2110.064039] ? inode_permission+0xb2/0x560 [ 2110.064064] vfs_open+0xa0/0xd0 [ 2110.064081] path_openat+0x12bf/0x5160 [ 2110.064098] ? rcu_bh_qs+0xc0/0xc0 [ 2110.064117] ? unwind_dump+0x190/0x190 [ 2110.097658] ? path_lookupat.isra.43+0xc00/0xc00 [ 2110.102426] ? unwind_get_return_address+0x61/0xa0 [ 2110.107366] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2110.112396] ? expand_files.part.8+0x571/0x9a0 [ 2110.116995] ? find_held_lock+0x36/0x1c0 [ 2110.121077] ? __alloc_fd+0x347/0x6e0 [ 2110.124895] ? lock_downgrade+0x900/0x900 [ 2110.129051] ? getname+0x19/0x20 [ 2110.132447] ? kasan_check_read+0x11/0x20 [ 2110.136611] ? do_raw_spin_unlock+0xa7/0x330 [ 2110.141038] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2110.145649] ? __lock_is_held+0xb5/0x140 [ 2110.149810] ? bio_detain_shared+0x130/0x490 [ 2110.154252] ? _raw_spin_unlock+0x2c/0x50 [ 2110.158413] ? __alloc_fd+0x347/0x6e0 [ 2110.162225] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2110.167796] do_filp_open+0x255/0x380 [ 2110.171611] ? may_open_dev+0x100/0x100 [ 2110.175617] ? get_unused_fd_flags+0x122/0x1a0 [ 2110.180210] ? __alloc_fd+0x6e0/0x6e0 [ 2110.184042] do_sys_open+0x568/0x700 [ 2110.187771] ? filp_open+0x80/0x80 [ 2110.191329] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2110.196805] __x64_sys_open+0x7e/0xc0 [ 2110.200628] do_syscall_64+0x1b9/0x820 [ 2110.204528] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2110.209909] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2110.214852] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2110.219712] ? trace_hardirqs_on_caller+0x310/0x310 [ 2110.224758] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2110.229790] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2110.234825] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2110.239688] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2110.244892] RIP: 0033:0x4111a1 [ 2110.248105] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2110.267031] RSP: 002b:00007fbbc769e7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 16:29:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2100001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) r1 = semget(0x2, 0x2, 0x40) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6, 0x2) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f00000000c0)=0x9, 0x4) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000040)=[0x3f, 0x10000, 0x4, 0x9]) [ 2110.274760] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 2110.282038] RDX: 0000000000000000 RSI: 0000000000004002 RDI: 00007fbbc769e850 [ 2110.289318] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 2110.296604] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fbbc769f6d4 [ 2110.303885] R13: 00000000004c4bde R14: 00000000004d7f80 R15: 0000000000000004 16:29:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x48) 16:29:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102002000, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) r1 = dup(r0) accept4(0xffffffffffffff9c, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000000c0)=0x80, 0x800) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@remote, @in=@multicast1, 0x4e24, 0x101, 0x4e20, 0x8, 0xa, 0x80, 0xa0, 0x3c, r2, r3}, {0x8, 0x5, 0x2, 0xffff, 0x80, 0x4, 0x8080, 0x873b}, {0x3, 0x62caef6b, 0xfaca, 0x1a3f8}, 0x200, 0x6e6bb4, 0x1, 0x1, 0x1, 0x3}, {{@in6=@remote, 0x4d3, 0x3f}, 0x2, @in6=@loopback, 0x3501, 0x2, 0x2, 0x3, 0x0, 0x7fff, 0x4}}, 0xe8) [ 2110.338555] binder: binder_mmap: 9428 20002000-20007000 bad vm_flags failed -1 16:29:13 executing program 4 (fault-call:2 fault-nth:9): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:29:13 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_mult"plier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:13 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')se/inuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2110.439971] binder: binder_mmap: 9435 20002000-20007000 bad vm_flags failed -1 [ 2110.472691] binder: binder_mmap: 9435 20002000-20007000 bad vm_flags failed -1 [ 2110.578963] FAULT_INJECTION: forcing a failure. [ 2110.578963] name failslab, interval 1, probability 0, space 0, times 0 [ 2110.591807] CPU: 1 PID: 9457 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #74 [ 2110.599011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2110.608374] Call Trace: [ 2110.610980] dump_stack+0x1c4/0x2b6 [ 2110.614629] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2110.619841] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2110.624962] should_fail.cold.4+0xa/0x17 [ 2110.629033] ? graph_lock+0x170/0x170 [ 2110.632848] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2110.637964] ? graph_lock+0x170/0x170 [ 2110.641778] ? graph_lock+0x170/0x170 [ 2110.645611] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2110.651173] ? check_preemption_disabled+0x48/0x280 [ 2110.656198] ? find_held_lock+0x36/0x1c0 [ 2110.660282] ? __lock_is_held+0xb5/0x140 [ 2110.664369] ? ___might_sleep+0x1ed/0x300 [ 2110.668532] ? arch_local_save_flags+0x40/0x40 [ 2110.673135] __should_failslab+0x124/0x180 [ 2110.677384] should_failslab+0x9/0x14 [ 2110.681201] __kmalloc_track_caller+0x2d0/0x750 [ 2110.685888] ? check_preemption_disabled+0x48/0x280 [ 2110.690922] ? snd_pcm_hw_rule_add+0x460/0x5f0 [ 2110.695520] krealloc+0x65/0xb0 [ 2110.698813] snd_pcm_hw_rule_add+0x460/0x5f0 [ 2110.703245] ? snd_pcm_ioctl_xferi_compat+0x220/0x220 [ 2110.708451] ? snd_pcm_debug_name+0x190/0x190 [ 2110.712952] ? init_wait_entry+0x1c0/0x1c0 [ 2110.717221] snd_pcm_hw_constraints_init+0x4ae/0xd80 [ 2110.722352] snd_pcm_open_substream+0x18b/0x400 [ 2110.727035] ? snd_pcm_hw_constraints_complete+0x6a0/0x6a0 [ 2110.732682] snd_pcm_oss_open+0x964/0x17a0 [ 2110.736953] ? snd_pcm_oss_release_file.part.23+0xa0/0xa0 [ 2110.742520] ? graph_lock+0x170/0x170 [ 2110.746332] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 2110.751618] ? rcu_bh_qs+0xc0/0xc0 [ 2110.755169] ? graph_lock+0x170/0x170 [ 2110.758988] ? find_held_lock+0x36/0x1c0 [ 2110.763054] ? wake_up_q+0x100/0x100 [ 2110.766782] ? m_show+0x5d0/0x5d0 [ 2110.770249] ? soundcore_open+0x44f/0x6d0 [ 2110.774408] ? lock_downgrade+0x900/0x900 [ 2110.778581] ? do_raw_spin_unlock+0xa7/0x330 [ 2110.783000] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2110.787598] ? kasan_check_write+0x14/0x20 [ 2110.791845] ? do_raw_spin_lock+0xc1/0x230 [ 2110.796093] ? snd_pcm_oss_release_file.part.23+0xa0/0xa0 [ 2110.801644] soundcore_open+0x508/0x6d0 [ 2110.805638] ? sound_devnode+0xf0/0xf0 [ 2110.809537] chrdev_open+0x25a/0x710 [ 2110.813270] ? cdev_put.part.0+0x50/0x50 [ 2110.817344] ? errseq_sample+0xe5/0x130 [ 2110.821342] do_dentry_open+0x499/0x1250 [ 2110.825412] ? selinux_capable+0x40/0x40 [ 2110.829483] ? cdev_put.part.0+0x50/0x50 [ 2110.833557] ? chown_common+0x730/0x730 [ 2110.837543] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2110.843094] ? security_inode_permission+0xd2/0x100 [ 2110.848127] ? inode_permission+0xb2/0x560 [ 2110.852378] vfs_open+0xa0/0xd0 [ 2110.855681] path_openat+0x12bf/0x5160 [ 2110.859593] ? rcu_bh_qs+0xc0/0xc0 [ 2110.863139] ? unwind_dump+0x190/0x190 [ 2110.867053] ? path_lookupat.isra.43+0xc00/0xc00 [ 2110.871822] ? unwind_get_return_address+0x61/0xa0 [ 2110.876760] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2110.881790] ? expand_files.part.8+0x571/0x9a0 [ 2110.886389] ? find_held_lock+0x36/0x1c0 [ 2110.890470] ? __alloc_fd+0x347/0x6e0 [ 2110.894280] ? lock_downgrade+0x900/0x900 [ 2110.898433] ? getname+0x19/0x20 [ 2110.901827] ? kasan_check_read+0x11/0x20 [ 2110.906004] ? do_raw_spin_unlock+0xa7/0x330 [ 2110.910424] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2110.915020] ? __lock_is_held+0xb5/0x140 [ 2110.919101] ? _raw_spin_unlock+0x2c/0x50 [ 2110.923265] ? __alloc_fd+0x347/0x6e0 [ 2110.927076] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2110.932645] do_filp_open+0x255/0x380 [ 2110.936459] ? may_open_dev+0x100/0x100 [ 2110.940462] ? get_unused_fd_flags+0x122/0x1a0 [ 2110.945054] ? __alloc_fd+0x6e0/0x6e0 [ 2110.948881] do_sys_open+0x568/0x700 [ 2110.952606] ? filp_open+0x80/0x80 [ 2110.956158] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2110.961624] __x64_sys_open+0x7e/0xc0 [ 2110.965440] do_syscall_64+0x1b9/0x820 [ 2110.969336] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2110.974712] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2110.979660] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2110.984515] ? trace_hardirqs_on_caller+0x310/0x310 [ 2110.989541] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2110.994570] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2110.999602] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2111.004461] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2111.009655] RIP: 0033:0x4111a1 16:29:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x7a00000000000000) 16:29:14 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000080)={@remote}, &(0x7f00000000c0)=0x14) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000040), 0x4) 16:29:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) [ 2111.012857] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2111.031769] RSP: 002b:00007fbbc769e7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2111.039487] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 2111.046764] RDX: 0000000000000000 RSI: 0000000000004002 RDI: 00007fbbc769e850 [ 2111.054039] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 2111.061317] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fbbc769f6d4 [ 2111.068600] R13: 00000000004c4bde R14: 00000000004d7f80 R15: 0000000000000004 16:29:14 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')se\\inuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:14 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_mult%plier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2111.118287] binder: binder_mmap: 9459 20002000-20007000 bad vm_flags failed -1 [ 2111.139911] binder_alloc: binder_alloc_mmap_handler: 9458 20002000-20007000 already mapped failed -16 [ 2111.157182] binder: binder_mmap: 9459 20002000-20007000 bad vm_flags failed -1 