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"}) [ 1555.931133][T21045] EXT4-fs error (device loop5): ext4_quota_enable:6754: comm syz-executor.5: Bad quota inode # 3 10:00:18 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x21, 0x0, &(0x7f0000000300)="412fc51edcfcd9198988426c823fd2093e5c74d8098602995c7081e7f8a02031be"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000700)={0x108, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x2}, @register_looper, @dead_binder_done, @release={0x40046306, 0x2}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/20, 0x14, 0x2, 0x3e}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/121, 0x79, 0x2, 0x39}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/87, 0x57, 0x0, 0x1b}}, &(0x7f0000000200)={0x0, 0x28, 0x50}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000001500)=""/4096, 0x1000, 0x2, 0x1}, @fd={0x66642a85, 0x0, r5}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}, 0x40}, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@flat=@handle={0x73682a85, 0x100, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/79, 0x4f, 0x0, 0x5}, @fda={0x66646185, 0x7, 0x0, 0x11}}, &(0x7f00000004c0)={0x0, 0x18, 0x40}}, 0x40}], 0x54, 0x0, &(0x7f0000000680)="88ceab3c9594fd82e4d36e6acef0482a39a348080c4a40a5aa850b0bd3639e610d80ed31e01fb76df31375d6eed7a34a721bd0fd65bc495d4e9c333f04cbb1dddb97b51e7056490e650411081ef60890a0fc0e89"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1555.934098][T21045] EXT4-fs warning (device loop5): ext4_enable_quotas:6791: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. 10:00:18 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xb4, 0x0, &(0x7f0000000000)="b15a859fdc219862c9e98ec7bff9eaee75259fb3fc3d01b1fb840e2618da4fb8c2bcf932188565f3503cc84e68f1efd2a2d81aaa8cf49b06e0d71a3bddc292864c7eff42f8b52b6fc5ba76b3346b1dc13c371a898a902eec32bcb444dbe8749243978e34de8410093fa89969a8e5f4fd949ff21c7fb61f66337dc5f4e1d1bfad60e827b4dd76b6055415c5167d58b0452a5ecd97d1d56293dec546aa66199eef2c5f71f638401638d47c4fff5b774d5f6d745a2f"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000140)={r2, 0x4, 0x7ff, "9120ebecfe3e9eab0e9cdca4b2a21b3433adaff86e6c091a03d122668c2760453124ef9af1b31c4c80851b5afaed3000f7df5cc385924490e18c8f499eb94ca15d9cdd5d6f7b08f80d5f3d69348e7014482ccdfaa7d8828100cb72d34c477a8fc454ec1193248eeb85a0a85d53a827f8ef2f01059ddc7c24ef0b95d63d05be9de1c620f5abc14f92d13f2512ba0d8c08ddc795228a9fb1c4b062878f4947e249aad6ff9dff35265ef0c35cdab67dcced5a526c31fb25277a1eaa05c8"}) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) read$FUSE(r5, &(0x7f0000000680)={0x2020}, 0x2020) [ 1555.956594][T21045] EXT4-fs (loop5): mount failed [ 1556.939807][T21070] binder: 21066:21070 ioctl c0306201 0 returned -14 [ 1559.248173][T21090] binder: 21088:21090 ioctl c0306201 0 returned -14 [ 1559.353701][T21095] binder: 21088:21095 ioctl c0306201 0 returned -14 [ 1560.269996][T21100] binder: 21099:21100 ioctl c0306201 0 returned -14 [ 1560.321755][T21101] binder: 21099:21101 ioctl c0306201 0 returned -14 10:00:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 10:00:20 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x21, 0x0, &(0x7f0000000300)="412fc51edcfcd9198988426c823fd2093e5c74d8098602995c7081e7f8a02031be"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000700)={0x108, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x2}, @register_looper, @dead_binder_done, @release={0x40046306, 0x2}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/20, 0x14, 0x2, 0x3e}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/121, 0x79, 0x2, 0x39}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/87, 0x57, 0x0, 0x1b}}, &(0x7f0000000200)={0x0, 0x28, 0x50}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000001500)=""/4096, 0x1000, 0x2, 0x1}, @fd={0x66642a85, 0x0, r5}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}, 0x40}, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@flat=@handle={0x73682a85, 0x100, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/79, 0x4f, 0x0, 0x5}, @fda={0x66646185, 0x7, 0x0, 0x11}}, &(0x7f00000004c0)={0x0, 0x18, 0x40}}, 0x40}], 0x54, 0x0, &(0x7f0000000680)="88ceab3c9594fd82e4d36e6acef0482a39a348080c4a40a5aa850b0bd3639e610d80ed31e01fb76df31375d6eed7a34a721bd0fd65bc495d4e9c333f04cbb1dddb97b51e7056490e650411081ef60890a0fc0e89"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:20 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) bind$ax25(r2, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:20 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 10:00:20 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfb, 0x0, &(0x7f0000000100)="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"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x12, 0x3, 0x1db, &(0x7f0000000680)="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"}) 10:00:20 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x21, 0x0, &(0x7f0000000300)="412fc51edcfcd9198988426c823fd2093e5c74d8098602995c7081e7f8a02031be"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000700)={0x108, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x2}, @register_looper, @dead_binder_done, @release={0x40046306, 0x2}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/20, 0x14, 0x2, 0x3e}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/121, 0x79, 0x2, 0x39}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/87, 0x57, 0x0, 0x1b}}, &(0x7f0000000200)={0x0, 0x28, 0x50}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000001500)=""/4096, 0x1000, 0x2, 0x1}, @fd={0x66642a85, 0x0, r5}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}, 0x40}, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@flat=@handle={0x73682a85, 0x100, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/79, 0x4f, 0x0, 0x5}, @fda={0x66646185, 0x7, 0x0, 0x11}}, &(0x7f00000004c0)={0x0, 0x18, 0x40}}, 0x40}], 0x54, 0x0, &(0x7f0000000680)="88ceab3c9594fd82e4d36e6acef0482a39a348080c4a40a5aa850b0bd3639e610d80ed31e01fb76df31375d6eed7a34a721bd0fd65bc495d4e9c333f04cbb1dddb97b51e7056490e650411081ef60890a0fc0e89"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1560.749324][T21107] binder: 21105:21107 ioctl c0306201 0 returned -14 [ 1560.757808][T21110] binder: 21108:21110 ioctl c0306201 0 returned -14 10:00:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) [ 1560.970584][T21115] binder: 21105:21115 ioctl c0306201 0 returned -14 10:00:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) [ 1561.296240][T21119] binder: 21108:21119 ioctl c0306201 0 returned -14 10:00:21 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=0x0) r4 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000480)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r6, r7, 0x0, 0x800000080004103) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r8, r9, 0x0, 0x800000080004103) r10 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$unix(r2, &(0x7f0000000580)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000100)="09c0fb389d92787d1c82e0e53f24e30382106286f344e9852460c694f1449b3e9022de3a28bd4fd5b95f73314102bf10ebb945f78f3b2f8c9cfe8381dc2f52ce7dd3e1810e2babf75e66343b9a8cc7792285b15ab05f8d34af0d6b03a7d3aefe2e54612608eec14f766aff4b7c8a163d56960e07bc159155f35264b19cd14a81ba998b3a3f968fee559f6a08499bbcbb51724a7bda84b7f7d37f449744fa1b2ed60e41accee7257c8166d2fe8608ab3a67640baca0e8f8249e18", 0xba}, {&(0x7f0000000340)="f4551fc48bb1a3c13ef2f486409796412c22b840660a65015f065724bea4bc5b5d0d93aee2889dc6f5aed62ea8405abb41ff5d180f5f7dd2d15f1cb1c6a650091ef07fe16b739715ba19e393796c3b43f9e761db092276a9f43d01c2d69c104765aa6a6445e7da55dbb16877c04d893c2b8cf9ac50a88e8b94e4541e8a31c95b66587cb0ed2628e9c84f978ec12ff5fec55f9362a09959c288a18803e67e673593c1fc1b", 0xa4}, {&(0x7f00000001c0)="cafd1ad17292b265835281feb2f489726f522f30b706b308b7b064dd9bedd9758e50816d8fcbfb316861559bc6cd158564a92e096d5db8fa867e91d2f32f3330fa37f35d", 0x44}, {&(0x7f0000000400)="dbd9ceeabe43b9c7ef2d84b32ac4fedb380c55a53bab26424d88de65cfba7443935bc0684081dd6dc3af23b079d8af6ecdfbe3370860d54562b4224f54e117dc5398dbd06e73113de8a15ccba0fb279088a4f7216d740f404dd162c5c0e5b3a1391cc5fc3ecfc1b3f61dba53c0ef0e97", 0x70}], 0x4, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r0, r4, r0, r0, r5]}}, @rights={{0x18, 0x1, 0x1, [r6, r0]}}, @rights={{0x1c, 0x1, 0x1, [r9, r0, r10]}}], 0x80, 0x4000000}, 0x4041) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:21 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=0x0) r4 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000480)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r6, r7, 0x0, 0x800000080004103) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r8, r9, 0x0, 0x800000080004103) r10 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$unix(r2, &(0x7f0000000580)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000100)="09c0fb389d92787d1c82e0e53f24e30382106286f344e9852460c694f1449b3e9022de3a28bd4fd5b95f73314102bf10ebb945f78f3b2f8c9cfe8381dc2f52ce7dd3e1810e2babf75e66343b9a8cc7792285b15ab05f8d34af0d6b03a7d3aefe2e54612608eec14f766aff4b7c8a163d56960e07bc159155f35264b19cd14a81ba998b3a3f968fee559f6a08499bbcbb51724a7bda84b7f7d37f449744fa1b2ed60e41accee7257c8166d2fe8608ab3a67640baca0e8f8249e18", 0xba}, {&(0x7f0000000340)="f4551fc48bb1a3c13ef2f486409796412c22b840660a65015f065724bea4bc5b5d0d93aee2889dc6f5aed62ea8405abb41ff5d180f5f7dd2d15f1cb1c6a650091ef07fe16b739715ba19e393796c3b43f9e761db092276a9f43d01c2d69c104765aa6a6445e7da55dbb16877c04d893c2b8cf9ac50a88e8b94e4541e8a31c95b66587cb0ed2628e9c84f978ec12ff5fec55f9362a09959c288a18803e67e673593c1fc1b", 0xa4}, {&(0x7f00000001c0)="cafd1ad17292b265835281feb2f489726f522f30b706b308b7b064dd9bedd9758e50816d8fcbfb316861559bc6cd158564a92e096d5db8fa867e91d2f32f3330fa37f35d", 0x44}, {&(0x7f0000000400)="dbd9ceeabe43b9c7ef2d84b32ac4fedb380c55a53bab26424d88de65cfba7443935bc0684081dd6dc3af23b079d8af6ecdfbe3370860d54562b4224f54e117dc5398dbd06e73113de8a15ccba0fb279088a4f7216d740f404dd162c5c0e5b3a1391cc5fc3ecfc1b3f61dba53c0ef0e97", 0x70}], 0x4, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r0, r4, r0, r0, r5]}}, @rights={{0x18, 0x1, 0x1, [r6, r0]}}, @rights={{0x1c, 0x1, 0x1, [r9, r0, r10]}}], 0x80, 0x4000000}, 0x4041) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:23 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 10:00:23 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfb, 0x0, &(0x7f0000000100)="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"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x12, 0x3, 0x1db, &(0x7f0000000680)="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"}) [ 1563.953520][T21130] debugfs: Directory 'loop0' with parent 'block' already present! [ 1564.057709][T21137] binder: 21133:21137 ioctl c0306201 0 returned -14 [ 1564.116855][T21139] binder: 21133:21139 ioctl c0306201 0 returned -14 [ 1564.773307][T21145] binder: 21144:21145 ioctl c0306201 0 returned -14 [ 1565.309336][T21147] binder: 21144:21147 ioctl c0306201 0 returned -14 10:00:25 executing program 1: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x5, {0xc93, 0x6, 0x8, 0x7, 0x7, 0x8001}}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = gettid() r2 = gettid() syz_clone3(&(0x7f00000015c0)={0x10000000, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0, {}, &(0x7f0000000540)=""/57, 0x39, 0x0, &(0x7f0000001580)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x5}, 0x58) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000001640)=r3) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0x80000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0x11}, &(0x7f0000000100)=""/13, 0xd, &(0x7f0000000140)=""/243, &(0x7f0000000240)=[0xffffffffffffffff, r1, r2, r3], 0x4, {r4}}, 0x58) syz_open_procfs(r1, &(0x7f0000000080)='io\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 10:00:25 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=0x0) r4 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000480)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r6, r7, 0x0, 0x800000080004103) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r8, r9, 0x0, 0x800000080004103) r10 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$unix(r2, &(0x7f0000000580)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000100)="09c0fb389d92787d1c82e0e53f24e30382106286f344e9852460c694f1449b3e9022de3a28bd4fd5b95f73314102bf10ebb945f78f3b2f8c9cfe8381dc2f52ce7dd3e1810e2babf75e66343b9a8cc7792285b15ab05f8d34af0d6b03a7d3aefe2e54612608eec14f766aff4b7c8a163d56960e07bc159155f35264b19cd14a81ba998b3a3f968fee559f6a08499bbcbb51724a7bda84b7f7d37f449744fa1b2ed60e41accee7257c8166d2fe8608ab3a67640baca0e8f8249e18", 0xba}, {&(0x7f0000000340)="f4551fc48bb1a3c13ef2f486409796412c22b840660a65015f065724bea4bc5b5d0d93aee2889dc6f5aed62ea8405abb41ff5d180f5f7dd2d15f1cb1c6a650091ef07fe16b739715ba19e393796c3b43f9e761db092276a9f43d01c2d69c104765aa6a6445e7da55dbb16877c04d893c2b8cf9ac50a88e8b94e4541e8a31c95b66587cb0ed2628e9c84f978ec12ff5fec55f9362a09959c288a18803e67e673593c1fc1b", 0xa4}, {&(0x7f00000001c0)="cafd1ad17292b265835281feb2f489726f522f30b706b308b7b064dd9bedd9758e50816d8fcbfb316861559bc6cd158564a92e096d5db8fa867e91d2f32f3330fa37f35d", 0x44}, {&(0x7f0000000400)="dbd9ceeabe43b9c7ef2d84b32ac4fedb380c55a53bab26424d88de65cfba7443935bc0684081dd6dc3af23b079d8af6ecdfbe3370860d54562b4224f54e117dc5398dbd06e73113de8a15ccba0fb279088a4f7216d740f404dd162c5c0e5b3a1391cc5fc3ecfc1b3f61dba53c0ef0e97", 0x70}], 0x4, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r0, r4, r0, r0, r5]}}, @rights={{0x18, 0x1, 0x1, [r6, r0]}}, @rights={{0x1c, 0x1, 0x1, [r9, r0, r10]}}], 0x80, 0x4000000}, 0x4041) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:25 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 10:00:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000101010300000000000000000200000018000280140001"], 0x38}}, 0x0) 10:00:25 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1565.834417][T21156] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1565.871156][T21159] binder: 21155:21159 ioctl c0306201 0 returned -14 10:00:25 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=0x0) r4 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000480)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r6, r7, 0x0, 0x800000080004103) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r8, r9, 0x0, 0x800000080004103) r10 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$unix(r2, &(0x7f0000000580)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000100)="09c0fb389d92787d1c82e0e53f24e30382106286f344e9852460c694f1449b3e9022de3a28bd4fd5b95f73314102bf10ebb945f78f3b2f8c9cfe8381dc2f52ce7dd3e1810e2babf75e66343b9a8cc7792285b15ab05f8d34af0d6b03a7d3aefe2e54612608eec14f766aff4b7c8a163d56960e07bc159155f35264b19cd14a81ba998b3a3f968fee559f6a08499bbcbb51724a7bda84b7f7d37f449744fa1b2ed60e41accee7257c8166d2fe8608ab3a67640baca0e8f8249e18", 0xba}, {&(0x7f0000000340)="f4551fc48bb1a3c13ef2f486409796412c22b840660a65015f065724bea4bc5b5d0d93aee2889dc6f5aed62ea8405abb41ff5d180f5f7dd2d15f1cb1c6a650091ef07fe16b739715ba19e393796c3b43f9e761db092276a9f43d01c2d69c104765aa6a6445e7da55dbb16877c04d893c2b8cf9ac50a88e8b94e4541e8a31c95b66587cb0ed2628e9c84f978ec12ff5fec55f9362a09959c288a18803e67e673593c1fc1b", 0xa4}, {&(0x7f00000001c0)="cafd1ad17292b265835281feb2f489726f522f30b706b308b7b064dd9bedd9758e50816d8fcbfb316861559bc6cd158564a92e096d5db8fa867e91d2f32f3330fa37f35d", 0x44}, {&(0x7f0000000400)="dbd9ceeabe43b9c7ef2d84b32ac4fedb380c55a53bab26424d88de65cfba7443935bc0684081dd6dc3af23b079d8af6ecdfbe3370860d54562b4224f54e117dc5398dbd06e73113de8a15ccba0fb279088a4f7216d740f404dd162c5c0e5b3a1391cc5fc3ecfc1b3f61dba53c0ef0e97", 0x70}], 0x4, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r0, r4, r0, r0, r5]}}, @rights={{0x18, 0x1, 0x1, [r6, r0]}}, @rights={{0x1c, 0x1, 0x1, [r9, r0, r10]}}], 0x80, 0x4000000}, 0x4041) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1565.909603][T21162] binder: 21161:21162 ioctl c0306201 0 returned -14 [ 1565.925243][T21163] binder: 21155:21163 ioctl c0306201 0 returned -14 10:00:26 executing program 3: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x5, {0xc93, 0x6, 0x8, 0x7, 0x7, 0x8001}}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = gettid() r2 = gettid() syz_clone3(&(0x7f00000015c0)={0x10000000, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0, {}, &(0x7f0000000540)=""/57, 0x39, 0x0, &(0x7f0000001580)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x5}, 0x58) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000001640)=r3) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0x80000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0x11}, &(0x7f0000000100)=""/13, 0xd, &(0x7f0000000140)=""/243, &(0x7f0000000240)=[0xffffffffffffffff, r1, r2, r3], 0x4, {r4}}, 0x58) syz_open_procfs(r1, &(0x7f0000000080)='io\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:26 executing program 4: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x5, {0xc93, 0x6, 0x8, 0x7, 0x7, 0x8001}}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = gettid() r2 = gettid() syz_clone3(&(0x7f00000015c0)={0x10000000, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0, {}, &(0x7f0000000540)=""/57, 0x39, 0x0, &(0x7f0000001580)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x5}, 0x58) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000001640)=r3) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0x80000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0x11}, &(0x7f0000000100)=""/13, 0xd, &(0x7f0000000140)=""/243, &(0x7f0000000240)=[0xffffffffffffffff, r1, r2, r3], 0x4, {r4}}, 0x58) syz_open_procfs(r1, &(0x7f0000000080)='io\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:26 executing program 2: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x5, {0xc93, 0x6, 0x8, 0x7, 0x7, 0x8001}}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = gettid() r2 = gettid() syz_clone3(&(0x7f00000015c0)={0x10000000, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0, {}, &(0x7f0000000540)=""/57, 0x39, 0x0, &(0x7f0000001580)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x5}, 0x58) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000001640)=r3) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0x80000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0x11}, &(0x7f0000000100)=""/13, 0xd, &(0x7f0000000140)=""/243, &(0x7f0000000240)=[0xffffffffffffffff, r1, r2, r3], 0x4, {r4}}, 0x58) syz_open_procfs(r1, &(0x7f0000000080)='io\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:26 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) [ 1566.920271][T21162] binder: 21161:21162 ioctl c0306201 0 returned -14 [ 1566.975423][T21173] binder: 21172:21173 ioctl c0306201 0 returned -14 [ 1567.013451][T21179] binder: 21177:21179 ioctl c0306201 0 returned -14 10:00:26 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000080004103) r1 = syz_mount_image$qnx6(&(0x7f00000002c0), &(0x7f00000005c0)='./file0\x00', 0x7fffffffffffffff, 0x6, &(0x7f0000003700)=[{&(0x7f0000000f80)="9e854ef47260732f4dae4ea96fd6265f06ae342f7975b502c30c772cc999e91129547f810bd0493b0abf0a2c6f3f512eb48f8f5a10bf522a8c4856d6d3e93ba04e31b6823e33d4cd4dde6c17d9b890d75462450bc09dfd9b4d5356701bca230dd8598e390f7aa0a8af15c616871e83dc9f353fd0db5f19c86ac965237630bfac81e2a2fbe9e98acc66c35fd1159f15c0689a1ee001ef32ec1813245198f482cb61824b31a8ed06ecc73030ce876e9eaaaa52170af498ac3a097d44ffb569b71fa91ef35ee1a9aadf1082694fe37b", 0xce, 0x8b}, {&(0x7f0000001080)="ff2af842f6a67b2c995507e17e9961377a725fd37c03a184b5e32064e9778191737123654cd1c980fe254106a7a35c7dd9cbf5df70e4f8a2e86724bda5237318d9b3efc2916fdfcc3690ed69a7b8468c08d6a23fb76020c4e8cc83efd301b029104b", 0x62, 0x1}, {&(0x7f0000001100)="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", 0xfc, 0x8}, {&(0x7f0000001200)="4f99fe5fe94574a82ee0cea9e5f3f39065964b8961b890d39e80cb289b4bed89989e98e1c4060047115f773b9125785912706cf19929d790529f2a0f8ca14b34f6d9080ceb2e723ec9171635bdfcaa8a86e0f7990d79ba0e254b8838530e4ccad856bebd1abd7b56b869d888d38fc67967a13482d0a6b4deda621e91de3499b7c372f95d81fe36f572a893", 0x8b, 0x1}, {&(0x7f00000012c0)="ac4079833e65ca31e5afd8339f6c20b14e6dca130d74861a20287d1d2ebfb6cd15e7cf35dda9c490b44e6d34d88e0710e464aa0187469f86be3e438ff246766f04e9362a4a2be01cb9e28e7b7e7acf6a0689f07eeef9", 0x56, 0xbd96}, {&(0x7f0000001340)="d43ba215d6bc85d832e8d304b0d5d0566c62d26d84807feb4e46ae85222e6a02d12b72d10dabc079f760cdcf26fa9b33c2142455569700b79623b38fbf0892ad0cb67295b3c891b6f12cadcb7e8e201158fc75c73c688ef1726412db10911f35a602195709ba1cc042be6332e2181e3dd9b901f5756707efd31834a08eb2770246eb770f13256bf6cc9bf753f772bd70a2389a4de9cb8a6f00dd968893a967ef86221c11b69bdecc5738dc52762f70859d902eeb3b8ede692f976ef347f685aa9a9bdc67fdad04a6131c64e1518aa04d514a4030bd47", 0xd6}], 0x80, &(0x7f0000001440)={[{}, {}, {'\xa3+'}], [{@smackfshat={'smackfshat', 0x3d, './binderfs/binder0\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '@{'}}, {@measure}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@pcr={'pcr', 0x3d, 0x24}}]}) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000600), 0x311002, 0x0) syz_mount_image$msdos(&(0x7f00000037c0), &(0x7f0000003800)='./file0\x00', 0xef, 0x1, &(0x7f0000003940)=[{&(0x7f0000003840)="94ec24e57f4df09fd5a11e3b994c68542222ca241550ea1466dc5c9be0b83406eb5fcbb2e8fc8eeba35726737eb589631aba85490588bbfbb37f8e184b159a28af7d0f5a37cb6d082d1dcb50842edd93d1c3257a1d2a990f6938d4c89f40f8920d4b83f564f5e28cf5d9fc00b6507d379da8a649b329f167ea7c3f11cedb6958b699e253666e7f9bf0f4a8caf14182d41be7e59c2153368f64de461526657f2b3eb203265511a771d9a74deccfc4994842fc385a8b7f0f0e73a18519e62dc074613d162c51240efcfe315e730e5d1d4251dee27aa58d2d2fcf386ec89ff5aba683a92f7bc2768fd4c27fe95bf641a5c4ebb64b4d47681c", 0xf7, 0x8}], 0x88000, &(0x7f0000003980)={[{@fat=@flush}], [{@context={'context', 0x3d, 'root'}}, {@smackfsdef={'smackfsdef', 0x3d, './binderfs/binder0\x00'}}, {@obj_user={'obj_user', 0x3d, '.*\'((@[!]'}}, {@smackfsroot={'smackfsroot', 0x3d, './binderfs/binder0\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, './binderfs/binder0\x00'}}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003c80)={0x11, 0x9, &(0x7f0000003a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc6}, [@exit, @call={0x85, 0x0, 0x0, 0x39}, @exit, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f0000003ac0)='syzkaller\x00', 0x47, 0xb5, &(0x7f0000003b00)=""/181, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000003bc0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000003c00)={0x2, 0xd, 0x9, 0x101}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000003c40)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) openat$null(0xffffffffffffff9c, &(0x7f0000003d00), 0x101001, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) r4 = getpgid(0xffffffffffffffff) getresgid(&(0x7f0000003d40), &(0x7f0000003d80), &(0x7f0000003dc0)=0x0) r6 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000003e00), 0x0, 0x70) read$FUSE(0xffffffffffffffff, &(0x7f0000003e40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005f80)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000340)={0x270, 0x2c, 0x10, 0x70bd26, 0x25dfdbfd, "", [@generic="e44e4b51b50a7695d28c22aac01a10f0d87b2ae6af2dae0e561404fff24fb083b48b02a72e51b120b44a3854bcdc98d02982171d9fbe5a15ff7a0c2b842ae643fd2f150822ee783dc563c2e8c60cbf68d10376c665cba1156e844f810cf61513bf0a2265ba20fec0b18e1aa0b9cb02c0e5e2636e1ef9c154ba5bf60ae3577c8a034e7e235455d33fc366fb91f585a268e5c86ae7442572650ce089515134545bb8f10f9d79cbcd43945b9200e015a4445910dc5dbd61decb0fb156fc478f781a4ce74292b6062912ffe3dea3470036361a2e", @typed={0x95, 0x63, 0x0, 0x0, @binary="c7d5856152f953982f47af3c66084cfcf907bd6c765a79830d3f8d177756ec3ff1c8c8f495786bb1fa4f2f3c5ffa4fa2951e582f289547006150169f791dc2607bf1514fc1cadff1406eb92b8293026a9fc780118f87a2543ce371fa06d79196f89fc6d2a40c80376aa618a69c2005b0d10321d6ad0016a1cc407f11f7b8ae82d482f04284e131502b5e82e9b6cc5c5842"}, @generic="7805014318a7692e05525744437c535f7da27d3e60a81870e236f288d462d9409f008e68f18162ce5e11f3a0f5976f00ab6f9ccacdbe8ede49ee02c1fdb24ed500e47e532b6d1933c789bd9f9c9b4509198ad6206c931485121cc554ff7f485ac2646600ffd61577d6d51ffddff2b2b5ba6f40985c2c0ff2a87f0c9462eec88fe0315fc886c331ea9c33db65d54d2ea1d82124af7a33af6d06972a9fd0af38768dae7ebc9a415bf2fbc5bcb707b89fcd18cc1da95e0104efc987a9d017a4df53700ab8de7c6cbdc52b3dda648d560b1ff28ceba6c6f2a89159976542c594c88ec23a1378f898ee9bd794204e738bb877ab7458632a"]}, 0x270}, {&(0x7f0000006540)={0x29c, 0x16, 0x10, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x8, 0x6, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x89, 0x0, 0x0, @pid}, @nested={0x4, 0x60}, @nested={0x1e8, 0x0, 0x0, 0x1, [@generic="cd03edf4574ef5bdef0ff89059aea9e57715ff32f90af8b43174f2b3866e21af0692453646d06f93ff880e48e930bfe6300abf9d07ba81b49b92d3493f43004e5530c8963b813db338ab8d543f68afd191ad9f0c874a5fdec6ce7591e7564d15c623ae6049073caaa33084fd8b7a82863c19e104e6fa30815fcf9d2794f14a125adb14b22565daa7a834f15dbcece95032f3e309c6a36cd6fc0b941ea86aa4c5350f1d103c20621fe357aa3216f7d73fa074f3947791154beb307b0f6eb73e59e4456e", @typed={0x5, 0x61, 0x0, 0x0, @str='\x00'}, @generic="79c448e0b5d99fc1c5b59ea722dedaf8fe49906871f8e5cae9b06e9652bbc7cd975d5741f0630f05437ec57633b135fcf9cdc5021d15399ddf3a6ea718ccff60c7637b326ecbe21f5555ab9e583014190d66bf", @generic="e45f6fd3e735f34ea11017c6358e15050373e76f4ebd5e186654b19eca4fed3206248edccc2a7a2c1b4d58ce1facdff7d72d20adff94318c491eaf7c198848926f492b05aa44cff56e3dbc379bf9a68c171d47f24c75854ce8f517a27ccd668142ae27b0d10e79280d0c805a87c967c81c3e73d2392fbd91b711524ec373d32e7c1d6fab36bde80f68a235a575a762f442c7dc6b7afecfae0dc27bd1647f644700ccb2413b01d79ea232d860807a672e84deb1cce31040e13bb58cd5", @generic="11c9", @generic, @typed={0x8, 0x77, 0x0, 0x0, @pid}]}, @nested={0x18, 0x67, 0x0, 0x1, [@typed={0x14, 0x75, 0x0, 0x0, @ipv6=@empty}]}, @generic, @typed={0x8, 0x55, 0x0, 0x0, @fd}, @nested={0x6e, 0x60, 0x0, 0x1, [@generic="1da22c2c4db4df6cd577b134ee82bf2263c176a80c0ae81ffc9538458378926a4bd457cd5cbffe7ce6ce9d39a217db45c577ba253d958c70bcac9ff6ec3c4d7e134177b64d5d528b40d72fe09b2c631540772d4f7b807cd44727adca388811cd02f19de3845ba7731912"]}]}, 0x29c}, {&(0x7f0000005fc0)={0x4a0, 0x38, 0x1, 0x70bd2b, 0x25dfdbff, "", [@generic="42832d51958cf13b1cfb6e90cedbdac85d41b7298a205ea81d7502376ef57111462ef6dbb40007948d0a55070145622c8903d7bf8537fb0f5dff7d237d2ec8861ba67c35af1ec2a4453b25da149d9ac40c57bd91473abe8cb30489cec95c23cebf2f2224d75229c95673eb95044c86545f6e4cceca31664c844b35ad37e78a35ea029c7f35326611de65cf8d0aef84f43bcee7e2f3baed0f9386caf583a40c8d67a66d29c162f4", @nested={0x107, 0x39, 0x0, 0x1, [@generic="8fb526a692c2e87cc8579805cabffbc0885fb59078566d7eda2f45369a2f58a5606482b0157534d406bb0d439b9e81ef78cac646f13efe6cef2424262ca141da97e8b3cc987a3d74ed74bca50c6d97c38d4a928da050c604cf73b65917aaec20344fe662f6493c3d849551f1f14f3d01f5b824807ffff5b86a17b6d132bc1139cac3c781c697715b", @generic="ca8a30b8aed9a06d2f26485050bc98a454243ac74a4d33893a1faef493f1f7a1f39dbb11f24b3574d4656998d09fe2c21284fa980de590234a810ad2af0cdcee12b8032369b35dafcf523240bc524dac1e420cf3f3413efc47545658a35d166e45ce643ed749332702a054a15abeb830d5deb2447d5206af82e381", @generic]}, @nested={0x199, 0x54, 0x0, 0x1, [@typed={0x9, 0x5a, 0x0, 0x0, @str='}\\.+\x00'}, @typed={0x4, 0x42}, @generic="452786456e24cd0928c73b027167b994bd2648580836e914e361f9f28a80d83b4397f0df2b909d33b00ee2bc2cea634e83ca66dfca9064eb4ecdd903bf512f9fd93d7f28f218", @generic="ab951b82fdaa96e6a3774f4db1ea2702924aba434c547e0a7b48dbcf75aad43387edb8dbc0fbd5d4cca4dd8e68953e40dab4df9e7b4d070a1dece4f35e9a316d", @generic="22dbeb06e01b39107de7c4809bbb40e7d7518b5dd63f6fa5368e3fc36ecbc0ff3454e59b13aadd914967a107c510f308417ad54d0eec24b155d612d4f46f0978168fc3a9a1af6c0dcfd056bdea1bd3c7c4be42a31204e3428379316d41f7da7a9c8cf6861207c0da0729236bb6e287f00500", @typed={0x4, 0x39}, @generic="eb48c6324056703994a9ce3e9d490fdf9255202112568f6ff7028c098fd79b3e03f1770c2265e3ea7736ae7e42bb87db25449ffac24d79f50bea9e0ebbabf3c65110c87e23361484d036a5e8d2b22ed9c428ec5d7f32b864ddb3b369f551ce9a1ae127e4cf4c42fad2bed4b3e8", @generic="b958b4bee9aea0efb75870c0", @typed={0x8, 0x6f, 0x0, 0x0, @str='\'\'\'\x00'}, @typed={0x8, 0x87, 0x0, 0x0, @fd}]}, @nested={0x144, 0x64, 0x0, 0x1, [@typed={0x8, 0x39, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x48, 0x0, 0x0, @uid}, @typed={0x8, 0x1, 0x0, 0x0, @fd}, @generic="71a0a2f5b391b7544faa46aebfaa6415f298b22025c192b91f1288998ee2e25c6f95d41fb9821f5c7a1aa0bccd977647488de9dfcf47417591303b7bed25e21fcc1c4a92ed9918258de5a6bfd241823686c0eb1da8d0a41c28239c72933f8d9a60f94e8a811e3ca8947eaa489b067f289cf6567bf934101d94129525c726bc965eb55ac6ef7bd613e37c1f74cc3590f4b82e8c90fd836eb2436f4984e0fda96ac3726f3ba58ed4c770659f718600a4293814a75d8b846f298467a9048f7d44d5", @typed={0x8, 0x52, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x4, 0x51}, @generic="23e89df68c2773ead76db36b82c3d5d36e68c9cb90f8a9d4b05bae972aaa46e556c7ee917857ff95cf16f7b1a38f1145206b9c5ad3c0757baeb273619961ef8b9803fb3f760bc941c8c8bebd", @typed={0xc, 0x57, 0x0, 0x0, @u64=0x8fb6}, @typed={0x4, 0x3d}]}]}, 0x4a0}, {&(0x7f0000001500)={0x21c8, 0x15, 0x8, 0x70bd26, 0x25dfdbfb, "", [@typed={0xc, 0x38, 0x0, 0x0, @u64=0xa1d}, @generic="b29ef345ddf7164d", @typed={0x6, 0x3a, 0x0, 0x0, @str='&\x00'}, @nested={0x18, 0xc, 0x0, 0x1, [@typed={0x14, 0x27, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, @nested={0x2175, 0x22, 0x0, 0x1, [@generic="9526f02af2edb4735b1b6a20c0feed164f764890ea0f26874c9a09bf047d115c602d4f17d3b0", @typed={0x8, 0x2, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="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", @generic="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", @typed={0x8, 0x27, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x43, 0xb, 0x0, 0x0, @binary="a3b9ef6493093d4ea1b2a61da146a8cff0e69e7bbc2c2c1afbf63cf33a3152778c5b8e15a219544d24b35e4fb786235231f281da0a30288b6a4af02396f2ca"}, @generic="1b414021944dae4c24f13f28309b9d5adea421e244652e055d4961aff7376d58c47625d3dc57c79f17778d1139363adf767ad191689f2eec47c95b25485b856531c152aad91a8f22c3305a569d34b4ff869a315b9185e778e04d18fbdf490a6800fc5345afdef32b2e63d97791145b2c87f08d48e9ad51a04402384c7a171587a5fe5fac2b00364346e3eaa10b44bf280648f62a96b612a0df17876356adc5a929e298ff71293f79a56d001d0c6e651a973f879cfa973764360e1cd3e367a6954ff82c6d5174330e90df9268ed0fe295bfed7ba82f903785fa463096078b279c1d5b645ea0048b9bc8fc429768ff869729eb1bf131d534"]}, @typed={0x8, 0xe, 0x0, 0x0, @pid}, @typed={0x4, 0x83}]}, 0x21c8}, {&(0x7f0000000140)={0x18, 0x38, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x8, 0x38, 0x0, 0x0, @pid}]}, 0x18}, {&(0x7f0000000180)={0x18, 0x3f, 0x20, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x5, 0x5, 0x0, 0x0, @str='\x00'}]}, 0x18}, {&(0x7f0000000e80)={0xd8, 0x42, 0x300, 0x70bd2c, 0x25dfdbfe, "", [@generic="08f0e1a45f68ce7ce3533a7ce71dc8c82cd5196bbf59c6ed0b8407f79ad627dba00a4855242950160a83af6e20a1a8c2d5bdfca3cd590d20939c9adc226512f3c4f29871ac60395f482fc5b04fb203ba68c70698339f3d677c5807e9e7e9fda9ac75858bc9d1d7784ee4791eaeb0c67b078427b5951286b0a2222861e2ac5f14844877234d98855cdc92191dbc461cc8db304619f833e5ce73f1ffe379cbf440be7cb05b62fd1c4fde297a", @typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x49, 0x0, 0x0, @ipv4=@local}]}, 0xd8}], 0x7, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0x0, r5}}}, @rights={{0x24, 0x1, 0x1, [r6, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7}}}], 0xd0, 0x40}, 0xc000) 10:00:26 executing program 3: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x5, {0xc93, 0x6, 0x8, 0x7, 0x7, 0x8001}}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = gettid() r2 = gettid() syz_clone3(&(0x7f00000015c0)={0x10000000, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0, {}, &(0x7f0000000540)=""/57, 0x39, 0x0, &(0x7f0000001580)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x5}, 0x58) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000001640)=r3) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0x80000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0x11}, &(0x7f0000000100)=""/13, 0xd, &(0x7f0000000140)=""/243, &(0x7f0000000240)=[0xffffffffffffffff, r1, r2, r3], 0x4, {r4}}, 0x58) syz_open_procfs(r1, &(0x7f0000000080)='io\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1567.088094][T21180] binder: 21177:21180 ioctl c0306201 0 returned -14 10:00:26 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000080004103) r1 = syz_mount_image$qnx6(&(0x7f00000002c0), &(0x7f00000005c0)='./file0\x00', 0x7fffffffffffffff, 0x6, &(0x7f0000003700)=[{&(0x7f0000000f80)="9e854ef47260732f4dae4ea96fd6265f06ae342f7975b502c30c772cc999e91129547f810bd0493b0abf0a2c6f3f512eb48f8f5a10bf522a8c4856d6d3e93ba04e31b6823e33d4cd4dde6c17d9b890d75462450bc09dfd9b4d5356701bca230dd8598e390f7aa0a8af15c616871e83dc9f353fd0db5f19c86ac965237630bfac81e2a2fbe9e98acc66c35fd1159f15c0689a1ee001ef32ec1813245198f482cb61824b31a8ed06ecc73030ce876e9eaaaa52170af498ac3a097d44ffb569b71fa91ef35ee1a9aadf1082694fe37b", 0xce, 0x8b}, {&(0x7f0000001080)="ff2af842f6a67b2c995507e17e9961377a725fd37c03a184b5e32064e9778191737123654cd1c980fe254106a7a35c7dd9cbf5df70e4f8a2e86724bda5237318d9b3efc2916fdfcc3690ed69a7b8468c08d6a23fb76020c4e8cc83efd301b029104b", 0x62, 0x1}, {&(0x7f0000001100)="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", 0xfc, 0x8}, {&(0x7f0000001200)="4f99fe5fe94574a82ee0cea9e5f3f39065964b8961b890d39e80cb289b4bed89989e98e1c4060047115f773b9125785912706cf19929d790529f2a0f8ca14b34f6d9080ceb2e723ec9171635bdfcaa8a86e0f7990d79ba0e254b8838530e4ccad856bebd1abd7b56b869d888d38fc67967a13482d0a6b4deda621e91de3499b7c372f95d81fe36f572a893", 0x8b, 0x1}, {&(0x7f00000012c0)="ac4079833e65ca31e5afd8339f6c20b14e6dca130d74861a20287d1d2ebfb6cd15e7cf35dda9c490b44e6d34d88e0710e464aa0187469f86be3e438ff246766f04e9362a4a2be01cb9e28e7b7e7acf6a0689f07eeef9", 0x56, 0xbd96}, {&(0x7f0000001340)="d43ba215d6bc85d832e8d304b0d5d0566c62d26d84807feb4e46ae85222e6a02d12b72d10dabc079f760cdcf26fa9b33c2142455569700b79623b38fbf0892ad0cb67295b3c891b6f12cadcb7e8e201158fc75c73c688ef1726412db10911f35a602195709ba1cc042be6332e2181e3dd9b901f5756707efd31834a08eb2770246eb770f13256bf6cc9bf753f772bd70a2389a4de9cb8a6f00dd968893a967ef86221c11b69bdecc5738dc52762f70859d902eeb3b8ede692f976ef347f685aa9a9bdc67fdad04a6131c64e1518aa04d514a4030bd47", 0xd6}], 0x80, &(0x7f0000001440)={[{}, {}, {'\xa3+'}], [{@smackfshat={'smackfshat', 0x3d, './binderfs/binder0\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '@{'}}, {@measure}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@pcr={'pcr', 0x3d, 0x24}}]}) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000600), 0x311002, 0x0) syz_mount_image$msdos(&(0x7f00000037c0), &(0x7f0000003800)='./file0\x00', 0xef, 0x1, &(0x7f0000003940)=[{&(0x7f0000003840)="94ec24e57f4df09fd5a11e3b994c68542222ca241550ea1466dc5c9be0b83406eb5fcbb2e8fc8eeba35726737eb589631aba85490588bbfbb37f8e184b159a28af7d0f5a37cb6d082d1dcb50842edd93d1c3257a1d2a990f6938d4c89f40f8920d4b83f564f5e28cf5d9fc00b6507d379da8a649b329f167ea7c3f11cedb6958b699e253666e7f9bf0f4a8caf14182d41be7e59c2153368f64de461526657f2b3eb203265511a771d9a74deccfc4994842fc385a8b7f0f0e73a18519e62dc074613d162c51240efcfe315e730e5d1d4251dee27aa58d2d2fcf386ec89ff5aba683a92f7bc2768fd4c27fe95bf641a5c4ebb64b4d47681c", 0xf7, 0x8}], 0x88000, &(0x7f0000003980)={[{@fat=@flush}], [{@context={'context', 0x3d, 'root'}}, {@smackfsdef={'smackfsdef', 0x3d, './binderfs/binder0\x00'}}, {@obj_user={'obj_user', 0x3d, '.*\'((@[!]'}}, {@smackfsroot={'smackfsroot', 0x3d, './binderfs/binder0\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, './binderfs/binder0\x00'}}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003c80)={0x11, 0x9, &(0x7f0000003a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc6}, [@exit, @call={0x85, 0x0, 0x0, 0x39}, @exit, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f0000003ac0)='syzkaller\x00', 0x47, 0xb5, &(0x7f0000003b00)=""/181, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000003bc0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000003c00)={0x2, 0xd, 0x9, 0x101}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000003c40)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) openat$null(0xffffffffffffff9c, &(0x7f0000003d00), 0x101001, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) r4 = getpgid(0xffffffffffffffff) getresgid(&(0x7f0000003d40), &(0x7f0000003d80), &(0x7f0000003dc0)=0x0) r6 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000003e00), 0x0, 0x70) read$FUSE(0xffffffffffffffff, &(0x7f0000003e40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005f80)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000340)={0x270, 0x2c, 0x10, 0x70bd26, 0x25dfdbfd, "", [@generic="e44e4b51b50a7695d28c22aac01a10f0d87b2ae6af2dae0e561404fff24fb083b48b02a72e51b120b44a3854bcdc98d02982171d9fbe5a15ff7a0c2b842ae643fd2f150822ee783dc563c2e8c60cbf68d10376c665cba1156e844f810cf61513bf0a2265ba20fec0b18e1aa0b9cb02c0e5e2636e1ef9c154ba5bf60ae3577c8a034e7e235455d33fc366fb91f585a268e5c86ae7442572650ce089515134545bb8f10f9d79cbcd43945b9200e015a4445910dc5dbd61decb0fb156fc478f781a4ce74292b6062912ffe3dea3470036361a2e", @typed={0x95, 0x63, 0x0, 0x0, @binary="c7d5856152f953982f47af3c66084cfcf907bd6c765a79830d3f8d177756ec3ff1c8c8f495786bb1fa4f2f3c5ffa4fa2951e582f289547006150169f791dc2607bf1514fc1cadff1406eb92b8293026a9fc780118f87a2543ce371fa06d79196f89fc6d2a40c80376aa618a69c2005b0d10321d6ad0016a1cc407f11f7b8ae82d482f04284e131502b5e82e9b6cc5c5842"}, @generic="7805014318a7692e05525744437c535f7da27d3e60a81870e236f288d462d9409f008e68f18162ce5e11f3a0f5976f00ab6f9ccacdbe8ede49ee02c1fdb24ed500e47e532b6d1933c789bd9f9c9b4509198ad6206c931485121cc554ff7f485ac2646600ffd61577d6d51ffddff2b2b5ba6f40985c2c0ff2a87f0c9462eec88fe0315fc886c331ea9c33db65d54d2ea1d82124af7a33af6d06972a9fd0af38768dae7ebc9a415bf2fbc5bcb707b89fcd18cc1da95e0104efc987a9d017a4df53700ab8de7c6cbdc52b3dda648d560b1ff28ceba6c6f2a89159976542c594c88ec23a1378f898ee9bd794204e738bb877ab7458632a"]}, 0x270}, {&(0x7f0000006540)={0x29c, 0x16, 0x10, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x8, 0x6, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x89, 0x0, 0x0, @pid}, @nested={0x4, 0x60}, @nested={0x1e8, 0x0, 0x0, 0x1, [@generic="cd03edf4574ef5bdef0ff89059aea9e57715ff32f90af8b43174f2b3866e21af0692453646d06f93ff880e48e930bfe6300abf9d07ba81b49b92d3493f43004e5530c8963b813db338ab8d543f68afd191ad9f0c874a5fdec6ce7591e7564d15c623ae6049073caaa33084fd8b7a82863c19e104e6fa30815fcf9d2794f14a125adb14b22565daa7a834f15dbcece95032f3e309c6a36cd6fc0b941ea86aa4c5350f1d103c20621fe357aa3216f7d73fa074f3947791154beb307b0f6eb73e59e4456e", @typed={0x5, 0x61, 0x0, 0x0, @str='\x00'}, @generic="79c448e0b5d99fc1c5b59ea722dedaf8fe49906871f8e5cae9b06e9652bbc7cd975d5741f0630f05437ec57633b135fcf9cdc5021d15399ddf3a6ea718ccff60c7637b326ecbe21f5555ab9e583014190d66bf", @generic="e45f6fd3e735f34ea11017c6358e15050373e76f4ebd5e186654b19eca4fed3206248edccc2a7a2c1b4d58ce1facdff7d72d20adff94318c491eaf7c198848926f492b05aa44cff56e3dbc379bf9a68c171d47f24c75854ce8f517a27ccd668142ae27b0d10e79280d0c805a87c967c81c3e73d2392fbd91b711524ec373d32e7c1d6fab36bde80f68a235a575a762f442c7dc6b7afecfae0dc27bd1647f644700ccb2413b01d79ea232d860807a672e84deb1cce31040e13bb58cd5", @generic="11c9", @generic, @typed={0x8, 0x77, 0x0, 0x0, @pid}]}, @nested={0x18, 0x67, 0x0, 0x1, [@typed={0x14, 0x75, 0x0, 0x0, @ipv6=@empty}]}, @generic, @typed={0x8, 0x55, 0x0, 0x0, @fd}, @nested={0x6e, 0x60, 0x0, 0x1, [@generic="1da22c2c4db4df6cd577b134ee82bf2263c176a80c0ae81ffc9538458378926a4bd457cd5cbffe7ce6ce9d39a217db45c577ba253d958c70bcac9ff6ec3c4d7e134177b64d5d528b40d72fe09b2c631540772d4f7b807cd44727adca388811cd02f19de3845ba7731912"]}]}, 0x29c}, {&(0x7f0000005fc0)={0x4a0, 0x38, 0x1, 0x70bd2b, 0x25dfdbff, "", [@generic="42832d51958cf13b1cfb6e90cedbdac85d41b7298a205ea81d7502376ef57111462ef6dbb40007948d0a55070145622c8903d7bf8537fb0f5dff7d237d2ec8861ba67c35af1ec2a4453b25da149d9ac40c57bd91473abe8cb30489cec95c23cebf2f2224d75229c95673eb95044c86545f6e4cceca31664c844b35ad37e78a35ea029c7f35326611de65cf8d0aef84f43bcee7e2f3baed0f9386caf583a40c8d67a66d29c162f4", @nested={0x107, 0x39, 0x0, 0x1, [@generic="8fb526a692c2e87cc8579805cabffbc0885fb59078566d7eda2f45369a2f58a5606482b0157534d406bb0d439b9e81ef78cac646f13efe6cef2424262ca141da97e8b3cc987a3d74ed74bca50c6d97c38d4a928da050c604cf73b65917aaec20344fe662f6493c3d849551f1f14f3d01f5b824807ffff5b86a17b6d132bc1139cac3c781c697715b", @generic="ca8a30b8aed9a06d2f26485050bc98a454243ac74a4d33893a1faef493f1f7a1f39dbb11f24b3574d4656998d09fe2c21284fa980de590234a810ad2af0cdcee12b8032369b35dafcf523240bc524dac1e420cf3f3413efc47545658a35d166e45ce643ed749332702a054a15abeb830d5deb2447d5206af82e381", @generic]}, @nested={0x199, 0x54, 0x0, 0x1, [@typed={0x9, 0x5a, 0x0, 0x0, @str='}\\.+\x00'}, @typed={0x4, 0x42}, @generic="452786456e24cd0928c73b027167b994bd2648580836e914e361f9f28a80d83b4397f0df2b909d33b00ee2bc2cea634e83ca66dfca9064eb4ecdd903bf512f9fd93d7f28f218", @generic="ab951b82fdaa96e6a3774f4db1ea2702924aba434c547e0a7b48dbcf75aad43387edb8dbc0fbd5d4cca4dd8e68953e40dab4df9e7b4d070a1dece4f35e9a316d", @generic="22dbeb06e01b39107de7c4809bbb40e7d7518b5dd63f6fa5368e3fc36ecbc0ff3454e59b13aadd914967a107c510f308417ad54d0eec24b155d612d4f46f0978168fc3a9a1af6c0dcfd056bdea1bd3c7c4be42a31204e3428379316d41f7da7a9c8cf6861207c0da0729236bb6e287f00500", @typed={0x4, 0x39}, @generic="eb48c6324056703994a9ce3e9d490fdf9255202112568f6ff7028c098fd79b3e03f1770c2265e3ea7736ae7e42bb87db25449ffac24d79f50bea9e0ebbabf3c65110c87e23361484d036a5e8d2b22ed9c428ec5d7f32b864ddb3b369f551ce9a1ae127e4cf4c42fad2bed4b3e8", @generic="b958b4bee9aea0efb75870c0", @typed={0x8, 0x6f, 0x0, 0x0, @str='\'\'\'\x00'}, @typed={0x8, 0x87, 0x0, 0x0, @fd}]}, @nested={0x144, 0x64, 0x0, 0x1, [@typed={0x8, 0x39, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x48, 0x0, 0x0, @uid}, @typed={0x8, 0x1, 0x0, 0x0, @fd}, @generic="71a0a2f5b391b7544faa46aebfaa6415f298b22025c192b91f1288998ee2e25c6f95d41fb9821f5c7a1aa0bccd977647488de9dfcf47417591303b7bed25e21fcc1c4a92ed9918258de5a6bfd241823686c0eb1da8d0a41c28239c72933f8d9a60f94e8a811e3ca8947eaa489b067f289cf6567bf934101d94129525c726bc965eb55ac6ef7bd613e37c1f74cc3590f4b82e8c90fd836eb2436f4984e0fda96ac3726f3ba58ed4c770659f718600a4293814a75d8b846f298467a9048f7d44d5", @typed={0x8, 0x52, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x4, 0x51}, @generic="23e89df68c2773ead76db36b82c3d5d36e68c9cb90f8a9d4b05bae972aaa46e556c7ee917857ff95cf16f7b1a38f1145206b9c5ad3c0757baeb273619961ef8b9803fb3f760bc941c8c8bebd", @typed={0xc, 0x57, 0x0, 0x0, @u64=0x8fb6}, @typed={0x4, 0x3d}]}]}, 0x4a0}, {&(0x7f0000001500)={0x21c8, 0x15, 0x8, 0x70bd26, 0x25dfdbfb, "", [@typed={0xc, 0x38, 0x0, 0x0, @u64=0xa1d}, @generic="b29ef345ddf7164d", @typed={0x6, 0x3a, 0x0, 0x0, @str='&\x00'}, @nested={0x18, 0xc, 0x0, 0x1, [@typed={0x14, 0x27, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, @nested={0x2175, 0x22, 0x0, 0x1, [@generic="9526f02af2edb4735b1b6a20c0feed164f764890ea0f26874c9a09bf047d115c602d4f17d3b0", @typed={0x8, 0x2, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="441c26ef466d4f747bfa553009fe7321157bbd46385e577016e26650778be0bad42c69a71f5d38b3866256d9679e21a7e9ca0df4ea62718284f29542b27484327c910dc0f3dfafc01606b9d46a49d13418aa30806d4554aa5db06fa0ca5ae03b5b86be86cfdbff6bf3f1d5c52944cc3dbd501bb8bd2bac68715e984e52460f9e85557658adca32d01c221febd16a0f8f6fe5af66f02eff5a9d10ae70f8c73b7de4930827e0fda2163426bf27ff2ed95e35c640a627e67b5d1680d8a9137b4e331d032e3c433363e68efe1c0320aeb70531dc61d5160a114564f6287ea82b8aa8fa1e446c9f59bebfcc71e8b9904abf0944659352d9cdc5cdc09ed455fe7d3812bd31ab1c4e5956c60a1a53deadbd1417163a89626178ae93c141b659dcb39d81b6461cb5cd227f5c0954255fd0c3aec958cab9911b0934a566f1e519af3a0c8a71b45b069ebf12cd311b1c408897ca4c210d0965bf88aec6b8c7a949e6b06a3dd0737ef0f5e9f4061ebe49d18f56f3e4369bfcc94f11a4c82ab07250873e53da624fb278395d915bfc7f4087565e015d3422c624889628266458cdf71c648d062e39fea51055dcf01fd9c516b881039c7ad7aac414c358050916f3935e68cd70f7ce27f138ef9c0c5eee8bd62bc821d461353b663dd9d598e097b0baf7658caf1b7fa802efc9e84fb353b868f93bf275e07ee219ec1a1b523f66d6b698a0f5042aaee3e54f8c9baa9fe989b3adda1f410be9574a6d9fc28dbb50a3a3e1572801fd153db0f78768d886aff529b5f81dbd42b4333204446a1046197badac6acd6eced5dc15f149584c7916c72a3d199ab2b11eda2ff5bbc49da3cbf2225174ab0f6847fd4fd20ffd2ac00df8b24759d180b88ebab64e4d5a0ae9840fc05c7010c710a0421c2688c42a2a808ad9eea9e63da570449ddaaae0154d92c1f2fbdb917eef42e2b90338573e2c1e2c3841ee99a5b15eba6ceb64ff39a08e7a907099bc5e22385d799f142f4cf7dedc1cd72ba58bc11287e41de5580d6af73dde1d3b67a729d88de9306fa9f1bb0082822407f5fc95cae59831ee24866061c3b03034b9d708e8a5c2168f314f78fe8dd6e571fe2bcb6a550acccaeab22b78929c2efb0d3c4439259a7ed185518cd754c452995c5ade5feb54bb08cdccceae2d9d553fa018dc8621d38cc30337822ed20bf76c7412d36127b5e2b71619ea4d6bc5a7752c58e35c3b28894b81cfb7f6a99fdf668bc249f2aa5ec780a2bf6b7767d465e4db88c6d44387d9cea9635f0fe4e0840b3a6992ca315e265b2d2b1c109a3a14fb3457f20077e25cec7811306ad34a8ac627b28bf8a7a242b2ff0f06d56712e8ab2b69182f4eb055df6b1df8ea6009e6637df2f91f01ad8b43dc5afc6a2f635a2b0607db748ac042ae40558daa7e943c1f989bc9f0fc168058960e4988f89ee6b10e2335946ff5ed0edf436025787c3133d133aeb2acba866e953b656b92ec3eb3e2f5faf25c8dfa68d649a0b74fbd654fd06f7280a06373536966e93d914c29df4878d98661da1ea3588020861727d948b58096bea00deea715429d59e56babed709ec1b74777427e61b6027300199fc6b638423aa7a9c84cd93d205b998af7086789d887a2a1e62f58296e61a11ccd83a21e3cfa0748cc43dff07ddabc904b527a083e6fdf22a77fa7a742e33bd754afade576cc306c9e20891bdc238c24be36d58ffa894879b13fddbf1dfe88af6cba2be3f8d2e69dfdafea54a208abbc7af62a8e923c3c28354f6e07db87441d0d4068ab781f11656b22c38de74f9d7a6fce9d87ddaca9ff4fd797c22d76c0398d7f56bf81f0005b5aed4880d2dab5e815ee92f46b0b2c4cceb6ba8c1942876917e33fa30881d7797253764140de956cf8ccf6f9470069d0d21d4525676bbfb6531fdbde42bf1f92c94229b8e2e337485b921fbe693b81b69d1ff68e412b2fcbddaa193c0916c114412c308d2f95102f15ad03fb7268d5257a4e9d6615741fec23546246e8c3dc5daab3fc27d89cfff65c6d9b7ea55ecd940ccf7a611e50e6b4fcbf644d6a6624c2d9bd9892f4aea9e24c80089141b1f5bab820f0411186c36c8a4af81f81a4e80ffa54fe483684d3ee944742f2b83c5abf6ba713496487e930c8b460bd58c49a6283637b8b1775c1581841985aacef026d52e334f4f8bb9a274196802980844eecb24ee79d989589a9e5b8e96feed0a0563ac50b416a32e49b4b93e08c136db9b78fab10b7f648a5e2951deb1a1893421927b2a804ebbf72d28b9168c0ea4416e928692c8fad5f0aa66861421172b2b50da1a88589de5a5f687b2cc5cd7116f60825325a5cf9d3176d7ebf9f132e65a3bc7c1875d1447e52757ee51c757c12cb4978e4b487a3a7c049cb6ccc3ccc4a9dfa0102331caef0c3d83f11ee313d456cbb3b221218bb04bb91a16d5e2504b1de67413b739a06f5c748a903b84bcce95bbd06915d109cab10bb74f2d4d1a72446ce3f537e6da9d8a0a17137667fecbf8426024b9791242017348242bc9f2c38e741e12b0abd6e524d1608c6260e27dd5ba08edbfe101885e0585d17267bb3c8fe002c8f0d049c2044f563119be241d46d9d06241aae4a16ee5e92762273c95095ee07fdb2eb3f3a66b222fdc9633a29f8ae3ceb4090538839e1a02919456c944465c1c02b59056e999826be20c401730d0ffae9285864934275560e2131d99d62c5bee0be749e813d2f51be63a89505de1610f359b6b0daeb4b4175df6475e5e29e66bd091bf3635d1468a64b0efbebdd673d2bbb1500e5381f6a5ecf586dbefc09db32b05443eacf983bbaa9673bc6c51f9371c9a22f1624dcf6adff2ab3a20ed50ba4f87284bb98340fd638bc948382f1823c7b570aa8cefc0e0db50bddba5490f67dadb5e10ad414f4e68f270551fac1ff7abdff6b17359a96105768bf1c9714c07e1c1097dcf16ba35636a71f9bd8f9542ad84488700ed93da503541e9c93d944196e7e353346b712f2337b3763b219528288ca6101937ef3bb5875533c974a9170e0394cedb07b7821529acabb80f6b3a85dc3ee8e177f50102e0e94a2c948d4062a938a482f8e08379a349e9355f270cf98b5bd4463d24c3cd87b3bd81f06c9b8f7447522ad77dda936c9a88ccf0b07924cb77bfd0ac575aab8bdc1b1f87e0fc3b59970604eb44c2f2c406e64c6213b358faa275b584e58dbced8cddf83423809430e21828ca3c212237b3d7eeb86bac02b9b19450463a1db130506327e83f4b5592947cd810e0efd3ef2504a768fb2099668ba9d9c7682520b94d8e4b83cfd7314c3f43360df9e4f5b24511ad99ea51e8eb8bca897665d7727decc666a174cd398811d29117f10a325f014a2c29624dcaa929e4d68c8f9cf915fb31ea594445c40f71dae179b451ac98052aedd26269081f9bf2c460d929e9c0562c9bbac85c1acfae333847a90ecf270e3013fcf6ceeb574a979a6c2052bab638534815df022bad7f023f786d016a013a534865bf20a494acdaf044da0f7efa35decf290cb33eb522514963184966fb930cfc0f367381b192cb2d6a5c26d6006ded1298501faaa2d2b648aaa0cbb8363deacf5933592bff3e80ccecd19a27799611f1d5144c4dc1eff77596d0aecea0ff0e499bbaeafcb590f80edeb6ddd55acb14c5351c1635dd9538a36d7312cb9475b9e044cadc61544da1910568d9d7a0fc65ff0e5429e90137454dca63d9634bb614e57ec54c72aa22aeb26208dc5ae02aa6833b814d1928c9c73625caf89f697b0aee0a40e015cab0f5348aeac9c82889ceac39ea443a118d5b097ea63c946bca13bc210d75d06356af20cc1209440110c76db84e9db6ceba8ef30b9b439a6e2c7374dd4df78ed1bd984a2ea41298bf3503d7e18cbd24396387d2a7c6ff391ba5edee2a53829f6dae13c93e641b2a5035cfa1795fa92cba5615c41dfdd5da2ff9934c399549ab067728e37d7e7e537bf3cfdb2bf4c2dd734169583ab774f6c2025302b24e4917b571c093ccf18c2a9acc0e962a97e63483bba5e35391a9a1ec410776e8f87500d8435acd88eb3ff048626dee13c55f1d437c766bcd269b019b78db1e6aba56e39aa5979b77e82509c3beedfd14ba2adf1726fabfa341dcbb8ff4c20f7e6c1aa394c2a38eae5aebb1ecf7b69eadd1823c551df7032e6fe08c1d3a3768869bc33fc5dc06c17f5618ba712220b530fe36fdf235f7b721c65458454b4ce0dff61946d0b3910b82a89469959016dcc923020700acaf020e7050aa9dea22d63a5a94ccc02c27f8bbc1a0cf8f4831a8a6867e523da0d65b724d2342288059bc98483af07741e081e460a88c127331b91b3bc0e71a18b691408ed87f8ddf3c258a5c99578a4e41ae323a267f2c90c17c1f657d0e4a16bb23ac166877cda7b80dccae1997d75ee9003f7a77ba0fd9639fc708a317e38e9bf56e54a3763e2321c7117ce15e5bd439534d675e1497ad7aa032b6f828c3922b2e6c16a6d608c1f879b80fa6e0700f25d97671273776a4ba072b9491e838dd660101b116802796e7fb598a32e689f6aefc7c08478178833945ccb074d4770b19d13548c964708607af8a7d70d110a0f859cffe214482fbde78721d0f3200a7f9c6c67b480de4a08e112da938dcc7f5d129fcd84879346c965cc08e84a64a1b35969ef8660c89a2f462a61c56e1b8dcc1a27d8b813462fffe020b25ff09baf644fc2d37fb06b885f81ef712ca92a4a252d545531797a491a72da23780c2cb0220e965316342151a8efbdfa1f4eaac5deff997c740b8ad8d49315d65dad3fdfd12f6fe155497a3a315ad3500a3a98f0c721963dcb81f69fe0e5dbbd44a54afb53c641ac25e1016fab02cfe7bdebd9a9425e82fe8414192075823019e443a9c15e2797b101303888e2b92ff90a57a3b939afeec41b16ef295750bc0b8a78652f0627c230709d30a5391a3f023941f8a0ea691b96a528d135e831c59a54c87f81b609babaca9b139550b5ce48cb0a3f4a4269811b22d2505ab3f3be2afe59deabf090f99dd5455b36bd52ce883ce4a7240eca4fcb7a2d72eba682550ed1a4927a093e368d1d3d68fafd0cdf8146ccfcd4bf1c7a4b1a190a6cf62b1320919db4f43b46155960db571d767e178370440fee30adcbb05f0f28a56b325825e04329b82b95236bb196948f749e17998664215ee7f07679691670ad56c30e905f7bdb245adb2984c5c45fe962388ba453bd4a2e1637eae41318ab0e866df927b7a18d455b7d20e98501ef94a1524d12b261b89852621f3e2da22ecec1df29b92a898f8d788f9538fb7ff82246c8678b206f36a8c53bfd3712ba1808503d45af84c67a1a53d02b850305b4f0bd83b2c0085cc972de4d71cc2d42055e35c26e17674f9716ab53859284254bbeda688b625866f9489ab7507d16edcd8eca191dd5d6835559c1211fdb61c135d3659e292c1ce2aea100a53d19a1666d25e1842eb07467d77b712c842eccf863124e0806a7ad5e1c1107db1399e0f32121824387ffced4e5c348999c511128aa57eb96941d93fbd0f5d2536ddc7ff7c6946f9550778a211386adaac3f62ad49fcf2f46343a3a8ac60151ae315bfd3f0d7a5b3d5c03b17f6e6c3dac8a0118356a53fe4467197662676b44f4fa94f510d9c327b729aabff14089c7c1437587a7dd5f28952f33f4c37a56af0fcd60baf11fd9082186ac306b6b896f06e723191329c40b2025039b5d6fbd79d5cfaf9a1d252a73ed9c9603b21d289a75ff73fd65cae71765bc796f0b08d0c59917a1a9734ea3", @generic="16dbbd9600705de8c11b469207a90a1c5616ce233fc2ddb8c40332f61e042b397ef59c6365abba5f08b4b4fbbddbafcdf9bbb4b219e5f247a6001c5316060d3204008b090da20178e9df3c2adf7350cbc3e475f9f48d9764167e841350d941a466c22576d93408e08b1ae8f1c3a14f17974486f6d3a327f6de0f344196fb4266c6d7ee7f024767079136555d84f873c1cc47c16e9e19095dea1140dad5865669475c9f1a93016860ab2b8a9f4e613f50af0fe150287a3e3bad8cf855332236258fafd0e7d432d893922519db821293c6d9697a9981c15aeafa3cc522b0310447dca428a2ca3b99bf54b089b2c67cc0004ff7bb4a708ab9b32c152b348cc6411fe703ff9881605bd21321a296946b7621948611665b3b6d95fa7c344fe245efb9a01c91e8760fed62bbc9b823b3a1b6eb41dabe0e42b21d878d4ab912318049c7354952ca5d6d6b85cccb4cdb2d7f916f8a6afad4a4c4f37f8fd6adcbf5f99026a14639cebb15ac73c5d7b45778ee036ec04871c7767f722181f1880ed348cf008cfe1b0267ff2756c2d772478f9e01e91424f40086dd5a01e8855876dfc77f728fa12d84b637b55b6e12bc98c66b1b73fd432d94ece66f45e0a3f11e0fe3b2b6dbd12367fdd23d3465822cc8847957715f1976d13982643390d2329436bf6e967858d7e6d72e4c5c0330a61820f4991ebd3e0c93e7bf352db4658a4cda7ea56bbf4137451232ce2e3bd3f28b5c21f67514ab7d5647912dbc8d04417b9eb6f2225200f19bd6622291ae0ea5f85a036af255fe8c4e624cdf9dfdd8eee396a13e4ceff4f8e6a8b7b19084f315a12a973cc33640522390f6840d2e3f1aefeac4f3a84a4800fa4401acb59bd668b574ff15e73c7069799198cd7177f8ced25ca32881635cacd67331de7ad636ed45e98216c9bb40b034e85a47ce56de2a894d9cd005eaa02d01a2885643e024af37e930934257049b21124e9cccdaf2250c720710813623b906c9f4c7fa60c894b5bf5ffb49fa62c8f60a25c81c449ac3c2c3c6e01d494d987819a08af56ae62fb78ca9803bde39c67500e08b366e440a7b9f765ee17b5c589f94501fe1593e04d8ae19ce557aa09160bf506d7cba332925ae93468624e49251882024c0e1a7e0c38d317dcb8bcd99735c304d1dcd7330552a5f4a46967da15689fc0b344d868ab55f57a18d44aa3e6871626bdea5b027a1686cb623c636d9d384ebc9982ed0d6af5b60e6882e5cae5c35b296a631cf254bfa63b9b504cd59e0897efb893a2f1c8274138f695b226aee8991b86bc590481fc6334a4b120e0b0da254e01499a2ba5808df0c5b70e574d2c59607e51a8eefa4307a56358991d35637bfc262a48e4a9efb7576d0caa7eb30863b1649ece8d667fd8e5f8748156530f6327b8bf3b6e25360c4b0f4423e4e1f5674a1727ac25c0f7f0c1c0fdd0cbd7dadb63cf9482adcd1e7bbea5b24a8f14585039500844a5c14bc61d0aa279d088f32fd85d3fee6fcad9f0505a6a09ab6ccd4ec54b592143b1682fcc8f52363b471a1a98d504d738c504ac37d0885a3118816bf29bf99d8d3653305c260cf7cf0519a4090a7b2983c84c35ee1cace448c2164b2a8569c6f4b74664d8339881ff784be584345b4d6c77f4e64550eb3901cbb2c681cf8622912b223b2607e5d530813a63b213d5fdb3173b602f6808b64329c0427610e53b492a41dfc8757a370dfb9d4724ba2bb834364a3456193a5f30a65ef0530395a7261a64123f6da2c777e5f6164b5ec7fda2ec0ea13581bc8f84a4e8a3e00d26a1d3f30f030c99b946f3ff0a7adb8829729f9463f124f7414782ecfcc498216ec6e364ed9f73d207edeafba394dfef6c818ff1c74b7aaca0cef9413b5fb19c96ec2a8bf747f234ef43813cf6d5ee2be9bc2ccc7c00237a72eead8b4512cdffb9458ef2cc7a8a5f865de42a6d935a083fe9eb1827e025b3d0160dcb0a207bc4bdbdbbeea1809e505af61961541897289fd7d32d9a6e3180f06229354b50b7510b9e52cf1de99abec8b55e7a6b7389c697feddf720ac540a4289cbc7a751219c7ee867c99df6d26bdb76438b688cdbf90df2a64ed050385b6b351cd156b6a197c71e1ce3ec75dfb6661fed394e3eb8f6a6876f4d5b9d08d52fc976607f01ad07b7cc7f9f4f3345f6a2ad406eca26b529a7524764810fc8c3a8008420587af93d21187ce2ac09547d806e8cf668f8eab26a5360c32c44fc808c8690e35f65096ebde9f80fdabd43ff3e071208b4531870c80501509842573658c42586a440fd15d81f8d14bd4dd1215b4ec68856a8e2628257129d7e7b104c9a05623c8aa6f3624cd5bb26de34ead82db09f00fad28dbba32d7895df01db085a0652e6a02963f059e3893b5d56fd83c72ba9334fd425cc284453577b55ca1318f9ddefd65e1f8354252521378cd260f2019ee56ba06b9cb602a0b40f8c038f50143869c6830235c002b9eca3b883c0ed5aad68b6dafb0ce5239601da21d6baff67db900fcffe3f1947b291887194eeba605ab0c4212583056ae3baff7eab5eacf5c700a130479a64f07c8934497542faa5fc21678d2524f5554eb72702228edcb114dbf6bbfc7069907dd4d55ba29f47f46c8709aab3d15c50d5f6a1003ef07ec2abfabc94504f12ac080063a4ec008d5cc330017fc9168877b3e105e2351268de2bc34cfeda413965cc002ce25d282a850115d15a865fe3dcd7727258e19b9726f1da50bc7f24a7ddb97fedc146ba4beb3359bc9e454dbc86a0054b70d1607274b6fe561dd3ef11b7371fc1f5a54070fd243b7330664f6d3f3d5d115d40a2770fdc9905e765194a71e152349dec6e7569758c726dbb921d9330445ae5397433069ff8c97e2bf69b37f2b3fb74e0af704dd247138996963de73ed34dec7bd7788627f201f5bda47b6d3481a1c1da76c4f0712f8d8d29459d0b3f5cd97ca4d078178752d81914ec4302493b3cf6b8889eb9fa531aafa2a307c8ddc961ee30d258ce54eb98b6b27badcbe01539e706d1adbf21762161ce07915a1089003c688401117d2bab0abcfa2ef55a5ffa6a5fb580e5d484bc27a144a4aa28e8451972d9becb68507aeab93449ebdca22fb6481f92b92fa62d792d4729a93e41b235079f8e6161e79aa9a42d6d399b5d432c922cbf38fd1da7388056362444a59ae2324f55e339aed26692a32518661b81fc356e531600c77b83931836b307b0541f963664d84025b5e65e058596de8d9b4879009fdc49efccff3a544afe8f6e09c597f9994e2da895230cfacb63186660104d7de9176b83926d8273a71c21341db5413a9afd5a37b28fc2e94846f7e3056d3d823b25803e2dc315fa1fd914236d13a1a7e07a59fa2318eecbeaba6a664af6dceb32b37f290cbe49b7d69176ef93d535a3c764cfd2a6690c22f81de344d2857f633a0d32d4a8c02fa25f7dac71521ce92c7695b1cb40a8981ad5127f0e43f7b8bade1b5271fb3ebc05951fe27db25eb6c6d24eb3dc4a8db83ff331b991e69e3584fc5191736763c03c95112aa13f884f0b0adb0c3a0c7189c9bc02346197e80a6cc456f90b0958c6767ffc8ad8646397cc9554f06173faa83ae5f032e5819ad9e211a8220cb3fb341a9c25ac1a0e6cb8eb8556caaffd90de4c0b821e5163bf1608f6cd79a0d90b727a2a08b029c3a0c2c47db5a0616b0786dce5886e55d1fa13c6941089dca56e21d07c888b52c84ed17088db1e49ac59c9b132129d1f984db321f5c2b17d83b9bf1cb3199da842c6de45616aa5812eca52b5251b1328a17e5bfaa448844d6fdfae993e277accb17765e77ab1500aedcdac72b498a8e9680a9587e670e8cc6ae34bafe3b2dbd0fc84da118922f6eb28bdba59d185351c54b930548603c4d54e0885599a03cac9ce4f224696797d3c7e146dff21ff61150b9f4dcfe0df6fb861bdb62e63e4fa898b0ac1b9283cb773f5b29d00625c9eba9ebc833a85c4fb1deaa141d1e41431e52a993a5843839fcca6682891542782ef36a0996824726461e88df714705037a933a60e6bec206c4c176bae978290143225f91f15ea8e8d2bf50e1fcd9ffd48c2657830889ee4363fc2f373a7774b0626ab415f714cd2baeb38e6be04afb170a6d530475c60237b56a080a47a7fcb7ffdc88034b76cccee47fea13df9c1464f30ddf2a8f6f80e7046cd22c8f6d0361a8029ff09a11d0aff8dde03b7cc5bc8cc05fd19b28602406b0bd559af265a4e1926d7c9600cc5085c0399626590eb5864c8f19a6d07b945e67b3e4a3b7d678d589d5f4da25c43c94e160cadb6bd6cde70c321f4cbb455a2aaa05109c89b40e2f34e7133c59fd47abeb2b2a1c8321044ca41195573658939a145ab92d13503adb61883501e36a9d4f6f7307694cda27ec8c27775ab944320bc70e36257b316a4c1cf914e02d2c2e53b65a4dde22e841d7888a5bdc5a46adafff1169d4905bdc2e2da6d3f5a4230c0e0fa3af71e0fdd13651493643cd4c81772b88c0722c986be12e455eb394e19d9c4446212fade732fe5339e8b54b27d0d3e594f858e23823f9c213af1c94d0781eb25a4fef3457f6b88e2cf0b6f927c2b44abd797b4f9dee8e86453a03ba848c3bdeec59466523fe7f66bfdb61ed1676a897acdfc178aac0e7116375d9501404d83464aecd379a4d24a0a14c5252d1d93d43bd3b9107b5615b7e8ddc78ca2353e6f1583aca9ac4e2cc3efc34b555ec2db65e7606d0ba9b755612efa49a9f9794e0eef5e20ec7b48ce778467b596b4a01711750b9e65c6bd1383d451b5459c63a2e92e3ea990cb98112e4cda53073b1f8a69212841ee448b22c8173538f84b7965f8da92587f3d29ffb80d6397979dc5c09d9762638862375002abb52ccc51573c796b36732b9319be67468a5457256e7625dbb000ba8d7e97621b2cbda13f40fa3923676f431e20daf201996b7a58214db1ae2918a66a90858224242e7cbc6527168d8295ac54ab5f8fbd94aafcabdbc42a5e7f6a0ee62dbfe5befc227d7bae55b2882c0bf5e8c0fb4f5f18d0449d1fc084506913e3a3afbf5274092e7642280d21a23f9b756c44122bb4f2905d9ef2904a446f32d2f3fa6743aba923581a572eeeff59d5fdf6f21c1e52c95751634f5fb94d2989ae53f8916bc6c21a01ea8dfe3d1e12c24bd2953dd6b5c92d799b3f1e434a27f734d1ae9b5faf80aff2dbb5ce3d1bd2e0740e994563d16cb89e71851abb947d739d72dad0083b6d81de4172ccb7ce1df7212ad0f0127a2150b11f8213ad6cdd9e363247eb8df8949d272a0aa9ebdab9a23f3e9ae71017c8f2621c1a30fb5fc0b07500e113a55f40f3adab291247fc953728737df59a258850f344c3e7ef9294a56f3312ce33e5a8dde9167590088c617a48821612f3843a40e4ea88dcaef20dba3f78186d1c7a40d21d5c1efae6395f6c59631f2892217f68b0e26d7ca90949e48544552c868f653e48a652a08f0fe8c59512ebe0c33151c804cf74e0a9bcfb7150aa05733255a05e68a1b0d2a60429fd034326429b809bf7371f8e622a10d7333da1f85d16b48d55cfaec9ae23d6e6d1a372fe727b12fad5feb5b71ba5ad88ee9a3b53fa746e2b06a217bf83fa09c559fed64142547ff104467e589431b36c73bdee4e64d4743f66ed24b26b31dc066e59ce537628685b9bd836a463db041c97f6ba5162fe4540b13ddb72030b9db83fed9ef0992108f6d881737bb6b9aa502d995fc380a15f4254b25a814d432615b04888f17a04ce3a0003579cab7bc89d2bf7b719782e2031eb8025e", @typed={0x8, 0x27, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x43, 0xb, 0x0, 0x0, @binary="a3b9ef6493093d4ea1b2a61da146a8cff0e69e7bbc2c2c1afbf63cf33a3152778c5b8e15a219544d24b35e4fb786235231f281da0a30288b6a4af02396f2ca"}, @generic="1b414021944dae4c24f13f28309b9d5adea421e244652e055d4961aff7376d58c47625d3dc57c79f17778d1139363adf767ad191689f2eec47c95b25485b856531c152aad91a8f22c3305a569d34b4ff869a315b9185e778e04d18fbdf490a6800fc5345afdef32b2e63d97791145b2c87f08d48e9ad51a04402384c7a171587a5fe5fac2b00364346e3eaa10b44bf280648f62a96b612a0df17876356adc5a929e298ff71293f79a56d001d0c6e651a973f879cfa973764360e1cd3e367a6954ff82c6d5174330e90df9268ed0fe295bfed7ba82f903785fa463096078b279c1d5b645ea0048b9bc8fc429768ff869729eb1bf131d534"]}, @typed={0x8, 0xe, 0x0, 0x0, @pid}, @typed={0x4, 0x83}]}, 0x21c8}, {&(0x7f0000000140)={0x18, 0x38, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x8, 0x38, 0x0, 0x0, @pid}]}, 0x18}, {&(0x7f0000000180)={0x18, 0x3f, 0x20, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x5, 0x5, 0x0, 0x0, @str='\x00'}]}, 0x18}, {&(0x7f0000000e80)={0xd8, 0x42, 0x300, 0x70bd2c, 0x25dfdbfe, "", [@generic="08f0e1a45f68ce7ce3533a7ce71dc8c82cd5196bbf59c6ed0b8407f79ad627dba00a4855242950160a83af6e20a1a8c2d5bdfca3cd590d20939c9adc226512f3c4f29871ac60395f482fc5b04fb203ba68c70698339f3d677c5807e9e7e9fda9ac75858bc9d1d7784ee4791eaeb0c67b078427b5951286b0a2222861e2ac5f14844877234d98855cdc92191dbc461cc8db304619f833e5ce73f1ffe379cbf440be7cb05b62fd1c4fde297a", @typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x49, 0x0, 0x0, @ipv4=@local}]}, 0xd8}], 0x7, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0x0, r5}}}, @rights={{0x24, 0x1, 0x1, [r6, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7}}}], 0xd0, 0x40}, 0xc000) 10:00:26 executing program 3: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x5, {0xc93, 0x6, 0x8, 0x7, 0x7, 0x8001}}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = gettid() r2 = gettid() syz_clone3(&(0x7f00000015c0)={0x10000000, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0, {}, &(0x7f0000000540)=""/57, 0x39, 0x0, &(0x7f0000001580)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x5}, 0x58) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000001640)=r3) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0x80000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0x11}, &(0x7f0000000100)=""/13, 0xd, &(0x7f0000000140)=""/243, &(0x7f0000000240)=[0xffffffffffffffff, r1, r2, r3], 0x4, {r4}}, 0x58) syz_open_procfs(r1, &(0x7f0000000080)='io\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1567.180340][T21185] binder: 21183:21185 ioctl c0306201 0 returned -14 [ 1567.202230][T21173] binder: 21172:21173 ioctl c0306201 0 returned -14 [ 1567.233043][T21189] binder: 21183:21189 ioctl c0306201 0 returned -14 [ 1567.286014][T21191] loop1: detected capacity change from 0 to 264192 [ 1567.292273][T21191] qnx6: invalid mount options. 