, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) [ 192.586482] overlayfs: unrecognized mount option "Ӌ޸棼)pEWo65" or missing value 2033/05/18 03:35:30 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpu.weight\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040), 0x5) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000140)={{0x2, 0x5}, 'port1\x00', 0x88, 0x10000, 0x1, 0x7fff, 0x2, 0xfffffffffffffe01, 0x2, 0x0, 0x5, 0x5}) [ 192.754858] FAT-fs (loop1): Unrecognized mount option "time_offset=80>65" or missing value [ 192.826725] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 192.833942] FAT-fs (loop5): Filesystem has been set read-only [ 192.901371] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:35:31 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:35:31 executing program 1: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44033, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000000)={@loopback=0x7f000001, @broadcast=0xffffffff, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xc) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3f6f, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000080)) 2033/05/18 03:35:31 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x3b6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x95, "e296facab6225567f8b4dc0cc6bb706e34b10530cf7f8c0617e4342a026d3feb45c85800bcff1127cac3b633ee498e3e77bc6a9455e41d1c8d81eaf137b916b950408a5aaf8392f838e08cf5cd188d7cf5c94d74ceaa30abeb40e2078d6772b9f38d9d30c40c27b19456c06bb3c2260e5c4a0988fe1de9cda3d032e262af7326ad2176f9676452c23ea533ad404c6507a096ec2c36"}, &(0x7f00000000c0)=0x9d) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r2, 0x9}, 0x8) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) 2033/05/18 03:35:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0xfdfdffff00000000, &(0x7f0000008f37)}) 2033/05/18 03:35:31 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0Ofile0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x3, &(0x7f0000008f37)}) 2033/05/18 03:35:31 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x27ed, 0x40000) ioctl$sock_ipx_SIOCAIPXITFCRT(r2, 0x89e0, &(0x7f0000000080)=0x6) r3 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendto$inet(r1, &(0x7f0000531fff), 0x0, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000b76fc8)={&(0x7f0000715000)={0x10}, 0xc, &(0x7f000066f000)={&(0x7f0000896000)=ANY=[]}, 0x1}, 0x0) sendmmsg(r3, &(0x7f000000b880)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) write(r1, &(0x7f0000f8aff1), 0xff8f) sendto$inet(r1, &(0x7f0000494f01), 0xffc3, 0x0, &(0x7f0000198ff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffff9c, 0xc05c5340, &(0x7f0000000100)={0x1, 0x2, 0x3dd, {r4, r5+30000000}, 0x100000000}) sendmmsg(r3, &(0x7f00000060c0)=[{{&(0x7f0000003ac0)=@l2={0x1f}, 0x80, &(0x7f00000015c0)}}, {{&(0x7f0000003cc0)=@pppoe={0x18, 0x0, {0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'syzkaller0\x00'}}, 0x80, &(0x7f0000004e80), 0x0, &(0x7f0000004ec0)}}, {{&(0x7f0000005f00)=@sco={0x1f}, 0x80, &(0x7f0000006080)}}], 0x3, 0x0) 2033/05/18 03:35:31 executing program 4 (fault-call:9 fault-nth:0): mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfsplus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:35:31 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:35:31 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000020f88)="24000000100007031dfffd946fa2830020200a0009000300001d85687f0000000400ff7e28000000120a43ba16a0aa1ca10bb356da5d8060000000060000000029ec2400020cd37ed01cc073", 0x4c}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000000)) sendto$inet(r1, &(0x7f0000000080)="564ab978b029a5a8aa", 0x9, 0x90, &(0x7f00000000c0)={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000140)={0x11}) 2033/05/18 03:35:31 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x3, @random="6187b12d5129", 'bridge0\x00'}}, 0xe) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6, 0x200000) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000080)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r2}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x6, 0x20, 0x7, {0x77359400}, {r3, r4/1000+30000}, {0x0, 0x7, 0x5, 0xffffffffffffff01}, 0x1, @can={{0x2, 0x8, 0x6, 0x7}, 0x7, 0x2, 0x0, 0x0, "817ae59c6d8742ee"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000850}, 0x24008040) sendmsg(r0, &(0x7f00000002c0)={&(0x7f00000000c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000480)}, 0x0) 2033/05/18 03:35:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x1000000, &(0x7f0000008f37)}) [ 193.677300] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 193.684530] FAT-fs (loop5): Filesystem has been set read-only 2033/05/18 03:35:31 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) [ 193.740575] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 193.772834] dccp_close: ABORT with 65423 bytes unread 2033/05/18 03:35:31 executing program 6: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = mq_open(&(0x7f0000000280)="2f6465765d01eac8990d6b98bc752f736e649ca01ce7827f3b94a014418d4620e5d7cc1b8665fb9028bb91f2cf1163c10751afdfab44638006612570c2", 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x20004000000}) sendmmsg(0xffffffffffffffff, &(0x7f0000006680)=[{{&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000001840)}}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000009f7c)=""/132, 0x84}, {&(0x7f0000012000)=""/252, 0xfc}, {&(0x7f0000012000)=""/155, 0x9b}, {&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f0000000000)=""/102, 0xfffffffffffffef8}], 0x5, 0x0) write(r1, &(0x7f0000000080)="7e0518f58c7c0fe8948a208a52bb260968708daebbdbd139968d27b1ea6ba178faf8d3406ccea0bb346ed41e05e35692fd8abbf7616ab8297e3ef6afa0", 0x3d) ioctl(r0, 0xc2604110, &(0x7f0000000000)) [ 193.785134] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. 2033/05/18 03:35:32 executing program 0: syz_emit_ethernet(0x42, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa108100110086dd6050a09c00082b00fe8000000000000400000000000000bbfe80009f0000000b00000000000000aaa8880000000890787080c3385b6162e238eb79e67f69e95b0f0e1ff21c0d7ecb2b70088e73d47650f05f28503a253af3a559abe7b24acbcb37ed1ccbf21fb1629d345af1a1eba9e6b0824628475508524fc6ce67e2583cc9"], &(0x7f0000000040)) r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, @broadcast}, &(0x7f0000000080)=0x10) getsockname(r0, &(0x7f0000000380)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, &(0x7f0000000400)=0x80) r1 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x8000, 0x1e) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x6, @loopback={0x0, 0x1}, 0x3}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={r2, 0x34, 0x78, 0xd283}, 0x10) [ 193.856943] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. [ 194.493851] FAULT_INJECTION: forcing a failure. [ 194.493851] name failslab, interval 1, probability 0, space 0, times 0 [ 194.505126] CPU: 1 PID: 12014 Comm: syz-executor4 Not tainted 4.16.0+ #1 [ 194.511947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.521283] Call Trace: [ 194.523876] dump_stack+0x1b9/0x294 [ 194.527503] ? dump_stack_print_info.cold.2+0x52/0x52 [ 194.532689] should_fail.cold.4+0xa/0x1a [ 194.536743] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 194.541837] ? lock_downgrade+0x8e0/0x8e0 [ 194.545977] ? proc_fail_nth_write+0x96/0x1f0 [ 194.550456] ? proc_cwd_link+0x1d0/0x1d0 [ 194.554502] ? find_held_lock+0x36/0x1c0 [ 194.558561] ? check_same_owner+0x320/0x320 [ 194.562867] ? rcu_note_context_switch+0x710/0x710 [ 194.567785] __should_failslab+0x124/0x180 [ 194.572014] should_failslab+0x9/0x14 [ 194.575803] __kmalloc+0x2c8/0x760 [ 194.579329] ? strncpy_from_user+0x500/0x500 [ 194.583719] ? fput+0x130/0x1a0 [ 194.586986] ? SyS_memfd_create+0xfd/0x510 [ 194.591203] ? memfd_fcntl+0x15d0/0x15d0 [ 194.595249] SyS_memfd_create+0xfd/0x510 [ 194.599296] ? mm_fault_error+0x380/0x380 [ 194.603426] ? memfd_fcntl+0x15d0/0x15d0 [ 194.607472] ? ksys_ioctl+0x81/0xd0 [ 194.611084] ? do_syscall_64+0xb7/0x9d0 [ 194.615043] ? memfd_fcntl+0x15d0/0x15d0 [ 194.619088] do_syscall_64+0x29e/0x9d0 [ 194.622958] ? vmalloc_sync_all+0x30/0x30 [ 194.627094] ? kasan_check_write+0x14/0x20 [ 194.631314] ? syscall_return_slowpath+0x5c0/0x5c0 [ 194.636228] ? syscall_return_slowpath+0x30f/0x5c0 [ 194.641144] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 194.646495] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 194.651326] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 194.656498] RIP: 0033:0x455319 [ 194.659670] RSP: 002b:00007fc0b72adbb8 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 194.667363] RAX: ffffffffffffffda RBX: 0000000020000d00 RCX: 0000000000455319 [ 194.674612] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004ba14f [ 194.681863] RBP: 000000000072c0c8 R08: 0000000000000000 R09: 0000000000000000 2033/05/18 03:35:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x3000000, &(0x7f0000008f37)}) 2033/05/18 03:35:32 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:35:32 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/\\ile0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:32 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:35:32 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x4, 0x10000) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000140)=0x6, &(0x7f00000001c0)=0x2) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x80080) accept$ipx(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r3 = inotify_init() epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x2000}) fcntl$notify(r3, 0x0, 0x282) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_cache\x00') 2033/05/18 03:35:32 executing program 0: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) request_key(&(0x7f0000000040)='.dead\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0)='losecurity,em1nodevselinuxposix_acl_accessselinuxkeyring\'system^keyringvmnet1\x00', 0xfffffffffffffffa) r1 = syz_open_dev$midi(&(0x7f0000000340)='/dev/midi#\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000ac0)={0x7, &(0x7f0000000e00)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @link_local}, {}, {0x0, 0x0, 0x0, @random}]}) geteuid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x3, 0x0, "568ba1532d9fa4a4a0b2ac7fed1ba5df6183c56aab4b149a87b45ecde423213c30734da7de0daefc4f85152077b0196e06e5a1d95840e8dc7eb18f5f2781abadec7c9d4ef97335343396d95c6c3a63db"}, 0xd8) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000b00)) sendto$inet(r2, &(0x7f0000e9bf14), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x1000000000004e23}, 0x10) recvfrom$inet(r2, &(0x7f0000000240)=""/247, 0xf7, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@local, @in6=@ipv4={[], [], @multicast2}}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xe8) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000580)=0x100, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f0000000cc0)={0x0, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}}, {{0x2, 0x4e22}}}, 0x108) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000bc0)=ANY=[@ANYBLOB="66696c746572000000000000000000d581ba2a71f527ea0ac9a6c90000000000000000000000000000000000670000002f09d5b7f1a276c47ee9080000000000000082c7465c01a57b0466c00798269750985fbe4125637ebcd274f44b88f4cd453deda3b7eb5a1eff06ac46c4aa144fe12817e4d86ec57cc556ed000000000000000000dce4736681475c251467df31422dcd792d0ca9fa15826e296635d8f20bbb64ca565463b7bbd5ca9332ce565d42a7b9b14e9b17ae600b57f8cf45915c236dac8a082c80dcde4c89697fe64367105eea821615aab199d5d5fde67dba7ac0f3e0a332fdfbc5b8"], &(0x7f0000000b40)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000006c0)={{{@in6=@local, @in6=@mcast2}}, {{@in=@rand_addr}, 0x0, @in6}}, &(0x7f0000000200)=0xe8) read(r2, &(0x7f0000000900)=""/217, 0xd9) getgid() getsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000a00)=""/157, &(0x7f0000000180)=0x9d) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x138, [0x200007c0, 0x0, 0x0, 0x200008d0, 0x20000900], 0x0, &(0x7f0000000040), &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]}, 0x1b0) sendto$inet(r2, &(0x7f0000000380)="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", 0x14f, 0x51, &(0x7f0000e66000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2033/05/18 03:35:32 executing program 4 (fault-call:9 fault-nth:1): mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfsplus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:35:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f0000000100), 0x4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000080)=0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x4, 0x4) sendto$inet(r0, &(0x7f0000482000), 0x0, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f000000e040)=[{{&(0x7f0000008900)=@pppoe={0x18, 0x0, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'ip6tnl0\x00'}}, 0x80, &(0x7f0000009e40)=[{&(0x7f0000008ac0)="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", 0x6c1}], 0x1, &(0x7f0000009ec0)}}, {{&(0x7f000000d9c0)=@can={0x1d}, 0x80, &(0x7f000000dfc0)=[{&(0x7f000000df40)='\x00', 0x1}], 0x1}}], 0x2, 0x0) [ 194.689113] R10: 0000000020000d00 R11: 0000000000000246 R12: 0000000000000015 [ 194.696365] R13: 000000000000066d R14: 00000000006fcad8 R15: 0000000000000000 [ 194.714357] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 2033/05/18 03:35:32 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') connect$unix(r0, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe7fe, 0x1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000300)='./file0/fil.0\x00', 0x800000000002040, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) rmdir(&(0x7f0000000240)='./file0/file0\x00') 2033/05/18 03:35:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x300000000000000, &(0x7f0000008f37)}) 2033/05/18 03:35:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000200)={r3, 0x8}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000280)={0x7, 0x100, 0x0, 0x3f, 0x46e, 0x6642, 0x1, 0x1e3d, r3}, 0x20) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x80) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2033/05/18 03:35:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x200000, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f00000000c0)='/dev/binder#\x00') accept4$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x80800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440a31d8ffbfdfaf53d4c2ca9b14d1d35d2ac09ffe29b8e8066fa0700a3207c0080000000000000de5691b05281726b47de0eac46b88b"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:33 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') connect$unix(r0, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe7fe, 0x1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000300)='./file0/fil.0\x00', 0x800000000002040, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) rmdir(&(0x7f0000000240)='./file0/file0\x00') 2033/05/18 03:35:33 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) [ 195.199512] binder: 12051:12052 Acquire 1 refcount change on invalid ref -74506845 ret -22 2033/05/18 03:35:33 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) [ 195.246270] binder: 12051:12052 IncRefs 0 refcount change on invalid ref 0 ret -22 2033/05/18 03:35:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000003c0)='/dev/admmidi#\x00', 0x6, 0x6000) ioctl$TCXONC(r1, 0x540a, 0x101) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f0000000200)) memfd_create(&(0x7f00000000c0)='/dev/binder#\x00', 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="ff0f000000160000cc247141c4464dd2eea7db553445b7d78a026798da65727c22a8b4c0d7f81fbfbc05682bdd112dff7b7c873e93ce1016d8f742a4064ccc1d49371d2e9b3a9e9f640d7ff0c8c5736af66f8e1ffb80713ff9768d0d8f4ffa2039deda0c0c2e20a943c602b8e2af7756c875af71d250898131672ac99e2435082006ffdd7a93126f336b56a7115b49314d5ebf03"], 0x0, 0x0, &(0x7f0000008f37)}) [ 195.296968] binder: 12051:12057 Acquire 1 refcount change on invalid ref -74506845 ret -22 [ 195.567739] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 195.574977] FAT-fs (loop5): Filesystem has been set read-only [ 195.658813] kernel msg: ebtables bug: please report to author: entries_size too small [ 195.685220] binder: 12065:12069 unknown command 4095 [ 195.696491] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 195.713254] binder: 12065:12069 ioctl c0306201 2000dfd0 returned -22 [ 195.739955] binder: 12065:12075 unknown command 4095 [ 195.752631] binder: 12065:12075 ioctl c0306201 2000dfd0 returned -22 [ 195.763545] FAULT_INJECTION: forcing a failure. [ 195.763545] name failslab, interval 1, probability 0, space 0, times 0 [ 195.774891] CPU: 0 PID: 12079 Comm: syz-executor4 Not tainted 4.16.0+ #1 [ 195.781723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.791068] Call Trace: [ 195.793659] dump_stack+0x1b9/0x294 [ 195.797289] ? dump_stack_print_info.cold.2+0x52/0x52 [ 195.802485] should_fail.cold.4+0xa/0x1a [ 195.806547] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 195.811660] ? find_held_lock+0x36/0x1c0 [ 195.815735] ? check_same_owner+0x320/0x320 [ 195.820050] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 195.825062] ? rcu_note_context_switch+0x710/0x710 [ 195.829997] __should_failslab+0x124/0x180 [ 195.834233] should_failslab+0x9/0x14 [ 195.838029] kmem_cache_alloc+0x2af/0x760 [ 195.842177] ? lock_downgrade+0x8e0/0x8e0 [ 195.846322] __d_alloc+0xc0/0xd30 [ 195.849783] ? do_raw_spin_unlock+0x9e/0x2e0 [ 195.854204] ? shrink_dcache_for_umount+0x290/0x290 [ 195.859225] ? __lock_is_held+0xb5/0x140 [ 195.863306] ? _raw_spin_unlock+0x22/0x30 [ 195.867453] ? __alloc_fd+0x346/0x700 [ 195.871259] ? exit_files+0xb0/0xb0 [ 195.874887] ? lock_downgrade+0x8e0/0x8e0 [ 195.879038] d_alloc_pseudo+0x1d/0x30 [ 195.882838] __shmem_file_setup+0x1ed/0x6e0 [ 195.887159] ? shmem_fill_super+0xa30/0xa30 [ 195.891479] ? get_unused_fd_flags+0x121/0x190 [ 195.896058] ? __alloc_fd+0x700/0x700 [ 195.899864] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 195.905401] ? _copy_from_user+0xdf/0x150 [ 195.909548] SyS_memfd_create+0x254/0x510 [ 195.913698] ? memfd_fcntl+0x15d0/0x15d0 [ 195.917758] ? ksys_ioctl+0x81/0xd0 [ 195.921393] ? do_syscall_64+0xb7/0x9d0 [ 195.925365] ? memfd_fcntl+0x15d0/0x15d0 [ 195.929428] do_syscall_64+0x29e/0x9d0 [ 195.933341] ? vmalloc_sync_all+0x30/0x30 [ 195.937500] ? _raw_spin_unlock_irq+0x27/0x70 [ 195.941995] ? finish_task_switch+0x1ca/0x810 [ 195.946491] ? syscall_return_slowpath+0x5c0/0x5c0 [ 195.951420] ? syscall_return_slowpath+0x30f/0x5c0 [ 195.956356] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 195.961722] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 195.966565] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 195.971746] RIP: 0033:0x455319 [ 195.974928] RSP: 002b:00007fc0b72adbb8 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 195.982634] RAX: ffffffffffffffda RBX: 0000000020000d00 RCX: 0000000000455319 [ 195.989896] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004ba14f [ 195.997161] RBP: 000000000072c0c8 R08: 0000000000000000 R09: 0000000000000000 [ 196.004429] R10: 0000000020000d00 R11: 0000000000000246 R12: 0000000000000015 [ 196.011691] R13: 000000000000066d R14: 00000000006fcad8 R15: 0000000000000001 2033/05/18 03:35:34 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback=0x7f000001, 0x4e21, 0x4, 'dh\x00', 0x2, 0x7, 0x28}, 0x2c) r1 = accept$inet(r0, &(0x7f00000006c0)={0x0, 0x0, @rand_addr}, &(0x7f0000000700)=0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000740)={0x0, 0x4}, &(0x7f0000000780)=0x8) write(0xffffffffffffffff, &(0x7f0000000080)="220000001a000704009433dd0100040080010f0001c6001500fffe3b06000f000027", 0x1f8) getsockname$inet(r0, &(0x7f0000000540)={0x0, 0x0, @rand_addr}, &(0x7f0000000680)=0x10) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e23, @broadcast=0xffffffff}, {0x6}, 0x48, {0x2, 0x4e24, @broadcast=0xffffffff}, 'irlan0\x00'}) connect$ax25(0xffffffffffffffff, &(0x7f0000000500)={0x3, {"e37251c4089837"}, 0x20}, 0x10) 2033/05/18 