16:29:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) [ 2111.191739] __ntfs_error: 102 callbacks suppressed [ 2111.191750] ntfs: (device loop1): parse_options(): Unrecognized mount option subj_type. [ 2111.211777] ntfs: (device loop2): parse_options(): Unrecognized mount option mft_zone_mult%plier. [ 2111.234690] ntfs: (device loop2): parse_options(): Unrecognized mount option subj_type. [ 2111.249416] ntfs: (device loop1): parse_options(): Unrecognized mount option subj_type. [ 2111.260467] binder_alloc: binder_alloc_mmap_handler: 9458 20002000-20007000 already mapped failed -16 [ 2111.270788] ntfs: (device loop2): parse_options(): Unrecognized mount option dont_hash. [ 2111.280035] ntfs: (device loop2): parse_options(): Unrecognized mount option fu. 16:29:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x26, 0x6, @thr={&(0x7f0000000000)="8c5f0e03c341173ef403c046a08d1c54624cc4b986f344b0357bd5cd6ca0d0d6d961e565ddad4889f3cbfa9d915433e1e093cced52fcf7cfbe34aa513ee6df7ac2c92b8a8d207ed0e29a14ec93f4981bd991fc583a26", &(0x7f0000000140)="9f996b051faaee21fe31acd96cb6d9f356f8f71602d19029c22db47bd2d9ee887dfd933966f4bf4ce380d6e53f0300c00967c9b29b7d7b73ad43a0f30b75b0c2929ed9b99d04c895a1bad118f223280f4e1210d45a016dfca8ff7e2f2361a7595a2c3b2406a19b59a88cdb205cc5bc5669529c16"}}, &(0x7f00000001c0)=0x0) timer_gettime(r1, &(0x7f0000000200)) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) [ 2111.288836] binder: binder_mmap: 9480 20002000-20007000 bad vm_flags failed -1 16:29:14 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')seuinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0xfffffffffffffffc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000140)={'syz1\x00', {0x9899, 0x200, 0x0, 0x3ff}, 0x4, [0x35, 0x8, 0x100, 0xffff, 0x7, 0x0, 0x5, 0x306, 0x5, 0x3, 0x9, 0x0, 0x4, 0x6, 0xffffffffffffff04, 0x5, 0x9, 0x0, 0x4, 0x0, 0x1, 0x5, 0x7314, 0xfffffffffffffffc, 0x5, 0x2, 0x6, 0x8001, 0x19d6, 0x100000001, 0xb0c3, 0x8001, 0x1, 0xd3, 0x9, 0x80, 0x1, 0x6, 0x2, 0x5, 0x2, 0x998, 0x2, 0x7, 0x1, 0x6, 0x401, 0xfffffffffffffff7, 0x80, 0xfffffffffffffffd, 0x18, 0x7, 0x8000, 0x10000, 0x6, 0x8000, 0xffff, 0x8001, 0x4, 0x1, 0x80000001, 0x3f, 0x9, 0x4], [0x3ff, 0xf0ac, 0x0, 0xf13, 0x1, 0x40, 0x80000001, 0xb1, 0x6, 0x26d, 0x7, 0x7, 0x0, 0x7, 0x80, 0x7f, 0x361, 0x1, 0x20, 0x0, 0x4, 0x100000000, 0x8, 0x401, 0x80000001, 0x6, 0xffffffffffffffff, 0x2, 0x7719f823, 0xfffffffffffff5de, 0x100000001, 0x4, 0x2, 0x0, 0x0, 0x8001, 0x800, 0x80000001, 0x0, 0x100000001, 0x4, 0x29c, 0x0, 0x80000000, 0x3, 0x100000001, 0xfff, 0x61, 0x80000001, 0xf69, 0x0, 0x2, 0x7f, 0x8000, 0x3, 0x80000000, 0x0, 0xffffffffffffc3a0, 0xb7, 0x0, 0x8, 0x7, 0x6, 0x3], [0x5f09, 0x800, 0x80000001, 0x7fff, 0xfffffffffffffff7, 0x3, 0x9, 0x3ff, 0x10000000000000, 0x1, 0x100000000, 0x6, 0x1, 0x2, 0x7fffffff, 0x1000, 0x8000, 0x3, 0x401, 0x8001, 0x2, 0x3, 0x7ff, 0x9, 0x1, 0x3, 0x800, 0x200, 0xfffffffffffffffd, 0x7f, 0x8, 0xbeac, 0x800000000000000, 0x8, 0x7, 0x5, 0x7fffffff, 0xfffffffffffff800, 0x0, 0x40400000000000, 0xeb8c81c, 0x5, 0xa00, 0x9, 0x401, 0x7, 0x5, 0x1, 0x1000, 0x1bd1, 0x800, 0x4, 0x401, 0x80000001, 0x323, 0x841e, 0x8000, 0x2, 0x6, 0x7, 0x1f, 0x1, 0x6, 0x3ff], [0xff, 0x2, 0x0, 0x7, 0x7dd7, 0x6, 0xfffffffffffffffa, 0xfffffffffffffffb, 0x400, 0x200, 0xfffe000000000, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x4, 0x4, 0x6, 0xffffffffffff6d51, 0xa8, 0x6, 0x961, 0x800, 0x6, 0xfffffffffffffffb, 0x8, 0x800, 0xffffffffffffb89c, 0x7, 0x1, 0x6, 0x800, 0x300a, 0x2, 0xaccb, 0x6, 0x100, 0x9, 0x2, 0x7ff, 0x800, 0xaba, 0x8000, 0x7f, 0x9, 0x3, 0x1ff, 0x0, 0x80000001, 0x7, 0x9, 0x0, 0x8, 0x52f2, 0x100000000, 0x0, 0x6, 0x5, 0xfffffffffffffffa, 0x4, 0x2, 0x7]}, 0x45c) [ 2111.355074] binder: binder_mmap: 9486 20002000-20007000 bad vm_flags failed -1 [ 2111.381501] ntfs: (device loop2): parse_options(): Unrecognized mount option mft_zone_mult%plier. [ 2111.394620] ntfs: (device loop1): parse_options(): Unrecognized mount option subj_type. 16:29:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:29:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x101, 0x2) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000140)={0x1, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e21, @multicast1}}}, 0x108) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000040)=0x4, 0x4) 16:29:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x6b6b6b00000000) [ 2111.415182] ntfs: (device loop2): parse_options(): Unrecognized mount option subj_type. [ 2111.437064] ntfs: (device loop2): parse_options(): Unrecognized mount option dont_hash. 16:29:14 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_mult,plier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2111.524417] binder: binder_mmap: 9502 20002000-20007000 bad vm_flags failed -1 [ 2111.557377] binder_alloc: binder_alloc_mmap_handler: 9503 20002000-20007000 already mapped failed -16 [ 2111.567951] binder: binder_mmap: 9502 20002000-20007000 bad vm_flags failed -1 [ 2111.609300] binder_alloc: binder_alloc_mmap_handler: 9503 20002000-20007000 already mapped failed -16 16:29:14 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40, 0x0) r0 = socket$inet(0x2, 0x4000000008000001, 0x6cd) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:29:14 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')se|inuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4002, 0x0) write$P9_RLOCK(r1, &(0x7f0000000040)={0x8, 0x35, 0x2}, 0x8) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) 16:29:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0xd000000) 16:29:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='5dev/audio#\x00', 0x1, 0x4002) 16:29:14 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multi.lier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x71, 0x200000) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000040)=0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f0000000140)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f0000000200)}, 0x8000) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)="2e00000000000000b9900000020000d5db1d897a9d315ac31af79077cf098f3b", 0x20}], 0x1, &(0x7f0000000100)}, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) [ 2112.062438] binder: binder_mmap: 9521 20002000-20007000 bad vm_flags failed -1 16:29:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x10200, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000140)=""/74) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) [ 2112.103802] binder_alloc: binder_alloc_mmap_handler: 9522 20002000-20007000 already mapped failed -16 [ 2112.116164] binder_alloc: binder_alloc_mmap_handler: 9522 20002000-20007000 already mapped failed -16 [ 2112.135036] binder: binder_mmap: 9538 20002000-20007000 bad vm_flags failed -1 16:29:15 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multi"lier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:15 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')sel,nuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) pselect6(0x40, &(0x7f00000002c0)={0x6c18af13, 0x7ff, 0x800, 0x9, 0x9, 0x6eb7bf45, 0x2, 0xfffffffffffffff8}, &(0x7f00000005c0)={0x0, 0x81, 0x2, 0x0, 0x7f, 0x5a60, 0x5, 0x4}, &(0x7f0000000600)={0x9, 0x80000000, 0x4, 0x2, 0x0, 0xb854, 0x400, 0x2}, &(0x7f0000000640)={0x77359400}, &(0x7f00000006c0)={&(0x7f0000000680)={0xfff}, 0x8}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x10c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {{0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000140)=[@flat={0x776a2a85, 0xa, r2, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0), 0x1, 0x4, 0x1e}], &(0x7f0000000180)=[0x0]}, 0xffffffffffff0000}}, @increfs={0x40046304, 0x3}, @reply={0x40406301, {0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58, 0x10, &(0x7f0000000200)=[@ptr={0x70742a85, 0x1, &(0x7f00000001c0), 0x1, 0x0, 0x10}, @fd={0x66642a85, 0x0, r1, 0x0, 0x2}, @fd={0x66642a85, 0x0, r1, 0x0, 0x1}], &(0x7f0000000280)=[0x38, 0x30]}}, @clear_death={0x400c630f, 0x0, 0x4}, @decrefs={0x40046307, 0x4}, @transaction={0x40406300, {0x3, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x0, 0x50, &(0x7f00000002c0), &(0x7f0000000300)=[0x20, 0x30, 0x38, 0x38, 0x18, 0x40, 0x78, 0x38, 0x78, 0x38]}}, @increfs_done={0x40106308, r3, 0x2}, @exit_looper], 0x54, 0x0, &(0x7f0000000500)="ce9dd4443fe48b40d4ec9d654b9fb801b44e8adda56c35dff1249be5a8b49c15f4a632da2535d12fd38e4cf665f0cc056af9ecdcd048d650760378d1c1a1bdbddcce43682090d65f87d44d275e2805c89daac9ed"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) 16:29:15 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x1e}, @remote}, 0x8) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) [ 2112.194687] binder: binder_mmap: 9545 20002000-20007000 bad vm_flags failed -1 16:29:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) 16:29:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x6c000000) 16:29:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/.ev/audio#\x00', 0x1, 0x4002) [ 2112.263019] binder: 9560:9563 got transaction to invalid handle [ 2112.274820] binder: 9560:9563 transaction failed 29201/-22, size 64-8 line 2855 16:29:15 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multi#lier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2112.310670] binder_alloc: binder_alloc_mmap_handler: 9568 20002000-20007000 already mapped failed -16 16:29:15 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')sel\nnuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffe) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xde, 0x3) clone(0x20000, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r1 = mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000400)={r1}) [ 2112.366291] binder: binder_mmap: 9570 20002000-20007000 bad vm_flags failed -1 [ 2112.388558] binder: binder_mmap: 9570 20002000-20007000 bad vm_flags failed -1 16:29:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x4000000) 16:29:15 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')sel"nuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:15 