10:00:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=""/4104}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000280)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCNXCL(r0, 0x540d) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000001180)) r3 = syz_open_pts(r0, 0x10400) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001140), 0x68002, 0x0) ioctl$VT_ACTIVATE(r4, 0x5606, 0x2) ioctl$BTRFS_IOC_INO_PATHS(r3, 0xc0389423, &(0x7f0000001200)={0x4, 0x0, [0x7fff, 0x3, 0x0, 0x1], &(0x7f00000011c0)}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) 10:00:27 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) close_range(r0, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) lseek(r3, 0x6, 0x5) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000000)=""/46) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:27 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$HIDIOCAPPLICATION(r2, 0x4802, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:27 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) sendfile(r0, r2, 0x0, 0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x100000, &(0x7f0000000140), 0x2, r1, 0x4}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, r3, 0x0, 0x800000080004103) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000340)={0x4, &(0x7f00000002c0), 0x2, r3, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="b1"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, &(0x7f0000000680)={0x2, 0x5, @start={0x0, 0x0, "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", "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"}, [0x2, 0x0, 0x3, 0x3, 0x4, 0x7, 0x3, 0x100, 0xfffffffffffffffe, 0x3, 0xfffffffffffffffb, 0x9, 0x3, 0xfff, 0xb0e859e, 0x3, 0x6, 0x7, 0x6, 0x6, 0x6, 0x4, 0x3, 0x5, 0x9539, 0x7, 0x101, 0x2800000000, 0x200, 0x92, 0x3, 0x0, 0x1000, 0xe4, 0x1, 0x7, 0xfffffffffffffffd, 0x100000001, 0x0, 0x5, 0x8, 0x1, 0x20, 0x10000, 0x427, 0x5, 0x30, 0x6, 0xffffffff, 0x4, 0x1000, 0x2, 0x6, 0x7a4f0411, 0x1, 0x1f, 0x1, 0x3f, 0x10001, 0x9, 0x7, 0x7, 0x8, 0x200]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000100)=0x9d, 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) fsetxattr$trusted_overlay_nlink(r6, &(0x7f0000000040), &(0x7f0000000080)={'L+', 0x3f}, 0x16, 0x2) 10:00:27 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) close_range(r0, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) lseek(r3, 0x6, 0x5) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000000)=""/46) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1567.895861][T21200] binder: 21196:21200 ioctl c0306201 0 returned -14 10:00:27 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$HIDIOCAPPLICATION(r2, 0x4802, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:27 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) close_range(r0, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) lseek(r3, 0x6, 0x5) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000000)=""/46) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000080)={0xfffff801, 0x40, 0x10000, 0x101, 0x8}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) [ 1567.984893][T21208] binder: 21201:21208 ioctl c0306201 0 returned -14 [ 1567.997680][T21207] binder: 21196:21207 ioctl c0306201 0 returned -14 10:00:27 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$HIDIOCAPPLICATION(r2, 0x4802, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @private=0xe0000000}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x400000, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r2) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1f000000b4db873b84e1daf5e1e7ede327303df6dd070738fac8e94bdc63533d23adc4502f0e560f5436fe1ef3d1646fd0bca3902230af353d43f87e3d37d97003ea1b2af4ee2ba8737f8a8c56bd70", @ANYRES16=r5, @ANYBLOB="00012cbd7000ffdbdf250a000000080001007063690011000200303030303a30303a31302e30000000000800030003000000080001007063690011000200303030303a30303a31302e300000000008000300030000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000"], 0x84}, 0x1, 0x0, 0x0, 0xc040}, 0x40000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r6, r7, 0x0, 0x800000080004103) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r3, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2b3d}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="48080000f348f1a4b037b2ede706eec3031122cf569deae87666c39ebf90e38c857d1c87116ffd49f19d06748917faf44c215f62ef80cd795b617cc3df198722be5f05e4510c683abf58e24897f17693", @ANYRES16=r3, @ANYBLOB="000828bd7000fddbdf250400000008000c000300000006001a004e2400000c001000070000000000000006001a004e22000006001b004e2100000500040007000000"], 0x48}, 0x1, 0x0, 0x0, 0x4044080}, 0x4) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x26}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008000}, 0x8001) ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000000040)) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0x7e) 10:00:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0xfdef, &(0x7f00000007c0)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x40000000, 0x7, 0x7, 0x5, 0x20, "7a4ee78b614be276d851eacc83af12c9ef93f3", 0x0, 0x100}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x5, 0x9, 0x2, 0x1f, 0xff, "eb0d463b1b92010c2553dbb7befddd740feced", 0x32, 0x200}) 10:00:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=""/4104}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000280)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCNXCL(r0, 0x540d) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000001180)) r3 = syz_open_pts(r0, 0x10400) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001140), 0x68002, 0x0) ioctl$VT_ACTIVATE(r4, 0x5606, 0x2) ioctl$BTRFS_IOC_INO_PATHS(r3, 0xc0389423, &(0x7f0000001200)={0x4, 0x0, [0x7fff, 0x3, 0x0, 0x1], &(0x7f00000011c0)}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) 10:00:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0xfdef, &(0x7f00000007c0)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x40000000, 0x7, 0x7, 0x5, 0x20, "7a4ee78b614be276d851eacc83af12c9ef93f3", 0x0, 0x100}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x5, 0x9, 0x2, 0x1f, 0xff, "eb0d463b1b92010c2553dbb7befddd740feced", 0x32, 0x200}) 10:00:28 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) sendfile(r0, r2, 0x0, 0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0xfdef, &(0x7f00000007c0)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x40000000, 0x7, 0x7, 0x5, 0x20, "7a4ee78b614be276d851eacc83af12c9ef93f3", 0x0, 0x100}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x5, 0x9, 0x2, 0x1f, 0xff, "eb0d463b1b92010c2553dbb7befddd740feced", 0x32, 0x200}) 10:00:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[{&(0x7f0000000500)="e4", 0x7ffffffffc01ffff, 0x3fe0000}], 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000003c0)={0x0, r0, 0x7, 0x7f, 0x1, 0xfffffffd}) r1 = dup(r0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000140)={0x4, "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"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xb) r2 = fanotify_init(0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000380)={0x1, 0x101, 0x1, {0x76, 0x401, 0x7, 0x7f}}) fanotify_mark(r2, 0x180, 0x0, 0xffffffffffffff9c, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) 10:00:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0xfdef, &(0x7f00000007c0)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x40000000, 0x7, 0x7, 0x5, 0x20, "7a4ee78b614be276d851eacc83af12c9ef93f3", 0x0, 0x100}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x5, 0x9, 0x2, 0x1f, 0xff, "eb0d463b1b92010c2553dbb7befddd740feced", 0x32, 0x200}) 10:00:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0xfdef, &(0x7f00000007c0)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x40000000, 0x7, 0x7, 0x5, 0x20, "7a4ee78b614be276d851eacc83af12c9ef93f3", 0x0, 0x100}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x5, 0x9, 0x2, 0x1f, 0xff, "eb0d463b1b92010c2553dbb7befddd740feced", 0x32, 0x200}) 10:00:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0xfdef, &(0x7f00000007c0)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x40000000, 0x7, 0x7, 0x5, 0x20, "7a4ee78b614be276d851eacc83af12c9ef93f3", 0x0, 0x100}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x5, 0x9, 0x2, 0x1f, 0xff, "eb0d463b1b92010c2553dbb7befddd740feced", 0x32, 0x200}) [ 1568.098223][T21214] binder: 21201:21214 ioctl c0306201 0 returned -14 [ 1569.138394][T21237] binder: 21230:21237 ioctl c0306201 0 returned -14 10:00:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDADDIO(r3, 0x4b34, 0x5) 10:00:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000040)={0x6, 0x1, 0x101, 0x6, 0xd94d}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) 10:00:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x9f) [ 1569.197618][T21240] binder: 21230:21240 ioctl c0306201 0 returned -14 10:00:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x9f) 10:00:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=""/4104}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000280)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCNXCL(r0, 0x540d) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000001180)) r3 = syz_open_pts(r0, 0x10400) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001140), 0x68002, 0x0) ioctl$VT_ACTIVATE(r4, 0x5606, 0x2) ioctl$BTRFS_IOC_INO_PATHS(r3, 0xc0389423, &(0x7f0000001200)={0x4, 0x0, [0x7fff, 0x3, 0x0, 0x1], &(0x7f00000011c0)}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) 10:00:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x1f) 10:00:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x9f) 10:00:29 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) sendfile(r0, r2, 0x0, 0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x1b77d1bfee790dff, r0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000100)={0x6, 0x7, 0x6, 0x4bf, 0xff, 0x8}) r2 = fsmount(r1, 0x0, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x7e, 0x7, 0x1, 0x3ff, 0x10, "673e2b966e3076614b145fbe6c78bba3894883"}) ioctl$TIOCSCTTY(r0, 0x540e, 0x9) 10:00:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000140)={0x8, "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"}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7e) 10:00:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x1f) 10:00:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x1f) 10:00:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDADDIO(r3, 0x4b34, 0x5) 10:00:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000140)={0x8, "a9ccd59e88cebd0f2620bf5f16d3c81e1837f1f9fb34a8e39b76cac54256f08662d23053981c58f57a698b9681560dd9e631dcdc6d1fa65e5072e613cc66f5726846341cfb3c0a8aa18baa1046d3337827930f80fe5eda4a6f74b80b8ce9efdbaac9a88b4b264492484d5b47bd279a4d7590fc8b15677e0a78946b4c8fc51f0a2b0b150ca991bd610c70868371456994ce2d7c73232b1a920faf8c621ea10936bebb8ba126b9bcba421a027ec997bcb1c128df34f323ae7215d11a111f6f3654d3f537effa25573f63b0ca13bf86595365f766fee2f6732e2f93124d8c70aac488ae3749b5bdf69c87af38a0f6ba6cf701c361d1c8d3666420bbe5d4496a32391d474bfc5b47c00c3fb19cf528c3e0aa0cbc48aa705e37ebd3ef17f6cdf2bf36f3fd1c1bf9c0cc33ae23c2eee37f04dfcc3a5ccfd644e206bdc2650c288ae35d003ae21800038d6cfbbc3bb0856b2643420666dddd8ee97dd4a8e0a2e36fd617784dcf2c7d4cc25f28fe1c6a6e9784d99b67a022fde8d6a272232fa773dfa3e9379da1a1b4494250abc0aa42d1014ae29f3026195e2225db31b6032d5d8d04c8d7f85af5ac72680ce5752845970a17b6f9e888c4e7e4f7fe41f5213546821a645fb4058610de872c464c758d5c3eb2dd7f2db5256c0aa8b1bede071a3a00e6c6b20d89e5888f23b4b3d3ff09ca67c2da0066b8b4ccd325605793a289d8d483d4"}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7e) 10:00:30 executing program 3: prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) 10:00:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000140)={0x8, "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"}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7e) [ 1570.598012][T21271] binder: 21267:21271 ioctl c0306201 0 returned -14 [ 1570.654220][T21280] binder: 21267:21280 ioctl c0306201 0 returned -14 10:00:31 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xfff, 0x1ff, 0x401, 0xd, "31b9a0cee6b744a3d0c71a3ffb88273d77a604"}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x610000, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100)={0xffffffffffffffff, 0xee01}, 0xc) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x16) 10:00:31 executing program 3: prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) 10:00:31 executing program 2: prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) 10:00:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 10:00:31 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) sendfile(r0, r2, 0x0, 0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) 10:00:31 executing program 3: prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) 10:00:31 executing program 2: prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) 10:00:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSIG(r2, 0x40045436, 0x3c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) [ 1571.909462][T21304] binder: 21300:21304 ioctl c0306201 0 returned -14 [ 1571.962046][T21310] binder: 21300:21310 ioctl c0306201 0 returned -14 10:00:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDADDIO(r3, 0x4b34, 0x5) 10:00:31 executing program 2: prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) 10:00:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSIG(r2, 0x40045436, 0x3c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 10:00:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x181000, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000140)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/config\x00') sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0xd000) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000040)) 10:00:32 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xfff, 0x1ff, 0x401, 0xd, "31b9a0cee6b744a3d0c71a3ffb88273d77a604"}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x610000, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100)={0xffffffffffffffff, 0xee01}, 0xc) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x16) 10:00:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSIG(r2, 0x40045436, 0x3c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 10:00:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x181000, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000140)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/config\x00') sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0xd000) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000040)) 10:00:32 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) sendfile(r0, r2, 0x0, 0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:00:32 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) sendfile(r0, r2, 0x0, 0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) 10:00:32 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x6, 0x400) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)=0x0) setfsuid(r2) r3 = getuid() read$FUSE(0xffffffffffffffff, &(0x7f0000001500)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)=0x0) setfsuid(r5) fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x6}, [{0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x1, r2}, {0x2, 0x2, r3}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x0, r4}, {0x2, 0x1, r5}], {0x4, 0x1}, [], {0x10, 0x1}}, 0x54, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) close(r0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r6, r7, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)='\r'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x181000, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000140)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/config\x00') sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0xd000) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000040)) 10:00:32 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) sendfile(r0, r2, 0x0, 0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) 10:00:32 executing program 2: syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x5, 0x7, &(0x7f0000002380)=[{&(0x7f0000000140)="2a1583c28e2718b94f2753410f84606e71f6e7cad67dedfce9402c970b663052342d3946a54586c5de067ad7f5327b451dca14aa0a4ae16b2f96f925c861e34775b96766fc3133b78533fa20ae03c5b6fcd3b394e663948e7cab0f3ae0752800d51c1d8a63ae8adfad4cc5ac3daa37baa8cd56e1d5c4f9ed0c1e89cf08f8c8403a9007acd7f22ef2b22a8e26ef69b09c4c9a7ad809", 0x95, 0x7}, {&(0x7f0000000200)="4dd41d47ff59aced1d68df4231cd4a1d0f0976c26c1361a3d89c44e240e4774c2e44aadebd69f64e3d0aa40a1598db06d0c0a58b052fa8cea42ad8624f3af7abf0ae9d820486d7e9d314af185213a727f5e020a3ccbc12fdb182ab8f8c7e58bb9382e4f8800ba2454da3acf2a7ff758c4f", 0x71, 0x100}, {&(0x7f0000000280)="38c37c30266c925c9294f200e018ae28bd99e3adc025f6c374855391d3c9431130c18065ce718ffb05b1e71f79e6076b", 0x30, 0x2}, {&(0x7f00000002c0)="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", 0x1000, 0x7}, {&(0x7f00000012c0)="43eeb73d825a04ff5f9abfaa691579628c6d141c8355debf503007e89036259b87bc02ca39f0ed64136034097e53159d4bee66d6b18747b83b6ec0430ea7ef98427cea6603d8893544b9db", 0x4b, 0x4d}, {&(0x7f0000001340)="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", 0x1000, 0xffff}, {&(0x7f0000002340)="9e55273db37ad40b0597686ad4ebdbcf7ecd485ec7c927cac7", 0x19, 0x8}], 0x214000, &(0x7f0000002440)={[{@nodiscard}, {@order_relaxed}, {@snapshot}, {@discard}, {@norecovery}, {@nodiscard}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(r1, 0x30541) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) [ 1572.936707][T21341] binder: 21339:21341 ioctl c0306201 0 returned -14 [ 1572.975581][T21344] binder: 21343:21344 ioctl c0306201 0 returned -14 [ 1573.010790][T21350] binder: 21339:21350 ioctl c0306201 0 returned -14 [ 1573.034863][T21352] binder: 21343:21352 ioctl c0306201 0 returned -14 10:00:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) syz_open_dev$ttys(0xc, 0x2, 0x0) 10:00:32 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) sendfile(r0, r2, 0x0, 0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) 10:00:32 executing program 2: syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x5, 0x7, &(0x7f0000002380)=[{&(0x7f0000000140)="2a1583c28e2718b94f2753410f84606e71f6e7cad67dedfce9402c970b663052342d3946a54586c5de067ad7f5327b451dca14aa0a4ae16b2f96f925c861e34775b96766fc3133b78533fa20ae03c5b6fcd3b394e663948e7cab0f3ae0752800d51c1d8a63ae8adfad4cc5ac3daa37baa8cd56e1d5c4f9ed0c1e89cf08f8c8403a9007acd7f22ef2b22a8e26ef69b09c4c9a7ad809", 0x95, 0x7}, {&(0x7f0000000200)="4dd41d47ff59aced1d68df4231cd4a1d0f0976c26c1361a3d89c44e240e4774c2e44aadebd69f64e3d0aa40a1598db06d0c0a58b052fa8cea42ad8624f3af7abf0ae9d820486d7e9d314af185213a727f5e020a3ccbc12fdb182ab8f8c7e58bb9382e4f8800ba2454da3acf2a7ff758c4f", 0x71, 0x100}, {&(0x7f0000000280)="38c37c30266c925c9294f200e018ae28bd99e3adc025f6c374855391d3c9431130c18065ce718ffb05b1e71f79e6076b", 0x30, 0x2}, {&(0x7f00000002c0)="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", 0x1000, 0x7}, {&(0x7f00000012c0)="43eeb73d825a04ff5f9abfaa691579628c6d141c8355debf503007e89036259b87bc02ca39f0ed64136034097e53159d4bee66d6b18747b83b6ec0430ea7ef98427cea6603d8893544b9db", 0x4b, 0x4d}, {&(0x7f0000001340)="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", 0x1000, 0xffff}, {&(0x7f0000002340)="9e55273db37ad40b0597686ad4ebdbcf7ecd485ec7c927cac7", 0x19, 0x8}], 0x214000, &(0x7f0000002440)={[{@nodiscard}, {@order_relaxed}, {@snapshot}, {@discard}, {@norecovery}, {@nodiscard}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(r1, 0x30541) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 10:00:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 10:00:33 executing program 2: syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x5, 0x7, &(0x7f0000002380)=[{&(0x7f0000000140)="2a1583c28e2718b94f2753410f84606e71f6e7cad67dedfce9402c970b663052342d3946a54586c5de067ad7f5327b451dca14aa0a4ae16b2f96f925c861e34775b96766fc3133b78533fa20ae03c5b6fcd3b394e663948e7cab0f3ae0752800d51c1d8a63ae8adfad4cc5ac3daa37baa8cd56e1d5c4f9ed0c1e89cf08f8c8403a9007acd7f22ef2b22a8e26ef69b09c4c9a7ad809", 0x95, 0x7}, {&(0x7f0000000200)="4dd41d47ff59aced1d68df4231cd4a1d0f0976c26c1361a3d89c44e240e4774c2e44aadebd69f64e3d0aa40a1598db06d0c0a58b052fa8cea42ad8624f3af7abf0ae9d820486d7e9d314af185213a727f5e020a3ccbc12fdb182ab8f8c7e58bb9382e4f8800ba2454da3acf2a7ff758c4f", 0x71, 0x100}, {&(0x7f0000000280)="38c37c30266c925c9294f200e018ae28bd99e3adc025f6c374855391d3c9431130c18065ce718ffb05b1e71f79e6076b", 0x30, 0x2}, {&(0x7f00000002c0)="3e24dcaed6ac07f755b1ccb52caa8b80a4662015719d95220fed3512e9f430a6b23104780416defb211b8d368594ae92d5ed917a2a048fdd24da22e83c6c93dc4121d5af8c30f987209ac26b4d206a61581b19f468a49eca8d72035df2da013207133537d7a3501b63a6373572d1b5af83c29340b7dbb4d6551156623327cc7c72bb7dd3f9a7088070e9f0dcd1c933a3e29276e543d4b2f0f97ca465aa09aa4b663ce9e25d5625c4844fba606de03ea03aee10aede5b1a8ded8d5b22951c2b8738a7a71e8915802bf38c19cae68e8ef0f6ff81cb38b2af9938276cffb3be02624925ae11615b64336f0f39bb74be35aee02a3586f54f329b815444c709f01e45af256106da59ac6523dac9e059db766315d34ff131993b2e0f0e01f4086db910e012d816fc3c73120f0cd7753e810096d6046631b14bbc2482e6fa93b15d89e10e1a0b5c8ed40fd9be8f09b8e16234f5c088968f17f32c2bbbd820f5656dce6d270e17eda8fd8b015e1cefae6c2cba765b07e951546206fea6435484fa1f0e60e63d6b619798b079d0431e74ec032fc545b2f60edaa57efaaf639c1b6bf7b89d547edf115f1bde279743318e111c567e68ae3b438f4b748ea4c68088aa8bef4817fd5a23108234b6d2d0ce3f9ae24a703217641015d7538ad0fda1b2a6ec5e4e958105b1740757d9729a76a6f65eafb0ffcb2935e84b2f79e388624d639bb416cf84f6f198f300b54610e0c320c583a12aa8a56da81fa64f111582c955e62bbd64b04410c478606b67d28b311b750015a27505d9f615ea9cd0a9f084366377c40b5c58f7047b8ecd5443675f6122ec85e6bf022ad575dc7aa9f23d68a61ea573199c376d3b1fea82dd888d4ca0f1ed72d44723898b3d1f9aee932ed9a39dd26da75f80ee68335d2819337ad918a9b1e44e77b795662676d553f22b5ae07fdf71e61b62823ed42d9f9471cee93bd65910b86d7347b6fee66c9a9aa02369124f5d929de513e6df67d835dbfcf359603a720baa3d11ffc55989c728320267675ebc2bb0ea5db81d57c474c0da727bd99041e10b66488626f7505616ff21b0a1a916ede9ad878c0e10b3c89ee8d02da13bef04df33d54db281ee43a13376e04c4dbc48d1c72e83294b9adb2be06857e4d621bde57b7cc374129893d3d23ef01dd7493b518667345b495aac0a6464436b1258ee40e24d4636170f21990b714f80679caa48c5dc8382daff5573d296441c81bb47688d6906764ef990de7d95ba5901ce85ad5e1fc5fe502fa7c5096c5ba434a9720d9032392457e00f13c72b37a28ac0fe59d4466975ff35655dab0dbd15759ffa7daa79756bffe977b46734560a43801ed05b1c4541ff44888a480d502489aa657cef3a75eddd0d1b895ff61268c020b0760cd4aaaf3e29cce59d1f05972ca36f21bfc4033617062711dc466a3477e4bfc01cc664654e8e9487a5103d062012c4292c3cd2009cb47a4926935b1cea53ec5e034357816954be11e1ce582abc7fd3ade2dc06d6b41b987ddd8655b6326ba2c397ef841a4d85330979c99da0ced71465876fb264d52ce20f58c8fff882e1dce5327a4147ec5d20025d2b36d321924450b56efc2ad1eb15d83c287c6fdae56b8b7952e267e2b5cc1c10990aba6fa4438b865535b09b21d8974a3fd0d2683f05ca0595adc7f2ab237773284e2327717f0084aabb46f0a927a2c6512c62888e3c31eae69860eddc7205010725447d18c74159e65965dceed8b764ebaa2391300ae56a576dd316f741966378a0c44c0e98670c72fa2085921cf8407d9fe50812bed1a4fe9931d6ac78f5fa181cc4442f523308d2c44bd2e82834ab0e238c64b2afaa3c131b39d8d190763c80f4958ff5fd29700208b00a317cf0134935b7e7e830bd0a9af95d9a29dc73ef595fe6f71377090c1d167b6ba39c322a2a6a47b6bbc0c1ec137dc2179dcbcbdf856a3be787c00fba7f2dc2352fff53793d77838f69630b7e389847c4ad16f541930c529197cbe7083cc6f50075889e5a00b6e204aaf6caf3bbb07e0b482c3dfb8eabe22a5780e7184cccc4d714442ee9c3a8b6bfd2b945dd072c9545451cfa390a6ead1dcff7ca9bf15de6597ebbf09bbb61271203c525611ee5aa9583b4e124bf90dfcc033e9b17a37cc5b3260b08c29a1a2b844a686cae76e7fa55eaefc706fd9314850390694b1a69981b4d60e02951225f4463ffad504d14c48f5a737142fb33ad37c92e9ee5b201f847f45af06d4fe8b4b63f6c09fe1ab246d9d717191019e0615a5609ef820ed01164c13ab8b95a8ed6cab7d394d070836409ff2b424367308b597be4ecfebe14197792e7f15f3ba2548ed3e6c35211009716f341e121d1673403631645e7840f4c625d2af47b97493fbe335a62d78c57147a337f0267f7a185b9180f7d39a51f85abee588405fa862dc3073db2625994b822f817a25a1f97ca4804226fb3d932fd815b1e5823b57a4893885b711c7d583f9c269acb89a675d1cb568f4b7b97cf81cc6d1afe20f492f81fd2ce4430c56b6f70d69e7e3110be419c044bec1669bcd7a37d8cb519325f1ca3c1357a4fe47a56758d5362e84f96a0780ca55894a9b3f0b26812d75ded1fc4dd41af99f6538617f0888abe680d1434c34ea7787cf83b37d9f5d05797affee9731928aeed1b40a7bdddb735d1d51ed2061deadc6794bc554d3234d65167f4943e082521ff19f7edeb0708247253d0314a8cfd56c65bc20bc893e4542a56884f1c332021dfe1e2aa753ed01a4edb7d4053363d6680ed07c2b81765a92cd23e57417adafc91b668372376b9370970366db48416f731901cc9e8224b90dfd2a32634ac0fa1a84b21f7ab98505feb30080bdf5f6f63aee27258b524c5f4cc3f88797cc12182072b15dac9f8ab158dcbd7bd509fbae690fc894383b5058742dac77e14564929f442fe011dc078c5c087e07cec9a8bd06caccbd4d4307dee1d4a76a9a33d3207777954487466493697edccecc81cdcc73c7318393efb914d588238987f2cbb55ee63f39121c8bdd7552bc383ed048373c857b45bf51ebde187f335623606cb3a2a7c594bb0c1a376d284142b5e6da70bd300123fe146f776745a078771b696fb7179a29ce3dfadf56d0bb8e3a52623a230b0f2476cb0f78974dcb148f827cb0dd7045211c1e359a9115d5e98d22566d8baa5d0e0c90b681872acc4c4419a486909322833bd29036d624706a78a4bf1f726b8988454d68ccbf6356fc73f3ac246f005f7ed8b35272dec6dc542928c3f5a2826b1c1c8217db11013f99bc48d521c4024b5ac3b9a575fa6d9a40f8237c6fc032640805c3b189b7b3acf7405470ca74dc4ec67fa6ffb0794931b42003389ad9e47fa20b68e656a2b29e6ebbe96600d8ca7e28910dc7ac35e17c4d59ccb18d2beaa3b970fae7ed60ab5476645227fd35743ad29e94880a6311d94ad6fdb5e5fe4dd6c0bb3c2990163f149f26d0d069e5f5a1802c76c046083888fcbd5182e12f4acb07b92b43745a46cf52bfdcdd411be7057b02523e5c85e92afb865e30332a29359a044f6baaa1006f19ca1f84766f2b293bbe8d22fda6b43dd0f513ef10ec5cc3df0c7a27e2ec4ea9623dbaa6dd1d909620ec324f0dba77476c2fe7ca14334f8c8af04f1de53ff2bc506bc6c88d011915ed537825987214781ae1fdb8584ad5cee9dce872b37314a00d9bb92d86f48241eec18ad9a04cc8446afd374abbb8ac01da28bbf63c8461d0d970421b590d9b422c41961a4f23602e6368b787df10916ea663e1663bc9d2595d82be6f40d15bdac585787743f5deb313301d0f2eb802217825967379df0a8c637eaa2e3d6d83926e172fdf930ee30dd110e49d44212779356fe59ba5de2bc200ef8906d1c76e83ed2444f8b8d7167f0e23080409d6872cc4ccee3056dbc94f5e6be311e2daffbdf0961e76c8c2f25314f0a48041b6704f17501e048a33473cb4ec5e73a6287676821d07497ec3a7cce3c49fe4d9d82cb51cebebaad65b859bc6ee9c989784786098a925e9af0b05ec3972c23454376e17127e09f9bcc33e60cc24868448fb6d590abc7d1f48d7e38f18a24ad8aff27e0a872c2a579913a3b4c85ea96bb9bc181aea9d7b3ec50360b5f9f23447bdeb78b75ebe69613b5062f9eabc4dd95bd15bfc2260196750a964235170ff2e3f834553d09937023f07a2d5f377b0e7840b06c8a12f1556ecb300beac66b744f811ed35adc6fd868245ad41b9ca86f5760eaf400a433781d1874a691bdda10632cc7b17f4d81c2259642b8ce3505af5398e0169bb5954f89368a504164c21d90020a1b0793ccfae9d07e78179e5d10e763758007b9e10640cc2bc33fa067f3fa2e0f38e2fad508ba3b5830a8cc091e0f0b0eda7b76f2a4830cf867112251ecfc2c0ca0274d804c08abf6a2fa6590738a37f50a9d59fa1079071011f55d013a76095bf4c6574e4500b978155bcd35917f63088aef6b96b3802005b0fd4a018bd9f0938930b29ab606ec7cfb111c0cac158d6f1560ac6d401d34fc87ddbe864961431a045d90ad2ccda755961cf1aae8612b1d524256b62e75ef75c0dd33ab26c90301cd0f16d2551db5e93ea3efe8200429364098733e14ca9e27400ba71525616077d55b3fba9634bb3e097fbda3cf1e78e97309d7d5f502838174eccf06f79ad3bbf899f51dccec79de51882c07a5f4693c31fd7991c52ad7005c8a26e83153f9da09d705139c6422894cd23731d41070164d0a264961952ba34913d84c4abc787eda274a59f8113fa0ed4dcf536f19ab27ecaa8835edd937d028f104ae948ef23ce77f9f3943b3ae7bdb60ba443b9dfe71c31597cce6323a354651a5cb822f012e5958ad2643183979c21fe7148b0420779d13c31035a7b74b40923d3f52ef8b6ee13d404c090c501a094a2626cbd81819aab02462a2b94bdf4621409f34e7890cc5c404fb2fc0af2bc146c7c967c28a85af77e6c9bfa654c148ddc73463febbb4ab2b7e0a51cad1cec5ebcf84aae3772039fb5dd530a1cafe73218fb087c752ce277c9d48f9e67cb1e1ab67dd7e384a40450a8b4a8b981d85c918f3a05627123c960d6c52f9e984ac1cf832963f923deedbad0a7d30b4d8c91b0aad489400d821969b8ce96ff7d8e4717e1887a0e39c8f1990bc99e32f9c90e1520fede37224c72e7f77821ebd58b0e7c74e1595f7047244a061a57a0fdf71bb7cc7ae3f6aac3653bdeb9f86218a6add125bc4db8e3ddcaad04b52a94f10a08be470d311b711c19eeb941019e09e5946a523b1ca89e4960c3b3750c5111d620f664b609dd5330cdf02fe6a635b32613b1356d21e97f013fb315ab77c50c560290c4853a2575513b661119dcfac224fd365ea7349f16ed1145899be2785c758ac837219e6eefd7b7dcaa989a2d7f6611a65cb7711b2e4a5107d32cbbee85b3d8e14578ea68239184f5bdce06841815b29b90014a5805d52d40a4c811d9711c5b8c30d58f7a00913491a68a1b1ecf2e249d8ae7c660dea4b2b6e7081ecf2784cd140851022749e94290ead89865d0dee190e59b5e14daf55c4a8103cadf6beb43a0eaf80688fd20d4949b3fd099d992c44f2ae9bbfaf81fa417a074c35b2c5d47db65fa580540c1703f5294363e9f0fdee5a37e0edbcdffd6b262181e951b0c64b4b53b740bcc6cb15ab757a04748cf9c2caab87fe9b46f72277cfe59c9d9078b2e0dfd80120c64a6ba9589ed0b5c9887f1020d457c3cff3277972474487f763e211a53c63d55f4f0e55a4a2cb78a0d0a3d3aa3df1", 0x1000, 0x7}, {&(0x7f00000012c0)="43eeb73d825a04ff5f9abfaa691579628c6d141c8355debf503007e89036259b87bc02ca39f0ed64136034097e53159d4bee66d6b18747b83b6ec0430ea7ef98427cea6603d8893544b9db", 0x4b, 0x4d}, {&(0x7f0000001340)="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", 0x1000, 0xffff}, {&(0x7f0000002340)="9e55273db37ad40b0597686ad4ebdbcf7ecd485ec7c927cac7", 0x19, 0x8}], 0x214000, &(0x7f0000002440)={[{@nodiscard}, {@order_relaxed}, {@snapshot}, {@discard}, {@norecovery}, {@nodiscard}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(r1, 0x30541) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 10:00:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000040)={0x7f, 0x6, 0x7, 0x7f}) r1 = dup2(r0, r0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x618, 0x7, 0x7fff, 0x40, 0x7, "1d20d6eb696a706c0f3570c4f2ab7c18a527b2"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) 10:00:33 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) sendfile(r0, r2, 0x0, 0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:00:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000040)={0x7f, 0x6, 0x7, 0x7f}) r1 = dup2(r0, r0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x618, 0x7, 0x7fff, 0x40, 0x7, "1d20d6eb696a706c0f3570c4f2ab7c18a527b2"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) 10:00:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_pts(r0, 0x8080) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x7ff, 0x4, 0x9, 0x1, 0x6, "e8e48fe5dd81ab125322466a2fdbaac506bbf6"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xa) syz_open_pts(r1, 0x402802) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) 10:00:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 10:00:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_pts(r0, 0x8080) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x7ff, 0x4, 0x9, 0x1, 0x6, "e8e48fe5dd81ab125322466a2fdbaac506bbf6"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xa) syz_open_pts(r1, 0x402802) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) 10:00:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_pts(r0, 0x8080) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x7ff, 0x4, 0x9, 0x1, 0x6, "e8e48fe5dd81ab125322466a2fdbaac506bbf6"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xa) syz_open_pts(r1, 0x402802) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) [ 1574.157271][T21378] binder: 21377:21378 ioctl c0306201 0 returned -14 [ 1574.220291][T21383] binder: 21377:21383 ioctl c0306201 0 returned -14 10:00:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) syz_open_dev$ttys(0xc, 0x2, 0x0) 10:00:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000040)={0x7f, 0x6, 0x7, 0x7f}) r1 = dup2(r0, r0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x618, 0x7, 0x7fff, 0x40, 0x7, "1d20d6eb696a706c0f3570c4f2ab7c18a527b2"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) 10:00:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 10:00:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_pts(r0, 0x8080) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x7ff, 0x4, 0x9, 0x1, 0x6, "e8e48fe5dd81ab125322466a2fdbaac506bbf6"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xa) syz_open_pts(r1, 0x402802) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) 10:00:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) 10:00:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 10:00:34 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) sendfile(r0, r2, 0x0, 0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:00:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) syz_open_dev$ttys(0xc, 0x2, 0x0) 10:00:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000200)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x4640, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, 0xffffffffffffffff, 0x0, 0x800000080004103) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004103) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r5, 0x8010661b, &(0x7f0000000280)) r7 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x18) syz_open_pts(r7, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x10) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000180)={0x8, 0x580, 0x6}) syz_open_pts(r2, 0x30d804cf6b05915) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x12) 10:00:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 10:00:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x109001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x5, 0xfff7, 0x9}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffff8) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000080)) 10:00:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x16) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000040)={0x1000, 0x0, 0x5, 0x20000fb6, 0x1, "c06739224e0000000003e335471bc2dc8935cf", 0x4, 0x8}) [ 1575.650050][T21408] binder: 21407:21408 ioctl c0306201 0 returned -14 [ 1575.703269][T21413] binder: 21407:21413 ioctl c0306201 0 returned -14 10:00:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) 10:00:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 10:00:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000200)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x4640, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, 0xffffffffffffffff, 0x0, 0x800000080004103) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004103) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r5, 0x8010661b, &(0x7f0000000280)) r7 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x18) syz_open_pts(r7, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x10) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000180)={0x8, 0x580, 0x6}) syz_open_pts(r2, 0x30d804cf6b05915) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x12) 10:00:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x16) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000040)={0x1000, 0x0, 0x5, 0x20000fb6, 0x1, "c06739224e0000000003e335471bc2dc8935cf", 0x4, 0x8}) 10:00:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) syz_open_dev$ttys(0xc, 0x2, 0x0) 10:00:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x16) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000040)={0x1000, 0x0, 0x5, 0x20000fb6, 0x1, "c06739224e0000000003e335471bc2dc8935cf", 0x4, 0x8}) 10:00:36 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) sendfile(r0, r2, 0x0, 0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) 10:00:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000200)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x4640, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, 0xffffffffffffffff, 0x0, 0x800000080004103) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004103) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r5, 0x8010661b, &(0x7f0000000280)) r7 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x18) syz_open_pts(r7, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x10) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000180)={0x8, 0x580, 0x6}) syz_open_pts(r2, 0x30d804cf6b05915) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x12) 10:00:36 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x7e) 10:00:36 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xa0, 0x0, &(0x7f0000000000)="759f3e7f8e79eb7a2d760a4f8a393a047454dcfbf0fc8ff4025dc0f57078b622238befe029fc7ad4d97d4fd39edbd9a0edef7e899345e596aea604472a144f059f2f02b1a07185b51ff7e7d92c57397be5293570922fbb774e176ab3677076020509ff98c0e59911aa15a96bc6f7036e4290156dfd76eb61f7d8066105eb3d94"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x9c, 0x0, &(0x7f0000000300)=[@register_looper, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x100a, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x100b, 0x1}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x7, 0x2, 0x2e}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x8, 0x1, 0x2e}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @release], 0x31, 0x0, &(0x7f00000003c0)="a12621043dbbcea0cb851e5ce07f9105ad646c6dec96deec406d997c22e373c4d5ae2a15ee13eb58f34bc124fea936b9ca"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:36 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x7e) 10:00:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, 0x0, 0x80, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7f}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000890}, 0x40000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000300)=""/249, 0xf9}, {&(0x7f0000000200)=""/28, 0x1c}, {&(0x7f0000000400)=""/201, 0xc9}, {&(0x7f0000000500)=""/151, 0x97}, {&(0x7f00000005c0)=""/135, 0x87}, {&(0x7f0000000680)=""/228, 0xe4}, {&(0x7f0000000780)=""/26, 0x1a}, {&(0x7f00000007c0)=""/99, 0x63}, {&(0x7f0000000840)=""/229, 0xe5}], 0xa, 0x2, 0x9) r4 = syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file0\x00', 0x8000000000000000, 0x1, &(0x7f0000000b00)=[{&(0x7f0000000a80)="28920e3a6872b953e243f0a1c41c95b3d9ef62272cd55cb2625a994774c752e3d9f8c1a7f964013503e1ec83dfc02eb502e2ea844d47f21123ee9f3f8e14aae9c5e3fdb08ddeb6f400fb61fb72d4", 0x4e, 0xffffffff}], 0x8001, &(0x7f0000000b40)={[{@journal_dev={'journal_dev', 0x3d, 0x9}}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@data_journal}, {@user_xattr}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@mblk_io_submit}, {@sb={'sb', 0x3d, 0x9}}], [{@subj_role={'subj_role', 0x3d, '$^*'}}]}) openat(r4, &(0x7f0000000c00)='./file0\x00', 0x301000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) [ 1577.016764][T21442] binder: 21441:21442 ioctl c0306201 0 returned -14 10:00:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) 10:00:36 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xa0, 0x0, &(0x7f0000000000)="759f3e7f8e79eb7a2d760a4f8a393a047454dcfbf0fc8ff4025dc0f57078b622238befe029fc7ad4d97d4fd39edbd9a0edef7e899345e596aea604472a144f059f2f02b1a07185b51ff7e7d92c57397be5293570922fbb774e176ab3677076020509ff98c0e59911aa15a96bc6f7036e4290156dfd76eb61f7d8066105eb3d94"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x9c, 0x0, &(0x7f0000000300)=[@register_looper, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x100a, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x100b, 0x1}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x7, 0x2, 0x2e}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x8, 0x1, 0x2e}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @release], 0x31, 0x0, &(0x7f00000003c0)="a12621043dbbcea0cb851e5ce07f9105ad646c6dec96deec406d997c22e373c4d5ae2a15ee13eb58f34bc124fea936b9ca"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:36 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x7e) 10:00:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, 0x0, 0x80, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7f}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000890}, 0x40000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000300)=""/249, 0xf9}, {&(0x7f0000000200)=""/28, 0x1c}, {&(0x7f0000000400)=""/201, 0xc9}, {&(0x7f0000000500)=""/151, 0x97}, {&(0x7f00000005c0)=""/135, 0x87}, {&(0x7f0000000680)=""/228, 0xe4}, {&(0x7f0000000780)=""/26, 0x1a}, {&(0x7f00000007c0)=""/99, 0x63}, {&(0x7f0000000840)=""/229, 0xe5}], 0xa, 0x2, 0x9) r4 = syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file0\x00', 0x8000000000000000, 0x1, &(0x7f0000000b00)=[{&(0x7f0000000a80)="28920e3a6872b953e243f0a1c41c95b3d9ef62272cd55cb2625a994774c752e3d9f8c1a7f964013503e1ec83dfc02eb502e2ea844d47f21123ee9f3f8e14aae9c5e3fdb08ddeb6f400fb61fb72d4", 0x4e, 0xffffffff}], 0x8001, &(0x7f0000000b40)={[{@journal_dev={'journal_dev', 0x3d, 0x9}}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@data_journal}, {@user_xattr}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@mblk_io_submit}, {@sb={'sb', 0x3d, 0x9}}], [{@subj_role={'subj_role', 0x3d, '$^*'}}]}) openat(r4, &(0x7f0000000c00)='./file0\x00', 0x301000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) 10:00:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) ioctl$TIOCSCTTY(r0, 0x540e, 0x1) 10:00:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 10:00:37 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xa0, 0x0, &(0x7f0000000000)="759f3e7f8e79eb7a2d760a4f8a393a047454dcfbf0fc8ff4025dc0f57078b622238befe029fc7ad4d97d4fd39edbd9a0edef7e899345e596aea604472a144f059f2f02b1a07185b51ff7e7d92c57397be5293570922fbb774e176ab3677076020509ff98c0e59911aa15a96bc6f7036e4290156dfd76eb61f7d8066105eb3d94"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x9c, 0x0, &(0x7f0000000300)=[@register_looper, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x100a, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x100b, 0x1}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x7, 0x2, 0x2e}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x8, 0x1, 0x2e}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @release], 0x31, 0x0, &(0x7f00000003c0)="a12621043dbbcea0cb851e5ce07f9105ad646c6dec96deec406d997c22e373c4d5ae2a15ee13eb58f34bc124fea936b9ca"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, 0x0, 0x80, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7f}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000890}, 0x40000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000300)=""/249, 0xf9}, {&(0x7f0000000200)=""/28, 0x1c}, {&(0x7f0000000400)=""/201, 0xc9}, {&(0x7f0000000500)=""/151, 0x97}, {&(0x7f00000005c0)=""/135, 0x87}, {&(0x7f0000000680)=""/228, 0xe4}, {&(0x7f0000000780)=""/26, 0x1a}, {&(0x7f00000007c0)=""/99, 0x63}, {&(0x7f0000000840)=""/229, 0xe5}], 0xa, 0x2, 0x9) r4 = syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file0\x00', 0x8000000000000000, 0x1, &(0x7f0000000b00)=[{&(0x7f0000000a80)="28920e3a6872b953e243f0a1c41c95b3d9ef62272cd55cb2625a994774c752e3d9f8c1a7f964013503e1ec83dfc02eb502e2ea844d47f21123ee9f3f8e14aae9c5e3fdb08ddeb6f400fb61fb72d4", 0x4e, 0xffffffff}], 0x8001, &(0x7f0000000b40)={[{@journal_dev={'journal_dev', 0x3d, 0x9}}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@data_journal}, {@user_xattr}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@mblk_io_submit}, {@sb={'sb', 0x3d, 0x9}}], [{@subj_role={'subj_role', 0x3d, '$^*'}}]}) openat(r4, &(0x7f0000000c00)='./file0\x00', 0x301000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) 10:00:37 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) sendfile(r0, r2, 0x0, 0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) 10:00:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x100c0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x400) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000380)=0x12) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0x15) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/135}) ioctl$KDADDIO(r4, 0x4b34, 0x1) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000080)=0x4) 10:00:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 10:00:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, 0x0, 0x80, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7f}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000890}, 0x40000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000300)=""/249, 0xf9}, {&(0x7f0000000200)=""/28, 0x1c}, {&(0x7f0000000400)=""/201, 0xc9}, {&(0x7f0000000500)=""/151, 0x97}, {&(0x7f00000005c0)=""/135, 0x87}, {&(0x7f0000000680)=""/228, 0xe4}, {&(0x7f0000000780)=""/26, 0x1a}, {&(0x7f00000007c0)=""/99, 0x63}, {&(0x7f0000000840)=""/229, 0xe5}], 0xa, 0x2, 0x9) r4 = syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file0\x00', 0x8000000000000000, 0x1, &(0x7f0000000b00)=[{&(0x7f0000000a80)="28920e3a6872b953e243f0a1c41c95b3d9ef62272cd55cb2625a994774c752e3d9f8c1a7f964013503e1ec83dfc02eb502e2ea844d47f21123ee9f3f8e14aae9c5e3fdb08ddeb6f400fb61fb72d4", 0x4e, 0xffffffff}], 0x8001, &(0x7f0000000b40)={[{@journal_dev={'journal_dev', 0x3d, 0x9}}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@data_journal}, {@user_xattr}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@mblk_io_submit}, {@sb={'sb', 0x3d, 0x9}}], [{@subj_role={'subj_role', 0x3d, '$^*'}}]}) openat(r4, &(0x7f0000000c00)='./file0\x00', 0x301000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) [ 1577.986922][T21463] binder: 21460:21463 ioctl c0306201 0 returned -14 10:00:38 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 10:00:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 10:00:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x100c0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x400) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000380)=0x12) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0x15) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/135}) ioctl$KDADDIO(r4, 0x4b34, 0x1) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000080)=0x4) 10:00:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x100c0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x400) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000380)=0x12) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0x15) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/135}) ioctl$KDADDIO(r4, 0x4b34, 0x1) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000080)=0x4) 10:00:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x100c0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x400) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000380)=0x12) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0x15) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/135}) ioctl$KDADDIO(r4, 0x4b34, 0x1) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000080)=0x4) 10:00:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 10:00:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x100c0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x400) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000380)=0x12) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0x15) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/135}) ioctl$KDADDIO(r4, 0x4b34, 0x1) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000080)=0x4) 10:00:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x100c0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x400) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000380)=0x12) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0x15) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/135}) ioctl$KDADDIO(r4, 0x4b34, 0x1) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000080)=0x4) 10:00:38 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) sendfile(r0, r2, 0x0, 0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) 10:00:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 10:00:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x7fffffff, 0x1, 0x7fffffff}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7e) 10:00:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x100c0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x400) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000380)=0x12) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0x15) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/135}) ioctl$KDADDIO(r4, 0x4b34, 0x1) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000080)=0x4) [ 1579.068075][T21491] binder: 21486:21491 ioctl c0306201 0 returned -14 10:00:38 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 10:00:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x7fffffff, 0x1, 0x7fffffff}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7e) 10:00:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 10:00:38 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/58, 0x3a}], 0x1, 0x6, 0x3) sendfile(r3, r4, 0x0, 0x800000080004103) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000180)=ANY=[@ANYBLOB="040000000000000001000080030000000001000001000100638439a240917e06e7be410000000000000000008001000000080000004000000001010000000000000600000009000000ff0702000800000006000000000000000700008001bb000000010000000001"]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPMODE_NOTIF={0x5}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x58, 0x0, 0x20, 0x7f, 0x1, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x400}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xb52}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000084}, 0x40) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:39 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 10:00:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 10:00:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x7fffffff, 0x1, 0x7fffffff}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7e) 10:00:39 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/58, 0x3a}], 0x1, 0x6, 0x3) sendfile(r3, r4, 0x0, 0x800000080004103) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000180)=ANY=[@ANYBLOB="040000000000000001000080030000000001000001000100638439a240917e06e7be410000000000000000008001000000080000004000000001010000000000000600000009000000ff0702000800000006000000000000000700008001bb000000010000000001"]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPMODE_NOTIF={0x5}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x58, 0x0, 0x20, 0x7f, 0x1, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x400}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xb52}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000084}, 0x40) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:39 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) sendfile(r0, r2, 0x0, 0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) 10:00:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 10:00:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 10:00:39 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/58, 0x3a}], 0x1, 0x6, 0x3) sendfile(r3, r4, 0x0, 0x800000080004103) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000180)=ANY=[@ANYBLOB="040000000000000001000080030000000001000001000100638439a240917e06e7be410000000000000000008001000000080000004000000001010000000000000600000009000000ff0702000800000006000000000000000700008001bb000000010000000001"]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPMODE_NOTIF={0x5}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x58, 0x0, 0x20, 0x7f, 0x1, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x400}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xb52}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000084}, 0x40) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1580.220835][T21521] binder: 21516:21521 ioctl c0306201 0 returned -14 [ 1580.278479][T21525] binder: 21516:21525 ioctl c0306201 0 returned -14 10:00:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r1, 0x0, 0x3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00809d7e3248c427201d751e154710140000005a530000002e2f66696c65"]) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x0, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000600)={&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/237, 0xed}, {&(0x7f0000000480)=""/158, 0x9e}, {&(0x7f00000001c0)=""/114, 0x72}], 0x4, &(0x7f0000000540)=""/140, 0x8c}, 0x100) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) 10:00:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 10:00:39 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 10:00:39 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x1, 0x7}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) r3 = openat$incfs(r2, &(0x7f0000000000)='.pending_reads\x00', 0x1, 0xbe) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x101, 0x0) write$damon_schemes(r4, &(0x7f0000000140)={0x7fffffff, 0x3, 0x20, 0x20, 0xffffffffffffffff, 0x9, 0x3}, 0x66) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x400001) ioctl$TCXONC(r1, 0x540a, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) 10:00:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 10:00:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r1, 0x0, 0x3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00809d7e3248c427201d751e154710140000005a530000002e2f66696c65"]) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x0, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000600)={&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/237, 0xed}, {&(0x7f0000000480)=""/158, 0x9e}, {&(0x7f00000001c0)=""/114, 0x72}], 0x4, &(0x7f0000000540)=""/140, 0x8c}, 0x100) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) 10:00:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000140)={0x0, "af56d4e36a1ac77194138a77d797fd8e"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) 10:00:40 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) 10:00:40 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 10:00:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000140)={0x0, "af56d4e36a1ac77194138a77d797fd8e"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) 10:00:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r1, 0x0, 0x3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00809d7e3248c427201d751e154710140000005a530000002e2f66696c65"]) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x0, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000600)={&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/237, 0xed}, {&(0x7f0000000480)=""/158, 0x9e}, {&(0x7f00000001c0)=""/114, 0x72}], 0x4, &(0x7f0000000540)=""/140, 0x8c}, 0x100) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) 10:00:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 10:00:40 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x9, 0x10000, 0x9, 0x1, 0x3549, 0xfffffe49, 0x7, 0x400, 0x101, 0x1], 0xa}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) r4 = open(&(0x7f0000000100)='./file0\x00', 0x755100, 0xe3734991bc607801) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x2, 0x7}}, './file0\x00'}) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r5, 0x0, 0x800000080004103) memfd_secret(0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r6, r7, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000140)='%\x00'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 10:00:40 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 10:00:40 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x0, 0x1}, 0xc) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f000000aa80)={r3, @in={{0x2, 0x0, @multicast1}}}, &(0x7f0000001d00)=0x100) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r3, 0x7}, &(0x7f0000000140)=0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x11) 10:00:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000140)={0x0, "af56d4e36a1ac77194138a77d797fd8e"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) 10:00:40 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x9, 0x10000, 0x9, 0x1, 0x3549, 0xfffffe49, 0x7, 0x400, 0x101, 0x1], 0xa}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) r4 = open(&(0x7f0000000100)='./file0\x00', 0x755100, 0xe3734991bc607801) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x2, 0x7}}, './file0\x00'}) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r5, 0x0, 0x800000080004103) memfd_secret(0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r6, r7, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000140)='%\x00'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x7e) [ 1581.192738][T21560] binder: 21559:21560 ioctl c0306201 0 returned -14 [ 1581.259072][T21567] binder: 21559:21567 ioctl c0306201 0 returned -14 10:00:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x204000, 0x180) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xa) 10:00:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x7e) 10:00:41 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x9, 0x10000, 0x9, 0x1, 0x3549, 0xfffffe49, 0x7, 0x400, 0x101, 0x1], 0xa}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) r4 = open(&(0x7f0000000100)='./file0\x00', 0x755100, 0xe3734991bc607801) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x2, 0x7}}, './file0\x00'}) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r5, 0x0, 0x800000080004103) memfd_secret(0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r6, r7, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000140)='%\x00'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:41 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) 10:00:41 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000040)) 10:00:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x204000, 0x180) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xa) 10:00:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x7e) 10:00:41 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000040)) [ 1582.127628][T21586] binder: 21585:21586 ioctl c0306201 0 returned -14 [ 1582.144902][T21586] binder: 21585:21586 ioctl c0306201 0 returned -14 10:00:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x204000, 0x180) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xa) 10:00:41 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) 10:00:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x204000, 0x180) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xa) 10:00:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, 0x0) 10:00:41 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000040)) 10:00:41 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) 10:00:41 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x60, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/184, 0xb8, 0x1, 0xb}, @flat=@weak_handle={0x77682a85, 0x1301, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/142, 0x8e, 0x2, 0x21}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @increfs_done={0x40106308, 0x1}], 0x7, 0x0, &(0x7f00000002c0)="a45b4940cc3b03"}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7f}}, './file0\x00'}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000100)={0xff, 0x38, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x40, 0x0, &(0x7f0000000080)="dc1a000000d9100000000000000000002e1a93e4c4b45eca9c079b8e6d695d79c492dd91cbb3ad0d843f101a827ec470b945ecb048838328ae59542c8302f97d"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:42 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) 10:00:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, 0x0) 10:00:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 10:00:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f00000003c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) r3 = syz_mount_image$jffs2(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x5f8, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="1d3cbe86c637749d205e7d6429cdac484ab05584a52b9481c6ad21e65d207c14a606e274eae9505a63469c6baa6b8618f98598a79f57801938812f2cefab63169aabfc4bcf43a1b259e61819ffdc92501d18652751e7428cc9b30edc1841e40dac8f0b26b94eaf1197b40df7166465", 0x6f, 0x6}], 0xa00000, &(0x7f0000000200)={[{@rp_size={'rp_size', 0x3d, 0x1}}, {@compr_lzo}, {@rp_size={'rp_size', 0x3d, 0xffffffffffffffff}}, {}, {@compr_lzo}, {}, {@rp_size={'rp_size', 0x3d, 0x1}}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@fowner_gt={'fowner>', 0xee01}}, {@obj_user={'obj_user', 0x3d, '/dev/ptmx\x00'}}]}) write$binfmt_misc(r3, &(0x7f0000000300)={'syz0', "389e83d3651a0bbddb67b89d22e34aac053420dad34008bfea397727ff7585ffbafd4ffcfd3303fb318ecaa68a0f82727a7c891f4cfeba207733e6e082ed863fd3f0e75c77279f3f10890492c0499895a553a36b86860a854b21396803e0cf2d5f6eabc0c36ff448c0280a5b55b976341dc52f36e6cdb9ceebda3843269b428b8a57a5aa5233df8f522d2a80fc03428e1a"}, 0x95) 10:00:42 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) 10:00:42 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000500)=0x9) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000040)={0x59, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0x404c534a, &(0x7f0000000180)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc08c5334, &(0x7f0000000300)) tkill(r2, 0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 10:00:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f00000003c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) r3 = syz_mount_image$jffs2(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x5f8, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="1d3cbe86c637749d205e7d6429cdac484ab05584a52b9481c6ad21e65d207c14a606e274eae9505a63469c6baa6b8618f98598a79f57801938812f2cefab63169aabfc4bcf43a1b259e61819ffdc92501d18652751e7428cc9b30edc1841e40dac8f0b26b94eaf1197b40df7166465", 0x6f, 0x6}], 0xa00000, &(0x7f0000000200)={[{@rp_size={'rp_size', 0x3d, 0x1}}, {@compr_lzo}, {@rp_size={'rp_size', 0x3d, 0xffffffffffffffff}}, {}, {@compr_lzo}, {}, {@rp_size={'rp_size', 0x3d, 0x1}}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@fowner_gt={'fowner>', 0xee01}}, {@obj_user={'obj_user', 0x3d, '/dev/ptmx\x00'}}]}) write$binfmt_misc(r3, &(0x7f0000000300)={'syz0', "389e83d3651a0bbddb67b89d22e34aac053420dad34008bfea397727ff7585ffbafd4ffcfd3303fb318ecaa68a0f82727a7c891f4cfeba207733e6e082ed863fd3f0e75c77279f3f10890492c0499895a553a36b86860a854b21396803e0cf2d5f6eabc0c36ff448c0280a5b55b976341dc52f36e6cdb9ceebda3843269b428b8a57a5aa5233df8f522d2a80fc03428e1a"}, 0x95) 10:00:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/parport', 0x400000, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) 10:00:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, 0x0) 10:00:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/parport', 0x400000, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) 10:00:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) [ 1583.036835][T21621] binder: 21619:21621 ioctl c0306201 0 returned -14 [ 1583.048402][T21621] binder: 21619:21621 ioctl c0306201 0 returned -14 [ 1583.193509][T21618] binder: 21617:21618 ioctl c0306201 0 returned -14 [ 1583.245463][T21623] binder: 21617:21623 ioctl c0306201 0 returned -14 10:00:43 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) 10:00:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f00000003c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) r3 = syz_mount_image$jffs2(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x5f8, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="1d3cbe86c637749d205e7d6429cdac484ab05584a52b9481c6ad21e65d207c14a606e274eae9505a63469c6baa6b8618f98598a79f57801938812f2cefab63169aabfc4bcf43a1b259e61819ffdc92501d18652751e7428cc9b30edc1841e40dac8f0b26b94eaf1197b40df7166465", 0x6f, 0x6}], 0xa00000, &(0x7f0000000200)={[{@rp_size={'rp_size', 0x3d, 0x1}}, {@compr_lzo}, {@rp_size={'rp_size', 0x3d, 0xffffffffffffffff}}, {}, {@compr_lzo}, {}, {@rp_size={'rp_size', 0x3d, 0x1}}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@fowner_gt={'fowner>', 0xee01}}, {@obj_user={'obj_user', 0x3d, '/dev/ptmx\x00'}}]}) write$binfmt_misc(r3, &(0x7f0000000300)={'syz0', "389e83d3651a0bbddb67b89d22e34aac053420dad34008bfea397727ff7585ffbafd4ffcfd3303fb318ecaa68a0f82727a7c891f4cfeba207733e6e082ed863fd3f0e75c77279f3f10890492c0499895a553a36b86860a854b21396803e0cf2d5f6eabc0c36ff448c0280a5b55b976341dc52f36e6cdb9ceebda3843269b428b8a57a5aa5233df8f522d2a80fc03428e1a"}, 0x95) 10:00:43 executing program 1: openat$ptmx(0xffffffffffffff9c, 0x0, 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 10:00:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 10:00:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/parport', 0x400000, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) 10:00:43 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000500)=0x9) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000040)={0x59, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0x404c534a, &(0x7f0000000180)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc08c5334, &(0x7f0000000300)) tkill(r2, 0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:43 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b1547e204c053800bf6c000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, 0x0, &(0x7f0000000580)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:43 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b1547e204c053800bf6c000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, 0x0, &(0x7f0000000580)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x8}}) 10:00:43 executing program 1: openat$ptmx(0xffffffffffffff9c, 0x0, 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 10:00:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000002c0)=0x2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000000200)={0x2, 0x30, '\x00', 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000280)={0x20}, 0x1) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x80203, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000549", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0xfffffffe, 0x7f, 0x8, 0xff, 0x6, "efa4d0e595e87de7265f9d9cb8a5e5e2559d1a"}) 10:00:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000002c0)=0x2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000000200)={0x2, 0x30, '\x00', 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000280)={0x20}, 0x1) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x80203, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000549", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0xfffffffe, 0x7f, 0x8, 0xff, 0x6, "efa4d0e595e87de7265f9d9cb8a5e5e2559d1a"}) [ 1583.936702][T21648] binder: 21647:21648 ioctl c0306201 0 returned -14 [ 1583.957802][T21648] binder: 21647:21648 ioctl c0306201 0 returned -14 10:00:43 executing program 1: openat$ptmx(0xffffffffffffff9c, 0x0, 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) [ 1584.147670][T21645] binder: 21644:21645 ioctl c0306201 0 returned -14 [ 1584.199697][T21653] binder: 21644:21653 ioctl c0306201 0 returned -14 [ 1584.257740][ T6061] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1584.497243][ T6061] usb 6-1: Using ep0 maxpacket: 32 [ 1584.617443][ T6061] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=6c.bf [ 1584.617478][ T6061] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.619548][ T6061] usb 6-1: config 0 descriptor?? [ 1584.658766][ T6061] visor 6-1:0.0: Sony Clie 3.5 converter detected 10:00:44 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 10:00:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000002c0)=0x2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000000200)={0x2, 0x30, '\x00', 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000280)={0x20}, 0x1) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x80203, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000549", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0xfffffffe, 0x7f, 0x8, 0xff, 0x6, "efa4d0e595e87de7265f9d9cb8a5e5e2559d1a"}) 10:00:44 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) 10:00:44 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b1547e204c053800bf6c000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, 0x0, &(0x7f0000000580)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:44 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000500)=0x9) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000040)={0x59, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0x404c534a, &(0x7f0000000180)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc08c5334, &(0x7f0000000300)) tkill(r2, 0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:44 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b1547e204c053800bf6c000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, 0x0, &(0x7f0000000580)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000840)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, &(0x7f0000000880)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "7afe"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000940)={0x40, 0x1c, 0x1}, &(0x7f0000000980)={0x40, 0x1e, 0x1}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x8}}) 10:00:44 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) [ 1584.834458][T21674] binder: 21673:21674 ioctl c0306201 0 returned -14 [ 1584.847512][T21674] binder: 21673:21674 ioctl c0306201 0 returned -14 [ 1585.032330][T21672] binder: 21670:21672 