03:35:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="04400000"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x8000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:34 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/\nile0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:34 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) [ 196.042506] kernel msg: ebtables bug: please report to author: entries_size too small [ 196.113942] binder: 12084:12085 unknown command 16388 [ 196.152425] binder: 12084:12085 ioctl c0306201 20007000 returned -22 [ 196.170882] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 196.178116] FAT-fs (loop5): Filesystem has been set read-only [ 196.179951] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0x1b43/0x1d30 [ 196.198878] binder: 12084:12085 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 196.207808] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 196.253089] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0x1b43/0x1d30 [ 196.346689] binder: 12084:12085 unknown command 16388 [ 196.352642] binder: 12084:12085 ioctl c0306201 20007000 returned -22 [ 196.359770] binder: 12084:12100 IncRefs 0 refcount change on invalid ref 0 ret -22 2033/05/18 03:35:34 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x4, 0x0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f00000000c0)={0x3, 0x800}) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f0000000100)="86d831505f4cfd345bf60f2ed238e0023c9b16298e352c17df7ed77a59a9fb73e82825e766f9b93a6bd4", 0x2a) r3 = getpgrp(0x0) ioctl$VT_RELDISP(r1, 0x5605) kcmp$KCMP_EPOLL_TFD(r3, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000080)) 2033/05/18 03:35:34 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x0, 0x0) dup2(r0, r1) 2033/05/18 03:35:34 executing program 6: r0 = socket$inet6(0xa, 0x7, 0x5) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0xb}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="eaaaaaaa938575a032d6bd99aaa8aaaaaaaaaa008650a09c0000000000000016cae47d74d9a922fe8000000000000001000000000000aa00004e20000890780000000000c7262de61b31455d26c6aa59d2b5ab91f201b6261875344c25249fe07e9a664f56"], &(0x7f0000000040)) 2033/05/18 03:35:34 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/:ile0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:34 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:35:34 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfsplus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:35:34 executing program 0: r0 = socket(0x8, 0x4000000004080800, 0x1) sendmmsg$nfc_llcp(r0, &(0x7f0000009d40)=[{&(0x7f0000000000)={0x27, 0x1, 0x0, 0x1, 0x9, 0x2, "e0afe3c855d9e7960dbb868541aaa57d803bf22c28ec07f324576f27b6b4c97c79ce0eac3a1a6f43027ac1d839678bd1c94bc28d5c15fd9bd079dd690d7c9e", 0x9}, 0x60, &(0x7f0000003380)=[{&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="be3bdc39e7377d2e9634fa10803c1408a585b611d353904371412a36c3812a7e55177b1462215792f10781448f05c37c135eaf98e99f0d435accfb1e9603b906b2419770c3c5841bc556cf757c7d3e95df77dd79875d8ffb123adb3ce03da3", 0x5f}, {&(0x7f0000001100)="41cdd5be4ea0d4a38f09506db18abf3c96a993c05686ca594656f726c484d0fa14ba8d02b58e66c88d0794090d8fa51c2a6253ca49888ef84d971e6b62d8ebc3775b1fb629d85d49ee5e21b09f62584b257aa0a031ebe2cfd50e50f97d7563f51406f7863643ea1eef3d53ccce7700970791d8de39057a879a46ffbdf845b06777b0a0095cb4de4a136a7530cea8ef5a09f0d53eee113f1aae6ca966", 0x9c}, {&(0x7f00000011c0)="1aa7c8e3e3ae17d0f1c5785211af3a8dfed1d869c2ae808d2073c2d3169ad0c644d8b1fb0ca7f5ae80ebcc407fe662de7cca6953d54147be4f4c5c1cdd6b3fb38582ab46011ce32183e6b81b6b4dc12f37e8b0e41fe9f2158e6c93d73af43d01a16828a1ce69bd46ffc8a07e1e0997c088e3ba38adb98f39b505a00c0f29b1603b612ab465d72d17da30de9beef9b13a9aa68816a85543b0f76ef82c3cdcb01501e2", 0xa2}, {&(0x7f0000001280)="da819e3f5ee78fb6354996ef70ea981ad83905252e530815d3532f4500e34d6450b0f3e2560505ba610917f862b00fc0", 0x30}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000022c0)="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", 0x1000}, {&(0x7f00000032c0)="1dec48e98acfe61d88b730f6eee3d6b74b91cd3415e0fdc3d1072f56fde3163155e09667398ab674c1671730692665c9f30ff83663c8ebd10042611b7be7e5d5076a1b34c3f9fd157a4a0f7f81648ac2767eb8eda1f7b4e7fb3d87341edfa8713b5e8cdf339b6f2ddd3a3ed7810d4393863974534c865584cb1580a83d102efda756d4c5", 0x84}], 0x8, &(0x7f0000003400)={0x110, 0x11f, 0x1, "15d679ed64c2db44345d4d001b710045926fc11ea4af4e413166ebe22ac9b567d3e484d14cc3fa1bdfcea567e2ccc6ad607f5f49f4e031c4dca442888a7b56f6aa41116e6415258cefddd90f625a28252ad840d2c73c79d7a6e19f4bfa6ad5ae5639e2791af0e93a74fc0866668aa40fc790a68c363c97acb9d883d09f019e148ffc385cd67c6bb5457dc790b22b4d43ed12bfaa8078945288d56f884778e5c1546f6248156f24eadfba0d8e3e68f84aa468d017a72037086afdb451afd58b963ac4f9dd8c89a3b78c469a15d1f03c4d9c95dabd97b3aff19a6f8f0e58a59e7b348eed87f8213aedc37dde21febb0c73e83bcf4e25b50d74a0"}, 0x110, 0x1}, {&(0x7f0000003540)={0x27, 0x0, 0x0, 0x7, 0x1, 0x9, "843b3b81b8bc83696f18fd64ad0bf452592caa97459a822158a3420c32dd8b8c2a9d428f34d460bbde7ee0dc9cdd4eb6ab32e4216445ded4ef34bdf16897d6", 0x26}, 0x60, &(0x7f00000048c0)=[{&(0x7f00000035c0)="30ac5edbb80e91a59cdc7c39d3ad7735c1bcb41609225233cf8910b60adcb53901b1c4c954c964060e1bb838ffb183c61277369fbd9479419c6066f7c6c7ca03d0ea6a0e593d747a958f19ae1663a24ba92c8c9126d5436a6171811a7fe2761b3025646ee07abad2168cd6cdc1d37fc494e0fb1440d3ad7b2971cc1d820982b276d78169bbdf489753a640ae8635e36d19a3fcba88521d2da344eaf2cb04a94c03bb1f26f76f8f1c733495aa625fd44b61a45dca901728302d1982e82c683d5ce398d359e430fed64e", 0xc9}, {&(0x7f00000036c0)="76e0449cb605df46da9febe276609dc031d1b9eecea8ad270d22b386c89c599be9e5089ad9e7dc4efa8e428c39b8dde60f1b791c58c253f799369cf4238088e814ed9f7843e8d45bad1cea747d87c6a631a0a692fc070e80ae31e8f0f89ab255d6646a5b1582f691f68d306da78f99970f2fa9f39434778c5b2bac725350ffbb8e1df09f0ad69826e3e6001e14c58ff9ef5c6c9c84c5c31c76cb9ad14bd1c8fc252947731ca86662fc1a9a52", 0xac}, {&(0x7f0000003780)="b68e74e251d0b8216a5d66ca8551750cdc9c1a606f1b415cf74f16bc44b4b7209b1e256fdba445b52e1221a4680d2bbbe1ace23c706c7963abdb572e616c446e230a20409c24ce29ed2d00811d5dc345ff09be35c9fe171a7b4c834b7ea08ee4a6d24bf214d3893efe0180c76269c1975e59cca4b9f5be1dce623481c23ed6883f51df8a6e704120372255a33e0b1bf92a8c965fd565004420f99f63ee0b785fbb09a0", 0xa3}, {&(0x7f0000003840)="09e85ce53909b8113dceaa325debcc23c8ea9f491ab28cbd741b95dc428aabc426399363d32ed3dce719d974bafc540e7ee3c9f268f5f2022cdeca64a6c9979fbacfb73474dff278a6baf142c8cc9dd4a15e4179da25981dcda1d4e17e0601df8074ce6c30b6c57fa060595bef8d2666", 0x70}, {&(0x7f00000038c0)="2f57091afb43c7eed672d463e22a72ec2bc605a95330be49463a49358811274e7242bf39f6e7d26e9d3cfc2cc5b28b9c9ec719bcd1e93483d044f1ccf4c061b8af24026ed42f998734121c8bc8b77b74ee9ce408629315f33524555980d581ec2c3ab889d2e58f0c05815024d04d05f9793cf459a311deb20a1ee9b33f5fb9d2e57e02b36ccc6e39347b12b9ff9d324999187addd062c459a50c32e9e56c270fc7a3c0d8f59b879d6b6a632ea5baf27197c7573d651285117430c62792469e0d16e15e61715f15a0f7c083d57571664036c08c9e91e726ac66b378946910e3a3a413e190c966f52e81977369732fd0a86dc1270c0e881568542ab8e2715df4036a5f62bde7332630f9f16a1e361afb4c59bcb335c76d9618ed9100f2538135488452aaecaa724584d94029a6a12596ec118fb88bd3c833a3379962267338cf330301c334562327d7395fb8d31dc57883230c8bccf425a4a563d02d7cfbe4f9d86b3eb2a04c174b358e544ac435251b371b3f5b5cf1df114beeb2648d943cc769a4549323ba10554cd5143f2a50632de2c0137e84d0ca8fb4383e3a4782feb44dc4e59cc55c70f0a800785724fdb9f5660dc923883b5e5c1efbc53708e89b780f3ff9fbd9ffa4e80e50c51050960387bf453837029f7c7b0ecb8356e3abdb71ab603060f08d9c6085687054490572f84089dd1c9aa10635a061de833f8c3c1a70f28874b4c983a4ab4596b564a7979687673d8e3699cf4cffa4b4edbf2db5fdc53fc2b1a637f34b617d945a98920e51ec7df8319c64502c36c6a20cc77a4283d765ecb450a8a1690885b5a06405f4ac9da033b788b3f783813228ecdf3a35a8a8da2c268610bb147b1737340fa76ed0259e71e806d10b61926fd789d3d55c738d79db785244c44eae88eade29401fd96530be11650cef932690c6e133eab21cdd07c38252b46951c4c754ca02fffe72a3e9a8eefe59716325cd55d2d7fa7fa622a1c652f66dcb6a61a04ce90755ee94f14b33529feade56f32c3a794faf4fd66d3d48eba4ce0eb6b08add3d5681de250ac3db0d315251f606929a5a3ab62c81c0e349b5113528a4a10ac50d29fa7fadb1374ac5d9c74f9418dc0cbe48aa45a5ac69c59fff95af7044c0288a633093f63386cc61428d5da0b215f528c4a875b1f5ff5f89fa035a7eadce3a0c80f74bebf1998df8c3d9be0abe333e9812c1f9f717fd02f19fbbda287d729d4723fa358202648e62edf3a6d4010c182a8791dcb65577485d927817903bd2997e2af86c48851c32664c1a77688548ea1051610f53dc66f4f2678834c6cd85499afef863353fe9928f7678590eb495f4d1c5e6f8d6dee29c493a15a5a7f279171907fc15b6c161fc2244d67f16591404d97d441c583946df560db03f2b2c086b64c9b3dd329681bcccbc6e5ec3eeeec425c054362ce9f05fa16aa142faf67fe9be58f3ac938f8907d1f16f9247a06641cdf6c4728eecab3323c47eb05de4ddec5c544b3204ebe5a1c73f7c11bd3bc8160c363fa23e5763e6bceedfeee30823693f2d37a0b63ad31cfa2b0138fae08c517a99bc11bbde790d41c1467e6a5054e8a33faa58815e558b388a6f08dacc31605d74d9f7fac1c4153499e13f08519567b0bc96e2c9344da8e5c2e3a54d56dedf60f86d7c44ae71d1820fee847fee3be94e15450eadf3101e7ca65f0cb5f9f57229d434a00b0f6c10189f328cd426ecc9037833b61d7550caa31b46773717c903eaef6470a3309dda4f6709252e9f44f22e199d1d8288f7574463fc4465bcf3e99f4f7bcfba3959030e8126bf228a43b9c624bec7d91592de5efadb0568c74c51c1b8d799ce3455dcfe3fbcdaf4e7ec504923e55864d920fed30ea3d5a38a1e573b0ca422a04133d145964e32c14718056d8d1464ad023271180e3fd6f475a37da4f55ab9619984892d2f54a5da05a59a7b74186ac3f2283ee70911da96465c13304e844f04ea24f58bce39e04c9af4bcc38e07cf2b808d2658c1f782f11d47be2b583147d8c994d7a3e81c62531c90ea605843596ddd3b69955ccef942b22cd4fb100f3d25abf601be3881878928973d96230ab6a36f9dcefe0c46068ee03e16509455ea0c94bead5c1c32d6b20ab0472de35cacf5c06204266ade71ab778954449029f0fae97ceabfcc97c311eb058de898b2b00fa4cce97a87da3574b77f157fad1d95a5bcb2dc19749f83f7e2df6659bece8e5b2f317821d5bfd23408ecc6cd8d403d91abb9760c834dce02acf68320efead6b922fd008eb3f51121b00c3ec5c1c3404d9d62d3dbba513acd735f62d597a1ed48eba1567a9dc19b46414672903fe6a6576e254b0365b96ebf7432b9677c81893aea8beb3408e0f71b14b001f2023146268f67491438b0db8b148786eb63f9e882abe58e02a4211642e06e0a841d69ff37e6ea7d2bdbda3849979bd014a568909c7b372f8c2e405b54bb89f4b16f1a05786785d267e04b4f582448efd2e7771f1f593da36f3fc17f2d90ea11409b5fa05b6692e51315ee5e5fe760d86a8a9ed7e40a08f9911fd94dbc075d2f621c39bec07bb5e489ad14ae5b6081828eb3643b0af68655f75febd79ac1e5c955bd2e72bff90a80e02afaee7178fa1ae06babc2c68903fdd908c8b38af59696d29cbea51012260c81b473189c6569d36283889d56e07cc0ceb7bfb90119c5211bad316f229ec7a0963678b5833291909576984b80776cf859a63b5df9decb6ec50b9e21cb6ebcd182823aa13f34191e8e0766de4858008058540ea4512e912c7c461c5b81073413be564afc1be77ae97f9c872cf25f25d1873cb6717ea5aacb1e99f46d7bc070c2fdc50e8cf549784c83b93e4686058ddd935f623d6d9fe27448042e50e8b431e08b8ca2159bbe7a4a6984f4cd7e97d02742e20e31118cbb5be87ac8c482da0bc63112a663765344f3526dd3dc2e5e49b3f1d0b4a28f9a76d117e39e70cfc9a3e37129369de24b0912adb26a233221fd31eabe9ba565fbcd3fab0a5ca5ac4274c3ca70ccd99f90837e2e854dce49dcfca0945be9e7d01b7ae9807f192e5909bc95356e3ab79be17f1fdfe93b8d9f5317e8755509acbd6ff95f1dd6b32af73aed787ca7743d09f061ec5dafe25743c96e4a8478945c524b72dedf5248b47baa2bdc3aa98edc18b09167c31d336446235daeb180f1903d62590b286643de9b17aa283740ab75e5b15e12489f222f5706aca4cadebd29a0a64a6a4fb5ff65d5ee4fa215433aee52f526ced742ecb1fbcd423385ada2e4f50ac9ff67d3832bb46814fc031d1b57c8ac5dcf01500a6440b90997f5726dfb1fff48f6636d724b44b330b1943c1f0cc6d78a49b98f02beca0d6c132333a8632ecc5c49ae0d52c68ac5071046d91dfb8cc5d437ca49e140b0b43c05e2a4be88e1fcbfe69b68440e49ffc1854da80a4547519e089de5ba2424df5fb3f52045d57981abd5dd0e5bfa86aad4f7126f447a25b88adacac89979b3fa37c781445bff329f8634891c54f36a6ad5f0fff89030c2bc1fd56268ef9e95f76bfa94fa6290f5ddd1ac14f58d56020dc3f4e52a3575c3cef2ef81c1b1c456081004ce729da554b11f241ee6c1ed9e13d82e27057ffc5ebac4d971b69348bdd66ea7f724e88b1de421a214f39d6eb930e1018ad0a9becb70f3489cef00758ad93a9b39b98e99fd73787b68f6bd8524b07b075d03fe6344974ccbafa2b3f951d290c410f6798daca94bd24de8dfeb72fbedf8a0c5484421a916c6cea2dad05d5aec49f3540a2e874821bcb1920e631abb7b6e18890734db26f012536e44726d92b3b256024b99e0be23b6ec3b558aedc8c3d0dc2bbe27208294588747328e1c83dbbeb6ae15a976f2f835e4266e45bc27bd02384d1efa8fb61eb5bad6ea9ecf660a6a4ce8df614b3da5a0547c9748a8518da068cfb1fe7175fcb1954f822da91af63849eed7f3e4bd2e10c535eba8fe44808dac43b0a795b69d7dd4003e05b60d5e5ca7bc62d148d099a42bba6b0ff3e9b2a8518600003cae4be5c04858e39117df92817b60e620257b1caedfcd9b8d350271dce52f744b5c85c01b8b25158cd05546e51b2c9f0a8e029b80ae0788e7a074a6084be5cb82d27723153999dbb8b52f73a542a93e4eeaa87e9952cd8f397257f0660eacd3dbe517220dbcf64e1c235370e086842633231c547fc6ba88259e4347ef760e12706b07dc45eff91f9859dce604858fecf37ccc4265da0ebc5323942198d3a9a16f4a2ac27fc5661efaf92d9fa6f6d500f74f9cba1dffe5339d91ec5813562e26b2ea4642850fa0bc28070582c1ada42a7f1c4bd9c0f14a09d77d1108a88d68fcac6f97f8d85eaf9fa3360b02d10843e3471bea269a28f3a96f8cfd5d5537ec248d68a5fc0c1a5900075ee347a3b316f6de0e5a5fda4e9e5af1550bc4bcb6f024b51315fddd5fa424a39e3ad1e47a8a83256b81a3a7dc78c42964ff7d4c64188b5ace67745114f6c45f56486bcaf1d702afa3758b16b2a8520b9ab6b9434f0175ae4232446d99c85869730d90a9f4a8aa4653608018cb421bfe982ab174dfe9c8be7fefcbf633bf0b5ab663543e6803babbbc3e55c425da6c1b85527cac4ccab1950a439ae440aa6b173f6c8776a20231ea9007dc548e2881da76674528ae2bb126e861ef28617152c65144425a5eef0fe5d5a0327eda9a8d84ebd8e2ae7fd5c4ad1375d221f27f678cb23cc7b6bd37dfeea4a57b1f47a46bc760384350f003d39966d0a5fd84c7c3107af64a46349838613308fa78a463015194ff4b1654b2886cdbc0f0af5d7c4774e78e55b293aad5e2e423da33c808a268242be71594211f39c3e855a4e6e12fd187c1a639ae36605bf373932ebc23e9ae12fe9af1cbf214b0fa8936d46e963969ea2c3734a436229a2a5ee1243a35568d6be5ea75d969f307cb137b0b3ee0ceeb54de0fcda17ef357c01b707afdbca7accf5c6ca02334858d33e0538f5e0093214af9f8bf568b199b3d88ddecb2cfe4dd6e30d3962275dd1602b314984bdc45a42ee747cbadd55ed5433ce1b6e3ea97f1099833b86971607aedb2e52277fa32e761d2dc673e6cc9417955daac30aed28a21d4d49a605fa62a1867244086659e64f400df3a26f0fa223620eda4e2b86555fdd30aa0745b4b22a7768d0a18608b085717c1f9bb7f31a4b7b580e1fa6754c586f036e21b8f574479ddfc39e268acd87326fdef5877693b24ea837e988f50bbcfe416de25d3c4c901ef7fae87bd2a489259a24d08c1d0220a5a638572c9878f75aee9ee25c9ec35af283b41c85fd8f4c83cc964ff5c8f5f886fbb5884020933ebd12b74e52cd8c2bf346d8471c21bfdf53b275d7725e42903bef60537b10b2dd8033c48c1cb395bce81f576b50a3957ebfedac83ecdbc317682ccdfda66dbddcfe05b27b57593dec50f321475ee444d545ed69cbc242c1db842770bfde416b839de7e2932ef01d385143a1b579bc512f7a94a779d91493731f4bcb369073f15cc3a298e65d717e38425494f16357eb699402e6890844021c2daf468a4a5e477e039c640ce7f2d451a8ad7736161f307024da7f41afa7efceaf5fc43dd4e2f0c11b776eef22b11cf0bcae807455ca0cbb2192b4b775e35f8d1fc682411880fbf48dd70f600902eace3fb09c102ba3e6e1dca607c98fbabd0598a5b04496bc7fd20af515e861f965248dd13a139b3d490f4920ad9aa4687cc3552622aa85b702dfb8f2df24f8bd5dfb33a92659b711bf65a0f38e17ee36563baafa630ab0b98a43d", 0x1000}], 0x5, &(0x7f0000004940)={0xd0, 0x0, 0x80, "a9522fbcdfadfca5a9cd54fa358930d01c9a13aac0fef9d042b25ffd0bd1d50b910560b1329dd5b44c8b3f5b6201eceb3b783342cb3f6ded7ba84beb468d078fafac6dfc1406d663c4ad5a1f65dc2c39ad26884ecdf897d9f1fe2ed4a8fd6c62d78d4649bca104ad97c1a69bf437072233ec15dbd7e70753c12496630f3683a87cb3240df1f19cdeed4e47f0f96fcbc0abb19d9ebcba9fa6c380dd6e5e0680849c9166d709d72b763235e56163dc04285680c45e54ad7b0cf04024ad55c33d6d"}, 0xd0}, {&(0x7f0000004a40)={0x27, 0x1, 0x2, 0x7, 0x6, 0x8001, "9edd35b420aee03917bf052f220090a443fd5eaa6a19158bf5f16e8f84ff61e0073a7410c0915cf7004a110dc9dc3d01e75392287e6b8c8867bafbf2ec198f", 0x3e}, 0x60, &(0x7f0000006b40)=[{&(0x7f0000004ac0)="f411098617bedd64ee7a5ea0eea859c151d8b6f7249364321c937e3ba9ac", 0x1e}, {&(0x7f0000004b00)="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", 0x1000}, {&(0x7f0000005b00)="e5a6f3480bb4fb04198d62480f093f5e053025185258c5979e7035c03058a4fe0c60aabd68079344228ec96763", 0x2d}, {&(0x7f0000005b40)="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", 0x1000}], 0x4}, {&(0x7f0000006b80)={0x27, 0x0, 0x2, 0x7, 0x6, 0x5, "117028b62062dd8bd7c8069d8952c67d2ad9876d7f196ee01c5742d07ebee4fd97ce9ee761509c7173dfcd6b8a5ae2eec0d3453b5b3d065dd54775a2c02182", 0x5}, 0x60, &(0x7f0000007000)=[{&(0x7f0000006c00)="b9977a1c84b579dae754152817560963c60379043654c7f9213586b089512248f5a4dcae35157eb1edcabff3c0f0356f96e1c76d4e8bbb31ce55b7dbaecb8eb556db0acc184c5754ecf029353d561883889a3ea81c3b26c43ca629eb53a26f47ae1629b42eeb9ee260217ffb1284249da6d88a2d9d40db4efb24a0f90e20705ba93c0e2b6e417d36db37ae32", 0x8c}, {&(0x7f0000006cc0)="7fc4708634a734a7119dbbd5ffa07bb8500205566f286ffacaa2169693834a13d1248db28a99d24cb8d6", 0x2a}, {&(0x7f0000006d00)="4ea246bc246ced8b671ee44b6fbcf7b02888559125a844010316657c1bbe57057a11a1bff1267d01211e003cd0ed81a93d3d7dedd47318bef162576dabc070c2daff416626a53c2fce7b15d5e1cc560b8ab8b2f8c4c6e9aa626f33ea9f5ef94517baaf6441fafb443d01cd3661d873b243d9f3664c428129890ff0c72d950342446ac2180a10b293f4510b6036f4f4a6d1199049c48287bbba54ec5d683e91c27e476967317ef9da8f910f12965a325404e93bae8f2e8fcf388f92e416c5b9", 0xbf}, {&(0x7f0000006dc0)="b7", 0x1}, {&(0x7f0000006e00)="964c52051c858d6cf325066ea5b8f87455", 0x11}, {&(0x7f0000006e40)="44ef5b84fec4d69cc29a9903a729445edab219159ac3c46fd7de4123336d8808c0a0ac", 0x23}, {&(0x7f0000006e80)="d2e29cc6b96499134881fac038973ba849a988981b505a6b40e650915279bbfad4c68ba2c6c9fe57bf902de86430ad083e7e69b7756a1cb2f97bbc8181941037b17e0e490c58f01c6cf195ba7443d1c14b0529608ac708e13ea92522b9d8", 0x5e}, {&(0x7f0000006f00)="2ff23c7fc1ab1a90849c8ff047ebc1f967c93881b296d31d455d513e14bcbfb234f8a6", 0x23}, {&(0x7f0000006f40)="a42990d8bf224e95136ad3b6ed68487e9fa8c875e0572736b4738e84407b9fb59c3665d57e1a02d73f0965384f92a6ea959e72caf78272dec5e5d70cb890b9048d3a5ef785d26b7d6da41195038f78b8c2a7b8802c2d19726b11489ec27bbd495384862aac7d2e1007a7dc53b0c7c6f8d8ef1c2bb2df9d82ce543c5e006b98c232e3927b1c9e3274ce97874132041cc2cbe9beb0ee5a85edd6d7", 0x9a}], 0x9, &(0x7f00000070c0)={0xd8, 0x104, 0x3, "ea235ebdc0ba3930affd3ad56cf47d1c2f16618f99d8bfa5f9536957f0226db4ffd22baaf08edbd9c715a1cc576bc141f9a3205346908a9834c47802d1842c4d2b358c409d23e0df27a26507163c4038c99d9206ad68dcb8bfceb2925355c544c25f725d14f8909fb5a1e3501892fe04f07e13b1ec81159426b04348bf06ce6eb21026a34b8a545adb4b06576895fb2cbf287c710b29a9c33294aa619afae06cc63cbf74acfc47b07f6bd392f8f487a178ae5b7b6e34d2a69846d4e27adab2c932bf216b7dcb"}, 0xd8, 0x4000}, {&(0x7f00000071c0)={0x27, 0x1, 0x2, 0x0, 0x6, 0x40, "e0eb9691546f81fee073c00aebd6c107b2ae4cfbf606d445dc7f0a03f3760b7a43ca3cfeb273e18a9fc66cea2e13b941bf7f10cd7298d3d8141dc27b0ac97a", 0x8}, 0x60, &(0x7f00000072c0)=[{&(0x7f0000007240)="2490f5bdbf72d7934f61be768ece06666bb4433cb9dcb78eefd93321ccdfc85c3cc4139ebc8706fc97f8a66bc9682f066efcd065b102c3b4b5a65b2276441cae064f400044e0066d4ca90eadffae3b4034fef099abf25783adcc1bbd873b0a51a0447793d4c9fe146eba47975a0db172f81a98bbaf6f6832049173", 0x7b}], 0x1, &(0x7f0000007300)={0x70, 0x10b, 0x57a8, "303f56920578bc88cc47c3c6436fe541eac00ee1c4748a435093215af5d6de0c4f88b8321ee90e3e72c623b43e778c629e5fad8b5edbacd40a191c976a34146aeda4274a58fdbc5cd7f993766943651947b1dc74aec87bfe5cac381d66e1"}, 0x70, 0x40c0}, {&(0x7f0000007380)={0x27, 0x1, 0x0, 0x7, 0x4, 0x2c1, "93ef34416f1a9193c292519aef251ca39dc2a7b38ea5e61e014a5e09392703af37fc7a48c135c8a7a4a59ed523838a2be7c7409c9c735a9fae8bce343f1cbb", 0x3}, 0x60, &(0x7f0000007480)=[{&(0x7f0000007400)="a70176f893b9", 0x6}, {&(0x7f0000007440)="e70d4600df358a0c8e7eee6fac20156622f44ee1e9fd6124eeb231e3364db51dd00fbd5141ad469b96fafc029d31626574c4fee6e13ae21e0b", 0x39}], 0x2, &(0x7f00000074c0)={0x98, 0x113, 0xffffffffffffffff, "7a59b102a348fd406133662ad4be8a867e096a31ef9f2549a13526d0f457ecf8d58c41d155dc0b16305b1a6d0ffadd51f143fe50a8eff1d87838c0e0f8b05729a22ec78f6b5a88e4ad640075f50493d563ae1a7cd9229b3c807138f7a21da3cbb0e48f645c10461f78ba7825f15e2d914401ceaa986ab03cf31d678c8ac86696766f2f"}, 0x98, 0x80}, {&(0x7f0000007580)={0x27, 0x0, 0x1, 0x2, 0x8000, 0x7fffffff, "41e5d038f66e70e0354959d011780e84038120f6079b00f35532715b45b2b270718c28c14167cdbffee74953928c2c332711fe1a9bb9ab522c6793ea829695", 0x31}, 0x60, &(0x7f00000077c0)=[{&(0x7f0000007600)="caf5a2e53afd467e37d0b11ed3ace6907522520aab2668b82ffadebc159398ac5c7b24bfd045d76d4612af1b7afe85e170fc7f98a225e05f08584e33a821833c9822b114caffd6a6583f74619b70ff157399d9be8bc217ec5ed61a62f8cfc1bc25e26cf3c2e9ea613167f0fdecb8a814eea113d6753d31189a289e1ed1e68201f9509fbbfeac", 