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiXlier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) write(r0, &(0x7f00000000c0)="8c19cafbe9854540a556f3932326ba36171d822a54f139033c153ce8259637a11ccbcd9febd5899b783306c2c19a0a6da6966f18e0ae95d48e74f96dd39d82c1665449d37ad25488c843c11d77118ffa8e6d58df236c84a7a628c1a706c5a0de827cc73c35da5fa831ebfc3fbe8a41", 0x6f) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) 16:29:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='//ev/audio#\x00', 0x1, 0x4002) 16:29:16 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)={0x0, @speck128, 0x3, "67dc5a9954f1515e"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:29:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r1, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) accept(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000200)=0x80) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0x15}, 0x6}, {0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x4, [0xbf9e, 0x6, 0x3, 0x100, 0x3, 0xe3ee, 0x4, 0x9]}, 0x5c) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) 16:29:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x700) 16:29:16 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multidlier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:16 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')sel%nuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/d/v/audio#\x00', 0x1, 0x4002) 16:29:16 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3f, 0x4000) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) memfd_create(&(0x7f00000003c0)='cpusetcgroup{self*proctrusted\x00', 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x90002, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r1, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000200)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, [@generic={0x2, 0x101, 0xb6c, 0x3}]}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x1b, &(0x7f00000001c0)=""/27, 0x40f00, 0x1, [], r2, 0x6}, 0x48) [ 2113.145578] binder: binder_mmap: 9620 20002000-20007000 bad vm_flags failed -1 16:29:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x50) 16:29:16 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiilier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x80000, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) 16:29:16 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')seli"uxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2113.260184] binder: binder_mmap: 9639 20002000-20007000 bad vm_flags failed -1 16:29:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev5audio#\x00', 0x1, 0x4002) [ 2113.363149] binder: binder_mmap: 9644 20002000-20007000 bad vm_flags failed -1 [ 2113.384765] binder: binder_mmap: 9644 20002000-20007000 bad vm_flags failed -1 16:29:16 executing program 3: socketpair(0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000040000000004, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000200)) pwrite64(r1, &(0x7f0000000240)="c3845415fc11ccfcecdfb2b2bfe354df2189bf08ed9b6f794a2f53f0bf91fb03ada7255ec3dddf7f3e4fb573bc32879cc37d104a3d62f132542b353efbaad0", 0x3f, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0xffffffffffffffff, 0x81, 0x0, 0xffffffffffffff9c}, 0x2c) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000040)={{{@in=@loopback, @in6=@ipv4={[], [], @remote}}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:29:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0xffffffffffffa, 0x12, r0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r2}}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x44c002, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000003c0)={{0xffffffffffffffff, 0x0, 0x2, 0x3, 0x271}}) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) 16:29:16 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')seli%uxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:16 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multi-lier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x4c00) 16:29:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/.udio#\x00', 0x1, 0x4002) 16:29:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) getpid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000340)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000080)="97db40326a341f2645e963d2c7d849d1fc58c06d26ad314d9a1ca1efd4897a1a848f906ac9297a7a2410bf17718ef019b8efc0a482edc534200489f5340acfc621dfc14d73", 0x45, 0xfffffffffffffbff}, {&(0x7f0000000180)="b07363f53df06c959cdc80b0cc82272ee6e9c8a4f91f5b601c63769dd89ec3bc7833231654a5bc69a0df8582c86f6bbc8fb621f36f54f2b4d6aa32a3fe4c123eadc727b546873429f43146d793b158808263c18732b606d836be7ab604619c2922a90aa0f76fdf1f872f1ea72d8e4bbdc172cb186b87e5dc620671af0ea2d696c805b18eeaaefcb8b0dce07259f92c09311086d983c1f0f463807c3cbb6afc3834c37c4185fc50c54e307c3960c3949f7ae2adeeb1eea5288abee9d6e455f48e3cc0e6642e44f76530879ce737f67c72a43669049e1c04d718e9d9da23c139e2b59764026466b85035c5b8f4f7fafe09", 0xf0, 0x9}, {&(0x7f0000000280)="58a7c1ae7bb89fb91f9484df934630f8180b47484b7402c3d431273046204bbd9cfd12e6bd2b4f7d0b2f21c18d76e44354b59f3ea6efc57c79e365e8988b51", 0x3f, 0x3}], 0x40, &(0x7f0000000480)={[{@noacl='noacl'}, {@notail='notail'}, {@resize_auto='resize=auto'}, {@balloc_no_unhash_reloc='block-allocator=no_unhashed_relocation'}, {@usrjquota='usrjquota'}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@subj_role={'subj_role', 0x3d, ']posix_acl_accesscgroup:'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/binder#\x00'}}, {@subj_type={'subj_type', 0x3d, 'eth0eth1/user'}}, {@uid_gt={'uid>', r1}}, {@appraise='appraise'}, {@fsname={'fsname', 0x3d, '/dev/binder#\x00'}}]}) [ 2114.041585] binder: binder_mmap: 9666 20002000-20004000 bad vm_flags failed -1 16:29:17 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multillier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2114.114401] binder: binder_mmap: 9689 20002000-20007000 bad vm_flags failed -1 16:29:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x20000400, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x10080, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x4, 0x70, 0xff, 0x7, 0x10001, 0x6, 0x0, 0x0, 0x28000, 0x1, 0x594, 0x6, 0x3, 0x5, 0x1, 0x1, 0x8001, 0x7fff, 0x8, 0x8, 0x7, 0xff, 0x101, 0x1000, 0x1, 0x1, 0x1ff, 0x7, 0x2, 0x3, 0x9c, 0xf468, 0x1, 0x7, 0x9b50, 0x200, 0x401, 0x101, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0xc0c, 0x20, 0x8, 0x7, 0x1c, 0x100000001, 0x532}, r1, 0x7, r0, 0x4) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x1) ioctl$RTC_AIE_ON(r2, 0x7001) 16:29:17 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')seli,uxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x6800000000000000) 16:29:17 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev//udio#\x00', 0x1, 0x4002) 16:29:17 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x2}, 0x10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000002c0)={r3}) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x6) r4 = request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='\x00', 0xfffffffffffffffe) keyctl$revoke(0x3, r4) io_setup(0x6, &(0x7f0000000040)) socket$inet(0x2, 0x0, 0xffffffffffffff7f) accept$inet6(r1, 0x0, &(0x7f0000000300)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r5, &(0x7f0000000000), &(0x7f0000000080)="c1b58c5d3968e9ad9182d33091234ddf9e86a83f860803479a74aa218ac4864c213c1552daa02e2cf73029510f840f9dcf5bd2988e388c52e388961474154b34c49eb2147ff99664549cd2840bc962ec9be0cee8df5d4e50c99417dd387cbf00000000000000000000", 0x2}, 0x20) [ 2114.278861] binder: binder_mmap: 9703 20002000-20007000 bad vm_flags failed -1 16:29:17 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multi%lier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2114.344570] binder: binder_mmap: 9703 20002000-20007000 bad vm_flags failed -1 16:29:17 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')seli\nuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) mmap$binder(&(0x7f0000003000/0x600000)=nil, 0x600000, 0xffffffffffffa, 0x12, r0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x48000, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000140)={0x10003, 0x0, [0x333, 0x800, 0x8dfb, 0x81, 0x9, 0x40, 0x9, 0x7fff]}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x301200, 0x0) write$apparmor_exec(r2, &(0x7f0000000040)={'exec ', "3ae7766d6e6574315c7070703176626f786e65743063707573657400"}, 0x21) 16:29:17 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x80, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[{0xb, 0x80}, {0x4, 0xffffffff}, {0x0, 0x3}, {0x7, 0xfffffffffffffffb}], 0x4) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) accept$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000080)={&(0x7f0000000240)={0x1d, r4}, 0x10, &(0x7f0000000340)={&(0x7f00000002c0)={0x7, 0x410, 0x1, {0x0, 0x2710}, {r5, r6/1000+30000}, {0x0, 0x8, 0x6, 0x4}, 0x1, @canfd={{0x2, 0x0, 0x3, 0x3ff}, 0x2d, 0x2, 0x0, 0x0, "26a0878d988a42ff239122563d3d9e57db4e07ff4ac0116ef1ebfa44b324a4eaea52fb1919f23f0fb5a45cacfb6266bce8309f00a99117ace6a7521b50882bae"}}, 0x80}}, 0x800) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:29:17 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multixlier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2114.512007] binder: binder_mmap: 9734 20003000-20403000 bad vm_flags failed -1 16:29:17 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/a/dio#\x00', 0x1, 0x4002) 16:29:17 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')selin+xvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2114.566653] binder: binder_mmap: 9734 20003000-20403000 bad vm_flags failed -1 [ 2114.585913] binder_alloc_mmap_handler: 3 callbacks suppressed [ 2114.585928] binder_alloc: binder_alloc_mmap_handler: 9730 20002000-20007000 already mapped failed -16 16:29:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0xfffffffffffffffe) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000001740)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_open_dev$admmidi(&(0x7f00000017c0)='/dev/admmidi#\x00', 0x0, 0x102) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000001800)={0x0, 0x7}, &(0x7f0000001840)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000001880)=@assoc_value={r3, 0x7}, 0x8) recvmmsg(r1, &(0x7f0000001680)=[{{&(0x7f00000000c0)=@in={0x2, 