ioctl c0306201 0 returned -14 [ 1585.083402][T21677] binder: 21670:21677 ioctl c0306201 0 returned -14 [ 1585.099469][ T6061] usb 6-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 1585.316605][T18477] usb 6-1: USB disconnect, device number 34 [ 1585.326150][T18477] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 1585.326535][T18477] visor 6-1:0.0: device disconnected 10:00:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000280)={0x0, 0x889, 0x2, 0x1}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = gettid() r5 = gettid() syz_clone3(&(0x7f00000015c0)={0x10000000, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0, {}, &(0x7f0000000540)=""/57, 0x39, 0x0, &(0x7f0000001580)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x5}, 0x58) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000001640)=r6) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r7, 0x28, 0x2, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0x42041000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0x11}, &(0x7f0000000100)=""/13, 0xd, &(0x7f0000000140)=""/243, &(0x7f0000000240)=[0xffffffffffffffff, r4, r5, r6], 0x4, {r7}}, 0x58) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000006c0)=0xc) r8 = syz_open_procfs(0x0, &(0x7f0000000700)='net/softnet_stat\x00') sendfile(r3, r8, 0x0, 0x800000080004103) ioctl$VT_DISALLOCATE(r3, 0x5608) ioctl$TCFLSH(r0, 0x5411, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) 10:00:45 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 10:00:45 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b1547e204c053800bf6c000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, 0x0, &(0x7f0000000580)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:00:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) ioctl$TCFLSH(r0, 0x5411, 0x0) 10:00:45 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) 10:00:45 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b1547e204c053800bf6c000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, 0x0, &(0x7f0000000580)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000840)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, &(0x7f0000000880)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "7afe"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000940)={0x40, 0x1c, 0x1}, &(0x7f0000000980)={0x40, 0x1e, 0x1}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x8}}) 10:00:45 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) [ 1585.865031][T21689] binder: 21688:21689 ioctl c0306201 0 returned -14 [ 1585.879154][T21689] binder: 21688:21689 ioctl c0306201 0 returned -14 10:00:45 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x42) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280), r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x4, {0xa, 0x4e21, 0xfffffffe, @loopback, 0x16f5}, r2}}, 0x38) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) 10:00:45 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b1547e204c053800bf6c000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, 0x0, &(0x7f0000000580)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000840)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, &(0x7f0000000880)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "7afe"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000940)={0x40, 0x1c, 0x1}, &(0x7f0000000980)={0x40, 0x1e, 0x1}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x8}}) 10:00:45 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x42) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280), r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x4, {0xa, 0x4e21, 0xfffffffe, @loopback, 0x16f5}, r2}}, 0x38) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) 10:00:45 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x42) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280), r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x4, {0xa, 0x4e21, 0xfffffffe, @loopback, 0x16f5}, r2}}, 0x38) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) 10:00:45 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x42) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280), r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x4, {0xa, 0x4e21, 0xfffffffe, @loopback, 0x16f5}, r2}}, 0x38) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) 10:00:46 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "7b4bfac4ee06c9c8eba61c1274cdaf831fd4464a8eac365474383c96de67315e26106232b73319860392a78536b4d49fa44bf404f5d1fe97ba6192da6f1ef971", 0x20}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64=r5, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) 10:00:46 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) 10:00:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) sync() ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) 10:00:46 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 10:00:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCFLSH(r0, 0x5411, 0x0) 10:00:46 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b1547e204c053800bf6c000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000380)={0x2c, &(0x7f0000000280)={0x20, 0x6, 0x77, {0x77, 0x6, "2281d253f6e553a3ff4c84fe9c6357dcfaa5d74c8899a7d7324faac97d8c228a56e2d998eaeb3ae70a9810dfa1bd71675c975a59753343c9b5b0e02a48489247a773afb97ea6902cc5398f4b6ea0a779418e76c56a3c95f82189550ef6e7dfb302817a40e51fb02a15162c4ee926ac957ddfeea9fd"}}, &(0x7f0000000080)={0x0, 0x3, 0x6, @string={0x6, 0x3, "e593e3fd"}}, &(0x7f0000000400)={0x0, 0xf, 0x109, {0x5, 0xf, 0x109, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xff, 0xe4, 0x633a}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xdd, 0x10, 0x1, "21fdef5c657ca21c9814de6eb1eddace693b3c92ae16f1b73ee32b75f58b9ce815bf115734f5c75184b916277d0e9eecaecb4fb136b9ac3d6ec5c3ceddf0fa0c53d27ac8ca1e517815aa63d941fb64a4b9d1fdc405d67efa66a186d5fdda13da3c2512d92b5a18c427be9aa6f730e6c778ca8c016824ece8808b5e9be776e3a7b2d86e7b024a449b6ae6762ba504f4d0ec7d92369bec36316da31fbd05d08cd51f47e636ec237d2cd4217704e3cffff1d061dcd111924a88c3ce8663c37f5f663e9213f88b981e167caff6c0581084a68d148fa087000f59fb2c"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x3, 0x40, 0x30, 0xb1}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x25, 0xf000, 0x20}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x0, 0x1, "5d8c4716", "e16e6ae0"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x13, 0x9, 0xf7, 0xbf, 0x1, 0x4}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000540)={0x40, 0x0, 0x1c, "675f7ebf8b772505f93bf736f0487b78d2d975982b31677860400029"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xb5}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000ac0)=ANY=[@ANYBLOB="200008000000c0a72e4f49000100ff000000"], &(0x7f0000000680)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ac9f"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000840)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, &(0x7f0000000880)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "7afe"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000940)={0x40, 0x1c, 0x1}, &(0x7f0000000980)={0x40, 0x1e, 0x1}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x8}}) 10:00:46 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) [ 1586.977258][T21716] binder: 21712:21716 ioctl c0306201 0 returned -14 [ 1587.010261][T21716] binder: 21712:21716 ioctl c0306201 0 returned -14 10:00:46 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 10:00:46 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 10:00:46 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 10:00:46 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b1547e204c053800bf6c000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000380)={0x2c, &(0x7f0000000280)={0x20, 0x6, 0x77, {0x77, 0x6, "2281d253f6e553a3ff4c84fe9c6357dcfaa5d74c8899a7d7324faac97d8c228a56e2d998eaeb3ae70a9810dfa1bd71675c975a59753343c9b5b0e02a48489247a773afb97ea6902cc5398f4b6ea0a779418e76c56a3c95f82189550ef6e7dfb302817a40e51fb02a15162c4ee926ac957ddfeea9fd"}}, &(0x7f0000000080)={0x0, 0x3, 0x6, @string={0x6, 0x3, "e593e3fd"}}, &(0x7f0000000400)={0x0, 0xf, 0x109, {0x5, 0xf, 0x109, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xff, 0xe4, 0x633a}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xdd, 0x10, 0x1, "21fdef5c657ca21c9814de6eb1eddace693b3c92ae16f1b73ee32b75f58b9ce815bf115734f5c75184b916277d0e9eecaecb4fb136b9ac3d6ec5c3ceddf0fa0c53d27ac8ca1e517815aa63d941fb64a4b9d1fdc405d67efa66a186d5fdda13da3c2512d92b5a18c427be9aa6f730e6c778ca8c016824ece8808b5e9be776e3a7b2d86e7b024a449b6ae6762ba504f4d0ec7d92369bec36316da31fbd05d08cd51f47e636ec237d2cd4217704e3cffff1d061dcd111924a88c3ce8663c37f5f663e9213f88b981e167caff6c0581084a68d148fa087000f59fb2c"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x3, 0x40, 0x30, 0xb1}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x25, 0xf000, 0x20}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x0, 0x1, "5d8c4716", "e16e6ae0"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x13, 0x9, 0xf7, 0xbf, 0x1, 0x4}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000540)={0x40, 0x0, 0x1c, "675f7ebf8b772505f93bf736f0487b78d2d975982b31677860400029"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xb5}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000ac0)=ANY=[@ANYBLOB="200008000000c0a72e4f49000100ff000000"], &(0x7f0000000680)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ac9f"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000840)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, &(0x7f0000000880)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "7afe"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000940)={0x40, 0x1c, 0x1}, &(0x7f0000000980)={0x40, 0x1e, 0x1}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x8}}) 10:00:46 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b1547e204c053800bf6c000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000380)={0x2c, &(0x7f0000000280)={0x20, 0x6, 0x77, {0x77, 0x6, "2281d253f6e553a3ff4c84fe9c6357dcfaa5d74c8899a7d7324faac97d8c228a56e2d998eaeb3ae70a9810dfa1bd71675c975a59753343c9b5b0e02a48489247a773afb97ea6902cc5398f4b6ea0a779418e76c56a3c95f82189550ef6e7dfb302817a40e51fb02a15162c4ee926ac957ddfeea9fd"}}, &(0x7f0000000080)={0x0, 0x3, 0x6, @string={0x6, 0x3, "e593e3fd"}}, &(0x7f0000000400)={0x0, 0xf, 0x109, {0x5, 0xf, 0x109, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xff, 0xe4, 0x633a}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xdd, 0x10, 0x1, "21fdef5c657ca21c9814de6eb1eddace693b3c92ae16f1b73ee32b75f58b9ce815bf115734f5c75184b916277d0e9eecaecb4fb136b9ac3d6ec5c3ceddf0fa0c53d27ac8ca1e517815aa63d941fb64a4b9d1fdc405d67efa66a186d5fdda13da3c2512d92b5a18c427be9aa6f730e6c778ca8c016824ece8808b5e9be776e3a7b2d86e7b024a449b6ae6762ba504f4d0ec7d92369bec36316da31fbd05d08cd51f47e636ec237d2cd4217704e3cffff1d061dcd111924a88c3ce8663c37f5f663e9213f88b981e167caff6c0581084a68d148fa087000f59fb2c"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x3, 0x40, 0x30, 0xb1}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x25, 0xf000, 0x20}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x0, 0x1, "5d8c4716", "e16e6ae0"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x13, 0x9, 0xf7, 0xbf, 0x1, 0x4}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000540)={0x40, 0x0, 0x1c, "675f7ebf8b772505f93bf736f0487b78d2d975982b31677860400029"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xb5}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000ac0)=ANY=[@ANYBLOB="200008000000c0a72e4f49000100ff000000"], &(0x7f0000000680)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ac9f"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000840)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, &(0x7f0000000880)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "7afe"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000940)={0x40, 0x1c, 0x1}, &(0x7f0000000980)={0x40, 0x1e, 0x1}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x8}}) [ 1587.748588][T21729] sp0: Synchronizing with TNC 10:00:47 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "7b4bfac4ee06c9c8eba61c1274cdaf831fd4464a8eac365474383c96de67315e26106232b73319860392a78536b4d49fa44bf404f5d1fe97ba6192da6f1ef971", 0x20}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64=r5, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) 10:00:47 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000040)) 10:00:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x698040, 0x0) ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f00000002c0)) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$SG_IO(r2, 0x2285, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x24, &(0x7f0000000000)=""/36}, &(0x7f0000000040)="65cbcbcbd68e9092baf97e642eee5cd751", &(0x7f0000000080)=""/248, 0x3, 0x10, 0x1, &(0x7f0000000180)}) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) recvmsg$can_j1939(r3, &(0x7f0000000640)={&(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000300)=""/21, 0x15}, {&(0x7f0000000400)=""/58, 0x3a}, {&(0x7f0000000440)=""/248, 0xf8}], 0x3, &(0x7f0000000580)=""/141, 0x8d}, 0x20100) 10:00:47 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) 10:00:47 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b1547e204c053800bf6c000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000380)={0x2c, &(0x7f0000000280)={0x20, 0x6, 0x77, {0x77, 0x6, "2281d253f6e553a3ff4c84fe9c6357dcfaa5d74c8899a7d7324faac97d8c228a56e2d998eaeb3ae70a9810dfa1bd71675c975a59753343c9b5b0e02a48489247a773afb97ea6902cc5398f4b6ea0a779418e76c56a3c95f82189550ef6e7dfb302817a40e51fb02a15162c4ee926ac957ddfeea9fd"}}, &(0x7f0000000080)={0x0, 0x3, 0x6, @string={0x6, 0x3, "e593e3fd"}}, &(0x7f0000000400)={0x0, 0xf, 0x109, {0x5, 0xf, 0x109, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xff, 0xe4, 0x633a}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xdd, 0x10, 0x1, "21fdef5c657ca21c9814de6eb1eddace693b3c92ae16f1b73ee32b75f58b9ce815bf115734f5c75184b916277d0e9eecaecb4fb136b9ac3d6ec5c3ceddf0fa0c53d27ac8ca1e517815aa63d941fb64a4b9d1fdc405d67efa66a186d5fdda13da3c2512d92b5a18c427be9aa6f730e6c778ca8c016824ece8808b5e9be776e3a7b2d86e7b024a449b6ae6762ba504f4d0ec7d92369bec36316da31fbd05d08cd51f47e636ec237d2cd4217704e3cffff1d061dcd111924a88c3ce8663c37f5f663e9213f88b981e167caff6c0581084a68d148fa087000f59fb2c"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x3, 0x40, 0x30, 0xb1}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x25, 0xf000, 0x20}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x0, 0x1, "5d8c4716", "e16e6ae0"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x13, 0x9, 0xf7, 0xbf, 0x1, 0x4}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000540)={0x40, 0x0, 0x1c, "675f7ebf8b772505f93bf736f0487b78d2d975982b31677860400029"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xb5}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000ac0)=ANY=[@ANYBLOB="200008000000c0a72e4f49000100ff000000"], &(0x7f0000000680)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ac9f"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000840)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, &(0x7f0000000880)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "7afe"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000940)={0x40, 0x1c, 0x1}, &(0x7f0000000980)={0x40, 0x1e, 0x1}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x8}}) 10:00:47 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000040)) 10:00:47 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000040)) [ 1588.000892][T21751] binder: 21742:21751 ioctl c0306201 0 returned -14 10:00:47 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) 10:00:47 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b1547e204c053800bf6c000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000380)={0x2c, &(0x7f0000000280)={0x20, 0x6, 0x77, {0x77, 0x6, "2281d253f6e553a3ff4c84fe9c6357dcfaa5d74c8899a7d7324faac97d8c228a56e2d998eaeb3ae70a9810dfa1bd71675c975a59753343c9b5b0e02a48489247a773afb97ea6902cc5398f4b6ea0a779418e76c56a3c95f82189550ef6e7dfb302817a40e51fb02a15162c4ee926ac957ddfeea9fd"}}, &(0x7f0000000080)={0x0, 0x3, 0x6, @string={0x6, 0x3, "e593e3fd"}}, &(0x7f0000000400)={0x0, 0xf, 0x109, {0x5, 0xf, 0x109, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xff, 0xe4, 0x633a}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xdd, 0x10, 0x1, "21fdef5c657ca21c9814de6eb1eddace693b3c92ae16f1b73ee32b75f58b9ce815bf115734f5c75184b916277d0e9eecaecb4fb136b9ac3d6ec5c3ceddf0fa0c53d27ac8ca1e517815aa63d941fb64a4b9d1fdc405d67efa66a186d5fdda13da3c2512d92b5a18c427be9aa6f730e6c778ca8c016824ece8808b5e9be776e3a7b2d86e7b024a449b6ae6762ba504f4d0ec7d92369bec36316da31fbd05d08cd51f47e636ec237d2cd4217704e3cffff1d061dcd111924a88c3ce8663c37f5f663e9213f88b981e167caff6c0581084a68d148fa087000f59fb2c"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x3, 0x40, 0x30, 0xb1}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x25, 0xf000, 0x20}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x0, 0x1, "5d8c4716", "e16e6ae0"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x13, 0x9, 0xf7, 0xbf, 0x1, 0x4}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000540)={0x40, 0x0, 0x1c, "675f7ebf8b772505f93bf736f0487b78d2d975982b31677860400029"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xb5}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000ac0)=ANY=[@ANYBLOB="200008000000c0a72e4f49000100ff000000"], &(0x7f0000000680)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ac9f"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000840)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, &(0x7f0000000880)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "7afe"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000940)={0x40, 0x1c, 0x1}, &(0x7f0000000980)={0x40, 0x1e, 0x1}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x8}}) 10:00:47 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) 10:00:47 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) 10:00:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) read$rfkill(r2, &(0x7f0000000040), 0x8) 10:00:48 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "7b4bfac4ee06c9c8eba61c1274cdaf831fd4464a8eac365474383c96de67315e26106232b73319860392a78536b4d49fa44bf404f5d1fe97ba6192da6f1ef971", 0x20}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64=r5, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) 10:00:48 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b1547e204c053800bf6c000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000380)={0x2c, &(0x7f0000000280)={0x20, 0x6, 0x77, {0x77, 0x6, "2281d253f6e553a3ff4c84fe9c6357dcfaa5d74c8899a7d7324faac97d8c228a56e2d998eaeb3ae70a9810dfa1bd71675c975a59753343c9b5b0e02a48489247a773afb97ea6902cc5398f4b6ea0a779418e76c56a3c95f82189550ef6e7dfb302817a40e51fb02a15162c4ee926ac957ddfeea9fd"}}, &(0x7f0000000080)={0x0, 0x3, 0x6, @string={0x6, 0x3, "e593e3fd"}}, &(0x7f0000000400)={0x0, 0xf, 0x109, {0x5, 0xf, 0x109, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xff, 0xe4, 0x633a}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xdd, 0x10, 0x1, "21fdef5c657ca21c9814de6eb1eddace693b3c92ae16f1b73ee32b75f58b9ce815bf115734f5c75184b916277d0e9eecaecb4fb136b9ac3d6ec5c3ceddf0fa0c53d27ac8ca1e517815aa63d941fb64a4b9d1fdc405d67efa66a186d5fdda13da3c2512d92b5a18c427be9aa6f730e6c778ca8c016824ece8808b5e9be776e3a7b2d86e7b024a449b6ae6762ba504f4d0ec7d92369bec36316da31fbd05d08cd51f47e636ec237d2cd4217704e3cffff1d061dcd111924a88c3ce8663c37f5f663e9213f88b981e167caff6c0581084a68d148fa087000f59fb2c"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x3, 0x40, 0x30, 0xb1}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x25, 0xf000, 0x20}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x0, 0x1, "5d8c4716", "e16e6ae0"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x13, 0x9, 0xf7, 0xbf, 0x1, 0x4}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000540)={0x40, 0x0, 0x1c, "675f7ebf8b772505f93bf736f0487b78d2d975982b31677860400029"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xb5}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000ac0)=ANY=[@ANYBLOB="200008000000c0a72e4f49000100ff000000"], &(0x7f0000000680)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ac9f"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000840)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, &(0x7f0000000880)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "7afe"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000940)={0x40, 0x1c, 0x1}, &(0x7f0000000980)={0x40, 0x1e, 0x1}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x8}}) 10:00:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TCFLSH(r1, 0x5411, 0x8) 10:00:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x94, r2, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x43}}}}, [@crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac08}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x18, 0x49, [0xfac01, 0xfac0a, 0xfac09, 0xfac0e, 0xfac05]}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0c}, @NL80211_ATTR_AKM_SUITES={0xc, 0x4c, [0xfac08, 0xfac0e]}], @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x28, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x13}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x33}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x841}, 0x4000000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0xd) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCFLSH(r3, 0x5411, 0x0) 10:00:48 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) 10:00:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TCFLSH(r1, 0x5411, 0x8) 10:00:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TCFLSH(r1, 0x5411, 0x8) 10:00:48 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0}) 10:00:48 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0}) 10:00:48 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0}) 10:00:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) 10:00:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000000)) ioctl$TCFLSH(r3, 0x5411, 0xffffffefffffffff) 10:00:49 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "7b4bfac4ee06c9c8eba61c1274cdaf831fd4464a8eac365474383c96de67315e26106232b73319860392a78536b4d49fa44bf404f5d1fe97ba6192da6f1ef971", 0x20}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64=r5, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:00:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) 10:00:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000140)) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x428000, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000180)={0xfffffffd, 0xfff, 0x800003, 0x20000400, 0x11, "c97d3e2d4dd592529164c08960c977a5d36c55"}) 10:00:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) 10:00:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x94, r2, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x43}}}}, [@crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac08}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x18, 0x49, [0xfac01, 0xfac0a, 0xfac09, 0xfac0e, 0xfac05]}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0c}, @NL80211_ATTR_AKM_SUITES={0xc, 0x4c, [0xfac08, 0xfac0e]}], @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x28, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x13}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x33}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x841}, 0x4000000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0xd) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCFLSH(r3, 0x5411, 0x0) 10:00:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) 10:00:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000140)) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x428000, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000180)={0xfffffffd, 0xfff, 0x800003, 0x20000400, 0x11, "c97d3e2d4dd592529164c08960c977a5d36c55"}) 10:00:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000140)) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x428000, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000180)={0xfffffffd, 0xfff, 0x800003, 0x20000400, 0x11, "c97d3e2d4dd592529164c08960c977a5d36c55"}) 10:00:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x9) ioctl$TCFLSH(r2, 0x540b, 0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x6, 0x1, 0x4, 0x84, 0x5, "1efd70d49650c2da60a9fafc9bd88dd7a45f05"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) 10:00:49 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000004080)={0x6, 0x1, 0x8, 0x9, 0x8, 0x10001, 0x6, 0x9, r3}, &(0x7f00000040c0)=0x20) write$usbip_server(r0, &(0x7f0000000140)=@ret_submit={{0x3, 0x9, 0x0, 0x0, 0x3ff}, 0x2, 0x69, 0x9, 0x3ea, 0x8, 0x0, "90fda8b3b8410cc35f99dce5667df37bd764063abbb8e366f2e484a9e86f3bd492d82e3392c6f315ffc9313376ce08e5ca39806e854417010e94083c8b857e639c87ac14de71cad541ad52a773bc89bb422f6328c49ff485526a05671e74a3d8051e1308cab0b514ce", [{0x1, 0x8, 0x1ff, 0x7}, {0x7f, 0x6a0f6c26, 0x5, 0x400}, {0x401, 0x7f, 0x0, 0x7ff}, {0x6, 0x0, 0x2, 0x5b}, {0x8000, 0x6, 0x7f, 0xfffffff7}, {0x40, 0xfffffffc, 0x101, 0xe89}, {0xb2d7, 0xff, 0x6, 0x4}, {0xd79c, 0x302, 0xffffffc0, 0x8}, {0x9, 0x425, 0x8000, 0xbeb}, {0xffff93ab, 0x6, 0x21, 0x8}, {0x9, 0x3, 0x6, 0xc23}, {0x8, 0x8, 0x8, 0x3}, {0x1, 0x7, 0x1, 0x9}, {0x101, 0x8, 0x807, 0x1}, {0x0, 0x0, 0xc0, 0x6}, {0xff, 0x3, 0x6, 0x3}, {0x1, 0x8d, 0x81, 0x3ff}, {0x10000, 0x80000001, 0x4, 0x2}, {0x7, 0x6, 0x1, 0xfffffffa}, {0x2, 0xb9, 0x1, 0x800}, {0x2, 0x80, 0x80000000, 0x8c}, {0x8, 0x92c, 0x0, 0x9a000000}, {0x7fffffff, 0xfff, 0x7ff, 0x2}, {0x400, 0x40, 0x1, 0x7a}, {0x3, 0x7, 0x0, 0x1}, {0xfffffffe, 0x7, 0x401}, {0x25c, 0x10001, 0x80000001, 0x1ff}, {0x1, 0x7, 0x80000000, 0xb5eb}, {0x5, 0x2, 0x3f, 0x7}, {0x7, 0x6, 0x1, 0x8}, {0x4d00, 0x100, 0x9, 0x6}, {0x2, 0x1000, 0x5, 0x6}, {0x401, 0x4, 0x904, 0x7fff}, {0x7ff, 0x10000, 0x4, 0x8}, {0x887, 0x7, 0x7, 0x5b}, {0x5, 0xfffffff7, 0x9}, {0xcfb, 0x3f, 0x8, 0x2}, {0x5, 0x7, 0x1ff, 0x81}, {0x6000, 0x120, 0x1, 0x100}, {0x7fffffff, 0x0, 0x5, 0x101}, {0x101, 0x7fff, 0x9, 0x4}, {0x2, 0x1, 0x7, 0x6}, {0xffffffff, 0xfffffff8, 0x4, 0x4}, {0x4, 0x8000, 0x7, 0xffffff55}, {0x3, 0xfffff65b, 0x6, 0xbb}, {0xf2cf, 0x7f, 0xffffffff, 0x3}, {0x4, 0x7, 0x2, 0x9}, {0x0, 0x8, 0x200, 0x6}, {0x1, 0x6, 0x7f, 0x40}, {0x5, 0x1f, 0x8000, 0x100}, {0x1, 0x143e}, {0x401, 0x1, 0xffffffff}, {0x7, 0x0, 0x0, 0x4}, {0xfff, 0x7, 0x5, 0x80000000}, {0x9, 0x4, 0x5}, {0x101, 0x1, 0x1, 0x8}, {0x1, 0xfff, 0x4, 0x36}, {0x6, 0x8, 0x2, 0x800}, {0x7, 0x4, 0x1f}, {0x9, 0x401, 0x8, 0x6}, {0x5, 0x1, 0x7, 0x5}, {0x6, 0x5, 0x4, 0x7f}, {0x5, 0x1ff, 0x1ff, 0x6}, {0x3, 0x5, 0x1, 0x80}, {0x2, 0x2, 0x4, 0x9649}, {0x8, 0x101, 0x4, 0x3ff}, {0xd70d, 0x7ff, 0xa1, 0xe2}, {0x6, 0x0, 0x96, 0x6}, {0x1, 0x0, 0x33, 0x7}, {0x2, 0x8, 0xfff, 0x4}, {0x2, 0x44e, 0x1, 0x800}, {0x4, 0x6, 0x4, 0x10001}, {0x1f, 0x3f00, 0x1, 0x10000}, {0x0, 0x5, 0x7ff, 0x100}, {0x3, 0x0, 0x100, 0x7}, {0x1, 0x3, 0x5, 0x81}, {0x5, 0x4, 0x10000, 0x4}, {0x8000, 0x80, 0x1, 0x9a90}, {0x3, 0x3, 0x5, 0x800}, {0x101, 0x4, 0x0, 0x87f8}, {0x0, 0x5, 0x1, 0xf841}, {0x4, 0x9, 0x5, 0x80000001}, {0x7, 0xff, 0x3}, {0x2, 0x16be, 0x5, 0x7fff}, {0x1, 0x1, 0x4, 0x8000}, {0x4e55c429, 0x1ff, 0x401, 0x3}, {0xe8, 0x1, 0x0, 0x4}, {0x2, 0x20, 0x7fff, 0x7}, {0x9, 0xffff, 0x8, 0xfffffff7}, {0x4, 0x10001, 0x8001, 0xe8}, {0x9, 0x1, 0x7, 0x3}, {0x800, 0x4, 0xff, 0x6}, {0xffffff80, 0x8000, 0x8001, 0x1}, {0x10001, 0x100, 0x40, 0xaed}, {0x50f, 0xf9cb, 0x5, 0x40000000}, {0x6f4, 0x1, 0x1, 0x5}, {0xfffffffc, 0x6b, 0x5, 0x1}, {0x4, 0x1, 0x5, 0x1ff}, {0xc1, 0x0, 0x7}, {0x7, 0x3, 0xffff8564, 0x7}, {0x2, 0x4d1a, 0xfffffffe}, {0x1ff, 0x5, 0xda, 0x6fc}, {0x9, 0x2, 0xa0000000, 0x3ff}, {0x5, 0x0, 0x2, 0x5}, {0x2, 0x3, 0x3, 0x3}, {0x0, 0x4, 0x0, 0x7}, {0x20, 0xffff0001, 0x7fffffff, 0x5}, {0x2, 0x40, 0x4, 0x7}, {0x2, 0x9, 0xff, 0x7f}, {0xc6, 0x81, 0xff, 0x9}, {0x6, 0x8, 0x800, 0x6}, {0x6, 0x7, 0xf4, 0x1}, {0x7fffffff, 0x6, 0x1, 0x6}, {0x5, 0x670f, 0x5, 0x4}, {0x1, 0x400, 0x3, 0x400}, {0xffffffff, 0x7f2aaf3f, 0x800, 0x3}, {0x7, 0x40c, 0x80, 0x80}, {0x1, 0x8, 0x1f, 0x9}, {0x9bd3, 0x3ff, 0xfff, 0x80000000}, {0x67a, 0x14031521, 0x0, 0xd9ae138}, {0xce4, 0x4, 0x0, 0x3}, {0x200, 0xffffffff, 0x9, 0x1}, {0xfffffffc, 0x8, 0xd0, 0x4c364654}, {0x80000001, 0x4, 0x5, 0x7}, {0x6, 0x2, 0xfffffff9, 0x7}, {0xffff4301, 0x3e5, 0x6, 0x6}, {0x121f, 0x1, 0x10000, 0x80000001}, {0x8, 0x2, 0x1000, 0x6}, {0x7fff, 0x8, 0x401, 0x1}, {0x80, 0x2, 0x200, 0x9}, {0x6712897b, 0xfffffffd, 0x2, 0x3f}, {0x0, 0xfffffc00, 0x5498, 0x7}, {0xe139, 0x3, 0x3}, {0xfff, 0x3f, 0x1ff, 0x3}, {0x1, 0x9, 0x9, 0xfffffff9}, {0x4, 0x2, 0x8001, 0x8}, {0x9, 0x351d, 0x0, 0x2}, {0x963f, 0x1000, 0x7, 0x2db}, {0x800, 0x90000000, 0x7, 0x8}, {0x8001, 0x8, 0xffff0b22, 0x6}, {0x4, 0xfffffffd, 0x88eb, 0x51eb}, {0x8, 0x155, 0x0, 0x425d}, {0x9, 0x2, 0x9, 0x80000001}, {0x9, 0xf6, 0x0, 0xaf}, {0x1, 0x55d, 0x8, 0x5}, {0x40, 0x1, 0x5, 0xfffffffd}, {0x3, 0x47b, 0x2, 0x8001}, {0x5, 0x8af, 0xffffff81, 0x5}, {0x2, 0x9, 0x200, 0xb9b7}, {0x2, 0x401, 0x81, 0x2}, {0x7, 0x1, 0x9}, {0x3, 0x7, 0x2, 0x1}, {0x9, 0x8, 0x7, 0x6}, {0x6, 0x25, 0x9, 0x4}, {0x1, 0x5, 0x4}, {0x2, 0xffff, 0x6, 0x2}, {0x7fffffff, 0x0, 0x10000, 0x1f4c}, {0x36, 0x0, 0x5, 0x3}, {0xe3, 0x40, 0x7, 0x8001}, {0xfff, 0x1d4, 0xa6a8, 0xfffffffa}, {0x1c, 0x5}, {0x7, 0x1, 0x48, 0x9}, {0x8, 0x6225, 0x4, 0x8}, {0x4, 0x3f, 0xb0, 0x7}, {0xff, 0x8, 0xb, 0x5}, {0xfcf0, 0x4, 0xfffffffc, 0x7}, {0x7ff, 0x1, 0x3, 0x1}, {0x1, 0x7f, 0x3, 0x3ff}, {0x4, 0x3, 0x8, 0x4}, {0x6, 0x1, 0x5}, {0x6, 0x8, 0x8e, 0x4}, {0x14c4, 0x1ff800, 0x7, 0x3ff}, {0x80000001, 0x500000, 0x6, 0x80}, {0x9, 0xfd, 0x8, 0x401}, {0xff, 0x6, 0x2, 0x3}, {0x2, 0x8, 0x1c}, {0x6, 0x5, 0x7, 0x8}, {0x101, 0x36, 0x8, 0x1}, {0x5, 0x4, 0x20, 0x10001}, {0x1, 0x87, 0xc98, 0x3}, {0x10000, 0x3f, 0x2, 0x400}, {0x5, 0x4, 0x4, 0x433}, {0x8, 0x5, 0x4, 0x3}, {0x7d3, 0x7, 0xfd, 0xf9fa}, {0x0, 0x18, 0x5, 0x6}, {0x3, 0x800, 0x4, 0x1f}, {0x9, 0x9, 0x8f, 0x800}, {0x101, 0x9, 0x1, 0x5}, {0x401, 0xfffff8ab, 0x9, 0x6}, {0x1, 0x400, 0x7f, 0x80000000}, {0x7f, 0x7, 0x20, 0x8}, {0x9, 0x7, 0x2, 0x2}, {0x751a, 0xe08, 0x101, 0x9}, {0x1d, 0xd9af, 0x101, 0xffff}, {0x3, 0x3f, 0x8, 0x7f}, {0x80000000, 0x800, 0x800, 0x2}, {0x100, 0x10, 0x6, 0x81}, {0xfffffffe, 0x8, 0xfff, 0x80000000}, {0xffff5a94, 0x3f, 0x54845ccd, 0x3}, {0xd90, 0x83, 0x8, 0x3}, {0x6, 0x6, 0x3, 0x5}, {0x4, 0x11b, 0x5, 0x7f}, {0x36, 0x4, 0x0, 0x7fffffff}, {0x9, 0x401, 0x1, 0x5}, {0x57516ec, 0x0, 0x0, 0x6}, {0x3, 0x10001, 0x5, 0x10001}, {0xcc, 0x6a5d, 0xff, 0x7}, {0x9ec, 0x8, 0x6381, 0x8001}, {0x6, 0x0, 0x6, 0x801b}, {0x6, 0xfffffeff, 0x8, 0x7}, {0xfffffff9, 0x7, 0x4, 0x7f}, {0x10001, 0x2, 0x400, 0x8}, {0x3, 0x40, 0x3, 0x200}, {0x5, 0x3f8dcadb, 0x9, 0x20}, {0x9, 0x8, 0x0, 0x10000}, {0x5a, 0x80, 0x3, 0x4}, {0x0, 0xfffffffc, 0x3, 0x8}, {0x2, 0x24, 0x9, 0x4}, {0x5, 0x8000, 0xffffffff, 0x1}, {0xfff, 0x1, 0xf66}, {0x1f, 0x7, 0x1000000, 0x4}, {0x12a, 0x6, 0xff, 0x6}, {0x1, 0x1, 0x1, 0x7}, {0x8c05, 0x6, 0x4f, 0x20}, {0x200, 0x10000, 0xef9, 0x2}, {0x200, 0x9, 0x5, 0x20}, {0x7ff, 0x101, 0x8, 0xfffffff9}, {0x1, 0x4, 0x4, 0x5}, {0x2271, 0x8, 0x3, 0x3}, {0x9, 0x1, 0x7a, 0x3}, {0x4, 0x2, 0x6f0, 0x25f9}, {0xfffffffc, 0x8001, 0x5d8, 0x7}, {0x1, 0xf0000000, 0x80000000, 0x3}, {0x4, 0x3, 0xffff, 0x2}, {0x8, 0x7, 0x1f, 0x1}, {0x200, 0x9, 0x7fff, 0x400}, {0x1f, 0x860, 0xfffff2f5, 0x8}, {0x2, 0xb0f, 0x3ff, 0x4}, {0x800, 0x400, 0x9, 0xb7df}, {0x3423, 0x5, 0x10001, 0x6}, {0x1ff, 0x1f, 0x7, 0xc92b}, {0xeff9, 0x8735, 0x200, 0x10b}, {0x19b56a8e, 0x3, 0x9, 0xfffffff9}, {0x2, 0x8, 0x6, 0x8001}, {0x80, 0x309c, 0x6, 0xff}, {0x3, 0x2, 0x1f, 0x9}, {0x3ff, 0x1000, 0x3, 0x8}, {0x10001, 0x7, 0x8, 0x1000}, {0x3d, 0xffffffff, 0x1ff}, {0xa88, 0x44, 0x8cf1, 0x51}, {0x3, 0x9, 0x9, 0x4}, {0x1, 0xffffffff, 0x2, 0x5}, {0x1, 0x4, 0x0, 0x5}, {0x81, 0xf905, 0x3, 0x8001}, {0xffff, 0x0, 0x3, 0x1f}, {0xfffff001, 0x0, 0xbe, 0x80}, {0x80000000, 0x2, 0xffff, 0x8001}, {0x1, 0x40, 0x3, 0x6}, {0x1, 0x40, 0x1000, 0x1a4}, {0x2, 0x5fe, 0x400, 0x7}, {0x60c3, 0x0, 0x8}, {0x6, 0xffffffff, 0x20, 0x6}, {0x3f, 0x2, 0xffffffe1, 0x8}, {0x5, 0xffffffa4, 0xfcf, 0x245e}, {0x7, 0x5, 0x8000, 0x591ae71f}, {0x7ff, 0x825b, 0x1, 0x2}, {0x1, 0x800, 0x100, 0x80000000}, {0x2, 0x5, 0x6}, {0x1000, 0x292, 0x8001, 0x4}, {0x40, 0x5, 0x5}, {0x0, 0x1, 0xfff, 0x458}, {0x200, 0x1, 0x4, 0x7}, {0x0, 0x8, 0x6, 0x1000}, {0x2, 0x7, 0x4a11dee3, 0x8001}, {0x10001, 0x1ff, 0x1, 0x200}, {0x8000, 0xffffffff, 0x9, 0x2}, {0x4, 0x80000000, 0x6, 0xff}, {0x8, 0x37, 0x8, 0x7}, {0x0, 0x5, 0x40, 0xd6d}, {0x4, 0x3ff, 0x71bd2e95, 0x3}, {0x9, 0x7fff, 0x1}, {0x200, 0x400, 0xfffeffff, 0xfffffffc}, {0xffff, 0x7fffffff, 0x9, 0xa435}, {0x6, 0x80, 0x6, 0x7f}, {0x8f9f, 0x9, 0x100, 0x101}, {0x5, 0x1f, 0x5da, 0x5}, {0x8000, 0x6, 0x7, 0xbf}, {0x6, 0xcdc3, 0x3}, {0xf94, 0x4, 0x80000001, 0xfffffffa}, {0x7, 0x3, 0x80000001, 0x7f}, {0x0, 0x5, 0x221b, 0xafff}, {0x7, 0x87, 0x6, 0x401}, {0x6, 0xffffffff, 0x7, 0xfffeffff}, {0x2, 0x1, 0x40, 0x40}, {0x4000000, 0xecc9, 0x7, 0xfff}, {0xffffffff, 0x4, 0x7, 0x87}, {0x0, 0x7, 0x5, 0x5}, {0x40, 0xb0d9, 0x7df, 0x24a7}, {0x62, 0x81, 0x3f, 0x80}, {0x80, 0x9, 0x2, 0x3}, {0x50d5228c, 0x19, 0x8, 0xeb}, {0x6, 0x400, 0xb46b, 0x40}, {0x2, 0x2, 0x0, 0x5}, {0x9, 0x65, 0x2, 0x80}, {0x4c, 0x7, 0x2, 0x1}, {0x5, 0x3490, 0x0, 0x3ff}, {0x9, 0x0, 0x9e}, {0x4d34, 0xffffffc0, 0x2, 0x4}, {0x80000001}, {0x1ff, 0x9, 0x2, 0x4}, {0x3f, 0x6, 0x6, 0x81}, {0x7, 0x2c, 0x5, 0x9}, {0x8bcf, 0x100, 0x7335a61d, 0x1f}, {0x400, 0x5, 0x5, 0xf409}, {0xa34, 0x5, 0xc8, 0x1}, {0x4, 0xfffffff7, 0x7, 0x1f}, {0x3, 0x9, 0x200, 0x2}, {0x6, 0x8b6, 0x6, 0x1}, {0x0, 0x9, 0x1, 0xff}, {0x5, 0x4, 0x3ea, 0x430}, {0x8, 0x800, 0x8, 0x9}, {0x4, 0xc636, 0x1, 0x7ff00}, {0xfffffffc, 0x80000000, 0x174, 0x1000}, {0x1, 0xc1c1, 0x2fa, 0x1}, {0x6, 0x400, 0x5, 0xffffffc1}, {0x8e19, 0x71, 0x1, 0x2cf}, {0x100000, 0x7, 0x0, 0x9}, {0xcbb3, 0x80, 0x7fffffff, 0x4}, {0x80, 0x1, 0x0, 0x98}, {0x4, 0x46c3, 0x8, 0x7}, {0x7, 0x40, 0xee}, {0x1, 0x2, 0x1, 0x7fffffff}, {0x0, 0x9, 0x7, 0xff}, {0xffffffa7, 0xfffffff9, 0x7fff, 0x3ff}, {0x100, 0x3, 0x3, 0x9}, {0x7ff, 0x6, 0x2, 0x3ff}, {0x101, 0x8, 0x3, 0x5}, {0x4, 0x0, 0x10001, 0x7}, {0x6, 0xc640, 0x81, 0x1}, {0xffffff81, 0x0, 0x8, 0x6}, {0x81, 0x8, 0xfffffffe, 0x3}, {0x9, 0x7, 0x81, 0x6}, {0x3, 0x1f, 0x2, 0x5230}, {0x9, 0x6, 0x1, 0x2}, {0x5, 0x10000, 0xffffffff, 0x5}, {0xfff, 0x8, 0x3, 0x1}, {0xfffffeff, 0x6, 0x100, 0x3}, {0x3ff, 0x0, 0x7, 0x8000}, {0x7fffffff, 0xffffa87e, 0xfff, 0x8}, {0x5, 0x9, 0x3ff}, {0x0, 0x18, 0x5d7, 0x4}, {0x200, 0x1, 0x0, 0x7}, {0x401, 0x5, 0x40, 0xfcc}, {0xaf, 0x3, 0x3, 0x7}, {0x100, 0x9, 0x4, 0x9}, {0x7, 0x6, 0x0, 0x3}, {0x1, 0x166f, 0x1, 0x400}, {0x6, 0x5, 0x3, 0x20}, {0x3, 0x707b, 0x81, 0xfffffff8}, {0x4, 0x0, 0x9, 0x80000000}, {0xffffd588, 0x3, 0x1, 0x1}, {0x3, 0x7ff, 0xcce, 0x10}, {0x7, 0x7, 0x80000001, 0x31}, {0x8001, 0x5000, 0x1, 0x401}, {0x0, 0x7, 0x1, 0x5}, {0x3, 0x4, 0x8}, {0x2, 0x3, 0x14d4, 0x57}, {0x100, 0x1, 0x80, 0xffff}, {0x58, 0x6, 0x1}, {0x6, 0x6, 0x20, 0x8}, {0xaa6, 0x2, 0xd84, 0xf858}, {0x2240, 0x6, 0x9, 0x1}, {0x6, 0x0, 0x4, 0x2}, {0x9, 0x8001, 0xfffffffb}, {0x2ca8, 0x7, 0x1, 0x3}, {0x0, 0xfff, 0x81}, {0x7fffffff, 0x0, 0x8000, 0x7}, {0x0, 0x0, 0x3, 0xfff}, {0x80000001, 0x6, 0xc9f, 0x1570}, {0x10000, 0x100, 0x800}, {0x3, 0x2, 0x7000000, 0x46a}, {0xfff, 0x9, 0x400, 0x9}, {0x3, 0xffffaa63, 0x0, 0x6c}, {0x1f, 0x7, 0x3c05, 0x4}, {0x5, 0x72a6, 0x0, 0x3}, {0x8, 0x1ff, 0xdde, 0xaa000000}, {0x6, 0xffffffff, 0x5, 0x7}, {0x8000, 0x800, 0x3, 0x55}, {0x5, 0xe9b7, 0xff, 0x2}, {0xffffffff, 0xffffffff, 0x40, 0x1}, {0xf38b, 0x527, 0x1ee, 0x40}, {0x9, 0xfff, 0x2, 0x5}, {0x1, 0xfffffffe, 0x3, 0x3f}, {0x7, 0x40, 0xe0b5, 0x4}, {0x7, 0x0, 0x20, 0xff85}, {0x1, 0x8, 0x5}, {0x8, 0x0, 0x80000001, 0x81}, {0x40, 0x19d, 0x8, 0x1}, {0x5, 0xfffffffe, 0x0, 0x1e0}, {0x401, 0x80000000, 0xfff, 0x8}, {0x5, 0x8, 0x6, 0x1}, {0x401, 0x0, 0x7, 0x10001}, {0x2, 0x5611, 0xef, 0x12e}, {0x100, 0xfffffe7c, 0x2, 0x35a3}, {0x20, 0x2, 0x10001, 0x3}, {0x1, 0x3, 0xb26, 0x2}, {0x3ff, 0x8000, 0x5, 0x5}, {0xfffffffa, 0x80, 0x0, 0x8000}, {0x80000001, 0x2, 0x10001, 0x4}, {0x401, 0x7ff, 0xffff7fff, 0x1}, {0x7, 0x5, 0x0, 0x8001}, {0x80, 0x3, 0x12, 0x7}, {0x3113, 0x1, 0x1000, 0x1}, {0x0, 0xffffff06, 0x3a, 0xc}, {0x2, 0x1, 0x4, 0x8}, {0x6, 0x1, 0x7fffffff}, {0x4, 0xffff, 0xffffffff, 0x3f}, {0x5, 0xad, 0x10000, 0x2}, {0x400, 0x6, 0x8, 0x2}, {0x200, 0x5, 0x5, 0x6}, {0x200, 0x35d, 0x7ff, 0x7}, {0x401, 0x1, 0x3, 0x1}, {0x2, 0x10001, 0x8001, 0x9}, {0x89, 0x200, 0x7ff, 0x200}, {0x0, 0x0, 0x401, 0x8768}, {0xfffffff9, 0x2, 0xfffffc01, 0x5}, {0x1000, 0x8, 0xffffff01, 0x6}, {0x7, 0xfcdf, 0xfffff7bf, 0x1ff}, {0x5, 0x966, 0x8, 0x2db2}, {0x8, 0x5, 0x0, 0x733}, {0x6, 0x29, 0x1, 0x80000000}, {0xfffffffa, 0x3af2, 0x8, 0x7}, {0x8001, 0x54, 0x6, 0x2}, {0x3, 0x5, 0x5, 0x1}, {0x4, 0x401, 0x1c3, 0x5}, {0xff, 0x1000, 0xd4d, 0x5}, {0x9, 0x1, 0x200, 0x9}, {0x8000, 0x2, 0xa1c6, 0x7}, {0x7, 0x7, 0x9, 0x4}, {0x9, 0x0, 0x1, 0x966}, {0x9, 0x80000000, 0x8, 0x1}, {0x8, 0x101, 0x5, 0x3}, {0x3, 0x1, 0xba, 0x80000001}, {0x1, 0x8a97, 0x8, 0x8}, {0x6, 0x2, 0xd1, 0x7}, {0x177, 0xffffffff, 0x9, 0x3ff}, {0x10001, 0x1, 0x7f, 0x9}, {0xfff, 0x9, 0x80000001, 0x5}, {0x1, 0x2, 0x1, 0x9}, {0x7ff, 0x9c, 0x10000, 0x80000001}, {0x1, 0xb8, 0x9, 0x4}, {0x9, 0xef, 0x100, 0x4}, {0x81, 0x7fffffff, 0x6, 0x7}, {0x6, 0x1, 0x5b, 0x6}, {0x1, 0x3, 0x0, 0x3}, {0x0, 0x1, 0x200, 0x7}, {0xdf4, 0x9, 0x3ff, 0x80000000}, {0x673, 0x10001, 0xb5, 0x2}, {0x5, 0x8, 0x6, 0x9}, {0x8, 0xfffffff9, 0x6, 0x7}, {0x80, 0x871, 0xd03, 0x800}, {0xec, 0x2, 0x1, 0x80}, {0x9, 0x8, 0x3, 0x6}, {0x4, 0x3f, 0x8000, 0xc000000}, {0x2, 0x1}, {0x9e6, 0x2000000, 0x9, 0xd6}, {0x1, 0x4, 0x3f, 0x8}, {0x4, 0x80000001, 0x80000000, 0x7}, {0x3, 0x3, 0xfffff800, 0xb8c1}, {0xba3e, 0x7, 0x5, 0xa0000}, {0x592a, 0x10000, 0x4e, 0xffff}, {0x8001, 0x4ef, 0x5, 0x4}, {0x0, 0x9, 0xfffffd4b, 0x6}, {0x0, 0x3, 0x80, 0x400}, {0x5, 0xd77, 0x10001, 0x4}, {0x40, 0x5, 0x3ff, 0x101}, {0x1, 0x19d, 0x39db, 0x9}, {0xffffffe1, 0x4, 0x8, 0x1}, {0x7, 0x8, 0x0, 0x6}, {0x563bda2e, 0x1, 0x4, 0xb3}, {0x1ff, 0xfffff001, 0x4cc9, 0x4}, {0x10001, 0x32e, 0x5, 0x101}, {0x6, 0x6, 0x81, 0x1f}, {0x911, 0xffffffff, 0xffffff1a, 0x8000}, {0x2, 0x7ff8, 0x20, 0x4}, {0xff, 0x0, 0xf4, 0x800}, {0x1, 0x101, 0xfffff0a2, 0x2}, {0x5, 0xef9, 0x3}, {0x45c, 0x7, 0x449e6862, 0x3f}, {0x5, 0x40, 0x1, 0xc714}, {0x4, 0x2ed2, 0x3, 0x400}, {0xb1ea, 0xf6f, 0x101, 0x8}, {0xc11c, 0xf, 0x7fffffff}, {0x9, 0x2, 0xffff, 0x5}, {0x3, 0xf1b, 0xf802, 0x9}, {0x200000, 0x3, 0x7fffffff, 0xa4cb}, {0xffffffe1, 0x7fffffff, 0x8, 0xa9fc}, {0x80000000, 0xa2e2, 0x65f, 0x5}, {0x4, 0xd, 0x5, 0x1}, {0x1f, 0x1f, 0x1, 0x7}, {0x3ff, 0x6, 0x9, 0x8}, {0x8e0, 0xfffffff9, 0x2, 0x4}, {0x7, 0x8, 0x1ff, 0x2}, {0x10001, 0x5, 0x100, 0xfff}, {0x4, 0x10000, 0xffffffff, 0x2}, {0x1, 0x6, 0xe4, 0x2}, {0x3, 0x7, 0x8000}, {0x9, 0x9, 0x10000, 0xae42}, {0x9, 0x3, 0xa54, 0x17a}, {0x1, 0x401, 0x6, 0x4}, {0x80, 0x1000, 0xff, 0xd7}, {0x7f, 0x9, 0x4145, 0x3}, {0x7, 0x4, 0xd3, 0x1ff}, {0x8001, 0x7, 0x8000}, {0xffffffff, 0x800, 0x7}, {0x9, 0x40, 0x100, 0x4}, {0xe0, 0x0, 0x1, 0x4}, {0xffff, 0x6, 0x7, 0x9}, {0x3ff, 0x0, 0x4, 0xff91}, {0x0, 0x7fffffff, 0x3f, 0xd7}, {0xc4d5, 0x5, 0x1ff, 0x20}, {0x8, 0x5, 0x0, 0x8000}, {0x1, 0x1000, 0x3, 0x8}, {0x100, 0xfffffff7, 0x3ff, 0x7}, {0x5, 0x14cd, 0x400, 0x1000}, {0x1, 0x1, 0x65, 0x6}, {0xfffffff7, 0x3ff, 0x7fffffff, 0x3}, {0x3, 0x4, 0x1, 0x3b56}, {0x80000001, 0x5, 0x80000001, 0xdc}, {0x8, 0x4a67, 0x8, 0x5}, {0x7, 0x6, 0x64, 0x18b}, {0x5, 0x80000001, 0x7fff, 0x4}, {0x43be2b66, 0xffffffff, 0x2, 0x9}, {0x0, 0xffff, 0x3, 0x4}, {0x9, 0x0, 0x81, 0x3}, {0x8, 0x9, 0x401, 0x8}, {0x9, 0x4, 0x0, 0x8}, {0x4, 0x0, 0x1, 0x7}, {0x3, 0x3, 0xffff, 0x3}, {0x6, 0x10000, 0x2b1, 0x7}, {0x9, 0x7, 0x1, 0x7ff}, {0x4, 0xffff, 0x9, 0x80000000}, {0x3, 0x7, 0xffff, 0x78}, {0x101, 0x401, 0x21cd3789, 0x8}, {0xfffffffb, 0x7, 0x1}, {0x400, 0x80000000, 0x1000, 0x9}, {0xfff, 0x9, 0x401, 0x80}, {0x80, 0x0, 0xba, 0x8}, {0xc31, 0x401, 0x360e, 0x3}, {0x8, 0x7fff, 0x100, 0x5}, {0x1, 0x2, 0x10000, 0x2ef1}, {0x2bbf, 0x5, 0x2, 0xfffffffa}, {0x80000001, 0x3, 0x6, 0xfff}, {0x8460, 0xfff, 0x1, 0x401}, {0x1000, 0x6, 0x6, 0xfffffe00}, {0x80000000, 0x6, 0x6, 0x7fff}, {0x1, 0x7, 0x2, 0x1}, {0x5e, 0x7, 0x20, 0x2}, {0xfffffff8, 0x2431ec80, 0x7ff, 0x6}, {0xffff, 0x6, 0x8}, {0x25, 0x0, 0x8, 0x9}, {0x100, 0xea0, 0x7fff, 0x2}, {0xa18, 0xff, 0x1, 0x3ff}, {0x9, 0x7fff, 0x8, 0x1}, {0x80000001, 0x0, 0x0, 0xffffff81}, {0x1, 0x12, 0x6, 0x7}, {0x9, 0x20, 0x40, 0x5}, {0x0, 0x7, 0x8, 0x1}, {0xdf, 0x4, 0x7fff, 0x1}, {0x5, 0x5c5d, 0x1f, 0x8}, {0x81, 0x9, 0x3, 0x3}, {0xfb, 0x35fb4ec8, 0x4, 0xffffffff}, {0x5, 0x9, 0x7fff, 0xfffffffd}, {0x7, 0x4, 0x2, 0x1f}, {0xfff, 0x80000001, 0x1, 0x9}, {0x1, 0x6, 0x3, 0x8}, {0x7, 0x2, 0xff, 0x4}, {0xffff, 0x6, 0x8}, {0x0, 0x2, 0x5, 0x40}, {0xfffff4e3, 0x4, 0x4, 0x62031d19}, {0x8001, 0x8, 0x6, 0x3}, {0x9, 0xffffff80, 0x2, 0x6}, {0x6, 0x1ff, 0x8001, 0x1e}, {0x0, 0x7, 0x0, 0x7ff}, {0xcbb, 0x6, 0x54, 0xf193}, {0x1, 0x6, 0x101, 0x4}, {0x2, 0x4, 0x30, 0x80000000}, {0x6, 0x7ff, 0x9, 0x7f}, {0x2, 0x3, 0x4, 0x1f}, {0x8, 0x1, 0x1f, 0x40}, {0xfffffffe, 0x1, 0xfffffdf3, 0xdc9}, {0x4, 0xffff, 0x4, 0x2}, {0x2, 0x8, 0x8001, 0xffffffff}, {0x7, 0x8, 0xa5}, {0xfffffff8, 0x0, 0x1, 0x800}, {0x1, 0xce96, 0x5, 0x1ff}, {0x8, 0x6, 0x100, 0xffffffff}, {0xe90f, 0x261f736a, 0x5, 0x12c7}, {0xdf, 0x4, 0x7, 0x101}, {0x9, 0x3c, 0x4, 0x5}, {0x81, 0x3, 0x6, 0x6}, {0x5, 0x1ff, 0x6, 0x8}, {0x100, 0x401, 0xc31}, {0x1, 0x1, 0x20, 0x8}, {0x6, 0xbb, 0x14000000, 0xffff}, {0x9, 0x80, 0x2, 0x7fffffff}, {0x80000001, 0x1, 0x4, 0x8}, {0x36, 0xfff, 0x3ff, 0x7ff}, {0x1, 0x7f, 0x2, 0x5}, {0x6, 0x5, 0xe, 0xfffffffc}, {0xffffffff, 0x80000001, 0x8, 0x9}, {0x1, 0x1000, 0x4, 0x1ff}, {0xebf, 0x3, 0x7, 0xc51}, {0x6, 0x401, 0x6, 0x20}, {0x0, 0x6, 0x3, 0x4}, {0x40, 0x3, 0xffff5c78, 0x40}, {0x2, 0x9, 0x81, 0x8}, {0x7, 0x9, 0x0, 0x4}, {0xb4d5, 0x7, 0x1000, 0x1}, {0x8, 0x22, 0x7, 0x7}, {0xffffffff, 0xfffffffa, 0x3ff, 0x2}, {0x400, 0x8000, 0x7fff, 0xfffffff9}, {0x200, 0xff, 0x7fffffff, 0x7}, {0x0, 0x8000, 0x2}, {0x7f, 0x3, 0xed, 0x5}, {0x3f, 0x8000, 0xa3, 0x8}, {0x6, 0x0, 0x7fffffff, 0x3f}, {0xffffffc0, 0x2, 0x9, 0x7}, {0xfffffc01, 0x3, 0xfffffffa, 0x3}, {0x240, 0x400, 0x401, 0x5fed}, {0x274, 0x0, 0xffffffc0, 0x10}, {0x8, 0xfffff800, 0x700000, 0x5}, {0x5, 0xb, 0x800, 0x9}, {0x1, 0x10001, 0x5, 0x1}, {0x3f, 0x7, 0x8000, 0x3}, {0x4, 0x100, 0x0, 0x4}, {0x3f, 0x7, 0x7ff, 0x10001}, {0x1, 0xcf2, 0x7, 0x67d}, {0x11, 0x8001, 0x81, 0x20}, {0x40, 0x8, 0x20, 0x81}, {0x22, 0x3ff, 0xe99, 0x3}, {0x80, 0x6, 0x7, 0x4}, {0x5c4d, 0x0, 0x0, 0x3}, {0x4, 0x3, 0x7b07, 0x5a}, {0x6, 0x7eb, 0x7, 0x80000000}, {0x0, 0x8001, 0x622, 0x7fffffff}, {0x8, 0x4, 0x40, 0x9}, {0x200, 0x1, 0x100, 0x682}, {0xfff, 0xfffffff8, 0x7fff, 0x3}, {0xff, 0x8000, 0x8, 0x1ff}, {0x1, 0xf94, 0xbad2, 0xfffffbff}, {0x400, 0x81, 0x1b82, 0xfffffffe}, {0x5, 0x200000, 0x4, 0x129}, {0x2, 0x7, 0x9, 0x6}, {0x0, 0x7, 0x6, 0x3}, {0x8, 0x101, 0x4, 0x5a}, {0x90000, 0xfff, 0x3, 0x800}, {0x1011, 0x101, 0x7, 0x7}, {0x2, 0x1f, 0x2, 0x2}, {0x3, 0x7fffffff, 0x371, 0x1ff}, {0x3, 0x1, 0xfd9, 0x329}, {0x20, 0x7, 0x0, 0x9}, {0x7, 0x387, 0x16f, 0xa49}, {0x67, 0x7acc, 0x3, 0x80}, {0x4, 0xfff, 0xff, 0x2e}, {0x0, 0x69, 0x2, 0x4}, {0x2b, 0x10000, 0x20, 0x5}, {0x4, 0xb5, 0x79a, 0x1}, {0x5, 0x3, 0x3, 0xec}, {0x0, 0x8, 0x200, 0xffff}, {0xfffffffb, 0x6, 0x1, 0x7}, {0x3, 0x2, 0x400, 0x8}, {0x5, 0x3ff, 0x81, 0x3}, {0x3, 0x8001, 0x40, 0x7ff}, {0x5, 0xda0, 0x9, 0x3a9}, {0x6, 0x1, 0x4, 0x7}, {0x80, 0x800, 0x6, 0x8001}, {0x1f, 0xfffeffff, 0x4, 0x1}, {0x3fe, 0x8, 0x1, 0x913adec}, {0x9, 0x8, 0x9, 0x401}, {0x28, 0xffff6369, 0x401, 0xe00000}, {0x8, 0x4, 0x40, 0xe4}, {0xfff, 0xaf6, 0x3, 0x2}, {0x10000, 0xffffff80, 0x1, 0x1}, {0x6, 0x401, 0x4, 0x9cd}, {0x7, 0x1000, 0x2, 0x3}, {0x6, 0x6, 0x7, 0x2}, {0x0, 0x7, 0x1, 0x1}, {0x3, 0x6, 0xed2, 0x100}, {0x1, 0x6, 0x2, 0x6}, {0x2, 0x101, 0xbd, 0x81}, {0x8, 0x3, 0x6, 0x8}, {0x1, 0x2, 0x24f, 0x1}, {0x7, 0xfc000000, 0x7, 0xfffffeff}, {0xff, 0x823, 0x6, 0x9}, {0x100, 0x9, 0x139, 0xfffff800}, {0x7, 0x9, 0xffff7c93, 0x4}, {0x9, 0xb587, 0x2, 0x6}, {0x70fd, 0x4, 0x1, 0xdae}, {0x7fffffff, 0x6, 0x4, 0x7}, {0x7, 0x1, 0xf69, 0x401}, {0x4, 0x3, 0x4, 0x80}, {0x3, 0x7, 0x20, 0xbc}, {0x1000, 0x840, 0x2, 0x2}, {0xffff78e0, 0xf6, 0x4, 0x1}, {0x4, 0x0, 0x100}, {0xab, 0x40, 0xd6ee, 0x9}, {0x7, 0x7f, 0x80, 0x21}, {0x1, 0x200000, 0x5}, {0xac, 0x2, 0x2, 0x7}, {0x10001, 0x1, 0x1c, 0x8c76}, {0x6, 0x0, 0x6, 0x7}, {0x8001, 0x401, 0x6, 0xffffff13}, {0x6, 0x400, 0x8, 0xffffffff}, {0x5, 0x10001, 0x6c2d, 0x8123}, {0x800, 0x3ff, 0xa1, 0x7}, {0x101, 0x3, 0x8000, 0x7}, {0x1f, 0x0, 0x41, 0x8}, {0x8, 0x6, 0x100, 0x5}, {0x0, 0x1, 0x36e3, 0x7}, {0xff, 0xfffffff8, 0x2224, 0x3f}, {0x7, 0x8, 0x1, 0x20}, {0x0, 0x64a, 0x2, 0x4}, {0x20, 0x6, 0xd835}, {0x2, 0x6, 0xea, 0x1}, {0x6, 0x9, 0x6, 0x1}, {0x1, 0x800}, {0x800, 0x0, 0x6, 0x1}, {0x7, 0x5, 0x3, 0xef}, {0x3, 0xfffffff7, 0xffffffff, 0x9}, {0xf8c, 0x4ac, 0x7ff, 0x9}, {0x5, 0x343e2fd5, 0x6d, 0x80000000}, {0x3f, 0x1, 0x5, 0x81}, {0x3, 0x9, 0x7, 0x5}, {0xffff7fff, 0x0, 0xff}, {0x800, 0x10001, 0xc2, 0x10001}, {0x10001, 0x4, 0x8, 0x80}, {0x14, 0x8, 0xa443, 0xffffff01}, {0x100, 0x101, 0x9a4, 0x1}, {0x200, 0x80, 0x7, 0x67ca18ba}, {0x3480, 0x40, 0x7, 0x1}, {0x9cd00000, 0x101, 0x0, 0x6}, {0x6, 0xedf, 0x20400000, 0x9}, {0x88b, 0xcff, 0x7, 0x3}, {0x2, 0x400, 0x2, 0x826}, {0x8, 0x9, 0x80, 0x1}, {0x8000, 0x0, 0x68ee, 0x1f}, {0x9, 0x15, 0x2, 0xe8c}, {0x4, 0x8, 0x2, 0xfffff024}, {0x6, 0x0, 0xfa, 0x3}, {0xff, 0x80000000, 0xe78, 0x3f}, {0x6, 0x2, 0x4, 0x1}, {0x9, 0x7, 0xe4c, 0x1}, {0x5, 0x139, 0xa71c, 0x7d}, {0x1, 0x9, 0x7a2, 0x1}, {0x5, 0x10001, 0x7, 0x4}, {0x9, 0x2, 0x0, 0x20}, {0xffffffff, 0x5, 0xfffffffa, 0x125a}, {0xffffffff, 0x7fffffff, 0x5e2, 0x6}, {0x72c, 0x4, 0x101, 0xa9b}, {0x6, 0x56, 0x7, 0x6}, {0xfffffffb, 0xff, 0x5, 0x636d}, {0xfffffffc, 0x8, 0x9, 0x9}, {0x5, 0x5, 0x5, 0x7}, {0x80000001, 0x3, 0x400, 0xa}, {0x8, 0x0, 0x3, 0x4}, {0x9, 0xff, 0x37, 0x5}, {0x3, 0x5, 0x2, 0x7}, {0x8, 0x5, 0x46, 0x20}, {0x3, 0x0, 0x1, 0x8f3}, {0x5, 0x1, 0x7f, 0x66800000}, {0x1, 0x1, 0x214, 0x7ff}, {0x20, 0x1, 0x5, 0x8}, {0xffffffc0, 0x2, 0x2, 0x1e47}, {0x2, 0x2, 0x0, 0x4}, {0x8, 0x7ff, 0x7, 0x100}, {0x80, 0x5, 0x3, 0x1}, {0x6, 0x1f, 0x3, 0x5}, {0x0, 0x114c, 0xfffffff8}, {0x3ff, 0x3, 0x4, 0x80}, {0x1, 0x6, 0xff, 0x800}, {0x0, 0x0, 0x0, 0x1}, {0x5, 0x2, 0x0, 0x2a37}, {0x7fffffff, 0x3f, 0x70, 0x71}, {0x6, 0x0, 0x7, 0x7}, {0x7, 0x1, 0x80000000, 0x3}, {0x0, 0x3, 0x6, 0x6}, {0x272, 0x999b, 0x8, 0x3}, {0x7, 0xfffffffa, 0x2, 0xffff7fff}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1c, 0x7, 0x4e}, {0x7, 0x1, 0x34e9, 0x10001}, {0x80000, 0x1000, 0x5, 0x80000000}, {0x899, 0x3, 0x1, 0x8000}, {0x2, 0x5, 0xffff, 0x3}, {0x1c, 0x400, 0x8, 0x5}, {0x5, 0x8000, 0x8, 0x3}, {0x3ff, 0x3ff, 0x4, 0x10001}, {0xb7, 0x2, 0x4, 0x4}, {0x58, 0x20, 0x1f, 0x81}, {0xb5, 0x7, 0x9}, {0x9, 0x800, 0xfffffff9, 0x8}, {0x10000, 0x200, 0x8, 0x7fff}, {0x101, 0x9, 0x7, 0x800}, {0x800, 0x4, 0x1, 0x9}, {0x5, 0x489, 0x7, 0x6}, {0xff, 0x7, 0x0, 0x163}, {0x1f, 0x1f, 0x2, 0x800}, {0x908, 0xfffffffb, 0x4, 0x2ae}, {0x80000000, 0xcc1, 0x200, 0x2}, {0x99d5, 0x46, 0x5}, {0x6, 0x8, 0x7fffffff, 0xae2}, {0x101, 0x5, 0x8001, 0x7c2}, {0x2ab, 0x8, 0x3bb, 0x6}, {0x7, 0x7fffffff, 0xffff88a5, 0x40}, {0x20, 0x101, 0x49, 0x1}, {0x0, 0xddae, 0x2, 0x8001}, {0x101, 0x8, 0x2, 0x8}, {0xffffffff, 0xfffffffb, 0x3, 0x80}, {0x37d, 0x8, 0xc000000, 0x8}, {0x9, 0x8, 0x307cc6, 0x124}, {0x2, 0xbef6, 0xffffffff, 0x7fffffff}, {0x3, 0xfff, 0x5, 0x8001}, {0x1, 0xc56, 0x7fff, 0x8}, {0x8, 0x1, 0x8, 0x3}, {0x5, 0x5, 0xfe00, 0x3f}, {0x100, 0xfffffffe, 0xd08, 0x3}, {0xffffffc0, 0x200, 0x9f79, 0x2}, {0x1ff, 0x7fff, 0x1, 0x34a8}, {0x0, 0x9, 0x2000, 0xffffdeaa}, {0x7df3, 0x0, 0x9a9, 0x1000}, {0xb38, 0x80000000, 0x4, 0x8}, {0x2, 0x0, 0x8, 0xf74}, {0x502, 0x8000, 0x2c2b, 0x7fffffff}, {0x800, 0x40, 0x546a, 0xfffff800}, {0x8, 0x5, 0x2, 0x9}, {0x4, 0x3f, 0xd40, 0x3}, {0x4, 0x1f, 0xff, 0x5}, {0x7, 0x8, 0x9, 0xc1}, {0x80, 0x7, 0xdb, 0x8}, {0x6, 0x29d0, 0x5, 0x1}, {0x200, 0xfffffffe, 0x4, 0x46e}, {0x7594dc87, 0x3, 0x6, 0xffffffff}, {0x10000, 0x9, 0x8, 0x7}, {0x5, 0x27, 0x1f9, 0xffffffff}, {0x80000000, 0x0, 0x100, 0xb61}, {0x0, 0x200, 0xba2a, 0xc28}, {0x7, 0x3, 0x1}, {0x1, 0xa, 0xffffffff, 0x1}, {0x7ff, 0x3ff, 0x12, 0xffffffff}, {0x3, 0xfffffffd, 0x6, 0x5}, {0x0, 0x6, 0x2, 0xfffffff7}, {0xdb03, 0x1, 0x8f, 0x2}, {0x8001, 0x400, 0x2, 0x9}, {0x3, 0x5, 0x1, 0x3}, {0x3e, 0x3, 0xe63, 0xffffffff}, {0x26fa, 0xff, 0x7, 0x53}, {0x8001, 0x100, 0x9, 0x9}, {0x1, 0x7, 0x200, 0x2}, {0x80, 0x1, 0x6, 0x3}, {0x5, 0x686, 0x5, 0x81}, {0x5, 0x0, 0xe054, 0xfffffc78}, {0x401, 0x5, 0xbb, 0x2}, {0xc1, 0x8, 0x0, 0x5}, {0x0, 0x0, 0x5, 0x3f}, {0x40, 0x4, 0xb893, 0x2}, {0x81, 0x8, 0x4, 0xcf6}, {0x3, 0x4, 0x1000, 0xb9}, {0x20c3, 0x8, 0x1, 0x400}, {0x400, 0x4804, 0x0, 0x1}, {0x200, 0x44, 0xd8a, 0x5}, {0xd9, 0x1, 0x101, 0x15ff}, {0x4, 0x7c9, 0x6, 0x90}, {0x7, 0x0, 0x2, 0x6}, {0xfffffff8, 0xffff, 0x8, 0x1}, {0x7f, 0x7f, 0x0, 0x3}, {0x7fffffff, 0x20, 0x8000, 0x4}, {0xa984, 0x3f, 0x8, 0x4}, {0x3f, 0x9, 0x100, 0xffffff01}, {0x930c, 0x8, 0x5, 0x9955}, {0x8, 0x5, 0xe14f, 0x8}, {0x3177, 0x4, 0x3, 0x5}, {0x0, 0x4, 0x20, 0x400}, {0x3f, 0x401, 0x5, 0xffff7fff}, {0x6, 0x5, 0x7f, 0x1}, {0x800, 0x20, 0x10000, 0x8000}, {0x9, 0x6, 0x4, 0xfffffff8}, {0x3, 0x8, 0x800, 0x8}, {0x80000000, 0x1000, 0xffffff80, 0x1ff}, {0x4, 0x9, 0x1ffce0d7, 0x5}, {0x3f, 0x1, 0x9, 0xcdb1a718}, {0x1e000000, 0x6, 0x0, 0x4}, {0x3, 0x8, 0x69, 0x8}, {0x8000, 0x81, 0x478, 0xc41}, {0x6455664d, 0xc82, 0x7, 0x3}, {0x2, 0x4, 0x7, 0x8}, {0xfffffc01, 0xa14, 0x2, 0x3ff}, {0x3, 0x213e1e63, 0x3, 0x669b000}, {0x1, 0x7, 0x7, 0x5}, {0x6, 0x5d, 0xfff, 0xffffff80}, {0x1, 0x35e, 0x7, 0x40}, {0xffffffff, 0x10000, 0x4, 0x9}, {0x9, 0x2, 0x6, 0xd7a}, {0x2, 0x80000000, 0xffffffff, 0x1f}, {0x8, 0xfffffffb, 0xc2fb, 0x8}, {0x3, 0xe7c, 0xffffffff, 0x7}, {0x6, 0x20, 0x4, 0x7}, {0xfffffff8, 0x9, 0x60e4, 0x3f}, {0x20, 0x9, 0x7fff, 0xfffffffc}, {0x1f, 0x4, 0x3ff, 0x200}, {0x4, 0x1f, 0x81, 0x8001}, {0x6, 0x1, 0x10000, 0x1}, {0x1, 0x7, 0x1, 0x1400}, {0x8001, 0xf4f, 0x6, 0x1}, {0x3, 0x8001, 0x380, 0x400}, {0x0, 0x4, 0x6, 0x80000001}, {0x5, 0x7, 0x200, 0x7}, {0x9, 0x7fffffff, 0x64fb9162, 0xffffffff}, {0x9, 0x6, 0x8, 0x3ff}, {0x81, 0xcb6, 0x1, 0xfc000000}, {0x0, 0x1, 0x10001, 0x80}, {0x80000000, 0x8, 0xbd, 0x313}, {0x3, 0xe6bf, 0x0, 0x1}, {0x2, 0x0, 0x7, 0x1000}, {0xadc3, 0xffffffff, 0x8, 0x4}, {0x29, 0x7, 0x9, 0x41e6}, {0x7f, 0xfffffeff, 0x1, 0x7}, {0xaa, 0xe8, 0x401, 0x4}, {0x6, 0x9, 0x10000, 0x5}, {0x16, 0x5, 0x1, 0x6}, {0x1, 0x7c00, 0x798, 0x3ff}, {0x7fffffff, 0x8, 0x2, 0x8b}, {0x735b, 0x8, 0x101, 0x5}, {0xae, 0xfffffffc, 0x9, 0x7}, {0x8, 0x1, 0x1, 0x1}, {0x5, 0x8, 0x3, 0x3ff}, {0xa9e, 0xea000000, 0x80000001, 0x5}, {0x2, 0x0, 0x400, 0x81}, {0x1, 0x6, 0x101, 0x3f}, {0x12d1, 0xbd6, 0xff, 0xe54}, {0x6, 0x1000, 0x2, 0x5}, {0x53, 0x9, 0x7fff, 0x7}, {0x7fff, 0x4, 0x100, 0x7fff}, {0xfffffffd, 0x0, 0x6, 0x40}, {0x6, 0x3, 0xffffff32, 0x10001}, {0x4, 0xd0, 0x0, 0xfffffff8}, {0x81, 0x7fff, 0x8, 0xfffffffc}, {0x7, 0x2, 0x40, 0x6}, {0x2, 0x0, 0x8001, 0x6}, {0x400, 0x7ff, 0xff, 0x5}, {0x5, 0x8, 0xfe4c, 0xffffff01}, {0x5, 0xfffffffa, 0x2, 0x5}, {0xb9, 0xc5, 0x1, 0x7}, {0x0, 0xcc, 0x207be12f, 0x9}, {0x0, 0x0, 0xffffef15, 0x4}, {0x5, 0x10001, 0xfff, 0x10}, {0x4, 0x10001, 0x1, 0x5}, {0x0, 0x8e, 0xfffffbff, 0x400}, {0x7ff, 0xb16e, 0x9, 0x3ff}, {0xbf5f, 0x7b, 0x1aa, 0x5}, {0x97e, 0x40, 0x6, 0x2}, {0x0, 0x7, 0x2, 0x81}, {0x90000, 0x1, 0x5216, 0x9380}, {0x9ee, 0xa0c, 0x1, 0xffffe36e}, {0xffff, 0xfffffbff, 0xffff8000, 0xffff}, {0x9, 0x4, 0x3, 0x2}, {0x0, 0x4, 0xea, 0x9}, {0x6, 0x0, 0x1ff}, {0x3, 0x401, 0x0, 0x400}, {0x2, 0x0, 0xffff, 0x5}, {0x8, 0xfffffffa, 0x2d58, 0xa50}, {0x7, 0x3, 0x7, 0x1}, {0x0, 0x4, 0x1, 0x101}, {0x2, 0x4, 0x8, 0x20}, {0x9, 0x94e, 0x20, 0x6}, {0x4, 0x200, 0x8, 0xee}, {0x3, 0xa60d93, 0x571e, 0x80000000}, {0x3, 0x101, 0x0, 0x6}, {0x1f, 0x8001, 0x6, 0x5}, {0x87b, 0x2, 0x4, 0x401}, {0x20, 0x7fffffff, 0xd66, 0xffff}, {0x400, 0x51, 0x4, 0x3f}, {0x5, 0xd4, 0x6}, {0x2, 0x3, 0x5, 0x57}, {0x4, 0x9, 0x2, 0x80000001}, {0x6, 0xff, 0x4, 0xf11}, {0x1, 0x4, 0xfffffffe}, {0x1, 0x10001, 0xdc3, 0x2}, {0x500, 0x7, 0x8, 0x364}, {0x6, 0x5, 0x0, 0x1}, {0x10c4, 0x7, 0x48b6, 0x4}, {0x9, 0xe09, 0x101, 0x401}, {0x0, 0xf7, 0x10000, 0x8}, {0x6, 0xc696, 0xfffffffa, 0x20400}, {0x3000000, 0xfff, 0x2, 0x8000}, {0x1, 0xfffffffd, 0x4, 0x5}, {0x5cd0, 0x568f, 0x0, 0x1}, {0x56, 0x10000, 0x4, 0xff}, {0x1, 0x3f, 0x5, 0x401}, {0x80000000, 0x1, 0xe79a}, {0x4, 0x7ff, 0xf0, 0x101}, {0xfffffffa, 0x1, 0x401, 0x7}]}, 0x3f39) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x11) 10:00:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x9) ioctl$TCFLSH(r2, 0x540b, 0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x6, 0x1, 0x4, 0x84, 0x5, "1efd70d49650c2da60a9fafc9bd88dd7a45f05"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) 10:00:49 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000040)={&(0x7f0000000000), 0x0, 0x7, 0x7}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002080)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000640)={r7, 0x8, 0x0, 0x1}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002080)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000640)={r8, 0x8, 0x0, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000a40)={r6, "d5ff8f34fd9e28f96fbec7cc80dd0ba9"}) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000380)={r9, 0x8d, 0x58, 0x1}) 10:00:50 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "7b4bfac4ee06c9c8eba61c1274cdaf831fd4464a8eac365474383c96de67315e26106232b73319860392a78536b4d49fa44bf404f5d1fe97ba6192da6f1ef971", 0x20}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64=r4, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:00:50 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000004080)={0x6, 0x1, 0x8, 0x9, 0x8, 0x10001, 0x6, 0x9, r3}, &(0x7f00000040c0)=0x20) write$usbip_server(r0, &(0x7f0000000140)=@ret_submit={{0x3, 0x9, 0x0, 0x0, 0x3ff}, 0x2, 0x69, 0x9, 0x3ea, 0x8, 0x0, "90fda8b3b8410cc35f99dce5667df37bd764063abbb8e366f2e484a9e86f3bd492d82e3392c6f315ffc9313376ce08e5ca39806e854417010e94083c8b857e639c87ac14de71cad541ad52a773bc89bb422f6328c49ff485526a05671e74a3d8051e1308cab0b514ce", [{0x1, 0x8, 0x1ff, 0x7}, {0x7f, 0x6a0f6c26, 0x5, 0x400}, {0x401, 0x7f, 0x0, 0x7ff}, {0x6, 0x0, 0x2, 0x5b}, {0x8000, 0x6, 0x7f, 0xfffffff7}, {0x40, 0xfffffffc, 0x101, 0xe89}, {0xb2d7, 0xff, 0x6, 0x4}, {0xd79c, 0x302, 0xffffffc0, 0x8}, {0x9, 0x425, 0x8000, 0xbeb}, {0xffff93ab, 0x6, 0x21, 0x8}, {0x9, 0x3, 0x6, 0xc23}, {0x8, 0x8, 0x8, 0x3}, {0x1, 0x7, 0x1, 0x9}, {0x101, 0x8, 0x807, 0x1}, {0x0, 0x0, 0xc0, 0x6}, {0xff, 0x3, 0x6, 0x3}, {0x1, 0x8d, 0x81, 0x3ff}, {0x10000, 0x80000001, 0x4, 0x2}, {0x7, 0x6, 0x1, 0xfffffffa}, {0x2, 0xb9, 0x1, 0x800}, {0x2, 0x80, 0x80000000, 0x8c}, {0x8, 0x92c, 0x0, 0x9a000000}, {0x7fffffff, 0xfff, 0x7ff, 0x2}, {0x400, 0x40, 0x1, 0x7a}, {0x3, 0x7, 0x0, 0x1}, {0xfffffffe, 0x7, 0x401}, {0x25c, 0x10001, 0x80000001, 0x1ff}, {0x1, 0x7, 0x80000000, 0xb5eb}, {0x5, 0x2, 0x3f, 0x7}, {0x7, 0x6, 0x1, 0x8}, {0x4d00, 0x100, 0x9, 0x6}, {0x2, 0x1000, 0x5, 0x6}, {0x401, 0x4, 0x904, 0x7fff}, {0x7ff, 0x10000, 0x4, 0x8}, {0x887, 0x7, 0x7, 0x5b}, {0x5, 0xfffffff7, 0x9}, {0xcfb, 0x3f, 0x8, 0x2}, {0x5, 0x7, 0x1ff, 0x81}, {0x6000, 0x120, 0x1, 0x100}, {0x7fffffff, 0x0, 0x5, 0x101}, {0x101, 0x7fff, 0x9, 0x4}, {0x2, 0x1, 0x7, 0x6}, {0xffffffff, 0xfffffff8, 0x4, 0x4}, {0x4, 0x8000, 0x7, 0xffffff55}, {0x3, 0xfffff65b, 0x6, 0xbb}, {0xf2cf, 0x7f, 0xffffffff, 0x3}, {0x4, 0x7, 0x2, 0x9}, {0x0, 0x8, 0x200, 0x6}, {0x1, 0x6, 0x7f, 0x40}, {0x5, 0x1f, 0x8000, 0x100}, {0x1, 0x143e}, {0x401, 0x1, 0xffffffff}, {0x7, 0x0, 0x0, 0x4}, {0xfff, 0x7, 0x5, 0x80000000}, {0x9, 0x4, 0x5}, {0x101, 0x1, 0x1, 0x8}, {0x1, 0xfff, 0x4, 0x36}, {0x6, 0x8, 0x2, 0x800}, {0x7, 0x4, 0x1f}, {0x9, 0x401, 0x8, 0x6}, {0x5, 0x1, 0x7, 0x5}, {0x6, 0x5, 0x4, 0x7f}, {0x5, 0x1ff, 0x1ff, 0x6}, {0x3, 0x5, 0x1, 0x80}, {0x2, 0x2, 0x4, 0x9649}, {0x8, 0x101, 0x4, 0x3ff}, {0xd70d, 0x7ff, 0xa1, 0xe2}, {0x6, 0x0, 0x96, 0x6}, {0x1, 0x0, 0x33, 0x7}, {0x2, 0x8, 0xfff, 0x4}, {0x2, 0x44e, 0x1, 0x800}, {0x4, 0x6, 0x4, 0x10001}, {0x1f, 0x3f00, 0x1, 0x10000}, {0x0, 0x5, 0x7ff, 0x100}, {0x3, 0x0, 0x100, 0x7}, {0x1, 0x3, 0x5, 0x81}, {0x5, 0x4, 0x10000, 0x4}, {0x8000, 0x80, 0x1, 0x9a90}, {0x3, 0x3, 0x5, 0x800}, {0x101, 0x4, 0x0, 0x87f8}, {0x0, 0x5, 0x1, 0xf841}, {0x4, 0x9, 0x5, 0x80000001}, {0x7, 0xff, 0x3}, {0x2, 0x16be, 0x5, 0x7fff}, {0x1, 0x1, 0x4, 0x8000}, {0x4e55c429, 0x1ff, 0x401, 0x3}, {0xe8, 0x1, 0x0, 0x4}, {0x2, 0x20, 0x7fff, 0x7}, {0x9, 0xffff, 0x8, 0xfffffff7}, {0x4, 0x10001, 0x8001, 0xe8}, {0x9, 0x1, 0x7, 0x3}, {0x800, 0x4, 0xff, 0x6}, {0xffffff80, 0x8000, 0x8001, 0x1}, {0x10001, 0x100, 0x40, 0xaed}, {0x50f, 0xf9cb, 0x5, 0x40000000}, {0x6f4, 0x1, 0x1, 0x5}, {0xfffffffc, 0x6b, 0x5, 0x1}, {0x4, 0x1, 0x5, 0x1ff}, {0xc1, 0x0, 0x7}, {0x7, 0x3, 0xffff8564, 0x7}, {0x2, 0x4d1a, 0xfffffffe}, {0x1ff, 0x5, 0xda, 0x6fc}, {0x9, 0x2, 0xa0000000, 0x3ff}, {0x5, 0x0, 0x2, 0x5}, {0x2, 0x3, 0x3, 0x3}, {0x0, 0x4, 0x0, 0x7}, {0x20, 0xffff0001, 0x7fffffff, 0x5}, {0x2, 0x40, 0x4, 0x7}, {0x2, 0x9, 0xff, 0x7f}, {0xc6, 0x81, 0xff, 0x9}, {0x6, 0x8, 0x800, 0x6}, {0x6, 0x7, 0xf4, 0x1}, {0x7fffffff, 0x6, 0x1, 0x6}, {0x5, 0x670f, 0x5, 0x4}, {0x1, 0x400, 0x3, 0x400}, {0xffffffff, 0x7f2aaf3f, 0x800, 0x3}, {0x7, 0x40c, 0x80, 0x80}, {0x1, 0x8, 0x1f, 0x9}, {0x9bd3, 0x3ff, 0xfff, 0x80000000}, {0x67a, 0x14031521, 0x0, 0xd9ae138}, {0xce4, 0x4, 0x0, 0x3}, {0x200, 0xffffffff, 0x9, 0x1}, {0xfffffffc, 0x8, 0xd0, 0x4c364654}, {0x80000001, 0x4, 0x5, 0x7}, {0x6, 0x2, 0xfffffff9, 0x7}, {0xffff4301, 0x3e5, 0x6, 0x6}, {0x121f, 0x1, 0x10000, 0x80000001}, {0x8, 0x2, 0x1000, 0x6}, {0x7fff, 0x8, 0x401, 0x1}, {0x80, 0x2, 0x200, 0x9}, {0x6712897b, 0xfffffffd, 0x2, 0x3f}, {0x0, 0xfffffc00, 0x5498, 0x7}, {0xe139, 0x3, 0x3}, {0xfff, 0x3f, 0x1ff, 0x3}, {0x1, 0x9, 0x9, 0xfffffff9}, {0x4, 0x2, 0x8001, 0x8}, {0x9, 0x351d, 0x0, 0x2}, {0x963f, 0x1000, 0x7, 0x2db}, {0x800, 0x90000000, 0x7, 0x8}, {0x8001, 0x8, 0xffff0b22, 0x6}, {0x4, 0xfffffffd, 0x88eb, 0x51eb}, {0x8, 0x155, 0x0, 0x425d}, {0x9, 0x2, 0x9, 0x80000001}, {0x9, 0xf6, 0x0, 0xaf}, {0x1, 0x55d, 0x8, 0x5}, {0x40, 0x1, 0x5, 0xfffffffd}, {0x3, 0x47b, 0x2, 0x8001}, {0x5, 0x8af, 0xffffff81, 0x5}, {0x2, 0x9, 0x200, 0xb9b7}, {0x2, 0x401, 0x81, 0x2}, {0x7, 0x1, 0x9}, {0x3, 0x7, 0x2, 0x1}, {0x9, 0x8, 0x7, 0x6}, {0x6, 0x25, 0x9, 0x4}, {0x1, 0x5, 0x4}, {0x2, 0xffff, 0x6, 0x2}, {0x7fffffff, 0x0, 0x10000, 0x1f4c}, {0x36, 0x0, 0x5, 0x3}, {0xe3, 0x40, 0x7, 0x8001}, {0xfff, 0x1d4, 0xa6a8, 0xfffffffa}, {0x1c, 0x5}, {0x7, 0x1, 0x48, 0x9}, {0x8, 0x6225, 0x4, 0x8}, {0x4, 0x3f, 0xb0, 0x7}, {0xff, 0x8, 0xb, 0x5}, {0xfcf0, 0x4, 0xfffffffc, 0x7}, {0x7ff, 0x1, 0x3, 0x1}, {0x1, 0x7f, 0x3, 0x3ff}, {0x4, 0x3, 0x8, 0x4}, {0x6, 0x1, 0x5}, {0x6, 0x8, 0x8e, 0x4}, {0x14c4, 0x1ff800, 0x7, 0x3ff}, {0x80000001, 0x500000, 0x6, 0x80}, {0x9, 0xfd, 0x8, 0x401}, {0xff, 0x6, 0x2, 0x3}, {0x2, 0x8, 0x1c}, {0x6, 0x5, 0x7, 0x8}, {0x101, 0x36, 0x8, 0x1}, {0x5, 0x4, 0x20, 0x10001}, {0x1, 0x87, 0xc98, 0x3}, {0x10000, 0x3f, 0x2, 0x400}, {0x5, 0x4, 0x4, 0x433}, {0x8, 0x5, 0x4, 0x3}, {0x7d3, 0x7, 0xfd, 0xf9fa}, {0x0, 0x18, 0x5, 0x6}, {0x3, 0x800, 0x4, 0x1f}, {0x9, 0x9, 0x8f, 0x800}, {0x101, 0x9, 0x1, 0x5}, {0x401, 0xfffff8ab, 0x9, 0x6}, {0x1, 0x400, 0x7f, 0x80000000}, {0x7f, 0x7, 0x20, 0x8}, {0x9, 0x7, 0x2, 0x2}, {0x751a, 0xe08, 0x101, 0x9}, {0x1d, 0xd9af, 0x101, 0xffff}, {0x3, 0x3f, 0x8, 0x7f}, {0x80000000, 0x800, 0x800, 0x2}, {0x100, 0x10, 0x6, 0x81}, {0xfffffffe, 0x8, 0xfff, 0x80000000}, {0xffff5a94, 0x3f, 0x54845ccd, 0x3}, {0xd90, 0x83, 0x8, 0x3}, {0x6, 0x6, 0x3, 0x5}, {0x4, 0x11b, 0x5, 0x7f}, {0x36, 0x4, 0x0, 0x7fffffff}, {0x9, 0x401, 0x1, 0x5}, {0x57516ec, 0x0, 0x0, 0x6}, {0x3, 0x10001, 0x5, 0x10001}, {0xcc, 0x6a5d, 0xff, 0x7}, {0x9ec, 0x8, 0x6381, 0x8001}, {0x6, 0x0, 0x6, 0x801b}, {0x6, 0xfffffeff, 0x8, 0x7}, {0xfffffff9, 0x7, 0x4, 0x7f}, {0x10001, 0x2, 0x400, 0x8}, {0x3, 0x40, 0x3, 0x200}, {0x5, 0x3f8dcadb, 0x9, 0x20}, {0x9, 0x8, 0x0, 0x10000}, {0x5a, 0x80, 0x3, 0x4}, {0x0, 0xfffffffc, 0x3, 0x8}, {0x2, 0x24, 0x9, 0x4}, {0x5, 0x8000, 0xffffffff, 0x1}, {0xfff, 0x1, 0xf66}, {0x1f, 0x7, 0x1000000, 0x4}, {0x12a, 0x6, 0xff, 0x6}, {0x1, 0x1, 0x1, 0x7}, {0x8c05, 0x6, 0x4f, 0x20}, {0x200, 0x10000, 0xef9, 0x2}, {0x200, 0x9, 0x5, 0x20}, {0x7ff, 0x101, 0x8, 0xfffffff9}, {0x1, 0x4, 0x4, 0x5}, {0x2271, 0x8, 0x3, 0x3}, {0x9, 0x1, 0x7a, 0x3}, {0x4, 0x2, 0x6f0, 0x25f9}, {0xfffffffc, 0x8001, 0x5d8, 0x7}, {0x1, 0xf0000000, 0x80000000, 0x3}, {0x4, 0x3, 0xffff, 0x2}, {0x8, 0x7, 0x1f, 0x1}, {0x200, 0x9, 0x7fff, 0x400}, {0x1f, 0x860, 0xfffff2f5, 0x8}, {0x2, 0xb0f, 0x3ff, 0x4}, {0x800, 0x400, 0x9, 0xb7df}, {0x3423, 0x5, 0x10001, 0x6}, {0x1ff, 0x1f, 0x7, 0xc92b}, {0xeff9, 0x8735, 0x200, 0x10b}, {0x19b56a8e, 0x3, 0x9, 0xfffffff9}, {0x2, 0x8, 0x6, 0x8001}, {0x80, 0x309c, 0x6, 0xff}, {0x3, 0x2, 0x1f, 0x9}, {0x3ff, 0x1000, 0x3, 0x8}, {0x10001, 0x7, 0x8, 0x1000}, {0x3d, 0xffffffff, 0x1ff}, {0xa88, 0x44, 0x8cf1, 0x51}, {0x3, 0x9, 0x9, 0x4}, {0x1, 0xffffffff, 0x2, 0x5}, {0x1, 0x4, 0x0, 0x5}, {0x81, 0xf905, 0x3, 0x8001}, {0xffff, 0x0, 0x3, 0x1f}, {0xfffff001, 0x0, 0xbe, 0x80}, {0x80000000, 0x2, 0xffff, 0x8001}, {0x1, 0x40, 0x3, 0x6}, {0x1, 0x40, 0x1000, 0x1a4}, {0x2, 0x5fe, 0x400, 0x7}, {0x60c3, 0x0, 0x8}, {0x6, 0xffffffff, 0x20, 0x6}, {0x3f, 0x2, 0xffffffe1, 0x8}, {0x5, 0xffffffa4, 0xfcf, 0x245e}, {0x7, 0x5, 0x8000, 0x591ae71f}, {0x7ff, 0x825b, 0x1, 0x2}, {0x1, 0x800, 0x100, 0x80000000}, {0x2, 0x5, 0x6}, {0x1000, 0x292, 0x8001, 0x4}, {0x40, 0x5, 0x5}, {0x0, 0x1, 0xfff, 0x458}, {0x200, 0x1, 0x4, 0x7}, {0x0, 0x8, 0x6, 0x1000}, {0x2, 0x7, 0x4a11dee3, 0x8001}, {0x10001, 0x1ff, 0x1, 0x200}, {0x8000, 0xffffffff, 0x9, 0x2}, {0x4, 0x80000000, 0x6, 0xff}, {0x8, 0x37, 0x8, 0x7}, {0x0, 0x5, 0x40, 0xd6d}, {0x4, 0x3ff, 0x71bd2e95, 0x3}, {0x9, 0x7fff, 0x1}, {0x200, 0x400, 0xfffeffff, 0xfffffffc}, {0xffff, 0x7fffffff, 0x9, 0xa435}, {0x6, 0x80, 0x6, 0x7f}, {0x8f9f, 0x9, 0x100, 0x101}, {0x5, 0x1f, 0x5da, 0x5}, {0x8000, 0x6, 0x7, 0xbf}, {0x6, 0xcdc3, 0x3}, {0xf94, 0x4, 0x80000001, 0xfffffffa}, {0x7, 0x3, 0x80000001, 0x7f}, {0x0, 0x5, 0x221b, 0xafff}, {0x7, 0x87, 0x6, 0x401}, {0x6, 0xffffffff, 0x7, 0xfffeffff}, {0x2, 0x1, 0x40, 0x40}, {0x4000000, 0xecc9, 0x7, 0xfff}, {0xffffffff, 0x4, 0x7, 0x87}, {0x0, 0x7, 0x5, 0x5}, {0x40, 0xb0d9, 0x7df, 0x24a7}, {0x62, 0x81, 0x3f, 0x80}, {0x80, 0x9, 0x2, 0x3}, {0x50d5228c, 0x19, 0x8, 0xeb}, {0x6, 0x400, 0xb46b, 0x40}, {0x2, 0x2, 0x0, 0x5}, {0x9, 0x65, 0x2, 0x80}, {0x4c, 0x7, 0x2, 0x1}, {0x5, 0x3490, 0x0, 0x3ff}, {0x9, 0x0, 0x9e}, {0x4d34, 0xffffffc0, 0x2, 0x4}, {0x80000001}, {0x1ff, 0x9, 0x2, 0x4}, {0x3f, 0x6, 0x6, 0x81}, {0x7, 0x2c, 0x5, 0x9}, {0x8bcf, 0x100, 0x7335a61d, 0x1f}, {0x400, 0x5, 0x5, 0xf409}, {0xa34, 0x5, 0xc8, 0x1}, {0x4, 0xfffffff7, 0x7, 0x1f}, {0x3, 0x9, 0x200, 0x2}, {0x6, 0x8b6, 0x6, 0x1}, {0x0, 0x9, 0x1, 0xff}, {0x5, 0x4, 0x3ea, 0x430}, {0x8, 0x800, 0x8, 0x9}, {0x4, 0xc636, 0x1, 0x7ff00}, {0xfffffffc, 0x80000000, 0x174, 0x1000}, {0x1, 0xc1c1, 0x2fa, 0x1}, {0x6, 0x400, 0x5, 0xffffffc1}, {0x8e19, 0x71, 0x1, 0x2cf}, {0x100000, 0x7, 0x0, 0x9}, {0xcbb3, 0x80, 0x7fffffff, 0x4}, {0x80, 0x1, 0x0, 0x98}, {0x4, 0x46c3, 0x8, 0x7}, {0x7, 0x40, 0xee}, {0x1, 0x2, 0x1, 0x7fffffff}, {0x0, 0x9, 0x7, 0xff}, {0xffffffa7, 0xfffffff9, 0x7fff, 0x3ff}, {0x100, 0x3, 0x3, 0x9}, {0x7ff, 0x6, 0x2, 0x3ff}, {0x101, 0x8, 0x3, 0x5}, {0x4, 0x0, 0x10001, 0x7}, {0x6, 0xc640, 0x81, 0x1}, {0xffffff81, 0x0, 0x8, 0x6}, {0x81, 0x8, 0xfffffffe, 0x3}, {0x9, 0x7, 0x81, 0x6}, {0x3, 0x1f, 0x2, 0x5230}, {0x9, 0x6, 0x1, 0x2}, {0x5, 0x10000, 0xffffffff, 0x5}, {0xfff, 0x8, 0x3, 0x1}, {0xfffffeff, 0x6, 0x100, 0x3}, {0x3ff, 0x0, 0x7, 0x8000}, {0x7fffffff, 0xffffa87e, 0xfff, 0x8}, {0x5, 0x9, 0x3ff}, {0x0, 0x18, 0x5d7, 0x4}, {0x200, 0x1, 0x0, 0x7}, {0x401, 0x5, 0x40, 0xfcc}, {0xaf, 0x3, 0x3, 0x7}, {0x100, 0x9, 0x4, 0x9}, {0x7, 0x6, 0x0, 0x3}, {0x1, 0x166f, 0x1, 0x400}, {0x6, 0x5, 0x3, 0x20}, {0x3, 0x707b, 0x81, 0xfffffff8}, {0x4, 0x0, 0x9, 0x80000000}, {0xffffd588, 0x3, 0x1, 0x1}, {0x3, 0x7ff, 0xcce, 0x10}, {0x7, 0x7, 0x80000001, 0x31}, {0x8001, 0x5000, 0x1, 0x401}, {0x0, 0x7, 0x1, 0x5}, {0x3, 0x4, 0x8}, {0x2, 0x3, 0x14d4, 0x57}, {0x100, 0x1, 0x80, 0xffff}, {0x58, 0x6, 0x1}, {0x6, 0x6, 0x20, 0x8}, {0xaa6, 0x2, 0xd84, 0xf858}, {0x2240, 0x6, 0x9, 0x1}, {0x6, 0x0, 0x4, 0x2}, {0x9, 0x8001, 0xfffffffb}, {0x2ca8, 0x7, 0x1, 0x3}, {0x0, 0xfff, 0x81}, {0x7fffffff, 0x0, 0x8000, 0x7}, {0x0, 0x0, 0x3, 0xfff}, {0x80000001, 0x6, 0xc9f, 0x1570}, {0x10000, 0x100, 0x800}, {0x3, 0x2, 0x7000000, 0x46a}, {0xfff, 0x9, 0x400, 0x9}, {0x3, 0xffffaa63, 0x0, 0x6c}, {0x1f, 0x7, 0x3c05, 0x4}, {0x5, 0x72a6, 0x0, 0x3}, {0x8, 0x1ff, 0xdde, 0xaa000000}, {0x6, 0xffffffff, 0x5, 0x7}, {0x8000, 0x800, 0x3, 0x55}, {0x5, 0xe9b7, 0xff, 0x2}, {0xffffffff, 0xffffffff, 0x40, 0x1}, {0xf38b, 0x527, 0x1ee, 0x40}, {0x9, 0xfff, 0x2, 0x5}, {0x1, 0xfffffffe, 0x3, 0x3f}, {0x7, 0x40, 0xe0b5, 0x4}, {0x7, 0x0, 0x20, 0xff85}, {0x1, 0x8, 0x5}, {0x8, 0x0, 0x80000001, 0x81}, {0x40, 0x19d, 0x8, 0x1}, {0x5, 0xfffffffe, 0x0, 0x1e0}, {0x401, 0x80000000, 0xfff, 0x8}, {0x5, 0x8, 0x6, 0x1}, {0x401, 0x0, 0x7, 0x10001}, {0x2, 0x5611, 0xef, 0x12e}, {0x100, 0xfffffe7c, 0x2, 0x35a3}, {0x20, 0x2, 0x10001, 0x3}, {0x1, 0x3, 0xb26, 0x2}, {0x3ff, 0x8000, 0x5, 0x5}, {0xfffffffa, 0x80, 0x0, 0x8000}, {0x80000001, 0x2, 0x10001, 0x4}, {0x401, 0x7ff, 0xffff7fff, 0x1}, {0x7, 0x5, 0x0, 0x8001}, {0x80, 0x3, 0x12, 0x7}, {0x3113, 0x1, 0x1000, 0x1}, {0x0, 0xffffff06, 0x3a, 0xc}, {0x2, 0x1, 0x4, 0x8}, {0x6, 0x1, 0x7fffffff}, {0x4, 0xffff, 0xffffffff, 0x3f}, {0x5, 0xad, 0x10000, 0x2}, {0x400, 0x6, 0x8, 0x2}, {0x200, 0x5, 0x5, 0x6}, {0x200, 0x35d, 0x7ff, 0x7}, {0x401, 0x1, 0x3, 0x1}, {0x2, 0x10001, 0x8001, 0x9}, {0x89, 0x200, 0x7ff, 0x200}, {0x0, 0x0, 0x401, 0x8768}, {0xfffffff9, 0x2, 0xfffffc01, 0x5}, {0x1000, 0x8, 0xffffff01, 