0x86}, {&(0x7f00000076c0)="445b89655e9f6f4a5ceaee1cfb622102ae16553bcf43003990e294d31b683cfdf6eae5d8e698a0cc3c92f972727d071d6517d91a701d2a84ac3d6c2911e81ec24711c764d5e51a0344c457f97ca56842c6739bb28aca2e518d45588dfee2745923ff320fdf42b12cc9380e4d02c989a67ce847c7c23f5f492850eb1e166a5ed5d5acdc2c17196b96bb0a115d334d28344fcd19d790f7fbb2961d23c9023fdf66f1160824bdf5c823b9eaf9132f7d65edd46906fdfd64fbe7065eaeb07cd873967cd8670c84ea", 0xc6}], 0x2}, {&(0x7f0000007800)={0x27, 0x1, 0x2, 0x2, 0x0, 0x80000000, "a03b1df66631e8a2929b5728c077329b6cab7e0864dc56623c5ec4eec63e6ff9cedde08c548807dd75b7a4d26e9a4d9b4d2eec6da35112da264f151cc7f457", 0x1b}, 0x60, &(0x7f0000008a40)=[{&(0x7f0000007880)="a44ee64ddc9d34a2a04014ef4ca0a35ae5891211123ace505d21fc8d6df865e2c0cc3f89c643489589c526a3140f197fb990023e159295e804b488ac95f7417b195913f4b0b8dd157238a23ce0133f6283298c5ddc7bd9c1119132244c1a9fbba6e5d39a87f9a1df14da22d642d22cb570c4217391ea51e50778687bb4af51f31ad8498b8bb4c70a033d8b9f5cb08dffd283a2b7a8b7274f99493146111184004e50d2ec4c719abf791357ab5de66809beecd61f2e0d20038688008ce408c98afa0be6820c167d66655f0b62cdd378fa52ad1655ada2e82e1a054ea4e9c3e4afb1", 0xe1}, {&(0x7f0000007980)="e67202d691abe3", 0x7}, {&(0x7f00000079c0)="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", 0x1000}, {&(0x7f00000089c0)="80a677cd89e4e07cbab06a08bee823e47193d64e57fdcbd8b732e4159d2045946caf59d8d21e5e6367945f672ecff53490aadb2f79fb2cecbc7a98bab0f01d67fd4816a2", 0x44}], 0x4, &(0x7f0000008a80)={0x80, 0x0, 0x38f, "5ddacf638f9e165647441424ae32fd7c91fdb17b06cc3fec9b7c0d518fa8e56721e7a3188df1ae2cee33b27e0d7e867c8e4590a45525afb62de36b8f100961a0b9befa5740072cd40220708a6a94d84a0166646545ea149de768f3ba040f86fe4f1b5df408d8990c416c966bd514"}, 0x80, 0x80}, {&(0x7f0000008b00)={0x27, 0x0, 0x2, 0x6, 0x3, 0x80, "972d37d4789ceab894adefadce276c8625316e20f09c5e8a718ec6953f17f442a6413dfe2ea43fea106971d094b1b8d3fe0ae2453c24da4bb6042666e82b09", 0x1}, 0x60, &(0x7f0000009cc0)=[{&(0x7f0000008b80)="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", 0x1000}, {&(0x7f0000009b80)="01ad101158fd3564da929bffd92a4ff433701bf67661108b92d41f40d5d4f88d0dbac362c397a1fb52531a746d8b5ffa810412c74f1b1b7583bea9f4e9063c881d61ec3e9ee0a13d76a3dea01f1a1cc8ae85ef27a208fdfa8ddff4ac7e0c5b798821c41bc37e8f1f14149a7d43d6a5bd64d7267d0806df58c0fe4d3f42ba2ee0f53b5c9d44fb758bf725340f239c9e4aa296421057a2f7e22ff1aaf467bc9a25077592339fc730fb503bc7b887629838e8e662a1be0145a7c058bd16ceee058858d2015e4e5cce18db796a6c1ee3b00255b8b7cc3598ad88849b8af7276035135d7731a1aab75e19881c79e8eb25febe", 0xf0}, {&(0x7f0000009c80)="eb", 0x1}], 0x3, &(0x7f0000009d00)={0x40, 0x1ff, 0xc936, "0ab3af5d91fb3fe550f753fd628f9c0c1d63e103a1760d408a7281bd5ac1ba17ebfb1016ed80bd2b89306bc8cf1bdc28"}, 0x40, 0x1}], 0x9, 0x4000050) sendmmsg(r0, &(0x7f0000003e80), 0x0, 0x0) 2033/05/18 03:35:34 executing program 0: r0 = socket(0x18, 0x800, 0x7fff) accept4$vsock_stream(r0, &(0x7f0000001500)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10, 0x80800) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000001580)) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000001540)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xffbffffffffffffe, 0x0, 0x4}, &(0x7f00000050c0)=0x18) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000015c0)=ANY=[@ANYRES32=r3, @ANYBLOB="47000000181cb4cdba17f747dadda3aad884112bcdb8283afcc8ff42690a0f16fb07547a93a4f4cb52ec7ad000cbad853e656a3298585120453d4cd160c1e979339f00a40c90fae86bcb5033319d96a99ee4ed7a6d8253977cfa1ac5f5b48b6385f668a9834959d809e264a5767046cda9"], &(0x7f0000005180)=0x4f) ioctl$sock_netdev_private(r1, 0x89fb, &(0x7f00000000c0)="5ac5fe7003a5fef3b9ef51e2457348a34f906e5a539766c2808a73aa7eea986af03f78aff2a1cf469ca445046ca3c5bd24148b0903fe588fd8c0e32129f897f4c91bd57dbe9ace0fee56aac7c4cd1c162831a6e41e9e47c2df8fd1b2bf70fe52e76c25fb483e4147d39913c5274ebfaa08428b4f301374b8e292d0714f8e988948454780aac26c2c297816050cb105e5ff74053a099fea1e") sendmsg$nl_generic(r1, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000000)={0x1d, 0x80000028, 0xaff, 0x0, 0x0, {0x1}, [@typed={0xc, 0x0, @u64}]}, 0x20}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000001640), &(0x7f0000001680)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000180)={0x1000, 0x100000004, 0x8200, 0x200000000000004, 0x5, 0xfff, 0x9, 0x7, r3}, 0x20) sendmsg$netrom(r2, &(0x7f00000014c0)={&(0x7f0000000200)=@full={{0x3, {"00596d52ab4caf"}, 0x80}, [{"9588f9d9dbe2fb"}, {"67fbeccddbb924"}, {"9548526ef03f9b"}, {"542691e9b2af87"}, {"1a8757a6c3dbea"}, {"4f28e5f3c83d67"}, {"9a1bf97992ab78"}, {"a7ddef68da24f9"}]}, 0x48, &(0x7f0000001380)=[{&(0x7f0000000280)="6e44b6269b52be29c37e46fc20e8f4e03355e8d145a74ac11db07a9718459fb34385da0b29aaf0c65529b6cd0186fad0711e749cb4f4a9db708720477d789233bad111e32423d59af4d1b5b2af4570e136f4514f90be2ffb9dd06cc858e01943c7e1c3b6b44387dce063ba48673c8e88fcded5d348a755e7dc2a7e9c64efbba50ea2d255c13d62b12cea86495982aeb03961404fbf5bf9b8e918f9318134a51be8143d2f63998ffbe6d80238e41be4c2d5ac5acc7b4d7bb7823dd38dcd738405ced3d5cb399ccc75d359460c077cc8c325f01bcee4242a359206c1379721e166c6150d1a3875ca95c675ce0d034276fecd3a4e133718b54219ded4dcefb7e8b3578e5fba0aa96d4037b5664a279e7593475e95986c0f9b617854eca14fb84fb760bec9934f3040b4b15d28298aba15e64fe8cadf78cd6fadea6ab4c0d0ffdf8aa9310195c5ac8b9ea58b5c9d061846a122117bd8a7f13fecc3267799d14e8d32c0c6c6030e01bc82e20af668109722611760f488dd020232e423ef09787bb0476b8fae4623d73fde302271fe46275be8ce86b9d861724248b0a1efc052f96dcdc35478265fe3ae41c8b3d42f4502ba151059a9b3b62a9f230223333fa1bc26ba5755b6a560d36bc04dadc83c7eebc61218bea3660601239fc69b6bb19e03e86feb7c689ceafa6369aab25d28238acff9dbf6353da02544a790aadf564ed143d06c1fe69bc3425c8dab7413f5bdd4407e3c51673a9d054926869fb0521702579a5e03e02be0bf7d8ba114f0b369a4dfe0a0136d50858b885b3b0904ec0475f75f009f11b0d2400bd78c6ea54edcca79713622989e326d8a7b067faf5615a6a6b5e6d838162b651b036b0a239881c52ec088a9970bab59c2da325ca10faeb04a65e6f16c1e32cec9575b9bf0f190734b2265df2b623acdb2af665169ef77d95a16b9e06addfb370d371966549f06c3dba4c114a409e48fde4b12357b2d0f5f4682f6d40f5df63e077f87bc6c9b7c304422992d29fe4cb5bb47eacb492d2b3a90d4b5eb1464a368b2508a4de5c5344db321d02bcb28f7e3b24d81a3e3de5cc8a5b80d182598d72f202a7f92e2c3723293197cc6eb61e93efadfcb7f01e06841da0e51121ca1d7697a1c80cdabb8cfe0c67c8a79d1c5500bf41092624b87d54a0ba5f5ae2da6c54f214ed00a16072f7b73c4994eb348c9878224b6604a9506c57ed10095dca2489faec1306dc9d7f48b39ed147c70a426c6c7945757ab7251d07c8f7e513de63cec0d74385a862bc9c3979a4eb1d1e4eba27cb4c10f5bc1f06ffef5536775f10ec66b573bc3ef7008be7a7c2735b812cf3b23d05e91ff25ed93f59b6a8818b20aa111c155089d8cc531c15de2eb5ced60f870eba277c6e5172d78afb147734cd58c94eb695cca905487225f5b6ec375d7e6b163f17a0e38bea21a777549512b0ba5247b0056d229e117ddb611b6cbdcc37753234eb3d1847f98edeb6f336b4c3454fe478c93bb80cc2f53f2cdf57822a2fb0941b8ec7e49bcb74fb1f9f315bcbfb3749ec2ef8b6e11a543e69b2beccdcb0af6b1f8af6164d8724cdfe37fea768a25152e98c955086a4743ba2268d079a892c63461e1c0e1da4c2597f1f5a75163a45169a8470b141730b11da3eca1c272c447497d3c478aa0c02297395f62a424f67a0823675e378b6ae13417ec05a85e994172d6eb190416ae7361545f4ce478ea3e8eda812a81eb1c547d450194c40bcd7c431df7174b3c0f97a84f4e0a8fbb2950cb8693685658624fdd8fddaaae19883cfb3cd34c4169ae9ddb3fc64cbeace41dcac9461915fb9946dc8c195236bbe9f137b07c83e2882899d48a2014c21acaf6dbdfbb4f4eb4c4bb86189832b801ef9be913d5c0e7ba5d0309dde15a1b8b544b938f9db1b3966fd820ddc51b0c9f7201f642a6cde837b75d51fec1c4c4fdec357543db73d3976c8cc9a6cfe1d3b58504e0ad9aaabe4a455694cd3e09a7e322ae47010d9a8fc1a0c9b010c3baf85c58b4e3ccf3cfe15f22d5a7ccd192671193131853944376061484bbe6eca82b2ca71b30696efd65fc0a3be1c9f48f4e480c5a72df9fc30e8f4f9c88ddc50472aa3f7e96e686f47b5268acd2ce82e8d0b01941b49ea423e10fd3a9e6592133f53237de11dae25459c65758a24405ceb87585df77be2c435400e42bc410f8d81bfad0b57c5cc86c06a9f035b064a4cc5dd7ccaa473f4e0848144a867cc0e60d74ba8ab69952a6a0667b2c746dce8ce5084496db0445de66156fddbc5f77a15731023cb83d0e9dd57055b1e74e692ef127b2c4ed014c14cfafff156d6e08ca9d883b510f84291560f26c8557fbfc121b1527b4cc9174691a77ed9e3824894561aca3ed646733805656471052c2a3267f7aacd1f777d25762e186a30871d2b99e5e7208440cc8b4f81ce952f4683bd063335041d5b3fabe7668ac40c45d4a9a6d37e10f40bc539f809d5ab5e78d7d85176816fba927def29b0bac03864fbf70455a95f862bff0e62fc4a2316be345bbc557ecac3f01793919e0c3a88b6f8f4aad2c52b6f7b563d8305902744580245cdc5006395f8ffd87495723fd6e7bb2f868d82a5410c83e569a4558acf2d6cbca76c89e0a563d2dbafdf9c9ca0a044a783afe90809118d8911fd0c40cb9fc25c35f03152007818327b2d0099c8d7368bc65ac10a4fb9d7ed0f758d799e9f88f1c8cb752322cef3f786315b7280c70932fca1d05c39ee0663551d5d4f1a71606e361ec01ee81f304e433edc61f302f88bf321fedadc73a1da03f9998e3f40733977d9c4ba77e88e83b889089751b9a381ca419b85522834ea57cc0ad03d4929c5342515a905642c9ee2f413e2465f851387d74c1cbdf751aadd3fa2d82aa522051d857eda810b653345c35d827ed51cfeee7f2fe08dca86f779e16eafe8955641e99f639ac28d65526e6c0a99efc234628cf879085cf4516f1029bc0cfcf3dfe9bc819f26c09ae6d6238a91902924cf7fec0a8007c1c311f8113c350216d4f091931b08470f850441be520b4efd1caf4fedf5ad4cb9c644aef2e5bc13f4cf11835193d78bbeb3bec87190ba25e15a9df9c90464209cc7f96e0dedf412b95dafc78370fb4e1c8e3becd4ac0b390501eb75d156329b92b8f91d954899fad6e9a5e79e6e5e4daaf134eed503fae0652fcd1d01fb9ed5a2ba79d482ef515e07018ac5332cbce85e697ec691c6a5ee6275ed7fdffe53ebef78ac22045765291e6091ed0b22a45b842b2cd7c8f599e35f47d0cbfb04a5f32b5d86b4b514587cc8f292133213734d4bcd667e5df4a56af5cd3efd1557a057a697c76d5c44075902c79a85e90e58239acae38b1fcaf9f461e8ead43f65d11552bfa949c26dada84e5d708bd55ac54407d966a3961d76cdc91fd9ab64583667b255b287574e894fa70f526d14ee593335a9aeb944751582fbbffe9810d449188842a9186cc72b79434e17455652e519846f93a93d9a7aa4c2fe0533777c89046faa075de9d0ecc6c8c76e217612b84303bafb643aa5e252c21d656c325f789df782de4454527d897ffe1195d8872eb1a4a6b1f015de51d215103477771388f6c654dcc3d3ff05b05fc2d4239ea01d3bfb2fb6ff50e0b9583c06fc851f09fd70df260530d15283d923c2715895bfbf1ddba9e13f3dcdabaa367c746c54cd98d56570a7be4a68d4e2b41f9273123b00b5cbc336ba5170265da887db126d251b062afc65c0bac2a314a993fe0859ae406220b7e2ef1d1fe01c8d5b5c5efb054b431e8ec0d084f4cd6f531f51b33ac7f308f527a810e351e87901db61df658df6a6279718bee300720286db99bb29affb19a37f18cca2fe67449e02cdf34fe65aa6ec9657b4d572ac9179b39fa84e7fb3888963fbb5bfe52fe9d368174c17135f62094869fe49f6b9e721e390c70009eb3751a64b5fd51e785ee41de7da9a4ca7bb899e04bfee09f11b3fc4d7c7e86251a5750231a17fdf280ab24b38b589d13baff4e43d5c47eadb9041d1ee8af36d47a8721414da34cc32e8f8f0ef7344249561d8557e741e8f1bb2abb131b78911b5e73ed4473974e0473758a18f72716616f02e67e53b01b69934be4a64e6450180af3157c43eb654a5f25c8a5fe91d0fa16bcfa76ca803659cb91f1f7e8e726e428700850d2ed53a6fb32c921c771aeb2f9990cc850464faaaeb409c614addbdb191611b123889dcf4e3fb71bfd9110ac54dd94cc8db2a40a6b5a21e8e935e053a52805349edd25c3065a1535ef40074d775de4bfb43044924c6e925d52c2a6046951ba7f1ae636f89b597208ba19b59126379facea8270087cbacfb534e3d8f662c1b1d37325a68aec41944f84f346166b14f7c501b725ca5e0d2206caec832144f6ae04867f22a4dadada74e20da6c0b3f2b4058793cb255b2d70a96b80a62e63a088a558452606130c2e028b8db12087c3c1ba81b388aa0a70a3cd51e128ea2021fe557462bcb1ec54baadf83e042725fc5468895813a3dd9c4ddd2f5a8cc1d8d05a0d6aa65af1fd325837bc35c1b43a7f7b8435787ba1d23c2bf153ea21b90eb5cc776d6748b4853632bbece7fe8c3dc8dd6dbdd0b2ce1ae87e98a1987516ce605bc3bd5fb1a5d24010e7d79a8995848e14133cee29fbb9375030699cbf38ddc9d866cdea4ecb236a25af53aaa21167e2c2466d4aee562108130dba5519672c5e292c761a68e4515de6afea324882642c272d21cb4f6fa2877a8ed36bef7f9f0254b221ff092467958e96c83c227941d97c4de926ebc116f814e6e5e2ab5a35ce576a03d87a51149d0cee520f4a21e6fd80d4a339e538b91059aa8111b3cc77d7e6dbd17fa508552f242e25eef5e3e96f64d319f30f75b50a73a35c2e127eae463ea10bd61c42326daa451171a4e2df5d28424f5398151cb84674b04e501f2728c3ef1c847def165c552319694b90bbf534202889d1dc006add801f3cff097f52452058231b12f4e28d7d2a71928bd3c9d62643f4b97d36c438f8cefe7eb2068ddfe6008f95242d835917a2174eb8d2e99229ac1d95fc802d303a5d2f85bb277893e6ce0b1a3d95d923109fca016e44c12ab7df1b25d33f7346d0e5cb86eeaa6a60c60a468e55cab7bd69cedbb966dc84c108e265915692faf2e1596f408bcafc5896341f1e861a8800ce009a74d291d47b42ec73e0f70be45340d12a06ade398d0f4f94ac3d1794e5fde9dc8281fe06f9de893f74a04167735ef1ba81039da9873eb533c97ea50907e55b003efc671634bc534d6fb7870a31616c5b89f0783670281877659ac224abbd201616ed8e3e8e345a2a42e875fba29a70442546cb2b94ba882e43abe31bb17d6bf23642406d3bbce796bc6f8af41bfbdd7b7326a5c2ed741cd9ee6b6af8ffbf52e8fb2b9328111145f7b3167615974ac02c4d15d6e9e610091f5d21a33b2e81d215cbbc38304e550b681da34251472c4a814e1d0cea084e81690c0f8144f5a1d6a6f600b7cbf7d9db53441478d1be826068d139630b5ea8ff33131b4c0b8aa468cfb80a76d8d42c6e12276408f2e96bb231a01a030bb00f15d54573254f1933d731aad6ad90ac5f1bf49b96658f3dc33498d47c8213521bee79d1bb299a50efe2b3d22511256e55d123efdade2647764385c5d2494c8cd4e9eaf270f157c9269260fda8505033ca5ba6cae13bc7cf43ce3b52de6afcac4b4c548ad84b783e84f96fa263edb168d659b9259efc9a55e7404d1a2136a4475c7a596adf9665a86d12e7b9a11c78570269466b4026ff604ab", 0x1000}, {&(0x7f0000001280)="afdae1f5702e98dc6b47c4b67c8e164e558d52a2bf898962d2d3851132085921653b16c9253d73d193ce17b3919c353ba0b599a5c6c8ddcf0ef7bc4c48291ce82167985ca67d2c4a596fcae6338a3e5546e580c2de97ad882db1e2f1f3077512b6a820017311d2fc5f0c19b33e3586258846615b72e00c822897a59ac27908", 0x7f}, {&(0x7f0000001300)="58d53ad1d0384d9f", 0x8}, {&(0x7f0000001340)="155daa0e02f3244ce33d042479f4aeac8c86676d6bc9ed4e6bed1a7d30", 0x1d}], 0x4, &(0x7f00000013c0)=[{0xd0, 0x0, 0xaaa, "c27ea733f369bd63942cbcbe1ed5f736ef7e3d27611b5a92040cd40e554db257ac0f4cc3fcec7304f7a63300d64f02e1a2327caa8048fa0f77f4981376b60aaa9da10e1d9d7d704b8ace831d79ca06f79dee12d64c2ac8060db25793c3c53b13d2c664ca02ee5d81d06aba07479e4b426dc421048e9ce7f22cbe466b0fd1979fa93aca4310d770685368a5fde371e79466c386be87b74276b8cfa153e9aa7005f95db1bac93f93354f10b2b584e2c2708d7fa36163ca0e146430"}, {0x30, 0x108, 0xffff, "8b77e74a68f557e6e6448870cd7b3de600b82de86904851852d786047a952ca0"}], 0x100, 0x40}, 0x48010) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000001c0)={r3, 0x6}, 0x8) 2033/05/18 03:35:34 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x0, 0x0) dup2(r0, r1) 2033/05/18 03:35:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="e2e1446751153e7d0600"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:34 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) dup2(r0, 0xffffffffffffffff) [ 196.696210] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 196.704361] FAT-fs (loop5): Filesystem has been set read-only 2033/05/18 03:35:34 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000e23000), &(0x7f0000000000), &(0x7f000057d000), &(0x7f0000a06000)) r0 = semget(0x3, 0x4, 0x80) semctl$IPC_INFO(r0, 0x0, 0x3, &(0x7f0000000040)=""/14) [ 196.779361] binder: 12132:12136 unknown command 1732567522 [ 196.796600] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 196.821396] binder: 12132:12136 ioctl c0306201 2000dfd0 returned -22 2033/05/18 03:35:35 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:35:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioperm(0x4, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:35 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x0, 0x0) dup2(r0, r1) 2033/05/18 03:35:35 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/%ile0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40000, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000000080)={@dev, 0x0}, &(0x7f00000000c0)=0x14) bind$packet(r1, &(0x7f0000000200)={0x11, 0x6, r2, 0x1, 0x7f, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="046304390000000037230d8763636522121beeedec630a3301dc4ec679edffde9b66294be3c23b32c5b2d04474a3813e8f2de600000000000000003442f8bf7aaa9801dd93feabf76a50d44248cbc18023b5863fb0d43e44e6d44271026804179240ff742316f8d8aefd59914c6695755f15d7a8e4c4bacc6f658649d3e7eb5d81f075d8d6286a896a03d11a6543204375e8bd626990a28b178c921c7b3452020164c466ff0191ac394cb936850a673a"], 0x0, 0x0, &(0x7f0000008f37)}) getpeername$unix(r1, &(0x7f0000000240), &(0x7f00000002c0)=0x6e) [ 197.028445] binder: 12168:12172 unknown command 956588804 [ 197.047089] binder: 12168:12172 ioctl c0306201 2000dfd0 returned -22 [ 197.056440] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 197.063696] FAT-fs (loop5): Filesystem has been set read-only [ 197.091700] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 197.110177] binder: 12168:12178 tried to acquire reference to desc 0, got 1 instead [ 197.121570] binder: 12168:12178 unknown command 956588804 [ 197.127356] binder: 12168:12178 ioctl c0306201 2000dfd0 returned -22 [ 197.502116] hfsplus: unable to find HFS+ superblock [ 197.515858] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 2033/05/18 03:35:35 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={[{@hide='hide', 0x2c}]}) 2033/05/18 03:35:35 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x82) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000040)={0x2, 0x1f, 0x3, 0x3, [], [], [], 0x8b, 0x401, 0x200, 0x44ab, "10cfa51c147ab9c1c70ebf9859077221"}) sendmsg$key(r0, &(0x7f0000196fe4)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)=ANY=[@ANYBLOB="02ff000011000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000feffffff00030008000000000002000000e00000020000000000000000020001000000000000000000000000000500050100000024ef39ed0000000000fe8000000000000000000000000000ff0000000000000000"], 0x88}, 0x1}, 0x0) 2033/05/18 03:35:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet(0x2, 0xa, 0x2003) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x80, 0x3, 0x5, 0x101, 0x20}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={r2, 0x100000001}, &(0x7f0000000200)=0x8) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc282841dff1ee3de3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 2033/05/18 03:35:35 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(0xffffffffffffffff, r1) 2033/05/18 03:35:35 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(0xffffffffffffffff, r0) 2033/05/18 03:35:35 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/.ile0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:35 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='\nfsplus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:35:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="056b0440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) [ 197.586932] binder: 12192:12193 unknown command 1074031365 [ 197.626960] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:35:35 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101200, 0x0) lookup_dcookie(0x3ff, &(0x7f00000001c0)=""/69, 0x45) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x9, 0x6, 0x3, 0x0, 0x800}, &(0x7f0000000140)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0x800, 0x0, 0x8, 0x80, 0xf586, 0x2, 0x9, 0xe0, r2}, 0x20) ioctl$TCSETSF(r0, 0x5457, &(0x7f0000000000)) [ 197.634201] FAT-fs (loop5): Filesystem has been set read-only [ 197.636580] binder: 12192:12193 ioctl c0306201 20007000 returned -22 2033/05/18 03:35:35 executing program 7: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:35:35 executing program 6: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000080)=0x8000) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000040), 0x10) 2033/05/18 03:35:35 executing program 1: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000340)='logon\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000003c0)="eeff3b782eb22d279b79982dcf8c1ffe8d41379c180e9c77f82d575d34561feb9ec51747cf9ccbd7d08fa0db97b6d0f3eea98d767f6a0601538b00810133f1", 0x3f, 0xffffffffffffffff) add_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000440)="1b73cbb2652f03ab7e9541d0a4a8cfd564b4fdfe25b997e99394a10c49f8a5faca5c011c2f61edeee8fb2e5e1d0e7c7a77cfa5ba366211688f5e1f2f9a173ef3cddaa4a540ee507cd579a12fe26fb6ea1de47a3d6d2b240030d379e3681ff4835b7cdf8f62cfd679ed8dc47a7158308e564d328ca2b6780f092d68504e8913f2ebf627fa60a0e89171a9de9eb4a869d97ded1b7c970c9431571e71ed3475b6f92fe71553679630ccd83edc13c0114fcf62eb88467fcc80075b5f2fd8c7ca5f392cc68b", 0xc3, r0) r2 