0x0, @rand_addr}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/95, 0x5f}, {&(0x7f0000000000)=""/55, 0x37}, {&(0x7f00000011c0)=""/81, 0x51}, {&(0x7f0000001240)=""/50, 0x32}], 0x5, &(0x7f0000001300)=""/231, 0xe7, 0x1}, 0x81}, {{&(0x7f0000001400)=@nfc_llcp, 0x80, &(0x7f0000001600)=[{&(0x7f0000001480)=""/242, 0xf2}, {&(0x7f0000001580)=""/85, 0x55}], 0x2, &(0x7f0000001640)=""/14, 0xe, 0x7}, 0xf5a}], 0x2, 0x2001, &(0x7f0000001700)={0x77359400}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000001780)='/dev/null\x00', 0x12000, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r0) 16:29:17 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multi+lier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2114.777610] binder_alloc: binder_alloc_mmap_handler: 9730 20002000-20007000 already mapped failed -16 16:29:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x20000000) 16:29:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000580)='/dev/usbmon#\x00', 0x1e60000000000000, 0x10000) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000005c0)={{0x5, 0x6, 0x8000, 0x9f}, 'syz1\x00', 0x3d}) r2 = semget(0x0, 0x0, 0x408) syz_mount_image$bfs(&(0x7f0000000180)='bfs\x00', &(0x7f00000001c0)='./file0\x00', 0x7397, 0x4, &(0x7f00000004c0)=[{&(0x7f0000000200)="e1552f93f7b10d38f013b5633e97fb26eeeee686d3ab92f59376708cde05fdc2e04b7457e72d1f895fc37201e5bb0f35c3626fbb03e637b6ac5e099ce61b1bd1369c88c5e0ec542151e6fb7fa30389c6f786f827eb0956c586ed99ff54590dcc2609e70b425879a80d72fe1dbe52d95e1ba0d9114b7d995d7fe5c25c67d2260e0883271ef9c9a03da09dbe5e16f2f6a08367a86aa709db162f61aea4db41c4d984d31638a296ee2bcc809eb3179c68088b8ed0eec3f9af97d066b6f328c2f473796dfc8d1570e218429087f3919ab817bd13200fa6e178f183b84f6ad1c513dab6c9c815f938e434437ac852a6a26694a0f0ab", 0xf3, 0x4}, {&(0x7f0000000300)="22d62bf40002338b0545b3256c921cdb8d0c0b3e93cec6272b8f17238bea8fc191bab3890376f321a34af259beca54f86d566bd8c7a3aa0b04da45029ef68a9ae79715204efcd43eb1333e0b215801e9c504b6097a70d06d99a6160dc986ce76c0e32b4d3bce7933961ef8667c2a07d4108346f58b18bff4bf3cdf1cdf88a18ed390328eaec634773fe4c4d13998a8003029ac777d4da944055ab5df9635811248bd252f124730f6594034fb66ff6a015de4247aaa1520f0971c9b6104a43a4c0b8ca87d2c168f7a152ff5e03d3b7506801d564b6b8dfb0874f5b69eb79c95c4a7817687dcc5d963", 0xe8, 0x7}, {&(0x7f0000000400)="811e84f9da5bf935049e202be39add2b3e", 0x11, 0x8}, {&(0x7f0000000440)="026c15a51f242f682ecbf74420a6522282e1d853d71108398fc62ee841ea182fe402d37983ecd195649d46d9b7aa02a78aece86d0f0a29a2121bdd02a929a0c848cdf0125aa92b47a26d9d6c440882e67b93fc01a50630a3", 0x58, 0x6}], 0x60001, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000540)=0x4) semctl$GETPID(r2, 0x0, 0xb, &(0x7f0000000000)=""/78) r3 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x100000000000005, 0x100) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000140)='veth1\x00') 16:29:17 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/au.io#\x00', 0x1, 0x4002) 16:29:17 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')selinoxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:17 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multi,lier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:17 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x110) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x1010, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r1, 0x0) [ 2114.938714] binder: binder_mmap: 9778 20002000-20007000 bad vm_flags failed -1 [ 2114.996669] binder_alloc: binder_alloc_mmap_handler: 9789 20002000-20007000 already mapped failed -16 [ 2115.011916] binder_alloc: binder_alloc_mmap_handler: 9789 20002000-20007000 already mapped failed -16 [ 2115.037440] binder: binder_mmap: 9790 20002000-20007000 bad vm_flags failed -1 16:29:18 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000100)={0xeb, 0x8000, 0x101, 0x10000000, 0xffff, 0x5}) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) close(r0) getitimer(0x0, &(0x7f0000000040)) socketpair(0x7, 0x7fe, 0xfffffffffffff001, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x9) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000200)={0x6, 0x7fff, 0x1, 0x0, 0x7fff, 0x7, 0x4, 0x0, 0x2, 0x8, 0x4}, 0xb) sendto$inet(r3, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) fcntl$dupfd(r2, 0x0, r1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) 16:29:18 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiulier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:18 executing program 0: r0 = add_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)="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", 0x1000, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r0, r1, r2) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = shmget(0x3, 0x4000, 0x200, &(0x7f0000005000/0x4000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000001240)=""/59) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r3, 0x0) 16:29:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/au/io#\x00', 0x1, 0x4002) 16:29:18 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')selin"xvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x3f000000) 16:29:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'osx.', 'trusted.overlay.origin\x00'}, &(0x7f00000001c0)='cpusetsystem\x00', 0xd, 0x2) lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) setxattr$security_smack_entry(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.SMACK64IPIN\x00', &(0x7f0000000280)='osx.', 0x4, 0x3) [ 2115.422311] binder: binder_mmap: 9801 20002000-20007000 bad vm_flags failed -1 [ 2115.446104] binder_alloc: binder_alloc_mmap_handler: 9803 20002000-20007000 already mapped failed -16 16:29:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80000, 0x0) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x6, 0x9, 0x0, 0x4, 0x7fff}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) [ 2115.484211] binder: binder_mmap: 9815 20002000-20007000 bad vm_flags failed -1 16:29:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0xffffffffffffffff) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) [ 2115.525949] binder_alloc: binder_alloc_mmap_handler: 9803 20002000-20007000 already mapped failed -16 [ 2115.535447] Unknown ioctl 21532 [ 2115.536341] binder: binder_mmap: 9825 20002000-20007000 bad vm_flags failed -1 16:29:18 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multi*lier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:18 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')selin,xvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f00000000c0)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) [ 2115.695815] binder: binder_mmap: 9842 20002000-20007000 bad vm_flags failed -1 16:29:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audi/#\x00', 0x1, 0x4002) 16:29:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x300) 16:29:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x140, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={0x0, 0x5, 0x5, 0xa0, &(0x7f0000000000/0x4000)=nil, 0x5}) 16:29:19 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiclier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="1200000000000000009070008dbfeb9bd7"]}) 16:29:19 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')selin#xvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x500, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000140)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000240)={@local, @broadcast, r2}, 0xc) clone(0x20000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xffffffffffffa, 0x12, r0, 0x0) [ 2116.918101] binder: binder_mmap: 9850 20002000-20007000 bad vm_flags failed -1 [ 2116.928866] QAT: Invalid ioctl [ 2116.938017] __ntfs_error: 159 callbacks suppressed [ 2116.938029] ntfs: (device loop1): parse_options(): Unrecognized mount option subj_type. [ 2116.954914] ntfs: (device loop2): parse_options(): Unrecognized mount option mft_zone_multiclier. 16:29:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="1200000000000000009070008dbfeb9bd7"]}) [ 2116.968553] ntfs: (device loop2): parse_options(): Unrecognized mount option subj_type. [ 2116.979883] ntfs: (device loop2): parse_options(): Unrecognized mount option dont_hash. [ 2116.991999] ntfs: (device loop2): parse_options(): Unrecognized mount option fu. [ 2117.015549] ntfs: (device loop1): parse_options(): Unrecognized mount option subj_type. 16:29:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="1200000000000000009070008dbfeb9bd7"]}) 16:29:20 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')selin*xvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2117.064314] binder: binder_mmap: 9866 20ffc000-20ffd000 bad vm_flags failed -1 [ 2117.074775] ntfs: (device loop2): parse_options(): Unrecognized mount option mft_zone_multiclier. [ 2117.099657] ntfs: (device loop2): parse_options(): Unrecognized mount option subj_type. 16:29:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r1 = getpid() r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x8040) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000001180)=r1) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x3, 0x547, 0xffffffff, 0xffffffffffffff01, 0x0, 0x6, 0x0, 0x8, 0x8000, 0x5, 0x101, 0x8, 0xd0, 0x1, 0xffffffffffffff00, 0xfffffffffffffffb, 0x3f, 0x3d, 0x80, 0x5a9, 0x10000, 0x9, 0x81, 0x7ff, 0x200, 0xfffffffffffffff7, 0xfffffffffffffff8, 0x65, 0x3, 0x6, 0x5, 0x4, 0xde3e, 0x0, 0x1, 0x1, 0x0, 0x4, 0x6, @perf_config_ext={0x8000, 0x7f21}, 0x20000, 0x8000, 0x10001, 0x7, 0x6, 0xfffffffffffffffd, 0x4}, r1, 0x1, r3, 0x1) mq_timedreceive(r3, &(0x7f0000000140)=""/4096, 0x1000, 0x5, &(0x7f0000001140)={0x77359400}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) 16:29:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x600) [ 2117.134374] ntfs: (device loop2): parse_options(): Unrecognized mount option dont_hash. [ 2117.149490] ntfs: (device loop2): parse_options(): Unrecognized mount option fu. [ 2117.201745] binder: binder_mmap: 9882 20002000-20007000 bad vm_flags failed -1 16:29:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio5\x00', 0x1, 0x4002) 16:29:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="1200000000000000009070008dbfeb9bd7"]}) 