0x6}, {0x7, 0xfcdf, 0xfffff7bf, 0x1ff}, {0x5, 0x966, 0x8, 0x2db2}, {0x8, 0x5, 0x0, 0x733}, {0x6, 0x29, 0x1, 0x80000000}, {0xfffffffa, 0x3af2, 0x8, 0x7}, {0x8001, 0x54, 0x6, 0x2}, {0x3, 0x5, 0x5, 0x1}, {0x4, 0x401, 0x1c3, 0x5}, {0xff, 0x1000, 0xd4d, 0x5}, {0x9, 0x1, 0x200, 0x9}, {0x8000, 0x2, 0xa1c6, 0x7}, {0x7, 0x7, 0x9, 0x4}, {0x9, 0x0, 0x1, 0x966}, {0x9, 0x80000000, 0x8, 0x1}, {0x8, 0x101, 0x5, 0x3}, {0x3, 0x1, 0xba, 0x80000001}, {0x1, 0x8a97, 0x8, 0x8}, {0x6, 0x2, 0xd1, 0x7}, {0x177, 0xffffffff, 0x9, 0x3ff}, {0x10001, 0x1, 0x7f, 0x9}, {0xfff, 0x9, 0x80000001, 0x5}, {0x1, 0x2, 0x1, 0x9}, {0x7ff, 0x9c, 0x10000, 0x80000001}, {0x1, 0xb8, 0x9, 0x4}, {0x9, 0xef, 0x100, 0x4}, {0x81, 0x7fffffff, 0x6, 0x7}, {0x6, 0x1, 0x5b, 0x6}, {0x1, 0x3, 0x0, 0x3}, {0x0, 0x1, 0x200, 0x7}, {0xdf4, 0x9, 0x3ff, 0x80000000}, {0x673, 0x10001, 0xb5, 0x2}, {0x5, 0x8, 0x6, 0x9}, {0x8, 0xfffffff9, 0x6, 0x7}, {0x80, 0x871, 0xd03, 0x800}, {0xec, 0x2, 0x1, 0x80}, {0x9, 0x8, 0x3, 0x6}, {0x4, 0x3f, 0x8000, 0xc000000}, {0x2, 0x1}, {0x9e6, 0x2000000, 0x9, 0xd6}, {0x1, 0x4, 0x3f, 0x8}, {0x4, 0x80000001, 0x80000000, 0x7}, {0x3, 0x3, 0xfffff800, 0xb8c1}, {0xba3e, 0x7, 0x5, 0xa0000}, {0x592a, 0x10000, 0x4e, 0xffff}, {0x8001, 0x4ef, 0x5, 0x4}, {0x0, 0x9, 0xfffffd4b, 0x6}, {0x0, 0x3, 0x80, 0x400}, {0x5, 0xd77, 0x10001, 0x4}, {0x40, 0x5, 0x3ff, 0x101}, {0x1, 0x19d, 0x39db, 0x9}, {0xffffffe1, 0x4, 0x8, 0x1}, {0x7, 0x8, 0x0, 0x6}, {0x563bda2e, 0x1, 0x4, 0xb3}, {0x1ff, 0xfffff001, 0x4cc9, 0x4}, {0x10001, 0x32e, 0x5, 0x101}, {0x6, 0x6, 0x81, 0x1f}, {0x911, 0xffffffff, 0xffffff1a, 0x8000}, {0x2, 0x7ff8, 0x20, 0x4}, {0xff, 0x0, 0xf4, 0x800}, {0x1, 0x101, 0xfffff0a2, 0x2}, {0x5, 0xef9, 0x3}, {0x45c, 0x7, 0x449e6862, 0x3f}, {0x5, 0x40, 0x1, 0xc714}, {0x4, 0x2ed2, 0x3, 0x400}, {0xb1ea, 0xf6f, 0x101, 0x8}, {0xc11c, 0xf, 0x7fffffff}, {0x9, 0x2, 0xffff, 0x5}, {0x3, 0xf1b, 0xf802, 0x9}, {0x200000, 0x3, 0x7fffffff, 0xa4cb}, {0xffffffe1, 0x7fffffff, 0x8, 0xa9fc}, {0x80000000, 0xa2e2, 0x65f, 0x5}, {0x4, 0xd, 0x5, 0x1}, {0x1f, 0x1f, 0x1, 0x7}, {0x3ff, 0x6, 0x9, 0x8}, {0x8e0, 0xfffffff9, 0x2, 0x4}, {0x7, 0x8, 0x1ff, 0x2}, {0x10001, 0x5, 0x100, 0xfff}, {0x4, 0x10000, 0xffffffff, 0x2}, {0x1, 0x6, 0xe4, 0x2}, {0x3, 0x7, 0x8000}, {0x9, 0x9, 0x10000, 0xae42}, {0x9, 0x3, 0xa54, 0x17a}, {0x1, 0x401, 0x6, 0x4}, {0x80, 0x1000, 0xff, 0xd7}, {0x7f, 0x9, 0x4145, 0x3}, {0x7, 0x4, 0xd3, 0x1ff}, {0x8001, 0x7, 0x8000}, {0xffffffff, 0x800, 0x7}, {0x9, 0x40, 0x100, 0x4}, {0xe0, 0x0, 0x1, 0x4}, {0xffff, 0x6, 0x7, 0x9}, {0x3ff, 0x0, 0x4, 0xff91}, {0x0, 0x7fffffff, 0x3f, 0xd7}, {0xc4d5, 0x5, 0x1ff, 0x20}, {0x8, 0x5, 0x0, 0x8000}, {0x1, 0x1000, 0x3, 0x8}, {0x100, 0xfffffff7, 0x3ff, 0x7}, {0x5, 0x14cd, 0x400, 0x1000}, {0x1, 0x1, 0x65, 0x6}, {0xfffffff7, 0x3ff, 0x7fffffff, 0x3}, {0x3, 0x4, 0x1, 0x3b56}, {0x80000001, 0x5, 0x80000001, 0xdc}, {0x8, 0x4a67, 0x8, 0x5}, {0x7, 0x6, 0x64, 0x18b}, {0x5, 0x80000001, 0x7fff, 0x4}, {0x43be2b66, 0xffffffff, 0x2, 0x9}, {0x0, 0xffff, 0x3, 0x4}, {0x9, 0x0, 0x81, 0x3}, {0x8, 0x9, 0x401, 0x8}, {0x9, 0x4, 0x0, 0x8}, {0x4, 0x0, 0x1, 0x7}, {0x3, 0x3, 0xffff, 0x3}, {0x6, 0x10000, 0x2b1, 0x7}, {0x9, 0x7, 0x1, 0x7ff}, {0x4, 0xffff, 0x9, 0x80000000}, {0x3, 0x7, 0xffff, 0x78}, {0x101, 0x401, 0x21cd3789, 0x8}, {0xfffffffb, 0x7, 0x1}, {0x400, 0x80000000, 0x1000, 0x9}, {0xfff, 0x9, 0x401, 0x80}, {0x80, 0x0, 0xba, 0x8}, {0xc31, 0x401, 0x360e, 0x3}, {0x8, 0x7fff, 0x100, 0x5}, {0x1, 0x2, 0x10000, 0x2ef1}, {0x2bbf, 0x5, 0x2, 0xfffffffa}, {0x80000001, 0x3, 0x6, 0xfff}, {0x8460, 0xfff, 0x1, 0x401}, {0x1000, 0x6, 0x6, 0xfffffe00}, {0x80000000, 0x6, 0x6, 0x7fff}, {0x1, 0x7, 0x2, 0x1}, {0x5e, 0x7, 0x20, 0x2}, {0xfffffff8, 0x2431ec80, 0x7ff, 0x6}, {0xffff, 0x6, 0x8}, {0x25, 0x0, 0x8, 0x9}, {0x100, 0xea0, 0x7fff, 0x2}, {0xa18, 0xff, 0x1, 0x3ff}, {0x9, 0x7fff, 0x8, 0x1}, {0x80000001, 0x0, 0x0, 0xffffff81}, {0x1, 0x12, 0x6, 0x7}, {0x9, 0x20, 0x40, 0x5}, {0x0, 0x7, 0x8, 0x1}, {0xdf, 0x4, 0x7fff, 0x1}, {0x5, 0x5c5d, 0x1f, 0x8}, {0x81, 0x9, 0x3, 0x3}, {0xfb, 0x35fb4ec8, 0x4, 0xffffffff}, {0x5, 0x9, 0x7fff, 0xfffffffd}, {0x7, 0x4, 0x2, 0x1f}, {0xfff, 0x80000001, 0x1, 0x9}, {0x1, 0x6, 0x3, 0x8}, {0x7, 0x2, 0xff, 0x4}, {0xffff, 0x6, 0x8}, {0x0, 0x2, 0x5, 0x40}, {0xfffff4e3, 0x4, 0x4, 0x62031d19}, {0x8001, 0x8, 0x6, 0x3}, {0x9, 0xffffff80, 0x2, 0x6}, {0x6, 0x1ff, 0x8001, 0x1e}, {0x0, 0x7, 0x0, 0x7ff}, {0xcbb, 0x6, 0x54, 0xf193}, {0x1, 0x6, 0x101, 0x4}, {0x2, 0x4, 0x30, 0x80000000}, {0x6, 0x7ff, 0x9, 0x7f}, {0x2, 0x3, 0x4, 0x1f}, {0x8, 0x1, 0x1f, 0x40}, {0xfffffffe, 0x1, 0xfffffdf3, 0xdc9}, {0x4, 0xffff, 0x4, 0x2}, {0x2, 0x8, 0x8001, 0xffffffff}, {0x7, 0x8, 0xa5}, {0xfffffff8, 0x0, 0x1, 0x800}, {0x1, 0xce96, 0x5, 0x1ff}, {0x8, 0x6, 0x100, 0xffffffff}, {0xe90f, 0x261f736a, 0x5, 0x12c7}, {0xdf, 0x4, 0x7, 0x101}, {0x9, 0x3c, 0x4, 0x5}, {0x81, 0x3, 0x6, 0x6}, {0x5, 0x1ff, 0x6, 0x8}, {0x100, 0x401, 0xc31}, {0x1, 0x1, 0x20, 0x8}, {0x6, 0xbb, 0x14000000, 0xffff}, {0x9, 0x80, 0x2, 0x7fffffff}, {0x80000001, 0x1, 0x4, 0x8}, {0x36, 0xfff, 0x3ff, 0x7ff}, {0x1, 0x7f, 0x2, 0x5}, {0x6, 0x5, 0xe, 0xfffffffc}, {0xffffffff, 0x80000001, 0x8, 0x9}, {0x1, 0x1000, 0x4, 0x1ff}, {0xebf, 0x3, 0x7, 0xc51}, {0x6, 0x401, 0x6, 0x20}, {0x0, 0x6, 0x3, 0x4}, {0x40, 0x3, 0xffff5c78, 0x40}, {0x2, 0x9, 0x81, 0x8}, {0x7, 0x9, 0x0, 0x4}, {0xb4d5, 0x7, 0x1000, 0x1}, {0x8, 0x22, 0x7, 0x7}, {0xffffffff, 0xfffffffa, 0x3ff, 0x2}, {0x400, 0x8000, 0x7fff, 0xfffffff9}, {0x200, 0xff, 0x7fffffff, 0x7}, {0x0, 0x8000, 0x2}, {0x7f, 0x3, 0xed, 0x5}, {0x3f, 0x8000, 0xa3, 0x8}, {0x6, 0x0, 0x7fffffff, 0x3f}, {0xffffffc0, 0x2, 0x9, 0x7}, {0xfffffc01, 0x3, 0xfffffffa, 0x3}, {0x240, 0x400, 0x401, 0x5fed}, {0x274, 0x0, 0xffffffc0, 0x10}, {0x8, 0xfffff800, 0x700000, 0x5}, {0x5, 0xb, 0x800, 0x9}, {0x1, 0x10001, 0x5, 0x1}, {0x3f, 0x7, 0x8000, 0x3}, {0x4, 0x100, 0x0, 0x4}, {0x3f, 0x7, 0x7ff, 0x10001}, {0x1, 0xcf2, 0x7, 0x67d}, {0x11, 0x8001, 0x81, 0x20}, {0x40, 0x8, 0x20, 0x81}, {0x22, 0x3ff, 0xe99, 0x3}, {0x80, 0x6, 0x7, 0x4}, {0x5c4d, 0x0, 0x0, 0x3}, {0x4, 0x3, 0x7b07, 0x5a}, {0x6, 0x7eb, 0x7, 0x80000000}, {0x0, 0x8001, 0x622, 0x7fffffff}, {0x8, 0x4, 0x40, 0x9}, {0x200, 0x1, 0x100, 0x682}, {0xfff, 0xfffffff8, 0x7fff, 0x3}, {0xff, 0x8000, 0x8, 0x1ff}, {0x1, 0xf94, 0xbad2, 0xfffffbff}, {0x400, 0x81, 0x1b82, 0xfffffffe}, {0x5, 0x200000, 0x4, 0x129}, {0x2, 0x7, 0x9, 0x6}, {0x0, 0x7, 0x6, 0x3}, {0x8, 0x101, 0x4, 0x5a}, {0x90000, 0xfff, 0x3, 0x800}, {0x1011, 0x101, 0x7, 0x7}, {0x2, 0x1f, 0x2, 0x2}, {0x3, 0x7fffffff, 0x371, 0x1ff}, {0x3, 0x1, 0xfd9, 0x329}, {0x20, 0x7, 0x0, 0x9}, {0x7, 0x387, 0x16f, 0xa49}, {0x67, 0x7acc, 0x3, 0x80}, {0x4, 0xfff, 0xff, 0x2e}, {0x0, 0x69, 0x2, 0x4}, {0x2b, 0x10000, 0x20, 0x5}, {0x4, 0xb5, 0x79a, 0x1}, {0x5, 0x3, 0x3, 0xec}, {0x0, 0x8, 0x200, 0xffff}, {0xfffffffb, 0x6, 0x1, 0x7}, {0x3, 0x2, 0x400, 0x8}, {0x5, 0x3ff, 0x81, 0x3}, {0x3, 0x8001, 0x40, 0x7ff}, {0x5, 0xda0, 0x9, 0x3a9}, {0x6, 0x1, 0x4, 0x7}, {0x80, 0x800, 0x6, 0x8001}, {0x1f, 0xfffeffff, 0x4, 0x1}, {0x3fe, 0x8, 0x1, 0x913adec}, {0x9, 0x8, 0x9, 0x401}, {0x28, 0xffff6369, 0x401, 0xe00000}, {0x8, 0x4, 0x40, 0xe4}, {0xfff, 0xaf6, 0x3, 0x2}, {0x10000, 0xffffff80, 0x1, 0x1}, {0x6, 0x401, 0x4, 0x9cd}, {0x7, 0x1000, 0x2, 0x3}, {0x6, 0x6, 0x7, 0x2}, {0x0, 0x7, 0x1, 0x1}, {0x3, 0x6, 0xed2, 0x100}, {0x1, 0x6, 0x2, 0x6}, {0x2, 0x101, 0xbd, 0x81}, {0x8, 0x3, 0x6, 0x8}, {0x1, 0x2, 0x24f, 0x1}, {0x7, 0xfc000000, 0x7, 0xfffffeff}, {0xff, 0x823, 0x6, 0x9}, {0x100, 0x9, 0x139, 0xfffff800}, {0x7, 0x9, 0xffff7c93, 0x4}, {0x9, 0xb587, 0x2, 0x6}, {0x70fd, 0x4, 0x1, 0xdae}, {0x7fffffff, 0x6, 0x4, 0x7}, {0x7, 0x1, 0xf69, 0x401}, {0x4, 0x3, 0x4, 0x80}, {0x3, 0x7, 0x20, 0xbc}, {0x1000, 0x840, 0x2, 0x2}, {0xffff78e0, 0xf6, 0x4, 0x1}, {0x4, 0x0, 0x100}, {0xab, 0x40, 0xd6ee, 0x9}, {0x7, 0x7f, 0x80, 0x21}, {0x1, 0x200000, 0x5}, {0xac, 0x2, 0x2, 0x7}, {0x10001, 0x1, 0x1c, 0x8c76}, {0x6, 0x0, 0x6, 0x7}, {0x8001, 0x401, 0x6, 0xffffff13}, {0x6, 0x400, 0x8, 0xffffffff}, {0x5, 0x10001, 0x6c2d, 0x8123}, {0x800, 0x3ff, 0xa1, 0x7}, {0x101, 0x3, 0x8000, 0x7}, {0x1f, 0x0, 0x41, 0x8}, {0x8, 0x6, 0x100, 0x5}, {0x0, 0x1, 0x36e3, 0x7}, {0xff, 0xfffffff8, 0x2224, 0x3f}, {0x7, 0x8, 0x1, 0x20}, {0x0, 0x64a, 0x2, 0x4}, {0x20, 0x6, 0xd835}, {0x2, 0x6, 0xea, 0x1}, {0x6, 0x9, 0x6, 0x1}, {0x1, 0x800}, {0x800, 0x0, 0x6, 0x1}, {0x7, 0x5, 0x3, 0xef}, {0x3, 0xfffffff7, 0xffffffff, 0x9}, {0xf8c, 0x4ac, 0x7ff, 0x9}, {0x5, 0x343e2fd5, 0x6d, 0x80000000}, {0x3f, 0x1, 0x5, 0x81}, {0x3, 0x9, 0x7, 0x5}, {0xffff7fff, 0x0, 0xff}, {0x800, 0x10001, 0xc2, 0x10001}, {0x10001, 0x4, 0x8, 0x80}, {0x14, 0x8, 0xa443, 0xffffff01}, {0x100, 0x101, 0x9a4, 0x1}, {0x200, 0x80, 0x7, 0x67ca18ba}, {0x3480, 0x40, 0x7, 0x1}, {0x9cd00000, 0x101, 0x0, 0x6}, {0x6, 0xedf, 0x20400000, 0x9}, {0x88b, 0xcff, 0x7, 0x3}, {0x2, 0x400, 0x2, 0x826}, {0x8, 0x9, 0x80, 0x1}, {0x8000, 0x0, 0x68ee, 0x1f}, {0x9, 0x15, 0x2, 0xe8c}, {0x4, 0x8, 0x2, 0xfffff024}, {0x6, 0x0, 0xfa, 0x3}, {0xff, 0x80000000, 0xe78, 0x3f}, {0x6, 0x2, 0x4, 0x1}, {0x9, 0x7, 0xe4c, 0x1}, {0x5, 0x139, 0xa71c, 0x7d}, {0x1, 0x9, 0x7a2, 0x1}, {0x5, 0x10001, 0x7, 0x4}, {0x9, 0x2, 0x0, 0x20}, {0xffffffff, 0x5, 0xfffffffa, 0x125a}, {0xffffffff, 0x7fffffff, 0x5e2, 0x6}, {0x72c, 0x4, 0x101, 0xa9b}, {0x6, 0x56, 0x7, 0x6}, {0xfffffffb, 0xff, 0x5, 0x636d}, {0xfffffffc, 0x8, 0x9, 0x9}, {0x5, 0x5, 0x5, 0x7}, {0x80000001, 0x3, 0x400, 0xa}, {0x8, 0x0, 0x3, 0x4}, {0x9, 0xff, 0x37, 0x5}, {0x3, 0x5, 0x2, 0x7}, {0x8, 0x5, 0x46, 0x20}, {0x3, 0x0, 0x1, 0x8f3}, {0x5, 0x1, 0x7f, 0x66800000}, {0x1, 0x1, 0x214, 0x7ff}, {0x20, 0x1, 0x5, 0x8}, {0xffffffc0, 0x2, 0x2, 0x1e47}, {0x2, 0x2, 0x0, 0x4}, {0x8, 0x7ff, 0x7, 0x100}, {0x80, 0x5, 0x3, 0x1}, {0x6, 0x1f, 0x3, 0x5}, {0x0, 0x114c, 0xfffffff8}, {0x3ff, 0x3, 0x4, 0x80}, {0x1, 0x6, 0xff, 0x800}, {0x0, 0x0, 0x0, 0x1}, {0x5, 0x2, 0x0, 0x2a37}, {0x7fffffff, 0x3f, 0x70, 0x71}, {0x6, 0x0, 0x7, 0x7}, {0x7, 0x1, 0x80000000, 0x3}, {0x0, 0x3, 0x6, 0x6}, {0x272, 0x999b, 0x8, 0x3}, {0x7, 0xfffffffa, 0x2, 0xffff7fff}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1c, 0x7, 0x4e}, {0x7, 0x1, 0x34e9, 0x10001}, {0x80000, 0x1000, 0x5, 0x80000000}, {0x899, 0x3, 0x1, 0x8000}, {0x2, 0x5, 0xffff, 0x3}, {0x1c, 0x400, 0x8, 0x5}, {0x5, 0x8000, 0x8, 0x3}, {0x3ff, 0x3ff, 0x4, 0x10001}, {0xb7, 0x2, 0x4, 0x4}, {0x58, 0x20, 0x1f, 0x81}, {0xb5, 0x7, 0x9}, {0x9, 0x800, 0xfffffff9, 0x8}, {0x10000, 0x200, 0x8, 0x7fff}, {0x101, 0x9, 0x7, 0x800}, {0x800, 0x4, 0x1, 0x9}, {0x5, 0x489, 0x7, 0x6}, {0xff, 0x7, 0x0, 0x163}, {0x1f, 0x1f, 0x2, 0x800}, {0x908, 0xfffffffb, 0x4, 0x2ae}, {0x80000000, 0xcc1, 0x200, 0x2}, {0x99d5, 0x46, 0x5}, {0x6, 0x8, 0x7fffffff, 0xae2}, {0x101, 0x5, 0x8001, 0x7c2}, {0x2ab, 0x8, 0x3bb, 0x6}, {0x7, 0x7fffffff, 0xffff88a5, 0x40}, {0x20, 0x101, 0x49, 0x1}, {0x0, 0xddae, 0x2, 0x8001}, {0x101, 0x8, 0x2, 0x8}, {0xffffffff, 0xfffffffb, 0x3, 0x80}, {0x37d, 0x8, 0xc000000, 0x8}, {0x9, 0x8, 0x307cc6, 0x124}, {0x2, 0xbef6, 0xffffffff, 0x7fffffff}, {0x3, 0xfff, 0x5, 0x8001}, {0x1, 0xc56, 0x7fff, 0x8}, {0x8, 0x1, 0x8, 0x3}, {0x5, 0x5, 0xfe00, 0x3f}, {0x100, 0xfffffffe, 0xd08, 0x3}, {0xffffffc0, 0x200, 0x9f79, 0x2}, {0x1ff, 0x7fff, 0x1, 0x34a8}, {0x0, 0x9, 0x2000, 0xffffdeaa}, {0x7df3, 0x0, 0x9a9, 0x1000}, {0xb38, 0x80000000, 0x4, 0x8}, {0x2, 0x0, 0x8, 0xf74}, {0x502, 0x8000, 0x2c2b, 0x7fffffff}, {0x800, 0x40, 0x546a, 0xfffff800}, {0x8, 0x5, 0x2, 0x9}, {0x4, 0x3f, 0xd40, 0x3}, {0x4, 0x1f, 0xff, 0x5}, {0x7, 0x8, 0x9, 0xc1}, {0x80, 0x7, 0xdb, 0x8}, {0x6, 0x29d0, 0x5, 0x1}, {0x200, 0xfffffffe, 0x4, 0x46e}, {0x7594dc87, 0x3, 0x6, 0xffffffff}, {0x10000, 0x9, 0x8, 0x7}, {0x5, 0x27, 0x1f9, 0xffffffff}, {0x80000000, 0x0, 0x100, 0xb61}, {0x0, 0x200, 0xba2a, 0xc28}, {0x7, 0x3, 0x1}, {0x1, 0xa, 0xffffffff, 0x1}, {0x7ff, 0x3ff, 0x12, 0xffffffff}, {0x3, 0xfffffffd, 0x6, 0x5}, {0x0, 0x6, 0x2, 0xfffffff7}, {0xdb03, 0x1, 0x8f, 0x2}, {0x8001, 0x400, 0x2, 0x9}, {0x3, 0x5, 0x1, 0x3}, {0x3e, 0x3, 0xe63, 0xffffffff}, {0x26fa, 0xff, 0x7, 0x53}, {0x8001, 0x100, 0x9, 0x9}, {0x1, 0x7, 0x200, 0x2}, {0x80, 0x1, 0x6, 0x3}, {0x5, 0x686, 0x5, 0x81}, {0x5, 0x0, 0xe054, 0xfffffc78}, {0x401, 0x5, 0xbb, 0x2}, {0xc1, 0x8, 0x0, 0x5}, {0x0, 0x0, 0x5, 0x3f}, {0x40, 0x4, 0xb893, 0x2}, {0x81, 0x8, 0x4, 0xcf6}, {0x3, 0x4, 0x1000, 0xb9}, {0x20c3, 0x8, 0x1, 0x400}, {0x400, 0x4804, 0x0, 0x1}, {0x200, 0x44, 0xd8a, 0x5}, {0xd9, 0x1, 0x101, 0x15ff}, {0x4, 0x7c9, 0x6, 0x90}, {0x7, 0x0, 0x2, 0x6}, {0xfffffff8, 0xffff, 0x8, 0x1}, {0x7f, 0x7f, 0x0, 0x3}, {0x7fffffff, 0x20, 0x8000, 0x4}, {0xa984, 0x3f, 0x8, 0x4}, {0x3f, 0x9, 0x100, 0xffffff01}, {0x930c, 0x8, 0x5, 0x9955}, {0x8, 0x5, 0xe14f, 0x8}, {0x3177, 0x4, 0x3, 0x5}, {0x0, 0x4, 0x20, 0x400}, {0x3f, 0x401, 0x5, 0xffff7fff}, {0x6, 0x5, 0x7f, 0x1}, {0x800, 0x20, 0x10000, 0x8000}, {0x9, 0x6, 0x4, 0xfffffff8}, {0x3, 0x8, 0x800, 0x8}, {0x80000000, 0x1000, 0xffffff80, 0x1ff}, {0x4, 0x9, 0x1ffce0d7, 0x5}, {0x3f, 0x1, 0x9, 0xcdb1a718}, {0x1e000000, 0x6, 0x0, 0x4}, {0x3, 0x8, 0x69, 0x8}, {0x8000, 0x81, 0x478, 0xc41}, {0x6455664d, 0xc82, 0x7, 0x3}, {0x2, 0x4, 0x7, 0x8}, {0xfffffc01, 0xa14, 0x2, 0x3ff}, {0x3, 0x213e1e63, 0x3, 0x669b000}, {0x1, 0x7, 0x7, 0x5}, {0x6, 0x5d, 0xfff, 0xffffff80}, {0x1, 0x35e, 0x7, 0x40}, {0xffffffff, 0x10000, 0x4, 0x9}, {0x9, 0x2, 0x6, 0xd7a}, {0x2, 0x80000000, 0xffffffff, 0x1f}, {0x8, 0xfffffffb, 0xc2fb, 0x8}, {0x3, 0xe7c, 0xffffffff, 0x7}, {0x6, 0x20, 0x4, 0x7}, {0xfffffff8, 0x9, 0x60e4, 0x3f}, {0x20, 0x9, 0x7fff, 0xfffffffc}, {0x1f, 0x4, 0x3ff, 0x200}, {0x4, 0x1f, 0x81, 0x8001}, {0x6, 0x1, 0x10000, 0x1}, {0x1, 0x7, 0x1, 0x1400}, {0x8001, 0xf4f, 0x6, 0x1}, {0x3, 0x8001, 0x380, 0x400}, {0x0, 0x4, 0x6, 0x80000001}, {0x5, 0x7, 0x200, 0x7}, {0x9, 0x7fffffff, 0x64fb9162, 0xffffffff}, {0x9, 0x6, 0x8, 0x3ff}, {0x81, 0xcb6, 0x1, 0xfc000000}, {0x0, 0x1, 0x10001, 0x80}, {0x80000000, 0x8, 0xbd, 0x313}, {0x3, 0xe6bf, 0x0, 0x1}, {0x2, 0x0, 0x7, 0x1000}, {0xadc3, 0xffffffff, 0x8, 0x4}, {0x29, 0x7, 0x9, 0x41e6}, {0x7f, 0xfffffeff, 0x1, 0x7}, {0xaa, 0xe8, 0x401, 0x4}, {0x6, 0x9, 0x10000, 0x5}, {0x16, 0x5, 0x1, 0x6}, {0x1, 0x7c00, 0x798, 0x3ff}, {0x7fffffff, 0x8, 0x2, 0x8b}, {0x735b, 0x8, 0x101, 0x5}, {0xae, 0xfffffffc, 0x9, 0x7}, {0x8, 0x1, 0x1, 0x1}, {0x5, 0x8, 0x3, 0x3ff}, {0xa9e, 0xea000000, 0x80000001, 0x5}, {0x2, 0x0, 0x400, 0x81}, {0x1, 0x6, 0x101, 0x3f}, {0x12d1, 0xbd6, 0xff, 0xe54}, {0x6, 0x1000, 0x2, 0x5}, {0x53, 0x9, 0x7fff, 0x7}, {0x7fff, 0x4, 0x100, 0x7fff}, {0xfffffffd, 0x0, 0x6, 0x40}, {0x6, 0x3, 0xffffff32, 0x10001}, {0x4, 0xd0, 0x0, 0xfffffff8}, {0x81, 0x7fff, 0x8, 0xfffffffc}, {0x7, 0x2, 0x40, 0x6}, {0x2, 0x0, 0x8001, 0x6}, {0x400, 0x7ff, 0xff, 0x5}, {0x5, 0x8, 0xfe4c, 0xffffff01}, {0x5, 0xfffffffa, 0x2, 0x5}, {0xb9, 0xc5, 0x1, 0x7}, {0x0, 0xcc, 0x207be12f, 0x9}, {0x0, 0x0, 0xffffef15, 0x4}, {0x5, 0x10001, 0xfff, 0x10}, {0x4, 0x10001, 0x1, 0x5}, {0x0, 0x8e, 0xfffffbff, 0x400}, {0x7ff, 0xb16e, 0x9, 0x3ff}, {0xbf5f, 0x7b, 0x1aa, 0x5}, {0x97e, 0x40, 0x6, 0x2}, {0x0, 0x7, 0x2, 0x81}, {0x90000, 0x1, 0x5216, 0x9380}, {0x9ee, 0xa0c, 0x1, 0xffffe36e}, {0xffff, 0xfffffbff, 0xffff8000, 0xffff}, {0x9, 0x4, 0x3, 0x2}, {0x0, 0x4, 0xea, 0x9}, {0x6, 0x0, 0x1ff}, {0x3, 0x401, 0x0, 0x400}, {0x2, 0x0, 0xffff, 0x5}, {0x8, 0xfffffffa, 0x2d58, 0xa50}, {0x7, 0x3, 0x7, 0x1}, {0x0, 0x4, 0x1, 0x101}, {0x2, 0x4, 0x8, 0x20}, {0x9, 0x94e, 0x20, 0x6}, {0x4, 0x200, 0x8, 0xee}, {0x3, 0xa60d93, 0x571e, 0x80000000}, {0x3, 0x101, 0x0, 0x6}, {0x1f, 0x8001, 0x6, 0x5}, {0x87b, 0x2, 0x4, 0x401}, {0x20, 0x7fffffff, 0xd66, 0xffff}, {0x400, 0x51, 0x4, 0x3f}, {0x5, 0xd4, 0x6}, {0x2, 0x3, 0x5, 0x57}, {0x4, 0x9, 0x2, 0x80000001}, {0x6, 0xff, 0x4, 0xf11}, {0x1, 0x4, 0xfffffffe}, {0x1, 0x10001, 0xdc3, 0x2}, {0x500, 0x7, 0x8, 0x364}, {0x6, 0x5, 0x0, 0x1}, {0x10c4, 0x7, 0x48b6, 0x4}, {0x9, 0xe09, 0x101, 0x401}, {0x0, 0xf7, 0x10000, 0x8}, {0x6, 0xc696, 0xfffffffa, 0x20400}, {0x3000000, 0xfff, 0x2, 0x8000}, {0x1, 0xfffffffd, 0x4, 0x5}, {0x5cd0, 0x568f, 0x0, 0x1}, {0x56, 0x10000, 0x4, 0xff}, {0x1, 0x3f, 0x5, 0x401}, {0x80000000, 0x1, 0xe79a}, {0x4, 0x7ff, 0xf0, 0x101}, {0xfffffffa, 0x1, 0x401, 0x7}]}, 0x3f39) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x11) 10:00:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x9) ioctl$TCFLSH(r2, 0x540b, 0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x6, 0x1, 0x4, 0x84, 0x5, "1efd70d49650c2da60a9fafc9bd88dd7a45f05"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) 10:00:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) 10:00:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) 10:00:50 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000004080)={0x6, 0x1, 0x8, 0x9, 0x8, 0x10001, 0x6, 0x9, r3}, &(0x7f00000040c0)=0x20) write$usbip_server(r0, &(0x7f0000000140)=@ret_submit={{0x3, 0x9, 0x0, 0x0, 0x3ff}, 0x2, 0x69, 0x9, 0x3ea, 0x8, 0x0, "90fda8b3b8410cc35f99dce5667df37bd764063abbb8e366f2e484a9e86f3bd492d82e3392c6f315ffc9313376ce08e5ca39806e854417010e94083c8b857e639c87ac14de71cad541ad52a773bc89bb422f6328c49ff485526a05671e74a3d8051e1308cab0b514ce", [{0x1, 0x8, 0x1ff, 0x7}, {0x7f, 0x6a0f6c26, 0x5, 0x400}, {0x401, 0x7f, 0x0, 0x7ff}, {0x6, 0x0, 0x2, 0x5b}, {0x8000, 0x6, 0x7f, 0xfffffff7}, {0x40, 0xfffffffc, 0x101, 0xe89}, {0xb2d7, 0xff, 0x6, 0x4}, {0xd79c, 0x302, 0xffffffc0, 0x8}, {0x9, 0x425, 0x8000, 0xbeb}, {0xffff93ab, 0x6, 0x21, 0x8}, {0x9, 0x3, 0x6, 0xc23}, {0x8, 0x8, 0x8, 0x3}, {0x1, 0x7, 0x1, 0x9}, {0x101, 0x8, 0x807, 0x1}, {0x0, 0x0, 0xc0, 0x6}, {0xff, 0x3, 0x6, 0x3}, {0x1, 0x8d, 0x81, 0x3ff}, {0x10000, 0x80000001, 0x4, 0x2}, {0x7, 0x6, 0x1, 0xfffffffa}, {0x2, 0xb9, 0x1, 0x800}, {0x2, 0x80, 0x80000000, 0x8c}, {0x8, 0x92c, 0x0, 0x9a000000}, {0x7fffffff, 0xfff, 0x7ff, 0x2}, {0x400, 0x40, 0x1, 0x7a}, {0x3, 0x7, 0x0, 0x1}, {0xfffffffe, 0x7, 0x401}, {0x25c, 0x10001, 0x80000001, 0x1ff}, {0x1, 0x7, 0x80000000, 0xb5eb}, {0x5, 0x2, 0x3f, 0x7}, {0x7, 0x6, 0x1, 0x8}, {0x4d00, 0x100, 0x9, 0x6}, {0x2, 0x1000, 0x5, 0x6}, {0x401, 0x4, 0x904, 0x7fff}, {0x7ff, 0x10000, 0x4, 0x8}, {0x887, 0x7, 0x7, 0x5b}, {0x5, 0xfffffff7, 0x9}, {0xcfb, 0x3f, 0x8, 0x2}, {0x5, 0x7, 0x1ff, 0x81}, {0x6000, 0x120, 0x1, 0x100}, {0x7fffffff, 0x0, 0x5, 0x101}, {0x101, 0x7fff, 0x9, 0x4}, {0x2, 0x1, 0x7, 0x6}, {0xffffffff, 0xfffffff8, 0x4, 0x4}, {0x4, 0x8000, 0x7, 0xffffff55}, {0x3, 0xfffff65b, 0x6, 0xbb}, {0xf2cf, 0x7f, 0xffffffff, 0x3}, {0x4, 0x7, 0x2, 0x9}, {0x0, 0x8, 0x200, 0x6}, {0x1, 0x6, 0x7f, 0x40}, {0x5, 0x1f, 0x8000, 0x100}, {0x1, 0x143e}, {0x401, 0x1, 0xffffffff}, {0x7, 0x0, 0x0, 0x4}, {0xfff, 0x7, 0x5, 0x80000000}, {0x9, 0x4, 0x5}, {0x101, 0x1, 0x1, 0x8}, {0x1, 0xfff, 0x4, 0x36}, {0x6, 0x8, 0x2, 0x800}, {0x7, 0x4, 0x1f}, {0x9, 0x401, 0x8, 0x6}, {0x5, 0x1, 0x7, 0x5}, {0x6, 0x5, 0x4, 0x7f}, {0x5, 0x1ff, 0x1ff, 0x6}, {0x3, 0x5, 0x1, 0x80}, {0x2, 0x2, 0x4, 0x9649}, {0x8, 0x101, 0x4, 0x3ff}, {0xd70d, 0x7ff, 0xa1, 0xe2}, {0x6, 0x0, 0x96, 0x6}, {0x1, 0x0, 0x33, 0x7}, {0x2, 0x8, 0xfff, 0x4}, {0x2, 0x44e, 0x1, 0x800}, {0x4, 0x6, 0x4, 0x10001}, {0x1f, 0x3f00, 0x1, 0x10000}, {0x0, 0x5, 0x7ff, 0x100}, {0x3, 0x0, 0x100, 0x7}, {0x1, 0x3, 0x5, 0x81}, {0x5, 0x4, 0x10000, 0x4}, {0x8000, 0x80, 0x1, 0x9a90}, {0x3, 0x3, 0x5, 0x800}, {0x101, 0x4, 0x0, 0x87f8}, {0x0, 0x5, 0x1, 0xf841}, {0x4, 0x9, 0x5, 0x80000001}, {0x7, 0xff, 0x3}, {0x2, 0x16be, 0x5, 0x7fff}, {0x1, 0x1, 0x4, 0x8000}, {0x4e55c429, 0x1ff, 0x401, 0x3}, {0xe8, 0x1, 0x0, 0x4}, {0x2, 0x20, 0x7fff, 0x7}, {0x9, 0xffff, 0x8, 0xfffffff7}, {0x4, 0x10001, 0x8001, 0xe8}, {0x9, 0x1, 0x7, 0x3}, {0x800, 0x4, 0xff, 0x6}, {0xffffff80, 0x8000, 0x8001, 0x1}, {0x10001, 0x100, 0x40, 0xaed}, {0x50f, 0xf9cb, 0x5, 0x40000000}, {0x6f4, 0x1, 0x1, 0x5}, {0xfffffffc, 0x6b, 0x5, 0x1}, {0x4, 0x1, 0x5, 0x1ff}, {0xc1, 0x0, 0x7}, {0x7, 0x3, 0xffff8564, 0x7}, {0x2, 0x4d1a, 0xfffffffe}, {0x1ff, 0x5, 0xda, 0x6fc}, {0x9, 0x2, 0xa0000000, 0x3ff}, {0x5, 0x0, 0x2, 0x5}, {0x2, 0x3, 0x3, 0x3}, {0x0, 0x4, 0x0, 0x7}, {0x20, 0xffff0001, 0x7fffffff, 0x5}, {0x2, 0x40, 0x4, 0x7}, {0x2, 0x9, 0xff, 0x7f}, {0xc6, 0x81, 0xff, 0x9}, {0x6, 0x8, 0x800, 0x6}, {0x6, 0x7, 0xf4, 0x1}, {0x7fffffff, 0x6, 0x1, 0x6}, {0x5, 0x670f, 0x5, 0x4}, {0x1, 0x400, 0x3, 0x400}, {0xffffffff, 0x7f2aaf3f, 0x800, 0x3}, {0x7, 0x40c, 0x80, 0x80}, {0x1, 0x8, 0x1f, 0x9}, {0x9bd3, 0x3ff, 0xfff, 0x80000000}, {0x67a, 0x14031521, 0x0, 0xd9ae138}, {0xce4, 0x4, 0x0, 0x3}, {0x200, 0xffffffff, 0x9, 0x1}, {0xfffffffc, 0x8, 0xd0, 0x4c364654}, {0x80000001, 0x4, 0x5, 0x7}, {0x6, 0x2, 0xfffffff9, 0x7}, {0xffff4301, 0x3e5, 0x6, 0x6}, {0x121f, 0x1, 0x10000, 0x80000001}, {0x8, 0x2, 0x1000, 0x6}, {0x7fff, 0x8, 0x401, 0x1}, {0x80, 0x2, 0x200, 0x9}, {0x6712897b, 0xfffffffd, 0x2, 0x3f}, {0x0, 0xfffffc00, 0x5498, 0x7}, {0xe139, 0x3, 0x3}, {0xfff, 0x3f, 0x1ff, 0x3}, {0x1, 0x9, 0x9, 0xfffffff9}, {0x4, 0x2, 0x8001, 0x8}, {0x9, 0x351d, 0x0, 0x2}, {0x963f, 0x1000, 0x7, 0x2db}, {0x800, 0x90000000, 0x7, 0x8}, {0x8001, 0x8, 0xffff0b22, 0x6}, {0x4, 0xfffffffd, 0x88eb, 0x51eb}, {0x8, 0x155, 0x0, 0x425d}, {0x9, 0x2, 0x9, 0x80000001}, {0x9, 0xf6, 0x0, 0xaf}, {0x1, 0x55d, 0x8, 0x5}, {0x40, 0x1, 0x5, 0xfffffffd}, {0x3, 0x47b, 0x2, 0x8001}, {0x5, 0x8af, 0xffffff81, 0x5}, {0x2, 0x9, 0x200, 0xb9b7}, {0x2, 0x401, 0x81, 0x2}, {0x7, 0x1, 0x9}, {0x3, 0x7, 0x2, 0x1}, {0x9, 0x8, 0x7, 0x6}, {0x6, 0x25, 0x9, 0x4}, {0x1, 0x5, 0x4}, {0x2, 0xffff, 0x6, 0x2}, {0x7fffffff, 0x0, 0x10000, 0x1f4c}, {0x36, 0x0, 0x5, 0x3}, {0xe3, 0x40, 0x7, 0x8001}, {0xfff, 0x1d4, 0xa6a8, 0xfffffffa}, {0x1c, 0x5}, {0x7, 0x1, 0x48, 0x9}, {0x8, 0x6225, 0x4, 0x8}, {0x4, 0x3f, 0xb0, 0x7}, {0xff, 0x8, 0xb, 0x5}, {0xfcf0, 0x4, 0xfffffffc, 0x7}, {0x7ff, 0x1, 0x3, 0x1}, {0x1, 0x7f, 0x3, 0x3ff}, {0x4, 0x3, 0x8, 0x4}, {0x6, 0x1, 0x5}, {0x6, 0x8, 0x8e, 0x4}, {0x14c4, 0x1ff800, 0x7, 0x3ff}, {0x80000001, 0x500000, 0x6, 0x80}, {0x9, 0xfd, 0x8, 0x401}, {0xff, 0x6, 0x2, 0x3}, {0x2, 0x8, 0x1c}, {0x6, 0x5, 0x7, 0x8}, {0x101, 0x36, 0x8, 0x1}, {0x5, 0x4, 0x20, 0x10001}, {0x1, 0x87, 0xc98, 0x3}, {0x10000, 0x3f, 0x2, 0x400}, {0x5, 0x4, 0x4, 0x433}, {0x8, 0x5, 0x4, 0x3}, {0x7d3, 0x7, 0xfd, 0xf9fa}, {0x0, 0x18, 0x5, 0x6}, {0x3, 0x800, 0x4, 0x1f}, {0x9, 0x9, 0x8f, 0x800}, {0x101, 0x9, 0x1, 0x5}, {0x401, 0xfffff8ab, 0x9, 0x6}, {0x1, 0x400, 0x7f, 0x80000000}, {0x7f, 0x7, 0x20, 0x8}, {0x9, 0x7, 0x2, 0x2}, {0x751a, 0xe08, 0x101, 0x9}, {0x1d, 0xd9af, 0x101, 0xffff}, {0x3, 0x3f, 0x8, 0x7f}, {0x80000000, 0x800, 0x800, 0x2}, {0x100, 0x10, 0x6, 0x81}, {0xfffffffe, 0x8, 0xfff, 0x80000000}, {0xffff5a94, 0x3f, 0x54845ccd, 0x3}, {0xd90, 0x83, 0x8, 0x3}, {0x6, 0x6, 0x3, 0x5}, {0x4, 0x11b, 0x5, 0x7f}, {0x36, 0x4, 0x0, 0x7fffffff}, {0x9, 0x401, 0x1, 0x5}, {0x57516ec, 0x0, 0x0, 0x6}, {0x3, 0x10001, 0x5, 0x10001}, {0xcc, 0x6a5d, 0xff, 0x7}, {0x9ec, 0x8, 0x6381, 0x8001}, {0x6, 0x0, 0x6, 0x801b}, {0x6, 0xfffffeff, 0x8, 0x7}, {0xfffffff9, 0x7, 0x4, 0x7f}, {0x10001, 0x2, 0x400, 0x8}, {0x3, 0x40, 0x3, 0x200}, {0x5, 0x3f8dcadb, 0x9, 0x20}, {0x9, 0x8, 0x0, 0x10000}, {0x5a, 0x80, 0x3, 0x4}, {0x0, 0xfffffffc, 0x3, 0x8}, {0x2, 0x24, 0x9, 0x4}, {0x5, 0x8000, 0xffffffff, 0x1}, {0xfff, 0x1, 0xf66}, {0x1f, 0x7, 0x1000000, 0x4}, {0x12a, 0x6, 0xff, 0x6}, {0x1, 0x1, 0x1, 0x7}, {0x8c05, 0x6, 0x4f, 0x20}, {0x200, 0x10000, 0xef9, 0x2}, {0x200, 0x9, 0x5, 0x20}, {0x7ff, 0x101, 0x8, 0xfffffff9}, {0x1, 0x4, 0x4, 0x5}, {0x2271, 0x8, 0x3, 0x3}, {0x9, 0x1, 0x7a, 0x3}, {0x4, 0x2, 0x6f0, 0x25f9}, {0xfffffffc, 0x8001, 0x5d8, 0x7}, {0x1, 0xf0000000, 0x80000000, 0x3}, {0x4, 0x3, 0xffff, 0x2}, {0x8, 0x7, 0x1f, 0x1}, {0x200, 0x9, 0x7fff, 0x400}, {0x1f, 0x860, 0xfffff2f5, 0x8}, {0x2, 0xb0f, 0x3ff, 0x4}, {0x800, 0x400, 0x9, 0xb7df}, {0x3423, 0x5, 0x10001, 0x6}, {0x1ff, 0x1f, 0x7, 0xc92b}, {0xeff9, 0x8735, 0x200, 0x10b}, {0x19b56a8e, 0x3, 0x9, 0xfffffff9}, {0x2, 0x8, 0x6, 0x8001}, {0x80, 0x309c, 0x6, 0xff}, {0x3, 0x2, 0x1f, 0x9}, {0x3ff, 0x1000, 0x3, 0x8}, {0x10001, 0x7, 0x8, 0x1000}, {0x3d, 0xffffffff, 0x1ff}, {0xa88, 0x44, 0x8cf1, 0x51}, {0x3, 0x9, 0x9, 0x4}, {0x1, 0xffffffff, 0x2, 0x5}, {0x1, 0x4, 0x0, 0x5}, {0x81, 0xf905, 0x3, 0x8001}, {0xffff, 0x0, 0x3, 0x1f}, {0xfffff001, 0x0, 0xbe, 0x80}, {0x80000000, 0x2, 0xffff, 0x8001}, {0x1, 0x40, 0x3, 0x6}, {0x1, 0x40, 0x1000, 0x1a4}, {0x2, 0x5fe, 0x400, 0x7}, {0x60c3, 0x0, 0x8}, {0x6, 0xffffffff, 0x20, 0x6}, {0x3f, 0x2, 0xffffffe1, 0x8}, {0x5, 0xffffffa4, 0xfcf, 0x245e}, {0x7, 0x5, 0x8000, 0x591ae71f}, {0x7ff, 0x825b, 0x1, 0x2}, {0x1, 0x800, 0x100, 0x80000000}, {0x2, 0x5, 0x6}, {0x1000, 0x292, 0x8001, 0x4}, {0x40, 0x5, 0x5}, {0x0, 0x1, 0xfff, 0x458}, {0x200, 0x1, 0x4, 0x7}, {0x0, 0x8, 0x6, 0x1000}, {0x2, 0x7, 0x4a11dee3, 0x8001}, {0x10001, 0x1ff, 0x1, 0x200}, {0x8000, 0xffffffff, 0x9, 0x2}, {0x4, 0x80000000, 0x6, 0xff}, {0x8, 0x37, 0x8, 0x7}, {0x0, 0x5, 0x40, 0xd6d}, {0x4, 0x3ff, 0x71bd2e95, 0x3}, {0x9, 0x7fff, 0x1}, {0x200, 0x400, 0xfffeffff, 0xfffffffc}, {0xffff, 0x7fffffff, 0x9, 0xa435}, {0x6, 0x80, 0x6, 0x7f}, {0x8f9f, 0x9, 0x100, 0x101}, {0x5, 0x1f, 0x5da, 0x5}, {0x8000, 0x6, 0x7, 0xbf}, {0x6, 0xcdc3, 0x3}, {0xf94, 0x4, 0x80000001, 0xfffffffa}, {0x7, 0x3, 0x80000001, 0x7f}, {0x0, 0x5, 0x221b, 0xafff}, {0x7, 0x87, 0x6, 0x401}, {0x6, 0xffffffff, 0x7, 0xfffeffff}, {0x2, 0x1, 0x40, 0x40}, {0x4000000, 0xecc9, 0x7, 0xfff}, {0xffffffff, 0x4, 0x7, 0x87}, {0x0, 0x7, 0x5, 0x5}, {0x40, 0xb0d9, 0x7df, 0x24a7}, {0x62, 0x81, 0x3f, 0x80}, {0x80, 0x9, 0x2, 0x3}, {0x50d5228c, 0x19, 0x8, 0xeb}, {0x6, 0x400, 0xb46b, 0x40}, {0x2, 0x2, 0x0, 0x5}, {0x9, 0x65, 0x2, 0x80}, {0x4c, 0x7, 0x2, 0x1}, {0x5, 0x3490, 0x0, 0x3ff}, {0x9, 0x0, 0x9e}, {0x4d34, 0xffffffc0, 0x2, 0x4}, {0x80000001}, {0x1ff, 0x9, 0x2, 0x4}, {0x3f, 0x6, 0x6, 0x81}, {0x7, 0x2c, 0x5, 0x9}, {0x8bcf, 0x100, 0x7335a61d, 0x1f}, {0x400, 0x5, 0x5, 0xf409}, {0xa34, 0x5, 0xc8, 0x1}, {0x4, 0xfffffff7, 0x7, 0x1f}, {0x3, 0x9, 0x200, 0x2}, {0x6, 0x8b6, 0x6, 0x1}, {0x0, 0x9, 0x1, 0xff}, {0x5, 0x4, 0x3ea, 0x430}, {0x8, 0x800, 0x8, 0x9}, {0x4, 0xc636, 0x1, 0x7ff00}, {0xfffffffc, 0x80000000, 0x174, 0x1000}, {0x1, 0xc1c1, 0x2fa, 0x1}, {0x6, 0x400, 0x5, 0xffffffc1}, {0x8e19, 0x71, 0x1, 0x2cf}, {0x100000, 0x7, 0x0, 0x9}, {0xcbb3, 0x80, 0x7fffffff, 0x4}, {0x80, 0x1, 0x0, 0x98}, {0x4, 0x46c3, 0x8, 0x7}, {0x7, 0x40, 0xee}, {0x1, 0x2, 0x1, 0x7fffffff}, {0x0, 0x9, 0x7, 0xff}, {0xffffffa7, 0xfffffff9, 0x7fff, 0x3ff}, {0x100, 0x3, 0x3, 0x9}, {0x7ff, 0x6, 0x2, 0x3ff}, {0x101, 0x8, 0x3, 0x5}, {0x4, 0x0, 0x10001, 0x7}, {0x6, 0xc640, 0x81, 0x1}, {0xffffff81, 0x0, 0x8, 0x6}, {0x81, 0x8, 0xfffffffe, 0x3}, {0x9, 0x7, 0x81, 0x6}, {0x3, 0x1f, 0x2, 0x5230}, {0x9, 0x6, 0x1, 0x2}, {0x5, 0x10000, 0xffffffff, 0x5}, {0xfff, 0x8, 0x3, 0x1}, {0xfffffeff, 0x6, 0x100, 0x3}, {0x3ff, 0x0, 0x7, 0x8000}, {0x7fffffff, 0xffffa87e, 0xfff, 0x8}, {0x5, 0x9, 0x3ff}, {0x0, 0x18, 0x5d7, 0x4}, {0x200, 0x1, 0x0, 0x7}, {0x401, 0x5, 0x40, 0xfcc}, {0xaf, 0x3, 0x3, 0x7}, {0x100, 0x9, 0x4, 0x9}, {0x7, 0x6, 0x0, 0x3}, {0x1, 0x166f, 0x1, 0x400}, {0x6, 0x5, 0x3, 0x20}, {0x3, 0x707b, 0x81, 0xfffffff8}, {0x4, 0x0, 0x9, 0x80000000}, {0xffffd588, 0x3, 0x1, 0x1}, {0x3, 0x7ff, 0xcce, 0x10}, {0x7, 0x7, 0x80000001, 0x31}, {0x8001, 0x5000, 0x1, 0x401}, {0x0, 0x7, 0x1, 0x5}, {0x3, 0x4, 0x8}, {0x2, 0x3, 0x14d4, 0x57}, {0x100, 0x1, 0x80, 0xffff}, {0x58, 0x6, 0x1}, {0x6, 0x6, 0x20, 0x8}, {0xaa6, 0x2, 0xd84, 0xf858}, {0x2240, 0x6, 0x9, 0x1}, {0x6, 0x0, 0x4, 0x2}, {0x9, 0x8001, 0xfffffffb}, {0x2ca8, 0x7, 0x1, 0x3}, {0x0, 0xfff, 0x81}, {0x7fffffff, 0x0, 0x8000, 0x7}, {0x0, 0x0, 0x3, 0xfff}, {0x80000001, 0x6, 0xc9f, 0x1570}, {0x10000, 0x100, 0x800}, {0x3, 0x2, 0x7000000, 0x46a}, {0xfff, 0x9, 0x400, 0x9}, {0x3, 0xffffaa63, 0x0, 0x6c}, {0x1f, 0x7, 0x3c05, 0x4}, {0x5, 0x72a6, 0x0, 0x3}, {0x8, 0x1ff, 0xdde, 0xaa000000}, {0x6, 0xffffffff, 0x5, 0x7}, {0x8000, 0x800, 0x3, 0x55}, {0x5, 0xe9b7, 0xff, 0x2}, {0xffffffff, 0xffffffff, 0x40, 0x1}, {0xf38b, 0x527, 0x1ee, 0x40}, {0x9, 0xfff, 0x2, 0x5}, {0x1, 0xfffffffe, 0x3, 0x3f}, {0x7, 0x40, 0xe0b5, 0x4}, {0x7, 0x0, 0x20, 0xff85}, {0x1, 0x8, 0x5}, {0x8, 0x0, 0x80000001, 0x81}, {0x40, 0x19d, 0x8, 0x1}, {0x5, 0xfffffffe, 0x0, 0x1e0}, {0x401, 0x80000000, 0xfff, 0x8}, {0x5, 0x8, 0x6, 0x1}, {0x401, 0x0, 0x7, 0x10001}, {0x2, 0x5611, 0xef, 0x12e}, {0x100, 0xfffffe7c, 0x2, 0x35a3}, {0x20, 0x2, 0x10001, 0x3}, {0x1, 0x3, 0xb26, 0x2}, {0x3ff, 0x8000, 0x5, 0x5}, {0xfffffffa, 0x80, 0x0, 0x8000}, {0x80000001, 0x2, 0x10001, 0x4}, {0x401, 0x7ff, 0xffff7fff, 0x1}, {0x7, 0x5, 0x0, 0x8001}, {0x80, 0x3, 0x12, 0x7}, {0x3113, 0x1, 0x1000, 0x1}, {0x0, 0xffffff06, 0x3a, 0xc}, {0x2, 0x1, 0x4, 0x8}, {0x6, 0x1, 0x7fffffff}, {0x4, 0xffff, 0xffffffff, 0x3f}, {0x5, 0xad, 0x10000, 0x2}, {0x400, 0x6, 0x8, 0x2}, {0x200, 0x5, 0x5, 0x6}, {0x200, 0x35d, 0x7ff, 0x7}, {0x401, 0x1, 0x3, 0x1}, {0x2, 0x10001, 0x8001, 0x9}, {0x89, 0x200, 0x7ff, 0x200}, {0x0, 0x0, 0x401, 0x8768}, {0xfffffff9, 0x2, 0xfffffc01, 0x5}, {0x1000, 0x8, 0xffffff01, 0x6}, {0x7, 0xfcdf, 0xfffff7bf, 0x1ff}, {0x5, 0x966, 0x8, 0x2db2}, {0x8, 0x5, 0x0, 0x733}, {0x6, 0x29, 0x1, 0x80000000}, {0xfffffffa, 0x3af2, 0x8, 0x7}, {0x8001, 0x54, 0x6, 0x2}, {0x3, 0x5, 0x5, 0x1}, {0x4, 0x401, 0x1c3, 0x5}, {0xff, 0x1000, 0xd4d, 0x5}, {0x9, 0x1, 0x200, 0x9}, {0x8000, 0x2, 0xa1c6, 0x7}, {0x7, 0x7, 0x9, 0x4}, {0x9, 0x0, 0x1, 0x966}, {0x9, 0x80000000, 0x8, 0x1}, {0x8, 0x101, 0x5, 0x3}, {0x3, 0x1, 0xba, 0x80000001}, {0x1, 0x8a97, 0x8, 0x8}, {0x6, 0x2, 0xd1, 0x7}, {0x177, 0xffffffff, 0x9, 0x3ff}, {0x10001, 0x1, 0x7f, 0x9}, {0xfff, 0x9, 0x80000001, 0x5}, {0x1, 0x2, 0x1, 0x9}, {0x7ff, 0x9c, 0x10000, 0x80000001}, {0x1, 0xb8, 0x9, 0x4}, {0x9, 0xef, 0x100, 0x4}, {0x81, 0x7fffffff, 0x6, 0x7}, {0x6, 0x1, 0x5b, 0x6}, {0x1, 0x3, 0x0, 0x3}, {0x0, 0x1, 0x200, 0x7}, {0xdf4, 0x9, 0x3ff, 0x80000000}, {0x673, 0x10001, 0xb5, 0x2}, {0x5, 0x8, 0x6, 0x9}, {0x8, 0xfffffff9, 0x6, 0x7}, {0x80, 0x871, 0xd03, 0x800}, {0xec, 0x2, 0x1, 0x80}, {0x9, 0x8, 0x3, 0x6}, {0x4, 0x3f, 0x8000, 0xc000000}, {0x2, 0x1}, {0x9e6, 0x2000000, 0x9, 0xd6}, {0x1, 0x4, 0x3f, 0x8}, {0x4, 0x80000001, 0x80000000, 0x7}, {0x3, 0x3, 0xfffff800, 0xb8c1}, {0xba3e, 0x7, 0x5, 0xa0000}, {0x592a, 0x10000, 0x4e, 0xffff}, {0x8001, 0x4ef, 0x5, 0x4}, {0x0, 0x9, 0xfffffd4b, 0x6}, {0x0, 0x3, 0x80, 0x400}, {0x5, 0xd77, 0x10001, 0x4}, {0x40, 0x5, 0x3ff, 0x101}, {0x1, 0x19d, 0x39db, 0x9}, {0xffffffe1, 0x4, 0x8, 0x1}, {0x7, 0x8, 0x0, 0x6}, {0x563bda2e, 0x1, 0x4, 0xb3}, {0x1ff, 0xfffff001, 0x4cc9, 0x4}, {0x10001, 0x32e, 0x5, 0x101}, {0x6, 0x6, 0x81, 0x1f}, {0x911, 0xffffffff, 0xffffff1a, 0x8000}, {0x2, 0x7ff8, 0x20, 0x4}, {0xff, 0x0, 0xf4, 0x800}, {0x1, 0x101, 0xfffff0a2, 0x2}, {0x5, 0xef9, 0x3}, {0x45c, 0x7, 0x449e6862, 0x3f}, {0x5, 0x40, 0x1, 0xc714}, {0x4, 0x2ed2, 0x3, 0x400}, {0xb1ea, 0xf6f, 0x101, 0x8}, {0xc11c, 0xf, 0x7fffffff}, {0x9, 0x2, 0xffff, 0x5}, {0x3, 0xf1b, 0xf802, 0x9}, {0x200000, 0x3, 0x7fffffff, 0xa4cb}, {0xffffffe1, 0x7fffffff, 0x8, 0xa9fc}, {0x80000000, 0xa2e2, 0x65f, 0x5}, {0x4, 0xd, 0x5, 0x1}, {0x1f, 0x1f, 0x1, 0x7}, {0x3ff, 0x6, 0x9, 0x8}, {0x8e0, 0xfffffff9, 0x2, 0x4}, {0x7, 0x8, 0x1ff, 0x2}, {0x10001, 0x5, 0x100, 0xfff}, {0x4, 0x10000, 0xffffffff, 0x2}, {0x1, 0x6, 0xe4, 0x2}, {0x3, 0x7, 0x8000}, {0x9, 0x9, 0x10000, 0xae42}, {0x9, 0x3, 0xa54, 0x17a}, {0x1, 0x401, 0x6, 0x4}, {0x80, 0x1000, 0xff, 0xd7}, {0x7f, 0x9, 0x4145, 0x3}, {0x7, 0x4, 0xd3, 0x1ff}, {0x8001, 0x7, 0x8000}, {0xffffffff, 0x800, 0x7}, {0x9, 0x40, 0x100, 0x4}, {0xe0, 0x0, 0x1, 0x4}, {0xffff, 0x6, 0x7, 0x9}, {0x3ff, 0x0, 0x4, 0xff91}, {0x0, 0x7fffffff, 0x3f, 0xd7}, {0xc4d5, 0x5, 0x1ff, 0x20}, {0x8, 0x5, 0x0, 0x8000}, {0x1, 0x1000, 0x3, 0x8}, {0x100, 0xfffffff7, 0x3ff, 0x7}, {0x5, 0x14cd, 0x400, 0x1000}, {0x1, 0x1, 0x65, 0x6}, {0xfffffff7, 0x3ff, 0x7fffffff, 0x3}, {0x3, 0x4, 0x1, 0x3b56}, {0x80000001, 0x5, 0x80000001, 0xdc}, {0x8, 0x4a67, 0x8, 0x5}, {0x7, 0x6, 0x64, 0x18b}, {0x5, 0x80000001, 0x7fff, 0x4}, {0x43be2b66, 0xffffffff, 0x2, 0x9}, {0x0, 0xffff, 0x3, 0x4}, {0x9, 0x0, 0x81, 0x3}, {0x8, 0x9, 0x401, 0x8}, {0x9, 0x4, 0x0, 0x8}, {0x4, 0x0, 0x1, 0x7}, {0x3, 0x3, 0xffff, 0x3}, {0x6, 0x10000, 0x2b1, 0x7}, {0x9, 0x7, 0x1, 0x7ff}, {0x4, 0xffff, 0x9, 0x80000000}, {0x3, 0x7, 0xffff, 0x78}, {0x101, 0x401, 0x21cd3789, 0x8}, {0xfffffffb, 0x7, 0x1}, {0x400, 0x80000000, 0x1000, 0x9}, {0xfff, 0x9, 0x401, 0x80}, {0x80, 0x0, 0xba, 0x8}, {0xc31, 0x401, 0x360e, 0x3}, {0x8, 0x7fff, 0x100, 0x5}, {0x1, 0x2, 0x10000, 0x2ef1}, {0x2bbf, 0x5, 0x2, 0xfffffffa}, {0x80000001, 0x3, 0x6, 0xfff}, {0x8460, 0xfff, 0x1, 0x401}, {0x1000, 0x6, 0x6, 0xfffffe00}, {0x80000000, 0x6, 0x6, 0x7fff}, {0x1, 0x7, 0x2, 0x1}, {0x5e, 0x7, 0x20, 0x2}, {0xfffffff8, 0x2431ec80, 0x7ff, 0x6}, {0xffff, 0x6, 0x8}, {0x25, 0x0, 0x8, 0x9}, {0x100, 0xea0, 0x7fff, 0x2}, {0xa18, 0xff, 0x1, 0x3ff}, {0x9, 0x7fff, 0x8, 0x1}, {0x80000001, 0x0, 0x0, 0xffffff81}, {0x1, 0x12, 0x6, 0x7}, {0x9, 0x20, 0x40, 0x5}, {0x0, 0x7, 0x8, 0x1}, {0xdf, 0x4, 0x7fff, 0x1}, {0x5, 0x5c5d, 0x1f, 0x8}, {0x81, 0x9, 0x3, 0x3}, {0xfb, 0x35fb4ec8, 0x4, 0xffffffff}, {0x5, 0x9, 0x7fff, 0xfffffffd}, {0x7, 0x4, 0x2, 0x1f}, {0xfff, 0x80000001, 0x1, 0x9}, {0x1, 0x6, 0x3, 0x8}, {0x7, 0x2, 0xff, 0x4}, {0xffff, 0x6, 0x8}, {0x0, 0x2, 0x5, 0x40}, {0xfffff4e3, 0x4, 0x4, 0x62031d19}, {0x8001, 0x8, 0x6, 0x3}, {0x9, 0xffffff80, 0x2, 0x6}, {0x6, 0x1ff, 0x8001, 0x1e}, {0x0, 0x7, 0x0, 0x7ff}, {0xcbb, 0x6, 0x54, 0xf193}, {0x1, 0x6, 0x101, 0x4}, {0x2, 0x4, 0x30, 0x80000000}, {0x6, 0x7ff, 0x9, 0x7f}, {0x2, 0x3, 0x4, 0x1f}, {0x8, 0x1, 0x1f, 0x40}, {0xfffffffe, 0x1, 0xfffffdf3, 0xdc9}, {0x4, 0xffff, 0x4, 0x2}, {0x2, 0x8, 0x8001, 0xffffffff}, {0x7, 0x8, 0xa5}, {0xfffffff8, 0x0, 0x1, 0x800}, {0x1, 0xce96, 0x5, 0x1ff}, {0x8, 0x6, 0x100, 0xffffffff}, {0xe90f, 0x261f736a, 0x5, 0x12c7}, {0xdf, 0x4, 0x7, 0x101}, {0x9, 0x3c, 0x4, 0x5}, {0x81, 0x3, 0x6, 0x6}, {0x5, 0x1ff, 0x6, 0x8}, {0x100, 0x401, 0xc31}, {0x1, 0x1, 0x20, 0x8}, {0x6, 0xbb, 0x14000000, 0xffff}, {0x9, 0x80, 0x2, 0x7fffffff}, {0x80000001, 0x1, 0x4, 0x8}, {0x36, 0xfff, 0x3ff, 0x7ff}, {0x1, 0x7f, 0x2, 0x5}, {0x6, 0x5, 0xe, 0xfffffffc}, {0xffffffff, 0x80000001, 0x8, 0x9}, {0x1, 0x1000, 0x4, 0x1ff}, {0xebf, 0x3, 0x7, 0xc51}, {0x6, 0x401, 0x6, 0x20}, {0x0, 0x6, 0x3, 0x4}, {0x40, 0x3, 0xffff5c78, 0x40}, {0x2, 0x9, 0x81, 0x8}, {0x7, 0x9, 0x0, 0x4}, {0xb4d5, 0x7, 0x1000, 0x1}, {0x8, 0x22, 0x7, 0x7}, {0xffffffff, 0xfffffffa, 0x3ff, 0x2}, {0x400, 0x8000, 0x7fff, 0xfffffff9}, {0x200, 0xff, 0x7fffffff, 0x7}, {0x0, 0x8000, 0x2}, {0x7f, 0x3, 0xed, 0x5}, {0x3f, 0x8000, 0xa3, 0x8}, {0x6, 0x0, 0x7fffffff, 0x3f}, {0xffffffc0, 0x2, 0x9, 0x7}, {0xfffffc01, 0x3, 0xfffffffa, 0x3}, {0x240, 0x400, 0x401, 0x5fed}, {0x274, 0x0, 0xffffffc0, 0x10}, {0x8, 0xfffff800, 0x700000, 0x5}, {0x5, 0xb, 0x800, 0x9}, {0x1, 0x10001, 0x5, 0x1}, {0x3f, 0x7, 0x8000, 0x3}, {0x4, 0x100, 0x0, 0x4}, {0x3f, 0x7, 0x7ff, 0x10001}, {0x1, 0xcf2, 0x7, 0x67d}, {0x11, 0x8001, 0x81, 0x20}, {0x40, 0x8, 0x20, 0x81}, {0x22, 0x3ff, 0xe99, 0x3}, {0x80, 0x6, 0x7, 0x4}, {0x5c4d, 0x0, 0x0, 0x3}, {0x4, 0x3, 0x7b07, 0x5a}, {0x6, 0x7eb, 0x7, 0x80000000}, {0x0, 0x8001, 0x622, 0x7fffffff}, {0x8, 0x4, 0x40, 0x9}, {0x200, 0x1, 0x100, 0x682}, {0xfff, 0xfffffff8, 0x7fff, 0x3}, {0xff, 0x8000, 0x8, 0x1ff}, {0x1, 0xf94, 0xbad2, 0xfffffbff}, {0x400, 0x81, 0x1b82, 0xfffffffe}, {0x5, 0x200000, 0x4, 0x129}, {0x2, 0x7, 0x9, 0x6}, {0x0, 0x7, 0x6, 0x3}, {0x8, 0x101, 0x4, 0x5a}, {0x90000, 0xfff, 0x3, 0x800}, {0x1011, 0x101, 0x7, 0x7}, {0x2, 0x1f, 0x2, 0x2}, {0x3, 0x7fffffff, 0x371, 0x1ff}, {0x3, 0x1, 0xfd9, 0x329}, {0x20, 0x7, 0x0, 0x9}, {0x7, 0x387, 0x16f, 0xa49}, {0x67, 0x7acc, 0x3, 0x80}, {0x4, 0xfff, 0xff, 0x2e}, {0x0, 0x69, 0x2, 0x4}, {0x2b, 0x10000, 0x20, 0x5}, {0x4, 0xb5, 0x79a, 0x1}, {0x5, 0x3, 0x3, 0xec}, {0x0, 0x8, 0x200, 0xffff}, {0xfffffffb, 0x6, 0x1, 0x7}, {0x3, 0x2, 0x400, 0x8}, {0x5, 0x3ff, 0x81, 0x3}, {0x3, 0x8001, 0x40, 0x7ff}, {0x5, 0xda0, 0x9, 0x3a9}, {0x6, 0x1, 0x4, 0x7}, {0x80, 0x800, 0x6, 0x8001}, {0x1f, 0xfffeffff, 0x4, 0x1}, {0x3fe, 0x8, 0x1, 0x913adec}, {0x9, 0x8, 0x9, 0x401}, {0x28, 0xffff6369, 0x401, 0xe00000}, {0x8, 0x4, 0x40, 0xe4}, {0xfff, 0xaf6, 0x3, 0x2}, {0x10000, 0xffffff80, 0x1, 0x1}, {0x6, 0x401, 0x4, 0x9cd}, {0x7, 0x1000, 0x2, 0x3}, {0x6, 0x6, 0x7, 0x2}, {0x0, 0x7, 0x1, 0x1}, {0x3, 0x6, 0xed2, 0x100}, {0x1, 0x6, 0x2, 0x6}, {0x2, 0x101, 0xbd, 0x81}, {0x8, 0x3, 0x6, 0x8}, {0x1, 0x2, 0x24f, 0x1}, {0x7, 0xfc000000, 0x7, 0xfffffeff}, {0xff, 0x823, 0x6, 0x9}, {0x100, 0x9, 0x139, 0xfffff800}, {0x7, 0x9, 0xffff7c93, 0x4}, {0x9, 0xb587, 0x2, 0x6}, {0x70fd, 0x4, 0x1, 0xdae}, {0x7fffffff, 0x6, 0x4, 0x7}, {0x7, 0x1, 0xf69, 0x401}, {0x4, 0x3, 0x4, 0x80}, {0x3, 0x7, 0x20, 0xbc}, {0x1000, 0x840, 0x2, 0x2}, {0xffff78e0, 0xf6, 0x4, 0x1}, {0x4, 0x0, 0x100}, {0xab, 0x40, 0xd6ee, 0x9}, {0x7, 0x7f, 0x80, 0x21}, {0x1, 0x200000, 0x5}, {0xac, 0x2, 0x2, 0x7}, {0x10001, 0x1, 0x1c, 0x8c76}, {0x6, 0x0, 0x6, 0x7}, {0x8001, 0x401, 0x6, 0xffffff13}, {0x6, 0x400, 0x8, 0xffffffff}, {0x5, 0x10001, 0x6c2d, 0x8123}, {0x800, 0x3ff, 0xa1, 0x7}, {0x101, 0x3, 0x8000, 0x7}, {0x1f, 0x0, 0x41, 0x8}, {0x8, 0x6, 0x100, 0x5}, {0x0, 0x1, 0x36e3, 0x7}, {0xff, 0xfffffff8, 0x2224, 0x3f}, {0x7, 0x8, 0x1, 0x20}, {0x0, 0x64a, 0x2, 0x4}, {0x20, 0x6, 0xd835}, {0x2, 0x6, 0xea, 0x1}, {0x6, 0x9, 0x6, 0x1}, {0x1, 0x800}, {0x800, 0x0, 0x6, 0x1}, {0x7, 0x5, 0x3, 0xef}, {0x3, 0xfffffff7, 0xffffffff, 0x9}, {0xf8c, 0x4ac, 0x7ff, 0x9}, {0x5, 0x343e2fd5, 0x6d, 0x80000000}, {0x3f, 0x1, 0x5, 0x81}, {0x3, 0x9, 0x7, 0x5}, {0xffff7fff, 0x0, 0xff}, {0x800, 0x10001, 0xc2, 0x10001}, {0x10001, 0x4, 0x8, 0x80}, {0x14, 0x8, 0xa443, 0xffffff01}, {0x100, 0x101, 0x9a4, 0x1}, {0x200, 0x80, 0x7, 0x67ca18ba}, {0x3480, 0x40, 0x7, 0x1}, {0x9cd00000, 0x101, 0x0, 0x6}, {0x6, 0xedf, 0x20400000, 0x9}, {0x88b, 0xcff, 0x7, 0x3}, {0x2, 0x400, 0x2, 0x826}, {0x8, 0x9, 0x80, 0x1}, {0x8000, 0x0, 0x68ee, 0x1f}, {0x9, 0x15, 0x2, 0xe8c}, {0x4, 0x8, 0x2, 0xfffff024}, {0x6, 0x0, 0xfa, 0x3}, {0xff, 0x80000000, 0xe78, 0x3f}, {0x6, 0x2, 0x4, 0x1}, {0x9, 0x7, 0xe4c, 0x1}, {0x5, 0x139, 0xa71c, 0x7d}, {0x1, 0x9, 0x7a2, 0x1}, {0x5, 0x10001, 0x7, 0x4}, {0x9, 0x2, 0x0, 0x20}, {0xffffffff, 0x5, 0xfffffffa, 0x125a}, {0xffffffff, 0x7fffffff, 0x5e2, 0x6}, {0x72c, 0x4, 0x101, 0xa9b}, {0x6, 0x56, 0x7, 0x6}, {0xfffffffb, 0xff, 0x5, 0x636d}, {0xfffffffc, 0x8, 0x9, 0x9}, {0x5, 0x5, 0x5, 0x7}, {0x80000001, 0x3, 0x400, 0xa}, {0x8, 0x0, 0x3, 0x4}, {0x9, 0xff, 0x37, 0x5}, {0x3, 0x5, 0x2, 0x7}, {0x8, 0x5, 0x46, 0x20}, {0x3, 0x0, 0x1, 0x8f3}, {0x5, 0x1, 0x7f, 0x66800000}, {0x1, 0x1, 0x214, 0x7ff}, {0x20, 0x1, 0x5, 0x8}, {0xffffffc0, 0x2, 0x2, 0x1e47}, {0x2, 0x2, 0x0, 0x4}, {0x8, 0x7ff, 0x7, 0x100}, {0x80, 0x5, 0x3, 0x1}, {0x6, 0x1f, 0x3, 0x5}, {0x0, 0x114c, 0xfffffff8}, {0x3ff, 0x3, 0x4, 0x80}, {0x1, 0x6, 0xff, 0x800}, {0x0, 0x0, 0x0, 0x1}, {0x5, 0x2, 0x0, 0x2a37}, {0x7fffffff, 0x3f, 0x70, 0x71}, {0x6, 0x0, 0x7, 0x7}, {0x7, 0x1, 0x80000000, 0x3}, {0x0, 0x3, 0x6, 0x6}, {0x272, 0x999b, 0x8, 0x3}, {0x7, 0xfffffffa, 0x2, 0xffff7fff}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1c, 0x7, 0x4e}, {0x7, 0x1, 0x34e9, 0x10001}, {0x80000, 0x1000, 0x5, 0x80000000}, {0x899, 0x3, 0x1, 0x8000}, {0x2, 0x5, 0xffff, 0x3}, {0x1c, 0x400, 0x8, 0x5}, {0x5, 0x8000, 0x8, 0x3}, {0x3ff, 0x3ff, 0x4, 0x10001}, {0xb7, 0x2, 0x4, 0x4}, {0x58, 0x20, 0x1f, 0x81}, {0xb5, 0x7, 0x9}, {0x9, 0x800, 0xfffffff9, 0x8}, {0x10000, 0x200, 0x8, 0x7fff}, {0x101, 0x9, 0x7, 0x800}, {0x800, 0x4, 0x1, 0x9}, {0x5, 0x489, 0x7, 0x6}, {0xff, 0x7, 0x0, 0x163}, {0x1f, 0x1f, 0x2, 0x800}, {0x908, 0xfffffffb, 0x4, 0x2ae}, {0x80000000, 0xcc1, 0x200, 0x2}, {0x99d5, 0x46, 0x5}, {0x6, 0x8, 0x7fffffff, 0xae2}, {0x101, 0x5, 0x8001, 0x7c2}, {0x2ab, 0x8, 0x3bb, 0x6}, {0x7, 0x7fffffff, 0xffff88a5, 0x40}, {0x20, 0x101, 0x49, 0x1}, {0x0, 0xddae, 0x2, 0x8001}, {0x101, 0x8, 0x2, 0x8}, {0xffffffff, 0xfffffffb, 0x3, 0x80}, {0x37d, 0x8, 0xc000000, 0x8}, {0x9, 0x8, 0x307cc6, 0x124}, {0x2, 0xbef6, 0xffffffff, 0x7fffffff}, {0x3, 0xfff, 0x5, 0x8001}, {0x1, 0xc56, 0x7fff, 0x8}, {0x8, 0x1, 0x8, 0x3}, {0x5, 0x5, 0xfe00, 0x3f}, {0x100, 0xfffffffe, 0xd08, 0x3}, {0xffffffc0, 0x200, 0x9f79, 0x2}, {0x1ff, 0x7fff, 0x1, 0x34a8}, {0x0, 0x9, 0x2000, 0xffffdeaa}, {0x7df3, 0x0, 0x9a9, 0x1000}, {0xb38, 0x80000000, 0x4, 0x8}, {0x2, 0x0, 0x8, 0xf74}, {0x502, 0x8000, 0x2c2b, 0x7fffffff}, {0x800, 0x40, 0x546a, 0xfffff800}, {0x8, 0x5, 0x2, 0x9}, {0x4, 0x3f, 0xd40, 0x3}, {0x4, 0x1f, 0xff, 0x5}, {0x7, 0x8, 0x9, 0xc1}, {0x80, 0x7, 0xdb, 0x8}, {0x6, 0x29d0, 0x5, 0x1}, {0x200, 0xfffffffe, 0x4, 0x46e}, {0x7594dc87, 0x3, 0x6, 0xffffffff}, {0x10000, 0x9, 0x8, 0x7}, {0x5, 0x27, 0x1f9, 0xffffffff}, {0x80000000, 0x0, 0x100, 0xb61}, {0x0, 0x200, 0xba2a, 0xc28}, {0x7, 0x3, 0x1}, {0x1, 0xa, 0xffffffff, 0x1}, {0x7ff, 0x3ff, 0x12, 0xffffffff}, {0x3, 0xfffffffd, 0x6, 0x5}, {0x0, 0x6, 0x2, 0xfffffff7}, {0xdb03, 0x1, 0x8f, 0x2}, {0x8001, 0x400, 0x2, 0x9}, {0x3, 0x5, 0x1, 0x3}, {0x3e, 0x3, 0xe63, 0xffffffff}, {0x26fa, 0xff, 0x7, 0x53}, {0x8001, 0x100, 0x9, 0x9}, {0x1, 0x7, 0x200, 0x2}, {0x80, 0x1, 0x6, 0x3}, {0x5, 0x686, 0x5, 0x81}, {0x5, 0x0, 0xe054, 0xfffffc78}, {0x401, 0x5, 0xbb, 0x2}, {0xc1, 0x8, 0x0, 0x5}, {0x0, 0x0, 0x5, 0x3f}, {0x40, 0x4, 0xb893, 0x2}, {0x81, 0x8, 0x4, 0xcf6}, {0x3, 0x4, 0x1000, 0xb9}, {0x20c3, 0x8, 0x1, 0x400}, {0x400, 0x4804, 0x0, 0x1}, {0x200, 0x44, 0xd8a, 0x5}, {0xd9, 0x1, 0x101, 0x15ff}, {0x4, 0x7c9, 0x6, 0x90}, {0x7, 0x0, 0x2, 0x6}, {0xfffffff8, 0xffff, 0x8, 0x1}, {0x7f, 0x7f, 0x0, 0x3}, {0x7fffffff, 0x20, 0x8000, 0x4}, {0xa984, 0x3f, 0x8, 0x4}, {0x3f, 0x9, 0x100, 0xffffff01}, {0x930c, 0x8, 0x5, 0x9955}, {0x8, 0x5, 0xe14f, 0x8}, {0x3177, 0x4, 0x3, 0x5}, {0x0, 0x4, 0x20, 0x400}, {0x3f, 0x401, 0x5, 0xffff7fff}, {0x6, 0x5, 0x7f, 0x1}, {0x800, 0x20, 0x10000, 0x8000}, {0x9, 0x6, 0x4, 0xfffffff8}, {0x3, 0x8, 0x800, 0x8}, {0x80000000, 0x1000, 0xffffff80, 0x1ff}, {0x4, 0x9, 0x1ffce0d7, 0x5}, {0x3f, 0x1, 0x9, 0xcdb1a718}, {0x1e000000, 0x6, 0x0, 0x4}, {0x3, 0x8, 0x69, 0x8}, {0x8000, 0x81, 0x478, 0xc41}, {0x6455664d, 0xc82, 0x7, 0x3}, {0x2, 0x4, 0x7, 0x8}, {0xfffffc01, 0xa14, 0x2, 0x3ff}, {0x3, 0x213e1e63, 0x3, 0x669b000}, {0x1, 0x7, 0x7, 0x5}, {0x6, 0x5d, 0xfff, 0xffffff80}, {0x1, 0x35e, 0x7, 0x40}, {0xffffffff, 0x10000, 0x4, 0x9}, {0x9, 0x2, 0x6, 0xd7a}, {0x2, 0x80000000, 0xffffffff, 0x1f}, {0x8, 0xfffffffb, 0xc2fb, 0x8}, {0x3, 0xe7c, 0xffffffff, 0x7}, {0x6, 0x20, 0x4, 0x7}, {0xfffffff8, 0x9, 0x60e4, 0x3f}, {0x20, 0x9, 0x7fff, 0xfffffffc}, {0x1f, 0x4, 0x3ff, 0x200}, {0x4, 0x1f, 0x81, 0x8001}, {0x6, 0x1, 0x10000, 0x1}, {0x1, 0x7, 0x1, 0x1400}, {0x8001, 0xf4f, 0x6, 0x1}, {0x3, 0x8001, 0x380, 0x400}, {0x0, 0x4, 0x6, 0x80000001}, {0x5, 0x7, 0x200, 0x7}, {0x9, 0x7fffffff, 0x64fb9162, 0xffffffff}, {0x9, 0x6, 0x8, 0x3ff}, {0x81, 0xcb6, 0x1, 0xfc000000}, {0x0, 0x1, 0x10001, 0x80}, {0x80000000, 0x8, 0xbd, 0x313}, {0x3, 0xe6bf, 0x0, 0x1}, {0x2, 0x0, 0x7, 0x1000}, {0xadc3, 0xffffffff, 0x8, 0x4}, {0x29, 0x7, 0x9, 0x41e6}, {0x7f, 0xfffffeff, 0x1, 0x7}, {0xaa, 0xe8, 0x401, 0x4}, {0x6, 0x9, 0x10000, 0x5}, {0x16, 0x5, 0x1, 0x6}, {0x1, 0x7c00, 0x798, 0x3ff}, {0x7fffffff, 0x8, 0x2, 0x8b}, {0x735b, 0x8, 0x101, 0x5}, {0xae, 0xfffffffc, 0x9, 0x7}, {0x8, 0x1, 0x1, 0x1}, {0x5, 0x8, 0x3, 0x3ff}, {0xa9e, 0xea000000, 0x80000001, 0x5}, {0x2, 0x0, 0x400, 0x81}, {0x1, 0x6, 0x101, 0x3f}, {0x12d1, 0xbd6, 0xff, 0xe54}, {0x6, 0x1000, 0x2, 0x5}, {0x53, 0x9, 0x7fff, 0x7}, {0x7fff, 0x4, 0x100, 0x7fff}, {0xfffffffd, 0x0, 0x6, 0x40}, {0x6, 0x3, 0xffffff32, 0x10001}, {0x4, 0xd0, 0x0, 0xfffffff8}, {0x81, 0x7fff, 0x8, 0xfffffffc}, {0x7, 0x2, 0x40, 0x6}, {0x2, 0x0, 0x8001, 0x6}, {0x400, 0x7ff, 0xff, 0x5}, {0x5, 0x8, 0xfe4c, 0xffffff01}, {0x5, 0xfffffffa, 0x2, 0x5}, {0xb9, 0xc5, 0x1, 0x7}, {0x0, 0xcc, 0x207be12f, 0x9}, {0x0, 0x0, 0xffffef15, 0x4}, {0x5, 0x10001, 0xfff, 0x10}, {0x4, 0x10001, 0x1, 0x5}, {0x0, 0x8e, 0xfffffbff, 0x400}, {0x7ff, 0xb16e, 0x9, 0x3ff}, {0xbf5f, 0x7b, 0x1aa, 0x5}, {0x97e, 0x40, 0x6, 0x2}, {0x0, 0x7, 0x2, 0x81}, {0x90000, 0x1, 0x5216, 0x9380}, {0x9ee, 0xa0c, 0x1, 0xffffe36e}, {0xffff, 0xfffffbff, 0xffff8000, 0xffff}, {0x9, 0x4, 0x3, 0x2}, {0x0, 0x4, 0xea, 0x9}, {0x6, 0x0, 0x1ff}, {0x3, 0x401, 0x0, 0x400}, {0x2, 0x0, 0xffff, 0x5}, {0x8, 0xfffffffa, 0x2d58, 0xa50}, {0x7, 0x3, 0x7, 0x1}, {0x0, 0x4, 0x1, 0x101}, {0x2, 0x4, 0x8, 0x20}, {0x9, 0x94e, 0x20, 0x6}, {0x4, 0x200, 0x8, 0xee}, {0x3, 0xa60d93, 0x571e, 0x80000000}, {0x3, 0x101, 0x0, 0x6}, {0x1f, 0x8001, 0x6, 0x5}, {0x87b, 0x2, 0x4, 0x401}, {0x20, 0x7fffffff, 0xd66, 0xffff}, {0x400, 0x51, 0x4, 0x3f}, {0x5, 0xd4, 0x6}, {0x2, 0x3, 0x5, 0x57}, {0x4, 0x9, 0x2, 0x80000001}, {0x6, 0xff, 0x4, 0xf11}, {0x1, 0x4, 0xfffffffe}, {0x1, 0x10001, 0xdc3, 0x2}, {0x500, 0x7, 0x8, 0x364}, {0x6, 0x5, 0x0, 0x1}, {0x10c4, 0x7, 0x48b6, 0x4}, {0x9, 0xe09, 0x101, 0x401}, {0x0, 0xf7, 0x10000, 0x8}, {0x6, 0xc696, 0xfffffffa, 0x20400}, {0x3000000, 0xfff, 0x2, 0x8000}, {0x1, 0xfffffffd, 0x4, 0x5}, {0x5cd0, 0x568f, 0x0, 0x1}, {0x56, 0x10000, 0x4, 0xff}, {0x1, 0x3f, 0x5, 0x401}, {0x80000000, 0x1, 0xe79a}, {0x4, 0x7ff, 0xf0, 0x101}, {0xfffffffa, 0x1, 0x401, 0x7}]}, 0x3f39) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x11) 10:00:50 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "7b4bfac4ee06c9c8eba61c1274cdaf831fd4464a8eac365474383c96de67315e26106232b73319860392a78536b4d49fa44bf404f5d1fe97ba6192da6f1ef971", 0x20}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64=r5, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:00:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) 10:00:50 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "7b4bfac4ee06c9c8eba61c1274cdaf831fd4464a8eac365474383c96de67315e26106232b73319860392a78536b4d49fa44bf404f5d1fe97ba6192da6f1ef971", 0x20}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64=r5, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:00:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) 10:00:50 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "7b4bfac4ee06c9c8eba61c1274cdaf831fd4464a8eac365474383c96de67315e26106232b73319860392a78536b4d49fa44bf404f5d1fe97ba6192da6f1ef971", 0x20}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64=r5, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:00:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_complete(0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x7467, 0x0, 0x4e, 0xff, 0xc, "e9f2bb60623d5b68150aa04a93668e007b4585"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) ioctl$TCFLSH(r0, 0x5411, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) syz_open_pts(r4, 0x400040) ioctl$TIOCNOTTY(r3, 0x5422) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x90800, 0x0) sendfile(r5, r6, 0x0, 0x800000080004103) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 10:00:51 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "7b4bfac4ee06c9c8eba61c1274cdaf831fd4464a8eac365474383c96de67315e26106232b73319860392a78536b4d49fa44bf404f5d1fe97ba6192da6f1ef971", 0x20}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:00:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) 10:00:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0xc6644d93b55c1b89) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 10:00:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ftruncate(r0, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000000)={0x3}) ioctl$TCFLSH(r0, 0x5411, 0x0) 10:00:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) 10:00:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 10:00:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0xc6644d93b55c1b89) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 10:00:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) 10:00:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) ioctl$TCFLSH(r0, 0x5411, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 10:00:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 10:00:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) 10:00:51 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000080), 0x5, 0x240) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000540)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0xa, 0x17, 0x10f, &(0x7f0000000140)="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"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7e) 10:00:51 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "7b4bfac4ee06c9c8eba61c1274cdaf831fd4464a8eac365474383c96de67315e26106232b73319860392a78536b4d49fa44bf404f5d1fe97ba6192da6f1ef971", 0x20}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:00:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0xc6644d93b55c1b89) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 10:00:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 10:00:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TCFLSH(r0, 0x5411, 0x0) 10:00:51 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) 10:00:51 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000080), 0x5, 0x240) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000540)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0xa, 0x17, 0x10f, &(0x7f0000000140)="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"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7e) 10:00:51 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) 10:00:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x53, 0xfffffffffffffffe, 0xb2, 0x80, @buffer={0x0, 0x44, &(0x7f0000000040)=""/68}, &(0x7f00000000c0)="8f6e2601df17c7bbe0c5b2dad6cc272314246354c2260ee785ad055af968bdccb22f2f4f8dd4a9887d889792bccba1d1ba53b3cac32fbf5d357cbf98787c3daced959d175719fb61321029b57fb9aa6dad720de7aa20d64dbcff9e61dc539fd313c01e5cb8d01a272cbbe161a0eb9cc4427ec466528b9d061764c927b70bb1316dca8ad73da8aee8e7ade72c723b9d6c2d4d06669135615f7f5dfc288c2d0a5f4960c90f542798741d1fa9d1c90d8f4fe2cc", &(0x7f0000000180)=""/161, 0x1, 0x20, 0x1, &(0x7f0000000240)}) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000000)) 10:00:51 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) pidfd_send_signal(r0, 0x36, &(0x7f0000000040)={0x28, 0x7fffffff, 0xd7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)) ioctl$TCFLSH(r1, 0x5411, 0x0) 10:00:51 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) 10:00:51 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000080), 0x5, 0x240) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000540)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0xa, 0x17, 0x10f, &(0x7f0000000140)="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"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7e) [ 1591.596101][T21846] mkiss: ax0: crc mode is auto. 10:00:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x101080, 0x0) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000080)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) 10:00:52 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "7b4bfac4ee06c9c8eba61c1274cdaf831fd4464a8eac365474383c96de67315e26106232b73319860392a78536b4d49fa44bf404f5d1fe97ba6192da6f1ef971", 0x20}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:00:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x53, 0xfffffffffffffffe, 0xb2, 0x80, @buffer={0x0, 0x44, &(0x7f0000000040)=""/68}, &(0x7f00000000c0)="8f6e2601df17c7bbe0c5b2dad6cc272314246354c2260ee785ad055af968bdccb22f2f4f8dd4a9887d889792bccba1d1ba53b3cac32fbf5d357cbf98787c3daced959d175719fb61321029b57fb9aa6dad720de7aa20d64dbcff9e61dc539fd313c01e5cb8d01a272cbbe161a0eb9cc4427ec466528b9d061764c927b70bb1316dca8ad73da8aee8e7ade72c723b9d6c2d4d06669135615f7f5dfc288c2d0a5f4960c90f542798741d1fa9d1c90d8f4fe2cc", &(0x7f0000000180)=""/161, 0x1, 0x20, 0x1, &(0x7f0000000240)}) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000000)) 10:00:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) 10:00:52 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000080), 0x5, 0x240) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000540)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0xa, 0x17, 0x10f, &(0x7f0000000140)="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"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7e) 10:00:52 executing program 2: ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2015) ioctl$TCFLSH(r0, 0x5411, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000080)) fcntl$setlease(r0, 0x400, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) getsockopt$inet_dccp_int(r2, 0x21, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x5, 0x3f, 0xa9, 0x58, 0x9, 0x0, 0x4, 0x3f, 0x5, 0x9, 0x20, 0x7ff}, {0x5, 0xb94f, 0xe1, 0x6, 0x6, 0x71, 0x4, 0x35, 0x6, 0x8, 0x86, 0xfd}, {0xfff, 0x3ff, 0x1, 0x3f, 0x3, 0x7f, 0x80, 0x3, 0x7f, 0x20, 0x5, 0x8, 0x1f}], 0x9}) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f00000001c0)={0xb93, 0xff79, 0x12}) 10:00:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) 10:00:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x53, 0xfffffffffffffffe, 0xb2, 0x80, @buffer={0x0, 0x44, &(0x7f0000000040)=""/68}, &(0x7f00000000c0)="8f6e2601df17c7bbe0c5b2dad6cc272314246354c2260ee785ad055af968bdccb22f2f4f8dd4a9887d889792bccba1d1ba53b3cac32fbf5d357cbf98787c3daced959d175719fb61321029b57fb9aa6dad720de7aa20d64dbcff9e61dc539fd313c01e5cb8d01a272cbbe161a0eb9cc4427ec466528b9d061764c927b70bb1316dca8ad73da8aee8e7ade72c723b9d6c2d4d06669135615f7f5dfc288c2d0a5f4960c90f542798741d1fa9d1c90d8f4fe2cc", &(0x7f0000000180)=""/161, 0x1, 0x20, 0x1, &(0x7f0000000240)}) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000000)) 10:00:52 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "7b4bfac4ee06c9c8eba61c1274cdaf831fd4464a8eac365474383c96de67315e26106232b73319860392a78536b4d49fa44bf404f5d1fe97ba6192da6f1ef971", 0x20}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) [ 1593.255611][T21922] sg_write: 25 callbacks suppressed [ 1593.255630][T21922] sg_write: data in/out 808464396/788 bytes for SCSI command 0x30-- guessing data in; [ 1593.255630][T21922] program syz-executor.5 not setting count and/or reply_len properly 10:00:52 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) pidfd_send_signal(r0, 0x36, &(0x7f0000000040)={0x28, 0x7fffffff, 0xd7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)) ioctl$TCFLSH(r1, 0x5411, 0x0) 10:00:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x111980, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x6) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) syz_open_pts(r2, 0x23080) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) 10:00:52 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0}) [ 1593.381298][T21930] sg_write: data in/out 808464396/788 bytes for SCSI command 0x30-- guessing data in; [ 1593.381298][T21930] program syz-executor.5 not setting count and/or reply_len properly 10:00:53 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x5, 0x20402) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000080)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = gettid() r3 = gettid() syz_clone3(&(0x7f00000015c0)={0x10000000, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0, {}, &(0x7f0000000540)=""/57, 0x39, 0x0, &(0x7f0000001580)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x5}, 0x58) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000001640)=r4) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0x42041000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0x11}, &(0x7f0000000100)=""/13, 0xd, &(0x7f0000000140)=""/243, &(0x7f0000000240)=[0xffffffffffffffff, r2, r3, r4], 0x4, {r5}}, 0x58) r6 = syz_open_procfs(r3, &(0x7f00000000c0)='cgroup\x00') syz_clone3(&(0x7f0000000280)={0x42041000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0x11}, &(0x7f0000000100)=""/13, 0xd, &(0x7f0000000140)=""/243, &(0x7f0000000240)=[0xffffffffffffffff, 0x0, 0x0, 0x0], 0x4}, 0x58) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f0000000680)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000006c0)={0x42f, 0x3, {r2}, {0xffffffffffffffff}, 0x2, 0x1ad}) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000740), 0x20082, 0x0) syz_clone3(&(0x7f0000000780)={0x221c0000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x41}, &(0x7f00000003c0)=""/98, 0x62, &(0x7f0000000580)=""/219, &(0x7f0000000700)=[0x0, r7, r8], 0x3, {r9}}, 0x58) sendfile(r1, r6, 0x0, 0x800000080004103) ioctl$FIOCLEX(r6, 0x5451) 10:00:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) 10:00:53 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "7b4bfac4ee06c9c8eba61c1274cdaf831fd4464a8eac365474383c96de67315e26106232b73319860392a78536b4d49fa44bf404f5d1fe97ba6192da6f1ef971", 0x20}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:00:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x111980, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x6) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) syz_open_pts(r2, 0x23080) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) 10:00:53 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0}) 10:00:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x111980, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x6) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) syz_open_pts(r2, 0x23080) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) 10:00:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) 10:00:53 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)="b1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0}) 10:00:53 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "7b4bfac4ee06c9c8eba61c1274cdaf831fd4464a8eac365474383c96de67315e26106232b73319860392a78536b4d49fa44bf404f5d1fe97ba6192da6f1ef971", 0x20}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, 0xffffffffffffffff, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) [ 1593.947747][T21945] sg_write: data in/out 808464396/788 bytes for SCSI command 0x30-- guessing data in; [ 1593.947747][T21945] program syz-executor.5 not setting count and/or reply_len properly 10:00:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x3000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) syz_open_pts(r1, 0x50400) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b1547e204c053800bf6c000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCFLSH(r0, 0x5411, 0x0) 10:00:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x3000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) syz_open_pts(r1, 0x50400) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b1547e204c053800bf6c000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, &(0x7f0000000280)={0x20, 0x6, 0x77, {0x77, 0x6, "2281d253f6e553a3ff4c84fe9c6357dcfaa5d74c8899a7d7324faac97d8c228a56e2d998eaeb3ae70a9810dfa1bd71675c975a59753343c9b5b0e02a48489247a773afb97ea6902cc5398f4b6ea0a779418e76c56a3c95f82189550ef6e7dfb302817a40e51fb02a15162c4ee926ac957ddfeea9fd"}}, &(0x7f0000000080)={0x0, 0x3, 0x6, @string={0x6, 0x3, "e593e3fd"}}, &(0x7f0000000400)={0x0, 0xf, 0x109, {0x5, 0xf, 0x109, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xff, 0xe4, 0x633a}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xdd, 0x10, 0x1, "21fdef5c657ca21c9814de6eb1eddace693b3c92ae16f1b73ee32b75f58b9ce815bf115734f5c75184b916277d0e9eecaecb4fb136b9ac3d6ec5c3ceddf0fa0c53d27ac8ca1e517815aa63d941fb64a4b9d1fdc405d67efa66a186d5fdda13da3c2512d92b5a18c427be9aa6f730e6c778ca8c016824ece8808b5e9be776e3a7b2d86e7b024a449b6ae6762ba504f4d0ec7d92369bec36316da31fbd05d08cd51f47e636ec237d2cd4217704e3cffff1d061dcd111924a88c3ce8663c37f5f663e9213f88b981e167caff6c0581084a68d148fa087000f59fb2c"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x3, 0x40, 0x30, 0xb1}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x25, 0xf000, 0x20}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x0, 0x1, "5d8c4716", "e16e6ae0"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x13, 0x9, 0xf7, 0xbf, 0x1, 0x4}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000540)={0x40, 0x0, 0x1c, "675f7ebf8b772505f93bf736f0487b78d2d975982b31677860400029"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xb5}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000ac0)=ANY=[@ANYBLOB="200008000000c0a72e4f49000100ff000000"], &(0x7f0000000680)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ac9f"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000840)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, &(0x7f0000000880)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "7afe"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000940)={0x40, 0x1c, 0x1}, &(0x7f0000000980)={0x40, 0x1e, 0x1}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x8}}) 10:00:53 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "7b4bfac4ee06c9c8eba61c1274cdaf831fd4464a8eac365474383c96de67315e26106232b73319860392a78536b4d49fa44bf404f5d1fe97ba6192da6f1ef971", 0x20}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, 0xffffffffffffffff, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) [ 1594.042416][T21955] sg_write: data in/out 808464396/788 bytes for SCSI command 0x30-- guessing data in; [ 1594.042416][T21955] program syz-executor.5 not setting count and/or reply_len properly [ 1594.155218][T21960] sg_write: data in/out 808464396/788 bytes for SCSI command 0x30-- guessing data in; [ 1594.155218][T21960] program syz-executor.5 not setting count and/or reply_len properly 10:00:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xbe040, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x100000000, 0x440042) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x6, 0x101002) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0x7f) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x5) ioctl$KDADDIO(r2, 0x4b34, 0x8) 10:00:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) 10:00:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) ioctl$KDENABIO(r0, 0x4b36) ioctl$TCFLSH(r0, 0x5411, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x6, 0x8, 0x2, 0x7, 0x3}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xa) 10:00:53 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "7b4bfac4ee06c9c8eba61c1274cdaf831fd4464a8eac365474383c96de67315e26106232b73319860392a78536b4d49fa44bf404f5d1fe97ba6192da6f1ef971", 0x20}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, 0xffffffffffffffff, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:00:53 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "7b4bfac4ee06c9c8eba61c1274cdaf831fd4464a8eac365474383c96de67315e26106232b73319860392a78536b4d49fa44bf404f5d1fe97ba6192da6f1ef971", 0x20}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, r2, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:00:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1e"}) 10:00:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x3000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) syz_open_pts(r1, 0x50400) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b1547e204c053800bf6c000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCFLSH(r0, 0x5411, 0x0) [ 1594.441432][T21969] sg_write: data in/out 808464396/788 bytes for SCSI command 0x30-- guessing data in; [ 1594.441432][T21969] program syz-executor.5 not setting count and/or reply_len properly 10:00:53 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "7b4bfac4ee06c9c8eba61c1274cdaf831fd4464a8eac365474383c96de67315e26106232b73319860392a78536b4d49fa44bf404f5d1fe97ba6192da6f1ef971", 0x20}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, r2, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:00:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) [ 1594.475124][T21972] sg_write: data in/out 808464396/788 bytes for SCSI command 0x30-- guessing data in; [ 1594.475124][T21972] program syz-executor.5 not setting count and/or reply_len properly [ 1594.537194][T18702] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1594.615758][T21981] sg_write: data in/out 808464396/788 bytes for SCSI command 0x30-- guessing data in; [ 1594.615758][T21981] program syz-executor.5 not setting count and/or reply_len properly [ 1594.784522][T18702] usb 1-1: Using ep0 maxpacket: 32 [ 1594.902078][T18702] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=6c.bf [ 1594.902108][T18702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.905704][T18702] usb 1-1: config 0 descriptor?? [ 1594.939924][T18702] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 1595.417455][T18702] usb 1-1: clie_3_5_startup: get interface number failed: -71 [ 1595.417549][T18702] visor: probe of 1-1:0.0 failed with error -71 [ 1595.420852][T18702] usb 1-1: USB disconnect, device number 33 10:00:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 10:00:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x3000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) syz_open_pts(r1, 0x50400) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b1547e204c053800bf6c000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, &(0x7f0000000280)={0x20, 0x6, 0x77, {0x77, 0x6, "2281d253f6e553a3ff4c84fe9c6357dcfaa5d74c8899a7d7324faac97d8c228a56e2d998eaeb3ae70a9810dfa1bd71675c975a59753343c9b5b0e02a48489247a773afb97ea6902cc5398f4b6ea0a779418e76c56a3c95f82189550ef6e7dfb302817a40e51fb02a15162c4ee926ac957ddfeea9fd"}}, &(0x7f0000000080)={0x0, 0x3, 0x6, @string={0x6, 0x3, "e593e3fd"}}, &(0x7f0000000400)={0x0, 0xf, 0x109, {0x5, 0xf, 0x109, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xff, 0xe4, 0x633a}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xdd, 0x10, 0x1, "21fdef5c657ca21c9814de6eb1eddace693b3c92ae16f1b73ee32b75f58b9ce815bf115734f5c75184b916277d0e9eecaecb4fb136b9ac3d6ec5c3ceddf0fa0c53d27ac8ca1e517815aa63d941fb64a4b9d1fdc405d67efa66a186d5fdda13da3c2512d92b5a18c427be9aa6f730e6c778ca8c016824ece8808b5e9be776e3a7b2d86e7b024a449b6ae6762ba504f4d0ec7d92369bec36316da31fbd05d08cd51f47e636ec237d2cd4217704e3cffff1d061dcd111924a88c3ce8663c37f5f663e9213f88b981e167caff6c0581084a68d148fa087000f59fb2c"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x3, 0x40, 0x30, 0xb1}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x25, 0xf000, 0x20}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x0, 0x1, "5d8c4716", "e16e6ae0"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x13, 0x9, 0xf7, 0xbf, 0x1, 0x4}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000540)={0x40, 0x0, 0x1c, "675f7ebf8b772505f93bf736f0487b78d2d975982b31677860400029"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xb5}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000ac0)=ANY=[@ANYBLOB="200008000000c0a72e4f49000100ff000000"], &(0x7f0000000680)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ac9f"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000840)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, &(0x7f0000000880)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "7afe"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000940)={0x40, 