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, r1) add_key(&(0x7f0000000100)="6173796d6d65747269630000f623c165dbdd5da4e516feae1218931b7f62f1989e779cb3e199015e6f224dc786b78b696462c7dec58cd05fa42773a0af0a703d63e19620fd165b5d862cf735059c401152746037a51f9d035dcf4197d265f6f5d246b14212db69e767574420fb11a7308eb293967dbd5a729bb8c6833a854e2036d4e9270fef4cef270638e56c144263ecf69038c96c9d38f68668c21513e19c1311eea8ee94c59609987d033ca3c8ad624dbc5c8958aaa4e9158c5850c6228a22d0adaabe8bb566c069d5baa64e30af6d878c", &(0x7f0000000000)={0x73, 0x79, 0x7a}, &(0x7f0000000040)="3080", 0x2, r2) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x7, 0x80000) [ 197.680878] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 197.688322] binder: 12192:12193 IncRefs 0 refcount change on invalid ref 0 ret -22 2033/05/18 03:35:35 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, 0xffffffffffffffff) 2033/05/18 03:35:35 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0//ile0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 197.730165] binder: 12192:12193 unknown command 1074031365 [ 197.767077] binder: 12192:12193 ioctl c0306201 20007000 returned -22 2033/05/18 03:35:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = add_key(&(0x7f00000003c0)='rxrpc_s\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000440)="6d0bc3fa6664e67ebb9db0e58cdaf517a2f0856ba9c5850db2ce2f191243efe6a79f98271d6797f77c3f3c5b389ff285d5028752b84fe0fdd1774061446d0deb8e38681fec04f6710c759ff83817b0f0064e0d11571bfece771a61adc9a987c070d032fc3cab60b555f9698c3af34abe0d5de8884b1257759637bfe15de8c8678b46644b788e77ac5317197a6c145b004920f26bc0aa1a690567e03d822f6a09865618e2592b5e28f0b1cd0fe62290d8cba546635286fd31a259eb", 0xbb, 0xfffffffffffffffa) keyctl$invalidate(0x15, r1) r2 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x400000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r4, 0x400, 0x70bd27, 0x25dfdbfc, {0x7}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x180000000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x100}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000) close(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000000)={0x1, 0x18000000, 0x8, 0x1, 0x5, 0xffff, 0x101, 0x0, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000300)={r5, @in6={{0xa, 0x4e22, 0xf93f, @remote={0xfe, 0x80, [], 0xbb}, 0xfffffffffffffff7}}, 0x5603, 0x5}, &(0x7f00000000c0)=0x90) 2033/05/18 03:35:35 executing program 7: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:35:36 executing program 6: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x840, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) setsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000200)={@local={0xfe, 0x80, [], 0xaa}, r1}, 0x14) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in=@multicast1, @in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000000340)=0xe8) setsockopt$inet_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000000)="58e6f5da63badf0ab3401e77a4", 0xd) sendmsg$nl_xfrm(r2, &(0x7f0000888000)={&(0x7f0000ad3000)={0x10}, 0xc, &(0x7f000023dff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="640000001e0001000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000240009000000000000000000000000000000000000000000000000000000000000000000148ee2d2435f39550a737d9a601b1c13396413fd80bbcc82e67fcca66377085b67592de3190e40ca69a2de2dd17b9f67c3d028dd31f60e1ce5039c7f793880b6f2f7499c2a8b81f7146f41dad8bfe078238b6b9ece252584cde784b210d6eff22779063771770d71442d11f786864be4377150f8ecf3565659e9279d593b93d17ac408001c11a49561e4e0"], 0x64}, 0x1}, 0x0) 2033/05/18 03:35:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x3, 0x101000) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x7fffffff, 0x22600) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f00000000c0)={r1, 0xfffffffffffffff7, 0x10000, r2}) capset(&(0x7f0000594ff8)={0x19980330}, &(0x7f0000244000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x30, 0x0, &(0x7f0000000040)=[@request_death={0x400c630e, 0x3, 0x4}, @exit_looper={0x630d}, @acquire={0x40046305, 0x1}, @acquire={0x40046305}, @register_looper={0x630b}, @increfs={0x40046304, 0x1}], 0x0, 0x0, &(0x7f0000000200)}) syslog(0x0, &(0x7f0000000100)=""/140, 0x8c) 2033/05/18 03:35:36 executing program 2 (fault-call:4 fault-nth:0): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:35:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x800000000004, 0x4, 0x2009, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, [0x8]}, 0x2c) r0 = memfd_create(&(0x7f0000000040)=')posix_acl_access}vboxnet0\x00', 0x3) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000100)={0xff, 0x4, 0x1b70, 0x400, 0x8, 0xffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f00000000c0)={0x0, 0x4, 0xb0, &(0x7f0000000080)}) [ 197.914666] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 197.922401] FAT-fs (loop5): Filesystem has been set read-only 2033/05/18 03:35:36 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x10000, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304407f7eb3152dfb7c2668c8e602cf6d478013507b49cc89d2302923460e2b110992a96ff3d5dcd375dec1cd1e91a8b016cd1619d1653918e5225ba49c01b1e55b1f2e9e3f45a7ff8b5a22ad94635a9b000b2c8daa562cc23153cdbe367ec0d6ff07129160b6b9a19538256b8bf3d7599c2e84839a25fc2a3aeaa1f5d1d20015d09bf64396d816eec9523300000000000000"], 0x0, 0x0, &(0x7f0000002000)}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x40, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000100)=0x5, 0x4) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x4, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'bridge0\x00'}}) syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x802) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000aabfe8), 0x0, 0x0, &(0x7f0000008f37)}) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000140)=[0xc000000, 0x5]) 2033/05/18 03:35:36 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000002340)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\b\x00\x00\x00'], 0x28}, 0x1}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) [ 197.978731] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 197.986652] FAULT_INJECTION: forcing a failure. [ 197.986652] name failslab, interval 1, probability 0, space 0, times 0 [ 197.998294] CPU: 0 PID: 12250 Comm: syz-executor2 Not tainted 4.16.0+ #1 [ 198.005150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.014517] Call Trace: [ 198.017131] dump_stack+0x1b9/0x294 [ 198.020788] ? dump_stack_print_info.cold.2+0x52/0x52 [ 198.026016] should_fail.cold.4+0xa/0x1a [ 198.030097] ? perf_trace_run_bpf_submit+0x246/0x370 [ 198.035238] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 198.040371] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 198.045494] ? graph_lock+0x170/0x170 [ 198.049316] ? memset+0x31/0x40 [ 198.052618] ? find_held_lock+0x36/0x1c0 [ 198.056707] ? __lock_is_held+0xb5/0x140 [ 198.060813] ? check_same_owner+0x320/0x320 [ 198.065162] ? rcu_note_context_switch+0x710/0x710 [ 198.066280] binder: 12262:12265 Acquire 1 refcount change on invalid ref 364084863 ret -22 [ 198.070118] __should_failslab+0x124/0x180 [ 198.070161] should_failslab+0x9/0x14 [ 198.086581] kmem_cache_alloc_trace+0x2cb/0x780 [ 198.091289] snd_seq_port_connect+0xdc/0x710 [ 198.095727] ? snd_seq_get_port_info+0x4f0/0x4f0 [ 198.100499] ? mark_held_locks+0xc9/0x160 [ 198.104665] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 198.109275] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 198.114404] ? kasan_check_write+0x14/0x20 [ 198.119117] ? do_raw_read_unlock+0x3f/0x60 [ 198.119138] ? _raw_read_unlock+0x22/0x30 [ 198.119159] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 198.119181] ? check_subscription_permission.isra.7+0x154/0x240 [ 198.119214] snd_seq_ioctl_subscribe_port+0x1d8/0x310 [ 198.119237] ? snd_seq_ioctl_unsubscribe_port+0x310/0x310 [ 198.119262] snd_seq_kernel_client_ctl+0x15a/0x190 [ 198.119291] snd_seq_oss_midi_open+0x4ea/0x900 [ 198.119315] ? snd_seq_oss_midi_setup+0x50/0x50 [ 198.119351] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 198.119367] ? fput+0x130/0x1a0 [ 198.119396] snd_seq_oss_synth_reset+0x471/0x9f0 [ 198.119425] ? snd_seq_oss_synth_cleanup+0x480/0x480 [ 198.119445] ? fcntl_setlk+0x1020/0x1020 [ 198.119461] ? fsnotify+0x415/0x1100 [ 198.119498] snd_seq_oss_reset+0x79/0x2b0 [ 198.119519] ? free_info_entries+0x3b/0x3b [ 198.119538] snd_seq_oss_release+0x73/0x130 [ 198.119558] odev_release+0x52/0x70 [ 198.119575] __fput+0x34d/0x890 [ 198.119605] ? fput+0x1a0/0x1a0 [ 198.119627] ? _raw_spin_unlock_irq+0x27/0x70 [ 198.119655] ____fput+0x15/0x20 [ 198.119673] task_work_run+0x1e4/0x290 [ 198.119696] ? task_work_cancel+0x240/0x240 [ 198.119720] ? exit_to_usermode_loop+0x87/0x310 [ 198.119750] exit_to_usermode_loop+0x2bd/0x310 [ 198.119775] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 198.147999] binder: 12262:12269 Acquire 1 refcount change on invalid ref 364084863 ret -22 [ 198.150511] ? do_syscall_64+0xb7/0x9d0 [ 198.150544] do_syscall_64+0x792/0x9d0 [ 198.150562] ? vmalloc_sync_all+0x30/0x30 [ 198.264103] ? kasan_check_write+0x14/0x20 [ 198.264127] ? syscall_return_slowpath+0x5c0/0x5c0 [ 198.273265] ? syscall_return_slowpath+0x30f/0x5c0 [ 198.278192] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 198.283564] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 198.288435] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 198.293633] RIP: 0033:0x455319 [ 198.296825] RSP: 002b:00007f63362dcc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 198.304543] RAX: 0000000000000015 RBX: 00007f63362dd6d4 RCX: 0000000000455319 [ 198.311797] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000000014 [ 198.319058] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 198.326315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 198.333579] R13: 000000000000006c R14: 00000000006f3ac0 R15: 0000000000000000 2033/05/18 03:35:36 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='%fsplus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:35:36 executing program 1: r0 = socket(0xa, 0x80005, 0x0) getsockopt(r0, 0x3, 0x3f, &(0x7f0000001fac)=""/84, &(0x7f0000000380)=0xffffff81) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)=@pppoe={0x0, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/96, 0x60}, {&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000180)=""/149, 0x95}, {&(0x7f0000002000)=""/4096, 0x1000}], 0x4, &(0x7f0000000280)=""/48, 0x30, 0x1c0000000}}], 0x1, 0x10000, 0x0) 2033/05/18 03:35:36 executing program 7: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:35:36 executing program 6: r0 = open(&(0x7f0000000000)='./file0\x00', 0x100000003fd, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) bind$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, {0x100000000, 0x3ff, 0x4, 0x6ce, 0x6, 0x6}, 0x1000}, 0xa) pwritev(r0, &(0x7f00000016c0)=[{&(0x7f0000001640)='l', 0x1}], 0x1, 0x0) close(r0) fdatasync(r1) bind(r0, &(0x7f0000000080)=@in6={0xa, 0x4e22, 0x4, @empty, 0x5}, 0x80) 2033/05/18 03:35:36 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/f%le0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:36 executing program 0: r0 = socket$inet(0x10, 0x806, 0x3) sendmsg(r0, &(0x7f0000020fc8)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000000)="4c0000001000ff20fffeda956fca83b724a6008008000000000000000400000010000400c8050f000098bc593ab6821149a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc8d2b0790ed", 0x4c}], 0x1}, 0x0) 2033/05/18 03:35:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x0}) r2 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000001c0)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x84, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x3, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x58, 0x20, &(0x7f0000000140)=[@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000000), 0x1, 0x0, 0xe}, @flat={0x776a2a85, 0x10b, r1, 0x2}], &(0x7f00000000c0)=[0x38, 0x0, 0x38, 0x78]}, 0x3}}, @acquire_done={0x40106309, r2, 0x4}, @acquire={0x40046305, 0x4}, @exit_looper={0x630d}, @acquire_done={0x40106309, r3, 0x1}, @enter_looper={0x630c}], 0xc9, 0x0, &(0x7f00000002c0)="2bd9eff69260ff346e2c6622f345b1b5a96663988b1408f249cb025390b0f2f52cbf01601e6a5ec1f3554022dc994ca8b9b6001248eba5b9cfebe1ca6ae01709f4add8c7f977cff7522f05239f3db8e9e082d36196c93118a01fc8ef4ef2b9d695772b5a2278973254a21d302ddbe6dc8721a8f6d71043f356a07ba0947034214a63a49270c8c11fa17663c891f1329b84e90ce8a394e89fe3ef0097744ba33be4badb43d02d7a6157b9edbcf91a0c20e71d41134a61f3d601ad9bf94afde2b44efc5d1ddbb4cc0825"}) r4 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:36 executing program 2 (fault-call:4 fault-nth:1): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) [ 198.575767] binder: 12295:12300 got transaction to invalid handle [ 198.582152] binder: 12295:12300 transaction failed 29201/-22, size 88-32 line 2848 [ 198.586477] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 198.597485] FAT-fs (loop5): Filesystem has been set read-only [ 198.611883] FAULT_INJECTION: forcing a failure. [ 198.611883] name failslab, interval 1, probability 0, space 0, times 0 [ 198.623192] CPU: 1 PID: 12303 Comm: syz-executor2 Not tainted 4.16.0+ #1 [ 198.630033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.639386] Call Trace: [ 198.641984] dump_stack+0x1b9/0x294 [ 198.645622] ? dump_stack_print_info.cold.2+0x52/0x52 [ 198.650822] ? graph_lock+0x170/0x170 [ 198.654637] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 198.659848] should_fail.cold.4+0xa/0x1a [ 198.663927] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 198.666986] binder: BINDER_SET_CONTEXT_MGR already set [ 198.669033] ? find_held_lock+0x36/0x1c0 [ 198.669054] ? graph_lock+0x170/0x170 [ 198.669068] ? do_raw_read_unlock+0x3f/0x60 [ 198.669089] ? find_held_lock+0x36/0x1c0 [ 198.690558] ? __lock_is_held+0xb5/0x140 [ 198.694645] ? check_same_owner+0x320/0x320 [ 198.698986] ? rcu_note_context_switch+0x710/0x710 [ 198.700403] binder: 12295:12300 ioctl 40046207 0 returned -16 [ 198.704577] __should_failslab+0x124/0x180 [ 198.704598] should_failslab+0x9/0x14 [ 198.704613] kmem_cache_alloc_trace+0x2cb/0x780 [ 198.704640] snd_seq_port_connect+0xdc/0x710 [ 198.704663] ? snd_seq_get_port_info+0x4f0/0x4f0 [ 198.720244] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 198.723207] ? mark_held_locks+0xc9/0x160 [ 198.723224] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 198.723243] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 198.723262] ? kasan_check_write+0x14/0x20 [ 198.723281] ? do_raw_read_unlock+0x3f/0x60 [ 198.761842] ? _raw_read_unlock+0x22/0x30 [ 198.766003] ? __sanitizer_cov_trace_cmp4+0x16/0x20 2033/05/18 03:35:36 executing program 1: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000280)=@ethtool_gstrings={0x1b, 0x6}}) 2033/05/18 03:35:36 executing program 6: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xdbd5, 0x5, 0xfffffffffffffff8, 0x0, 0x4}, &(0x7f0000000480)) r0 = memfd_create(&(0x7f0000000200)='\x00 ', 0x0) mq_timedsend(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f00000001c0)={0x77359400}) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000000000001f0000000000000001000000050000000400000000000000030000000000000001000080800000001b0000000000000000000000000000000000000000000000000800000000"]) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000800)={0x6, 0x5, 0x7, 0xfff, 0x0, 0x5}) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x2, &(0x7f0000000040)=0x2) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x101802) r2 = dup2(r1, r0) pread64(r0, &(0x7f0000000740)=""/131, 0x83, 0xfffffffffffffffc) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(0xffffffffffffffff, &(0x7f0000048fe4)=[{0x0, 0x1ff, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x1c) write$sndseq(r2, &(0x7f0000053000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000055ffe)}}], 0xfffffd56) 2033/05/18 03:35:36 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:35:36 executing program 0: capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000200)={0x0, 0x2}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)="2e2f6367726f75702e6370752f84797a3100", 0x200002, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x80480) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0x6, @mcast1={0xff, 0x1, [], 0x1}, 0x80}}, 0x1, 0x0, 0x200, 0x0, 0x1}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0xcf48, 0x1, 0x200, 0x9, 0xffffffffffffff80, 0x8, 0x1, 0xc5, r2}, 0x20) flistxattr(0xffffffffffffffff, &(0x7f0000000180)=""/42, 0x3a7) [ 198.771032] ? check_subscription_permission.isra.7+0x154/0x240 [ 198.777107] snd_seq_ioctl_subscribe_port+0x1d8/0x310 [ 198.782303] ? snd_seq_ioctl_unsubscribe_port+0x310/0x310 [ 198.787849] snd_seq_kernel_client_ctl+0x15a/0x190 [ 198.789959] binder: 12295:12300 got transaction to invalid handle [ 198.792788] snd_seq_oss_midi_open+0x720/0x900 [ 198.792808] ? snd_seq_oss_midi_setup+0x50/0x50 [ 198.792835] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 198.792849] ? fput+0x130/0x1a0 [ 198.792865] snd_seq_oss_synth_reset+0x471/0x9f0 [ 198.792883] ? snd_seq_oss_synth_cleanup+0x480/0x480 2033/05/18 03:35:36 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000315000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth0_to_team\x00', 0x10) ioctl$sock_ipx_SIOCIPXCFGDATA(r0, 0x89e2, &(0x7f0000000000)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x58a]) ioctl$EVIOCGREP(r0, 0x40047440, &(0x7f0000001080)=""/174) [ 198.792898] ? fcntl_setlk+0x1020/0x1020 [ 198.792911] ? fsnotify+0x415/0x1100 [ 198.792931] snd_seq_oss_reset+0x79/0x2b0 [ 198.799187] binder: 12295:12300 transaction failed 29201/-22, size 88-32 line 2848 [ 198.803712] ? free_info_entries+0x3b/0x3b [ 198.803727] snd_seq_oss_release+0x73/0x130 [ 198.803744] odev_release+0x52/0x70 [ 198.858709] __fput+0x34d/0x890 [ 198.862002] ? fput+0x1a0/0x1a0 [ 198.865729] ? _raw_spin_unlock_irq+0x27/0x70 [ 198.870234] ____fput+0x15/0x20 2033/05/18 03:35:37 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/f.le0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:37 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$void(0x0) r1 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f00000000c0)={r1, r1, 0x3}) r4 = openat(r1, &(0x7f0000000040)='/\x00', 0x0, 0x0) fsetxattr(r4, &(0x7f00000002c0)=@known='security.ima\x00', &(0x7f0000000300)='/dev/dsp#\x00', 0xa, 0x0) 2033/05/18 03:35:37 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}}, 0x0, 0x1, 0x0, "111d6c1ba6050dd77cf3f2f09d1cb02a25988f1ea9c5be7d9801641c99b0def45ac625ada3316175a9d341111c181811e12c196e1ab99946e5e47e0594e415670d1330cd611c3974c55bb4d50000e111"}, 0xd8) futex(&(0x7f00000000c0)=0x1, 0xb, 0x2, &(0x7f0000000100), &(0x7f0000000240)=0x2, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x4, 0x0, "aee3e02177a8b390566bc2dd09f1a3762d791ee4f4b438301ef0512cdb0500608905a2b845dc84fb52db92b78b7765b975935988dc185e581f893ac2396270f993a39d4502f90359bd12e421e02d30ee"}, 0xd8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000040)={{0x8, 0xfff}, {0x1, 0xd2}, 0x2, 0x0, 0x93}) [ 198.873519] task_work_run+0x1e4/0x290 [ 198.877414] ? task_work_cancel+0x240/0x240 [ 198.881747] ? exit_to_usermode_loop+0x87/0x310 [ 198.886428] exit_to_usermode_loop+0x2bd/0x310 [ 198.890226] binder: 12295:12309 Acquire 1 refcount change on invalid ref 0 ret -22 [ 198.891015] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 198.891034] ? do_syscall_64+0xb7/0x9d0 [ 198.891057] do_syscall_64+0x792/0x9d0 [ 198.891070] ? vmalloc_sync_all+0x30/0x30 [ 198.891087] ? _raw_spin_unlock_irq+0x27/0x70 [ 198.920066] ? finish_task_switch+0x1ca/0x810 [ 198.924572] ? syscall_return_slowpath+0x5c0/0x5c0 [ 198.929512] ? syscall_return_slowpath+0x30f/0x5c0 [ 198.934455] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 198.939830] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 198.944685] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 198.949877] RIP: 0033:0x455319 [ 198.953065] RSP: 002b:00007f63362dcc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 198.960781] RAX: 0000000000000015 RBX: 00007f63362dd6d4 RCX: 0000000000455319 [ 198.968052] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000000014 [ 198.975323] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 