16:29:20 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiolier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x8000000000000002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x1e628281cc4f499f, 0x80c0) ppoll(&(0x7f0000000000)=[{r3, 0x8004}], 0x1, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180), 0x8) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000540)=""/52, 0x34}], 0x1) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f00000001c0)={'broute\x00'}, &(0x7f00000000c0)=0x78) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000040), 0x4) 16:29:20 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')selinixvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2117.310742] binder: binder_mmap: 9890 20002000-20007000 bad vm_flags failed -1 16:29:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) 16:29:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x74) 16:29:20 executing program 3: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="1200000000000000009070008dbfeb9bd7"]}) [ 2117.423949] binder: binder_mmap: 9898 20002000-20007000 bad vm_flags failed -1 [ 2117.457543] binder: binder_mmap: 9898 20002000-20007000 bad vm_flags failed -1 16:29:20 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multislier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:20 executing program 3: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="1200000000000000009070008dbfeb9bd7"]}) 16:29:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xffffffffffffa, 0x12, r0, 0x0) 16:29:20 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')selin0xvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2117.580430] binder: binder_mmap: 9916 20002000-20006000 bad vm_flags failed -1 16:29:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:29:20 executing program 0: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x4000, 0x0) write$P9_RXATTRWALK(r1, &(0x7f00000000c0)={0xf, 0x1f, 0x1, 0xffffffff}, 0xf) write$P9_RXATTRWALK(r1, &(0x7f0000000140)={0xf, 0x1f, 0x1, 0x1}, 0xf) 16:29:20 executing program 3: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="1200000000000000009070008dbfeb9bd7"]}) 16:29:20 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multi0lier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x8000000000000000) 16:29:20 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')selinpxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$smack_current(r1, &(0x7f0000000040)='\x00', 0x1) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) [ 2117.708367] binder: binder_mmap: 9927 20002000-20007000 bad vm_flags failed -1 16:29:20 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="1200000000000000009070008dbfeb9bd7"]}) 16:29:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8001, 0x2000) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x8) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) [ 2117.800082] binder: binder_mmap: 9939 20002000-20007000 bad vm_flags failed -1 [ 2117.839033] binder_alloc: binder_alloc_mmap_handler: 9937 20002000-20007000 already mapped failed -16 16:29:20 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multi\nlier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:20 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0xc) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x400, 0x8000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)={r2, 0x2}) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x8) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r3, 0x0) [ 2117.852828] binder: binder_mmap: 9950 20002000-20007000 bad vm_flags failed -1 16:29:20 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')selin.xvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2117.950412] binder: binder_mmap: 9959 20002000-20007000 bad vm_flags failed -1 [ 2117.965907] binder: binder_mmap: 9959 20002000-20007000 bad vm_flags failed -1 16:29:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:29:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sockstat6\x00') ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040)={0x351}) 16:29:20 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="1200000000000000009070008dbfeb9bd7"]}) 16:29:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x500000) [ 2117.992690] binder_alloc: binder_alloc_mmap_handler: 9937 20002000-20007000 already mapped failed -16 16:29:21 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multip+ier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:21 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xffffffffffffa, 0x12, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x1, &(0x7f0000000040)={0x4, &(0x7f00000000c0)}) r0 = accept4(0xffffffffffffff9c, &(0x7f00000000c0)=@ax25, &(0x7f0000000000)=0x80, 0x80800) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x20, 0x8, 0x1a, 0x41, 0x8}, 0x14) 16:29:21 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')selincxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2118.109366] binder: binder_mmap: 9971 20002000-20007000 bad vm_flags failed -1 16:29:21 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="1200000000000000009070008dbfeb9bd7"]}) 16:29:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x210a002001, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$KDENABIO(r1, 0x4b36) write$binfmt_aout(r0, &(0x7f0000000140)={{0x108, 0x1000, 0x200, 0x5f, 0x2df, 0x5, 0x10c, 0x2149}, "11a3a3e2864cd54af65f976a88ca80c154c85aed841c632712fd0ca57514436f6de716bd7693bd1902340992f1f07f18bc7eb40a4a73b2786d370bf636786c5e14c74a103415e3c02922292c51edaa3383db5e57cb4207221a5ee69bb0e3c2cc049032dbed52d9928df50bdc7179da89716ae58a38bf8c83fae1cd8d788569d07559098cd9da509f4163b342f67f3a5f90d6770aeb3126a19c65"}, 0xba) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000040)) [ 2118.239221] binder: binder_mmap: 9995 20002000-20007000 bad vm_flags failed -1 [ 2118.257070] QAT: Invalid ioctl 16:29:21 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multip/ier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2118.285653] binder: binder_mmap: 9995 20002000-20007000 bad vm_flags failed -1 [ 2118.296493] binder_alloc: binder_alloc_mmap_handler: 9990 20002000-20007000 already mapped failed -16 [ 2118.312351] QAT: Invalid ioctl 16:29:21 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')selindxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x1102400, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) [ 2118.403462] binder_alloc: binder_alloc_mmap_handler: 9990 20002000-20007000 already mapped failed -16 [ 2118.434309] binder: binder_mmap: 10012 20002000-20007000 bad vm_flags failed -1 [ 2118.465014] binder: binder_mmap: 10012 20002000-20007000 bad vm_flags failed -1 16:29:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:29:21 executing program 3: socket$inet6(0xa, 0x1000000000005, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="1200000000000000009070008dbfeb9bd7"]}) 16:29:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x813, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) 16:29:21 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multip0ier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x6000) 16:29:21 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')selinlxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:21 executing program 3: socket$inet6(0xa, 0x1000000000005, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="1200000000000000009070008dbfeb9bd7"]}) [ 2118.612719] binder: binder_mmap: 10023 20002000-20007000 bad vm_flags failed -1 [ 2118.637266] binder: binder_mmap: 10023 20002000-20007000 bad vm_flags failed -1 16:29:21 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r3 = socket$bt_hidp(0x1f, 0x3, 0x6) dup2(r1, r3) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003e00050100000000000000000a000000fbe7ff0d54a490ae4b4e15efd2fef6a5df488231364beacb62d6a9033c22"], 0x14}}, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000040)) 16:29:21 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')selin\nxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:21 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multipuier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) [ 2118.757998] binder: binder_mmap: 10041 20002000-20007000 bad vm_flags failed -1 16:29:21 executing program 3: socket$inet6(0xa, 0x1000000000005, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="1200000000000000009070008dbfeb9bd7"]}) [ 2118.836115] binder: binder_mmap: 10047 20002000-20007000 bad vm_flags failed -1 16:29:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:29:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x101000, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000080)=0x9) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xffffffffffffa, 0x12, r0, 0x0) 16:29:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x6c00000000000000) 16:29:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[]}) 16:29:21 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multip\nier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:21 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')selin-xvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:21 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x614000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 16:29:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[]}) [ 2119.010377] binder: binder_mmap: 10061 20002000-20006000 bad vm_flags failed -1 16:29:22 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')selinxxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x6, 0x2000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x9, @ipv4={[], [], @rand_addr}, 0x40}}, 0x6, 0x3, 0x20, 0xb9, 0x81d6}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000200)={r2, 0x59, "8f91e2787c8a4cbbc175eb6f2dfcd1617b53d68ac2aad6fa9f3d7bd9bcc191e433c2e573b06771cb37cf5345890cadf3063aaad619e6f31e626427b086c95a9c298887b4ddece9aad3bbb70bf92979421cfe42d5d621940dde"}, &(0x7f00000000c0)=0x61) clone(0x20000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) 16:29:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[]}) 16:29:22 