0x1c, 0x1}, &(0x7f0000000980)={0x40, 0x1e, 0x1}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x8}}) 10:00:55 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "7b4bfac4ee06c9c8eba61c1274cdaf831fd4464a8eac365474383c96de67315e26106232b73319860392a78536b4d49fa44bf404f5d1fe97ba6192da6f1ef971", 0x20}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, r2, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:00:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x3000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) syz_open_pts(r1, 0x50400) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b1547e204c053800bf6c000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCFLSH(r0, 0x5411, 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, &(0x7f0000000280)={0x20, 0x6, 0x77, {0x77, 0x6, "2281d253f6e553a3ff4c84fe9c6357dcfaa5d74c8899a7d7324faac97d8c228a56e2d998eaeb3ae70a9810dfa1bd71675c975a59753343c9b5b0e02a48489247a773afb97ea6902cc5398f4b6ea0a779418e76c56a3c95f82189550ef6e7dfb302817a40e51fb02a15162c4ee926ac957ddfeea9fd"}}, &(0x7f0000000080)={0x0, 0x3, 0x6, @string={0x6, 0x3, "e593e3fd"}}, &(0x7f0000000400)={0x0, 0xf, 0x109, {0x5, 0xf, 0x109, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xff, 0xe4, 0x633a}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xdd, 0x10, 0x1, "21fdef5c657ca21c9814de6eb1eddace693b3c92ae16f1b73ee32b75f58b9ce815bf115734f5c75184b916277d0e9eecaecb4fb136b9ac3d6ec5c3ceddf0fa0c53d27ac8ca1e517815aa63d941fb64a4b9d1fdc405d67efa66a186d5fdda13da3c2512d92b5a18c427be9aa6f730e6c778ca8c016824ece8808b5e9be776e3a7b2d86e7b024a449b6ae6762ba504f4d0ec7d92369bec36316da31fbd05d08cd51f47e636ec237d2cd4217704e3cffff1d061dcd111924a88c3ce8663c37f5f663e9213f88b981e167caff6c0581084a68d148fa087000f59fb2c"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x3, 0x40, 0x30, 0xb1}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x25, 0xf000, 0x20}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x0, 0x1, "5d8c4716", "e16e6ae0"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x13, 0x9, 0xf7, 0xbf, 0x1, 0x4}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000540)={0x40, 0x0, 0x1c, "675f7ebf8b772505f93bf736f0487b78d2d975982b31677860400029"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xb5}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000ac0)=ANY=[@ANYBLOB="200008000000c0a72e4f49000100ff000000"], &(0x7f0000000680)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ac9f"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000840)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, &(0x7f0000000880)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "7afe"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000940)={0x40, 0x1c, 0x1}, &(0x7f0000000980)={0x40, 0x1e, 0x1}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x8}}) 10:00:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:00:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x3000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) syz_open_pts(r1, 0x50400) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b1547e204c053800bf6c000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCFLSH(r0, 0x5411, 0x0) 10:00:55 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "7b4bfac4ee06c9c8eba61c1274cdaf831fd4464a8eac365474383c96de67315e26106232b73319860392a78536b4d49fa44bf404f5d1fe97ba6192da6f1ef971", 0x20}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC, @ANYRESOCT=r0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRES64=0x0, @ANYRES32=r1, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) [ 1595.957099][T21992] sg_write: data in/out 808464396/788 bytes for SCSI command 0x30-- guessing data in; [ 1595.957099][T21992] program syz-executor.5 not setting count and/or reply_len properly 10:00:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:00:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x3000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) syz_open_pts(r1, 0x50400) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b1547e204c053800bf6c000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCFLSH(r0, 0x5411, 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, &(0x7f0000000280)={0x20, 0x6, 0x77, {0x77, 0x6, "2281d253f6e553a3ff4c84fe9c6357dcfaa5d74c8899a7d7324faac97d8c228a56e2d998eaeb3ae70a9810dfa1bd71675c975a59753343c9b5b0e02a48489247a773afb97ea6902cc5398f4b6ea0a779418e76c56a3c95f82189550ef6e7dfb302817a40e51fb02a15162c4ee926ac957ddfeea9fd"}}, &(0x7f0000000080)={0x0, 0x3, 0x6, @string={0x6, 0x3, "e593e3fd"}}, &(0x7f0000000400)={0x0, 0xf, 0x109, {0x5, 0xf, 0x109, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xff, 0xe4, 0x633a}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xdd, 0x10, 0x1, "21fdef5c657ca21c9814de6eb1eddace693b3c92ae16f1b73ee32b75f58b9ce815bf115734f5c75184b916277d0e9eecaecb4fb136b9ac3d6ec5c3ceddf0fa0c53d27ac8ca1e517815aa63d941fb64a4b9d1fdc405d67efa66a186d5fdda13da3c2512d92b5a18c427be9aa6f730e6c778ca8c016824ece8808b5e9be776e3a7b2d86e7b024a449b6ae6762ba504f4d0ec7d92369bec36316da31fbd05d08cd51f47e636ec237d2cd4217704e3cffff1d061dcd111924a88c3ce8663c37f5f663e9213f88b981e167caff6c0581084a68d148fa087000f59fb2c"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x3, 0x40, 0x30, 0xb1}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x25, 0xf000, 0x20}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x0, 0x1, "5d8c4716", "e16e6ae0"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x13, 0x9, 0xf7, 0xbf, 0x1, 0x4}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000540)={0x40, 0x0, 0x1c, "675f7ebf8b772505f93bf736f0487b78d2d975982b31677860400029"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xb5}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000ac0)=ANY=[@ANYBLOB="200008000000c0a72e4f49000100ff000000"], &(0x7f0000000680)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ac9f"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000840)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, &(0x7f0000000880)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "7afe"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000940)={0x40, 0x1c, 0x1}, &(0x7f0000000980)={0x40, 0x1e, 0x1}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x8}}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000140)="b91e9f1d7f5069f9083f807bd2a0138e7b5c2cfb90a861ca9da64b69c250c7541d2de56a5f0ddc6ff9bb3281571c72b13f73d8637e707f498b4657e765a8af01d5dd9252b00ef260188f2453d041d3f4c53ce0077d631bdae2720525f016d14676ec84a72517996a8ab172211c533730b7ac6c57e42592ba6bb312a5728ddcdb55dc5e85c46e88dc55c1a073e3e188f666974f63c208561a0902b94d87ccbc0b6b838aaa36317b375630376472872a3b527f3fe4ad03132ece475d40257a40b69ebb0c") syz_open_dev$tty1(0xc, 0x4, 0x1) 10:00:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x3000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) syz_open_pts(r1, 0x50400) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b1547e204c053800bf6c000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCFLSH(r0, 0x5411, 0x0) 10:00:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x3000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) syz_open_pts(r1, 0x50400) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b1547e204c053800bf6c000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, &(0x7f0000000280)={0x20, 0x6, 0x77, {0x77, 0x6, "2281d253f6e553a3ff4c84fe9c6357dcfaa5d74c8899a7d7324faac97d8c228a56e2d998eaeb3ae70a9810dfa1bd71675c975a59753343c9b5b0e02a48489247a773afb97ea6902cc5398f4b6ea0a779418e76c56a3c95f82189550ef6e7dfb302817a40e51fb02a15162c4ee926ac957ddfeea9fd"}}, &(0x7f0000000080)={0x0, 0x3, 0x6, @string={0x6, 0x3, "e593e3fd"}}, &(0x7f0000000400)={0x0, 0xf, 0x109, {0x5, 0xf, 0x109, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xff, 0xe4, 0x633a}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xdd, 0x10, 0x1, "21fdef5c657ca21c9814de6eb1eddace693b3c92ae16f1b73ee32b75f58b9ce815bf115734f5c75184b916277d0e9eecaecb4fb136b9ac3d6ec5c3ceddf0fa0c53d27ac8ca1e517815aa63d941fb64a4b9d1fdc405d67efa66a186d5fdda13da3c2512d92b5a18c427be9aa6f730e6c778ca8c016824ece8808b5e9be776e3a7b2d86e7b024a449b6ae6762ba504f4d0ec7d92369bec36316da31fbd05d08cd51f47e636ec237d2cd4217704e3cffff1d061dcd111924a88c3ce8663c37f5f663e9213f88b981e167caff6c0581084a68d148fa087000f59fb2c"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x3, 0x40, 0x30, 0xb1}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x25, 0xf000, 0x20}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x0, 0x1, "5d8c4716", "e16e6ae0"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x13, 0x9, 0xf7, 0xbf, 0x1, 0x4}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000540)={0x40, 0x0, 0x1c, "675f7ebf8b772505f93bf736f0487b78d2d975982b31677860400029"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xb5}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000ac0)=ANY=[@ANYBLOB="200008000000c0a72e4f49000100ff000000"], &(0x7f0000000680)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ac9f"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000840)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, &(0x7f0000000880)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "7afe"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000940)={0x40, 0x1c, 0x1}, &(0x7f0000000980)={0x40, 0x1e, 0x1}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x8}}) 10:00:55 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "7b4bfac4ee06c9c8eba61c1274cdaf831fd4464a8eac365474383c96de67315e26106232b73319860392a78536b4d49fa44bf404f5d1fe97ba6192da6f1ef971", 0x20}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC, @ANYRESOCT=r0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRES64=0x0, @ANYRES32=r1, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) [ 1596.207976][T22007] Error: Driver 'raw-gadget' is already registered, aborting... [ 1596.207990][T22007] UDC core: USB Raw Gadget: driver registration failed: -16 10:00:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000080)=0xfff, 0x4) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) 10:00:56 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "7b4bfac4ee06c9c8eba61c1274cdaf831fd4464a8eac365474383c96de67315e26106232b73319860392a78536b4d49fa44bf404f5d1fe97ba6192da6f1ef971", 0x20}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC, @ANYRESOCT=r0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRES64=0x0, @ANYRES32=r1, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:00:56 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8eb40, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x11) [ 1596.208009][T22007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1596.417331][ T3686] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1596.667164][ T3686] usb 2-1: Using ep0 maxpacket: 32 [ 1596.767793][T22017] sg_write: data in/out 926365459/792 bytes for SCSI command 0x0-- guessing data in; [ 1596.767793][T22017] program syz-executor.4 not setting count and/or reply_len properly [ 1596.798010][ T3686] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=6c.bf [ 1596.798042][ T3686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.802353][ T3686] usb 2-1: config 0 descriptor?? [ 1596.838797][ T3686] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 1597.381063][ T3686] usb 2-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 1597.603274][T18477] usb 2-1: USB disconnect, device number 33 [ 1597.605810][T18477] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 1597.606190][T18477] visor 2-1:0.0: device disconnected 10:00:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) fstat(r0, &(0x7f0000000140)) 10:00:57 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8eb40, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x11) 10:00:57 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x6, 0x1d5000) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x800, 0x2}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="44000000100009040000000000000000e90800000ba129d0975a6d585bdea44b8b433eaa47182d870b64551b21d7a0d12d585b66257d", @ANYRES32=r4, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c0005800500010000040000"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', r4, 0x29, 0x40, 0x0, 0x2, 0x0, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x80, 0x7fe, 0x558a}}) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000140)="0566409ec79b2beec822122d7b0176b5a3ce7beb627806cf8aae70cf9fc5b7e3a48fa4c2502b4aedfff2bd4432c52c2a3a15d86f", 0x34}, {&(0x7f0000000180)="1ff6f1784b4c555cccf0314155356517cca7931394810ce049aea5604ac8bbbf801e1ed6264098e634e3244abed297eb3d27ee9f5af295cc584d352e3c86a967d738f3772405d028d8f76226476895e8e3c22783f16075", 0x57}, {&(0x7f0000000200)="4ab1b9e59adf37bfe9c62570228306600f34b533a62c84c2a8f65c69f6bc24883a5174243d60ab6c01eda84eadfcaa63bd481d8283c41a93ef8aa0f42cadf7b4e23e24e9ea8a9b1a4358ff4e651e28c66ebfe5ea5c60221f08fcb828efc337fa5d049eeeed65b756f676aa73f7b371907796726da1fd32faecba89ffa7d8cf732313ced540ca6f46eabb32459ba1ca6005b53b", 0x93}], 0x3, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @remote}}}, @ip_retopts={{0xd8, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xc6, 0x1, 0x4, [{@empty, 0xe95f}, {@remote, 0x800}]}, @timestamp={0x44, 0x4, 0x5a, 0x0, 0x2}, @rr={0x7, 0xb, 0xd3, [@broadcast, @broadcast]}, @noop, @rr={0x7, 0xf, 0x4d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0x17}]}, @rr={0x7, 0x17, 0x93, [@loopback, @multicast1, @private=0xa010101, @empty, @private=0xa010101]}, @timestamp_addr={0x44, 0x14, 0x83, 0x1, 0xb, [{@multicast1, 0xfffffff8}, {@empty, 0x1}]}, @lsrr={0x83, 0x13, 0x7c, [@multicast2, @private=0xa010101, @rand_addr=0x64010102, @local]}, @cipso={0x86, 0x56, 0x3, [{0x2, 0xa, "81b5e5a52906bad5"}, {0x5, 0xb, "35efd0cec4eae212aa"}, {0x1, 0xf, "02d36c8a772812db9f41c4eb31"}, {0x0, 0x9, "bb7f69beba885c"}, {0x1, 0x10, "4da75ea769cd1cad2c5d123f2360"}, {0x6, 0x6, "0788b292"}, {0x0, 0xd, "d7a1e27b9298cc393ffbeb"}]}, @noop]}}}, @ip_ttl={{0x14}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x4, 0x8f, 0x3, 0x1}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0xc, 0x0, 0xa, [0x3, 0x7, 0x80000001, 0x1ff, 0x730f, 0x3ea]}, @timestamp_addr={0x44, 0x44, 0x6f, 0x1, 0x7, [{@local, 0x1f}, {@multicast2, 0x10001}, {@empty, 0x7}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x1}, {@local, 0xb35e}, {@rand_addr=0x64010102}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @timestamp_addr={0x44, 0x24, 0x59, 0x1, 0x1, [{@multicast1}, {@broadcast, 0x20}, {@rand_addr=0x64010102, 0x80}, {@loopback, 0x2}]}, @noop, @rr={0x7, 0x7, 0x88, [@remote]}, @timestamp={0x44, 0x18, 0x83, 0x0, 0x6, [0xfffffff7, 0x10000, 0x9, 0x81, 0x5]}]}}}], 0x240}, 0x40000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x7e) 10:00:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) ioctl$TCFLSH(r0, 0x5411, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000040)={0x3, 0x3dd38000000, 0x3ff, 0x2, 0x5, 0x80000000}) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000000)) 10:00:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@empty, 0x4e24, 0x0, 0x4e24, 0x9, 0x2, 0x80, 0x10, 0x89, 0x0, r3}, {0x9, 0x8000000000000000, 0x8d, 0x8, 0x20, 0x0, 0x9, 0x11}, {0x0, 0x101, 0x0, 0x100000000}, 0xd0af, 0x6e6bbd, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d4, 0xff}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x34ff, 0x0, 0x1, 0x5, 0x6, 0x20, 0x6}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000012", @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffff000000653000"]) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 10:00:57 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "7b4bfac4ee06c9c8eba61c1274cdaf831fd4464a8eac365474383c96de67315e26106232b73319860392a78536b4d49fa44bf404f5d1fe97ba6192da6f1ef971", 0x20}, 0x48, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:00:57 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8eb40, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x11) 10:00:57 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x6, 0x1d5000) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x800, 0x2}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="44000000100009040000000000000000e90800000ba129d0975a6d585bdea44b8b433eaa47182d870b64551b21d7a0d12d585b66257d", @ANYRES32=r4, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c0005800500010000040000"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', r4, 0x29, 0x40, 0x0, 0x2, 0x0, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x80, 0x7fe, 0x558a}}) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000140)="0566409ec79b2beec822122d7b0176b5a3ce7beb627806cf8aae70cf9fc5b7e3a48fa4c2502b4aedfff2bd4432c52c2a3a15d86f", 0x34}, {&(0x7f0000000180)="1ff6f1784b4c555cccf0314155356517cca7931394810ce049aea5604ac8bbbf801e1ed6264098e634e3244abed297eb3d27ee9f5af295cc584d352e3c86a967d738f3772405d028d8f76226476895e8e3c22783f16075", 0x57}, {&(0x7f0000000200)="4ab1b9e59adf37bfe9c62570228306600f34b533a62c84c2a8f65c69f6bc24883a5174243d60ab6c01eda84eadfcaa63bd481d8283c41a93ef8aa0f42cadf7b4e23e24e9ea8a9b1a4358ff4e651e28c66ebfe5ea5c60221f08fcb828efc337fa5d049eeeed65b756f676aa73f7b371907796726da1fd32faecba89ffa7d8cf732313ced540ca6f46eabb32459ba1ca6005b53b", 0x93}], 0x3, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @remote}}}, @ip_retopts={{0xd8, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xc6, 0x1, 0x4, [{@empty, 0xe95f}, {@remote, 0x800}]}, @timestamp={0x44, 0x4, 0x5a, 0x0, 0x2}, @rr={0x7, 0xb, 0xd3, [@broadcast, @broadcast]}, @noop, @rr={0x7, 0xf, 0x4d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0x17}]}, @rr={0x7, 0x17, 0x93, [@loopback, @multicast1, @private=0xa010101, @empty, @private=0xa010101]}, @timestamp_addr={0x44, 0x14, 0x83, 0x1, 0xb, [{@multicast1, 0xfffffff8}, {@empty, 0x1}]}, @lsrr={0x83, 0x13, 0x7c, [@multicast2, @private=0xa010101, @rand_addr=0x64010102, @local]}, @cipso={0x86, 0x56, 0x3, [{0x2, 0xa, "81b5e5a52906bad5"}, {0x5, 0xb, "35efd0cec4eae212aa"}, {0x1, 0xf, "02d36c8a772812db9f41c4eb31"}, {0x0, 0x9, "bb7f69beba885c"}, {0x1, 0x10, "4da75ea769cd1cad2c5d123f2360"}, {0x6, 0x6, "0788b292"}, {0x0, 0xd, "d7a1e27b9298cc393ffbeb"}]}, @noop]}}}, @ip_ttl={{0x14}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x4, 0x8f, 0x3, 0x1}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0xc, 0x0, 0xa, [0x3, 0x7, 0x80000001, 0x1ff, 0x730f, 0x3ea]}, @timestamp_addr={0x44, 0x44, 0x6f, 0x1, 0x7, [{@local, 0x1f}, {@multicast2, 0x10001}, {@empty, 0x7}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x1}, {@local, 0xb35e}, {@rand_addr=0x64010102}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @timestamp_addr={0x44, 0x24, 0x59, 0x1, 0x1, [{@multicast1}, {@broadcast, 0x20}, {@rand_addr=0x64010102, 0x80}, {@loopback, 0x2}]}, @noop, @rr={0x7, 0x7, 0x88, [@remote]}, @timestamp={0x44, 0x18, 0x83, 0x0, 0x6, [0xfffffff7, 0x10000, 0x9, 0x81, 0x5]}]}}}], 0x240}, 0x40000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x7e) 10:00:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x3000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) syz_open_pts(r1, 0x50400) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b1547e204c053800bf6c000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCFLSH(r0, 0x5411, 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, &(0x7f0000000280)={0x20, 0x6, 0x77, {0x77, 0x6, "2281d253f6e553a3ff4c84fe9c6357dcfaa5d74c8899a7d7324faac97d8c228a56e2d998eaeb3ae70a9810dfa1bd71675c975a59753343c9b5b0e02a48489247a773afb97ea6902cc5398f4b6ea0a779418e76c56a3c95f82189550ef6e7dfb302817a40e51fb02a15162c4ee926ac957ddfeea9fd"}}, &(0x7f0000000080)={0x0, 0x3, 0x6, @string={0x6, 0x3, "e593e3fd"}}, &(0x7f0000000400)={0x0, 0xf, 0x109, {0x5, 0xf, 0x109, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xff, 0xe4, 0x633a}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xdd, 0x10, 0x1, "21fdef5c657ca21c9814de6eb1eddace693b3c92ae16f1b73ee32b75f58b9ce815bf115734f5c75184b916277d0e9eecaecb4fb136b9ac3d6ec5c3ceddf0fa0c53d27ac8ca1e517815aa63d941fb64a4b9d1fdc405d67efa66a186d5fdda13da3c2512d92b5a18c427be9aa6f730e6c778ca8c016824ece8808b5e9be776e3a7b2d86e7b024a449b6ae6762ba504f4d0ec7d92369bec36316da31fbd05d08cd51f47e636ec237d2cd4217704e3cffff1d061dcd111924a88c3ce8663c37f5f663e9213f88b981e167caff6c0581084a68d148fa087000f59fb2c"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x3, 0x40, 0x30, 0xb1}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x25, 0xf000, 0x20}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x0, 0x1, "5d8c4716", "e16e6ae0"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x13, 0x9, 0xf7, 0xbf, 0x1, 0x4}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000540)={0x40, 0x0, 0x1c, "675f7ebf8b772505f93bf736f0487b78d2d975982b31677860400029"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xb5}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000ac0)=ANY=[@ANYBLOB="200008000000c0a72e4f49000100ff000000"], &(0x7f0000000680)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ac9f"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000840)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, &(0x7f0000000880)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "7afe"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000940)={0x40, 0x1c, 0x1}, &(0x7f0000000980)={0x40, 0x1e, 0x1}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x8}}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000140)="b91e9f1d7f5069f9083f807bd2a0138e7b5c2cfb90a861ca9da64b69c250c7541d2de56a5f0ddc6ff9bb3281571c72b13f73d8637e707f498b4657e765a8af01d5dd9252b00ef260188f2453d041d3f4c53ce0077d631bdae2720525f016d14676ec84a72517996a8ab172211c533730b7ac6c57e42592ba6bb312a5728ddcdb55dc5e85c46e88dc55c1a073e3e188f666974f63c208561a0902b94d87ccbc0b6b838aaa36317b375630376472872a3b527f3fe4ad03132ece475d40257a40b69ebb0c") r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) r6 = syz_open_dev$vcsu(&(0x7f0000000040), 0x17, 0x40) ioctl$TCFLSH(r6, 0x540b, 0x2) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) 10:00:57 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x6, 0x1d5000) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x800, 0x2}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="44000000100009040000000000000000e90800000ba129d0975a6d585bdea44b8b433eaa47182d870b64551b21d7a0d12d585b66257d", @ANYRES32=r4, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c0005800500010000040000"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', r4, 0x29, 0x40, 0x0, 0x2, 0x0, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x80, 0x7fe, 0x558a}}) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000140)="0566409ec79b2beec822122d7b0176b5a3ce7beb627806cf8aae70cf9fc5b7e3a48fa4c2502b4aedfff2bd4432c52c2a3a15d86f", 0x34}, {&(0x7f0000000180)="1ff6f1784b4c555cccf0314155356517cca7931394810ce049aea5604ac8bbbf801e1ed6264098e634e3244abed297eb3d27ee9f5af295cc584d352e3c86a967d738f3772405d028d8f76226476895e8e3c22783f16075", 0x57}, {&(0x7f0000000200)="4ab1b9e59adf37bfe9c62570228306600f34b533a62c84c2a8f65c69f6bc24883a5174243d60ab6c01eda84eadfcaa63bd481d8283c41a93ef8aa0f42cadf7b4e23e24e9ea8a9b1a4358ff4e651e28c66ebfe5ea5c60221f08fcb828efc337fa5d049eeeed65b756f676aa73f7b371907796726da1fd32faecba89ffa7d8cf732313ced540ca6f46eabb32459ba1ca6005b53b", 0x93}], 0x3, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @remote}}}, @ip_retopts={{0xd8, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xc6, 0x1, 0x4, [{@empty, 0xe95f}, {@remote, 0x800}]}, @timestamp={0x44, 0x4, 0x5a, 0x0, 0x2}, @rr={0x7, 0xb, 0xd3, [@broadcast, @broadcast]}, @noop, @rr={0x7, 0xf, 0x4d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0x17}]}, @rr={0x7, 0x17, 0x93, [@loopback, @multicast1, @private=0xa010101, @empty, @private=0xa010101]}, @timestamp_addr={0x44, 0x14, 0x83, 0x1, 0xb, [{@multicast1, 0xfffffff8}, {@empty, 0x1}]}, @lsrr={0x83, 0x13, 0x7c, [@multicast2, @private=0xa010101, @rand_addr=0x64010102, @local]}, @cipso={0x86, 0x56, 0x3, [{0x2, 0xa, "81b5e5a52906bad5"}, {0x5, 0xb, "35efd0cec4eae212aa"}, {0x1, 0xf, "02d36c8a772812db9f41c4eb31"}, {0x0, 0x9, "bb7f69beba885c"}, {0x1, 0x10, "4da75ea769cd1cad2c5d123f2360"}, {0x6, 0x6, "0788b292"}, {0x0, 0xd, "d7a1e27b9298cc393ffbeb"}]}, @noop]}}}, @ip_ttl={{0x14}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x4, 0x8f, 0x3, 0x1}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0xc, 0x0, 0xa, [0x3, 0x7, 0x80000001, 0x1ff, 0x730f, 0x3ea]}, @timestamp_addr={0x44, 0x44, 0x6f, 0x1, 0x7, [{@local, 0x1f}, {@multicast2, 0x10001}, {@empty, 0x7}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x1}, {@local, 0xb35e}, {@rand_addr=0x64010102}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @timestamp_addr={0x44, 0x24, 0x59, 0x1, 0x1, [{@multicast1}, {@broadcast, 0x20}, {@rand_addr=0x64010102, 0x80}, {@loopback, 0x2}]}, @noop, @rr={0x7, 0x7, 0x88, [@remote]}, @timestamp={0x44, 0x18, 0x83, 0x0, 0x6, [0xfffffff7, 0x10000, 0x9, 0x81, 0x5]}]}}}], 0x240}, 0x40000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x7e) 10:00:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0xc0189436, &(0x7f0000000000)=0x7e) 10:00:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0xc0189436, &(0x7f0000000000)=0x7e) 10:00:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x3000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) syz_open_pts(r1, 0x50400) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b1547e204c053800bf6c000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCFLSH(r0, 0x5411, 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, &(0x7f0000000280)={0x20, 0x6, 0x77, {0x77, 0x6, "2281d253f6e553a3ff4c84fe9c6357dcfaa5d74c8899a7d7324faac97d8c228a56e2d998eaeb3ae70a9810dfa1bd71675c975a59753343c9b5b0e02a48489247a773afb97ea6902cc5398f4b6ea0a779418e76c56a3c95f82189550ef6e7dfb302817a40e51fb02a15162c4ee926ac957ddfeea9fd"}}, &(0x7f0000000080)={0x0, 0x3, 0x6, @string={0x6, 0x3, "e593e3fd"}}, &(0x7f0000000400)={0x0, 0xf, 0x109, {0x5, 0xf, 0x109, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xff, 0xe4, 0x633a}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xdd, 0x10, 0x1, "21fdef5c657ca21c9814de6eb1eddace693b3c92ae16f1b73ee32b75f58b9ce815bf115734f5c75184b916277d0e9eecaecb4fb136b9ac3d6ec5c3ceddf0fa0c53d27ac8ca1e517815aa63d941fb64a4b9d1fdc405d67efa66a186d5fdda13da3c2512d92b5a18c427be9aa6f730e6c778ca8c016824ece8808b5e9be776e3a7b2d86e7b024a449b6ae6762ba504f4d0ec7d92369bec36316da31fbd05d08cd51f47e636ec237d2cd4217704e3cffff1d061dcd111924a88c3ce8663c37f5f663e9213f88b981e167caff6c0581084a68d148fa087000f59fb2c"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x3, 0x40, 0x30, 0xb1}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x25, 0xf000, 0x20}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x0, 0x1, "5d8c4716", "e16e6ae0"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x13, 0x9, 0xf7, 0xbf, 0x1, 0x4}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000540)={0x40, 0x0, 0x1c, "675f7ebf8b772505f93bf736f0487b78d2d975982b31677860400029"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xb5}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000ac0)=ANY=[@ANYBLOB="200008000000c0a72e4f49000100ff000000"], &(0x7f0000000680)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ac9f"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000840)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, &(0x7f0000000880)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "7afe"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000940)={0x40, 0x1c, 0x1}, &(0x7f0000000980)={0x40, 0x1e, 0x1}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x8}}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000140)="b91e9f1d7f5069f9083f807bd2a0138e7b5c2cfb90a861ca9da64b69c250c7541d2de56a5f0ddc6ff9bb3281571c72b13f73d8637e707f498b4657e765a8af01d5dd9252b00ef260188f2453d041d3f4c53ce0077d631bdae2720525f016d14676ec84a72517996a8ab172211c533730b7ac6c57e42592ba6bb312a5728ddcdb55dc5e85c46e88dc55c1a073e3e188f666974f63c208561a0902b94d87ccbc0b6b838aaa36317b375630376472872a3b527f3fe4ad03132ece475d40257a40b69ebb0c") r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) r6 = syz_open_dev$vcsu(&(0x7f0000000040), 0x17, 0x40) ioctl$TCFLSH(r6, 0x540b, 0x2) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) 10:00:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0xc0045878, &(0x7f0000000000)=0x7e) 10:00:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0xc0189436, &(0x7f0000000000)=0x7e) 10:00:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@empty, 0x4e24, 0x0, 0x4e24, 0x9, 0x2, 0x80, 0x10, 0x89, 0x0, r3}, {0x9, 0x8000000000000000, 0x8d, 0x8, 0x20, 0x0, 0x9, 0x11}, {0x0, 0x101, 0x0, 0x100000000}, 0xd0af, 0x6e6bbd, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d4, 0xff}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x34ff, 0x0, 0x1, 0x5, 0x6, 0x20, 0x6}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000012", @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffff000000653000"]) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 10:00:58 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYRESOCT, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES64=0x0, @ANYRES32=r1, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:00:58 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "7b4bfac4ee06c9c8eba61c1274cdaf831fd4464a8eac365474383c96de67315e26106232b73319860392a78536b4d49fa44bf404f5d1fe97ba6192da6f1ef971", 0x20}, 0x48, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) [ 1598.220778][T22032] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1598.346876][T22043] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1598.475972][T22049] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 10:00:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0xc0045878, &(0x7f0000000000)=0x7e) 10:00:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0xc0045878, &(0x7f0000000000)=0x7e) 10:00:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0xc0045878, &(0x7f0000000000)=0x7e) 10:00:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000680)={0x53, 0xfffffffffffffffe, 0xa2, 0x5, @scatter={0x6, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000080)=""/191, 0xbf}, {&(0x7f0000000140)=""/243, 0xf3}, {&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000000300)=""/39, 0x27}, {&(0x7f0000000380)=""/191, 0xbf}]}, &(0x7f00000004c0)="0637f2934e99178f8de3da575f17020b4562b2cae373ac7950471cb62a44288dc5ca22725cbc093692754b4b4493ff40a73d8173abc84848f897ab2de59a6647713ce45c74309dbdda0357f237bd4a1ad0f4b67294c2fbf149acd67b59f67ab0f135e3abc5ce26c26d66d03025b6264b524de91213cf17bfa8036583f8689553646d745320f732cd96ed373cee7710c3e66142fbb132c2b429eac468450f8b87e0b9", &(0x7f0000000580)=""/137, 0xd4, 0x10, 0x2, &(0x7f0000000640)}) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) 10:00:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x3000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) syz_open_pts(r1, 0x50400) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b1547e204c053800bf6c000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCFLSH(r0, 0x5411, 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, &(0x7f0000000280)={0x20, 0x6, 0x77, {0x77, 0x6, "2281d253f6e553a3ff4c84fe9c6357dcfaa5d74c8899a7d7324faac97d8c228a56e2d998eaeb3ae70a9810dfa1bd71675c975a59753343c9b5b0e02a48489247a773afb97ea6902cc5398f4b6ea0a779418e76c56a3c95f82189550ef6e7dfb302817a40e51fb02a15162c4ee926ac957ddfeea9fd"}}, &(0x7f0000000080)={0x0, 0x3, 0x6, @string={0x6, 0x3, "e593e3fd"}}, &(0x7f0000000400)={0x0, 0xf, 0x109, {0x5, 0xf, 0x109, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xff, 0xe4, 0x633a}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xdd, 0x10, 0x1, "21fdef5c657ca21c9814de6eb1eddace693b3c92ae16f1b73ee32b75f58b9ce815bf115734f5c75184b916277d0e9eecaecb4fb136b9ac3d6ec5c3ceddf0fa0c53d27ac8ca1e517815aa63d941fb64a4b9d1fdc405d67efa66a186d5fdda13da3c2512d92b5a18c427be9aa6f730e6c778ca8c016824ece8808b5e9be776e3a7b2d86e7b024a449b6ae6762ba504f4d0ec7d92369bec36316da31fbd05d08cd51f47e636ec237d2cd4217704e3cffff1d061dcd111924a88c3ce8663c37f5f663e9213f88b981e167caff6c0581084a68d148fa087000f59fb2c"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x3, 0x40, 0x30, 0xb1}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x25, 0xf000, 0x20}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x0, 0x1, "5d8c4716", "e16e6ae0"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x13, 0x9, 0xf7, 0xbf, 0x1, 0x4}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000540)={0x40, 0x0, 0x1c, "675f7ebf8b772505f93bf736f0487b78d2d975982b31677860400029"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xb5}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000ac0)=ANY=[@ANYBLOB="200008000000c0a72e4f49000100ff000000"], &(0x7f0000000680)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ac9f"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000840)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, &(0x7f0000000880)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "7afe"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000940)={0x40, 0x1c, 0x1}, &(0x7f0000000980)={0x40, 0x1e, 0x1}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x8}}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000140)="b91e9f1d7f5069f9083f807bd2a0138e7b5c2cfb90a861ca9da64b69c250c7541d2de56a5f0ddc6ff9bb3281571c72b13f73d8637e707f498b4657e765a8af01d5dd9252b00ef260188f2453d041d3f4c53ce0077d631bdae2720525f016d14676ec84a72517996a8ab172211c533730b7ac6c57e42592ba6bb312a5728ddcdb55dc5e85c46e88dc55c1a073e3e188f666974f63c208561a0902b94d87ccbc0b6b838aaa36317b375630376472872a3b527f3fe4ad03132ece475d40257a40b69ebb0c") r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) r6 = syz_open_dev$vcsu(&(0x7f0000000040), 0x17, 0x40) ioctl$TCFLSH(r6, 0x540b, 0x2) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) 10:00:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000680)={0x53, 0xfffffffffffffffe, 0xa2, 0x5, @scatter={0x6, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000080)=""/191, 0xbf}, {&(0x7f0000000140)=""/243, 0xf3}, {&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000000300)=""/39, 0x27}, {&(0x7f0000000380)=""/191, 0xbf}]}, &(0x7f00000004c0)="0637f2934e99178f8de3da575f17020b4562b2cae373ac7950471cb62a44288dc5ca22725cbc093692754b4b4493ff40a73d8173abc84848f897ab2de59a6647713ce45c74309dbdda0357f237bd4a1ad0f4b67294c2fbf149acd67b59f67ab0f135e3abc5ce26c26d66d03025b6264b524de91213cf17bfa8036583f8689553646d745320f732cd96ed373cee7710c3e66142fbb132c2b429eac468450f8b87e0b9", &(0x7f0000000580)=""/137, 0xd4, 0x10, 0x2, &(0x7f0000000640)}) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) [ 1599.495641][T22070] sg_write: data in/out 926365459/788 bytes for SCSI command 0x30-- guessing data in; [ 1599.495641][T22070] program syz-executor.5 not setting count and/or reply_len properly 10:00:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000680)={0x53, 0xfffffffffffffffe, 0xa2, 0x5, @scatter={0x6, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000080)=""/191, 0xbf}, {&(0x7f0000000140)=""/243, 0xf3}, {&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000000300)=""/39, 0x27}, {&(0x7f0000000380)=""/191, 0xbf}]}, &(0x7f00000004c0)="0637f2934e99178f8de3da575f17020b4562b2cae373ac7950471cb62a44288dc5ca22725cbc093692754b4b4493ff40a73d8173abc84848f897ab2de59a6647713ce45c74309dbdda0357f237bd4a1ad0f4b67294c2fbf149acd67b59f67ab0f135e3abc5ce26c26d66d03025b6264b524de91213cf17bfa8036583f8689553646d745320f732cd96ed373cee7710c3e66142fbb132c2b429eac468450f8b87e0b9", &(0x7f0000000580)=""/137, 0xd4, 0x10, 0x2, &(0x7f0000000640)}) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) 10:00:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5452, 0x0) 10:00:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5452, 0x0) 10:00:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x80045432, &(0x7f0000000000)=0x7e) 10:00:59 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYRESOCT, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES64=0x0, @ANYRES32=r1, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:00:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x80045432, &(0x7f0000000000)=0x7e) 10:00:59 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "7b4bfac4ee06c9c8eba61c1274cdaf831fd4464a8eac365474383c96de67315e26106232b73319860392a78536b4d49fa44bf404f5d1fe97ba6192da6f1ef971", 0x20}, 0x48, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:00:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x11) 10:00:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x80045432, &(0x7f0000000000)=0x7e) 10:00:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x11) 10:01:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x11) 10:01:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4040, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) ioctl$TCFLSH(r0, 0x5411, 0x0) 10:01:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x40086602, &(0x7f0000000000)=0x11) 10:01:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x400454ca, &(0x7f0000000000)=0x7e) 10:01:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000080)=""/117, 0x75}], 0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xc4, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xdf33, 0x66}}}}, [@NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xb50f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x50}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x14}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x40}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x7, 0x40]}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x61}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x483}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x20}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1c}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 10:01:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000080)={0x0, @aes128}) ioctl$TCFLSH(r0, 0x5411, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000200)={0x0, 0xffffffff}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000280)={r4, 0x8891, 0x1, 0x7, 0x6, 0xfffffffa}, 0x14) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000001c0), 0x10842, 0x24) ioctl$TCXONC(r5, 0x540a, 0x3) 10:01:00 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYRESOCT, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES64=0x0, @ANYRES32=r1, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:01:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x40086602, &(0x7f0000000000)=0x11) 10:01:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000080)={0x0, @aes128}) ioctl$TCFLSH(r0, 0x5411, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000200)={0x0, 0xffffffff}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000280)={r4, 0x8891, 0x1, 0x7, 0x6, 0xfffffffa}, 0x14) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000001c0), 0x10842, 0x24) ioctl$TCXONC(r5, 0x540a, 0x3) 10:01:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x8933, &(0x7f0000000000)=0x7e) 10:01:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c180) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f0000000040)={""/32, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r5 = pidfd_getfd(r4, r1, 0x0) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f00000000c0), 0x4) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f0000000080)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r6, r7, 0x0, 0x800000080004103) dup3(r6, r0, 0x80000) ioctl$SG_GET_PACK_ID(r2, 0x227c, 0x0) [ 1600.709782][T22104] sg_write: data in/out 926365459/788 bytes for SCSI command 0x30-- guessing data in; [ 1600.709782][T22104] program syz-executor.5 not setting count and/or reply_len properly 10:01:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x40086602, &(0x7f0000000000)=0x11) 10:01:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000080)={0x0, @aes128}) ioctl$TCFLSH(r0, 0x5411, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000200)={0x0, 0xffffffff}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000280)={r4, 0x8891, 0x1, 0x7, 0x6, 0xfffffffa}, 0x14) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000001c0), 0x10842, 0x24) ioctl$TCXONC(r5, 0x540a, 0x3) 10:01:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000000)) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) sendmsg$AUDIT_LIST_RULES(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f5, 0x300, 0x70bd28, 0x25dfdbfd, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x6000880}, 0x40000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000080), 0x4) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 10:01:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5424, &(0x7f0000000000)=0x7e) [ 1601.680837][T22134] sg_write: data in/out 926365459/788 bytes for SCSI command 0x30-- guessing data in; [ 1601.680837][T22134] program syz-executor.5 not setting count and/or reply_len properly 10:01:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000000)={0x85, ""/133}) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x4000) mmap$snddsp_status(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x1000001, 0x80010, r2, 0x82000000) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = syz_open_procfs(r3, &(0x7f00000002c0)='coredump_filter\x00') sendfile(r1, r4, 0x0, 0x800000080004103) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000200)={0x9, 0x0, 0x6, 0x2, 0x2, 0x1}) sendfile(r5, r6, 0x0, 0x800000080004103) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x182000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_none}, {@msize={'msize', 0x3d, 0x9}}, {@version_L}, {@debug}], [{@dont_appraise}]}}) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x1ff, 0x240000) 10:01:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) ioctl$TCFLSH(r0, 0x5411, 0xffefff1f) 10:01:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5424, &(0x7f0000000000)=0x7e) 10:01:01 executing program 5: r0 = add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "7b4bfac4ee06c9c8eba61c1274cdaf831fd4464a8eac365474383c96de67315e26106232b73319860392a78536b4d49fa44bf404f5d1fe97ba6192da6f1ef971", 0x20}, 0x48, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:01:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) ioctl$TCFLSH(r0, 0x5411, 0xffefff1f) 10:01:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5424, &(0x7f0000000000)=0x7e) 10:01:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) sendfile(r2, r0, 0x0, 0x800000080004103) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x43926833, 0x2, 0x8, 0x7, 0x7f}) r4 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r4, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r4, 0x227c, 0x0) 10:01:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) sendfile(r2, r0, 0x0, 0x800000080004103) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x43926833, 0x2, 0x8, 0x7, 0x7f}) r4 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r4, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r4, 0x227c, 0x0) 10:01:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) ioctl$TCFLSH(r0, 0x5411, 0xffefff1f) 10:01:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) 10:01:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5409, &(0x7f0000000000)=0x7e) 10:01:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5409, &(0x7f0000000000)=0x7e) 10:01:02 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x2287, 0x0) 10:01:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) 10:01:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5409, &(0x7f0000000000)=0x7e) [ 1602.604932][T22168] sg_write: data in/out 926365459/788 bytes for SCSI command 0x30-- guessing data in; [ 1602.604932][T22168] program syz-executor.5 not setting count and/or reply_len properly 10:01:02 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x2286, 0x0) 10:01:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) 10:01:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x2, &(0x7f0000000000)=0x11) 10:01:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) 10:01:02 executing program 5: r0 = add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "7b4bfac4ee06c9c8eba61c1274cdaf831fd4464a8eac365474383c96de67315e26106232b73319860392a78536b4d49fa44bf404f5d1fe97ba6192da6f1ef971", 0x20}, 0x48, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:01:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) ioctl$TCFLSH(r0, 0x540d, 0x0) 10:01:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) 10:01:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) (fail_nth: 1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:02 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) (fail_nth: 1) 10:01:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (fail_nth: 1) 10:01:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) 10:01:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:02 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 10:01:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (fail_nth: 2) [ 1603.327825][T22196] sg_write: data in/out 926365459/788 bytes for SCSI command 0x30-- guessing data in; [ 1603.327825][T22196] program syz-executor.5 not setting count and/or reply_len properly [ 1603.383309][T22199] ERROR: Out of memory at tomoyo_realpath_from_path. 10:01:03 executing program 1: r0 = add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "7b4bfac4ee06c9c8eba61c1274cdaf831fd4464a8eac365474383c96de67315e26106232b73319860392a78536b4d49fa44bf404f5d1fe97ba6192da6f1ef971", 0x20}, 0x48, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:01:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) 10:01:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f0000000000)={0x6, 0x7}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) 10:01:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (fail_nth: 3) 10:01:03 executing program 5: r0 = add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "7b4bfac4ee06c9c8eba61c1274cdaf831fd4464a8eac365474383c96de67315e26106232b73319860392a78536b4d49fa44bf404f5d1fe97ba6192da6f1ef971", 0x20}, 0x48, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) [ 1603.605985][T22207] ERROR: Out of memory at tomoyo_realpath_from_path. 10:01:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f0000000000)={0x6, 0x7}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r0, r1, 0x0, 0x800000080004103) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r2, r3, 0x0, 0x800000080004103) (async) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f0000000000)={0x6, 0x7}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) 10:01:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) 10:01:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x18) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) 10:01:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 10:01:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x18) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) (async) 10:01:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) 10:01:03 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 1) 10:01:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x2, &(0x7f0000000000)) 10:01:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f0000000000)={0x6, 0x7}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:03 executing program 4: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227d, 0x0) 10:01:03 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x8000, 0x3, 0x8001, 0xa1cee99b], 0x4, 0xc0800}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x6, 0x9}) 10:01:03 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x0, "7b4bfac4ee06c9c8eba61c1274cdaf831fd4464a8eac365474383c96de67315e26106232b73319860392a78536b4d49fa44bf404f5d1fe97ba6192da6f1ef971", 0x20}, 0x48, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) [ 1603.927318][T22215] FAULT_INJECTION: forcing a failure. [ 1603.927318][T22215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1603.927348][T22215] CPU: 0 PID: 22215 Comm: syz-executor.0 Not tainted 5.19.0-rc1-next-20220606-syzkaller #0 [ 1603.927374][T22215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1603.927388][T22215] Call Trace: [ 1603.927394][T22215] [ 1603.927403][T22215] dump_stack_lvl+0xcd/0x134 10:01:03 executing program 4: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227d, 0x0) [ 1603.927442][T22215] should_fail.cold+0x5/0xa 10:01:03 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x8000, 0x3, 0x8001, 0xa1cee99b], 0x4, 0xc0800}) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) (async) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x6, 0x9}) [ 1603.927476][T22215] _copy_to_user+0x2a/0x140 10:01:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x8, 0x7, 0x401, 0xea86}}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x10, &(0x7f0000000000)) 10:01:03 executing program 4: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227d, 0x0) [ 1603.927503][T22215] simple_read_from_buffer+0xcc/0x160 10:01:03 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 2) 10:01:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x8, 0x7, 0x401, 0xea86}}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:03 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x8000, 0x3, 0x8001, 0xa1cee99b], 0x4, 0xc0800}) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x6, 0x9}) 10:01:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5409, &(0x7f0000000000)) 10:01:03 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 3) 10:01:03 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) 10:01:04 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:01:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x8, 0x7, 0x401, 0xea86}}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r0, r1, 0x0, 0x800000080004103) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x8, 0x7, 0x401, 0xea86}}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) 10:01:04 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x40, 0x5, 0x8, 0x1, 0x7034, 0xba1a}) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 10:01:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x540b, &(0x7f0000000000)) 10:01:04 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) 10:01:04 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 4) [ 1603.927547][T22215] proc_fail_nth_read+0x187/0x220 [ 1603.927574][T22215] ? proc_exe_link+0x1d0/0x1d0 [ 1603.927598][T22215] ? security_file_permission+0xab/0xd0 10:01:04 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) 10:01:04 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x40, 0x5, 0x8, 0x1, 0x7034, 0xba1a}) (async) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 10:01:04 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 5) [ 1603.927628][T22215] ? proc_exe_link+0x1d0/0x1d0 10:01:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x540c, &(0x7f0000000000)) [ 1603.927651][T22215] vfs_read+0x1ef/0x5d0 10:01:04 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x40, 0x5, 0x8, 0x1, 0x7034, 0xba1a}) (async) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) [ 1603.927692][T22215] ksys_read+0x127/0x250 10:01:04 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:01:04 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 6) 10:01:04 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x121800, 0x48) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 10:01:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x540d, &(0x7f0000000000)) 10:01:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) 10:01:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:04 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x121800, 0x48) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x121800, 0x48) (async) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) (async) 10:01:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) [ 1603.927726][T22215] ? vfs_write+0xac0/0xac0 [ 1603.927759][T22215] ? syscall_enter_from_user_mode+0x21/0x70 [ 1603.927802][T22215] ? syscall_enter_from_user_mode+0x21/0x70 10:01:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5413, &(0x7f0000000000)) 10:01:04 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 7) 10:01:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') (async) sendfile(r0, r1, 0x0, 0x800000080004103) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) [ 1603.927844][T22215] do_syscall_64+0x35/0xb0 [ 1603.927871][T22215] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 1603.927904][T22215] RIP: 0033:0x7fb978c3bcbc [ 1603.927924][T22215] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 10:01:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) [ 1603.927947][T22215] RSP: 002b:00007fb979e48160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 10:01:04 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(0x0, 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:01:04 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x121800, 0x48) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 10:01:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) 10:01:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) 10:01:04 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 8) [ 1603.927971][T22215] RAX: ffffffffffffffda RBX: 00007fb978d9bf60 RCX: 00007fb978c3bcbc 10:01:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) 10:01:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r0, r1, 0x0, 0x800000080004103) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) fcntl$setown(r1, 0x8, 0xffffffffffffffff) (async) 10:01:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x12) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) 10:01:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5415, &(0x7f0000000000)) [ 1603.927987][T22215] RDX: 000000000000000f RSI: 00007fb979e481e0 RDI: 0000000000000004 [ 1603.928003][T22215] RBP: 00007fb979e481d0 R08: 0000000000000000 R09: 0000000000000000 10:01:04 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 9) 10:01:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x12) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) 10:01:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) 10:01:05 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(0x0, 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:01:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r0, r1, 0x0, 0x800000080004103) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) fcntl$setown(r1, 0x8, 0xffffffffffffffff) (async) 10:01:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5416, &(0x7f0000000000)) 10:01:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) 10:01:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x12) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) 10:01:05 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 10) [ 1603.928018][T22215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1603.928032][T22215] R13: 00007ffc4c62e6ef R14: 00007fb979e48300 R15: 0000000000022000 [ 1603.928067][T22215] [ 1603.977554][T22222] sg_write: data in/out 926365459/788 bytes for SCSI command 0x30-- guessing data in; [ 1603.977554][T22222] program syz-executor.5 not setting count and/or reply_len properly 10:01:05 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x2002}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000100)={{r0}, "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"}) 10:01:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, 0x0, 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) 10:01:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5418, &(0x7f0000000000)) [ 1604.022933][T22235] sg_write: data in/out 926365459/788 bytes for SCSI command 0x30-- guessing data in; [ 1604.022933][T22235] program syz-executor.1 not setting count and/or reply_len properly 10:01:05 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 11) 10:01:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) fdatasync(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, 0x0, 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) [ 1604.536548][T22268] FAULT_INJECTION: forcing a failure. [ 1604.536548][T22268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1604.536581][T22268] CPU: 1 PID: 22268 Comm: syz-executor.1 Not tainted 5.19.0-rc1-next-20220606-syzkaller #0 10:01:05 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(0x0, 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:01:05 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x2002}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000100)={{r0}, "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"}) 10:01:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, 0x0, 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) 10:01:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) 10:01:05 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 12) 10:01:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) fdatasync(r0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) [ 1604.536607][T22268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1604.536620][T22268] Call Trace: [ 1604.536626][T22268] 10:01:05 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x2002}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000100)={{r0}, "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"}) 10:01:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227d, 0x0) [ 1604.536635][T22268] dump_stack_lvl+0xcd/0x134 [ 1604.536675][T22268] should_fail.cold+0x5/0xa 10:01:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) fdatasync(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r0, r1, 0x0, 0x800000080004103) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) fdatasync(r0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) 10:01:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x541d, &(0x7f0000000000)) 10:01:05 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 13) 10:01:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227d, 0x0) 10:01:05 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:01:05 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1b3dc2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)) 10:01:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227d, 0x0) 10:01:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x541e, &(0x7f0000000000)) 10:01:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) r2 = open(&(0x7f0000000040)='./file0\x00', 0x2401, 0x107) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000000080)=0x1ff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x11400) ioctl$DRM_IOCTL_AGP_INFO(r3, 0x80386433, &(0x7f0000000100)=""/93) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000000)=0xa19) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYBLOB="030000000000000002000000080000000000000000000000000000000000000000000000000000000200000008000000000001004000000000000000db00000000000000f7ffffffffffffff80000000000000000000000000000002"]) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r7, r8, 0x0, 0x800000080004103) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000280)={0x20004000}) 10:01:05 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 14) [ 1604.536711][T22268] _copy_from_user+0x2a/0x170 [ 1604.536748][T22268] __do_sys_memfd_create+0xff/0x4e0 [ 1604.536790][T22268] do_syscall_64+0x35/0xb0 [ 1604.536819][T22268] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 1604.536856][T22268] RIP: 0033:0x7f74a5e89109 [ 1604.536876][T22268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 10:01:05 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 15) 10:01:05 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1b3dc2, 0x0) (async, rerun: 32) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 32) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) (async) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)) 10:01:05 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:01:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x541e, &(0x7f0000000000)) 10:01:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) (async) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) r2 = open(&(0x7f0000000040)='./file0\x00', 0x2401, 0x107) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000000080)=0x1ff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x11400) ioctl$DRM_IOCTL_AGP_INFO(r3, 0x80386433, &(0x7f0000000100)=""/93) (async) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000000)=0xa19) (async, rerun: 32) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 32) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYBLOB="030000000000000002000000080000000000000000000000000000000000000000000000000000000200000008000000000001004000000000000000db00000000000000f7ffffffffffffff80000000000000000000000000000002"]) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r7, r8, 0x0, 0x800000080004103) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000280)={0x20004000}) [ 1604.536901][T22268] RSP: 002b:00007f74a6fe1f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1604.536924][T22268] RAX: ffffffffffffffda RBX: 0000000020000600 RCX: 00007f74a5e89109 10:01:05 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1b3dc2, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) (async, rerun: 64) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) (async) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)) [ 1604.536940][T22268] RDX: 0000000000000900 RSI: 0000000000000000 RDI: 00007f74a5ee21ee 10:01:06 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:01:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5421, &(0x7f0000000000)) 10:01:06 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 16) 10:01:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) (async) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) (async) r2 = open(&(0x7f0000000040)='./file0\x00', 0x2401, 0x107) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000000080)=0x1ff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x11400) ioctl$DRM_IOCTL_AGP_INFO(r3, 0x80386433, &(0x7f0000000100)=""/93) (async) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000000)=0xa19) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYBLOB="030000000000000002000000080000000000000000000000000000000000000000000000000000000200000008000000000001004000000000000000db00000000000000f7ffffffffffffff80000000000000000000000000000002"]) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r7, r8, 0x0, 0x800000080004103) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000280)={0x20004000}) 10:01:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) 10:01:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) 10:01:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 10:01:06 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 17) 10:01:06 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:01:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) gettid() gettid() r3 = syz_open_procfs(0x0, &(0x7f0000001280)='io\x00') sendfile(r2, r3, 0x0, 0x800000080004103) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r3, 0x0, 0xa, &(0x7f0000000180)='mountinfo\x00'}, 0x30) sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) lseek(r4, 0xfffffffffffffa7e, 0x1) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/230}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r6, r7, 0x0, 0x800000080004103) preadv(r6, &(0x7f0000000200)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x5, 0x20) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) (async) 10:01:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5424, &(0x7f0000000000)) 10:01:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) gettid() (async) gettid() (async) r3 = syz_open_procfs(0x0, &(0x7f0000001280)='io\x00') sendfile(r2, r3, 0x0, 0x800000080004103) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r3, 0x0, 0xa, &(0x7f0000000180)='mountinfo\x00'}, 0x30) sendfile(r0, r1, 0x0, 0x800000080004103) (async, rerun: 64) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async, rerun: 64) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) lseek(r4, 0xfffffffffffffa7e, 0x1) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/230}) (async) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r6, r7, 0x0, 0x800000080004103) preadv(r6, &(0x7f0000000200)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x5, 0x20) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:06 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 18) 10:01:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5425, &(0x7f0000000000)) 10:01:06 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:01:06 