198.982601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 198.989881] R13: 000000000000006c R14: 00000000006f3ac0 R15: 0000000000000001 [ 199.073452] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 199.080639] FAT-fs (loop5): Filesystem has been set read-only [ 199.114511] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:35:37 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='h.splus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:35:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:37 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:35:37 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) accept4(r0, &(0x7f0000001740)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000017c0)=0x80, 0x800) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000001800)=r3) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r4 = accept$alg(r0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x103ff, 0x1, 0x100000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x20}, 0x19, r3}) sendmsg$alg(r4, &(0x7f0000f75fc8)={0x0, 0x0, &(0x7f0000805000), 0x10000209, &(0x7f00002e7000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x13, 0x20000000}, 0xfffffffffffffffd) io_setup(0x1, &(0x7f0000f7e000)=0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000000140)=""/22) io_submit(r5, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f000079a000)="16", 0x1}]) 2033/05/18 03:35:37 executing program 2 (fault-call:4 fault-nth:2): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:35:37 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x17a}]}) 2033/05/18 03:35:37 executing program 1: r0 = socket$inet(0x15, 0x5, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x9, 0x40000) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000000c0)=""/188) getsockopt$inet_mreqn(r0, 0x114, 0x2713, &(0x7f0000000040)={@remote, @remote}, &(0x7f0000000080)=0xc) 2033/05/18 03:35:37 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/f:le0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 199.589624] FAULT_INJECTION: forcing a failure. [ 199.589624] name failslab, interval 1, probability 0, space 0, times 0 [ 199.600957] CPU: 1 PID: 12370 Comm: syz-executor2 Not tainted 4.16.0+ #1 [ 199.607804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 199.617158] Call Trace: [ 199.619758] dump_stack+0x1b9/0x294 [ 199.623397] ? dump_stack_print_info.cold.2+0x52/0x52 [ 199.628600] ? graph_lock+0x170/0x170 [ 199.632412] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 199.635434] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 199.637614] should_fail.cold.4+0xa/0x1a [ 199.637639] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 199.637656] ? find_held_lock+0x36/0x1c0 [ 199.637675] ? graph_lock+0x170/0x170 [ 199.637693] ? debug_check_no_locks_freed+0x310/0x310 [ 199.637711] ? find_held_lock+0x36/0x1c0 [ 199.644833] FAT-fs (loop5): Filesystem has been set read-only [ 199.648854] ? __lock_is_held+0xb5/0x140 [ 199.648884] ? check_same_owner+0x320/0x320 [ 199.648906] ? rcu_note_context_switch+0x710/0x710 [ 199.668998] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 199.671047] __should_failslab+0x124/0x180 [ 199.671066] should_failslab+0x9/0x14 [ 199.671080] kmem_cache_alloc_trace+0x2cb/0x780 [ 199.671109] snd_seq_port_connect+0xdc/0x710 [ 199.671127] ? snd_seq_get_port_info+0x4f0/0x4f0 [ 199.671144] ? mark_held_locks+0xc9/0x160 [ 199.723295] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 199.727879] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 199.732975] ? kasan_check_write+0x14/0x20 [ 199.737200] ? do_raw_read_unlock+0x3f/0x60 [ 199.741512] ? _raw_read_unlock+0x22/0x30 [ 199.745646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 199.751169] ? check_subscription_permission.isra.7+0x154/0x240 [ 199.757215] snd_seq_ioctl_subscribe_port+0x1d8/0x310 [ 199.762392] ? snd_seq_ioctl_unsubscribe_port+0x310/0x310 [ 199.767915] snd_seq_kernel_client_ctl+0x15a/0x190 [ 199.772833] snd_seq_oss_midi_open+0x4ea/0x900 [ 199.777402] ? snd_seq_oss_midi_setup+0x50/0x50 [ 199.782061] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 199.787582] ? fput+0x130/0x1a0 [ 199.790852] snd_seq_oss_synth_reset+0x471/0x9f0 [ 199.795596] ? snd_seq_oss_synth_cleanup+0x480/0x480 [ 199.800686] ? fcntl_setlk+0x1020/0x1020 [ 199.804729] ? fsnotify+0x415/0x1100 [ 199.808431] snd_seq_oss_reset+0x79/0x2b0 [ 199.812562] ? free_info_entries+0x3b/0x3b [ 199.816782] snd_seq_oss_release+0x73/0x130 [ 199.821087] odev_release+0x52/0x70 [ 199.825216] __fput+0x34d/0x890 [ 199.828482] ? fput+0x1a0/0x1a0 [ 199.831747] ? _raw_spin_unlock_irq+0x27/0x70 [ 199.836227] ____fput+0x15/0x20 [ 199.839494] task_work_run+0x1e4/0x290 [ 199.843369] ? task_work_cancel+0x240/0x240 [ 199.847679] ? exit_to_usermode_loop+0x87/0x310 [ 199.852334] exit_to_usermode_loop+0x2bd/0x310 [ 199.856900] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 199.861726] ? do_syscall_64+0xb7/0x9d0 [ 199.865688] do_syscall_64+0x792/0x9d0 [ 199.869563] ? vmalloc_sync_all+0x30/0x30 [ 199.873694] ? _raw_spin_unlock_irq+0x27/0x70 [ 199.878176] ? finish_task_switch+0x1ca/0x810 [ 199.882655] ? syscall_return_slowpath+0x5c0/0x5c0 [ 199.887569] ? syscall_return_slowpath+0x30f/0x5c0 [ 199.892486] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 199.897840] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 199.902670] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 199.907842] RIP: 0033:0x455319 [ 199.911021] RSP: 002b:00007f63362dcc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 199.918724] RAX: 0000000000000015 RBX: 00007f63362dd6d4 RCX: 0000000000455319 [ 199.925977] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000000014 [ 199.933227] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2033/05/18 03:35:38 executing program 1: r0 = getpgrp(0x0) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10, 0x800) fcntl$getownex(r1, 0x10, &(0x7f0000000200)) sched_setaffinity(r0, 0x200, &(0x7f0000000080)=0x5) mkdir(&(0x7f0000fb3000)='./file0\x00', 0x0) mount(&(0x7f0000463000)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000000140)='hugetlbfs\x00', 0x0, &(0x7f0000e2ef53)) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xe, 0x0, 0x0, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x4) fchmodat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) umount2(&(0x7f0000a23000)='./file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = memfd_create(&(0x7f0000000180)='hugetlbfs\x00', 0x3) listen(r3, 0x700) ioctl$KDENABIO(r4, 0x4b36) poll(&(0x7f0000000240)=[{r2}], 0x1, 0x431b8446) r5 = semget$private(0x0, 0x1, 0x7d4) semctl$GETNCNT(r5, 0x4, 0xe, &(0x7f0000000380)=""/243) accept4(r2, &(0x7f00000002c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, &(0x7f0000000340)=0x80, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000093a000), 0x4) 2033/05/18 03:35:38 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x4, 0x2) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00') r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil) r2 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:38 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/f\\le0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 199.940479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 199.947733] R13: 000000000000006c R14: 00000000006f3ac0 R15: 0000000000000002 2033/05/18 03:35:38 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:35:38 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x100000000, 0x80000) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="cf0101f4940100006c0000008b0300007f000000000001000000000000000000f76692126754bc344f4497088b50f4d16ef128f3e3dcf6c0a86ad3e996708bb09eb981d65cf38b3cb9ec704da3ab12f811b1cc5f5eb05d58c10c64ca310d162f574104f01fd44a938aac4321c261a5f3876850dac5b66601edb8435820ad03551b5807de07ed8dcc6c63cae251a3153f35590e7430169906aa79ec03d41556c52b860ac8dcf72dfaa8e80323421f8b0689ae9bdbd13e56c2f23497888e2170b9323028a1bb2a88e31a16fde3a30d8526a7c3a06dd7072fcae5ac17373d730ba9c39615005d4407439f9892887ed7ae8e"], 0x54) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) fallocate(r1, 0x1, 0x6, 0x2) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x800448d2, &(0x7f0000000040)) [ 200.013085] binder: 12387:12393 tried to acquire reference to desc 0, got 1 instead 2033/05/18 03:35:38 executing program 2 (fault-call:4 fault-nth:3): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) [ 200.053415] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 200.057876] binder: 12387:12393 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 200.060713] FAT-fs (loop5): Filesystem has been set read-only 2033/05/18 03:35:38 executing program 1: socketpair$unix(0x1, 0xfffffffffffffffe, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000000)=0x0) shutdown(r1, 0x1) r3 = fcntl$dupfd(r1, 0x406, r0) ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, &(0x7f00000002c0)={0xfffffffffffffff8}) r4 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x9, 0x80000) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000080)="b41528acd18639603543f5b556eee46b36d22bde93fb4a9030c3f6e5422e6586f5ed0352bece74bc1f9129999a754205cf338a51cef994d299d6978e1c958d72b00c7fe6538d17298e3d6ec06b62e923c57ca42e7445696f4db4c374f449082c1f263df32b493a94", 0x68, 0xf43, 0x0, 0x1, r4}, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x2, 0x1, &(0x7f0000000280)={r5, r6+10000000}, 0x0) syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x3f, 0x2) fcntl$lock(r1, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffd}) 2033/05/18 03:35:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0563a070"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) [ 200.139115] FAULT_INJECTION: forcing a failure. [ 200.139115] name failslab, interval 1, probability 0, space 0, times 0 [ 200.150446] CPU: 1 PID: 12409 Comm: syz-executor2 Not tainted 4.16.0+ #1 [ 200.157290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 200.166644] Call Trace: [ 200.169251] dump_stack+0x1b9/0x294 [ 200.172896] ? dump_stack_print_info.cold.2+0x52/0x52 [ 200.178090] ? graph_lock+0x170/0x170 [ 200.181904] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 200.182300] binder: 12413:12414 unknown command 1889559301 [ 200.187106] should_fail.cold.4+0xa/0x1a [ 200.187132] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 200.187148] ? find_held_lock+0x36/0x1c0 [ 200.187166] ? graph_lock+0x170/0x170 [ 200.187180] ? do_raw_read_unlock+0x3f/0x60 [ 200.187198] ? find_held_lock+0x36/0x1c0 [ 200.192976] binder: 12413:12414 ioctl c0306201 20007000 returned -22 [ 200.196866] ? __lock_is_held+0xb5/0x140 [ 200.196898] ? check_same_owner+0x320/0x320 [ 200.196920] ? rcu_note_context_switch+0x710/0x710 [ 200.196943] __should_failslab+0x124/0x180 [ 200.196961] should_failslab+0x9/0x14 [ 200.204220] binder: 12413:12414 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 200.206100] kmem_cache_alloc_trace+0x2cb/0x780 [ 200.206130] snd_seq_port_connect+0xdc/0x710 [ 200.206152] ? snd_seq_get_port_info+0x4f0/0x4f0 [ 200.206171] ? mark_held_locks+0xc9/0x160 [ 200.206189] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 200.212520] binder: 12413:12414 unknown command 1889559301 [ 200.214279] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 200.214299] ? kasan_check_write+0x14/0x20 [ 200.214313] ? do_raw_read_unlock+0x3f/0x60 [ 200.214329] ? _raw_read_unlock+0x22/0x30 [ 200.218759] binder: 12413:12414 ioctl c0306201 20007000 returned -22 [ 200.224843] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 200.224862] ? check_subscription_permission.isra.7+0x154/0x240 [ 200.224884] snd_seq_ioctl_subscribe_port+0x1d8/0x310 [ 200.224903] ? snd_seq_ioctl_unsubscribe_port+0x310/0x310 [ 200.224922] snd_seq_kernel_client_ctl+0x15a/0x190 [ 200.224942] snd_seq_oss_midi_open+0x720/0x900 [ 200.224960] ? snd_seq_oss_midi_setup+0x50/0x50 [ 200.263930] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 200.267709] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 200.267724] ? fput+0x130/0x1a0 [ 200.267747] snd_seq_oss_synth_reset+0x471/0x9f0 [ 200.267768] ? snd_seq_oss_synth_cleanup+0x480/0x480 [ 200.267782] ? fcntl_setlk+0x1020/0x1020 [ 200.267801] ? fsnotify+0x415/0x1100 [ 200.375424] snd_seq_oss_reset+0x79/0x2b0 [ 200.379566] ? free_info_entries+0x3b/0x3b [ 200.383786] snd_seq_oss_release+0x73/0x130 [ 200.388093] odev_release+0x52/0x70 [ 200.391703] __fput+0x34d/0x890 [ 200.394972] ? fput+0x1a0/0x1a0 [ 200.398239] ? _raw_spin_unlock_irq+0x27/0x70 [ 200.402723] ____fput+0x15/0x20 [ 200.405989] task_work_run+0x1e4/0x290 [ 200.409865] ? task_work_cancel+0x240/0x240 [ 200.414175] ? exit_to_usermode_loop+0x87/0x310 [ 200.418833] exit_to_usermode_loop+0x2bd/0x310 [ 200.423402] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 200.428227] ? do_syscall_64+0xb7/0x9d0 [ 200.432188] do_syscall_64+0x792/0x9d0 [ 200.436065] ? vmalloc_sync_all+0x30/0x30 [ 200.440194] ? _raw_spin_unlock_irq+0x27/0x70 [ 200.444672] ? finish_task_switch+0x1ca/0x810 [ 200.449153] ? syscall_return_slowpath+0x5c0/0x5c0 [ 200.454066] ? syscall_return_slowpath+0x30f/0x5c0 [ 200.458983] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 200.464333] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 200.469163] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 200.474334] RIP: 0033:0x455319 [ 200.477507] RSP: 002b:00007f63362dcc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 200.485201] RAX: 0000000000000015 RBX: 00007f63362dd6d4 RCX: 0000000000455319 [ 200.492455] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000000014 [ 200.499708] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 200.506960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 200.514209] R13: 000000000000006c R14: 00000000006f3ac0 R15: 0000000000000003 2033/05/18 03:35:39 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='h/splus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:35:39 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x35, "3b1c7710427c72ee48319897c4e22e6c4ab7f9a0866cf4022241d5d71ac28c0123fc599f8fe6a3f6a3868727912ba0f0b016dd8902"}, &(0x7f0000000040)=0x3d) ioctl$sock_netrom_TIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r1, 0x20, 0x1, 0xfcb, 0x787, 0x35}, &(0x7f0000000180)=0x14) r3 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x20000) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000140)=0x7, 0x4) r4 = socket(0x400000000000010, 0x802, 0x0) write(r4, &(0x7f00000000c0)="240000001a0099f0003be90000ed190e020808160000000031ba0080080001007f196be0", 0x24) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r2, 0x3, 0x3, 0x9, 0x8}, &(0x7f0000000240)=0x14) 2033/05/18 03:35:39 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:35:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:39 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/f\nle0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:39 executing program 0: mmap(&(0x7f0000009000/0xc00000)=nil, 0xc00000, 0x5, 0x2c031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x3, &(0x7f0000dbc000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0xffffffb5}, [], {0x95}}, &(0x7f0000e6bffc)='GPL\x00', 0x0, 0x99, &(0x7f0000000000)=""/153}, 0x48) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) r3 = getpgid(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000029c0)={0x0}, &(0x7f0000002a00)=0xc) r5 = gettid() r6 = getpgid(r4) mmap$binder(&(0x7f00006bd000/0x3000)=nil, 0x3000, 0xc9198ddc9caca880, 0x30011, r1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002d80)={0x0, 0x0}, &(0x7f0000002dc0)=0xc) r8 = getegid() ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000002e00)=0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f00000031c0)={0x8001, 0x4, [0x7ff]}) lstat(&(0x7f0000002e40)='./file0\x00', &(0x7f0000002e80)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getgid() r12 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000002f00)={0x0, 0x0}, &(0x7f0000002f40)=0xc) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000003180)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) getresgid(&(0x7f0000002f80), &(0x7f0000002fc0)=0x0, &(0x7f0000003000)) sendmsg$netlink(r1, &(0x7f0000003140)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfe}, 0xc, &(0x7f0000002d40)=[{&(0x7f0000000140)={0x1440, 0x41, 0x1, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x1314, 0x2, [@typed={0x8, 0x4f, @u32=0x33f}, @generic="454fdc42fe1a04a0219ffcc7bebab1e2c8cf2ca420dbd7793b4ea762fccb2eac83d1cdd72f48ed21d48e8b029bb75789b2b2f9c6df1e07ad191df9b7359adb88166dba10075637fe147660e6beb92742fc4d15f9db184d75e80a9a3507569d0ac7212b1194f0816c448bfffbb3db31faca3fbbf10909450ae7b1907f14d399da036736a9c92d7c4ca091597635142faca153a27e2ccfc7866fd9fa48277982d5f8723983dddf72b72bbeba1ffb5130e0a8941c198e10a23a2b88812f949be78f4bd86a8cff983821d423bf950b97d4663eaafdba75aa09ee7ac5936a8a099c0190af5056be7b3f3ce12bf81358358d45807a4b2c964f2095", @generic="e3c51fcb9f420bed573a6e7c95651ce509842f49ba69a6ba1bc4d476f72c5d59e8370b5d5df4c1e0dd717f0380297ae347938a8219638777e2da2dfc559458fd7fa26983a0ab70a76831a2a8f0f2d5a1263802c5c8e6c6ca12d113ba022f228c903d00be1762d197a884885c6f3749b08dbd70a677d07d872dfe4d34da8df28e55170ce30f02b7cc875d6cd3275c8ac6cfb56ee10d0a1a013d5342198021b6e81ea2bb1ef7899980", @typed={0x8, 0x2, @fd=r0}, @generic="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", @generic="1f6134d64a0ea163cf2962e98924278b6c8944f88c6d9a592d46ad8507088de80c89c90a3d249abb4b2a28aff06ad6ac02850b1346aa333f2918ac38673cfe0f47f1b12cdc4db26cb4265da5c1482332df0fdd65f18f39a13054590716acb6ea94e5e69664401febdf1851473288d5cd8ce6ab4d0acf8170e1ef6fc40afdbd4b75fe371c7ee615f5d09d466820acc4b2764c32ae088e9be3fc31e3a07e9058f332e793e40cc4da201f102bd7779a2e347a53dd86f0854a014e69a43c931e8e3aa4c02ddedc828e9e59", @generic="a0352a145d32c2e98944e7fcef655eef13e9eea4027c89bf9a5420fa4048be4c74e6474a4829cfb8ce0bf1b4f3e5d59c82d2753bd4931ed52c22a66febdb831cbc3c28e033ed9218b6a5648d7f6dda777003d1c24135b248ef4f87387e047c1bf3806e3ec3b3cada8c15c464f595c982ba29c7ea7feb7ec608225daa356329783d", @typed={0x14, 0xa, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}]}, @nested={0x11c, 0x40, [@typed={0x8, 0x1d, @ipv4}, @generic="fe602f21b1adfe7fba5402d71702c750ea12b3a71b05a9f1adfdf5d12251938b2d333f8890253069cca85a3330b9b58945b28d8a3e1ae7ec5fc4bd8ed08b9eab00fff299a88b5da3b64fdc4cd23126d5a5fd9d66ec58ae53dfe9d57195d858d05dd46af0a2b1f73048a67127e56b367ee45ae7aba6c6fd3a29f33ac0a6943552800b77d5d29d3429419a6e7f3ae653459f1bed5e5a6cfabab291adc64761", @typed={0xc, 0x2b, @u64=0xc8dc}, @generic="b38bc69a54c6256aef27d8c1a8b2252bafd326bd8bd69995c4a44563779bfecce68dcd7756b2dada402ab9f53cb7406cfda9f32f299a844090aa2a9e70d32f6c49dfb2b3760ae396c3ea617f245da38971ce72e1bd", @typed={0x8, 0x39, @u32=0xe2a7}, @typed={0x8, 0x71, @pid=r2}]}]}, 0x1440}, {&(0x7f0000001580)={0x12f4, 0x40, 0x402, 0x70bd26, 0x25dfdbfb, "", [@nested={0xc8, 0x39, [@generic="a12ff49e1a63afaa728a83123a627dd44fcbc4e15ae2558ea94a6927bf2fdd463d770f6e4d8ce34296d134de54ce8bd50def6ca44712c5aa743d5f68b7aaf90362ba7eaa115eee74d495403be05c8004b4df166b84f45b3e7e6f5d8dadc2fdbbc707435338a7b238fc228875744fdf3bc315cf4e16ebaa965628a83993c112acd1dade82f0b949bee647f6b6469b824867cebf15c73cc8b1f214001c7e2051cf0a6f1b14c6e7da98b46359dbf86859db9862039e61d183f520e4be231761304475d2"]}, @generic="4ee38c6aaa1f83c548ffe87e6b34f782811df91116ffb778376eb0cf228a37f5971f1c72e85899a2268145b5c1d577910d921b93020bf2b7470620d8fac96efd76a0ab910d45857dbeaaf2c57946f6656b4ec15e19a689bb2b0f7bca20ed1674e61089cd31db8e5828fb86a070a8c824d6d195d021104fc5402e50939bbff742f213c59d0de6ebc65a6049e0af8cb0d1e703ec123b8298ea343b69d92675eec3555230a86e120e84de0aa42cefedaf8ab78c0d20a8c94e73af78d27683bc6483686cb5", @generic="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", @nested={0x105c, 0x3f, [@typed={0x1004, 0x12, @binary="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"}, @generic="21de4e5be011ad75a0ff6e22a8c1b260d1caf017c6466a8b3a01f6cb05e603bbe38c4e1d09d9ab7563fb06b505a6b05c525c4ea5feec97812e3833c16f005d1f13d5c0c2554c3230c951d6469ecf7043", @generic="986cca"]}]}, 