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multip*ier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2119.271107] binder: binder_mmap: 10088 20002000-20007000 bad vm_flags failed -1 16:29:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\r', 0x1, 0x4002) 16:29:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB]}) 16:29:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x74000000) 16:29:22 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')selinXxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:22 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multiptier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:22 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x6402, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) sendmsg$nl_crypto(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@upd={0xf0, 0x12, 0x109, 0x70bd2d, 0x25dfdbff, {{'drbg_nopr_hmac_sha512\x00'}, [], [], 0x2000, 0x400}, [{0x8, 0x1, 0x5}, {0x8, 0x1, 0x4}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40000}, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x14302, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000000c0)) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) 16:29:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) close(r0) [ 2119.541472] binder: binder_mmap: 10105 20002000-20007000 bad vm_flags failed -1 16:29:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB]}) 16:29:22 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')selinsxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2119.617059] binder_alloc_mmap_handler: 4 callbacks suppressed [ 2119.617080] binder_alloc: binder_alloc_mmap_handler: 10113 20002000-20007000 already mapped failed -16 [ 2119.656501] binder: binder_mmap: 10118 20002000-20007000 bad vm_flags failed -1 16:29:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB]}) 16:29:22 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multip-ier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2119.673968] binder: binder_mmap: 10118 20002000-20007000 bad vm_flags failed -1 16:29:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80000, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="2d63656d6f727973884f8578656d6f7279205032c1717b669b20b20e0e000000004cdda7f770ba01be2bcba60400000000000000007d69ad0000000000000000000000000000000000"], 0x23) [ 2119.781950] binder: binder_mmap: 10131 20002000-20007000 bad vm_flags failed -1 [ 2119.839608] binder_alloc: binder_alloc_mmap_handler: 10113 20002000-20007000 already mapped failed -16 16:29:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:29:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000004000/0x200000)=nil, 0x200000}, &(0x7f00000000c0)=0x10) ioctl$NBD_SET_SOCK(r1, 0xab00, r1) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x4, @remote}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={r2, 0x4c, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x8, @mcast2}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e22, @remote}]}, &(0x7f00000002c0)=0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) rt_sigreturn() mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) fcntl$setsig(r0, 0xa, 0x8) 16:29:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x7400) 16:29:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000000"]}) 16:29:22 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')selin%xvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:22 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multip.ier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x8000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) 16:29:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000000"]}) [ 2120.077445] binder: binder_mmap: 10155 20002000-20007000 bad vm_flags failed -1 16:29:23 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')selinu"vmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:23 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multip"ier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2120.119814] binder: binder_mmap: 10155 20002000-20007000 bad vm_flags failed -1 16:29:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000000"]}) 16:29:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x600000000000000) [ 2120.250610] binder_alloc: binder_alloc_mmap_handler: 10176 20002000-20007000 already mapped failed -16 [ 2120.264996] binder_alloc: binder_alloc_mmap_handler: 10176 20002000-20007000 already mapped failed -16 16:29:23 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:29:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2000903, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x800, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000240)='nbd\x00', &(0x7f0000000340)='/dev/binder#\x00'], &(0x7f0000000440)=[&(0x7f00000003c0)='wlan0,,[^%!ppp0\x00', &(0x7f0000000400)="4076626f786e657431c747504c286370757365745e3a73656c696e7578706f7369785f61636c5f6163636573732600"]) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000080)) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3000001, 0x12, r0, 0xffffffffffffffff) connect$unix(r1, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 16:29:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="1200000000000000009070008d"]}) 16:29:23 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')selinu,vmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:23 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multip#ier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x1000000) 16:29:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x8852, r0, 0x0) 16:29:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="1200000000000000009070008d"]}) [ 2120.445356] binder_alloc: binder_alloc_mmap_handler: 10182 20002000-20007000 already mapped failed -16 16:29:23 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')selinux%mnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="1200000000000000009070008d"]}) [ 2120.507945] binder: binder_mmap: 10197 20002000-20006000 bad vm_flags failed -1 [ 2120.538956] binder_alloc: binder_alloc_mmap_handler: 10182 20002000-20007000 already mapped failed -16 16:29:23 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multip,ier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2120.557712] binder: binder_mmap: 10197 20002000-20006000 bad vm_flags failed -1 16:29:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="1200000000000000009070008dbfeb"]}) 16:29:23 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:29:23 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x800, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f00000000c0)=0x20) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000180), 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x800, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, "97570445e47bead949a19fa9bf928fab59a6fac3a06a6efa8ea2b5b3147a8aafd11c7c1cc6ca2cfe3b81eca46395d4672640efe2cc8a7f5939b5cfa32ff5cdc2", "ade1b3517b66e61059d1053654a5beb13253f0a653eb210ef878b72c20a3269a", [0xfffffffffffffeff, 0x7]}) sendto$inet(r1, &(0x7f0000000600)="7c287cb5cad0a72b0973f0691403c3d1bd368b22b815fa34b91a9d149453d9f88f70bd9b7522ed2cb7cf3bfb34ae771e202f2dab8c17f96d16cbe9b56d5501381c32136995fc49b48a89a83e386dbd5f6782bea1f596a551bdc6fbc9245733e7427f02079ef91d2f64ac435a5dda6031e457f61396fc0eaf17923d8443d1a370ec4694b482457ac18329a53b460900e81fbcc69e6e9641268d017f82a5be2b9d332d1c0f7bbcb629139a2bdfbb5b58a69d4d589d9efaf2be", 0xb8, 0x48800, &(0x7f00000003c0)={0x2, 0x4e20, @rand_addr=0x4}, 0x10) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000000)={0x1, 0x1, {0x26, 0x15, 0x11, 0xe, 0xa, 0x80000000, 0x6, 0x27}}) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000140)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0x11}, 0x2c) getsockopt$sock_buf(r2, 0x1, 0x3b, &(0x7f00000002c0)=""/60, &(0x7f0000000540)=0xffb3) madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x11) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) fstat(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r4, 0x0) r5 = getpgrp(0x0) prlimit64(r5, 0x0, &(0x7f0000000000), &(0x7f0000000040)) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0x4000000000000002, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r6, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, &(0x7f00000000c0)="12a4aeab0000699a269d06ab4090541daddf4e846d6cd534827cc3683d3465e4dc", 0x21, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e22}, 0x10) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000580)={0xfffffffffffffffd, {0x2, 0x4e1d, @rand_addr}, {0x2, 0x4e23}, {0x2, 0x4e1d, @dev={0xac, 0x14, 0x14, 0x21}}, 0x1c, 0x5, 0x7fff, 0x9976, 0x5, &(0x7f0000000800)='bridge_slave_1\x00', 0x4, 0x7, 0x800}) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000100)={0x5084f74d, {0x2, 0x4e22, @rand_addr}, {0x2, 0x4e21, @dev={0xac, 0x4}}, {0x2, 0x4e24, @broadcast}, 0x7e, 0x6, 0x20, 0x40, 0x0, 0x0, 0x0, 0x80000001, 0x4}) socket$inet6(0xa, 0x20a, 0x6) r7 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, r7) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, &(0x7f0000000380)={0xb31, 0x3}) 16:29:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x7000000) 16:29:23 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')selinux,mnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="1200000000000000009070008dbfeb"]}) 16:29:23 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multipLier'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="1200000000000000009070008dbfeb"]}) 16:29:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="1200000000000000009070008dbfeb9b"]}) 16:29:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xffffffffffffa, 0x12, r0, 0x0) 16:29:23 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')selinux\nmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:23 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multipl\ner'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x6) [ 2121.002304] binder: binder_mmap: 10242 20002000-20006000 bad vm_flags failed -1 16:29:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) 16:29:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="1200000000000000009070008dbfeb9b"]}) 16:29:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x5000000) 