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840300001500200027bd7000fbdbdf251f0151000100d69da773720f2edc1941c7f37b98f4e2b2ea7735eef1945761e21c0b0df489cfacfae4e780e3072299b9d6cb193033ac9ec40c6781a4cc9c8495d1c7a8c710609b3cb666295cacd3655737b7d1000000f6000100ec030aeae3ef1a0678f9826d4207ce295954ebd9626b5c86a862846d49c4224ba2cc92e57d9bbb3ddc891adc08cb12969c320272bc294e7e6ea20db1e02c7558885a49484f444c11b23e4ec642353bb5eb5ad035944549d85cf5c704aa0a8a6a81501c540945793431cca25c1f61a764ad22d58a6397b31f9adda005a35237e879956572d89c1c1fd94e618f5451c30ee58e74b896b114e89d2eef1b41005360d0aad622743b3556d97e533627c5dcd7f8aaebaf5399030287ea59a0c4bae1eecf7f61bb07850dc430ef11785daaaa852a7d8098fd84f6d188558ae1facee64c92662eead91b6663ba1db2e21ca2175d3c0f0000000101003edbded890913523fc477cb9f16aede2f4257152afa990def5426d3ff0b8f61e5cc65e03536ee6e76297de89e3f61f6a74a384a09d957b34720776e111a011a07bb06c1a117985a8c346df52c93fe79faf5a6842dc8a131bf47ebbfe4f6e650b5d78f58357a543d4c29a6d7bc9e8dd01919ea6215f85aa9b23d800fdcb56105a84c514aa324368a3b10d83d746518f5d4a748e28ed16275bc9db0db382ec77a9a447eb1bb4db010c1cf85196dc537cbd4c744a605d8e45adb58e8c7abfa9a8198cd53753d977ddd5fe129dcdd750544ba9e5d182beaf4819d42cf7449c1dcbdb56a0bb2f0331f269195bb220bfad5b712b7e49635c208854c5ca07ac48000100f4f3ce1297e77fb5e11ea2189d7568ae1d2cae2d39a9960b7558d33331e15e8c1954059920c5cce7d6c5a1d2d4012b50502db04d53cd67459f01229ccdea84a5d7313f621700010066a771d84843c1ccb54e30ebd21ff2b2b7207700c20001008a7dff1eff689fee6975de04e0e6378a26ce9d15ad74cfe6256e8563150cf0e581d04c67b6bd7e988794ece49fa11d7644da04d5b47f400094cffeff58266f54626fb0b512245df7cefe2ae7f20e2e51ef91ec67ec2ee5db252bd8b31478f46be8f7c6fed2e296bf38ddd9e52e3157b581db8bf7d49c00648a6fee2949ea74d5f697c2af399fd0e0b83ca429b7301080c63fd8f88d1449d2d395f89f1b998a63b08058fe9bec7be711ea1603757b1cb8abea8f926b6534b7a61a255fc14e00000000"], 0x384}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) 10:01:06 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x384}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async, rerun: 32) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 32) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) 10:01:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5427, &(0x7f0000000000)) 10:01:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) gettid() (async) gettid() (async) r3 = syz_open_procfs(0x0, &(0x7f0000001280)='io\x00') sendfile(r2, r3, 0x0, 0x800000080004103) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r3, 0x0, 0xa, &(0x7f0000000180)='mountinfo\x00'}, 0x30) (async) sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (rerun: 64) sendfile(r4, r5, 0x0, 0x800000080004103) (async) lseek(r4, 0xfffffffffffffa7e, 0x1) (async, rerun: 64) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/230}) (async, rerun: 64) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 32) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (rerun: 32) sendfile(r6, r7, 0x0, 0x800000080004103) (async) preadv(r6, &(0x7f0000000200)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x5, 0x20) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) gettid() gettid() r3 = syz_open_procfs(0x0, &(0x7f0000001280)='io\x00') sendfile(r2, r3, 0x0, 0x800000080004103) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r3, 0x0, 0xa, &(0x7f0000000180)='mountinfo\x00'}, 0x30) sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) lseek(r4, 0xfffffffffffffa7e, 0x1) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/230}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r6, r7, 0x0, 0x800000080004103) preadv(r6, &(0x7f0000000200)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x5, 0x20) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:06 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/custom0\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r4 = signalfd(r3, &(0x7f00000007c0)={[0x401]}, 0x8) openat$cgroup_procs(r4, &(0x7f0000000800)='cgroup.threads\x00', 0x2, 0x0) sendfile(r2, r3, 0x0, 0x800000080004103) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004103) clock_gettime(0x0, &(0x7f0000000940)) rt_sigtimedwait(&(0x7f00000004c0)={[0x1800000000000001]}, &(0x7f0000000140), &(0x7f0000000980)={0x77359400}, 0x8) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000a00)={0x8000, 0x100, 0x0, 0x6, 0x9318, 0x80000001}) ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f0000000080)="4676e0f93a204a6c30ae4d46896e0a35b94357dd0393365dbdb7d39bc78cc1b5888ae01b602ab6f8878dfd7c83e5f0cfe76eb771ab5e47209c06") ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000000)="a8b69bccaf50a9cf720edabac5388d039a47080286755acdaa21cd0397a6388e64425d1e2a8a10488450dfae10521637b4f35b25d46f9951c875b7fd2c02bfe7bfcc3a1f1f74a69c1eed27fde9752e4ea05fca5aa096518d2550263e8df268ce6ddcdba104688fd26ae31039d16d3a51") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) preadv(r5, &(0x7f0000000700), 0x0, 0x8, 0x4) 10:01:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5428, &(0x7f0000000000)) 10:01:06 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 19) 10:01:06 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x384}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) 10:01:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r1 = syz_open_dev$video(&(0x7f0000000080), 0x0, 0xa08cb5ce0454a14a) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000500)={0x6d, 0x3, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000040)) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0xfffffffc, 0x2000002, 0x5, 0x1ce, &(0x7f0000000100)="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"}) 10:01:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000000)) 10:01:07 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:01:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) r1 = syz_open_dev$video(&(0x7f0000000080), 0x0, 0xa08cb5ce0454a14a) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000500)={0x6d, 0x3, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000040)) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0xfffffffc, 0x2000002, 0x5, 0x1ce, &(0x7f0000000100)="8c3e5957e487d1a463e43aa6710d3034073757c50690e329e7b6aa8560b64354de97cf1ea927109d50bab396fcec9d4bb4064880e7347e58679b02fa677d632e711173cc5dda5ca3dc7566d395c45387d468f7cdb927bd765935d87a15831b9effcfaeedd092629ffad9639a1d248d987babe251f4e7ba63b872d88bfd51609dbced21bc5861e1ec15d3e5eb81d35cd14924f09c4e90e26cea7bf718a95e36e68a15ac24902b77ec3bc854939681e8a12f383d850cf2c40a31430d112ea9f134203b639aaabc4e028c9f08a8f11938a7f56e3f81a409cfdca0198e6b84eb5fb03b420c0c5a0e23cbfd2957066b3d3e94d40911fc8b2b0b5fd253ca7f96940837a8a7ad184e8662f8de3678a30714355a1851e02b2ce6b321f5919488f93f7476d4085af492f014880018f50c27436c5a29f1fd76908170535e1c7002c6e8bfbd3e67be69f786a59fb3a45a8d77679c63971000dd413bdf3c8a14008da232ec00fca34f1c3c3e8ad283491b594b62ebd15c7d673581bc7702411750a77422f94118bbab7721f2e6138927c63afaad0673c21ae5f0bb8349d3fb4424d57c6e3a49ff2e0016c72643f6e4dee7df106f5c08c921d5e4026a11a51d927dd56f2179bc3e309dc7f5fa1b0ef5a61904a8f0592ad4f01c1cd74ee605339c1fcfe8c911c6bc3e4012169da8ea762a7d3fecdce9fa9db72a1df6711298471ae202f0fbcfaafa09c1b817b18bccad343a5a9b9fbdffff26868e10b056d2fe553528c2525782daed9a77d08a3d69533f8d2b22df730aa64c26e3f51af94b10f4ec4bcc063657ca0ddfb4194135986faf7a5c74f21b0d972384636d634b8811bd8ba9f5eaa928a2f168e46512e04220c4ba729ad266f338536955ad1f6872892dcf7b0f8eb7ca692b9b105d925ac7bdf5ae4c94126dae48613b93aca04a4eae8c222eb85edc788435e643ca172626496218b999d0f60fb2f6fbb93d849d9d2bbd59fc632b0e5bd7770ea577640a0b7f812d9bfafcb9f468218291afaf5ed380cd311655088e1618f5ad747eb83bfcd91888a1a2449a5aeaacda8ea3f90992666d43269d22c2741049dbbb496d5d4d619bae7883d99dffe2378ecdaadbbcbd10bb4569048cd3dd3a63c0304b5eb3e37107fe2741fbfa4cf0196e3f809f66dd83e2ab1117828faf4db25880f218e6f77567fa58890b9a0a60dc096be025a007ec392f11f07c2ac3b5443bd3e9cf5b29bf8a6092bd2b44c279821c95ca1834d5d3b54cb4b10e493bfc9248fb46c2a8688a7e39f6bf7be9e0bb67a12c92cee5b8e32df7743453d0ac1507cb331a523ffdf30819999654c174888413277fa954b03a4aefbaeb86d1f2b2011338f8c85720e74616a45f4ffd6bd83ead9062ee664b23d029a2bdf33ed1b01498a38496c2e7fb47082cc35c7b5030fde569f7c88c3641feed0410dd8e99"}) 10:01:07 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 20) 10:01:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5441, &(0x7f0000000000)) 10:01:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) r1 = syz_open_dev$video(&(0x7f0000000080), 0x0, 0xa08cb5ce0454a14a) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000500)={0x6d, 0x3, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000040)) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0xfffffffc, 0x2000002, 0x5, 0x1ce, &(0x7f0000000100)="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"}) 10:01:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5450, &(0x7f0000000000)) 10:01:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) (fail_nth: 1) 10:01:07 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 21) 10:01:07 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/custom0\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r4 = signalfd(r3, &(0x7f00000007c0)={[0x401]}, 0x8) openat$cgroup_procs(r4, &(0x7f0000000800)='cgroup.threads\x00', 0x2, 0x0) sendfile(r2, r3, 0x0, 0x800000080004103) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004103) clock_gettime(0x0, &(0x7f0000000940)) rt_sigtimedwait(&(0x7f00000004c0)={[0x1800000000000001]}, &(0x7f0000000140), &(0x7f0000000980)={0x77359400}, 0x8) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000a00)={0x8000, 0x100, 0x0, 0x6, 0x9318, 0x80000001}) ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f0000000080)="4676e0f93a204a6c30ae4d46896e0a35b94357dd0393365dbdb7d39bc78cc1b5888ae01b602ab6f8878dfd7c83e5f0cfe76eb771ab5e47209c06") ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000000)="a8b69bccaf50a9cf720edabac5388d039a47080286755acdaa21cd0397a6388e64425d1e2a8a10488450dfae10521637b4f35b25d46f9951c875b7fd2c02bfe7bfcc3a1f1f74a69c1eed27fde9752e4ea05fca5aa096518d2550263e8df268ce6ddcdba104688fd26ae31039d16d3a51") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) preadv(r5, &(0x7f0000000700), 0x0, 0x8, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/custom0\x00', 0x0, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r0, r1, 0x0, 0x800000080004103) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) signalfd(r3, &(0x7f00000007c0)={[0x401]}, 0x8) (async) openat$cgroup_procs(r4, &(0x7f0000000800)='cgroup.threads\x00', 0x2, 0x0) (async) sendfile(r2, r3, 0x0, 0x800000080004103) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r5, r6, 0x0, 0x800000080004103) (async) clock_gettime(0x0, &(0x7f0000000940)) (async) rt_sigtimedwait(&(0x7f00000004c0)={[0x1800000000000001]}, &(0x7f0000000140), &(0x7f0000000980)={0x77359400}, 0x8) (async) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000a00)={0x8000, 0x100, 0x0, 0x6, 0x9318, 0x80000001}) (async) ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f0000000080)="4676e0f93a204a6c30ae4d46896e0a35b94357dd0393365dbdb7d39bc78cc1b5888ae01b602ab6f8878dfd7c83e5f0cfe76eb771ab5e47209c06") (async) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000000)="a8b69bccaf50a9cf720edabac5388d039a47080286755acdaa21cd0397a6388e64425d1e2a8a10488450dfae10521637b4f35b25d46f9951c875b7fd2c02bfe7bfcc3a1f1f74a69c1eed27fde9752e4ea05fca5aa096518d2550263e8df268ce6ddcdba104688fd26ae31039d16d3a51") (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) preadv(r5, &(0x7f0000000700), 0x0, 0x8, 0x4) (async) 10:01:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_pts(r0, 0x20800) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) 10:01:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5451, &(0x7f0000000000)) 10:01:07 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 22) 10:01:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) (fail_nth: 2) 10:01:07 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, 0x0) sendfile(r2, r3, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) [ 1604.536953][T22268] RBP: 0000000000000002 R08: 0000000000000480 R09: 00007f74a6fe21d0 [ 1604.536967][T22268] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 1604.536980][T22268] R13: 0000000020000100 R14: 0000000000000900 R15: 0000000020000000 [ 1604.537014][T22268] 10:01:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) (fail_nth: 3) 10:01:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_pts(r0, 0x20800) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) 10:01:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5452, &(0x7f0000000000)) [ 1604.965513][T22300] sg_write: data in/out 926365459/788 bytes for SCSI command 0x30-- guessing data in; [ 1604.965513][T22300] program syz-executor.5 not setting count and/or reply_len properly 10:01:07 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, 0x0) sendfile(r2, r3, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) [ 1605.409872][T22360] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1605.410342][T22360] loop1: detected capacity change from 0 to 4 10:01:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) 10:01:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_pts(r0, 0x20800) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) syz_open_pts(r0, 0x20800) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) (async) 10:01:08 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/custom0\x00', 0x0, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r4 = signalfd(r3, &(0x7f00000007c0)={[0x401]}, 0x8) openat$cgroup_procs(r4, &(0x7f0000000800)='cgroup.threads\x00', 0x2, 0x0) (async, rerun: 64) sendfile(r2, r3, 0x0, 0x800000080004103) (async, rerun: 64) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004103) (async) clock_gettime(0x0, &(0x7f0000000940)) (async) rt_sigtimedwait(&(0x7f00000004c0)={[0x1800000000000001]}, &(0x7f0000000140), &(0x7f0000000980)={0x77359400}, 0x8) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000a00)={0x8000, 0x100, 0x0, 0x6, 0x9318, 0x80000001}) ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f0000000080)="4676e0f93a204a6c30ae4d46896e0a35b94357dd0393365dbdb7d39bc78cc1b5888ae01b602ab6f8878dfd7c83e5f0cfe76eb771ab5e47209c06") (async) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000000)="a8b69bccaf50a9cf720edabac5388d039a47080286755acdaa21cd0397a6388e64425d1e2a8a10488450dfae10521637b4f35b25d46f9951c875b7fd2c02bfe7bfcc3a1f1f74a69c1eed27fde9752e4ea05fca5aa096518d2550263e8df268ce6ddcdba104688fd26ae31039d16d3a51") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) preadv(r5, &(0x7f0000000700), 0x0, 0x8, 0x4) 10:01:08 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 23) 10:01:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x545d, &(0x7f0000000000)) [ 1605.418487][ T2817] Dev loop1: unable to read RDB block 4 [ 1605.418525][ T2817] loop1: unable to read partition table [ 1605.418694][ T2817] loop1: partition table beyond EOD, truncated [ 1605.438597][T22360] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 10:01:08 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, 0x0) sendfile(r2, r3, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:01:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x2, 0x0) 10:01:08 executing program 3: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) [ 1605.583548][T22377] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1605.584008][T22377] loop1: detected capacity change from 0 to 4 10:01:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000000)=[r2], 0x1) 10:01:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5460, &(0x7f0000000000)) 10:01:08 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 24) 10:01:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x10, 0x0) [ 1605.588000][T22377] Dev loop1: unable to read RDB block 4 [ 1605.588036][T22377] loop1: unable to read partition table 10:01:08 executing program 3: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 10:01:08 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, r3, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) [ 1605.588196][T22377] loop1: partition table beyond EOD, truncated [ 1605.597504][T22377] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 10:01:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) (async) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000000)=[r2], 0x1) 10:01:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x8933, &(0x7f0000000000)) 10:01:08 executing program 3: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 10:01:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x1267, 0x0) [ 1605.795699][T22385] loop1: detected capacity change from 0 to 4 [ 1605.819006][T22385] Dev loop1: unable to read RDB block 4 10:01:08 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x22900, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000040)) 10:01:08 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 25) [ 1605.819048][T22385] loop1: unable to read partition table 10:01:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000000)=[r2], 0x1) 10:01:08 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, r3, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) [ 1605.819214][T22385] loop1: partition table beyond EOD, truncated 10:01:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x1274, 0x0) 10:01:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x400448c9, &(0x7f0000000000)) 10:01:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x21) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0xf) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000000)={0x8, 0x7, 0x4000, 0x100, 0xad, 0x81}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r4, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:08 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 26) 10:01:08 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x22900, 0x0) (async) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000040)) [ 1605.819729][T22385] erofs: (device loop1): erofs_read_superblock: cannot find valid erofs superblock [ 1605.952342][T22405] FAULT_INJECTION: forcing a failure. [ 1605.952342][T22405] name fail_usercopy, interval 1, probability 0, space 0, times 0 10:01:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x1275, 0x0) 10:01:08 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x22900, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x22900, 0x0) (async) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000040)) (async) [ 1605.952412][T22405] CPU: 1 PID: 22405 Comm: syz-executor.1 Not tainted 5.19.0-rc1-next-20220606-syzkaller #0 [ 1605.952440][T22405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 10:01:08 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:01:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x21) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0xf) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000000)={0x8, 0x7, 0x4000, 0x100, 0xad, 0x81}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r4, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_pts(r0, 0x21) (async) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0xf) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r2, r3, 0x0, 0x800000080004103) (async) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000000)={0x8, 0x7, 0x4000, 0x100, 0xad, 0x81}) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r0, r4, 0x0, 0x800000080004103) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) [ 1605.952453][T22405] Call Trace: 10:01:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x400448dd, &(0x7f0000000000)) 10:01:08 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 27) 10:01:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x1276, 0x0) [ 1605.952460][T22405] [ 1605.952469][T22405] dump_stack_lvl+0xcd/0x134 [ 1605.952512][T22405] should_fail.cold+0x5/0xa 10:01:08 executing program 3: ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0xa1f4, 0x2}) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2ea00) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) [ 1605.952548][T22405] copy_page_from_iter_atomic+0x5ac/0x1b30 [ 1605.952592][T22405] ? ktime_get_coarse_real_ts64+0x1b7/0x200 10:01:08 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:01:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x400454ca, &(0x7f0000000000)) 10:01:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x21) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0xf) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 32) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (rerun: 32) sendfile(r2, r3, 0x0, 0x800000080004103) (async) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000000)={0x8, 0x7, 0x4000, 0x100, 0xad, 0x81}) (async, rerun: 32) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r4, 0x0, 0x800000080004103) (async, rerun: 64) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) [ 1605.952640][T22405] ? iov_iter_get_pages_alloc+0x1580/0x1580 [ 1605.952675][T22405] ? fault_in_readable+0x1bc/0x290 [ 1605.952703][T22405] ? fault_in_subpage_writeable+0x20/0x20 10:01:08 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 28) 10:01:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x2201, 0x0) 10:01:08 executing program 3: ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) (async, rerun: 32) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (rerun: 32) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0xa1f4, 0x2}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2ea00) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) [ 1605.952729][T22405] ? ktime_get_coarse_real_ts64+0x15a/0x200 [ 1605.952767][T22405] ? shmem_write_begin+0xff/0x1e0 10:01:08 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000080004103) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:01:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x40049409, &(0x7f0000000000)) [ 1605.952793][T22405] ? shmem_write_begin+0x109/0x1e0 10:01:08 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) sendfile(r2, r0, 0x0, 0x800000080004101) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = open_tree(r2, &(0x7f0000000000)='./file0\x00', 0x101) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)) syz_open_dev$ttys(0xc, 0x2, 0x0) 10:01:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x2202, 0x0) [ 1605.952827][T22405] generic_perform_write+0x2b8/0x560 [ 1605.952866][T22405] ? filemap_fdatawrite_wbc+0x1b0/0x1b0 [ 1605.952896][T22405] ? discard_new_inode+0x190/0x190 10:01:09 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 29) 10:01:09 executing program 3: ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0xa1f4, 0x2}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2ea00) (async) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 10:01:09 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) [ 1605.952928][T22405] ? generic_write_checks+0x25f/0x390 [ 1605.952963][T22405] __generic_file_write_iter+0x2aa/0x4d0 10:01:09 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) sendfile(r2, r0, 0x0, 0x800000080004101) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = open_tree(r2, &(0x7f0000000000)='./file0\x00', 0x101) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r1, r2, 0x0, 0x800000080004103) (async) sendfile(r2, r0, 0x0, 0x800000080004101) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) open_tree(r2, &(0x7f0000000000)='./file0\x00', 0x101) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) 10:01:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x40086602, &(0x7f0000000000)) 10:01:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x2203, 0x0) [ 1605.953003][T22405] generic_file_write_iter+0xd7/0x220 [ 1605.953033][T22405] ? iov_iter_init+0x45/0x1b0 [ 1605.953067][T22405] new_sync_write+0x38a/0x560 10:01:09 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 30) 10:01:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000080)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = syz_open_procfs(r3, &(0x7f0000000100)='attr/exec\x00') sendfile(r1, r4, 0x0, 0x800000080004103) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000000)={0x6, 0x6, 0x77c}) 10:01:09 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) [ 1605.953102][T22405] ? new_sync_read+0x5f0/0x5f0 [ 1605.953143][T22405] ? lock_release+0x780/0x780 10:01:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x40186366, &(0x7f0000000000)) 10:01:09 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) (async) sendfile(r2, r0, 0x0, 0x800000080004101) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) r3 = open_tree(r2, &(0x7f0000000000)='./file0\x00', 0x101) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) 10:01:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x2205, 0x0) [ 1605.953197][T22405] vfs_write+0x7c0/0xac0 [ 1605.953233][T22405] __x64_sys_pwrite64+0x1f7/0x250 [ 1605.953255][T22405] ? ksys_pwrite64+0x1a0/0x1a0 10:01:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000080)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = syz_open_procfs(r3, &(0x7f0000000100)='attr/exec\x00') sendfile(r1, r4, 0x0, 0x800000080004103) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000000)={0x6, 0x6, 0x77c}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000080)) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) (async) syz_open_procfs(r3, &(0x7f0000000100)='attr/exec\x00') (async) sendfile(r1, r4, 0x0, 0x800000080004103) (async) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000000)={0x6, 0x6, 0x77c}) (async) 10:01:09 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 31) 10:01:09 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) [ 1605.953277][T22405] ? syscall_enter_from_user_mode+0x21/0x70 [ 1605.953308][T22405] ? syscall_enter_from_user_mode+0x21/0x70 [ 1605.953343][T22405] do_syscall_64+0x35/0xb0 10:01:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x401c5820, &(0x7f0000000000)) 10:01:09 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000000)=[0x5, 0x31]) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) [ 1605.953366][T22405] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 1605.953399][T22405] RIP: 0033:0x7f74a5e3c0d7 10:01:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000080)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = syz_open_procfs(r3, &(0x7f0000000100)='attr/exec\x00') sendfile(r1, r4, 0x0, 0x800000080004103) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000000)={0x6, 0x6, 0x77c}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000080)) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) (async) syz_open_procfs(r3, &(0x7f0000000100)='attr/exec\x00') (async) sendfile(r1, r4, 0x0, 0x800000080004103) (async) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000000)={0x6, 0x6, 0x77c}) (async) 10:01:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x2271, 0x0) [ 1605.953419][T22405] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b 10:01:09 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 32) 10:01:09 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) (async) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000000)=[0x5, 0x31]) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:09 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:01:09 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000000)=[0x5, 0x31]) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (rerun: 32) [ 1605.953439][T22405] RSP: 002b:00007f74a6fe1f00 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1605.953461][T22405] RAX: ffffffffffffffda RBX: 00007f74a5ed2a20 RCX: 00007f74a5e3c0d7 10:01:09 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000040)) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0xffffffff, 0x3, 0x3, 0x5, 0x14, "de1d37336777d17cf7ffffffffffffff00"}) 10:01:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x4020940d, &(0x7f0000000000)) 10:01:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x2272, 0x0) [ 1605.953476][T22405] RDX: 000000000000000f RSI: 00000000200000c0 RDI: 0000000000000004 10:01:09 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 33) [ 1605.953489][T22405] RBP: 0000000000000002 R08: 0000000000000000 R09: 00007f74a6fe21d0 10:01:09 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)) (async, rerun: 32) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000040)) (async, rerun: 32) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0xffffffff, 0x3, 0x3, 0x5, 0x14, "de1d37336777d17cf7ffffffffffffff00"}) 10:01:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x2275, 0x0) [ 1605.953503][T22405] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 10:01:09 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:01:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x80045432, &(0x7f0000000000)) [ 1605.953517][T22405] R13: 0000000000000004 R14: 0000000020000600 R15: 0000000000000000 [ 1605.953547][T22405] 10:01:09 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000040)) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0xffffffff, 0x3, 0x3, 0x5, 0x14, "de1d37336777d17cf7ffffffffffffff00"}) 10:01:09 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 34) 10:01:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x2276, 0x0) [ 1605.956509][T22405] loop1: detected capacity change from 0 to 4 [ 1605.970926][T22405] Dev loop1: unable to read RDB block 4 [ 1605.970960][T22405] loop1: unable to read partition table 10:01:09 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYBLOB="929f82a3ea4ee49a4292efd7f1df9b0dfc7260f9674353d19ed9e99177ac43cd7fe12e3b1faa1a38f6112dd387c961bf9f8566dbea112eaac37ba3acb585650224be2d13e83856f13bc079d54423c0c0f71e2410deba374bc933cb83ffef26db378d"], 0x342) 10:01:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x80045440, &(0x7f0000000000)) [ 1605.971100][T22405] loop1: partition table beyond EOD, truncated 10:01:10 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0xf102, 0x0, 0x5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x7, 0x8, 0x200, 0x8, 0x6, "be5b07a28f531d1688d3c6e0632444fafaec0d"}) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000100)) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 10:01:10 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)=0x0) setfsuid(r1) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000040)=@v3={0x3000000, [{0x7, 0x3}, {0x0, 0x800}], r1}, 0x18, 0x5) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)=0x0) setfsuid(r3) r4 = fcntl$dupfd(r2, 0x0, r0) sendto$inet(r4, &(0x7f0000000140)="712b0827fc929903d9fa4d33fbcc68eeec9b8a7123a3f283ca07c5902bde84690bda98c61e1f4b4427d7fdab977ecd5c456bb2a0626541f111f76c4913fbed0718ffda19eceea4cb48d56b639d6e3280ef489f3811a7c4471f22524252b79c42c08ae510c5e5aaa4500293748c474e6b9cdf5c3b6362661431aba75517be23f9c4462e5e74b748ab54e7897187d683938fc3df257782b6213cee2d6207", 0x9d, 0x40, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) setfsuid(r3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004103) read$FUSE(r6, &(0x7f0000000280)={0x2020}, 0x2020) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:10 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 35) [ 1605.971550][T22405] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 1606.128821][T22422] FAULT_INJECTION: forcing a failure. [ 1606.128821][T22422] name fail_usercopy, interval 1, probability 0, space 0, times 0 10:01:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x2279, 0x0) 10:01:10 executing program 5: add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r0, 0x0, 0x342) 10:01:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x80086301, &(0x7f0000000000)) 10:01:10 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)=0x0) setfsuid(r1) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000040)=@v3={0x3000000, [{0x7, 0x3}, {0x0, 0x800}], r1}, 0x18, 0x5) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)=0x0) setfsuid(r3) r4 = fcntl$dupfd(r2, 0x0, r0) sendto$inet(r4, &(0x7f0000000140)="712b0827fc929903d9fa4d33fbcc68eeec9b8a7123a3f283ca07c5902bde84690bda98c61e1f4b4427d7fdab977ecd5c456bb2a0626541f111f76c4913fbed0718ffda19eceea4cb48d56b639d6e3280ef489f3811a7c4471f22524252b79c42c08ae510c5e5aaa4500293748c474e6b9cdf5c3b6362661431aba75517be23f9c4462e5e74b748ab54e7897187d683938fc3df257782b6213cee2d6207", 0x9d, 0x40, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) setfsuid(r3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004103) read$FUSE(r6, &(0x7f0000000280)={0x2020}, 0x2020) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)) (async) setfsuid(r1) (async) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000040)=@v3={0x3000000, [{0x7, 0x3}, {0x0, 0x800}], r1}, 0x18, 0x5) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)) (async) setfsuid(r3) (async) fcntl$dupfd(r2, 0x0, r0) (async) sendto$inet(r4, &(0x7f0000000140)="712b0827fc929903d9fa4d33fbcc68eeec9b8a7123a3f283ca07c5902bde84690bda98c61e1f4b4427d7fdab977ecd5c456bb2a0626541f111f76c4913fbed0718ffda19eceea4cb48d56b639d6e3280ef489f3811a7c4471f22524252b79c42c08ae510c5e5aaa4500293748c474e6b9cdf5c3b6362661431aba75517be23f9c4462e5e74b748ab54e7897187d683938fc3df257782b6213cee2d6207", 0x9d, 0x40, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) (async) setfsuid(r3) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r5, r6, 0x0, 0x800000080004103) (async) read$FUSE(r6, &(0x7f0000000280)={0x2020}, 0x2020) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) 10:01:10 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async, rerun: 64) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0xf102, 0x0, 0x5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x7, 0x8, 0x200, 0x8, 0x6, "be5b07a28f531d1688d3c6e0632444fafaec0d"}) (async, rerun: 64) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000100)) (rerun: 64) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) [ 1606.128885][T22422] CPU: 1 PID: 22422 Comm: syz-executor.1 Not tainted 5.19.0-rc1-next-20220606-syzkaller #0 10:01:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227a, 0x0) [ 1606.128912][T22422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1606.128925][T22422] Call Trace: 10:01:10 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 36) 10:01:10 executing program 5: add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r0, 0x0, 0x342) 10:01:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x80086601, &(0x7f0000000000)) 10:01:10 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0xf102, 0x0, 0x5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x7, 0x8, 0x200, 0x8, 0x6, "be5b07a28f531d1688d3c6e0632444fafaec0d"}) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000100)) (async) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) [ 1606.128931][T22422] [ 1606.128940][T22422] dump_stack_lvl+0xcd/0x134 [ 1606.128980][T22422] should_fail.cold+0x5/0xa [ 1606.129013][T22422] copy_page_from_iter_atomic+0x5ac/0x1b30 10:01:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227b, 0x0) 10:01:10 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)=0x0) setfsuid(r1) (async) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000040)=@v3={0x3000000, [{0x7, 0x3}, {0x0, 0x800}], r1}, 0x18, 0x5) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)=0x0) setfsuid(r3) r4 = fcntl$dupfd(r2, 0x0, r0) sendto$inet(r4, &(0x7f0000000140)="712b0827fc929903d9fa4d33fbcc68eeec9b8a7123a3f283ca07c5902bde84690bda98c61e1f4b4427d7fdab977ecd5c456bb2a0626541f111f76c4913fbed0718ffda19eceea4cb48d56b639d6e3280ef489f3811a7c4471f22524252b79c42c08ae510c5e5aaa4500293748c474e6b9cdf5c3b6362661431aba75517be23f9c4462e5e74b748ab54e7897187d683938fc3df257782b6213cee2d6207", 0x9d, 0x40, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) (async) setfsuid(r3) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004103) (async) read$FUSE(r6, &(0x7f0000000280)={0x2020}, 0x2020) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:10 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xfc4d57859d001210, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) [ 1606.129055][T22422] ? ktime_get_coarse_real_ts64+0x1b7/0x200 [ 1606.129088][T22422] ? iov_iter_get_pages_alloc+0x1580/0x1580 10:01:10 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 37) 10:01:10 executing program 5: add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r0, 0x0, 0x342) [ 1606.129122][T22422] ? fault_in_readable+0x1bc/0x290 [ 1606.129149][T22422] ? fault_in_subpage_writeable+0x20/0x20 10:01:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x801c581f, &(0x7f0000000000)) [ 1606.129172][T22422] ? ktime_get_coarse_real_ts64+0x15a/0x200 [ 1606.129204][T22422] ? shmem_write_begin+0xff/0x1e0 10:01:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 10:01:10 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xfc4d57859d001210, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) [ 1606.129231][T22422] ? shmem_write_begin+0x109/0x1e0 [ 1606.129260][T22422] generic_perform_write+0x2b8/0x560 10:01:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:10 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 38) 10:01:10 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64], 0x342) [ 1606.129296][T22422] ? filemap_fdatawrite_wbc+0x1b0/0x1b0 [ 1606.129325][T22422] ? discard_new_inode+0x190/0x190 [ 1606.129354][T22422] ? generic_write_checks+0x25f/0x390 10:01:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0xc0045878, &(0x7f0000000000)) 10:01:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227e, 0x0) 10:01:10 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xfc4d57859d001210, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xfc4d57859d001210, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) (async) 10:01:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000000)) (async, rerun: 32) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) [ 1606.129386][T22422] __generic_file_write_iter+0x2aa/0x4d0 [ 1606.129423][T22422] generic_file_write_iter+0xd7/0x220 [ 1606.129452][T22422] ? iov_iter_init+0x45/0x1b0 10:01:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227f, 0x0) [ 1606.129485][T22422] new_sync_write+0x38a/0x560 10:01:10 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 39) 10:01:10 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2], 0x342) [ 1606.129520][T22422] ? new_sync_read+0x5f0/0x5f0 [ 1606.129558][T22422] ? lock_release+0x780/0x780 10:01:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000040)) 10:01:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0xc0045878, &(0x7f0000000000)) [ 1606.129620][T22422] vfs_write+0x7c0/0xac0 10:01:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r0, r1, 0x0, 0x800000080004103) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) [ 1606.129661][T22422] __x64_sys_pwrite64+0x1f7/0x250 [ 1606.129687][T22422] ? ksys_pwrite64+0x1a0/0x1a0 10:01:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x2282, 0x0) 10:01:10 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES32=r2], 0x342) 10:01:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000040)) [ 1606.129710][T22422] ? syscall_enter_from_user_mode+0x21/0x70 [ 1606.129743][T22422] ? syscall_enter_from_user_mode+0x21/0x70 10:01:10 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 40) 10:01:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0xc0189436, &(0x7f0000000000)) [ 1606.129782][T22422] do_syscall_64+0x35/0xb0 [ 1606.129806][T22422] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 1606.129840][T22422] RIP: 0033:0x7f74a5e3c0d7 10:01:11 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x2283, 0x0) 10:01:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000000)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000040)) [ 1606.129859][T22422] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b 10:01:11 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=0x0], 0x342) 10:01:11 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 41) 10:01:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0xc020660b, &(0x7f0000000000)) [ 1606.129880][T22422] RSP: 002b:00007f74a6fe1f00 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1606.129902][T22422] RAX: ffffffffffffffda RBX: 00007f74a5ed2a20 RCX: 00007f74a5e3c0d7 10:01:11 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x2284, 0x0) 10:01:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000640)=0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000600)={0x0, 0x0, 0x3, 0x4, 0xf, "6a48d25c18c1db84b8465a1a47f5c61cead934"}) sendfile(r2, r0, 0x0, 0x800000080004103) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000680)="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"/694) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000300)={0x1}) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x7, 0x18, 0x134, &(0x7f0000000100)="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"}) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) [ 1606.129917][T22422] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000004 10:01:11 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/time_for_children\x00') mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4000010, r0, 0xa0a54000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000180)={0x7fffffffffffffff, 0x5}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004103) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003fc0)=[{{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000039c0)=[{&(0x7f0000000540)="f3e7da890f2c7810c0d00ab9d94850c453780e29b1b869008fbf9f8e11ba40b5dcdd79b97cb5e440dfa147c6c47f135eff36f0a46d3ddd84089ce01ba40c08944362e87f", 0x44}, {&(0x7f0000000840)="12cdc23cc083f17aabfffb904f2971ceca070ab68fe4cbf1cb1525862159c8f8a851757e880ea70bedf22e3ec18b5ee323ca2f434c24920660514598748b36b36de9676cebd539317f86716025c4133d277d1ff3d8cb4f064550e9e9e70598f39c6b0ed8c8237d61a39408cc29ddacb4807862f83501b3db7a26a8d53c06a88bbdf9121f399d9f0c33354bad4712424cd32d9667b999dd0a9bc3b9da9e133214bb059c2ea0e7cd94841c527938ffc757316e9ca068fb2ee6234363492de882a11b70464998a5ba88c54930255402ae4babee01b631f42629582c9938de14bef286ce6a9663119630", 0xe8}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="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", 0x1000}, {&(0x7f00000005c0)="fc7bc5d77b5b615e994258fe7a570be90c77eea1804d233a49022c7932cb0f21748f9d2a77e28d5f6ee476b5ca7273a17e492c70916a3013cdcfbf8b3a9e5046a6e4356660554feaec825c4696029549e619faa6c5dc4a6c9b1a8cd26db6fa1e3e0c3a120c4e3881e837656d0c4226002abeb9bbd3d0544dd812a6130b8741f2cfd386638a44", 0x86}, {&(0x7f0000002940)="d051de43d7a686502839773350d1e0aebf07958a81c23b799023f98572a810e79479da874c4277ad033e9d115538d9878c891f1b5d0cb36e07d8c0477952fb02eb29148cc4ca014d23cf48bed1f6909835f7a7137a319f79666de151ee564479806ca4d78a23", 0x66}, {&(0x7f00000029c0)="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", 0x1000}], 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000100000002000000888056f91a6111c4e29397344c149d10149a3c91de833c5a6842c62edce0dcd37972c16c12d41fae03a261d1ac4e07e82aca23c5a4f68af8131bad3e27df2868cdeab8b069f6b0e9667e4d5f7e825e336ac14eb813e3e3", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0xd8, 0x8000}}, {{&(0x7f0000003dc0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003f00)=[{&(0x7f0000003e40)="8db717b197b210f7f81c77de839df853314c3b5ffc8ebaf104b2f954a85be532aefe1964fdc4b8ccfae5dae332b7152455ceb7c8083fd6", 0x37}, {&(0x7f0000003e80)="e947e3dabe64b02440", 0x9}, {&(0x7f0000003ec0)="c8a8b01314bb362808684326a72b798c5ebd751fa71c47455b933a313962f1", 0x1f}], 0x3, &(0x7f0000003f40)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="00adbea79d000b00000100"/20, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0], 0x58, 0x11}}], 0x2, 0x20000884) sendfile(r1, r2, 0x0, 0x800000080004103) r7 = syz_open_dev$audion(&(0x7f0000000000), 0x7, 0x111001) splice(r7, &(0x7f0000000040)=0x5, r7, &(0x7f0000000080)=0x7fffffff, 0x2, 0x7) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x8, 0x4, 0x5, 0x80000000], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x94, 0x0, &(0x7f0000000680)=[@request_death, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0), 0x0, 0x2, 0x28}, @ptr={0x70742a85, 0x0, &(0x7f0000000740)=""/212, 0xd4, 0x0, 0x2d}, @fda={0x66646185, 0x0, 0x1, 0x31}}, &(0x7f0000000280)={0x0, 0x28, 0x50}}}, @acquire_done={0x40106309, 0x1}, @dead_binder_done, @exit_looper, @register_looper, @register_looper, @release, @exit_looper], 0xfc, 0x0, &(0x7f0000003a40)="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"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:11 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 42) [ 1606.129932][T22422] RBP: 0000000000000002 R08: 0000000000000000 R09: 00007f74a6fe21d0 10:01:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 10:01:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000640)=0x1) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000600)={0x0, 0x0, 0x3, 0x4, 0xf, "6a48d25c18c1db84b8465a1a47f5c61cead934"}) sendfile(r2, r0, 0x0, 0x800000080004103) (async) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000680)="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"/694) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) (async) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000300)={0x1}) (async) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x7, 0x18, 0x134, &(0x7f0000000100)="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"}) (async) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) 10:01:11 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/time_for_children\x00') mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4000010, r0, 0xa0a54000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000180)={0x7fffffffffffffff, 0x5}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004103) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003fc0)=[{{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000039c0)=[{&(0x7f0000000540)="f3e7da890f2c7810c0d00ab9d94850c453780e29b1b869008fbf9f8e11ba40b5dcdd79b97cb5e440dfa147c6c47f135eff36f0a46d3ddd84089ce01ba40c08944362e87f", 0x44}, {&(0x7f0000000840)="12cdc23cc083f17aabfffb904f2971ceca070ab68fe4cbf1cb1525862159c8f8a851757e880ea70bedf22e3ec18b5ee323ca2f434c24920660514598748b36b36de9676cebd539317f86716025c4133d277d1ff3d8cb4f064550e9e9e70598f39c6b0ed8c8237d61a39408cc29ddacb4807862f83501b3db7a26a8d53c06a88bbdf9121f399d9f0c33354bad4712424cd32d9667b999dd0a9bc3b9da9e133214bb059c2ea0e7cd94841c527938ffc757316e9ca068fb2ee6234363492de882a11b70464998a5ba88c54930255402ae4babee01b631f42629582c9938de14bef286ce6a9663119630", 0xe8}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="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", 0x1000}, {&(0x7f00000005c0)="fc7bc5d77b5b615e994258fe7a570be90c77eea1804d233a49022c7932cb0f21748f9d2a77e28d5f6ee476b5ca7273a17e492c70916a3013cdcfbf8b3a9e5046a6e4356660554feaec825c4696029549e619faa6c5dc4a6c9b1a8cd26db6fa1e3e0c3a120c4e3881e837656d0c4226002abeb9bbd3d0544dd812a6130b8741f2cfd386638a44", 0x86}, {&(0x7f0000002940)="d051de43d7a686502839773350d1e0aebf07958a81c23b799023f98572a810e79479da874c4277ad033e9d115538d9878c891f1b5d0cb36e07d8c0477952fb02eb29148cc4ca014d23cf48bed1f6909835f7a7137a319f79666de151ee564479806ca4d78a23", 0x66}, {&(0x7f00000029c0)="b83ca3e6fd73f7acca7d2cd1966f8ea58f5b3e45efcee048018b40b0203bf1cc5e07ba333e6f437ac56739c0f3aaf1bb703612fe23688c1baf40cf90f969aa194eb116a9c67cfcfbffb91aca90fd2d19a3682acff467f29ddf4385de26de53edb95d946c3522dd403c5b630cbe83a9be3cba4205c138bb12dede15b0f30c8c40a7121d1e4c792907b7ce66b9e9aaf1d9d1d850b0e0b2c7528f83e3a7f267b5d678e1160de0646e2b7e608ced96c5ed0227f2bf221a7bf16a91aedd5fc435e5bc780ac89fbe9f19560d91f279a23375c8fe3d1db1178428047efc4e69a0eee41820edac6650f3583efb3729a2294489c14157c59e94644e45cfdb21159a2af787fb3b834014fc2256141f106457e12be1506f50d219ae4710d391bc290d07a094bc6e8cd74aea502cd45fe6f4aa01953d56f2a960c5059ddd90a4fb8425cbd13dcb39f95b680603f8ee9603b9b94b625e05aae43475b6e88a8aee09fb0c943168c5d6facad91f6ce22effe4e264235a18c434b9f5cbce65363eb7b26ff6cbfa985fbc08663f0b3be88c11aa24d2689c2a6a1ef5ab7eba5ea0bd8140d95b68f41d4a634281c3ae8287deca2134ed994cea3dd93765f8cde6ca72146222377cdfe7a8edcf098eb5957e3dfe65d87e024220cf85580120a7d67fc41ad41979ccf22f83d20e71feef96cf188a838f5b70c16b7baa32dfe0b7c3aa1c3e0fcf28796dc23874a8967e422456da5a5de45013bb1a8080ad2c51fc909b309c6c52dc05e56a7f61c489aca03ad02fefefc8dd7c0e795403e8ded24dd57a406123b1f6f824648614c39ff15e3b9485a31e2d239e313f1e1d274fa0e287709cc521268911d41b9ba990e1a76d62b207b7c0a06b9b39c0c4031bea98ba676d6d6fb0041e56f0b8207f68f8650f492a9e7877a519e7866bce71bb2bcecc26ea285ba2a48e7c81eadb80c8bc287ab65d5ad74cd0d788819786753237e9b64c61ca63a9481341860648d2456c88d50d2325d52021a5e03b1ba1eaf291414ac8745d52af58e50a43e932eda4a57b4aae8e4d2ad4bdc46ba6c408d482ee24c6422652fb3176f711473a4d91b812434fe3410aa92ba694157c94b5f896c21270adb504b8ba211a35d0332549206ccb6b529e2d23160e8651cde3a79c13db0ed5a5b9cd7d588fb7c2942f67016a38d12b8bd1b169034df67fb965bc4bb2580440a30b70a6b8b9571b252d7aa15e3c4cc3389c90ad2a7907b4f2258aeb7caa8fef7d3644c4e0cea70b2ff52f50db65d4e9e63ccc54645a05b39346abc9df2efd03ecd9cf99fc9c71eb2452a4c8cd2432d1c415812b145beff0db8795bfb53d731004404c63d3586408f1466e813f0b5655987a61ae460d6c6d594b3b01c7113bed0b4bdad84516eca0789ad8a950329d7c325585077781c18134ad0828982260d9eb6b108e032f25b889f0274a55469da74d20f1742f1f0f44fc851484f7b0df2a1a55566ccb622273fd258185012578a8efeab46a9038245c569fb97e4a4013a2ea16b8023c90da798150b6b60e11cba5a4bd43500db400792d10da99e04bf095d5a70fc1392bc66342f2da64e2319b28967e66ce8b09cd1236a6ad28ceaf38dc5f6839fcff067eec1e72874f75294acac0ac26338cbe4ab68483f9182fadb3aa63269ef0065a522a181a5b6f68d08c3997717dedc7203aa22b436fcc176e06ba4261daa3519e6cc40c763026a15daad5c30cf70d043ef49ec9b54a8a6bd7c6bec306ea11b364645c2579caa3fa2d208418a9c4517d5efe730c470c93d51ffec4675ab027ac05fe426c102ed0e4c19c163745435c5fdab7a65010655a823efce90817849abd4260964a44575af17f85ed4d402b768d71425d8f9e107317436f411c4d3d63c376436746888c5d23c68bc23138418cbf01fc803d892539a533d70ecbf7b975c604c647b47aa192ab239ad3d6df513a67ce4143f8f8ea7127f4a248de9b3620f0a53f9d465bf0cd959a1a8b7b8d8c4f0a85584bd0c60e9a2b83feef838d297fc34380dfe5eb85635101d83e7b1590a13dfdda0c90d4650ec76d103044081836a61e3b60d0a5e4cd0963313e57d30e041c59535fe99662acd0314c270c07d0d8dbac4a2394f80625ef3fc1acfa8f5b4e6cb917f8a2d043aad2f7300c5ee743c0eeef4a23c5b10fd9b708f0c3d9e986c5839bf6d9c901d0e40e57d1a15684a817b5c3e3a9edbe91a466d89494646ac5caa829b0bae286461f6b2c6c91392818708d7912bbf8674861a6b4bfa196a255b4e584f778154fb1257f839f762d41c645bbe5b9857165d47b7f42da242fbc6ce994d649c2ccc8ff98428b4eb4292c4c1d9c8a413e68797dec97a09d92339205c7591401953dffd93b0ea83c05a2338fc9dfe5ffd99c877d1dabf729a3adc7dd3633c3bdaeefc08465ae4196aee68ad7c9cd04601cfe6b39473f6296a7aeaad6a33f733171067eceb37c424090a790d00e0a9b4572d270e6d8d61bfc0cd3323b5d972662cea78d1136d3a2ea24d3988061a8bfe32f12fe40ac7b5f31c87ddbd40ae128927566347e2747bec33325b48cd763f0600250fa287141b82d95ae4e91ad55a962ac5e3848fc7c2c97579b4e7c792e0c85d634ac2a404c8bb1843bfd7a96cf8bec1e0305fb1e80a57827fc47c901bae3c76488441f95e61c9ad7bb719e2520738c0a96d6bf56b97b2ce33bb357292cf46d93062422f018c7799bf555a3da8fdfe8d1dd79ed952f06e1b9df70f5c93d9d7c481eca5cfd019a6b6d3de3c04ecadb663c62c1c022508305f59a663ca43bfa0b71299052308949156d8e37c53e970e485814e9dd613ce2ab7442e5cbc7497e1177cdf64b634d97cebc1d33dfdb9462e71639e10b115bd40a7f9afdb1ffa0170548ba2cf16237abe1653a633abd5e82cb7404770c07198b8f75d195117b291c88621b4b02878b79fd1a0734b8a930b7504a99b2a7f8a38ddf399d7e276d59a0ccf6a5655d383c3dd891e6f69ce832460428a67757fc387d970f6b7fbe68851aafb2cf13deb32771695110820c4d9db0bd916658282eedb8bef15b648853e9031c79c9277b252f4d10914d017dff52dcaf4f1a4d438e1d8559b2c30dc63054a19be13926da9349efa8785b3425db4d35159297cff0dc80a01199af03297c338461d7a2363c3f642ba834b2064fd07b84bcd839282994bcd7fe3f9ada5562c9d94db0d292d57501d974de0647ad24dc4a144f76a6315a0c8a9c71f0adfdbfc0933c849db6feb7088577b7477734e5c25dc5f5083f91a0a3cd5ac7f0112d07c2bf9fcae03dbf4c6aaf323e20a73951ee5b8e8fe0e9fe7fcacc0aa5aad742c345762922bb808a7d139f9ab36cd8dbbe94bc6e7484b69b30db2662ac2a675745a716761626e623d25b694515eb408a9f90178f15e74e3a2671eaa48e059d5a703efdb30e8b8eca6ae61a4d6c3fed12defd4baf7bb21224f852c6a4abdfc97aac0bd7b2e3fc448e9019ce0994b03da396bc41c09ee634455a39c216a5bf2535dfbf15999ed7b765d7f91a78cc0a4d2849f0bf8ff8ae628df6bb910ee4e8092f7bc5e818c3fc5c19425c3672f3943db4e441b1ab2b29bf27057be393544efc10ebc158933219d3a332f577f8d955b0fbc79b27d09e465ed84f3a0e7a121e831c6fdfceceef865a701beab93be8ffb54fc5160a18b4b4be9ffc2e15237424eb6e82d000d25b852c4d4c16988827d88ab2d6262c8d6203c691e6521e1f34b01ed77cd69a0429a07618d3dcbc8c9c0f6425b6c7728a7a8e32ee3c5eebdf17abfdbbb3bc197aaa61e9d5c6a06f05acc2be468b278e484dc133876ef7c654eaeb675b6b7eca4255e10f4b61362b588ba17cb1acf20fff595a5340c60db1dd75146ea629b06bf390b1c5e76ccba2142627cc73d2907da6fff700e5528fb70cd43192a0114c0d3958202a88bc44cc225ce565088157753732103fea36c7b5e836005b6e0885dc92e451045371f4245cef8873d75e21d7eb2a020ab024d30610a7dd7e2d2f4cfdfe72d5839e3d7be2422c186d5497f39ca70817b0ef2df2e8f8d5c35417199e64bbea468933a0d6a3f42abcd2104acde44f4902b78759d6b30a78d4d64a736963b02b18027d9a6cc9d666ace4039ada9c8f0d693216bca037847cae3d6ce775673d6bb84e7e58ec912affbee44eaa0e4ba85a945f69a092aa14af8304828b0250b103cd4cb19b0e927ac0c3c725f028ed3ec60b7c40268798d782f3f9c259c2692526407e259c3053c7c8b69e0e36414081dadeeceb595770301ac3823db1d0438b328ec16acc6cdd234bc143709d5dfc88eb6a4422da82e9770225601213590a5834769fcf0304d04a9874a4f12a49457b7818965e8c330ac91b15be539773bb75c3e167e1a93f4cd31af405c71defdbf5add462795ace89c62b3548e91a800c5fa36530f24b6365db8d12783859ca4a8fe5a96e8eaf8369f74226cdbed2a36017691da6e97cd1ce8d5f29d09de59a3901f68af151b8a9e6dcf4eac954e369a98b1668d94d0076dc208332fe0283f18d1bf129574aad6e10064eeb2d671eabe1a72e86e2ab7f391bd2ed3a36dba9b88fb3b4ca5e3303b92dc72ade9b43fb8b2d16df3c244f1de31435e7e718af8acb4de4b4592eba84870f6a72c57252cb50bbeae2c4b3b28cc85c1cf3d80a0d644018914c6515306293c0c80eb21dafef689f516afbb6a65805da75197fd70d04225963b387b766ddb5e2465e071acea2963dd52d3d00032a2e4731f1e88891e41419bb6cc3c7b971604b2004ad9417132b293315d75d1fbe26f1e6ac903eca418fb83e70e34f67b9014c9cdce88081be365d2ee0e9fde083d3df5980b6fe2bdfa98f8a1973cdcbbd82e2756add5600e9e399acd779282ecc9bec13f4623e60487f10b2a2c6570740e96eb1e3d74a17a1e7ad77617b5cf82150623ac221fb783403fa2ba9e50d3b82334394a7c384a9440c69bbccb748f99fcd9094740fe2351e971a3a7f1153e1f0546791e42454ff24f109b89c02d887a715b10f2957141c6016f9157f422d544536dd0ca0f85b960fb5f11c5e9816b13ef50d818bd5d80ed8dca6665de73bdc2ef1dd5d68134131d06e487fa331ad5396307cabfcfc16510fe21818b319295a5a9b5f61f574253a62289f4c492e2e93264e8497e2481e32750fb4149e5af937a1a89ef30c0ca251234be8ecb50fb3536c8a4ce51081d9abca03b1d546774889138e9dfb6e3e0a959e9b1f526c8055760b0955fd6970a474efc5d846803af382fd566117493d4b59e154dfb417d3b8a36aa5c5fbc35b10a3e1eb779221d00a0b7c8b47a56190dfce1c941a644850cf8a0d50c0a2bd78606a437e0e6045bd0900a285a9847e3d63c69ec72230a3595f5458cd74ebc3e226d7f1b10cfae2f44d85f6b71c00fa57be32c842bd279c61eead8d6108ca46d6d3044f9f68a6e6bdcb1a6b6cbc385f2619d39905f285a3823758c04227c44481c2cbfc1e52fcd8d2ec31dba69bef716e4ee1a1cbccfadc67ccb623b7b8533a00818a7a7bb9ecb15f5e9026e616924afff80d9b15611e105400523d7c1db872e41aa7747caf9b736d7690084ed0aaec2b507b4208d9df13477a72b85bc08fe4f7d0eeaab8568b16343ac6d657295aaafe87b89f19f8ee1ede59b2a9ee3d0ea787088ce899934f97663a71a5b641a2e444dcced93e19587b1eb08ddf5ce4c85c5fbbbf78ac1f33d8151c8d0cf0c62a8014784a4ddd2ae5d96eecd69b8e999ee6bd9dab46af79c5f7fa609f3dc67e57c20df9c8bf9e296e753eed", 0x1000}], 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000100000002000000888056f91a6111c4e29397344c149d10149a3c91de833c5a6842c62edce0dcd37972c16c12d41fae03a261d1ac4e07e82aca23c5a4f68af8131bad3e27df2868cdeab8b069f6b0e9667e4d5f7e825e336ac14eb813e3e3", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0xd8, 0x8000}}, {{&(0x7f0000003dc0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003f00)=[{&(0x7f0000003e40)="8db717b197b210f7f81c77de839df853314c3b5ffc8ebaf104b2f954a85be532aefe1964fdc4b8ccfae5dae332b7152455ceb7c8083fd6", 0x37}, {&(0x7f0000003e80)="e947e3dabe64b02440", 0x9}, {&(0x7f0000003ec0)="c8a8b01314bb362808684326a72b798c5ebd751fa71c47455b933a313962f1", 0x1f}], 0x3, &(0x7f0000003f40)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="00adbea79d000b00000100"/20, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0], 0x58, 0x11}}], 0x2, 0x20000884) sendfile(r1, r2, 0x0, 0x800000080004103) r7 = syz_open_dev$audion(&(0x7f0000000000), 0x7, 0x111001) splice(r7, &(0x7f0000000040)=0x5, r7, &(0x7f0000000080)=0x7fffffff, 0x2, 0x7) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x8, 0x4, 0x5, 0x80000000], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x94, 0x0, &(0x7f0000000680)=[@request_death, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0), 0x0, 0x2, 0x28}, @ptr={0x70742a85, 0x0, &(0x7f0000000740)=""/212, 0xd4, 0x0, 0x2d}, @fda={0x66646185, 0x0, 0x1, 0x31}}, &(0x7f0000000280)={0x0, 0x28, 0x50}}}, @acquire_done={0x40106309, 0x1}, @dead_binder_done, @exit_looper, @register_looper, @register_looper, @release, @exit_looper], 0xfc, 0x0, &(0x7f0000003a40)="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"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/time_for_children\x00') (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4000010, r0, 0xa0a54000) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000180)={0x7fffffffffffffff, 0x5}) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r3, r4, 0x0, 0x800000080004103) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r5, r6, 0x0, 0x800000080004103) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003fc0)=[{{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000039c0)=[{&(0x7f0000000540)="f3e7da890f2c7810c0d00ab9d94850c453780e29b1b869008fbf9f8e11ba40b5dcdd79b97cb5e440dfa147c6c47f135eff36f0a46d3ddd84089ce01ba40c08944362e87f", 0x44}, {&(0x7f0000000840)="12cdc23cc083f17aabfffb904f2971ceca070ab68fe4cbf1cb1525862159c8f8a851757e880ea70bedf22e3ec18b5ee323ca2f434c24920660514598748b36b36de9676cebd539317f86716025c4133d277d1ff3d8cb4f064550e9e9e70598f39c6b0ed8c8237d61a39408cc29ddacb4807862f83501b3db7a26a8d53c06a88bbdf9121f399d9f0c33354bad4712424cd32d9667b999dd0a9bc3b9da9e133214bb059c2ea0e7cd94841c527938ffc757316e9ca068fb2ee6234363492de882a11b70464998a5ba88c54930255402ae4babee01b631f42629582c9938de14bef286ce6a9663119630", 0xe8}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="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", 0x1000}, {&(0x7f00000005c0)="fc7bc5d77b5b615e994258fe7a570be90c77eea1804d233a49022c7932cb0f21748f9d2a77e28d5f6ee476b5ca7273a17e492c70916a3013cdcfbf8b3a9e5046a6e4356660554feaec825c4696029549e619faa6c5dc4a6c9b1a8cd26db6fa1e3e0c3a120c4e3881e837656d0c4226002abeb9bbd3d0544dd812a6130b8741f2cfd386638a44", 0x86}, {&(0x7f0000002940)="d051de43d7a686502839773350d1e0aebf07958a81c23b799023f98572a810e79479da874c4277ad033e9d115538d9878c891f1b5d0cb36e07d8c0477952fb02eb29148cc4ca014d23cf48bed1f6909835f7a7137a319f79666de151ee564479806ca4d78a23", 0x66}, {&(0x7f00000029c0)="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", 0x1000}], 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000100000002000000888056f91a6111c4e29397344c149d10149a3c91de833c5a6842c62edce0dcd37972c16c12d41fae03a261d1ac4e07e82aca23c5a4f68af8131bad3e27df2868cdeab8b069f6b0e9667e4d5f7e825e336ac14eb813e3e3", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0xd8, 0x8000}}, {{&(0x7f0000003dc0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003f00)=[{&(0x7f0000003e40)="8db717b197b210f7f81c77de839df853314c3b5ffc8ebaf104b2f954a85be532aefe1964fdc4b8ccfae5dae332b7152455ceb7c8083fd6", 0x37}, {&(0x7f0000003e80)="e947e3dabe64b02440", 0x9}, {&(0x7f0000003ec0)="c8a8b01314bb362808684326a72b798c5ebd751fa71c47455b933a313962f1", 0x1f}], 0x3, &(0x7f0000003f40)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="00adbea79d000b00000100"/20, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0], 0x58, 0x11}}], 0x2, 0x20000884) (async) sendfile(r1, r2, 0x0, 0x800000080004103) (async) syz_open_dev$audion(&(0x7f0000000000), 0x7, 0x111001) (async) splice(r7, &(0x7f0000000040)=0x5, r7, &(0x7f0000000080)=0x7fffffff, 0x2, 0x7) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x8, 0x4, 0x5, 0x80000000], 0x4, 0x80000}) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) (async) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x94, 0x0, &(0x7f0000000680)=[@request_death, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0), 0x0, 0x2, 0x28}, @ptr={0x70742a85, 0x0, &(0x7f0000000740)=""/212, 0xd4, 0x0, 0x2d}, @fda={0x66646185, 0x0, 0x1, 0x31}}, &(0x7f0000000280)={0x0, 0x28, 0x50}}}, @acquire_done={0x40106309, 0x1}, @dead_binder_done, @exit_looper, @register_looper, @register_looper, @release, @exit_looper], 0xfc, 0x0, &(0x7f0000003a40)="fc333ddecbf5f13fe848963a06924941b8a0adeb829dc09b4cc98f622d90a58b23c7b57515b0dfe42d3500079931629e54615554380c7f31af9d17cfde99b23c72a0551d20aeca44a0228cdb679fd109435645a07a798d59af81924fe9ba67aba21e0981dc2bf46e196c5f573c40e95ff7ae912f82efcd7acb020b0c4dcb5be35f59fb16a3065f28722e1b091573359926ebf9ddb85905fa2b99bb678966731ac1b267c502712a30d66e66db794eac0d4680d7c6acf17c56b9ee3b2261198c24cf023643775189e4900699e3ee46277649d66da079d6ab2ae252ca5bdb136f204404e573db87b3b497c5b7b515c3fde10806f8db1c75c20996dc6e63"}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) 10:01:11 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x2285, 0x0) [ 1606.129946][T22422] R10: 0000000000000480 R11: 0000000000000293 R12: 0000000000000004 [ 1606.129961][T22422] R13: 0000000000000004 R14: 0000000020000618 R15: 0000000000000001 10:01:11 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1], 0x342) [ 1606.129994][T22422] [ 1606.130437][T22422] loop1: detected capacity change from 0 to 4 10:01:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x2) 10:01:11 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1], 0x342) 10:01:11 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x2286, 0x0) 10:01:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000640)=0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000600)={0x0, 0x0, 0x3, 0x4, 0xf, "6a48d25c18c1db84b8465a1a47f5c61cead934"}) sendfile(r2, r0, 0x0, 0x800000080004103) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000680)="f09e3f5cf8d542d92b844353811fa61b7dbb1e22e69ff05a1319b5e0d28e93e6f36a60bd3cf973ad9c6dfe0000423824b230477460760a2a29fbe7aec77154be9693057e79803eb445056f3afe4d739b5cb8ce552119c291d5eb0136e7bffa1307b78efc36c0f344babf07fab6a7bb6bd3cf5c9a9456c29c26fa67a9542c845b67222be05a3514c66f179b9581af4d25b1ed6a4d642e29120a68843e17aed487959bdf6c7b8df3cce01442000089e3af5f7109304df1eedd144de37330cd63bd597143bd7248262beee66c70487c8cd263f9b2b70bf3ef632f70b9542ff2c9bfb96f497c4c7d1eb7e98b2701622595a83a292a5bdb1c9c4647b1d2184f008b25c08c698c4d98331ac8e22c7d7d33b5fd7d3427078bcb3d568b365c1749efd297531e692edc9955dce906850d82b602b54c24344cb45c30a04b1f79e809df189103000000203d31bc428a924fe8cea73d2505a96a7cb06e510974bf81a15c806145ad8599b0fe579cc355c7a96dbc4ec455e41b96329468a6704733527e9aab50146e7367cc122df2dfd69a466626712830328f7e92348b40955149f436bde798f38f478d806047571bb451bd01afd96a52723c5b2c347bacf22d8feb223e854123bba17566d202fed3e264f417ff9d19ff86aff8ee4d3a9f4ca31e0000000048eb1d24e506de81e3f9f93dfa0000000000004ee8831878f4f3be201c686b5c491bff5e4c7d184173eb7612d7b6a7187914db039b3002582e30d05141d60e6213a8fc7d8736cd837fbbb480f529ab50d685140141afed8c00c14fa7d367c1ced6c79a1d995000000000000000b04c00000000000000000000000000000094b3a0882d71b975903ee290b76f87e58b26b4703c25849e4ff5a178c720dadb652d710ca4e74f7c403710e9e28d791303cba16c8d9a8b715b9d4f0a5c06c29452a68ac59095624c8100"/694) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000300)={0x1}) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x7, 0x18, 0x134, &(0x7f0000000100)="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"}) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000640)=0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000600)={0x0, 0x0, 0x3, 0x4, 0xf, "6a48d25c18c1db84b8465a1a47f5c61cead934"}) (async) sendfile(r2, r0, 0x0, 0x800000080004103) (async) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000680)="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"/694) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000300)={0x1}) (async) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x7, 0x18, 0x134, &(0x7f0000000100)="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"}) (async) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) (async) [ 1606.134983][T22422] Dev loop1: unable to read RDB block 4 [ 1606.135021][T22422] loop1: unable to read partition table 10:01:11 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 43) 10:01:11 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/time_for_children\x00') mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4000010, r0, 0xa0a54000) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000180)={0x7fffffffffffffff, 0x5}) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004103) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003fc0)=[{{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000039c0)=[{&(0x7f0000000540)="f3e7da890f2c7810c0d00ab9d94850c453780e29b1b869008fbf9f8e11ba40b5dcdd79b97cb5e440dfa147c6c47f135eff36f0a46d3ddd84089ce01ba40c08944362e87f", 0x44}, {&(0x7f0000000840)="12cdc23cc083f17aabfffb904f2971ceca070ab68fe4cbf1cb1525862159c8f8a851757e880ea70bedf22e3ec18b5ee323ca2f434c24920660514598748b36b36de9676cebd539317f86716025c4133d277d1ff3d8cb4f064550e9e9e70598f39c6b0ed8c8237d61a39408cc29ddacb4807862f83501b3db7a26a8d53c06a88bbdf9121f399d9f0c33354bad4712424cd32d9667b999dd0a9bc3b9da9e133214bb059c2ea0e7cd94841c527938ffc757316e9ca068fb2ee6234363492de882a11b70464998a5ba88c54930255402ae4babee01b631f42629582c9938de14bef286ce6a9663119630", 