0x12f4}, {&(0x7f0000002880)={0x12c, 0x3f, 0x500, 0x70bd25, 0x25dfdbff, "", [@generic="9ee469930436eea1392b365714e188ceee7f4e15e92e784c0e42dcd229e9a138ca4c1f0994dbe3d29c5d8c8ab7318d4663d3b6a0753450eb8fc8843ef2f6ffd7", @nested={0xdc, 0x5d, [@typed={0x8, 0x18, @str='GPL\x00'}, @generic="55fd1b98f27c7c6823ca102689dd66824309e093d9c38a2908cce18ef761d39f4cf4f81709c42e49ecfc59df15f33f05fa850a8e7eab9c862016c6dd1f2ac34382c4e0eec017911f96c2c21b8889abd6657df092dc9b49ddabf687c9f6138eb1ed3a26b81f584f44a4f2c9c3ff671514ad7c8f61bf1b71a64a961df2631c0c12ee4a8d427212131a080a4a8fdf1bdc71d2e491124ab0590745e154e1fd7b068f4cef45bbbb3bf7ab74a97b2d2e20069ce14eb9411e86278483eabe5c3f5b1084df588b72ba67628874e1", @typed={0x4, 0x4a}]}]}, 0x12c}, {&(0x7f0000002a40)={0x2c4, 0x33, 0x4, 0x70bd28, 0x25dfdbfd, "", [@typed={0x14, 0x87, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}, @typed={0x8, 0x66, @pid=r3}, @nested={0x88, 0xb, [@generic="2b175b05f8b35ffa97d2f0f092cd855a438ee8274980e2f1634dd3666884937538be943f0f905b1fbb175f3144f19bc28f77a57c61434ec33d892f51c8b0d3bb294c0c65c170e5943b4b27a237dd566a716589dac9ba20bc76305147f1cf9ec22b4bc44f7c276924995dda975c34cc99e92384bf88bb08796c38a0ce3c429cd5a8d8"]}, @generic="4147d820e6e37ec272d83d62c494e76c0f70b03032d4d063ee3d9c5e3f0b1da8b3bb1e7fcb40b82f98b5184dc707999251c5b7bc970c007d58d254530cd00fcf479d7aa487cdd0057f064a361238cf368690b2b3207f5d1af3e19c3fd1a2ebe219e02465e003cf5f040e562f4c1b56efa30da8bb9d50576973ce28a298dc15ac7a5120e6ed9cd25bada5340eb5ce8d923f1632b0384724407d5d4dde8280df272170efaca00c4298e46af4c92c39ba943a6001d23dbd2a86420c33b40bf40d9f2b54744d1bf0b294d1916795ecd6356e8e52748c9c1fc7ee2bd66d743594d3c7c514ffd2", @nested={0x48, 0x31, [@typed={0x8, 0xc, @pid=r4}, @typed={0x4, 0x3f}, @typed={0x38, 0x81, @binary="75946cfd98905cbb14d88b5fd934af9747e97edf7d9f5c79b1b2683ed0ae829cd852a77a26f88a5fdb21a29c9b5496d7737ed2"}]}, @nested={0xe4, 0x26, [@typed={0xc, 0x75, @u64=0x100000000}, @generic="e0d4261c3e69ac23bbc5f9276ecdd73d64c1f088afb78f811096aea3cbd01905e54bd66479ba2d6e2e95e83317069f940fd20222333171c5f7879dcfaf81f228087248b0b89681bc99e1265922671dbdee45116f18c3dd5ffb3e920dd9bca7e867fb2ee3ea6d09d2e6e017369573f2387d4393cbbb6b53bc7ff1f1cfe8cd88ea467c8db19574851afb5d5ddd54a9b6784ca5cfd7dbd5eb13ebd616f7dbcab2a95ea3f6650fb5e3a432fe7c16e7a50ebbad3148ac2608765c7bbeaae3de", @typed={0xc, 0x80, @u64=0x401}, @typed={0x8, 0x2a, @pid=r5}]}]}, 0x2c4}], 0x4, &(0x7f0000003040)=[@cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}], 0x100, 0x20008000}, 0x4000040) 2033/05/18 03:35:39 executing program 6: r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0xb9, 0x200000) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) socket$l2tp(0x18, 0x1, 0x1) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x7fff, 0x8000) io_setup(0x1000, &(0x7f0000000040)=0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) sendmsg$can_bcm(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x1d}, 0x10, &(0x7f0000000580)={&(0x7f0000000500)={0x5, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "be8ac2688e3f1b1b"}}, 0x48}, 0x1}, 0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="070000008cf46cfde19a4e3bcfbdbedee32e68b3a251fd2cfd09684d9c7afae320bbf22a2ce3cb58fa63c42a238cb85f1023fa813c9a0e46", 0x38}]) 2033/05/18 03:35:39 executing program 2 (fault-call:4 fault-nth:4): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) [ 201.284594] FAULT_INJECTION: forcing a failure. [ 201.284594] name failslab, interval 1, probability 0, space 0, times 0 [ 201.295936] CPU: 1 PID: 12451 Comm: syz-executor2 Not tainted 4.16.0+ #1 [ 201.302783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.312138] Call Trace: [ 201.314737] dump_stack+0x1b9/0x294 [ 201.318385] ? dump_stack_print_info.cold.2+0x52/0x52 [ 201.323586] ? graph_lock+0x170/0x170 [ 201.327402] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 201.332614] should_fail.cold.4+0xa/0x1a [ 201.336694] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 201.341808] ? find_held_lock+0x36/0x1c0 [ 201.345884] ? graph_lock+0x170/0x170 [ 201.349697] ? debug_check_no_locks_freed+0x310/0x310 [ 201.354895] ? find_held_lock+0x36/0x1c0 [ 201.358970] ? __lock_is_held+0xb5/0x140 [ 201.363051] ? check_same_owner+0x320/0x320 [ 201.367385] ? rcu_note_context_switch+0x710/0x710 [ 201.372328] __should_failslab+0x124/0x180 [ 201.376572] should_failslab+0x9/0x14 [ 201.380381] kmem_cache_alloc_trace+0x2cb/0x780 [ 201.385072] snd_seq_port_connect+0xdc/0x710 [ 201.389490] ? snd_seq_get_port_info+0x4f0/0x4f0 [ 201.394251] ? mark_held_locks+0xc9/0x160 [ 201.398404] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 201.402994] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 201.408110] ? kasan_check_write+0x14/0x20 [ 201.412351] ? do_raw_read_unlock+0x3f/0x60 [ 201.416679] ? _raw_read_unlock+0x22/0x30 [ 201.420840] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 201.426388] ? check_subscription_permission.isra.7+0x154/0x240 2033/05/18 03:35:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xffffffffffffffb5, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) [ 201.432462] snd_seq_ioctl_subscribe_port+0x1d8/0x310 [ 201.437660] ? snd_seq_ioctl_unsubscribe_port+0x310/0x310 [ 201.443213] snd_seq_kernel_client_ctl+0x15a/0x190 [ 201.448158] snd_seq_oss_midi_open+0x4ea/0x900 [ 201.448987] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 201.452745] ? snd_seq_oss_midi_setup+0x50/0x50 [ 201.452777] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 201.452794] ? fput+0x130/0x1a0 [ 201.459907] FAT-fs (loop5): Filesystem has been set read-only [ 201.464538] snd_seq_oss_synth_reset+0x471/0x9f0 2033/05/18 03:35:39 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) [ 201.464558] ? snd_seq_oss_synth_cleanup+0x480/0x480 [ 201.464573] ? fcntl_setlk+0x1020/0x1020 [ 201.464587] ? fsnotify+0x415/0x1100 [ 201.464624] snd_seq_oss_reset+0x79/0x2b0 [ 201.500957] ? free_info_entries+0x3b/0x3b [ 201.505195] snd_seq_oss_release+0x73/0x130 [ 201.509520] odev_release+0x52/0x70 [ 201.513149] __fput+0x34d/0x890 [ 201.516442] ? fput+0x1a0/0x1a0 [ 201.519727] ? _raw_spin_unlock_irq+0x27/0x70 [ 201.524232] ____fput+0x15/0x20 [ 201.527521] task_work_run+0x1e4/0x290 [ 201.531415] ? task_work_cancel+0x240/0x240 [ 201.535750] ? exit_to_usermode_loop+0x87/0x310 [ 201.540440] exit_to_usermode_loop+0x2bd/0x310 [ 201.545034] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 201.549883] ? do_syscall_64+0xb7/0x9d0 [ 201.553866] do_syscall_64+0x792/0x9d0 [ 201.557196] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 201.557747] ? vmalloc_sync_all+0x30/0x30 [ 201.557762] ? _raw_spin_unlock_irq+0x27/0x70 [ 201.557780] ? finish_task_switch+0x1ca/0x810 [ 201.557798] ? syscall_return_slowpath+0x5c0/0x5c0 2033/05/18 03:35:39 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/fi:e0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 201.582882] ? syscall_return_slowpath+0x30f/0x5c0 [ 201.587824] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 201.593202] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 201.598055] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 201.603244] RIP: 0033:0x455319 [ 201.606437] RSP: 002b:00007f63362dcc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 201.614149] RAX: 0000000000000015 RBX: 00007f63362dd6d4 RCX: 0000000000455319 [ 201.621416] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000000014 [ 201.628689] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2033/05/18 03:35:39 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000340)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000000040)="0401000000190998b009cb396da10000009054b932ce5b73832fdbaf6e22d8707324ed7508d79233fbe8e1fd24deabff42c6584662447eda2db2e72e977e149442627a0492f0425669acea5c826b5581e396e18192c77b0cc001def7437a509af949a5f1658baaa86c245cac7ce773c0bffc61f0e500518edab882bde219d98a85596af607ebfad07ffb42e61159d175bb0fcdfeb909dc244cebe87333a58c7eb3f6666cfd8546edb7bb9515f8ce2846318ddb8b5c9ea84b2fe1b366a8971bab02de75eb75db63b4a4428577cd52b73388b5c01e", 0xd4, 0x0, &(0x7f0000005fe4)={0xa, 0x800000894f, 0x4, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) [ 201.635960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 201.643230] R13: 000000000000006c R14: 00000000006f3ac0 R15: 0000000000000004 [ 201.657926] binder: 12462:12470 IncRefs 0 refcount change on invalid ref 0 ret -22 2033/05/18 03:35:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0x2200, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000540)=0x14) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000580)={r2, 0x1, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 2033/05/18 03:35:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="056304401cc3fe897f811591cc43051b59e7909e3fcfedb88fcb4f9395d6b0f5424efea7194e4a7ba81e1aa1bf150785eac2bc04bea7cc01105abf129ccdc653086bf50b8e2f6b08a8e90ef8976c3156b82eb6e3a1f61255dfa0e07ad64f266bd3a8234cfda58968879d0e05c31206ee234602fad2c059361ed29d56be6ec5507ffab44ee3"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:39 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x0, 0x0) dup2(r0, r1) 2033/05/18 03:35:39 executing program 6: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000, 0x181) connect$rds(r0, &(0x7f0000000180)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1040000000000004, 0x400000a9}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000240)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f00000001c0)={0xffffffffffffffff, 0x4, 0x9962, 0x4, 0xfffffffffffffffb}) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0xfee1dead, 0x16041998, 0x1, &(0x7f0000000000)) [ 201.789789] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 201.796982] FAT-fs (loop5): Filesystem has been set read-only [ 201.842658] binder: 12488:12491 Acquire 1 refcount change on invalid ref -1979792612 ret -22 [ 201.892789] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 201.907986] binder: 12488:12491 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 201.934562] binder: 12488:12491 Acquire 1 refcount change on invalid ref -1979792612 ret -22 2033/05/18 03:35:40 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='h\nsplus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:35:40 executing program 2 (fault-call:4 fault-nth:5): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:35:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept4$ipx(r0, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x80800) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000280)={'ip_vti0\x00', @ifru_ivalue=0xdb6e}) mkdirat(r1, &(0x7f0000000600)='./file0\x00', 0x14) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0xd4, r2, 0x0, 0x70bd2d, 0x25dfdbff, {0x7}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote={0xac, 0x14, 0x14, 0xbb}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x847}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x68}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x69d2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000005c0)=0xffffffffffff71f6, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e23, 0x319, @dev={0xfe, 0x80, [], 0x1a}, 0x2}}, 0x0, 0x6, 0x6, 0x9, 0x8}, &(0x7f0000000540)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000580)={r3, 0x8, 0x30}, 0xc) getsockopt$inet_dccp_int(r1, 0x21, 0x80000000000000b, &(0x7f0000000080), &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x40, @mcast2={0xff, 0x2, [], 0x1}, 0x270}}, [0x10000, 0x19e0, 0x7, 0x1, 0x0, 0x7, 0xfffffffffffffffa, 0xfff, 0x5a0cb9d2, 0x8, 0x4a, 0x5, 0x7fff, 0x8, 0x7ff]}, &(0x7f00000002c0)=0x100) 2033/05/18 03:35:40 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/fi\\e0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:40 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x0, 0x0) dup2(r0, r1) 2033/05/18 03:35:40 executing program 6: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f00000000c0)={0x8, 0x4, 0x101, 0x400}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f000010aff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5405, 0x641) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000000)=""/97) ioctl$TIOCCBRK(r2, 0x5428) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000100)=""/58, &(0x7f0000000140)=0x3a) 2033/05/18 03:35:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:40 executing program 0: mmap(&(0x7f0000009000/0xc00000)=nil, 0xc00000, 0x5, 0x2c031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x3, &(0x7f0000dbc000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0xffffffb5}, [], {0x95}}, &(0x7f0000e6bffc)='GPL\x00', 0x0, 0x99, &(0x7f0000000000)=""/153}, 0x48) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) r3 = getpgid(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000029c0)={0x0}, &(0x7f0000002a00)=0xc) r5 = gettid() r6 = getpgid(r4) mmap$binder(&(0x7f00006bd000/0x3000)=nil, 0x3000, 0xc9198ddc9caca880, 0x30011, r1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002d80)={0x0, 0x0}, &(0x7f0000002dc0)=0xc) r8 = getegid() ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000002e00)=0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f00000031c0)={0x8001, 0x4, [0x7ff]}) lstat(&(0x7f0000002e40)='./file0\x00', &(0x7f0000002e80)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getgid() r12 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000002f00)={0x0, 0x0}, &(0x7f0000002f40)=0xc) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000003180)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) getresgid(&(0x7f0000002f80), &(0x7f0000002fc0)=0x0, &(0x7f0000003000)) sendmsg$netlink(r1, &(0x7f0000003140)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfe}, 0xc, &(0x7f0000002d40)=[{&(0x7f0000000140)={0x1440, 0x41, 0x1, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x1314, 0x2, [@typed={0x8, 0x4f, @u32=0x33f}, @generic="454fdc42fe1a04a0219ffcc7bebab1e2c8cf2ca420dbd7793b4ea762fccb2eac83d1cdd72f48ed21d48e8b029bb75789b2b2f9c6df1e07ad191df9b7359adb88166dba10075637fe147660e6beb92742fc4d15f9db184d75e80a9a3507569d0ac7212b1194f0816c448bfffbb3db31faca3fbbf10909450ae7b1907f14d399da036736a9c92d7c4ca091597635142faca153a27e2ccfc7866fd9fa48277982d5f8723983dddf72b72bbeba1ffb5130e0a8941c198e10a23a2b88812f949be78f4bd86a8cff983821d423bf950b97d4663eaafdba75aa09ee7ac5936a8a099c0190af5056be7b3f3ce12bf81358358d45807a4b2c964f2095", @generic="e3c51fcb9f420bed573a6e7c95651ce509842f49ba69a6ba1bc4d476f72c5d59e8370b5d5df4c1e0dd717f0380297ae347938a8219638777e2da2dfc559458fd7fa26983a0ab70a76831a2a8f0f2d5a1263802c5c8e6c6ca12d113ba022f228c903d00be1762d197a884885c6f3749b08dbd70a677d07d872dfe4d34da8df28e55170ce30f02b7cc875d6cd3275c8ac6cfb56ee10d0a1a013d5342198021b6e81ea2bb1ef7899980", @typed={0x8, 0x2, @fd=r0}, @generic="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", @generic="1f6134d64a0ea163cf2962e98924278b6c8944f88c6d9a592d46ad8507088de80c89c90a3d249abb4b2a28aff06ad6ac02850b1346aa333f2918ac38673cfe0f47f1b12cdc4db26cb4265da5c1482332df0fdd65f18f39a13054590716acb6ea94e5e69664401febdf1851473288d5cd8ce6ab4d0acf8170e1ef6fc40afdbd4b75fe371c7ee615f5d09d466820acc4b2764c32ae088e9be3fc31e3a07e9058f332e793e40cc4da201f102bd7779a2e347a53dd86f0854a014e69a43c931e8e3aa4c02ddedc828e9e59", @generic="a0352a145d32c2e98944e7fcef655eef13e9eea4027c89bf9a5420fa4048be4c74e6474a4829cfb8ce0bf1b4f3e5d59c82d2753bd4931ed52c22a66febdb831cbc3c28e033ed9218b6a5648d7f6dda777003d1c24135b248ef4f87387e047c1bf3806e3ec3b3cada8c15c464f595c982ba29c7ea7feb7ec608225daa356329783d", @typed={0x14, 0xa, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}]}, @nested={0x11c, 0x40, [@typed={0x8, 0x1d, @ipv4}, @generic="fe602f21b1adfe7fba5402d71702c750ea12b3a71b05a9f1adfdf5d12251938b2d333f8890253069cca85a3330b9b58945b28d8a3e1ae7ec5fc4bd8ed08b9eab00fff299a88b5da3b64fdc4cd23126d5a5fd9d66ec58ae53dfe9d57195d858d05dd46af0a2b1f73048a67127e56b367ee45ae7aba6c6fd3a29f33ac0a6943552800b77d5d29d3429419a6e7f3ae653459f1bed5e5a6cfabab291adc64761", @typed={0xc, 0x2b, @u64=0xc8dc}, @generic="b38bc69a54c6256aef27d8c1a8b2252bafd326bd8bd69995c4a44563779bfecce68dcd7756b2dada402ab9f53cb7406cfda9f32f299a844090aa2a9e70d32f6c49dfb2b3760ae396c3ea617f245da38971ce72e1bd", @typed={0x8, 0x39, @u32=0xe2a7}, @typed={0x8, 0x71, @pid=r2}]}]}, 0x1440}, {&(0x7f0000001580)={0x12f4, 0x40, 0x402, 0x70bd26, 0x25dfdbfb, "", [@nested={0xc8, 0x39, [@generic="a12ff49e1a63afaa728a83123a627dd44fcbc4e15ae2558ea94a6927bf2fdd463d770f6e4d8ce34296d134de54ce8bd50def6ca44712c5aa743d5f68b7aaf90362ba7eaa115eee74d495403be05c8004b4df166b84f45b3e7e6f5d8dadc2fdbbc707435338a7b238fc228875744fdf3bc315cf4e16ebaa965628a83993c112acd1dade82f0b949bee647f6b6469b824867cebf15c73cc8b1f214001c7e2051cf0a6f1b14c6e7da98b46359dbf86859db9862039e61d183f520e4be231761304475d2"]}, @generic="4ee38c6aaa1f83c548ffe87e6b34f782811df91116ffb778376eb0cf228a37f5971f1c72e85899a2268145b5c1d577910d921b93020bf2b7470620d8fac96efd76a0ab910d45857dbeaaf2c57946f6656b4ec15e19a689bb2b0f7bca20ed1674e61089cd31db8e5828fb86a070a8c824d6d195d021104fc5402e50939bbff742f213c59d0de6ebc65a6049e0af8cb0d1e703ec123b8298ea343b69d92675eec3555230a86e120e84de0aa42cefedaf8ab78c0d20a8c94e73af78d27683bc6483686cb5", @generic="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", @nested={0x105c, 0x3f, [@typed={0x1004, 0x12, @binary="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"}, @generic="21de4e5be011ad75a0ff6e22a8c1b260d1caf017c6466a8b3a01f6cb05e603bbe38c4e1d09d9ab7563fb06b505a6b05c525c4ea5feec97812e3833c16f005d1f13d5c0c2554c3230c951d6469ecf7043", @generic="986cca"]}]}, 0x12f4}, {&(0x7f0000002880)={0x12c, 0x3f, 0x500, 0x70bd25, 0x25dfdbff, "", [@generic="9ee469930436eea1392b365714e188ceee7f4e15e92e784c0e42dcd229e9a138ca4c1f0994dbe3d29c5d8c8ab7318d4663d3b6a0753450eb8fc8843ef2f6ffd7", @nested={0xdc, 0x5d, [@typed={0x8, 0x18, @str='GPL\x00'}, @generic="55fd1b98f27c7c6823ca102689dd66824309e093d9c38a2908cce18ef761d39f4cf4f81709c42e49ecfc59df15f33f05fa850a8e7eab9c862016c6dd1f2ac34382c4e0eec017911f96c2c21b8889abd6657df092dc9b49ddabf687c9f6138eb1ed3a26b81f584f44a4f2c9c3ff671514ad7c8f61bf1b71a64a961df2631c0c12ee4a8d427212131a080a4a8fdf1bdc71d2e491124ab0590745e154e1fd7b068f4cef45bbbb3bf7ab74a97b2d2e20069ce14eb9411e86278483eabe5c3f5b1084df588b72ba67628874e1", @typed={0x4, 0x4a}]}]}, 0x12c}, {&(0x7f0000002a40)={0x2c4, 0x33, 0x4, 0x70bd28, 0x25dfdbfd, "", [@typed={0x14, 0x87, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}, @typed={0x8, 0x66, @pid=r3}, @nested={0x88, 0xb, [@generic="2b175b05f8b35ffa97d2f0f092cd855a438ee8274980e2f1634dd3666884937538be943f0f905b1fbb175f3144f19bc28f77a57c61434ec33d892f51c8b0d3bb294c0c65c170e5943b4b27a237dd566a716589dac9ba20bc76305147f1cf9ec22b4bc44f7c276924995dda975c34cc99e92384bf88bb08796c38a0ce3c429cd5a8d8"]}, @generic="4147d820e6e37ec272d83d62c494e76c0f70b03032d4d063ee3d9c5e3f0b1da8b3bb1e7fcb40b82f98b5184dc707999251c5b7bc970c007d58d254530cd00fcf479d7aa487cdd0057f064a361238cf368690b2b3207f5d1af3e19c3fd1a2ebe219e02465e003cf5f040e562f4c1b56efa30da8bb9d50576973ce28a298dc15ac7a5120e6ed9cd25bada5340eb5ce8d923f1632b0384724407d5d4dde8280df272170efaca00c4298e46af4c92c39ba943a6001d23dbd2a86420c33b40bf40d9f2b54744d1bf0b294d1916795ecd6356e8e52748c9c1fc7ee2bd66d743594d3c7c514ffd2", @nested={0x48, 0x31, [@typed={0x8, 0xc, @pid=r4}, @typed={0x4, 0x3f}, @typed={0x38, 0x81, @binary="75946cfd98905cbb14d88b5fd934af9747e97edf7d9f5c79b1b2683ed0ae829cd852a77a26f88a5fdb21a29c9b5496d7737ed2"}]}, @nested={0xe4, 0x26, [@typed={0xc, 0x75, @u64=0x100000000}, @generic="e0d4261c3e69ac23bbc5f9276ecdd73d64c1f088afb78f811096aea3cbd01905e54bd66479ba2d6e2e95e83317069f940fd20222333171c5f7879dcfaf81f228087248b0b89681bc99e1265922671dbdee45116f18c3dd5ffb3e920dd9bca7e867fb2ee3ea6d09d2e6e017369573f2387d4393cbbb6b53bc7ff1f1cfe8cd88ea467c8db19574851afb5d5ddd54a9b6784ca5cfd7dbd5eb13ebd616f7dbcab2a95ea3f6650fb5e3a432fe7c16e7a50ebbad3148ac2608765c7bbeaae3de", @typed={0xc, 0x80, @u64=0x401}, @typed={0x8, 0x2a, @pid=r5}]}]}, 0x2c4}], 0x4, &(0x7f0000003040)=[@cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}], 0x100, 0x20008000}, 0x4000040) [ 202.225765] FAULT_INJECTION: forcing a failure. [ 