16:29:24 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:29:24 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multipl"er'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:24 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')selinux"mnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xffffffffffffa, 0x400000000000012, r0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x50800) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000140)=r2) [ 2121.170931] binder: binder_mmap: 10261 20002000-20007000 bad vm_flags failed -1 [ 2121.203836] binder_alloc: binder_alloc_mmap_handler: 10265 20002000-20007000 already mapped failed -16 16:29:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="1200000000000000009070008dbfeb9b"]}) [ 2121.233485] binder_alloc: binder_alloc_mmap_handler: 10265 20002000-20007000 already mapped failed -16 16:29:24 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multipl%er'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:24 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0xc0100) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x80000}) socketpair(0x1, 0x80803, 0xfffffffffffffff9, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)={r1, 0x80000, r2}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, 0xffffffffffffffff, 0x0) [ 2121.281275] binder: binder_mmap: 10279 20002000-20006000 bad vm_flags failed -1 16:29:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000000, 0x80010, r0, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00000000c0)) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@v1={0x2, "81fa803a4b57c111"}, 0x9, 0x2) 16:29:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x6b6b6b) 16:29:24 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')selinuxv\nnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x840000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2711, &(0x7f0000af0fe7)=""/13, &(0x7f000033bffc)=0x7ffff000) 16:29:24 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multipl,er'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2121.477321] binder: binder_mmap: 10296 20002000-20007000 bad vm_flags failed -1 [ 2121.515966] binder: binder_mmap: 10296 20002000-20007000 bad vm_flags failed -1 16:29:24 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x4002) 16:29:24 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')selinuxv"net1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) 16:29:24 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x244401) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) dup2(r1, r0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r1, 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=""/244, 0xf4) 16:29:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0xd00) 16:29:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x14000, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) prctl$setmm(0x23, 0x2, &(0x7f0000003000/0x1000)=nil) [ 2121.735683] binder: binder_mmap: 10314 20002000-20007000 bad vm_flags failed -1 16:29:24 executing program 2: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@mft_zone_multiplier={'mft_zone_multipli,r'}}], [{@subj_type={'subj_type', 0x3d, ')selinuxvmnet1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2121.824644] binder: binder_mmap: 10320 20002000-20007000 bad vm_flags failed -1 16:29:24 executing program 1: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001bc0)={[{@gid={'gid'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, ')selinuxv%net1GPL'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'ntfs\x00'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}) [ 2121.867604] binder: binder_mmap: 10320 20002000-20007000 bad vm_flags failed -1 16:29:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) sched_yield() r1 = mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={r1}) [ 2121.959967] __ntfs_error: 220 callbacks suppressed [ 2121.959979] ntfs: (device loop2): parse_options(): Unrecognized mount option mft_zone_multipli. [ 2122.009633] ntfs: (device loop1): parse_options(): Unrecognized mount option subj_type. [ 2122.015804] ntfs: (device loop2): parse_options(): Unrecognized mount option r. [ 2122.031376] ntfs: (device loop2): parse_options(): Unrecognized mount option subj_type. [ 2122.062156] ntfs: (device loop2): parse_options(): Unrecognized mount option dont_hash. [ 2122.071110] binder: binder_mmap: 10334 20002000-20007000 bad vm_flags failed -1 [ 2122.089513] ntfs: (device loop2): parse_options(): Unrecognized mount option fu. [ 2122.101765] ntfs: (device loop1): parse_options(): Unrecognized mount option subj_type. 16:29:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0x6b6b6b00, 0x12, r0, 0x6b6b6b00) 16:29:25 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x5, 0x2) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000180)={'NETMAP\x00'}, &(0x7f00000001c0)=0x1e) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4048, 0xffffffffffffa, 0x12, r1, 0x0) [ 2122.141867] binder: binder_mmap: 10334 20002000-20007000 bad vm_flags failed -1 [ 2122.197904] ntfs: (device loop2): parse_options(): Unrecognized mount option mft_zone_multipli. [ 2122.216844] ntfs: (device loop2): parse_options(): Unrecognized mount option r. [ 2122.247476] ntfs: (device loop2): parse_options(): Unrecognized mount option subj_type. [ 2122.252692] binder: binder_mmap: 10342 20002000-20007000 bad vm_flags failed -1 [ 2122.372222] syz-executor3: page allocation failure: order:10, mode:0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 2122.376242] syz-executor3: page allocation failure: order:10, mode:0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 2122.423461] syz-executor3 cpuset=syz3 mems_allowed=0 [ 2122.427125] syz-executor3 cpuset=syz3 mems_allowed=0 [ 2122.434601] CPU: 0 PID: 10308 Comm: syz-executor3 Not tainted 4.19.0-rc8+ #74 [ 2122.441895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2122.451259] Call Trace: [ 2122.453872] dump_stack+0x1c4/0x2b6 [ 2122.457526] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2122.462767] warn_alloc.cold.119+0xb7/0x1bd [ 2122.467121] ? zone_watermark_ok_safe+0x3f0/0x3f0 [ 2122.472002] ? ___might_sleep+0x1ed/0x300 [ 2122.476178] ? arch_local_save_flags+0x40/0x40 [ 2122.480808] __alloc_pages_slowpath+0x265e/0x2d70 [ 2122.485697] ? warn_alloc+0x120/0x120 [ 2122.489537] ? print_usage_bug+0xc0/0xc0 [ 2122.493614] ? warn_alloc+0x120/0x120 [ 2122.497426] ? print_usage_bug+0xc0/0xc0 [ 2122.501502] ? print_usage_bug+0xc0/0xc0 [ 2122.505583] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2122.511132] ? should_fail+0x22d/0xd01 [ 2122.515044] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2122.520160] ? graph_lock+0x170/0x170 [ 2122.523979] ? should_fail+0x22d/0xd01 [ 2122.527894] ? find_held_lock+0x36/0x1c0 [ 2122.531982] ? ___might_sleep+0x1ed/0x300 [ 2122.536145] ? lock_release+0x970/0x970 [ 2122.540140] ? arch_local_save_flags+0x40/0x40 [ 2122.544762] ? __might_sleep+0x95/0x190 [ 2122.548771] __alloc_pages_nodemask+0xa80/0xde0 [ 2122.553458] ? graph_lock+0x170/0x170 [ 2122.557280] ? __alloc_pages_slowpath+0x2d70/0x2d70 [ 2122.562311] ? graph_lock+0x170/0x170 [ 2122.566136] ? find_held_lock+0x36/0x1c0 [ 2122.570215] ? cache_grow_begin+0x5a4/0x8c0 [ 2122.574549] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2122.579144] ? trace_hardirqs_on+0xbd/0x310 [ 2122.583481] ? fallback_alloc+0x203/0x2e0 [ 2122.587641] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2122.593110] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2122.595442] kasan: CONFIG_KASAN_INLINE enabled [ 2122.598667] cache_grow_begin+0x91/0x8c0 [ 2122.598687] ? do_raw_spin_unlock+0xa7/0x330 [ 2122.598711] fallback_alloc+0x203/0x2e0 [ 2122.598748] ____cache_alloc_node+0x1c7/0x1e0 [ 2122.598770] __kmalloc+0x208/0x760 [ 2122.598868] ? rds_info_getsockopt+0x71e/0x9c0 [ 2122.598889] rds_info_getsockopt+0x71e/0x9c0 [ 2122.598910] ? rds_info_iter_unmap+0xf0/0xf0 [ 2122.598926] ? lock_downgrade+0x900/0x900 [ 2122.598943] ? lock_release+0x970/0x970 [ 2122.598959] ? arch_local_save_flags+0x40/0x40 [ 2122.598981] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2122.598996] ? lock_downgrade+0x900/0x900 [ 2122.599025] rds_getsockopt+0x17e/0x2e0 [ 2122.599055] __sys_getsockopt+0x1ad/0x390 [ 2122.599074] ? kernel_setsockopt+0x1d0/0x1d0 [ 2122.599090] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2122.599107] ? trace_hardirqs_on+0xbd/0x310 [ 2122.599123] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2122.599139] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2122.599160] __x64_sys_getsockopt+0xbe/0x150 [ 2122.599181] do_syscall_64+0x1b9/0x820 [ 2122.599195] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2122.599213] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2122.604332] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 2122.608391] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2122.608410] ? trace_hardirqs_on_caller+0x310/0x310 [ 2122.608428] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2122.608448] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2122.612845] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 2122.616811] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2122.621289] CPU: 1 PID: 1372 Comm: kswapd0 Not tainted 4.19.0-rc8+ #74 [ 2122.624819] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2122.629383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2122.633782] RIP: 0033:0x457569 [ 2122.638180] RIP: 0010:rb_erase+0x306/0x3710 [ 2122.642306] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2122.646271] Code: c7 81 28 01 00 00 f2 f2 f2 f2 c7 81 2c 01 00 00 00 f2 f2 f2 48 89 f9 65 48 8b 1c 25 28 00 00 00 48 89 5d d0 31 db 48 c1 e9 03 <42> 80 3c 01 00 0f 85 41 1c 00 00 4c 8d 48 10 4c 8b 78 08 48 b9 00 [ 2122.650833] RSP: 002b:00007f7b2ff28c78 EFLAGS: 00000246 [ 2122.656267] RSP: 0018:ffff8801d4fa6380 EFLAGS: 00010202 [ 2122.660397] ORIG_RAX: 0000000000000037 [ 2122.668489] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457569 [ 2122.672880] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 2122.677445] RDX: 0000000000002711 RSI: 0000000000000114 RDI: 