0xe8}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="6e4b3a0ff0b72a19965045faae6d0c6701a221d6241a63ee0931ca90f96892bbd8235e2d69b3d5829361b5d62a82a277d0a7310ed3501f647dfb1a980ec4b1a23dfb81c112341a76579feda541b1b63a7fb16ef04296243d2bef12cc16d827f50805ad6d521406c76a549b8bafa03b56263d3cf390c3b346f240a6d7a8e958af4ddbf0812f59d3b757ddde9845008cb1b03dd2cc1fd27625a8b8c4f3ca8e17e8dae7fe833292ba097b0828f06b0424f0c5800a6c0d90c433d19b8eb7bbfb150ef70a226f9c8dc0a510fe3e74a15d792e135634deda969fb682373a756d04fc5ba00d8339c0a09c7dd489ba0a164f9b3d1ad7c07e49076c1ea5359236dbc36893ba0e3ccc287eaac27748129c0d3913ba9b3e13d2c154e2f8925dc4854b362af35e154e7c2829124bd06951f5c8855d4257ffdfb58af8c6211530f39b41b48a668d92f61b3e8d75762cde15d714c98cbd7dcd054526c0dacbeda7f9aed228c68d926dab8f66d613443523b57c5973be3cda7d97e9c720913e80624bf86c6d7c273fc638326cb991a78bbbc7c8f0629a02f9a4e83ceff48815c90ae8731abaea7dc2317cc66a22459ff0b9685a8fdc06d9fee317179ad0dc709485db8351be5103a025cb27ac234dc39ddc6f89821114fb4a33d2887020e242134cb1fb6b6a1e5ce4dc31625c54d1524031b18b785bb4d5525eeaf5bd8f1647d07e35c13c6f33b54531f5faf3391e0bf8429f7132adc959f0ac5e030206a4880f5f647fc24f5273bb4b017685e11e6ad7b746e649ab9476e46a2fa5f49d7fc526d9b745db8447ce3597282596e2b79447e5487ca0758762978f9d7f7401d1bddd1002aada078afa09b8ddf5fc50da711c33a2a81cdf90c82fb344cfa9cac41c7600b3afe5ec2f966038aa019c9ca3259f3638757b0ee44cce70d50c838c1d0ea3a654d58da205d8fe7b66fa71096adfb5b6b02924d1f4692f3021bf5c8f5f718e02857e33b7d20fdeab51692ba19846c530108b248c157841dd195beb60693f0343b41873dbc061d73bb502e143d73920f1e5f6fcf71ccf9ab6a85034d27a790a05247c1a90448ebd50e11c887799924ff96ea0c5605ff8364f9d038ab86df0a786fa5b6c48bcc164131cfa90c3acb5864dd406dd3b7d66caf02adb0d2597a0a2122db4ea4506358367a3f045911b544ee0e3cd9477c261a6f515722d03005ccad91c233f08084170d45bc6fe1ec44906efad10e4edc226391d8a9e4adf486dcfe0b8eedf46d2efdd7e2f6cf9bc169586c8f57b35432e879640ee34fa63bdb95593d27a2a057472dec48c149af8024aecb87d689f195f82a603c18cbb4cd55887ae658252eb5e87d6dac0889570d49595447fdff2f2f3ac8c76951889bde019a810297cf8a0b4543f790f85147c07f5fbca0ca47a0eddba05bf77a4f66959a143086500b0e674df00167c13727a726a32725fb45921694271d4687ced64e82d172b7cc05f1763001d01774a26d87b0acc16107c6c804407f5379b8c1b7206bf0138483f71fb986143fc528630de77d8d1539ea5109e1b59936d5d607f5cd8ebd284a21f3dc72d07929bf009ab4b0ef89f694b4ed10962f9eeced75ecca2a6d3a96a6f6f5f37617e713a93107f6849202516c6019973bcb7590d24240978813c6e3d0dd1007c11641ebe658516b1f8059e9d0f72efb1670c027c4400156bb5df5aef6257702a13693a83f9bddd95bdf18b29578262e3b38e3b1baa6a535a8c4b9549f364cb218854e5377832b42ce2804fe186a48bdded82c514869211328aaa9b4fa099477fe6dc366bb9e9ae61490e58f4328ad1a54fa40f22d5d9a2d2ec016cb8f1936b2b3047eec23d931e86abae5d27b6a04d748fa5de375c62aa90177f4e802f83582de11b42ab397dd0f3ab27b1e72e45378dca3218eb4c8758aa5782ddf6d0b836552dd8a9758ae6d719ee28e5412468809dc06357309f7ac2193cb57f99c4b7978ecbc70d0ac9682279572d217e714cabdd9d2b6f9b15a0361708ec3352cbb0469fa9401efcfd6ab625ccd01d520aa248c2ddb85934309388170ec2dfbac14f7bf8f2d8e05d42421fdab5bbcf07ff464532504c86c521439c26028cd2431837c935d2900d6b87a3266aef12138bc528a7faa81f94d46c729672e53813225cb0aa0050cb465128208b147c776219b740b2a7028ce0f7f8753583b9d1bdbd768575302c267ed0ab6b4977688145ec97e3855fd8bdbe84dbc751ff9f54bf86a4af4101c9ce1eeebc71dfb18513495a25a99236e7e7daba4f30e72994ef2f17e7df2bac6dcb4995febf02ca158af53daa29da9f979fad11f2784bc04605546102847fe49dde64cf7ac5523e2408cc8f163137db95c1fea897e4da2939596569bde248433fe028c121467eaeefda3fd1f8db4f61f93cae7c5c7cc68f119f54bf71486975ca7053493edcdf970fad2b2a099258ddf1e1a7b8bc0fe5c5ae5f263f775f7ea6b0c18719d6a1abe64727a39844b1aa85ec2b9d3190911ca8a65e50215dc5a5b95ec7ddfa5983248e7884d623944b61120c52488b523e8b40f4d766c570276ac6103d0fd9b4d60af37544fb1440d96828be6841283afec5d6c2fdcb395063040eb3bef437b690f43480ee35452b2f8d2e848fe2a481cea3695c2162eaf36d2978121d5394a4fe913037ede362a1b9847b507ded1e6ea192eecc8242e6d016550be78661eba511fef66ea42d0a0250f90e897c15c03224566abd7289fc136e5e19f6d86c382667d88650ea4193aff470127658cc74497af1d630cdd1108a2e307d3aa3b138623496b5b8f6e17927f2e52ad822a0f2c401f61b4d8e47f0e1a12024a5feec7020df893df3cfdd978b223d1bd21f5d9dba0cb9b4d27a7a6e498b5153c60a289a9b46b6e878c3b05bc3a5888271b8fc0e8de19a3350573e97720f4354ebedb08bce711841fcc3df660cb55aba139603311c51fd0d804788134b090e3bb9ccd3c9cc6168b5e9d5899062f75dad2d479261aa4c03d96c931192f6d62fddfacbe00bc40ce220e0bf3a192ba6142b05f2144c09d9814a02f4ab5ae816e9b1a2cf4d998ab819fa70116edaca56762ec8a50a3db2f7109d4a2d2bd1b94451c2dda86ad23211d6dc7d07ccafa5a5a44601d193bc680d916d7680022873daa1dddebfedcb334b450660260a7c3964cdc81ce7b4a3b0adf4dcba0c58e3fda7d683083df11ab8173f1a24191e5d22197cb6e5a4a78355fb08c29658399a7ad3667dfcfae17fe339baa88f124c724999ed4a907487841762d6c888cc8322a32d1b53f3c5023aeb6d78aae17c81482acbed353592a56d9bb337c7a0230256c68a5c0a7c9ab0d9d3c838443523dfcdc5f68ffa6756fe635ae8090f1339f7e65607b0bc750b42ece4cedb7b5d42b7a5dd57e93c2f43563349504dd7f74784ab41956d246915cbc92214ccf78efd09eb33503fa819e4f888974f8edbf73c4bbe3dcf6429ecbddcc1cda62b908c807356014672d551c04ceba1d67a32fde0f2c01ccf1eb764556537bafa3ec85a5ae3a3e1f756f15accde5b6dc53a1189a20ddb928f70b44f7dd35ab4afa36381e8175a33f6b65fff1dfe233f0e82fd8cae1531cc8133738f51ddcdeb2d8159add7ece88febe6dcd5c96e2bfad40feb756022d7a17a1627ed41ade9b9ad178ebe6945ab148857f47594b8c73ce188c638286d62e94bef93332202c64c24f02a967dba8e7904a62e2ada376ae68c7c0bbfaf912958164a55058ff19aaa11d182d3c394ba8cdf8a2275711ad0ce7e022cd29cda29b521acd42ae0ce24a46292499ad7ae91619b5080bb6c47e81b20214c3e171155f4418cf874ecadc4e9000478b181cdadb69b7d92717f1f860dd08097249d12692d31246da032cb11f784f65bf237fa1d6630fb23aa79a16f103c4440bd05b4cbb9cba8f8c0a865681486c0ab23f77cd73108bd395a59bb8652c54cee91acbad09e85b9930769f0303415eb0004595dbbd770c83445220d46db7d9af8d9af005fc230c9c49bc295a27740da701280dc5c3b6e43320fa2e55d96ae8ad29a164d4352ea0b603167af70de7bfbaddf5785907c6602d537dba557c155e68782cf183561df81a3280b591ba4a1350b1e0c22dbc24561daca8c1409fc80d9594f56e537e7a7337ee777ac053d4728e3a853e405f5a356e266d04d69d7dc29326c9d2e751bbda6cd1b6b451bb05464566f1ee4d64b833cf34e735008acf31017b1a86723b56757f29db36b0355e94bdedadb43f0c1166e54b0f7651462445beea376e33bb2d45564387643c483dd33d33ec7f0e81cf973c1dcb830fdb7a361b8e76eb6baa69632aaf6371a882d7d56d96e0403bb17115b0a5354549106af48e8e0f7197a8bf5282c8aaa5ac8401946f452bd52e25719222490791e0268b25164131f5b6febac2392b0e2fd9a0d3a110bbab2718139094a0a7e2f8bee7f6178885bf5885111afda912614a9918443ae935f6fb8a82148bc576c973754efb38cab6b41e3c356d96c4e1c7775cdb6130e98c39502f9c03f9ba8129f3ee8e6c60d610b16b6cd50e5368a0468969a8dc806bfb0272ca779c1ecd1a753d62ba82d5f240601473cec95d94182400dfa1a7d75e3db4663f3033f89cd64b784398257151e7ab505f8116dea98347e1b0a76f58ef5c5510744d7035410d0805e5ee4a52a71ea4f1ce42aa8f1e8ae8a7d1afebc1b1339b51b6d552328a42916be2859ad157a76816d30ed3c7efc3d1f664c15fd0a3a20da1480ab8618d2a62b1a6b05855a03fa07880cadff11e2cdf6e13388295d755b90f78d78a9e57dec6b684f605928a3b875821006f29c52746e60bf046a617de1b9b15fc2d9e41fb4345b840e1f3b88435fcf7bd8eb0c5719013aae94ca249f2b489d1f32990b7cf102d50c7c41e6a9af11d854e4cb9fcd10c1101d64e274edb891a6333453ba6e66aac058ef7450898fc85d8d87fa6414dc016e7accdd387d3028dc0a824d70a3cd9749097af3d7c53ac07d4b9b36bd704410bdc181aa3bbe715fbafa9c684f516882e8f3e79f27fa93f4c623027ed0707b169b0fb249fb9990ce256768669b405bfe93290e0ed4ccbba1d9d0d4ad16c55895191311a58cf055b9712e465b902ff3a333c99070ecadb10316c75400eb5149e9f09d48385898caeaefa40520c1ee9bfdf399d6eae145e3124a9e23aa53dcb506f495cdb63297a7bb319a2161fdf0a7c9ff676f4d534274fb343c55eb066eca0efd9b9e54148e4595422694fa0f9dd13804a360e62e37bf87b789cb552cbc5eef9de2478e4da15b2092125e2fd61dfd9baf8f7edd6acfe241e2b8e20ee4e0830f3b459c9e07aff947707ed64451d1ac14555e2d5989a4be13eb32e4ef9c8d1a4364001d898c9a5a3cba3e8a37dfcf1083f9a3888e0c46d4282d0bdfd3f253bafe1c75bced5fd822bf9c3fe5ee4f77c45142433c126d029ad70b11fd41a81e8068f8ada784f1af131e95dc105e7a7a7ddccf9b6b26c307a55bb2829c31f4c4ae0eaeaabe1f66b1ffb948eecaa911bcd1a747d54272aa43e7e6cf1a4cf7096f791818f155f1fd1afaff809fc24c4e7df2732f4d43e230a91815eb1ed6a05d3b0f0e1515647a87731d887cdfc36dbeac9ae4790220f8580e95cea2ef26a5dddc94b26b8dccbe5b8ac7b6142f33b0d31827c73efd3b70310516de309905fa814b8c5d5bb4fae05a4c8994a1a592c72d9915de934a64d8274b0fc8c24969e39b6bd3e7c2ea2851f9b4ec5c321ecbef6b8e8fef4fe14104333bab32919f0a2a04ef9020", 0x1000}, {&(0x7f00000005c0)="fc7bc5d77b5b615e994258fe7a570be90c77eea1804d233a49022c7932cb0f21748f9d2a77e28d5f6ee476b5ca7273a17e492c70916a3013cdcfbf8b3a9e5046a6e4356660554feaec825c4696029549e619faa6c5dc4a6c9b1a8cd26db6fa1e3e0c3a120c4e3881e837656d0c4226002abeb9bbd3d0544dd812a6130b8741f2cfd386638a44", 0x86}, {&(0x7f0000002940)="d051de43d7a686502839773350d1e0aebf07958a81c23b799023f98572a810e79479da874c4277ad033e9d115538d9878c891f1b5d0cb36e07d8c0477952fb02eb29148cc4ca014d23cf48bed1f6909835f7a7137a319f79666de151ee564479806ca4d78a23", 0x66}, {&(0x7f00000029c0)="b83ca3e6fd73f7acca7d2cd1966f8ea58f5b3e45efcee048018b40b0203bf1cc5e07ba333e6f437ac56739c0f3aaf1bb703612fe23688c1baf40cf90f969aa194eb116a9c67cfcfbffb91aca90fd2d19a3682acff467f29ddf4385de26de53edb95d946c3522dd403c5b630cbe83a9be3cba4205c138bb12dede15b0f30c8c40a7121d1e4c792907b7ce66b9e9aaf1d9d1d850b0e0b2c7528f83e3a7f267b5d678e1160de0646e2b7e608ced96c5ed0227f2bf221a7bf16a91aedd5fc435e5bc780ac89fbe9f19560d91f279a23375c8fe3d1db1178428047efc4e69a0eee41820edac6650f3583efb3729a2294489c14157c59e94644e45cfdb21159a2af787fb3b834014fc2256141f106457e12be1506f50d219ae4710d391bc290d07a094bc6e8cd74aea502cd45fe6f4aa01953d56f2a960c5059ddd90a4fb8425cbd13dcb39f95b680603f8ee9603b9b94b625e05aae43475b6e88a8aee09fb0c943168c5d6facad91f6ce22effe4e264235a18c434b9f5cbce65363eb7b26ff6cbfa985fbc08663f0b3be88c11aa24d2689c2a6a1ef5ab7eba5ea0bd8140d95b68f41d4a634281c3ae8287deca2134ed994cea3dd93765f8cde6ca72146222377cdfe7a8edcf098eb5957e3dfe65d87e024220cf85580120a7d67fc41ad41979ccf22f83d20e71feef96cf188a838f5b70c16b7baa32dfe0b7c3aa1c3e0fcf28796dc23874a8967e422456da5a5de45013bb1a8080ad2c51fc909b309c6c52dc05e56a7f61c489aca03ad02fefefc8dd7c0e795403e8ded24dd57a406123b1f6f824648614c39ff15e3b9485a31e2d239e313f1e1d274fa0e287709cc521268911d41b9ba990e1a76d62b207b7c0a06b9b39c0c4031bea98ba676d6d6fb0041e56f0b8207f68f8650f492a9e7877a519e7866bce71bb2bcecc26ea285ba2a48e7c81eadb80c8bc287ab65d5ad74cd0d788819786753237e9b64c61ca63a9481341860648d2456c88d50d2325d52021a5e03b1ba1eaf291414ac8745d52af58e50a43e932eda4a57b4aae8e4d2ad4bdc46ba6c408d482ee24c6422652fb3176f711473a4d91b812434fe3410aa92ba694157c94b5f896c21270adb504b8ba211a35d0332549206ccb6b529e2d23160e8651cde3a79c13db0ed5a5b9cd7d588fb7c2942f67016a38d12b8bd1b169034df67fb965bc4bb2580440a30b70a6b8b9571b252d7aa15e3c4cc3389c90ad2a7907b4f2258aeb7caa8fef7d3644c4e0cea70b2ff52f50db65d4e9e63ccc54645a05b39346abc9df2efd03ecd9cf99fc9c71eb2452a4c8cd2432d1c415812b145beff0db8795bfb53d731004404c63d3586408f1466e813f0b5655987a61ae460d6c6d594b3b01c7113bed0b4bdad84516eca0789ad8a950329d7c325585077781c18134ad0828982260d9eb6b108e032f25b889f0274a55469da74d20f1742f1f0f44fc851484f7b0df2a1a55566ccb622273fd258185012578a8efeab46a9038245c569fb97e4a4013a2ea16b8023c90da798150b6b60e11cba5a4bd43500db400792d10da99e04bf095d5a70fc1392bc66342f2da64e2319b28967e66ce8b09cd1236a6ad28ceaf38dc5f6839fcff067eec1e72874f75294acac0ac26338cbe4ab68483f9182fadb3aa63269ef0065a522a181a5b6f68d08c3997717dedc7203aa22b436fcc176e06ba4261daa3519e6cc40c763026a15daad5c30cf70d043ef49ec9b54a8a6bd7c6bec306ea11b364645c2579caa3fa2d208418a9c4517d5efe730c470c93d51ffec4675ab027ac05fe426c102ed0e4c19c163745435c5fdab7a65010655a823efce90817849abd4260964a44575af17f85ed4d402b768d71425d8f9e107317436f411c4d3d63c376436746888c5d23c68bc23138418cbf01fc803d892539a533d70ecbf7b975c604c647b47aa192ab239ad3d6df513a67ce4143f8f8ea7127f4a248de9b3620f0a53f9d465bf0cd959a1a8b7b8d8c4f0a85584bd0c60e9a2b83feef838d297fc34380dfe5eb85635101d83e7b1590a13dfdda0c90d4650ec76d103044081836a61e3b60d0a5e4cd0963313e57d30e041c59535fe99662acd0314c270c07d0d8dbac4a2394f80625ef3fc1acfa8f5b4e6cb917f8a2d043aad2f7300c5ee743c0eeef4a23c5b10fd9b708f0c3d9e986c5839bf6d9c901d0e40e57d1a15684a817b5c3e3a9edbe91a466d89494646ac5caa829b0bae286461f6b2c6c91392818708d7912bbf8674861a6b4bfa196a255b4e584f778154fb1257f839f762d41c645bbe5b9857165d47b7f42da242fbc6ce994d649c2ccc8ff98428b4eb4292c4c1d9c8a413e68797dec97a09d92339205c7591401953dffd93b0ea83c05a2338fc9dfe5ffd99c877d1dabf729a3adc7dd3633c3bdaeefc08465ae4196aee68ad7c9cd04601cfe6b39473f6296a7aeaad6a33f733171067eceb37c424090a790d00e0a9b4572d270e6d8d61bfc0cd3323b5d972662cea78d1136d3a2ea24d3988061a8bfe32f12fe40ac7b5f31c87ddbd40ae128927566347e2747bec33325b48cd763f0600250fa287141b82d95ae4e91ad55a962ac5e3848fc7c2c97579b4e7c792e0c85d634ac2a404c8bb1843bfd7a96cf8bec1e0305fb1e80a57827fc47c901bae3c76488441f95e61c9ad7bb719e2520738c0a96d6bf56b97b2ce33bb357292cf46d93062422f018c7799bf555a3da8fdfe8d1dd79ed952f06e1b9df70f5c93d9d7c481eca5cfd019a6b6d3de3c04ecadb663c62c1c022508305f59a663ca43bfa0b71299052308949156d8e37c53e970e485814e9dd613ce2ab7442e5cbc7497e1177cdf64b634d97cebc1d33dfdb9462e71639e10b115bd40a7f9afdb1ffa0170548ba2cf16237abe1653a633abd5e82cb7404770c07198b8f75d195117b291c88621b4b02878b79fd1a0734b8a930b7504a99b2a7f8a38ddf399d7e276d59a0ccf6a5655d383c3dd891e6f69ce832460428a67757fc387d970f6b7fbe68851aafb2cf13deb32771695110820c4d9db0bd916658282eedb8bef15b648853e9031c79c9277b252f4d10914d017dff52dcaf4f1a4d438e1d8559b2c30dc63054a19be13926da9349efa8785b3425db4d35159297cff0dc80a01199af03297c338461d7a2363c3f642ba834b2064fd07b84bcd839282994bcd7fe3f9ada5562c9d94db0d292d57501d974de0647ad24dc4a144f76a6315a0c8a9c71f0adfdbfc0933c849db6feb7088577b7477734e5c25dc5f5083f91a0a3cd5ac7f0112d07c2bf9fcae03dbf4c6aaf323e20a73951ee5b8e8fe0e9fe7fcacc0aa5aad742c345762922bb808a7d139f9ab36cd8dbbe94bc6e7484b69b30db2662ac2a675745a716761626e623d25b694515eb408a9f90178f15e74e3a2671eaa48e059d5a703efdb30e8b8eca6ae61a4d6c3fed12defd4baf7bb21224f852c6a4abdfc97aac0bd7b2e3fc448e9019ce0994b03da396bc41c09ee634455a39c216a5bf2535dfbf15999ed7b765d7f91a78cc0a4d2849f0bf8ff8ae628df6bb910ee4e8092f7bc5e818c3fc5c19425c3672f3943db4e441b1ab2b29bf27057be393544efc10ebc158933219d3a332f577f8d955b0fbc79b27d09e465ed84f3a0e7a121e831c6fdfceceef865a701beab93be8ffb54fc5160a18b4b4be9ffc2e15237424eb6e82d000d25b852c4d4c16988827d88ab2d6262c8d6203c691e6521e1f34b01ed77cd69a0429a07618d3dcbc8c9c0f6425b6c7728a7a8e32ee3c5eebdf17abfdbbb3bc197aaa61e9d5c6a06f05acc2be468b278e484dc133876ef7c654eaeb675b6b7eca4255e10f4b61362b588ba17cb1acf20fff595a5340c60db1dd75146ea629b06bf390b1c5e76ccba2142627cc73d2907da6fff700e5528fb70cd43192a0114c0d3958202a88bc44cc225ce565088157753732103fea36c7b5e836005b6e0885dc92e451045371f4245cef8873d75e21d7eb2a020ab024d30610a7dd7e2d2f4cfdfe72d5839e3d7be2422c186d5497f39ca70817b0ef2df2e8f8d5c35417199e64bbea468933a0d6a3f42abcd2104acde44f4902b78759d6b30a78d4d64a736963b02b18027d9a6cc9d666ace4039ada9c8f0d693216bca037847cae3d6ce775673d6bb84e7e58ec912affbee44eaa0e4ba85a945f69a092aa14af8304828b0250b103cd4cb19b0e927ac0c3c725f028ed3ec60b7c40268798d782f3f9c259c2692526407e259c3053c7c8b69e0e36414081dadeeceb595770301ac3823db1d0438b328ec16acc6cdd234bc143709d5dfc88eb6a4422da82e9770225601213590a5834769fcf0304d04a9874a4f12a49457b7818965e8c330ac91b15be539773bb75c3e167e1a93f4cd31af405c71defdbf5add462795ace89c62b3548e91a800c5fa36530f24b6365db8d12783859ca4a8fe5a96e8eaf8369f74226cdbed2a36017691da6e97cd1ce8d5f29d09de59a3901f68af151b8a9e6dcf4eac954e369a98b1668d94d0076dc208332fe0283f18d1bf129574aad6e10064eeb2d671eabe1a72e86e2ab7f391bd2ed3a36dba9b88fb3b4ca5e3303b92dc72ade9b43fb8b2d16df3c244f1de31435e7e718af8acb4de4b4592eba84870f6a72c57252cb50bbeae2c4b3b28cc85c1cf3d80a0d644018914c6515306293c0c80eb21dafef689f516afbb6a65805da75197fd70d04225963b387b766ddb5e2465e071acea2963dd52d3d00032a2e4731f1e88891e41419bb6cc3c7b971604b2004ad9417132b293315d75d1fbe26f1e6ac903eca418fb83e70e34f67b9014c9cdce88081be365d2ee0e9fde083d3df5980b6fe2bdfa98f8a1973cdcbbd82e2756add5600e9e399acd779282ecc9bec13f4623e60487f10b2a2c6570740e96eb1e3d74a17a1e7ad77617b5cf82150623ac221fb783403fa2ba9e50d3b82334394a7c384a9440c69bbccb748f99fcd9094740fe2351e971a3a7f1153e1f0546791e42454ff24f109b89c02d887a715b10f2957141c6016f9157f422d544536dd0ca0f85b960fb5f11c5e9816b13ef50d818bd5d80ed8dca6665de73bdc2ef1dd5d68134131d06e487fa331ad5396307cabfcfc16510fe21818b319295a5a9b5f61f574253a62289f4c492e2e93264e8497e2481e32750fb4149e5af937a1a89ef30c0ca251234be8ecb50fb3536c8a4ce51081d9abca03b1d546774889138e9dfb6e3e0a959e9b1f526c8055760b0955fd6970a474efc5d846803af382fd566117493d4b59e154dfb417d3b8a36aa5c5fbc35b10a3e1eb779221d00a0b7c8b47a56190dfce1c941a644850cf8a0d50c0a2bd78606a437e0e6045bd0900a285a9847e3d63c69ec72230a3595f5458cd74ebc3e226d7f1b10cfae2f44d85f6b71c00fa57be32c842bd279c61eead8d6108ca46d6d3044f9f68a6e6bdcb1a6b6cbc385f2619d39905f285a3823758c04227c44481c2cbfc1e52fcd8d2ec31dba69bef716e4ee1a1cbccfadc67ccb623b7b8533a00818a7a7bb9ecb15f5e9026e616924afff80d9b15611e105400523d7c1db872e41aa7747caf9b736d7690084ed0aaec2b507b4208d9df13477a72b85bc08fe4f7d0eeaab8568b16343ac6d657295aaafe87b89f19f8ee1ede59b2a9ee3d0ea787088ce899934f97663a71a5b641a2e444dcced93e19587b1eb08ddf5ce4c85c5fbbbf78ac1f33d8151c8d0cf0c62a8014784a4ddd2ae5d96eecd69b8e999ee6bd9dab46af79c5f7fa609f3dc67e57c20df9c8bf9e296e753eed", 0x1000}], 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000100000002000000888056f91a6111c4e29397344c149d10149a3c91de833c5a6842c62edce0dcd37972c16c12d41fae03a261d1ac4e07e82aca23c5a4f68af8131bad3e27df2868cdeab8b069f6b0e9667e4d5f7e825e336ac14eb813e3e3", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0xd8, 0x8000}}, {{&(0x7f0000003dc0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003f00)=[{&(0x7f0000003e40)="8db717b197b210f7f81c77de839df853314c3b5ffc8ebaf104b2f954a85be532aefe1964fdc4b8ccfae5dae332b7152455ceb7c8083fd6", 0x37}, {&(0x7f0000003e80)="e947e3dabe64b02440", 0x9}, {&(0x7f0000003ec0)="c8a8b01314bb362808684326a72b798c5ebd751fa71c47455b933a313962f1", 0x1f}], 0x3, &(0x7f0000003f40)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="00adbea79d000b00000100"/20, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0], 0x58, 0x11}}], 0x2, 0x20000884) sendfile(r1, r2, 0x0, 0x800000080004103) (async) r7 = syz_open_dev$audion(&(0x7f0000000000), 0x7, 0x111001) splice(r7, &(0x7f0000000040)=0x5, r7, &(0x7f0000000080)=0x7fffffff, 0x2, 0x7) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x8, 0x4, 0x5, 0x80000000], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) (async) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x94, 0x0, &(0x7f0000000680)=[@request_death, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0), 0x0, 0x2, 0x28}, @ptr={0x70742a85, 0x0, &(0x7f0000000740)=""/212, 0xd4, 0x0, 0x2d}, @fda={0x66646185, 0x0, 0x1, 0x31}}, &(0x7f0000000280)={0x0, 0x28, 0x50}}}, @acquire_done={0x40106309, 0x1}, @dead_binder_done, @exit_looper, @register_looper, @register_looper, @release, @exit_looper], 0xfc, 0x0, &(0x7f0000003a40)="fc333ddecbf5f13fe848963a06924941b8a0adeb829dc09b4cc98f622d90a58b23c7b57515b0dfe42d3500079931629e54615554380c7f31af9d17cfde99b23c72a0551d20aeca44a0228cdb679fd109435645a07a798d59af81924fe9ba67aba21e0981dc2bf46e196c5f573c40e95ff7ae912f82efcd7acb020b0c4dcb5be35f59fb16a3065f28722e1b091573359926ebf9ddb85905fa2b99bb678966731ac1b267c502712a30d66e66db794eac0d4680d7c6acf17c56b9ee3b2261198c24cf023643775189e4900699e3ee46277649d66da079d6ab2ae252ca5bdb136f204404e573db87b3b497c5b7b515c3fde10806f8db1c75c20996dc6e63"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) [ 1606.135155][T22422] loop1: partition table beyond EOD, truncated [ 1606.145142][T22422] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 10:01:11 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x2287, 0x0) [ 1606.531079][T22451] FAULT_INJECTION: forcing a failure. [ 1606.531079][T22451] name fail_usercopy, interval 1, probability 0, space 0, times 0 10:01:11 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 44) 10:01:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x3) 10:01:11 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"e61b58eb675b55e53b67960c35e9a85a", 0x0, 0x0, {0x7fff, 0xffffffff}, {0x101, 0x200}, 0x4, [0x100000000, 0x0, 0x200, 0x6, 0x0, 0x1ff, 0x3fee, 0x8001, 0x8000000000000001, 0x12, 0xfffffffffffffffb, 0x1, 0x96cc, 0xeeb, 0x1ff, 0x5]}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000080)) [ 1606.531111][T22451] CPU: 0 PID: 22451 Comm: syz-executor.1 Not tainted 5.19.0-rc1-next-20220606-syzkaller #0 10:01:11 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1], 0x342) 10:01:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x800, 0x2}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="44000000100009040000000000000000e90800000ba129d0975a6d585bdea44b8b433eaa47182d870b64551b21d7a0d12d585b66257d", @ANYRES32=r7, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c0005800500010000040000"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', r7, 0x29, 0x40, 0x0, 0x2, 0x0, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x80, 0x7fe, 0x558a}}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getqdisc={0x24, 0x26, 0x100, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0x7}, {0x7, 0xfff1}, {0x6, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x4002000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) [ 1606.531137][T22451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1606.531150][T22451] Call Trace: [ 1606.531156][T22451] [ 1606.531165][T22451] dump_stack_lvl+0xcd/0x134 10:01:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x4) 10:01:11 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"e61b58eb675b55e53b67960c35e9a85a", 0x0, 0x0, {0x7fff, 0xffffffff}, {0x101, 0x200}, 0x4, [0x100000000, 0x0, 0x200, 0x6, 0x0, 0x1ff, 0x3fee, 0x8001, 0x8000000000000001, 0x12, 0xfffffffffffffffb, 0x1, 0x96cc, 0xeeb, 0x1ff, 0x5]}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async, rerun: 64) syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 64) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000080)) [ 1606.531208][T22451] should_fail.cold+0x5/0xa 10:01:11 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 45) 10:01:11 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x2288, 0x0) 10:01:11 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1], 0x342) [ 1606.531242][T22451] strncpy_from_user+0x34/0x3c0 [ 1606.531338][T22451] getname_flags.part.0+0x95/0x4f0 [ 1606.531376][T22451] getname+0x8e/0xd0 [ 1606.531404][T22451] do_sys_openat2+0xf5/0x4c0 10:01:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) (async) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x3, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x800, 0x2}, 0x20) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="44000000100009040000000000000000e90800000ba129d0975a6d585bdea44b8b433eaa47182d870b64551b21d7a0d12d585b66257d", @ANYRES32=r7, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c0005800500010000040000"], 0x44}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', r7, 0x29, 0x40, 0x0, 0x2, 0x0, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x80, 0x7fe, 0x558a}}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getqdisc={0x24, 0x26, 0x100, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0x7}, {0x7, 0xfff1}, {0x6, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x4002000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) [ 1606.531435][T22451] ? find_held_lock+0x2d/0x110 10:01:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x5) 10:01:11 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1], 0x342) 10:01:11 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"e61b58eb675b55e53b67960c35e9a85a", 0x0, 0x0, {0x7fff, 0xffffffff}, {0x101, 0x200}, 0x4, [0x100000000, 0x0, 0x200, 0x6, 0x0, 0x1ff, 0x3fee, 0x8001, 0x8000000000000001, 0x12, 0xfffffffffffffffb, 0x1, 0x96cc, 0xeeb, 0x1ff, 0x5]}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000080)) [ 1606.531470][T22451] ? build_open_flags+0x6f0/0x6f0 [ 1606.531505][T22451] ? lock_downgrade+0x6e0/0x6e0 10:01:11 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 46) [ 1606.531548][T22451] __x64_sys_openat+0x13f/0x1f0 10:01:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x2289, 0x0) 10:01:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) (async) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x3, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x800, 0x2}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="44000000100009040000000000000000e90800000ba129d0975a6d585bdea44b8b433eaa47182d870b64551b21d7a0d12d585b66257d", @ANYRES32=r7, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c0005800500010000040000"], 0x44}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', r7, 0x29, 0x40, 0x0, 0x2, 0x0, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x80, 0x7fe, 0x558a}}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getqdisc={0x24, 0x26, 0x100, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0x7}, {0x7, 0xfff1}, {0x6, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x4002000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x6) [ 1606.531579][T22451] ? __ia32_sys_open+0x1c0/0x1c0 [ 1606.531615][T22451] ? syscall_enter_from_user_mode+0x21/0x70 [ 1606.531650][T22451] ? syscall_enter_from_user_mode+0x21/0x70 [ 1606.531689][T22451] do_syscall_64+0x35/0xb0 10:01:12 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 10:01:12 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC], 0x342) [ 1606.531715][T22451] entry_SYSCALL_64_after_hwframe+0x46/0xb0 10:01:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x5382, 0x0) [ 1606.531748][T22451] RIP: 0033:0x7f74a5e3c024 10:01:12 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 47) 10:01:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7) [ 1606.531768][T22451] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 10:01:12 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) 10:01:12 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC], 0x342) [ 1606.531791][T22451] RSP: 002b:00007f74a6fe1eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 10:01:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x5385, 0x0) 10:01:12 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 1606.531813][T22451] RAX: ffffffffffffffda RBX: 00007f74a5ed2a20 RCX: 00007f74a5e3c024 10:01:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_pts(r1, 0x408402) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0xfffffffc, 0x8007, 0x5, 0x80bfe7, 0xc, "a47d4e3aa554395c4d7772637800"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1606.531828][T22451] RDX: 0000000000000002 RSI: 00007f74a6fe1fe0 RDI: 00000000ffffff9c [ 1606.531844][T22451] RBP: 00007f74a6fe1fe0 R08: 0000000000000000 R09: 00007f74a6fe21d0 10:01:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x5386, 0x0) 10:01:12 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 48) 10:01:12 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC], 0x342) 10:01:12 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0xf9, 0x3, 0x4, 0x100000000, 0x7, 0x4}) [ 1606.531859][T22451] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1606.531873][T22451] R13: 0000000000000004 R14: 0000000020000630 R15: 0000000000000002 10:01:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/81}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) [ 1606.531906][T22451] [ 1607.027240][T22499] ERROR: Out of memory at tomoyo_realpath_from_path. 10:01:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x541b, 0x0) 10:01:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_pts(r1, 0x408402) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0xfffffffc, 0x8007, 0x5, 0x80bfe7, 0xc, "a47d4e3aa554395c4d7772637800"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) syz_open_pts(r1, 0x408402) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r1, r2, 0x0, 0x800000080004103) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0xfffffffc, 0x8007, 0x5, 0x80bfe7, 0xc, "a47d4e3aa554395c4d7772637800"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) [ 1607.027486][T22499] loop1: detected capacity change from 0 to 4 10:01:12 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) (async) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0xf9, 0x3, 0x4, 0x100000000, 0x7, 0x4}) 10:01:12 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESDEC=r1], 0x342) 10:01:12 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 49) [ 1607.031852][T22499] Dev loop1: unable to read RDB block 4 [ 1607.031886][T22499] loop1: unable to read partition table 10:01:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) (async) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/81}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:12 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) (async) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0xf9, 0x3, 0x4, 0x100000000, 0x7, 0x4}) [ 1607.032721][T22499] loop1: partition table beyond EOD, truncated [ 1607.033240][T22499] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 1607.218723][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 10:01:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x5421, 0x0) 10:01:12 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESDEC=r1], 0x342) 10:01:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/81}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r0, r1, 0x0, 0x800000080004103) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r2, r3, 0x0, 0x800000080004103) (async) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/81}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) [ 1607.218771][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.324746][T22517] ERROR: Out of memory at tomoyo_realpath_from_path. 10:01:12 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 50) 10:01:12 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x401, 0x4, 0x3, 0x4, 0x9, "b619fe240c618b7da46325c7d558d45c940e27"}) [ 1607.324984][T22517] loop1: detected capacity change from 0 to 4 [ 1607.326557][T22517] Dev loop1: unable to read RDB block 4 10:01:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_pts(r1, 0x408402) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0xfffffffc, 0x8007, 0x5, 0x80bfe7, 0xc, "a47d4e3aa554395c4d7772637800"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 10:01:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x5450, 0x0) [ 1607.326591][T22517] loop1: unable to read partition table 10:01:13 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x401, 0x4, 0x3, 0x4, 0x9, "b619fe240c618b7da46325c7d558d45c940e27"}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r1, r2, 0x0, 0x800000080004103) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x401, 0x4, 0x3, 0x4, 0x9, "b619fe240c618b7da46325c7d558d45c940e27"}) (async) [ 1607.326736][T22517] loop1: partition table beyond EOD, truncated [ 1607.333269][T22517] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 10:01:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x5451, 0x0) 10:01:13 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 51) 10:01:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000881}, 0x4000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:13 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESDEC=r1], 0x342) [ 1607.646031][T22543] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1607.646189][T22543] loop1: detected capacity change from 0 to 4 10:01:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20004, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 10:01:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async, rerun: 64) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000881}, 0x4000) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:13 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x401, 0x4, 0x3, 0x4, 0x9, "b619fe240c618b7da46325c7d558d45c940e27"}) [ 1607.679449][T22543] Dev loop1: unable to read RDB block 4 [ 1607.679485][T22543] loop1: unable to read partition table [ 1607.679657][T22543] loop1: partition table beyond EOD, truncated 10:01:13 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 52) 10:01:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x5452, 0x0) 10:01:13 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX, @ANYRESDEC=r1], 0x342) 10:01:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000881}, 0x4000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r0, r1, 0x0, 0x800000080004103) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r2, r3, 0x0, 0x800000080004103) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000881}, 0x4000) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) 10:01:13 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000040)) 10:01:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20004, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20004, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) [ 1607.680190][T22543] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 10:01:13 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) (async, rerun: 32) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) (rerun: 32) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000040)) 10:01:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x5460, 0x0) [ 1607.878462][T22558] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1607.878630][T22558] loop1: detected capacity change from 0 to 4 10:01:13 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 53) 10:01:13 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX, @ANYRESDEC=r1], 0x342) 10:01:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20004, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20004, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) [ 1607.890305][T22558] Dev loop1: unable to read RDB block 4 [ 1607.890370][T22558] loop1: unable to read partition table 10:01:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ioctl$TCFLSH(r0, 0x540b, 0x1) sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0x3, 0x20002) dup3(r4, r3, 0x80000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x4eb}}, './file1\x00'}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/packet\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004103) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r7, r8, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) [ 1607.890510][T22558] loop1: partition table beyond EOD, truncated [ 1607.891031][T22558] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 10:01:13 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) (async, rerun: 32) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 32) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000040)) 10:01:13 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX, @ANYRESDEC=r1], 0x342) 10:01:13 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 54) 10:01:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x8933, 0x0) 10:01:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ioctl$TCFLSH(r0, 0x540b, 0x1) (async) sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) (async) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0x3, 0x20002) (async) dup3(r4, r3, 0x80000) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x4eb}}, './file1\x00'}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/packet\x00') (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004103) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r7, r8, 0x0, 0x800000080004103) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) [ 1608.313780][T22570] loop1: detected capacity change from 0 to 4 10:01:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 10:01:13 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 55) [ 1608.315439][T22570] Dev loop1: unable to read RDB block 4 [ 1608.315474][T22570] loop1: unable to read partition table 10:01:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x400448c9, 0x0) 10:01:13 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000080)={0x6, 0x40}) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 10:01:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ioctl$TCFLSH(r0, 0x540b, 0x1) sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0x3, 0x20002) dup3(r4, r3, 0x80000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x4eb}}, './file1\x00'}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/packet\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004103) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r7, r8, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) ioctl$TCFLSH(r0, 0x540b, 0x1) (async) sendfile(r0, r1, 0x0, 0x800000080004103) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r2, r3, 0x0, 0x800000080004103) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0x3, 0x20002) (async) dup3(r4, r3, 0x80000) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x4eb}}, './file1\x00'}) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='net/packet\x00') (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r5, r6, 0x0, 0x800000080004103) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r7, r8, 0x0, 0x800000080004103) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) (async) 10:01:13 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESDEC=r1], 0x342) [ 1608.315628][T22570] loop1: partition table beyond EOD, truncated [ 1608.316126][T22570] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 10:01:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) 10:01:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x400448dd, 0x0) [ 1608.352802][T22572] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1608.505478][T22577] ERROR: Out of memory at tomoyo_realpath_from_path. 10:01:13 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000080)={0x6, 0x40}) (async) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 10:01:13 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 56) [ 1608.528609][T22582] loop1: detected capacity change from 0 to 4 [ 1608.535246][T22582] Dev loop1: unable to read RDB block 4 10:01:13 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESDEC=r1], 0x342) 10:01:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x4, 0x7, 0x8, 0x1, 0x80, "7397fd5c1bf689b3f7e7ba23dace0dc682f268", 0x80, 0x9}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000000)={0x4, 0x1, 0x7}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x1, 0x8, 0x0, 0x80000001, 0x1, "45089afa5c2ba7f5c953f2e9d23f0a9ef1ca2c", 0x2, 0x9}) 10:01:14 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000080)={0x6, 0x40}) (async) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 10:01:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x400454ca, 0x0) [ 1608.535280][T22582] loop1: unable to read partition table [ 1608.535437][T22582] loop1: partition table beyond EOD, truncated 10:01:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1608.535926][T22582] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 10:01:14 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESDEC=r1], 0x342) [ 1608.563814][T22581] sg_write: data in/out 926365459/788 bytes for SCSI command 0x30-- guessing data in; [ 1608.563814][T22581] program syz-executor.5 not setting count and/or reply_len properly 10:01:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x4, 0x7, 0x8, 0x1, 0x80, "7397fd5c1bf689b3f7e7ba23dace0dc682f268", 0x80, 0x9}) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) (async) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000000)={0x4, 0x1, 0x7}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x1, 0x8, 0x0, 0x80000001, 0x1, "45089afa5c2ba7f5c953f2e9d23f0a9ef1ca2c", 0x2, 0x9}) 10:01:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)={0x800, 0x9, 0x1, 0x4, 0x15, "a05d8ce3f264f3b5"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 10:01:14 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 57) 10:01:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x40049409, 0x0) 10:01:14 executing program 3: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f0000000100)={0x3, 0x0, 0x19, 0xa, 0x134, &(0x7f0000000280)}) [ 1608.651873][T22597] FAULT_INJECTION: forcing a failure. [ 1608.651873][T22597] name fail_usercopy, interval 1, probability 0, space 0, times 0 10:01:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x4, 0x7, 0x8, 0x1, 0x80, "7397fd5c1bf689b3f7e7ba23dace0dc682f268", 0x80, 0x9}) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000000)={0x4, 0x1, 0x7}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x1, 0x8, 0x0, 0x80000001, 0x1, "45089afa5c2ba7f5c953f2e9d23f0a9ef1ca2c", 0x2, 0x9}) 10:01:14 executing program 3: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f0000000100)={0x3, 0x0, 0x19, 0xa, 0x134, &(0x7f0000000280)}) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r1, r2, 0x0, 0x800000080004103) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r3, r4, 0x0, 0x800000080004103) (async) ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f0000000100)={0x3, 0x0, 0x19, 0xa, 0x134, &(0x7f0000000280)}) (async) 10:01:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x40086602, 0x0) [ 1608.651902][T22597] CPU: 1 PID: 22597 Comm: syz-executor.4 Not tainted 5.19.0-rc1-next-20220606-syzkaller #0 10:01:14 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX, @ANYRESHEX=r1, @ANYRESDEC=r1], 0x342) 10:01:14 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 58) 10:01:14 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r0, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x40186366, 0x0) 10:01:14 executing program 3: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) (async) ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f0000000100)={0x3, 0x0, 0x19, 0xa, 0x134, &(0x7f0000000280)}) [ 1608.651929][T22597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 10:01:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)={0x800, 0x9, 0x1, 0x4, 0x15, "a05d8ce3f264f3b5"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r1, r2, 0x0, 0x800000080004103) (async) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)={0x800, 0x9, 0x1, 0x4, 0x15, "a05d8ce3f264f3b5"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) 10:01:14 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX, @ANYRESHEX=r1, @ANYRESDEC=r1], 0x342) 10:01:14 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r0, 0x0, 0x800000080004103) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:14 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 59) 10:01:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x401c5820, 0x0) 10:01:14 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) [ 1608.651943][T22597] Call Trace: [ 1608.651950][T22597] [ 1608.651959][T22597] dump_stack_lvl+0xcd/0x134 [ 1608.652001][T22597] should_fail.cold+0x5/0xa 10:01:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x4020940d, 0x0) 10:01:14 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) (async) [ 1608.652039][T22597] _copy_to_user+0x2a/0x140 [ 1608.652068][T22597] simple_read_from_buffer+0xcc/0x160 [ 1608.652110][T22597] proc_fail_nth_read+0x187/0x220 10:01:14 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 60) 10:01:14 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r0, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r0, r0, 0x0, 0x800000080004103) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) [ 1608.652138][T22597] ? proc_exe_link+0x1d0/0x1d0 10:01:14 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX, @ANYRESHEX=r1, @ANYRESDEC=r1], 0x342) 10:01:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x80086301, 0x0) 10:01:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)={0x800, 0x9, 0x1, 0x4, 0x15, "a05d8ce3f264f3b5"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 10:01:15 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 61) 10:01:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000000)={{0x1, 0x6}, 'port1\x00', 0x0, 0x180002, 0x3, 0x4, 0x81, 0x0, 0x4, 0x0, 0x4, 0x1}) 10:01:15 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) (async) 10:01:15 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1], 0x342) 10:01:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x80086601, 0x0) [ 1608.652162][T22597] ? security_file_permission+0xab/0xd0 [ 1608.652193][T22597] ? proc_exe_link+0x1d0/0x1d0 [ 1608.652216][T22597] vfs_read+0x1ef/0x5d0 [ 1608.652258][T22597] ksys_read+0x127/0x250 [ 1608.652292][T22597] ? vfs_write+0xac0/0xac0 10:01:15 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 62) [ 1608.652325][T22597] ? syscall_enter_from_user_mode+0x21/0x70 [ 1608.652358][T22597] ? syscall_enter_from_user_mode+0x21/0x70 10:01:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x801c581f, 0x0) 10:01:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000000)={{0x1, 0x6}, 'port1\x00', 0x0, 0x180002, 0x3, 0x4, 0x81, 0x0, 0x4, 0x0, 0x4, 0x1}) 10:01:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x2, 0x1ff, 0x40, 0xae6, 0x3, "bf005c9839904f3a7bb62f611f2bd291504822"}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x8, 0x8}, 0xc) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f00000001c0)) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000140), 0x10) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x224403, 0x0) poll(&(0x7f0000000180)=[{r4, 0xe}, {r2, 0x2080}, {r4, 0x41}, {r5, 0x10001}, {r0, 0xd02a}, {r6, 0x5001}], 0x2000000000000137, 0x7) [ 1608.652398][T22597] do_syscall_64+0x35/0xb0 10:01:15 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1], 0x342) [ 1608.652424][T22597] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 1608.652459][T22597] RIP: 0033:0x7f613ec3bcbc 10:01:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000000)={{0x1, 0x6}, 'port1\x00', 0x0, 0x180002, 0x3, 0x4, 0x81, 0x0, 0x4, 0x0, 0x4, 0x1}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r0, r1, 0x0, 0x800000080004103) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000000)={{0x1, 0x6}, 'port1\x00', 0x0, 0x180002, 0x3, 0x4, 0x81, 0x0, 0x4, 0x0, 0x4, 0x1}) (async) [ 1608.652479][T22597] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 10:01:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x2000001a}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 10:01:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x2, 0x1ff, 0x40, 0xae6, 0x3, "bf005c9839904f3a7bb62f611f2bd291504822"}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x8, 0x8}, 0xc) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f00000001c0)) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000140), 0x10) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x224403, 0x0) poll(&(0x7f0000000180)=[{r4, 0xe}, {r2, 0x2080}, {r4, 0x41}, {r5, 0x10001}, {r0, 0xd02a}, {r6, 0x5001}], 0x2000000000000137, 0x7) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x2, 0x1ff, 0x40, 0xae6, 0x3, "bf005c9839904f3a7bb62f611f2bd291504822"}) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r2, r3, 0x0, 0x800000080004103) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x8, 0x8}, 0xc) (async) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f00000001c0)) (async) creat(&(0x7f0000000100)='./file0\x00', 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000140), 0x10) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x224403, 0x0) (async) poll(&(0x7f0000000180)=[{r4, 0xe}, {r2, 0x2080}, {r4, 0x41}, {r5, 0x10001}, {r0, 0xd02a}, {r6, 0x5001}], 0x2000000000000137, 0x7) (async) 10:01:15 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 63) 10:01:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0xc0045878, 0x0) 10:01:15 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1], 0x342) [ 1608.652501][T22597] RSP: 002b:00007f613febf160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 10:01:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = accept$packet(r1, 0x0, &(0x7f0000000040)) preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000080)=""/107, 0x6b}, {&(0x7f0000000100)=""/226, 0xe2}, {&(0x7f0000000280)=""/89, 0x59}, {&(0x7f0000000300)=""/65, 0x41}], 0x4, 0x401, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) [ 1608.652523][T22597] RAX: ffffffffffffffda RBX: 00007f613ed9bf60 RCX: 00007f613ec3bcbc [ 1608.652540][T22597] RDX: 000000000000000f RSI: 00007f613febf1e0 RDI: 0000000000000004 10:01:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x2, 0x1ff, 0x40, 0xae6, 0x3, "bf005c9839904f3a7bb62f611f2bd291504822"}) (async, rerun: 64) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) (async) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x8, 0x8}, 0xc) (async) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f00000001c0)) (async, rerun: 32) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x78) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000140), 0x10) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x224403, 0x0) poll(&(0x7f0000000180)=[{r4, 0xe}, {r2, 0x2080}, {r4, 0x41}, {r5, 0x10001}, {r0, 0xd02a}, {r6, 0x5001}], 0x2000000000000137, 0x7) 10:01:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0xc0045878, 0x0) 10:01:15 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 64) [ 1608.652553][T22597] RBP: 00007f613febf1d0 R08: 0000000000000000 R09: 0000000000000000 10:01:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x2000001a}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1608.652568][T22597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 10:01:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = accept$packet(r1, 0x0, &(0x7f0000000040)) preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000080)=""/107, 0x6b}, {&(0x7f0000000100)=""/226, 0xe2}, {&(0x7f0000000280)=""/89, 0x59}, {&(0x7f0000000300)=""/65, 0x41}], 0x4, 0x401, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r0, r1, 0x0, 0x800000080004103) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) accept$packet(r1, 0x0, &(0x7f0000000040)) (async) preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000080)=""/107, 0x6b}, {&(0x7f0000000100)=""/226, 0xe2}, {&(0x7f0000000280)=""/89, 0x59}, {&(0x7f0000000300)=""/65, 0x41}], 0x4, 0x401, 0x2) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) 10:01:15 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESHEX, @ANYRESHEX=r1, @ANYRESDEC=r1], 0x342) [ 1608.652582][T22597] R13: 00007ffd5d4b362f R14: 00007f613febf300 R15: 0000000000022000 10:01:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0xc0189436, 0x0) 10:01:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x2000001a}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x2000001a}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) [ 1608.652618][T22597] [ 1608.715407][T22601] sg_write: data in/out 926365459/788 bytes for SCSI command 0x30-- guessing data in; [ 1608.715407][T22601] program syz-executor.5 not setting count and/or reply_len properly 10:01:15 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 65) 10:01:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) r2 = accept$packet(r1, 0x0, &(0x7f0000000040)) preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000080)=""/107, 0x6b}, {&(0x7f0000000100)=""/226, 0xe2}, {&(0x7f0000000280)=""/89, 0x59}, {&(0x7f0000000300)=""/65, 0x41}], 0x4, 0x401, 0x2) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:15 executing program 3: syz_open_dev$rtc(&(0x7f00000001c0), 0x1, 0x8400) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0x6) sendfile(r0, r1, 0x0, 0x800000080004103) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0xba122b2bbf6e9796, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000080)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000380), 0x64040, 0x0) ioctl$RTC_IRQP_SET(r6, 0x4008700c, 0xa51) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r5, 0x155b4b48f3aba301}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x60, r5, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000044}, 0x40204c4) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000000040)) 10:01:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0xc020660b, 0x0) [ 1608.785260][T22615] loop1: detected capacity change from 0 to 4 [ 1608.821130][T22615] Dev loop1: unable to read RDB block 4 10:01:15 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESHEX, @ANYRESHEX=r1, @ANYRESDEC=r1], 0x342) [ 1608.821167][T22615] loop1: unable to read partition table 10:01:15 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000180)={0x1, 0x6, 0x0, 0x5, 0x5, "cd39f62c891034c279f958521869448acc1794", 0xffde, 0x7}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x402) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) 10:01:15 executing program 3: syz_open_dev$rtc(&(0x7f00000001c0), 0x1, 0x8400) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0x6) (async) sendfile(r0, r1, 0x0, 0x800000080004103) (async, rerun: 32) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0xba122b2bbf6e9796, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) (rerun: 32) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000080)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000380), 0x64040, 0x0) ioctl$RTC_IRQP_SET(r6, 0x4008700c, 0xa51) (async) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r5, 0x155b4b48f3aba301}, 0x14}}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x60, r5, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000044}, 0x40204c4) (async) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000000040)) [ 1608.821302][T22615] loop1: partition table beyond EOD, truncated [ 1608.821779][T22615] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 10:01:15 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 66) 10:01:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x2, 0x3, 0xb5, 0x401, 0x14, "2ca941bc746d8ab6"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0xc0481273, 0x0) [ 1608.891705][T22621] sg_write: data in/out 926365459/788 bytes for SCSI command 0x30-- guessing data in; [ 1608.891705][T22621] program syz-executor.5 not setting count and/or reply_len properly 10:01:15 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESHEX, @ANYRESHEX=r1, @ANYRESDEC=r1], 0x342) 10:01:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x2, 0x3, 0xb5, 0x401, 0x14, "2ca941bc746d8ab6"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:16 executing program 3: syz_open_dev$rtc(&(0x7f00000001c0), 0x1, 0x8400) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0x6) sendfile(r0, r1, 0x0, 0x800000080004103) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0xba122b2bbf6e9796, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000080)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000380), 0x64040, 0x0) ioctl$RTC_IRQP_SET(r6, 0x4008700c, 0xa51) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r5, 0x155b4b48f3aba301}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x60, r5, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000044}, 0x40204c4) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000000040)) syz_open_dev$rtc(&(0x7f00000001c0), 0x1, 0x8400) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$KDDELIO(r2, 0x4b35, 0x6) (async) sendfile(r0, r1, 0x0, 0x800000080004103) (async) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0xba122b2bbf6e9796, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000080)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000380), 0x64040, 0x0) (async) ioctl$RTC_IRQP_SET(r6, 0x4008700c, 0xa51) (async) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r5, 0x155b4b48f3aba301}, 0x14}}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x60, r5, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000044}, 0x40204c4) (async) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000000040)) (async) 10:01:16 executing program 4: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227d, 0x0) 10:01:16 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 67) 10:01:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x2, 0x3, 0xb5, 0x401, 0x14, "2ca941bc746d8ab6"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r0, r1, 0x0, 0x800000080004103) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r2, r3, 0x0, 0x800000080004103) (async) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x2, 0x3, 0xb5, 0x401, 0x14, "2ca941bc746d8ab6"}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) 10:01:16 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESHEX, @ANYRESHEX=r1, @ANYRESDEC=r1], 0x342) [ 1608.956376][T22631] loop1: detected capacity change from 0 to 4 [ 1608.966416][T22631] Dev loop1: unable to read RDB block 4 [ 1608.966449][T22631] loop1: unable to read partition table [ 1608.966588][T22631] loop1: partition table beyond EOD, truncated 10:01:16 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000180)={0x1, 0x6, 0x0, 0x5, 0x5, "cd39f62c891034c279f958521869448acc1794", 0xffde, 0x7}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x402) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r0, r1, 0x0, 0x800000080004103) (async) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000180)={0x1, 0x6, 0x0, 0x5, 0x5, "cd39f62c891034c279f958521869448acc1794", 0xffde, 0x7}) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x402) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) (async) 10:01:16 executing program 4: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x342) (async) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227d, 0x0) 10:01:16 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 68) 10:01:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000000)=""/96) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:16 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESHEX, @ANYRESHEX=r1, @ANYRESDEC=r1], 0x342) 10:01:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) r6 = timerfd_create(0x3, 0x80000) dup(r6) ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, &(0x7f0000000080)={0x2, 0x0, 0x5, 0x6, 0x34, &(0x7f0000000280)="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"}) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) ioctl$KDDELIO(r7, 0x4b35, 0x0) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$TCSETS2(r8, 0x402c542b, &(0x7f0000000200)={0xf, 0x8, 0x2, 0x80000001, 0x3, "ada41d49eba906177a1e7afeeffdc54a43e6a7", 0x2, 0x4}) sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000aafdffff", @ANYRES32=r1, @ANYBLOB="0280000007001500000000000a877674"]) ioctl$TIOCL_PASTESEL(r9, 0x541c, &(0x7f0000000100)) 10:01:16 executing program 4: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227d, 0x0) [ 1608.968103][T22631] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 1609.045866][T22636] sg_write: data in/out 926365459/788 bytes for SCSI command 0x30-- guessing data in; [ 1609.045866][T22636] program syz-executor.5 not setting count and/or reply_len properly 10:01:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) (async) r6 = timerfd_create(0x3, 0x80000) dup(r6) (async, rerun: 32) ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, &(0x7f0000000080)={0x2, 0x0, 0x5, 0x6, 0x34, &(0x7f0000000280)="699cc99fe7b2c236d79143ed44d49b39c4d2db7115adce7d35df7fe5f6cf99def40399ba9bc32de066e3903ad56968b6a020f8bf79f6632a3b120aa88b8596dafacf70442e8ae11a19fa1c330e41bff9c72e01f738672602230027b4bf2d977f7c1a5f767eb32f0e9111dd0cba64314a8f6e53c3c4d5e965824e5230c8cd9bda85175b724d5ea38404d3e4f3758b3e87fb1aa04ecf8678232571a82b24d9ae80d6ae19a81c49e9acfaf02a573f84eaeec36e58af0caa5f99adee5b0cbc0bb4193ed44a891da6d148264171d163cec06253fc8dc386dc358669fddf3ee0c8ad0243f4508bb078bc31562409859af4cf08c077cf448de258422d75f2869bb4f743999e95d9b2091a2c779c8260ce012ef997271b597647993c3cf5e9f7bb667b00e52c87d92c73de2da28f71497d03dad0ea4120a73ca4badae28121bdd4375c2cfdb267c809a8076f0f0351479e9fff4b91a6af518962e3eb9e32e2022773597bca8f1fc1bb8274bfb833d1c96118580ad9148a490fc96d0884e21c9b89a06280083626573f107f92cabbae6aa761463499d80d69c01dd443eb96df613b57d5190822bb35fc3be39872f7b6e02db4e16176b566b760cdce27afc4cd07e8e52bc21a22b47b06829c2bbfc3c9aac14ea9c591892d139eb7562a4d36de7825e4c108514cb6cbcb74694eea5bee8bea3bfb8c29f3bd202c8947c624875613df34c37472afb8f438edfbcc4effd30e0a5941fe85de4cc8f364554a60a92ea9798f33b58f961ca1688c0c0c7d41c9b7a12361ab01b8f911276e367ab6ec6d1b20d0e93f544fc0c7353458f3c3c900b6e5793d9c0c7943c6cc9d3a7efad80b73630d5569e75b4697034c99bb7ce11f27d7c2ad1d4da600346e8affaa9f3718c898fbf64d0d73cf250d3da9d3eb151cf105f25602a100f5a04ea33bbaa5d46339ef3e3c41040a1c3bf4a238ed3d08c9eea2fb509d480a19f49d233d06989aac750ec5335d7bd52be46a90db60388cd0876b1a30bb316ee57851f0e81f7911f391785d282fdcecfb7a71413b5bfd322a5304636cbc23f19a855244978fc09387126599bbd13b429bda69163642b64fde9697c92287e3cb5ec49e9887a9bbaa0c901abf7280d2cf686a6fc4ac7c8cd27b91783af286b11c5aa37e9e12750a5d80a9804f25a49f5243aa8ae4a08c9fc072080fefd9a9b724934eaa8e778669b6509c6addbcd73ba253f5cfe6c9b21b7d38d9749206ec9102b4bcde9c88d5b166d8db8d52c3924ad4802da84db7a23a108195cb72cbe18e2d1b0bcac8178c540dd3f129611e53b508c8ff4855124abdf71b02d8ee8acde8b35ba69ed78ed620200af162fc761b2c67ccd47612e2f63a6a640e8d66d00d72051f3baed898604255285a27ce9b39f258c52589d082b3da287b9bf2be91c207e956bc98468426f1dc9366abd97c74"}) (rerun: 32) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) ioctl$KDDELIO(r7, 0x4b35, 0x0) (async) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$TCSETS2(r8, 0x402c542b, &(0x7f0000000200)={0xf, 0x8, 0x2, 0x80000001, 0x3, "ada41d49eba906177a1e7afeeffdc54a43e6a7", 0x2, 0x4}) sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000aafdffff", @ANYRES32=r1, @ANYBLOB="0280000007001500000000000a877674"]) (async, rerun: 32) ioctl$TIOCL_PASTESEL(r9, 0x541c, &(0x7f0000000100)) (rerun: 32) 10:01:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000000)=""/96) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r0, r1, 0x0, 0x800000080004103) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000000)=""/96) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) 10:01:16 executing program 5: add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRESHEX=r0, @ANYRESDEC=r0], 0x342) 10:01:16 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 69) [ 1609.154021][T22657] loop1: detected capacity change from 0 to 4 [ 1609.169221][T22657] Dev loop1: unable to read RDB block 4 10:01:16 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xfffffffffffffcac) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = syz_open_procfs(r2, &(0x7f0000000100)='numa_maps\x00') sendfile(r1, r3, 0x0, 0x800000080004103) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x1, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4800) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) [ 1609.169259][T22657] loop1: unable to read partition table 10:01:16 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000180)={0x1, 0x6, 0x0, 0x5, 0x5, "cd39f62c891034c279f958521869448acc1794", 0xffde, 0x7}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x402) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r0, r1, 0x0, 0x800000080004103) (async) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000180)={0x1, 0x6, 0x0, 0x5, 0x5, "cd39f62c891034c279f958521869448acc1794", 0xffde, 0x7}) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x402) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) (async) 10:01:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async, rerun: 64) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 32) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (rerun: 32) sendfile(r4, r5, 0x0, 0x800000080004103) (async, rerun: 64) r6 = timerfd_create(0x3, 0x80000) (rerun: 64) dup(r6) (async) ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, &(0x7f0000000080)={0x2, 0x0, 0x5, 0x6, 0x34, &(0x7f0000000280)="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"}) (async, rerun: 32) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) (rerun: 32) ioctl$KDDELIO(r7, 0x4b35, 0x0) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$TCSETS2(r8, 0x402c542b, &(0x7f0000000200)={0xf, 0x8, 0x2, 0x80000001, 0x3, "ada41d49eba906177a1e7afeeffdc54a43e6a7", 0x2, 0x4}) sendfile(r2, r3, 0x0, 0x800000080004103) (async) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000000040)) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000aafdffff", @ANYRES32=r1, @ANYBLOB="0280000007001500000000000a877674"]) (async, rerun: 32) ioctl$TIOCL_PASTESEL(r9, 0x541c, &(0x7f0000000100)) 10:01:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000000)=""/96) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:16 executing program 5: add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRESHEX=r0, @ANYRESDEC=r0], 0x342) 10:01:16 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 70) 10:01:16 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xfffffffffffffcac) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = syz_open_procfs(r2, &(0x7f0000000100)='numa_maps\x00') sendfile(r1, r3, 0x0, 0x800000080004103) (async) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x1, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4800) (async) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) [ 1609.169412][T22657] loop1: partition table beyond EOD, truncated [ 1609.169882][T22657] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 1609.334622][T22675] loop1: detected capacity change from 0 to 4 [ 1609.336812][T22675] Dev loop1: unable to read RDB block 4 [ 1609.336845][T22675] loop1: unable to read partition table [ 1609.337629][T22675] loop1: partition table beyond EOD, truncated [ 1609.338146][T22675] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 10:01:16 executing program 5: add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRESHEX=r0, @ANYRESDEC=r0], 0x342) 10:01:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) dup(r2) sendfile(r0, r1, 0x0, 0x800000080004103) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) ioctl$FIONCLEX(r5, 0x5450) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r6, r7, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) 10:01:16 executing program 3: ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000580)={0x1, 0x1, &(0x7f0000000400)=""/64, &(0x7f0000000440)=""/99, &(0x7f00000004c0)=""/192, 