202.225765] name failslab, interval 1, probability 0, space 0, times 0 [ 202.237107] CPU: 1 PID: 12522 Comm: syz-executor2 Not tainted 4.16.0+ #1 [ 202.243951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 202.246272] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 202.253301] Call Trace: [ 202.253328] dump_stack+0x1b9/0x294 [ 202.253351] ? dump_stack_print_info.cold.2+0x52/0x52 [ 202.253366] ? graph_lock+0x170/0x170 [ 202.253384] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 202.253407] should_fail.cold.4+0xa/0x1a [ 202.260526] FAT-fs (loop5): Filesystem has been set read-only [ 202.263075] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 202.263091] ? find_held_lock+0x36/0x1c0 [ 202.263108] ? graph_lock+0x170/0x170 [ 202.296517] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 202.299902] ? do_raw_read_unlock+0x3f/0x60 [ 202.299928] ? find_held_lock+0x36/0x1c0 [ 202.299949] ? __lock_is_held+0xb5/0x140 2033/05/18 03:35:40 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/fiue0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 202.299979] ? check_same_owner+0x320/0x320 [ 202.299999] ? rcu_note_context_switch+0x710/0x710 [ 202.332499] __should_failslab+0x124/0x180 [ 202.336744] should_failslab+0x9/0x14 [ 202.340550] kmem_cache_alloc_trace+0x2cb/0x780 [ 202.345243] snd_seq_port_connect+0xdc/0x710 [ 202.349662] ? snd_seq_get_port_info+0x4f0/0x4f0 [ 202.354426] ? mark_held_locks+0xc9/0x160 [ 202.358579] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 202.363168] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 202.368282] ? kasan_check_write+0x14/0x20 [ 202.372523] ? do_raw_read_unlock+0x3f/0x60 [ 202.376850] ? _raw_read_unlock+0x22/0x30 [ 202.381003] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 202.386023] ? check_subscription_permission.isra.7+0x154/0x240 [ 202.392093] snd_seq_ioctl_subscribe_port+0x1d8/0x310 [ 202.397291] ? snd_seq_ioctl_unsubscribe_port+0x310/0x310 [ 202.402835] snd_seq_kernel_client_ctl+0x15a/0x190 [ 202.407771] snd_seq_oss_midi_open+0x720/0x900 [ 202.412357] ? snd_seq_oss_midi_setup+0x50/0x50 [ 202.417043] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 202.422579] ? fput+0x130/0x1a0 2033/05/18 03:35:40 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0xc0c00, 0x0) openat$cgroup_type(r0, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000498000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000202ffff00000000000000000000000108000600b4000000cfff51a425e98aa9c7c2c8af889baaffffff5fa05b9dd29fd3013a0fbc45879a7069d699cee80300000000000000c66209e6eb63d2e9"], 0xfffffffffffffe96}, 0x1}, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$TIOCLINUX5(r2, 0x541c, &(0x7f0000000080)={0x5, 0xfffffffffffffffd, 0x6, 0x6, 0x100000001}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000100)={0x2000000000000000, 0x2, 0x2, 0x8, 0x8}) [ 202.425865] snd_seq_oss_synth_reset+0x471/0x9f0 [ 202.430626] ? snd_seq_oss_synth_cleanup+0x480/0x480 [ 202.435730] ? fcntl_setlk+0x1020/0x1020 [ 202.439797] ? fsnotify+0x415/0x1100 [ 202.443520] snd_seq_oss_reset+0x79/0x2b0 [ 202.447672] ? free_info_entries+0x3b/0x3b [ 202.451912] snd_seq_oss_release+0x73/0x130 [ 202.456240] odev_release+0x52/0x70 [ 202.459873] __fput+0x34d/0x890 [ 202.463162] ? fput+0x1a0/0x1a0 [ 202.463629] binder: BINDER_SET_CONTEXT_MGR already set [ 202.466450] ? _raw_spin_unlock_irq+0x27/0x70 [ 202.466471] ____fput+0x15/0x20 [ 202.466485] task_work_run+0x1e4/0x290 [ 202.466503] ? task_work_cancel+0x240/0x240 [ 202.487698] ? exit_to_usermode_loop+0x87/0x310 [ 202.492383] exit_to_usermode_loop+0x2bd/0x310 [ 202.493058] binder: 12527:12529 ioctl 40046207 0 returned -16 [ 202.496969] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 202.496988] ? do_syscall_64+0xb7/0x9d0 [ 202.497011] do_syscall_64+0x792/0x9d0 [ 202.497027] ? vmalloc_sync_all+0x30/0x30 [ 202.497041] ? _raw_spin_unlock_irq+0x27/0x70 2033/05/18 03:35:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0563049975dee8b80c8640"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) [ 202.497058] ? finish_task_switch+0x1ca/0x810 [ 202.497077] ? syscall_return_slowpath+0x5c0/0x5c0 [ 202.519802] binder: 12527:12542 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 202.524214] ? syscall_return_slowpath+0x30f/0x5c0 [ 202.524237] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 202.524261] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 202.524283] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 202.524295] RIP: 0033:0x455319 [ 202.524303] RSP: 002b:00007f63362dcc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 202.572527] RAX: 0000000000000015 RBX: 00007f63362dd6d4 RCX: 0000000000455319 [ 202.579799] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000000014 [ 202.587073] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 202.594345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 202.600674] binder: 12544:12545 unknown command -1727765755 [ 202.601614] R13: 000000000000006c R14: 00000000006f3ac0 R15: 0000000000000005 [ 202.623310] binder: 12544:12545 ioctl c0306201 20007000 returned -22 2033/05/18 03:35:40 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x9}, 0x12) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x6, 0x4, 0x2100000001, 0x0, r0}, 0x191) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x1, 0x0, 0x296, 0x10, 0xffffffffffffffff, 0x1a}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00005f1000)={r1, &(0x7f0000eed000), &(0x7f0000b88000)="13"}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r1, &(0x7f00000000c0)}, 0x10) 2033/05/18 03:35:40 executing program 2 (fault-call:4 fault-nth:6): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:35:40 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x0, 0x0) dup2(r0, r1) 2033/05/18 03:35:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10000, 0x0) r1 = dup2(r0, r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7f, @ipv4={[], [0xff, 0xff], @rand_addr=0x2}, 0x40}, @in6={0xa, 0x4e23, 0x5df63d6f, @empty, 0x1}, @in6={0xa, 0x4e24, 0x9, @loopback={0x0, 0x1}, 0x931a}], 0x54) ioctl$KVM_CREATE_VM(r0, 0x4008ae06, 0x0) [ 202.698685] binder: 12544:12545 unknown command -1727765755 [ 202.719362] binder: 12544:12545 ioctl c0306201 20007000 returned -22 2033/05/18 03:35:40 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) r1 = semget(0x0, 0x3, 0x740) semctl$IPC_RMID(r1, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000000)="230000005a0091c90600000000ad83bc0a00000000d40000001d8568581ba396d18873", 0x23}], 0x1}, 0x0) [ 202.769589] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 202.776859] FAT-fs (loop5): Filesystem has been set read-only [ 202.801642] FAULT_INJECTION: forcing a failure. [ 202.801642] name failslab, interval 1, probability 0, space 0, times 0 [ 202.812959] CPU: 1 PID: 12563 Comm: syz-executor2 Not tainted 4.16.0+ #1 [ 202.819812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 202.829170] Call Trace: [ 202.831770] dump_stack+0x1b9/0x294 [ 202.835415] ? dump_stack_print_info.cold.2+0x52/0x52 [ 202.840611] ? graph_lock+0x170/0x170 [ 202.844419] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 202.849622] should_fail.cold.4+0xa/0x1a [ 202.853704] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 202.858816] ? find_held_lock+0x36/0x1c0 [ 202.862888] ? graph_lock+0x170/0x170 [ 202.866701] ? debug_check_no_locks_freed+0x310/0x310 [ 202.871900] ? find_held_lock+0x36/0x1c0 [ 202.875981] ? __lock_is_held+0xb5/0x140 [ 202.880065] ? check_same_owner+0x320/0x320 [ 202.884405] ? rcu_note_context_switch+0x710/0x710 [ 202.884934] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 202.889355] __should_failslab+0x124/0x180 [ 202.889376] should_failslab+0x9/0x14 [ 202.889392] kmem_cache_alloc_trace+0x2cb/0x780 [ 202.889421] snd_seq_port_connect+0xdc/0x710 [ 202.889439] ? snd_seq_get_port_info+0x4f0/0x4f0 [ 202.918360] ? mark_held_locks+0xc9/0x160 [ 202.922514] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 202.927103] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 202.932206] ? kasan_check_write+0x14/0x20 [ 202.936431] ? do_raw_read_unlock+0x3f/0x60 [ 202.940746] ? _raw_read_unlock+0x22/0x30 [ 202.944886] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 202.950415] ? check_subscription_permission.isra.7+0x154/0x240 [ 202.956465] snd_seq_ioctl_subscribe_port+0x1d8/0x310 [ 202.961649] ? snd_seq_ioctl_unsubscribe_port+0x310/0x310 [ 202.967177] snd_seq_kernel_client_ctl+0x15a/0x190 [ 202.972099] snd_seq_oss_midi_open+0x4ea/0x900 [ 202.976671] ? snd_seq_oss_midi_setup+0x50/0x50 [ 202.981341] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 202.986864] ? fput+0x130/0x1a0 [ 202.990136] snd_seq_oss_synth_reset+0x471/0x9f0 [ 202.994885] ? snd_seq_oss_synth_cleanup+0x480/0x480 [ 202.999975] ? fcntl_setlk+0x1020/0x1020 [ 203.004029] ? fsnotify+0x415/0x1100 [ 203.007741] snd_seq_oss_reset+0x79/0x2b0 [ 203.011879] ? free_info_entries+0x3b/0x3b [ 203.016101] snd_seq_oss_release+0x73/0x130 [ 203.020412] odev_release+0x52/0x70 [ 203.024032] __fput+0x34d/0x890 [ 203.027303] ? fput+0x1a0/0x1a0 [ 203.030577] ? _raw_spin_unlock_irq+0x27/0x70 [ 203.035065] ____fput+0x15/0x20 [ 203.038334] task_work_run+0x1e4/0x290 [ 203.042213] ? task_work_cancel+0x240/0x240 [ 203.046528] ? exit_to_usermode_loop+0x87/0x310 [ 203.051193] exit_to_usermode_loop+0x2bd/0x310 [ 203.055765] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 203.060595] ? do_syscall_64+0xb7/0x9d0 [ 203.064564] do_syscall_64+0x792/0x9d0 [ 203.068438] ? vmalloc_sync_all+0x30/0x30 [ 203.072576] ? kasan_check_write+0x14/0x20 [ 203.076805] ? syscall_return_slowpath+0x5c0/0x5c0 [ 203.081725] ? syscall_return_slowpath+0x30f/0x5c0 [ 203.086647] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 203.092007] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 203.096851] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 203.102032] RIP: 0033:0x455319 [ 203.105218] RSP: 002b:00007f63362dcc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 203.112915] RAX: 0000000000000015 RBX: 00007f63362dd6d4 RCX: 0000000000455319 [ 203.120178] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000000014 [ 203.127431] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 203.134687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 203.141940] R13: 000000000000006c R14: 00000000006f3ac0 R15: 0000000000000006 2033/05/18 03:35:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0xfffffd78, 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept(r0, &(0x7f00000003c0), &(0x7f0000000100)=0x80) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000280)=0xffffffff, 0xfffffffffffffe42) r2 = fcntl$getown(r0, 0x9) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) rt_tgsigqueueinfo(r2, r3, 0x22, &(0x7f0000000440)={0x38, 0x80000001, 0x3ff, 0x1}) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)=@mpls_newroute={0x1c, 0x18, 0x409, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x8001}}, 0x1c}, 0x1}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x7, &(0x7f0000000480)=""/194) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x80, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r4, 0x28, 0x6, &(0x7f00000000c0)={0x0, 0x7530}, 0x10) 2033/05/18 03:35:41 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='h%splus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:35:41 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000540), 0x80000) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x8000008010500c, &(0x7f0000006000)) r3 = getpgrp(0x0) fcntl$getownex(r1, 0x10, &(0x7f00000006c0)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000880)=0x5) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e23, 0x6, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x101}}, 0x7fffffff, 0x0, 0xffff, 0x508d, 0x14}, &(0x7f0000000980)=0x98) kcmp(r3, r4, 0x7, r0, r1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000580)={0x0, 0x0, 0x20, 0x401}, &(0x7f00000005c0)=0x18) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000600)={r5, 0x0, 0x3, 0x0, 0x400}, 0x14) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000700)={0x6, 0xf765, 0x1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000280)=""/207, 0xcf}, {&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000180)=""/30, 0x1e}], 0x4, 0x0, 0x0, 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f00000004c0)={0x0, 0x0, 0x3, 0x7}, 0x10) sendto$inet(r0, &(0x7f0000000040)='V', 0x1, 0x0, &(0x7f0000000140)={0x2, 0x0, @rand_addr}, 0x10) r8 = syz_open_dev$amidi(&(0x7f00000007c0)='/dev/amidi#\x00', 0x4, 0x8b8e2a3caf8f5903) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r8, 0xc0045540, &(0x7f0000000800)=0x6) ioctl$SNDRV_TIMER_IOCTL_START(r8, 0x54a0) getsockname$inet(r0, &(0x7f0000000740)={0x0, 0x0, @broadcast}, &(0x7f0000000780)=0x10) getitimer(0x2, &(0x7f00000009c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f0000000640), &(0x7f0000000680)=0x4) sendto$inet(r0, &(0x7f0000d7cfcb), 0xff31, 0x0, &(0x7f0000893ff0)={0x2}, 0x10) ioctl$DRM_IOCTL_GET_UNIQUE(r8, 0xc0106401, &(0x7f0000000840)={0xa6, &(0x7f0000000ac0)=""/166}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'syz_tun\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000400)="d7", 0x1}], 0x1) 2033/05/18 03:35:41 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/fi%e0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:41 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(0xffffffffffffffff, r1) 2033/05/18 03:35:41 executing program 2 (fault-call:4 fault-nth:7): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:35:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10}, 0xfffffdac, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000180001030000000000007ac32802a700000a000000000000000000000008001500060000000800160004858fe39a73e4d5cce840c9379e226988000000000000000000"], 0x1}, 0x1}, 0x48804) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}) r1 = socket(0x15, 0x5, 0x5) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x4, 0x30, 0x8, 0x3}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={r2, @in={{0x2, 0x4e24}}, 0x7, 0x5, 0xa912, 0x1f, 0x4}, 0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e23, 0xa95, @mcast2={0xff, 0x2, [], 0x1}, 0x400}}, 0x1f, 0xff}, &(0x7f00000002c0)=0x90) [ 203.275333] binder: 12595:12598 unknown command 0 2033/05/18 03:35:41 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, 0xffffffffffffffff) 2033/05/18 03:35:41 executing program 1: perf_event_open(&(0x7f000025c000)={0x4000000002, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) listen(0xffffffffffffffff, 0x6a) fcntl$getflags(r0, 0x40b) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0], &(0x7f0000000180)=0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x7, 0x1, 0x0, 0x0, 0x100000001}, 0x14) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000580)={0x0, 0xea79, 0x30}, &(0x7f00000005c0)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000740)={r2, @in={{0x2, 0x4e24, @multicast1=0xe0000001}}}, &(0x7f0000000600)=0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000840)={0x0, 0xa}, &(0x7f0000000880)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000940)={&(0x7f0000000380)=@in={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000003c0)="80544af5497e9a5377f49dde346d5801e38d72e58f0dc865e1279b2ee777654398a2e3441dc828d1572adb588708eee04d8df5f177f5f4e72a69ff798bfe16f94c1e2d1212c38149928c6096d69c1b449b6a6b293017889030327d18da0674165cfae4677f11aac071f606a1778de1003fb186916f154c0faa2e250a5fcab0480782bdd96cde629716ab3773748f417f5422c70000000000000000000000000000", 0xa1}, {&(0x7f0000000bc0)="6504e8dc1ca146fb796aad7c57c679cad2026366f42964783565cd8658b5b1b24e48667b8e033319b73b5d5d415176150fc0ac71069c2b0ce760ff7e69746390218a92a59b2e4265794842e00c3d204d859c9f346d38d18ac63527976594ec9970a1ad25fbb1654a2bcb6db6385923aa35eca22ef4cb4aa8f9a64895fc981f465ba9715c2a872a5d112d769e7927c18bf8fe70db", 0x94}], 0x2, &(0x7f00000008c0)=[@sndinfo={0x20, 0x84, 0x2, {0xbd6, 0x200, 0xfffffffffffffff7, 0x2, r4}}], 0x30, 0x20008000}, 0x20000000) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) socketpair(0x8, 0x1, 0x8, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r6, 0x10e, 0x8, &(0x7f00000009c0)=0x5, 0x4) mkdir(&(0x7f0000024ff6)='./control\x00', 0x0) r7 = open(&(0x7f0000267ff6)='./control\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x40049409, r0) fallocate(r7, 0x2, 0x8, 0x3) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x81}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000002c0)={r8, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000280)={r8, 0x9}, 0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f0000000b00)={r3, @in6={{0xa, 0x4e21, 0xa1c5, @dev={0xfe, 0x80, [], 0x17}, 0x20}}}, 0x84) ioctl$EVIOCGSND(r7, 0x8040451a, &(0x7f0000000340)=""/14) accept4$nfc_llcp(r6, &(0x7f0000000a00), &(0x7f0000000a80)=0x60, 0x80800) rename(&(0x7f0000000040)='./control\x00', &(0x7f0000000ac0)='./control\x00') tee(r0, r5, 0x800000000000009, 0x0) [ 203.304902] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 203.307719] binder: 12595:12598 ioctl c0306201 20007000 returned -22 [ 203.312166] FAT-fs (loop5): Filesystem has been set read-only 2033/05/18 03:35:41 executing program 0: r0 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000bc0)={0x0, 0x0, @dev}, &(0x7f0000000c00)=0x10, 0x800) getsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000000c40)=""/105, &(0x7f0000000cc0)=0x69) syz_mount_image$vfat(&(0x7f00000008c0)='vfat\x00', &(0x7f0000000980)='./file0\x00', 0xe436, 0x0, &(0x7f0000000040)=[{&(0x7f0000000940)="eb3c906d6b66732e66617400020401000201027000f8c7feaf0d", 0x1a}], 0x0, &(0x7f0000000240)=ANY=[]) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xa52b) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x7, 0x5, &(0x7f0000000440)=[{&(0x7f0000000140)="da9f893df9b0da176105a3c4e50a71c34b9498804c30df849c92fec741e1716c39a8718f7bcee3f298713d9912cc4862789f207abd9c3c2745a750db8954e350cc3daaecd3af56727f5c59926f8b0f88240c9ab1b658e200e734e53c7bbe31dce6333cf319fc5a45fbc2ffa8772167d3a0bd39517cf16778bf50e75a4b42fc85cff9589218a139a7ead4f08877a728d73519ed1b2e249c8d53ec9b6a9c9b34adae9389830c8960abfe93b00730d71cae3be0d42198c820eb89f0b1d9f187031a35eb441047736e19c31a66481cd237724e0b99e3042f2b2829d612cc7a8553d3414ac274460e4a703abf721e90582ed438", 0xf1, 0x1}, {&(0x7f0000000240)="36a635e2342eb40be93e30952b8ddf49e285531b157ba87940d6f94c99ae176681470f8a849bde7288f745f843ba0c2e46811fade0dcdd95c8694d23e1338a9a34af86f8c4fc4ea293a26ae4aef481c53ecf6f4bab95e9a6ad3d17eb06089f02db9944", 0x63, 0x1}, {&(0x7f00000002c0)="b7c3ed0078cd267f1ef458a8c33304eedfa73272610bf45808c27ed70d8356286664197c1c011d8444b98db5aad6a9037a6e91d18beb96ba4db8e618375c4cccb85785cd6c6e0143e8d68c79812fc8140cb7b05fc3be0e2acd4e6f3fde77ce32745dcdcbbdbb92bfab49a43a8a778bac3569a2d275aa5a2586f22fb7edf589cc55e101da120c7b427e948ef715eabb4a9988fca9dd00e1b636ec9796e820f085c5f994be817068adb9317680d250fe22fcbb430b74f739febd779d93266cda4950a05ae1a353bc34", 0xc8, 0x3}, {&(0x7f00000003c0)="5c919bfb3fc3c05ed5053c2139e42ed851551642dbe2156c92cf3b61ee3ab36434eb00a35d8fa9bd1dc0b1204644da804cc654e5b6e3b664e13d0884b7fa40a2f49c4904f4cc851560244760d5ca15fcdc757e5b751665fa7d31f11b8fc739862376a223", 0x64, 0x80}, {&(0x7f0000000500)="0d7006771353ef4e1de8430b48ef4cbc44f5a15b69e77d6eb068ce54a2e67f6394bd556763050825b40ba4be810dd2456fd6137e340784f14e35437d0c791af68ba0bf5a71e33e4e0bdc79607e4aaefd9a578f220e77e883059d6766f816ac1a2fc3a4c37e44cea5125c54db9492bd67c3b3452401c5a75dc1b4a90b601a86abb97a9b073b4333432fb1253812a047da49d5057578732c55cf860acc2ace0066b10560b4ae1f06e1098a33fa1d4823cd7968b8675ca2797d843e19bba175036a16fa23f194c9178d83a6722f11", 0xcd, 0x1ff}], 0x20800, &(0x7f0000000600)={[{@dmask={'dmask', 0x3d, [0x37, 0x36, 0x32, 0x36, 0x32]}, 0x2c}, {@tz_utc='tz=UTC', 0x2c}, {@dos1xfloppy='dos1xfloppy', 0x2c}, {@discard='discard', 0x2c}, {@debug='debug', 0x2c}]}) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000a00)=0x8000, &(0x7f0000000a40)=0x1) r3 = creat(&(0x7f0000000080)='./file0//i.e0;', 