0000000000000003 [ 2122.681756] RDX: 1ffff1003a9f4c78 RSI: ffffffff8afbc860 RDI: 0000000000000008 [ 2122.687107] RBP: 000000000072bf00 R08: 000000002033bffc R09: 0000000000000000 [ 2122.692538] RBP: ffff8801d4fa6d88 R08: dffffc0000000000 R09: fffffbfff12d6990 [ 2122.696938] R10: 0000000020af0fe7 R11: 0000000000000246 R12: 00007f7b2ff296d4 [ 2122.700809] R10: fffffbfff12d6990 R11: ffffffff896b4c83 R12: ffff8801c9c004b0 [ 2122.706157] R13: 00000000004be08a R14: 00000000004cd0f0 R15: 00000000ffffffff [ 2122.711070] R13: dffffc0000000000 R14: ffff8801d4fa6d60 R15: ffff8801d4fa6ea0 [ 2122.903127] FS: 0000000000000000(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 2122.911361] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2122.917252] CR2: 000000000072c000 CR3: 000000018ed88000 CR4: 00000000001426e0 [ 2122.924527] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2122.931801] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2122.937496] kobject: 'loop5' (000000001a490f7c): kobject_uevent_env [ 2122.939074] Call Trace: [ 2122.945498] kobject: 'loop5' (000000001a490f7c): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2122.948065] ? rb_insert_color+0x1460/0x1460 [ 2122.948080] ? print_usage_bug+0xc0/0xc0 [ 2122.948098] ? __lock_acquire+0x7ec/0x4ec0 [ 2122.948116] ? unwind_next_frame.part.7+0x1ae/0x9e0 [ 2122.975219] ? unwind_dump+0x190/0x190 [ 2122.979123] ? __lock_acquire+0x7ec/0x4ec0 [ 2122.983367] ? mark_held_locks+0x130/0x130 [ 2122.987485] kobject: 'loop4' (000000003e2ea5c8): kobject_uevent_env [ 2122.987609] ? mark_held_locks+0x130/0x130 [ 2122.994022] kobject: 'loop4' (000000003e2ea5c8): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2122.998226] ? print_usage_bug+0xc0/0xc0 [ 2122.998246] ? __lock_acquire+0x7ec/0x4ec0 [ 2122.998259] ? ret_from_fork+0x3a/0x50 [ 2122.998274] ? save_stack+0xa9/0xd0 [ 2122.998291] ? print_usage_bug+0xc0/0xc0 [ 2123.027537] ? __lock_acquire+0x7ec/0x4ec0 [ 2123.031780] ? graph_lock+0x170/0x170 [ 2123.035583] ? graph_lock+0x170/0x170 [ 2123.039387] ? print_usage_bug+0xc0/0xc0 [ 2123.043452] ? print_usage_bug+0xc0/0xc0 [ 2123.047525] ? __lock_acquire+0x7ec/0x4ec0 [ 2123.051766] ? find_held_lock+0x36/0x1c0 [ 2123.055832] ? print_usage_bug+0xc0/0xc0 [ 2123.059907] ? mark_held_locks+0x130/0x130 [ 2123.064151] ? __lock_acquire+0x7ec/0x4ec0 [ 2123.068394] ? print_usage_bug+0xc0/0xc0 [ 2123.072462] ? kasan_check_read+0x11/0x20 [ 2123.076619] ? do_raw_spin_unlock+0xa7/0x330 [ 2123.081039] ? mark_held_locks+0x130/0x130 [ 2123.085278] ? print_usage_bug+0xc0/0xc0 [ 2123.089350] ? __lock_acquire+0x7ec/0x4ec0 [ 2123.093592] ? graph_lock+0x170/0x170 [ 2123.097403] ? __lock_acquire+0x7ec/0x4ec0 [ 2123.101640] ? mark_held_locks+0x130/0x130 [ 2123.105884] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2123.111007] ? mark_held_locks+0x130/0x130 [ 2123.115250] ? lock_downgrade+0x900/0x900 [ 2123.119403] ? ext4_es_scan+0x960/0x960 [ 2123.123391] ? lock_release+0x970/0x970 [ 2123.127384] ? do_raw_write_trylock+0x1c0/0x1c0 [ 2123.132069] ? lock_acquire+0x1ed/0x520 [ 2123.136047] ? integrity_inode_free+0x77/0x320 [ 2123.140639] ? ext4_es_remove_extent+0x151/0x500 [ 2123.145411] ? lock_release+0x970/0x970 [ 2123.149408] ? kasan_check_write+0x14/0x20 [ 2123.153650] ? do_raw_write_lock+0xbd/0x1e0 [ 2123.157983] integrity_inode_free+0x12f/0x320 [ 2123.162489] security_inode_free+0x19/0x90 [ 2123.166772] __destroy_inode+0x328/0x820 [ 2123.170849] ? generic_update_time+0x450/0x450 [ 2123.175437] ? evict+0x5d8/0x980 [ 2123.178813] ? lock_downgrade+0x900/0x900 [ 2123.182961] ? do_raw_spin_lock+0xc1/0x230 [ 2123.187206] destroy_inode+0xda/0x200 [ 2123.191019] ? __destroy_inode+0x820/0x820 [ 2123.195263] ? kasan_check_write+0x14/0x20 [ 2123.199506] ? do_raw_spin_lock+0xc1/0x230 [ 2123.203755] evict+0x5e0/0x980 [ 2123.206963] ? destroy_inode+0x200/0x200 [ 2123.211033] ? __lock_is_held+0xb5/0x140 [ 2123.215118] ? ___might_sleep+0x1ed/0x300 [ 2123.219799] ? arch_local_save_flags+0x40/0x40 [ 2123.224390] ? find_held_lock+0x36/0x1c0 [ 2123.228463] dispose_list+0x252/0x410 [ 2123.232273] ? lock_downgrade+0x900/0x900 [ 2123.236434] ? evict+0x980/0x980 [ 2123.239811] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2123.244404] ? kasan_check_write+0x14/0x20 [ 2123.246872] Mem-Info: [ 2123.248657] ? do_raw_spin_lock+0xc1/0x230 [ 2123.251088] active_anon:1197779 inactive_anon:7398 isolated_anon:24 [ 2123.251088] active_file:29652 inactive_file:28080 isolated_file:0 [ 2123.251088] unevictable:0 dirty:385 writeback:0 unstable:0 [ 2123.251088] slab_reclaimable:21994 slab_unreclaimable:131495 [ 2123.251088] mapped:62773 shmem:10280 pagetables:56661 bounce:0 [ 2123.251088] free:35925 free_pcp:681 free_cma:0 [ 2123.255327] ? _raw_spin_unlock+0x2c/0x50 [ 2123.293744] ? list_lru_walk_one+0xb0/0xe0 [ 2123.297992] prune_icache_sb+0x12f/0x1c0 [ 2123.302058] ? list_lru_count_one+0x282/0x450 [ 2123.306558] ? invalidate_inodes+0x5e0/0x5e0 [ 2123.310988] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2123.316542] super_cache_scan+0x2bf/0x480 [ 2123.320702] do_shrink_slab+0x4e7/0xd20 [ 2123.324697] ? snapshot_refaults+0x290/0x290 [ 2123.329122] ? ___might_sleep+0x1ed/0x300 [ 2123.333284] ? shrink_slab+0x207/0x8c0 [ 2123.337183] ? downgrade_write+0x2b0/0x2b0 [ 2123.341432] ? shrink_node_memcg+0xc82/0x18e0 [ 2123.345943] shrink_slab+0x389/0x8c0 [ 2123.349664] ? shrink_active_list+0x1c20/0x1c20 [ 2123.354349] ? unregister_memcg_shrinker.isra.43+0x50/0x50 [ 2123.359985] ? kasan_check_read+0x11/0x20 [ 2123.364146] ? kasan_check_read+0x11/0x20 [ 2123.368306] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2123.372897] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2123.376858] Node 0 active_anon:4791116kB inactive_anon:29592kB active_file:118608kB inactive_file:112320kB unevictable:0kB isolated(anon):96kB isolated(file):0kB mapped:251092kB dirty:1540kB writeback:0kB shmem:41120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 3901440kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2123.378443] shrink_node+0x431/0x16b0 [ 2123.411229] ? mem_cgroup_split_huge_fixup+0x1b0/0x1b0 [ 2123.416535] ? shrink_node_memcg+0x18e0/0x18e0 [ 2123.421129] ? zone_watermark_ok_safe+0x146/0x3f0 [ 2123.425989] ? lock_acquire+0x1ed/0x520 [ 2123.429981] ? __alloc_pages_direct_compact+0x350/0x350 [ 2123.435358] ? lock_release+0x970/0x970 [ 2123.439342] ? arch_local_save_flags+0x40/0x40 [ 2123.443935] ? __sched_text_start+0x8/0x8 [ 2123.448095] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2123.453642] ? pgdat_balanced+0x110/0x140 [ 2123.457800] balance_pgdat+0x7ca/0x1000 [ 2123.461787] ? mem_cgroup_shrink_node+0xb60/0xb60 [ 2123.466651] ? rcu_lockdep_current_cpu_online+0x1f0/0x2d0 [ 2123.466844] Node 0 [ 2123.472202] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 2123.472242] DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2123.474448] ? rcu_pm_notify+0xc0/0xc0 [ 2123.506845] lowmem_reserve[]: 0 2819 [ 2123.509124] kswapd+0x857/0x12d0 [ 2123.509148] ? balance_pgdat+0x1000/0x1000 [ 2123.512853] 6323 [ 2123.516223] ? finish_wait+0x430/0x430 [ 2123.526375] ? find_held_lock+0x36/0x1c0 [ 2123.530448] ? __kthread_parkme+0xce/0x1a0 [ 2123.534692] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2123.539812] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2123.544925] ? lockdep_hardirqs_on+0x421/0x5c0 [ 2123.546832] 6323 [ 2123.549515] ? trace_hardirqs_on+0xbd/0x310 [ 2123.549526] Node 0 [ 2123.551586] ? kasan_check_read+0x11/0x20 [ 2123.555928] DMA32 free:69336kB min:30060kB low:37572kB high:45084kB active_anon:2544596kB inactive_anon:4100kB active_file:2896kB inactive_file:4156kB unevictable:0kB writepending:304kB present:3129332kB managed:2890736kB mlocked:0kB kernel_stack:24160kB pagetables:63368kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 2123.558132] ? __kthread_parkme+0xce/0x1a0 [ 2123.558146] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2123.558161] ? kasan_check_write+0x14/0x20 [ 2123.558175] ? do_raw_spin_lock+0xc1/0x230 [ 2123.558191] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2123.558211] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2123.586812] lowmem_reserve[]: [ 2123.591069] ? __kthread_parkme+0xfb/0x1a0 [ 2123.595291] 0 [ 2123.600745] kthread+0x35a/0x420 [ 2123.600760] ? balance_pgdat+0x1000/0x1000 [ 2123.600771] ? kthread_bind+0x40/0x40 [ 2123.600785] ret_from_fork+0x3a/0x50 [ 2123.600799] Modules linked in: [ 2123.646815] 0 3503 3503 [ 2123.647519] ---[ end trace ea8a436eb3972f52 ]--- [ 2123.650487] Node 0 [ 2123.654669] RIP: 0010:rb_erase+0x306/0x3710 [ 2123.654706] Normal free:59080kB min:37352kB low:46688kB high:56024kB active_anon:2246368kB inactive_anon:25488kB active_file:115568kB inactive_file:108616kB unevictable:0kB writepending:1292kB present:4718592kB managed:3588044kB mlocked:0kB kernel_stack:53376kB pagetables:163076kB bounce:0kB free_pcp:2252kB local_pcp:1020kB free_cma:0kB [ 2123.654714] lowmem_reserve[]: [ 2123.656998] Code: c7 81 28 01 00 00 f2 f2 f2 f2 c7 81 2c 01 00 00 00 f2 f2 f2 48 89 f9 65 48 8b 1c 25 28 00 00 00 48 89 5d d0 31 db 48 c1 e9 03 <42> 80 3c 01 00 0f 85 41 1c 00 00 4c 8d 48 10 4c 8b 78 08 48 b9 00 [ 2123.657011] RSP: 0018:ffff8801d4fa6380 EFLAGS: 00010202 [ 2123.662237] 0 [ 2123.691317] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 2123.691326] RDX: 1ffff1003a9f4c78 RSI: ffffffff8afbc860 RDI: 0000000000000008 [ 2123.691341] RBP: ffff8801d4fa6d88 R08: dffffc0000000000 R09: fffffbfff12d6990 [ 2123.742419] R10: fffffbfff12d6990 R11: ffffffff896b4c83 R12: ffff8801c9c004b0 [ 2123.749755] R13: dffffc0000000000 R14: ffff8801d4fa6d60 R15: ffff8801d4fa6ea0 [ 2123.756782] 0 0 0 [ 2123.757059] FS: 0000000000000000(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 2123.759203] Node 0 [ 2123.767470] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2123.767479] CR2: 000000000072c000 CR3: 000000018ed88000 CR4: 00000000001426e0 [ 2123.767489] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2123.767496] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2123.767503] Kernel panic - not syncing: Fatal exception [ 2123.768537] Kernel Offset: disabled [ 2123.807355] Rebooting in 86400 seconds..