0x5000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x571401, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000006a00000327bd7000fb070000000000000000000008090a000100000008000a00080001000000000000000000000000003265838a58991670eb6d6d4b6a3ca46d0f16f59c0600000031351b4f08217a11b312744f65698b69134ffa67b6545e79e83bb6907758e5bbe22f"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x884) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000100)={0x20, "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"}) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000340)) 10:01:16 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xfffffffffffffcac) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = syz_open_procfs(r2, &(0x7f0000000100)='numa_maps\x00') sendfile(r1, r3, 0x0, 0x800000080004103) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x1, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4800) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) 10:01:16 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 71) [ 1609.421497][T22677] sg_write: data in/out 926365459/788 bytes for SCSI command 0x30-- guessing data in; [ 1609.421497][T22677] program syz-executor.5 not setting count and/or reply_len properly 10:01:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) dup(r2) (async) sendfile(r0, r1, 0x0, 0x800000080004103) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) ioctl$FIONCLEX(r5, 0x5450) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r6, r7, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) [ 1609.463378][T22689] loop1: detected capacity change from 0 to 4 10:01:17 executing program 3: ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000580)={0x1, 0x1, &(0x7f0000000400)=""/64, &(0x7f0000000440)=""/99, &(0x7f00000004c0)=""/192, 0x5000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x571401, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000006a00000327bd7000fb070000000000000000000008090a000100000008000a00080001000000000000000000000000003265838a58991670eb6d6d4b6a3ca46d0f16f59c0600000031351b4f08217a11b312744f65698b69134ffa67b6545e79e83bb6907758e5bbe22f"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x884) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000100)={0x20, "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"}) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000580)={0x1, 0x1, &(0x7f0000000400)=""/64, &(0x7f0000000440)=""/99, &(0x7f00000004c0)=""/192, 0x5000}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x571401, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000006a00000327bd7000fb070000000000000000000008090a000100000008000a00080001000000000000000000000000003265838a58991670eb6d6d4b6a3ca46d0f16f59c0600000031351b4f08217a11b312744f65698b69134ffa67b6545e79e83bb6907758e5bbe22f"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x884) (async) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000100)={0x20, "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"}) (async) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) (async) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000340)) (async) 10:01:17 executing program 5: add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRESHEX=r0, @ANYRESDEC=r0], 0x342) 10:01:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x1, 0x202801) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) 10:01:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) dup(r2) (async) sendfile(r0, r1, 0x0, 0x800000080004103) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) ioctl$FIONCLEX(r5, 0x5450) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r6, r7, 0x0, 0x800000080004103) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) 10:01:17 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 72) [ 1609.500542][T22689] Dev loop1: unable to read RDB block 4 [ 1609.500583][T22689] loop1: unable to read partition table 10:01:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x1, 0x202801) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) (async) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) 10:01:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = eventfd2(0x1, 0x80000) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_hsr\x00'}, 0x18) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0, r2}]) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:17 executing program 3: ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000580)={0x1, 0x1, &(0x7f0000000400)=""/64, &(0x7f0000000440)=""/99, &(0x7f00000004c0)=""/192, 0x5000}) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x571401, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000006a00000327bd7000fb070000000000000000000008090a000100000008000a00080001000000000000000000000000003265838a58991670eb6d6d4b6a3ca46d0f16f59c0600000031351b4f08217a11b312744f65698b69134ffa67b6545e79e83bb6907758e5bbe22f"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x884) (async) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000100)={0x20, "765f462d4c7ed13c39e7f813c8c58a28883e616ad92e0095cc24254a5fd133c22ebaca3662fb76c47ff8d2c4bafe3c75a433ec827af9a47607b386658c83987671d70bc2e1ac7fbdac8f109855305b3d575f16cd2b07f261f0057b54485d21ec2cddbe4f04e2f666346ded3a69af76ad91580b4d04a04d18923337db8569156214f28c6b1a5f5a4817b735b864c34f167091cedf1a682dae101df2da0b07a1bdfbd8db9fec5b2ef9b2dc5122bb5b61b46397239eca24939d178eed718c3c6a682e01af3b903f5d6a44c49da0e0b7a92591a6f22e96273e39cd21ee9e7b6635ee895ba2df12161ae974ddea29fa7c0d4472911ad53477a26498425a44881619f791afe8fd70d566410b9c4df4f58fe400914951708e6bd2864402e74068db0f471fa3403a5964fce84928cbc421eda853e239ab2d32d917a32c4bcc49d79cf577df09427ae84b07167b27ee343d25e4dbcb993233907ce5711671b49a68d8e33665d3fa098cbdc9fa4b46c1139bcd8312c9c04469288157d5455c05ae7045bafe24050ed194ffd1d5b98c30df13c34e1be66bb9082ea79c04e05f1c7df32809bb9bc560ada39f6c37aff42414a0fa015427467951d82f9f02619a02690aa85933ad4b02081aa7732bfa8afd214337017e5e0252ec0ff48cb6da5e91d9463b7d2e635601e7db7269f3c1386848c3ab8f9138b00e0c885aab9c9719fb3415a48224"}) (async) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) (async) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000340)) 10:01:17 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 73) [ 1609.500773][T22689] loop1: partition table beyond EOD, truncated [ 1609.502118][T22689] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 10:01:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000380)) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x2080, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x2a8002, 0x0) dup2(r1, r2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/167, 0xa7}, {&(0x7f00000001c0)=""/93, 0x5d}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000000080)=""/18, 0x12}], 0x4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r7, r8, 0x0, 0x800000080004103) splice(r6, &(0x7f00000003c0)=0x1, r7, &(0x7f0000000400)=0x6, 0x101, 0x2) r9 = socket$qrtr(0x2a, 0x2, 0x0) sendfile(r5, r9, 0x0, 0x800000080004107) dup3(r4, r5, 0x0) 10:01:17 executing program 5: add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRESHEX=r0, @ANYRESDEC=r0], 0x342) [ 1609.521693][T22691] relay: one or more items not logged [item size (56) > sub-buffer size (7)] [ 1609.586432][T22695] sg_write: data in/out 926365459/788 bytes for SCSI command 0x30-- guessing data in; [ 1609.586432][T22695] program syz-executor.5 not setting count and/or reply_len properly 10:01:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = eventfd2(0x1, 0x80000) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_hsr\x00'}, 0x18) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0, r2}]) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r0, r1, 0x0, 0x800000080004103) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) eventfd2(0x1, 0x80000) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_hsr\x00'}, 0x18) (async) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0, r2}]) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) 10:01:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x1, 0x202801) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) (async) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) 10:01:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0x3, 0x5, 0x561}) 10:01:17 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 74) 10:01:17 executing program 5: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000180)={0x1, 0x6, 0x0, 0x5, 0x5, "cd39f62c891034c279f958521869448acc1794", 0xffde, 0x7}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x402) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) [ 1609.687527][T22709] loop1: detected capacity change from 0 to 4 [ 1609.694108][T22709] Dev loop1: unable to read RDB block 4 10:01:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0x3, 0x5, 0x561}) 10:01:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x1f, 0x22402) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001300)={0x53, 0xfffffffffffffffd, 0xac, 0x8, @scatter={0x3, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000280)=""/4096, 0x1000}]}, &(0x7f0000000140)="11c5f920521d845c57699215ab92ddd72d2ee1ace3e04999b9be487886947cd3a478d7b8ed8b764052725f3eeafc5e362476075d180b087cd24314a5a831210dc0cf982d8a996b70a1db6d4673a190b2ca8052826ffe3926d6d0948e3e1095bf7169f5872d64569617006cea64573245f285a469178d4c6b67b80473ef33ab1c03cd25509bd0bc5d06f93256c79de0824e075b08d600545b6ce337d692a79dcf5758c6356710635b722b399e", &(0x7f0000001280)=""/123, 0x4, 0x20000, 0xffffffffffffffff, &(0x7f0000000200)}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) ioctl$SG_IO(r4, 0x2285, &(0x7f0000002480)={0x0, 0xfffffffffffffffb, 0x25, 0x0, @buffer={0x0, 0x1000, &(0x7f0000001380)=""/4096}, &(0x7f0000002380)="f8776a1e46f3bb291387735691d25a32b2e6a7bdb6eb9f4fabd41dcb75334ba0f0575f0038", &(0x7f00000023c0)=""/75, 0x45, 0x10032, 0x0, &(0x7f0000002440)}) 10:01:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = eventfd2(0x1, 0x80000) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_hsr\x00'}, 0x18) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0, r2}]) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r0, r1, 0x0, 0x800000080004103) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) eventfd2(0x1, 0x80000) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_hsr\x00'}, 0x18) (async) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0, r2}]) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) 10:01:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0x3, 0x5, 0x561}) 10:01:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_WAITACTIVE(r1, 0x5607) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000100)="ec78c1297f7c4272219a61f85ca2249a68748a71d3d24ef10077752ee24887045a2625bd179a1e7bba488b604a9185cb3516ba1e487e904ca2fe3ee43af5d4afee774fbeff8ba4db3075fd45b1d37f7af09a8a2e077a3d799190127946d9747f8129f49c14e76e1c03898c0a1ea651edb320") [ 1609.694143][T22709] loop1: unable to read partition table [ 1609.694299][T22709] loop1: partition table beyond EOD, truncated [ 1609.694788][T22709] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 1609.854151][T22724] loop1: detected capacity change from 0 to 4 [ 1609.878091][ T2817] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1609.878122][ T2817] Buffer I/O error on dev loop1, logical block 0, async page read 10:01:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000380)) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x2080, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x2a8002, 0x0) dup2(r1, r2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/167, 0xa7}, {&(0x7f00000001c0)=""/93, 0x5d}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000000080)=""/18, 0x12}], 0x4) (async, rerun: 64) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r7, r8, 0x0, 0x800000080004103) (async) splice(r6, &(0x7f00000003c0)=0x1, r7, &(0x7f0000000400)=0x6, 0x101, 0x2) (async, rerun: 64) r9 = socket$qrtr(0x2a, 0x2, 0x0) (rerun: 64) sendfile(r5, r9, 0x0, 0x800000080004107) dup3(r4, r5, 0x0) 10:01:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000080)={0x0, 0x48, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:17 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 75) 10:01:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_WAITACTIVE(r1, 0x5607) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000100)="ec78c1297f7c4272219a61f85ca2249a68748a71d3d24ef10077752ee24887045a2625bd179a1e7bba488b604a9185cb3516ba1e487e904ca2fe3ee43af5d4afee774fbeff8ba4db3075fd45b1d37f7af09a8a2e077a3d799190127946d9747f8129f49c14e76e1c03898c0a1ea651edb320") openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$VT_WAITACTIVE(r1, 0x5607) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x7) (async) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) (async) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000100)="ec78c1297f7c4272219a61f85ca2249a68748a71d3d24ef10077752ee24887045a2625bd179a1e7bba488b604a9185cb3516ba1e487e904ca2fe3ee43af5d4afee774fbeff8ba4db3075fd45b1d37f7af09a8a2e077a3d799190127946d9747f8129f49c14e76e1c03898c0a1ea651edb320") (async) 10:01:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) (async) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000080)={0x0, 0x48, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_WAITACTIVE(r1, 0x5607) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000100)="ec78c1297f7c4272219a61f85ca2249a68748a71d3d24ef10077752ee24887045a2625bd179a1e7bba488b604a9185cb3516ba1e487e904ca2fe3ee43af5d4afee774fbeff8ba4db3075fd45b1d37f7af09a8a2e077a3d799190127946d9747f8129f49c14e76e1c03898c0a1ea651edb320") openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$VT_WAITACTIVE(r1, 0x5607) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x7) (async) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) (async) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000100)="ec78c1297f7c4272219a61f85ca2249a68748a71d3d24ef10077752ee24887045a2625bd179a1e7bba488b604a9185cb3516ba1e487e904ca2fe3ee43af5d4afee774fbeff8ba4db3075fd45b1d37f7af09a8a2e077a3d799190127946d9747f8129f49c14e76e1c03898c0a1ea651edb320") (async) 10:01:18 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESDEC=r1], 0x342) 10:01:18 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 76) [ 1609.878196][ T2817] ldm_validate_partition_table(): Disk read failed. [ 1609.878225][ T2817] Dev loop1: unable to read RDB block 0 10:01:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x1f, 0x22402) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001300)={0x53, 0xfffffffffffffffd, 0xac, 0x8, @scatter={0x3, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000280)=""/4096, 0x1000}]}, &(0x7f0000000140)="11c5f920521d845c57699215ab92ddd72d2ee1ace3e04999b9be487886947cd3a478d7b8ed8b764052725f3eeafc5e362476075d180b087cd24314a5a831210dc0cf982d8a996b70a1db6d4673a190b2ca8052826ffe3926d6d0948e3e1095bf7169f5872d64569617006cea64573245f285a469178d4c6b67b80473ef33ab1c03cd25509bd0bc5d06f93256c79de0824e075b08d600545b6ce337d692a79dcf5758c6356710635b722b399e", &(0x7f0000001280)=""/123, 0x4, 0x20000, 0xffffffffffffffff, &(0x7f0000000200)}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) ioctl$SG_IO(r4, 0x2285, &(0x7f0000002480)={0x0, 0xfffffffffffffffb, 0x25, 0x0, @buffer={0x0, 0x1000, &(0x7f0000001380)=""/4096}, &(0x7f0000002380)="f8776a1e46f3bb291387735691d25a32b2e6a7bdb6eb9f4fabd41dcb75334ba0f0575f0038", &(0x7f00000023c0)=""/75, 0x45, 0x10032, 0x0, &(0x7f0000002440)}) syz_open_dev$sg(&(0x7f0000000000), 0x1f, 0x22402) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001300)={0x53, 0xfffffffffffffffd, 0xac, 0x8, @scatter={0x3, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000280)=""/4096, 0x1000}]}, &(0x7f0000000140)="11c5f920521d845c57699215ab92ddd72d2ee1ace3e04999b9be487886947cd3a478d7b8ed8b764052725f3eeafc5e362476075d180b087cd24314a5a831210dc0cf982d8a996b70a1db6d4673a190b2ca8052826ffe3926d6d0948e3e1095bf7169f5872d64569617006cea64573245f285a469178d4c6b67b80473ef33ab1c03cd25509bd0bc5d06f93256c79de0824e075b08d600545b6ce337d692a79dcf5758c6356710635b722b399e", &(0x7f0000001280)=""/123, 0x4, 0x20000, 0xffffffffffffffff, &(0x7f0000000200)}) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r1, r2, 0x0, 0x800000080004103) (async) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) (async) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r3, r4, 0x0, 0x800000080004103) (async) ioctl$SG_IO(r4, 0x2285, &(0x7f0000002480)={0x0, 0xfffffffffffffffb, 0x25, 0x0, @buffer={0x0, 0x1000, &(0x7f0000001380)=""/4096}, &(0x7f0000002380)="f8776a1e46f3bb291387735691d25a32b2e6a7bdb6eb9f4fabd41dcb75334ba0f0575f0038", &(0x7f00000023c0)=""/75, 0x45, 0x10032, 0x0, &(0x7f0000002440)}) (async) 10:01:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) (async) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000080)={0x0, 0x48, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (rerun: 64) sendfile(r2, r3, 0x0, 0x800000080004103) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:01:18 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 10:01:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000380)) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x2080, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x2a8002, 0x0) dup2(r1, r2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/167, 0xa7}, {&(0x7f00000001c0)=""/93, 0x5d}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000000080)=""/18, 0x12}], 0x4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r7, r8, 0x0, 0x800000080004103) splice(r6, &(0x7f00000003c0)=0x1, r7, &(0x7f0000000400)=0x6, 0x101, 0x2) r9 = socket$qrtr(0x2a, 0x2, 0x0) sendfile(r5, r9, 0x0, 0x800000080004107) dup3(r4, r5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000380)) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x2080, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x2a8002, 0x0) (async) dup2(r1, r2) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r3, r4, 0x0, 0x800000080004103) (async) readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/167, 0xa7}, {&(0x7f00000001c0)=""/93, 0x5d}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000000080)=""/18, 0x12}], 0x4) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r7, r8, 0x0, 0x800000080004103) (async) splice(r6, &(0x7f00000003c0)=0x1, r7, &(0x7f0000000400)=0x6, 0x101, 0x2) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) sendfile(r5, r9, 0x0, 0x800000080004107) (async) dup3(r4, r5, 0x0) (async) 10:01:18 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESDEC=r1], 0x342) 10:01:18 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 77) [ 1609.878246][ T2817] loop1: unable to read partition table [ 1609.878391][ T2817] loop1: partition table beyond EOD, truncated [ 1609.901798][T22728] sg_write: data in/out 926365459/788 bytes for SCSI command 0x30-- guessing data in; [ 1609.901798][T22728] program syz-executor.5 not setting count and/or reply_len properly 10:01:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000280)={0x0, 0xffff, 0x1f, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$NBD_CLEAR_QUE(r1, 0xab05) 10:01:18 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 10:01:18 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 78) 10:01:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000280)={0x0, 0xffff, 0x1f, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$NBD_CLEAR_QUE(r1, 0xab05) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r0, r1, 0x0, 0x800000080004103) (async) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000280)={0x0, 0xffff, 0x1f, 0x1}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) ioctl$NBD_CLEAR_QUE(r1, 0xab05) (async) 10:01:18 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x2289, 0x0) [ 1610.007986][T22742] loop1: detected capacity change from 0 to 4 10:01:18 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) (async) 10:01:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x1f, 0x22402) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001300)={0x53, 0xfffffffffffffffd, 0xac, 0x8, @scatter={0x3, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000280)=""/4096, 0x1000}]}, &(0x7f0000000140)="11c5f920521d845c57699215ab92ddd72d2ee1ace3e04999b9be487886947cd3a478d7b8ed8b764052725f3eeafc5e362476075d180b087cd24314a5a831210dc0cf982d8a996b70a1db6d4673a190b2ca8052826ffe3926d6d0948e3e1095bf7169f5872d64569617006cea64573245f285a469178d4c6b67b80473ef33ab1c03cd25509bd0bc5d06f93256c79de0824e075b08d600545b6ce337d692a79dcf5758c6356710635b722b399e", &(0x7f0000001280)=""/123, 0x4, 0x20000, 0xffffffffffffffff, &(0x7f0000000200)}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) (async) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) ioctl$SG_IO(r4, 0x2285, &(0x7f0000002480)={0x0, 0xfffffffffffffffb, 0x25, 0x0, @buffer={0x0, 0x1000, &(0x7f0000001380)=""/4096}, &(0x7f0000002380)="f8776a1e46f3bb291387735691d25a32b2e6a7bdb6eb9f4fabd41dcb75334ba0f0575f0038", &(0x7f00000023c0)=""/75, 0x45, 0x10032, 0x0, &(0x7f0000002440)}) 10:01:18 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 79) 10:01:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000280)={0x0, 0xffff, 0x1f, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$NBD_CLEAR_QUE(r1, 0xab05) [ 1610.043289][T22744] sg_write: data in/out 926365459/788 bytes for SCSI command 0x30-- guessing data in; [ 1610.043289][T22744] program syz-executor.5 not setting count and/or reply_len properly [ 1610.185649][T22756] loop1: detected capacity change from 0 to 4 10:01:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000001180)=[@in6={0xa, 0x4e20, 0x9, @loopback, 0xffff}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e22, 0x74c, @mcast1, 0x1}, @in6={0xa, 0x4e22, 0x6, @local, 0x80000000}, @in6={0xa, 0x4e22, 0x1, @mcast2, 0x7fff}, @in6={0xa, 0x4e24, 0x80000001, @loopback, 0x5}, @in6={0xa, 0x4e22, 0x3, @local, 0x4}], 0xb8) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000100)={{0x0, 0x5, 0x5, 0x4, 0xd0e, 0x7fffffffffffffff, 0x3, 0x9784, 0x3, 0xb061, 0x7f, 0x8, 0x6, 0x8, 0x5}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000180)={r2}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)) 10:01:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x4020940d, &(0x7f0000000000)) 10:01:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={r1}) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000140)='@.\x00', 0x0, r2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) read$usbfs(r1, &(0x7f0000000280)=""/231, 0xe7) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) mq_timedreceive(r4, &(0x7f0000000000)=""/199, 0xc7, 0x7ff, &(0x7f0000000100)={0x77359400}) 10:01:18 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 10:01:18 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 80) 10:01:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={r1}) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000140)='@.\x00', 0x0, r2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) read$usbfs(r1, &(0x7f0000000280)=""/231, 0xe7) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) (async) mq_timedreceive(r4, &(0x7f0000000000)=""/199, 0xc7, 0x7ff, &(0x7f0000000100)={0x77359400}) 10:01:18 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 10:01:18 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 81) 10:01:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x4020940d, &(0x7f0000000000)) 10:01:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={r1}) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000140)='@.\x00', 0x0, r2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) read$usbfs(r1, &(0x7f0000000280)=""/231, 0xe7) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) mq_timedreceive(r4, &(0x7f0000000000)=""/199, 0xc7, 0x7ff, &(0x7f0000000100)={0x77359400}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r0, r1, 0x0, 0x800000080004103) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={r1}) (async) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000140)='@.\x00', 0x0, r2) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) read$usbfs(r1, &(0x7f0000000280)=""/231, 0xe7) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r3, r4, 0x0, 0x800000080004103) (async) mq_timedreceive(r4, &(0x7f0000000000)=""/199, 0xc7, 0x7ff, &(0x7f0000000100)={0x77359400}) (async) 10:01:19 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) (async) 10:01:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x401c5820, &(0x7f0000000000)) 10:01:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000001180)=[@in6={0xa, 0x4e20, 0x9, @loopback, 0xffff}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e22, 0x74c, @mcast1, 0x1}, @in6={0xa, 0x4e22, 0x6, @local, 0x80000000}, @in6={0xa, 0x4e22, 0x1, @mcast2, 0x7fff}, @in6={0xa, 0x4e24, 0x80000001, @loopback, 0x5}, @in6={0xa, 0x4e22, 0x3, @local, 0x4}], 0xb8) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000100)={{0x0, 0x5, 0x5, 0x4, 0xd0e, 0x7fffffffffffffff, 0x3, 0x9784, 0x3, 0xb061, 0x7f, 0x8, 0x6, 0x8, 0x5}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000180)={r2}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) sendfile(r0, r1, 0x0, 0x800000080004103) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000001180)=[@in6={0xa, 0x4e20, 0x9, @loopback, 0xffff}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e22, 0x74c, @mcast1, 0x1}, @in6={0xa, 0x4e22, 0x6, @local, 0x80000000}, @in6={0xa, 0x4e22, 0x1, @mcast2, 0x7fff}, @in6={0xa, 0x4e24, 0x80000001, @loopback, 0x5}, @in6={0xa, 0x4e22, 0x3, @local, 0x4}], 0xb8) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000100)={{0x0, 0x5, 0x5, 0x4, 0xd0e, 0x7fffffffffffffff, 0x3, 0x9784, 0x3, 0xb061, 0x7f, 0x8, 0x6, 0x8, 0x5}, 0x10, [0x0, 0x0]}) (async) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000180)={r2}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)) (async) 10:01:19 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 82) 10:01:19 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x1275, 0x0) 10:01:19 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) syz_open_pts(r0, 0x210a00) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000040)) r4 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1000, 0x200481) ioctl$VT_ACTIVATE(r4, 0x5606, 0x8) 10:01:19 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004103) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r7, r8, 0x0, 0x800000080004103) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r9, r10, 0x0, 0x800000080004103) write$binfmt_aout(r10, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRESDEC=r4, @ANYRESOCT=r5, @ANYRES16=r5, @ANYRES16=r8, @ANYRESOCT=r4, @ANYRES64=r1, @ANYRESOCT=r2, @ANYRES64=r7], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) 10:01:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80840, 0x0) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x1e, 0x100010, 0x15a, &(0x7f0000000280)="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"}) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='net/mcfilter6\x00') mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000000, 0x10010, r0, 0x914e5000) sendfile(r0, r2, 0x0, 0x800000080004103) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/netfilter\x00') syz_open_procfs(0x0, &(0x7f00000006c0)='net/anycast6\x00') sendfile(r3, r4, 0x0, 0x800000080004103) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f00000000c0)={0xc1eb, 0x2, 0x7, 0x2}) r5 = request_key(&(0x7f0000000680)='encrypted\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000740)='m \x8f\xe8;\xdfC\'\x96tp\xf3Qnfo\x00\xfbG8\xfe\xa9\x9a5\xd7\xfbzKTZ\x1fO\x06\xdc\x05\xf4\x1c\xfb\xa1)\x01\xaf\x16\xb1\x16p\x18-\x03\x95\x1d_\xcd*\xf8\xc4\x15\xf5', 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r2, 0xfb) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000140)={0x8, 0x1, 0x3, 0xa, 0x2, 0x40}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pwrite64(r0, &(0x7f0000000180)="43e23c0be4022e96762d00d438de0e1c6250aba8b946923a426de3078bbc5a9e3cdb17d2521fac73c2b71276e4d3617d3fab6237deb538ca676ed6513acab1a25f07342c931b7dd1fe9b6ba580c457b72c76f65d92a18b06d71ef79f1bca018ca2301029eed05db0471a0c1c2b7d5290ac4477122debef4b49689e092c89513664829e303622246b09eed634230f0380f710b2b48af72c6510e4ee70c8d75b4c45f50244b1629986b4433cd3fcaf2fa5c7a55c21ecdf894ff04d7e2a52", 0xbd, 0x100000000000d35) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r0, 0x0, 0x8) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) [ 1610.208082][ T2817] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1610.208116][ T2817] Buffer I/O error on dev loop1, logical block 0, async page read 10:01:19 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x1275, 0x0) 10:01:19 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) syz_open_pts(r0, 0x210a00) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) (async) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000040)) (async) r4 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1000, 0x200481) ioctl$VT_ACTIVATE(r4, 0x5606, 0x8) 10:01:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80840, 0x0) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x1e, 0x100010, 0x15a, &(0x7f0000000280)="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"}) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='net/mcfilter6\x00') mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000000, 0x10010, r0, 0x914e5000) (async) sendfile(r0, r2, 0x0, 0x800000080004103) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/netfilter\x00') syz_open_procfs(0x0, &(0x7f00000006c0)='net/anycast6\x00') (async) sendfile(r3, r4, 0x0, 0x800000080004103) (async) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f00000000c0)={0xc1eb, 0x2, 0x7, 0x2}) (async, rerun: 64) r5 = request_key(&(0x7f0000000680)='encrypted\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000740)='m \x8f\xe8;\xdfC\'\x96tp\xf3Qnfo\x00\xfbG8\xfe\xa9\x9a5\xd7\xfbzKTZ\x1fO\x06\xdc\x05\xf4\x1c\xfb\xa1)\x01\xaf\x16\xb1\x16p\x18-\x03\x95\x1d_\xcd*\xf8\xc4\x15\xf5', 0xfffffffffffffffe) (rerun: 64) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r2, 0xfb) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000140)={0x8, 0x1, 0x3, 0xa, 0x2, 0x40}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) pwrite64(r0, &(0x7f0000000180)="43e23c0be4022e96762d00d438de0e1c6250aba8b946923a426de3078bbc5a9e3cdb17d2521fac73c2b71276e4d3617d3fab6237deb538ca676ed6513acab1a25f07342c931b7dd1fe9b6ba580c457b72c76f65d92a18b06d71ef79f1bca018ca2301029eed05db0471a0c1c2b7d5290ac4477122debef4b49689e092c89513664829e303622246b09eed634230f0380f710b2b48af72c6510e4ee70c8d75b4c45f50244b1629986b4433cd3fcaf2fa5c7a55c21ecdf894ff04d7e2a52", 0xbd, 0x100000000000d35) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r0, 0x0, 0x8) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) 10:01:19 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 83) [ 1610.208191][ T2817] ldm_validate_partition_table(): Disk read failed. 10:01:19 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) (async, rerun: 32) syz_open_pts(r0, 0x210a00) (async, rerun: 32) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) (async) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000040)) (async) r4 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1000, 0x200481) ioctl$VT_ACTIVATE(r4, 0x5606, 0x8) 10:01:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80840, 0x0) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x1e, 0x100010, 0x15a, &(0x7f0000000280)="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"}) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='net/mcfilter6\x00') (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000000, 0x10010, r0, 0x914e5000) sendfile(r0, r2, 0x0, 0x800000080004103) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/netfilter\x00') syz_open_procfs(0x0, &(0x7f00000006c0)='net/anycast6\x00') (async) sendfile(r3, r4, 0x0, 0x800000080004103) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f00000000c0)={0xc1eb, 0x2, 0x7, 0x2}) (async) r5 = request_key(&(0x7f0000000680)='encrypted\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000740)='m \x8f\xe8;\xdfC\'\x96tp\xf3Qnfo\x00\xfbG8\xfe\xa9\x9a5\xd7\xfbzKTZ\x1fO\x06\xdc\x05\xf4\x1c\xfb\xa1)\x01\xaf\x16\xb1\x16p\x18-\x03\x95\x1d_\xcd*\xf8\xc4\x15\xf5', 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r2, 0xfb) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000140)={0x8, 0x1, 0x3, 0xa, 0x2, 0x40}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) pwrite64(r0, &(0x7f0000000180)="43e23c0be4022e96762d00d438de0e1c6250aba8b946923a426de3078bbc5a9e3cdb17d2521fac73c2b71276e4d3617d3fab6237deb538ca676ed6513acab1a25f07342c931b7dd1fe9b6ba580c457b72c76f65d92a18b06d71ef79f1bca018ca2301029eed05db0471a0c1c2b7d5290ac4477122debef4b49689e092c89513664829e303622246b09eed634230f0380f710b2b48af72c6510e4ee70c8d75b4c45f50244b1629986b4433cd3fcaf2fa5c7a55c21ecdf894ff04d7e2a52", 0xbd, 0x100000000000d35) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r2, r0, 0x0, 0x8) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) 10:01:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000001180)=[@in6={0xa, 0x4e20, 0x9, @loopback, 0xffff}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e22, 0x74c, @mcast1, 0x1}, @in6={0xa, 0x4e22, 0x6, @local, 0x80000000}, @in6={0xa, 0x4e22, 0x1, @mcast2, 0x7fff}, @in6={0xa, 0x4e24, 0x80000001, @loopback, 0x5}, @in6={0xa, 0x4e22, 0x3, @local, 0x4}], 0xb8) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000100)={{0x0, 0x5, 0x5, 0x4, 0xd0e, 0x7fffffffffffffff, 0x3, 0x9784, 0x3, 0xb061, 0x7f, 0x8, 0x6, 0x8, 0x5}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000180)={r2}) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)) 10:01:19 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x1275, 0x0) 10:01:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000000)) 10:01:19 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 84) 10:01:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004103) (async) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r7, r8, 0x0, 0x800000080004103) (async) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r9, r10, 0x0, 0x800000080004103) write$binfmt_aout(r10, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRESDEC=r4, @ANYRESOCT=r5, @ANYRES16=r5, @ANYRES16=r8, @ANYRESOCT=r4, @ANYRES64=r1, @ANYRESOCT=r2, @ANYRES64=r7], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) 10:01:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) fallocate(r0, 0x6, 0xe8, 0x267) 10:01:20 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x20402) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x342) ioctl$SG_GET_PACK_ID(r0, 0x1274, 0x0) 10:01:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) memfd_secret(0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000000)) (async) 10:01:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/raid456', 0x0, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0xf) r4 = openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0xa4) dup(r4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004103) ioctl$TCXONC(r6, 0x540a, 0x1) 10:01:20 executing program 1: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x480}], 0x0, &(0x7f0000000000)) (fail_nth: 85) [ 1610.208212][ T2817] Dev loop1: unable to read RDB block 0 [ 1610.208234][ T2817] loop1: unable to read partition table [ 1610.208403][ T2817] loop1: partition table beyond EOD, truncated [ 1610.336205][T22785] loop1: detected capacity change from 0 to 4 [ 1610.408065][ T2817] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1610.408065][ T2817] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1610.408099][ T2817] Buffer I/O error on dev loop1, logical block 0, async page read [ 1610.408176][ T2817] ldm_validate_partition_table(): Disk read failed. [ 1610.408199][ T2817] Dev loop1: unable to read RDB block 0 [ 1610.408219][ T2817] loop1: unable to read partition table [ 1610.408407][ T2817] loop1: partition table beyond EOD, truncated [ 1610.518620][T22801] loop1: detected capacity change from 0 to 4 [ 1610.518748][T22801] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1610.533120][T22801] Dev loop1: unable to read RDB block 4 [ 1610.533161][T22801] loop1: unable to read partition table [ 1610.533332][T22801] loop1: partition table beyond EOD, truncated [ 1610.533867][T22801] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 1610.699865][T22815] loop1: detected capacity change from 0 to 4 [ 1610.864409][T22828] loop1: detected capacity change from 0 to 4 [ 1610.898042][ T2817] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1610.898077][ T2817] Buffer I/O error on dev loop1, logical block 0, async page read [ 1610.898149][ T2817] ldm_validate_partition_table(): Disk read failed. [ 1610.898171][ T2817] Dev loop1: unable to read RDB block 0 [ 1610.898190][ T2817] loop1: unable to read partition table [ 1610.898364][ T2817] loop1: partition table beyond EOD, truncated [ 1610.989767][T22845] loop1: detected capacity change from 0 to 4 [ 1610.989991][T22845] EXT4-fs error (device sda1) in __ext4_new_inode:1085: Out of memory [ 1611.014472][ T2817] Dev loop1: unable to read RDB block 4 [ 1611.014511][ T2817] loop1: unable to read partition table [ 1611.014704][ T2817] loop1: partition table beyond EOD, truncated [ 1611.143421][T22861] loop1: detected capacity change from 0 to 4 [ 1611.181015][T22861] Dev loop1: unable to read RDB block 4 [ 1611.181054][T22861] loop1: unable to read partition table [ 1611.181216][T22861] loop1: partition table beyond EOD, truncated [ 1611.181710][T22861] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 1611.376240][T22884] loop1: detected capacity change from 0 to 4 [ 1611.393944][T22884] Dev loop1: unable to read RDB block 4 [ 1611.393981][T22884] loop1: unable to read partition table [ 1611.394153][T22884] loop1: partition table beyond EOD, truncated [ 1611.394666][T22884] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 1611.555607][T22907] loop1: detected capacity change from 0 to 4 [ 1611.558498][T22903] sg_write: data in/out 926365459/788 bytes for SCSI command 0x30-- guessing data in; [ 1611.558498][T22903] program syz-executor.5 not setting count and/or reply_len properly [ 1611.719910][T22926] loop1: detected capacity change from 0 to 4 [ 1611.765177][ T2980] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1611.765211][ T2980] Buffer I/O error on dev loop1, logical block 0, async page read [ 1611.765288][ T2980] ldm_validate_partition_table(): Disk read failed. [ 1611.765310][ T2980] Dev loop1: unable to read RDB block 0 [ 1611.765331][ T2980] loop1: unable to read partition table [ 1611.765491][ T2980] loop1: partition table beyond EOD, truncated [ 1611.859757][T22940] loop1: detected capacity change from 0 to 4 [ 1612.016003][T22954] loop1: detected capacity change from 0 to 4 [ 1612.044132][T22954] Dev loop1: unable to read RDB block 4 [ 1612.044168][T22954] loop1: unable to read partition table [ 1612.044318][T22954] loop1: partition table beyond EOD, truncated [ 1612.044818][T22954] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 1612.070192][T22952] sg_write: data in/out 926365459/788 bytes for SCSI command 0x30-- guessing data in; [ 1612.070192][T22952] program syz-executor.5 not setting count and/or reply_len properly [ 1612.195488][T22981] loop1: detected capacity change from 0 to 4 [ 1612.211902][ T2817] Dev loop1: unable to read RDB block 4 [ 1612.211936][ T2817] loop1: unable to read partition table [ 1612.212077][ T2817] loop1: partition table beyond EOD, truncated [ 1612.212543][T22981] ENOMEM in journal_alloc_journal_head, retrying. [ 1612.213506][T22981] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 1612.349224][T22996] loop1: detected capacity change from 0 to 4 [ 1612.409552][T22999] sg_write: data in/out 926365459/788 bytes for SCSI command 0x30-- guessing data in; [ 1612.409552][T22999] program syz-executor.5 not setting count and/or reply_len properly [ 1612.486213][T23002] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1612.569795][T23010] sg_write: data in/out 926365459/788 bytes for SCSI command 0x30-- guessing data in; [ 1612.569795][T23010] program syz-executor.5 not setting count and/or reply_len properly [ 1612.583841][T23013] loop1: detected capacity change from 0 to 4 [ 1612.584451][T23013] FAULT_INJECTION: forcing a failure. [ 1612.584451][T23013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1612.584480][T23013] CPU: 1 PID: 23013 Comm: syz-executor.1 Not tainted 5.19.0-rc1-next-20220606-syzkaller #0 [ 1612.584509][T23013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1612.584523][T23013] Call Trace: [ 1612.584528][T23013] [ 1612.584537][T23013] dump_stack_lvl+0xcd/0x134 [ 1612.584577][T23013] should_fail.cold+0x5/0xa [ 1612.584611][T23013] _copy_from_user+0x2a/0x170 [ 1612.584638][T23013] memdup_user+0x65/0xd0 [ 1612.584668][T23013] strndup_user+0x70/0xe0 [ 1612.584697][T23013] __x64_sys_mount+0x134/0x300 [ 1612.584729][T23013] ? copy_mnt_ns+0xae0/0xae0 [ 1612.584754][T23013] ? syscall_enter_from_user_mode+0x21/0x70 [ 1612.584787][T23013] ? syscall_enter_from_user_mode+0x21/0x70 [ 1612.584825][T23013] do_syscall_64+0x35/0xb0 [ 1612.584850][T23013] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 1612.584882][T23013] RIP: 0033:0x7f74a5e8a63a [ 1612.584902][T23013] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1612.584923][T23013] RSP: 002b:00007f74a6fe1f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1612.584955][T23013] RAX: ffffffffffffffda RBX: 0000000020000600 RCX: 00007f74a5e8a63a [ 1612.584972][T23013] RDX: 0000000020000080 RSI: 0000000020000100 RDI: 00007f74a6fe1fe0 [ 1612.584988][T23013] RBP: 00007f74a6fe2020 R08: 00007f74a6fe2020 R09: 0000000020000080 [ 1612.585003][T23013] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000080 [ 1612.585017][T23013] R13: 0000000020000100 R14: 00007f74a6fe1fe0 R15: 0000000020000000 [ 1612.585050][T23013] [ 1612.615948][ T2980] Dev loop1: unable to read RDB block 4 [ 1612.615986][ T2980] loop1: unable to read partition table [ 1612.616143][ T2980] loop1: partition table beyond EOD, truncated [ 1612.781529][T23030] loop1: detected capacity change from 0 to 4 [ 1612.782159][T23030] FAULT_INJECTION: forcing a failure. [ 1612.782159][T23030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1612.782190][T23030] CPU: 0 PID: 23030 Comm: syz-executor.1 Not tainted 5.19.0-rc1-next-20220606-syzkaller #0 [ 1612.782215][T23030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1612.782228][T23030] Call Trace: [ 1612.782235][T23030] [ 1612.782244][T23030] dump_stack_lvl+0xcd/0x134 [ 1612.782284][T23030] should_fail.cold+0x5/0xa [ 1612.782318][T23030] _copy_from_user+0x2a/0x170 [ 1612.782346][T23030] memdup_user+0x65/0xd0 [ 1612.782377][T23030] strndup_user+0x70/0xe0 [ 1612.782407][T23030] __x64_sys_mount+0x17d/0x300 [ 1612.782445][T23030] ? copy_mnt_ns+0xae0/0xae0 [ 1612.782471][T23030] ? syscall_enter_from_user_mode+0x21/0x70 [ 1612.782504][T23030] ? syscall_enter_from_user_mode+0x21/0x70 [ 1612.782544][T23030] do_syscall_64+0x35/0xb0 [ 1612.782570][T23030] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 1612.782604][T23030] RIP: 0033:0x7f74a5e8a63a [ 1612.782624][T23030] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1612.782647][T23030] RSP: 002b:00007f74a6fe1f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1612.782669][T23030] RAX: ffffffffffffffda RBX: 0000000020000600 RCX: 00007f74a5e8a63a [ 1612.782685][T23030] RDX: 0000000020000080 RSI: 0000000020000100 RDI: 00007f74a6fe1fe0 [ 1612.782701][T23030] RBP: 00007f74a6fe2020 R08: 00007f74a6fe2020 R09: 0000000020000080 [ 1612.782717][T23030] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000080 [ 1612.782732][T23030] R13: 0000000020000100 R14: 00007f74a6fe1fe0 R15: 0000000020000000 [ 1612.782766][T23030] [ 1612.820317][T23035] sg_write: data in/out 926365459/788 bytes for SCSI command 0x30-- guessing data in; [ 1612.820317][T23035] program syz-executor.5 not setting count and/or reply_len properly [ 1612.878271][ T2817] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1612.878305][ T2817] Buffer I/O error on dev loop1, logical block 0, async page read [ 1612.878379][ T2817] ldm_validate_partition_table(): Disk read failed. [ 1612.878402][ T2817] Dev loop1: unable to read RDB block 0 [ 1612.878423][ T2817] loop1: unable to read partition table [ 1612.878570][ T2817] loop1: partition table beyond EOD, truncated [ 1612.985518][T23045] sg_write: data in/out 926365459/788 bytes for SCSI command 0x30-- guessing data in; [ 1612.985518][T23045] program syz-executor.5 not setting count and/or reply_len properly [ 1613.058488][T23055] loop1: detected capacity change from 0 to 4 [ 1613.143471][T23057] sg_write: data in/out 926365459/788 bytes for SCSI command 0x30-- guessing data in; [ 1613.143471][T23057] program syz-executor.5 not setting count and/or reply_len properly [ 1613.288136][T23070] loop1: detected capacity change from 0 to 4 [ 1613.288759][T23070] FAULT_INJECTION: forcing a failure. [ 1613.288759][T23070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1613.288787][T23070] CPU: 1 PID: 23070 Comm: syz-executor.1 Not tainted 5.19.0-rc1-next-20220606-syzkaller #0 [ 1613.288813][T23070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1613.288826][T23070] Call Trace: [ 1613.288831][T23070] [ 1613.288839][T23070] dump_stack_lvl+0xcd/0x134 [ 1613.288886][T23070] should_fail.cold+0x5/0xa [ 1613.288920][T23070] _copy_from_user+0x2a/0x170 [ 1613.288947][T23070] copy_mount_options+0x76/0x180 [ 1613.288973][T23070] __x64_sys_mount+0x1a9/0x300 [ 1613.289000][T23070] ? copy_mnt_ns+0xae0/0xae0 [ 1613.289024][T23070] ? syscall_enter_from_user_mode+0x21/0x70 [ 1613.289058][T23070] ? syscall_enter_from_user_mode+0x21/0x70 [ 1613.289095][T23070] do_syscall_64+0x35/0xb0 [ 1613.289120][T23070] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 1613.289155][T23070] RIP: 0033:0x7f74a5e8a63a [ 1613.289175][T23070] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1613.289197][T23070] RSP: 002b:00007f74a6fe1f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1613.289220][T23070] RAX: ffffffffffffffda RBX: 0000000020000600 RCX: 00007f74a5e8a63a [ 1613.289236][T23070] RDX: 0000000020000080 RSI: 0000000020000100 RDI: 00007f74a6fe1fe0 [ 1613.289252][T23070] RBP: 00007f74a6fe2020 R08: 00007f74a6fe2020 R09: 0000000020000080 [ 1613.289269][T23070] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000080 [ 1613.289284][T23070] R13: 0000000020000100 R14: 00007f74a6fe1fe0 R15: 0000000020000000 [ 1613.289318][T23070] [ 1613.292910][ T2817] Dev loop1: unable to read RDB block 4 [ 1613.292944][ T2817] loop1: unable to read partition table [ 1613.293083][ T2817] loop1: partition table beyond EOD, truncated [ 1613.330383][T23072] sg_write: data in/out 926365459/788 bytes for SCSI command 0x30-- guessing data in; [ 1613.330383][T23072] program syz-executor.5 not setting count and/or reply_len properly [ 1613.373739][T23070] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 1613.549592][T23088] loop1: detected capacity change from 0 to 4 [ 1613.551708][T23085] sg_write: data in/out 926365459/788 bytes for SCSI command 0x30-- guessing data in; [ 1613.551708][T23085] program syz-executor.5 not setting count and/or reply_len properly [ 1613.618270][T23081] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 1613.710894][T23109] loop1: detected capacity change from 0 to 4 [ 1613.711534][T23109] FAULT_INJECTION: forcing a failure. [ 1613.711534][T23109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1613.711561][T23109] CPU: 0 PID: 23109 Comm: syz-executor.1 Not tainted 5.19.0-rc1-next-20220606-syzkaller #0 [ 1613.711587][T23109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1613.711600][T23109] Call Trace: [ 1613.711606][T23109] [ 1613.711614][T23109] dump_stack_lvl+0xcd/0x134 [ 1613.711654][T23109] should_fail.cold+0x5/0xa [ 1613.711693][T23109] strncpy_from_user+0x34/0x3c0 [ 1613.711730][T23109] getname_flags.part.0+0x95/0x4f0 [ 1613.711764][T23109] getname_flags+0x9a/0xe0 [ 1613.711795][T23109] user_path_at_empty+0x2b/0x60 [ 1613.711827][T23109] __x64_sys_mount+0x1ea/0x300 [ 1613.711866][T23109] ? copy_mnt_ns+0xae0/0xae0 [ 1613.711891][T23109] ? syscall_enter_from_user_mode+0x21/0x70 [ 1613.711925][T23109] ? syscall_enter_from_user_mode+0x21/0x70 [ 1613.711965][T23109] do_syscall_64+0x35/0xb0 [ 1613.711992][T23109] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 1613.712027][T23109] RIP: 0033:0x7f74a5e8a63a [ 1613.712047][T23109] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1613.712069][T23109] RSP: 002b:00007f74a6fe1f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1613.712092][T23109] RAX: ffffffffffffffda RBX: 0000000020000600 RCX: 00007f74a5e8a63a [ 1613.712109][T23109] RDX: 0000000020000080 RSI: 0000000020000100 RDI: 00007f74a6fe1fe0 [ 1613.712124][T23109] RBP: 00007f74a6fe2020 R08: 00007f74a6fe2020 R09: 0000000020000080 [ 1613.712140][T23109] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000080 [ 1613.712155][T23109] R13: 0000000020000100 R14: 00007f74a6fe1fe0 R15: 0000000020000000 [ 1613.712188][T23109] [ 1613.724433][ T2817] Dev loop1: unable to read RDB block 4 [ 1613.724466][ T2817] loop1: unable to read partition table [ 1613.724613][ T2817] loop1: partition table beyond EOD, truncated [ 1613.922943][T23133] loop1: detected capacity change from 0 to 4 [ 1614.089245][T23148] loop1: detected capacity change from 0 to 4 [ 1614.089881][T23148] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1614.256286][T23171] loop1: detected capacity change from 0 to 4 [ 1614.276538][ T2980] Dev loop1: unable to read RDB block 4 [ 1614.276571][ T2980] loop1: unable to read partition table [ 1614.276709][ T2980] loop1: partition table beyond EOD, truncated [ 1614.278910][T23171] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1614.391872][T23186] loop1: detected capacity change from 0 to 4 [ 1614.392584][T23186] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1614.539273][T23199] loop1: detected capacity change from 0 to 4 [ 1614.605219][ T2817] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1614.605253][ T2817] Buffer I/O error on dev loop1, logical block 0, async page read [ 1614.605328][ T2817] ldm_validate_partition_table(): Disk read failed. [ 1614.605349][ T2817] Dev loop1: unable to read RDB block 0 [ 1614.605370][ T2817] loop1: unable to read partition table [ 1614.605524][ T2817] loop1: partition table beyond EOD, truncated [ 1614.754184][T23219] loop1: detected capacity change from 0 to 4 [ 1614.777436][T23219] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1614.835517][ T2817] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1614.835555][ T2817] Buffer I/O error on dev loop1, logical block 0, async page read [ 1614.835629][ T2817] ldm_validate_partition_table(): Disk read failed. [ 1614.835652][ T2817] Dev loop1: unable to read RDB block 0 [ 1614.835671][ T2817] loop1: unable to read partition table [ 1614.835823][ T2817] loop1: partition table beyond EOD, truncated [ 1615.002446][T23242] loop1: detected capacity change from 0 to 4 [ 1615.003252][T23242] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1615.141998][T23263] sg_write: 8 callbacks suppressed [ 1615.142014][T23263] sg_write: data in/out 926365459/788 bytes for SCSI command 0x30-- guessing data in; [ 1615.142014][T23263] program syz-executor.5 not setting count and/or reply_len properly [ 1615.154344][T23262] loop1: detected capacity change from 0 to 4 [ 1615.418326][T23276] loop1: detected capacity change from 0 to 4 [ 1615.477173][T23278] sg_write: data in/out 926365459/788 bytes for SCSI command 0x30-- guessing data in; [ 1615.477173][T23278] program syz-executor.5 not setting count and/or reply_len properly [ 1615.561346][T23297] loop1: detected capacity change from 0 to 4 [ 1615.599658][ T2817] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1615.599692][ T2817] Buffer I/O error on dev loop1, logical block 0, async page read [ 1615.599763][ T2817] ldm_validate_partition_table(): Disk read failed. [ 1615.599785][ T2817] Dev loop1: unable to read RDB block 0 [ 1615.599806][ T2817] loop1: unable to read partition table [ 1615.599955][ T2817] loop1: partition table beyond EOD, truncated [ 1615.630562][T23305] sg_write: data in/out 926365459/788 bytes for SCSI command 0x30-- guessing data in; [ 1615.630562][T23305] program syz-executor.5 not setting count and/or reply_len properly [ 1615.814361][T23320] loop1: detected capacity change from 0 to 4 [ 1615.869490][T23321] sg_write: data in/out 926365459/788 bytes for SCSI command 0x30-- guessing data in; [ 1615.869490][T23321] program syz-executor.5 not setting count and/or reply_len properly [ 1615.961544][T23337] loop1: detected capacity change from 0 to 4 [ 1615.962492][T23337] /dev/loop1: Can't open blockdev [ 1616.052988][T23326] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1616.054157][T23340] sg_write: data in/out 926365459/788 bytes for SCSI command 0x30-- guessing data in; [ 1616.054157][T23340] program syz-executor.5 not setting count and/or reply_len properly [ 1616.142690][T23348] loop1: detected capacity change from 0 to 4 [ 1616.143616][T23348] /dev/loop1: Can't open blockdev [ 1616.287629][T23372] loop1: detected capacity change from 0 to 4 [ 1616.328352][T23372] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 1616.441840][T23383] sg_write: data in/out 926365459/788 bytes for SCSI command 0x30-- guessing data in; [ 1616.441840][T23383] program syz-executor.5 not setting count and/or reply_len properly [ 1616.489735][T23387] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 1616.509887][T23396] loop1: detected capacity change from 0 to 4 [ 1616.533712][T23396] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 1616.650398][T23411] loop1: detected capacity change from 0 to 4 [ 1616.677218][T23411] Dev loop1: unable to read RDB block 4 [ 1616.677256][T23411] loop1: unable to read partition table [ 1616.677405][T23411] loop1: partition table beyond EOD, truncated [ 1616.677919][T23411] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 1616.778505][T23421] sg_write: data in/out 926365459/786 bytes for SCSI command 0x66-- guessing data in; [ 1616.778505][T23421] program syz-executor.5 not setting count and/or reply_len properly [ 1616.794408][T23423] loop1: detected capacity change from 0 to 4 [ 1616.810894][T23423] Dev loop1: unable to read RDB block 4 [ 1616.810936][T23423] loop1: unable to read partition table [ 1616.811077][T23423] loop1: partition table beyond EOD, truncated [ 1616.811611][T23423] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 1616.935335][T23444] sg_write: data in/out 926365459/786 bytes for SCSI command 0x66-- guessing data in; [ 1616.935335][T23444] program syz-executor.5 not setting count and/or reply_len properly [ 1617.118578][T23455] loop1: detected capacity change from 0 to 4 [ 1617.131431][T23455] Dev loop1: unable to read RDB block 4 [ 1617.131471][T23455] loop1: unable to read partition table [ 1617.131627][T23455] loop1: partition table beyond EOD, truncated [ 1617.132259][T23455] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 1617.282271][T23476] loop1: detected capacity change from 0 to 4 [ 1617.291362][T23476] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 1617.308021][T23478] sg_write: data in/out 1717986882/788 bytes for SCSI command 0x30-- guessing data in; [ 1617.308021][T23478] program syz-executor.5 not setting count and/or reply_len properly [ 1617.518797][T23494] loop1: detected capacity change from 0 to 4 [ 1617.529449][T23494] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 1617.556603][T23495] sg_write: data in/out 1717986882/788 bytes for SCSI command 0x30-- guessing data in; [ 1617.556603][T23495] program syz-executor.5 not setting count and/or reply_len properly [ 1617.707652][T23520] loop1: detected capacity change from 0 to 4 [ 1617.711359][T23520] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 1617.910287][T23534] loop1: detected capacity change from 0 to 4 [ 1617.926639][T23534] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 1618.054616][T23553] loop1: detected capacity change from 0 to 4 [ 1618.077044][T23553] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 1618.250939][T23577] loop1: detected capacity change from 0 to 4 [ 1618.278859][T23577] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 1618.570292][T23604] loop1: detected capacity change from 0 to 4 [ 1618.581489][T23604] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 1618.919645][T23628] loop1: detected capacity change from 0 to 4 [ 1618.924977][T23628] Dev loop1: unable to read RDB block 4 [ 1618.925013][T23628] loop1: unable to read partition table [ 1618.925186][T23628] loop1: partition table beyond EOD, truncated [ 1618.925845][T23628] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 1619.122313][T23641] loop1: detected capacity change from 0 to 4 [ 1619.133961][T23641] Dev loop1: unable to read RDB block 4 [ 1619.134003][T23641] loop1: unable to read partition table [ 1619.134155][T23641] loop1: partition table beyond EOD, truncated [ 1619.134750][T23641] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 1619.293074][T23658] loop1: detected capacity change from 0 to 4 [ 1619.297374][T23658] Dev loop1: unable to read RDB block 4 [ 1619.297409][T23658] loop1: unable to read partition table [ 1619.297569][T23658] loop1: partition table beyond EOD, truncated [ 1619.298075][T23658] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 1619.380291][T23683] loop1: detected capacity change from 0 to 4 [ 1619.392115][ T2817] Dev loop1: unable to read RDB block 4 [ 1619.392147][ T2817] loop1: unable to read partition table [ 1619.392276][ T2817] loop1: partition table beyond EOD, truncated [ 1619.611310][T23699] loop1: detected capacity change from 0 to 4 [ 1619.615761][T23699] Dev loop1: unable to read RDB block 4 [ 1619.615796][T23699] loop1: unable to read partition table [ 1619.615950][T23699] loop1: partition table beyond EOD, truncated [ 1619.756682][T23710] loop1: detected capacity change from 0 to 4 [ 1619.763583][ T2817] Dev loop1: unable to read RDB block 4 [ 1619.763618][ T2817] loop1: unable to read partition table [ 1619.763778][ T2817] loop1: partition table beyond EOD, truncated [ 1620.195191][T23730] loop1: detected capacity change from 0 to 4 [ 1620.204763][T23730] Dev loop1: unable to read RDB block 4 [ 1620.204803][T23730] loop1: unable to read partition table [ 1620.204943][T23730] loop1: partition table beyond EOD, truncated [ 1620.359754][T23754] loop1: detected capacity change from 0 to 4 [ 1620.364588][T23754] Dev loop1: unable to read RDB block 4 [ 1620.364630][T23754] loop1: unable to read partition table [ 1620.364780][T23754] loop1: partition table beyond EOD, truncated [ 1620.566172][T23777] loop1: detected capacity change from 0 to 4 [ 1620.577990][T23777] Dev loop1: unable to read RDB block 4 [ 1620.578031][T23777] loop1: unable to read partition table [ 1620.578190][T23777] loop1: partition table beyond EOD, truncated [ 1621.056722][T23793] loop1: detected capacity change from 0 to 4 [ 1621.062577][T23793] Dev loop1: unable to read RDB block 4 [ 1621.062616][T23793] loop1: unable to read partition table [ 1621.062764][T23793] loop1: partition table beyond EOD, truncated [ 1621.063386][T23793] ------------[ cut here ]------------ [ 1621.063394][T23793] WARNING: CPU: 0 PID: 23793 at mm/vmscan.c:681 register_shrinker_prepared+0x119/0x150 [ 1621.066045][T23793] Modules linked in: [ 1621.066070][T23793] CPU: 0 PID: 23793 Comm: syz-executor.1 Not tainted 5.19.0-rc1-next-20220606-syzkaller #0 [ 1621.066101][T23793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1621.066125][T23793] RIP: 0010:register_shrinker_prepared+0x119/0x150 [ 1621.066160][T23793] Code: ff 89 c5 89 c6 e8 e7 18 d1 ff 85 ed 75 17 e8 8e 1c d1 ff 5b 48 c7 c7 20 de e7 8b 5d 41 5c 41 5d e9 dc d2 b3 ff e8 77 1c d1 ff <0f> 0b eb e0 e8 ce f6 1d 00 eb be 4c 89 e7 e8 54 f7 1d 00 eb 81 e8 [ 1621.066188][T23793] RSP: 0018:ffffc900055afcb0 EFLAGS: 00010216 [ 1621.066216][T23793] RAX: 0000000000005e36 RBX: 0000000000000001 RCX: ffffc90004b71000 [ 1621.066236][T23793] RDX: 0000000000040000 RSI: ffffffff81a95519 RDI: 0000000000000005 [ 1621.066256][T23793] RBP: 00000000fffffff4 R08: 0000000000000005 R09: 0000000000000000 [ 1621.066274][T23793] R10: 00000000fffffff4 R11: 0000000000000001 R12: ffff888039b247a0 [ 1621.066294][T23793] R13: ffff8880772927a0 R14: ffff888077292000 R15: ffffffff8c57e400 [ 1621.066315][T23793] FS: 00007f74a6fe2700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 1621.066344][T23793] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1621.066367][T23793] CR2: 00007fb978d9d090 CR3: 000000002616e000 CR4: 00000000003506f0 [ 1621.066387][T23793] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1621.066405][T23793] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1621.066425][T23793] Call Trace: [ 1621.066436][T23793] [ 1621.066452][T23793] sget_fc+0x5e7/0x7c0 [ 1621.066485][T23793] ? set_bdev_super+0x2e0/0x2e0 [ 1621.066520][T23793] get_tree_bdev+0x1c0/0x7e0 [ 1621.066549][T23793] ? erofs_init_device+0x420/0x420 [ 1621.066593][T23793] vfs_get_tree+0x89/0x2f0 [ 1621.066624][T23793] path_mount+0x1320/0x1fa0 [ 1621.066656][T23793] ? kmem_cache_free+0xdd/0x5a0 [ 1621.066698][T23793] ? finish_automount+0xaf0/0xaf0 [ 1621.066734][T23793] ? putname+0xfe/0x140 [ 1621.066771][T23793] __x64_sys_mount+0x27f/0x300 [ 1621.066802][T23793] ? copy_mnt_ns+0xae0/0xae0 [ 1621.066835][T23793] ? syscall_enter_from_user_mode+0x21/0x70 [ 1621.066880][T23793] do_syscall_64+0x35/0xb0 [ 1621.066909][T23793] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 1621.071111][T23793] RIP: 0033:0x7f74a5e8a63a [ 1621.071145][T23793] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1621.071173][T23793] RSP: 002b:00007f74a6fe1f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1621.071206][T23793] RAX: ffffffffffffffda RBX: 0000000020000600 RCX: 00007f74a5e8a63a [ 1621.071227][T23793] RDX: 0000000020000080 RSI: 0000000020000100 RDI: 00007f74a6fe1fe0 [ 1621.071248][T23793] RBP: 00007f74a6fe2020 R08: 00007f74a6fe2020 R09: 0000000020000080 [ 1621.071269][T23793] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000080 [ 1621.071289][T23793] R13: 0000000020000100 R14: 00007f74a6fe1fe0 R15: 0000000020000000 [ 1621.071331][T23793] [ 1621.071345][T23793] Kernel panic - not syncing: panic_on_warn set ... [ 1621.071357][T23793] CPU: 0 PID: 23793 Comm: syz-executor.1 Not tainted 5.19.0-rc1-next-20220606-syzkaller #0 [ 1621.071383][T23793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1621.071398][T23793] Call Trace: [ 1621.071406][T23793] [ 1621.071417][T23793] dump_stack_lvl+0xcd/0x134 [ 1621.071457][T23793] panic+0x2d7/0x636 [ 1621.071517][T23793] ? panic_print_sys_info.part.0+0x10b/0x10b [ 1621.071561][T23793] ? __warn.cold+0x1d9/0x2cd [ 1621.071595][T23793] ? register_shrinker_prepared+0x119/0x150 [ 1621.071621][T23793] __warn.cold+0x1ea/0x2cd [ 1621.071654][T23793] ? register_shrinker_prepared+0x119/0x150 [ 1621.071682][T23793] report_bug+0x1bc/0x210 [ 1621.071711][T23793] handle_bug+0x3c/0x60 [ 1621.071739][T23793] exc_invalid_op+0x14/0x40 [ 1621.071766][T23793] asm_exc_invalid_op+0x1b/0x20 [ 1621.071789][T23793] RIP: 0010:register_shrinker_prepared+0x119/0x150 [ 1621.071816][T23793] Code: ff 89 c5 89 c6 e8 e7 18 d1 ff 85 ed 75 17 e8 8e 1c d1 ff 5b 48 c7 c7 20 de e7 8b 5d 41 5c 41 5d e9 dc d2 b3 ff e8 77 1c d1 ff <0f> 0b eb e0 e8 ce f6 1d 00 eb be 4c 89 e7 e8 54 f7 1d 00 eb 81 e8 [ 1621.071840][T23793] RSP: 0018:ffffc900055afcb0 EFLAGS: 00010216 [ 1621.071862][T23793] RAX: 0000000000005e36 RBX: 0000000000000001 RCX: ffffc90004b71000 [ 1621.071879][T23793] RDX: 0000000000040000 RSI: ffffffff81a95519 RDI: 0000000000000005 [ 1621.071895][T23793] RBP: 00000000fffffff4 R08: 0000000000000005 R09: 0000000000000000 [ 1621.071912][T23793] R10: 00000000fffffff4 R11: 0000000000000001 R12: ffff888039b247a0 [ 1621.071929][T23793] R13: ffff8880772927a0 R14: ffff888077292000 R15: ffffffff8c57e400 [ 1621.071959][T23793] ? register_shrinker_prepared+0x119/0x150 [ 1621.071993][T23793] sget_fc+0x5e7/0x7c0 [ 1621.072022][T23793] ? set_bdev_super+0x2e0/0x2e0 [ 1621.072053][T23793] get_tree_bdev+0x1c0/0x7e0 [ 1621.072080][T23793] ? erofs_init_device+0x420/0x420 [ 1621.072130][T23793] vfs_get_tree+0x89/0x2f0 [ 1621.072158][T23793] path_mount+0x1320/0x1fa0 [ 1621.072189][T23793] ? kmem_cache_free+0xdd/0x5a0 [ 1621.072228][T23793] ? finish_automount+0xaf0/0xaf0 [ 1621.072262][T23793] ? putname+0xfe/0x140 [ 1621.072295][T23793] __x64_sys_mount+0x27f/0x300 [ 1621.072325][T23793] ? copy_mnt_ns+0xae0/0xae0 [ 1621.072354][T23793] ? syscall_enter_from_user_mode+0x21/0x70 [ 1621.072394][T23793] do_syscall_64+0x35/0xb0 [ 1621.072421][T23793] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 1621.072457][T23793] RIP: 0033:0x7f74a5e8a63a [ 1621.072475][T23793] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1621.072498][T23793] RSP: 002b:00007f74a6fe1f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1621.072523][T23793] RAX: ffffffffffffffda RBX: 0000000020000600 RCX: 00007f74a5e8a63a [ 1621.072540][T23793] RDX: 0000000020000080 RSI: 0000000020000100 RDI: 00007f74a6fe1fe0 [ 1621.072556][T23793] RBP: 00007f74a6fe2020 R08: 00007f74a6fe2020 R09: 0000000020000080 [ 1621.072573][T23793] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000080 [ 1621.072589][T23793] R13: 0000000020000100 R14: 00007f74a6fe1fe0 R15: 0000000020000000 [ 1621.072625][T23793] [ 1621.073885][T23793] Kernel Offset: disabled