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000b80)=0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001ec0)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f0000001fc0)=0xe8) stat(&(0x7f0000002000)='./file0\x00', &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = epoll_create(0x3) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000020c0)={0x0}, &(0x7f0000002100)=0xc) r9 = getuid() fstat(r0, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f00000021c0)={0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002200)={0x0, 0x0}, &(0x7f0000002240)=0xc) getgroups(0x9, &(0x7f0000002280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff]) sendmsg$unix(r3, &(0x7f0000002400)={&(0x7f0000000ac0)=@file={0x0, './file0//i.e0;\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000001d00)="65486c957ccac0bbc979a59dd41ffd571ea1793651491a308bb3ca6f66ec68b93835bd635d619b6b0ca033a2c74fc24ab0e2f1abb3d12ad18208ed60a97aa081321b9dd88337c398a29b4a45aa6a99ef8bbeb8b6bb782b796ccd71228de1a31ccd52c40b9c6e8b41d436b3720758a486a29db3332900492e76cd9c8ee3f0b642b44f038d619bbd530b592a79c9f1c35995bd85fc9dd399aad8b2e26d0b4e41fd9c84344e1b5970113f2d9db5cec317a58d38c0564cfc7bf825fc8733c7640fec5b52969662e1821dfb9318c68eef98acdf580505b66fedad275f5b99763aa26e799c52ffea71841b2de9fcae38ebcfc91ef344deb5dc3f571d", 0xf9}, {&(0x7f0000001e00)="2f69258867d5c93348f06a595d46c764ec05464e7e9a8e2fbd19305f7a02988a776bc75c3a62293b6a4ae530ae6efcd8cc6c3364fa356008a3cc6c75e92e024708c8cd8e675b331f4dda0ec658a05f604c34516912d617f3c95e5a319387f18b45205f694afcf1a715f6185df9684a33c090e2cf6f176fb5dfce37397ae6e79dcdeccbea7462c4d75a37d89a331fbd35b137de5b8fd6e5364148cf3d3b5fd2f9feb5d107f42e6575190e", 0xaa}], 0x2, &(0x7f00000022c0)=[@rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x38, 0x1, 0x1, [r7, r1, r3, r3, r0, r3, r2, r1, r2]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x20, 0x1, 0x1, [r3, r2, r3]}, @rights={0x30, 0x1, 0x1, [r2, r0, r3, r1, r2, r0, r2]}, @rights={0x20, 0x1, 0x1, [r3, r1, r3]}, @cred={0x20, 0x1, 0x2, r11, r12, r13}], 0x120, 0x1}, 0x40000) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000004c0)=0x4) ioctl$sock_ipx_SIOCIPXNCPCONN(r2, 0x89e3, &(0x7f0000000a80)=0x101) socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000680)={0x0, 0x22, "74297f6f3bca0b632ae543f226b471acd516a55b7f5e9892769237ca8e41ce552e2f"}, &(0x7f00000006c0)=0x2a) mount(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00', &(0x7f0000000880)='fuseblk\x00', 0x0, &(0x7f0000000d00)="d49e2352fd1093ca08a65f1756037de049be6cf412cddfcf621e4018b2ac8bbd4d396fb964a20fff6788478ab72d1dc36c357fd61fc5ae4f294581f6e9195672e1b0b089aa949c70d9a75003ba205f1bdb6771a96cfd7bb5e502eecba49e630af3c0b7b19006daca0c952ccd2159d80629515acb96498b9cbcc49253028a6e5fcdedb95fdfc21fa76ebbf96ea9878a6e94805dc1e4110f9bef0760f486f0866547d4b50cbe30af4b74a9fb48c564a5d3271f0842ef6c9aef33c54978918b3dfed064f2aafaca9f31303fa9a7c0d3a0874dddc670adb61e52e726eedf4c0f2959df7e2e28987d94ec08afdb1fbe42af046be7e02c40a3f711dcfdcd7e53b22538227134c24bfb74a41e3e5f1b37a09fcc268683339d129109c0f60f907232f48506df633188869ed2e857d5f437f63b8a1746278f7d42f3f59c3cc2e3df5c513d6ed8a4a90c1499702a0252d9e8436e981f1d48c7a043ab27402ac4cd5d24c6fb8879d6dcdfcdffcbe78cae24430efc4f5cc3e14e79a021a5cda0abfe81fc489fd597a3ccd7fff36d89f55843466e63f85b4bf38e7a42c980879b629a99bdde009008a9dc3020dc1bff1aeca4e7aca5f7121ceb5b683e8e48deeb3b321354a57328554fead5747b4452c3231068ac8a85a6d3efd9350f7bf366eaa30c3069c0c3235a19cc1f2f1f7af96211d72a6e23bade391726c644ab639d7b70ca4c1e3d7a3d27cc809c62d557a94f2ea30d337ca920433804433407e6d35d46cc5f1b75ff0e571a7eaf7bf64de0a51f2d2501fae4318806b2b53bb920e648906629a2011e6e2722cc13225d4c60f10d3d202a9fbe620d1098e8a32db492dba5742fb5134336426f46d7340db3cda0421ad0db050fb9f46de9a9bf9d61e928a560d0cecb4989cb7d46f188a0892e152b632b9fbfb5d5556dc392854f1cb30aec425c9ce145a90cd59d2317b2a227d79e1cbaf9d9b96801b116d9acd5c11deee691424bb698b8c9ce7b6142099bde0bb95c8cec5acfc58320e53361103708e516259bd60c57725f33ce9b55b6e9ae5f594c93bbd85543801bfedd2fcb0f81595697c8b0d46b8f9445d6577690200c98c4352ef1f164994669bbed3752091cf3c8bf2e4b324d0d13ed32cfe26637267d05079f00a3c2ddd5c8c835cecede74cf846b3c4f5ad96260b19f304927c2d0c2674fa9d9a66d054f54626f0b33394a2d7060f04662c22f96d05b935c474bf2f2f7dc15ce8239c9ba750d59683dcdaadd30b44dc4600bef1d26f66f489285b9bf1cdc560b58e28fb15bfa88e47e3cc5f1f90ac07cdd2d8d79fe79d72bf67a1f05e4d485cb340062f2d375e0ce3ef3cceca5fc4081f461333ede91e3d978bd4dcb12299f3e9a125c9918471c83e8d73c8a0a3b59d58b3066684ff7e526ce992d61295c94ffcf68a366eead1064d63e8410faf20971bb695dec5d4c1eba4bca296efe3e446da8e6887befad15e6be6f0b47cad78ad4641ab9e9303e2f697ba5cc3f03316cb9d0d820fdec23424ad6cd22c989367160c4c61cf6a1e8f85448c84186a6aeda5f0a39127a8677e4dbadc53d408db36de653e494d2d0f1c54562dd8979d17d946cf08305679b14909b431ba939be56f88acd9190e438258850b61e72c90a56b548a99293f6d0db31286878cd4925467f582ac70ab17d6e1ce531de2ed32e19355f3b3f3b9d12e71c04df8855c47a1389980f6b42d238aba9ed820c930f0775d74591ae55a0278850803b62e5f32ce2f76b8824ded9df09d0bc0c16ed67ed35da198a6186d32be17d354382a419a386f875447975780311c5c307fd16232db5ebe22b246b0e0237f8f47b69b80fff4089fa0660b056f751ef1e819c7ac5a457c3e5a3299ddacf649f40a0848ae2649f087810433753cb8878f834842d7b151cf149b5074738f57f18c364c922981e6f5faecb9ace5851deed74fcb95e0276bca55f4bed2afe8dbd28174e7fd0523900c8c6b9fe97f39a6bf6f6d36998ae415e579c4cab6659ad6df3562e2aedf73446a610210cf24495002559eb393b3599cf1f26c530175e14ed7a501f7b0c9e341e6098216ad60cf9a544644fd27a4ca18fe20cd1d826b8df9114e7bb2ce9c4c3543a385080cb7c9696d0e206f42102d083ee504d17d539d368ed4ef9d208e672adb2b74718da854d020c73af628889ed29522d75a76b48eee4df04b7d4eabb1f6d36df445e6349a0e61070b2c935ca399f7e240d62fac89e13d4d8f5bd268500fd2c4f150a92ecd1b48b6edacde6b43ff99ed8e0b3a92601dcec4e37b995276e1f8eadb213f3a4841339638d8d3720d662dc07945315bd0666c4abe3080129d900900a7904d65b3dbd26a4bc1abfd383a5b9999edafb8316dcb6ccc4f63221e4b2bf1b6369a10741a5c23c1e70b194a50fa6b049348679bc79dcd21f297ac8e807b6730a5a02e74fda32dd2da9f5dd1cc88b501c27d272208a41877ff80c38a39a1ab09d62bd5fdd67e1ca062df6f31b799ce3cae4769c58c8bf395bd33e47494fdb191857c953a8f04e1f2d27a53700a70cedf782b6ec6c6a07ecfc0427029c77c26199b879a4f498d262104be3f131f7b3c78d9aff8ad1f0674bd297bc61ad300a0648eb3cdad16ed0e0eee32513bada16b6b09cdebdce4fe9cff07ee7893a376ee251552bac37c7a0f44c4edcc2dd5902b9d11d22f6dc7d08b4cd459d37605f5de36844a90d0ef58546485ecda6809ce6343316dea5bfddfdc72947fd24738b1ec9dcd62ec60b8fd5ea51f172483ed6fb7423aaa29787596827054008cf0405bd714b178dd757a9eed88c7d2bf0848e660160355890a578f1815cfefc2edee58f454fb31a6ddd178115f118a74d97fb37675b03bc6acdd1be10f5f4242b3ac189beefbd290c9c7d22aa729608d7166975a0492fb6de4122416e9b39c5d95661402e57cd8faf92b0ce56bf7651c9927e83943abf705836087f8d8ef910a7456b30044859169621a1d36d40f49a8de49b81581e1e250f42bfbcc9b2f7c997c16d925dce8a212bc0dac399327907d4b38d65e389bc9e1a9017cb57c83609fc30143946183467c2ddedeeba7d0210d6d7df846b45620d4720e3cd7b036ee3cda3acecfc3fc603b05a4a4cd8950ffb3c1d1163ff7d85fc30a3f8dd0da3e718e068cc84ae88174f27abc0bdf5b53d60de32e00d52c461d5933e1b55d1e08ea604f11598e0063790964dcb1dae9c1bd180d4977e2d204a37304a93e4450c243a8cff56169ad1fd0bfd0f900ddc80a688ca3ae072d3f37636e585785041d3ec5ff1decddc80fa4c1706b873ff6f179017e1a1e1b25c552a3faf3ad4384e4fcbaff464ad2e21f7f71e4ec017d385bb84ed2b20e24ffbe8bff56e5ee1db2e417e3be4dcbfb599afe871cd0090dee9f0572ec93fce5a89e084778d96c7c7bf9d597ba44b75eefe9c036093b26279dca3ac273bf4e3dbc7e117bf38b34439c1523a64bd07e1e5cc56823cdeb5f0c3bc5e29829ea8ba639c981d84d1ff441a3d567c9936748bf4b555a93134f743ec2a5b80aaf53a6b8655ccaa0d2ba4b3758a3b5275c13e8fc376976e6ee489c3619d30ad3427a1d74accf7e5dc4f734b9246f5993f440bf2615a044e1042bf207e35367e6c7862fbca3a447394925777b7131d89768cd0f752bdeb804e8d8f7451ddbefedde47f45cf3db553dcbc7ea9f55c6d14bff5c63027010f70971cc6bbe92966f61846ef9b148a25b361ec1f7e28c879dfb027edaaa13fb812cb92ec808c4dc44a55524d5260fec966c6b2ef41fe7923b631842a7ffcb2566f340a3d641e8636ef230e23cf0a29be0c5b979b31f008d6b3536da724e72420f7ade1da86b279b5edc74859893904eb7c927f9e72ba76b327c0430b3a173127b94944acc3dd4cb65e504dc3d96f7e71f4c3c24bc29bb560657dda0973b29e8a336cea18926ef28d4b294ca0c2fb09d9a4b68fc7573e650c147bd8d38dd48992fa95369abf232856f0d55d566ff2dfdf017eb43b9d2d211d4f5fd544e6a95351949a3f53156d6c507e67a86ddd4a161fc1138ca9e446316b6503cefa1825d57545e92a889c5891773f94938c455e474b46a1e2b0ab00f54da083189c0636e58730b1707c2c5ba96f02aaea085f7e95b6eef8510b3dc2603a243c341f2ad35a4be16c7f26efb1160a3a98d266dcdb52dd961f6ede75b26e51e5e388bb52f00120dd5b1cae6eb7ab8dc3de7450f61fd0e316660cc2b5b4f4f7f0d1a4080e23e9ec5c49920f7c5caacde2f1ff1165c4f8b69f46df0c73827ba531029cc2b2d80b81d2877525c59f3e6288a071bee53b93b54a6c1f2f5153c02df108312d858f528b15836b7f8b139c8e8eb22392362a6ca716cc957bb4fd7aa4ef2649e84a244788113576f728c788a2c7459940ca3c75fd5ebf3ff2c89fa8bec63fa6383153e1858da59d4f0b8276dfa08ca5a644e41cba51955d761be34d2ab784a086ee9f63965b8961022ee13674ba18e51367407a581bc308e8333f7832e58f7ae15a1d6915047c87c55c1b815f1708bb7aee6888ad289deb291c4b1e2ac92f5f038dddebc375b3e62ac89f19656a2cd324cfdc15b482c97a9ad737318b3debcb1ef136d7e2aea9538d4f03793e4d421ef6680ded4fb30f39d40ef67f61ff661c7e0e181b68eba984442bfab86ac940266bcddb9618dd6922a715cd75f1b5f64795a50a5c8b632b46a5e2ca08adf43a62ba67897ace1d9521de3a01c7c44fd2be5daa685225f05b78585800b3d9f53dea2358c9963b4cd3813892de28ed1fa14f0df369c7a96949d8d161bb2cf3e812df68343b2c863b1c6df48d718e8a5a7860337ace771750882f1d9a43393e0014da0f78cd7e641410c4fe2f50fe86d38f5dccbdba910ff35b171d559f90f79a8efd582c703c2b2990266c0b8d86e662e602d4a0c4ddce9753268781adc35dbe5dbca462d52832645763912abdecb9e882c8da5ab5644565f245a6f581a6343627f32b9c86ecc6da00b4914faf3d9d7a826249c9c358cebc323628852400b9fad1cdf85a61f5b1875a87faf6994b9e4e51fb785bcefc7473f918915ec15a38d02a463eb476ed72f170eefc5ad6c2f97e984270de5176d617b0a49e3ae4cfaab64ee42421a21ff16cd068ecdbd3a6e5db91009cfb634a69c2c1f946d8d140b18d90603448861f111589792a2521e81efc194064f786c74209a79cf8082aff1d3d7d0a965ee7758de4e603e41a15e729644afd2534bf558f998a07edc6b8f2c5cb6cd0280933b7f0ce324edfbdfd5e563640c72fac0df6cad1c6e031ee826d2773088d47b8bc7f2f63f4c9416aced87ae15fe3aa43c56b84bbc55991726132a7d2ce96301bd50d7f096edb79e66eb48cc3b1094d48069cf14362c510acd00e55a636fc51b15271806ca75b5274a34fcae859d55bd646246a646d844f9910ffb6ca2176ca5570827e3dee93f0c8904c97239b4838748c589c1c45fd3d00d3140f3c9d8fab7ecba129e65084b395b946ce11d2cdf23c3c0a0a9af11493e6943e702502fdcd78917c27d3e5680f134dc2f6a7d526053fa411823d5c2f5bf52ecfdc585ed4a7ee7154e4d72b85d6facfef4eeffbdbb5ffb00c66e95d3f5ce5cdeedd664f6d55eecbfba1631bc39acbefa512671a7ac391d0dc213aa704af9aeaf1466815a8fb6ad99331e73ebb6ea27d0cc79fd33b081530d4d0b793116484a40cd88fbc6f5c77c22a809480c489e270e70537309a53eaace401db208b301876654e1bc10935be8532c68169ced19e32b7713ca90a9c158e2108d4") getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000900)=0x6, &(0x7f00000009c0)=0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000700)={r14, 0x85, "0fa9628f5dc6f01bff47a7028ae68b14b05435ba636289a9ed229b0d3b06af81685ba67aebe94a221491855a99f79dab2dceb173c0ee2c5ffaca39bbe59f7021325f977330d68edfc983e820c7d081e90c722f3f086c44e4d460413194fa7cdde4bcd7e4281d958fc7f0ab82264e83b23382135f3991356b0ae3e410dba484a51a596a54d0"}, &(0x7f00000007c0)=0x8d) [ 203.366112] binder: 12595:12608 unknown command 0 [ 203.384382] binder: 12595:12608 ioctl c0306201 20007000 returned -22 [ 203.392584] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 203.416192] binder: 12595:12608 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 203.455448] FAULT_INJECTION: forcing a failure. [ 203.455448] name failslab, interval 1, probability 0, space 0, times 0 2033/05/18 03:35:41 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x50040, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @rand_addr}}}}, &(0x7f0000000540)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000580)={'team0\x00', r3}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="f0a8713559b45e0a2223dc96798f32c0a9f276cc44b4874bd6a6f1b96154125a178d6834998e311ea1db7fa55269c99f1aae4da45b85f1b509fd20f7060a80830558036a893720a424f87756d2d24eaf2a985784e1617d51d702d099625ad7ee158ca21480bc3646477234bd01623f9803488bc8e796ca89"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x80) ftruncate(r1, 0x5) getsockname(r2, &(0x7f0000000180)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000200)=0x80) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) bind$can_raw(r2, &(0x7f0000000240)={0x1d, r5}, 0x10) socket$packet(0x11, 0x3, 0x300) 2033/05/18 03:35:41 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/fi.e0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 203.466797] CPU: 1 PID: 12603 Comm: syz-executor2 Not tainted 4.16.0+ #1 [ 203.473640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 203.483000] Call Trace: [ 203.485601] dump_stack+0x1b9/0x294 [ 203.489248] ? dump_stack_print_info.cold.2+0x52/0x52 [ 203.494451] ? graph_lock+0x170/0x170 [ 203.498257] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 203.503463] should_fail.cold.4+0xa/0x1a [ 203.507542] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 203.512654] ? find_held_lock+0x36/0x1c0 2033/05/18 03:35:41 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f0000000140)) syz_emit_ethernet(0xa8, &(0x7f0000000040)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xc}, @empty, [], {@generic={0x201, "adf89b08a5d5d312406aa2451a1a8a651cae159a56546f8b2c62a91d3c0d1ddf2bd8608dab74bdba790b68e0d6aa17a3684ec092b2e61c3191397bc40b28d3cf8080849356ec28b6239ee51016acb76b26f4a850613dc23de02bab8bbffa03fa3af33fd6e322af369c22868a0fffe598b394849ae452e4ca6bce3d47d791a3924fd9ac07261b5079736dabbf3882caf052c1aef9c1405cb0c4ee"}}}, &(0x7f0000000100)={0x0, 0x4, [0x68a, 0x477, 0x981, 0x735]}) timerfd_create(0x0, 0x0) [ 203.516725] ? graph_lock+0x170/0x170 [ 203.520530] ? do_raw_read_unlock+0x3f/0x60 [ 203.524859] ? find_held_lock+0x36/0x1c0 [ 203.528931] ? __lock_is_held+0xb5/0x140 [ 203.533012] ? check_same_owner+0x320/0x320 [ 203.537347] ? rcu_note_context_switch+0x710/0x710 [ 203.542301] __should_failslab+0x124/0x180 [ 203.546545] should_failslab+0x9/0x14 [ 203.550354] kmem_cache_alloc_trace+0x2cb/0x780 [ 203.555043] snd_seq_port_connect+0xdc/0x710 [ 203.559469] ? snd_seq_get_port_info+0x4f0/0x4f0 [ 203.564232] ? mark_held_locks+0xc9/0x160 [ 203.568388] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 203.572990] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 203.578105] ? kasan_check_write+0x14/0x20 [ 203.582350] ? do_raw_read_unlock+0x3f/0x60 [ 203.586677] ? _raw_read_unlock+0x22/0x30 [ 203.590833] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 203.595856] ? check_subscription_permission.isra.7+0x154/0x240 [ 203.601906] snd_seq_ioctl_subscribe_port+0x1d8/0x310 [ 203.607089] ? snd_seq_ioctl_unsubscribe_port+0x310/0x310 [ 203.612617] snd_seq_kernel_client_ctl+0x15a/0x190 [ 203.617539] snd_seq_oss_midi_open+0x720/0x900 [ 203.622105] ? snd_seq_oss_midi_setup+0x50/0x50 [ 203.626779] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 203.632316] ? fput+0x130/0x1a0 [ 203.635607] snd_seq_oss_synth_reset+0x471/0x9f0 [ 203.640360] ? snd_seq_oss_synth_cleanup+0x480/0x480 [ 203.645469] ? fcntl_setlk+0x1020/0x1020 [ 203.649536] ? fsnotify+0x415/0x1100 [ 203.653274] snd_seq_oss_reset+0x79/0x2b0 [ 203.657433] ? free_info_entries+0x3b/0x3b [ 203.661673] snd_seq_oss_release+0x73/0x130 [ 203.665999] odev_release+0x52/0x70 [ 203.669621] __fput+0x34d/0x890 [ 203.672888] ? fput+0x1a0/0x1a0 [ 203.676152] ? _raw_spin_unlock_irq+0x27/0x70 [ 203.680631] ____fput+0x15/0x20 [ 203.683892] task_work_run+0x1e4/0x290 [ 203.687770] ? task_work_cancel+0x240/0x240 [ 203.692087] ? exit_to_usermode_loop+0x87/0x310 [ 203.696745] exit_to_usermode_loop+0x2bd/0x310 [ 203.701308] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 203.706139] ? do_syscall_64+0xb7/0x9d0 [ 203.710100] do_syscall_64+0x792/0x9d0 [ 203.713977] ? vmalloc_sync_all+0x30/0x30 [ 203.718123] ? _raw_spin_unlock_irq+0x27/0x70 [ 203.722606] ? finish_task_switch+0x1ca/0x810 [ 203.727089] ? syscall_return_slowpath+0x5c0/0x5c0 [ 203.732018] ? syscall_return_slowpath+0x30f/0x5c0 [ 203.736950] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 203.742319] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 203.747155] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 203.752337] RIP: 0033:0x455319 [ 203.755517] RSP: 002b:00007f63362dcc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 203.763209] RAX: 0000000000000015 RBX: 00007f63362dd6d4 RCX: 0000000000455319 [ 203.770458] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000000014 [ 203.777711] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 203.784971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 203.792227] R13: 000000000000006c R14: 00000000006f3ac0 R15: 0000000000000007 [ 203.844698] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 203.851941] FAT-fs (loop5): Filesystem has been set read-only [ 203.869457] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:35:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:42 executing program 0: r0 = socket(0x10, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f00001a1000)={&(0x7f00004d2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000012000100000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="0059eb5ae819f08c0000000000000099"], 0x28}, 0x1}, 0x0) 2033/05/18 03:35:42 executing program 1: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@dev, @in6=@dev}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000380)=0xe8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) read(r1, &(0x7f0000000000)=""/146, 0x92) sendmsg$nl_generic(r1, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400010300000000000029000600000000000000"], 0x14}, 0x1}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xc) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'gretap0\x00', {0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000010c0)={{0x29aa, 0x0, 0x1000, 0x6, "4ac355d967cf695159797cc22fe7bd17146c2cf243a8a3b30e7f147baed5475979b686a6e37eaa4fc435fb2b", 0x100000001}, 0x2, [0x8, 0x6, 0xfffffffffffffffc, 0xc1, 0xff, 0x7ab4, 0x5, 0x2, 0x4, 0x3, 0x100, 0x8, 0x1, 0x10000, 0xd520000000, 0x3f, 0x3f00000000000, 0x2, 0x4, 0x40, 0x0, 0x4, 0x80000000, 0x8460, 0x8, 0x3, 0x1ff, 0x3, 0x2, 0x7, 0x800, 0x1, 0x80000001, 0x800, 0x0, 0x3, 0x7, 0x80000000, 0x0, 0x9, 0x3f, 0x4, 0x800, 0x0, 0x3ff, 0x0, 0x0, 0x1, 0x6, 0x5, 0x8, 0x80000001, 0x2206, 0x6, 0x4, 0x5, 0x70f, 0x2, 0x8, 0x0, 0xfffffffffffffffa, 0x8, 0x100, 0x1ff, 0x8, 0x7fffffff, 0x3f, 0x2, 0x7, 0x0, 0xfffffffffffffffc, 0x1, 0xffffffff, 0x4, 0x8, 0x7, 0x6, 0x6, 0x0, 0x7, 0x4, 0xfffffffffffeffff, 0xffffffff80000001, 0x5, 0x1f, 0x8, 0xffff, 0x10000, 0x1, 0x0, 0x5, 0x4977, 0x7, 0x3, 0x0, 0x10001, 0x6, 0x0, 0x7f, 0x80000000, 0x5, 0x1000000000000, 0x4, 0x8, 0x9, 0xee7, 0x4, 0x1, 0x1, 0xfffffffffffffffe, 0x7, 0xf8f6, 0x7, 0x1, 0x6d89, 0x401, 0x1, 0x1, 0x7, 0x3d5880b1, 0xab91, 0x6, 0x8d6, 0x4, 0x5, 0x8, 0x8001, 0x100000001], {0x0, 0x1c9c380}}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000940)={0x0, 0x49, "4e6e6bc11162f54776f620d98d187a16b60933e4a6d4cde819ad1d3213abec45efbcb5440c677f957655a0cc2f3409a5d1d7c83aea985ed7b52ce26ec6fa53673a8e906a6c385bd585"}, &(0x7f00000009c0)=0x51) bind$inet(r0, &(0x7f0000dedff0)={0x2, 0x4e20}, 0x10) r3 = accept4(r0, &(0x7f00000000c0)=@nfc, &(0x7f0000000140)=0x80, 0x800) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f00000001c0)={0x1, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e22, @multicast2=0xe0000002}, {0x2, 0x0, @broadcast=0xffffffff}, 0x0, 0x5, 0x9, 0x1fe, 0x7c7d, &(0x7f0000000180)='yam0\x00', 0x1, 0x4, 0x1000}) sendto$inet(r0, &(0x7f000077effe)="7f", 0x1, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000340)={0x9, &(0x7f00000002c0)=[{0x0}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000400)={r4, &(0x7f00000004c0)=""/191}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000480)={r0}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001040)=@nat={'nat\x00', 0x19, 0x4, 0x5a0, [0x20000a40, 0x0, 0x0, 0x20000a70, 0x20000cf0], 0x0, &(0x7f00000003c0), &(0x7f0000000a40)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x11, 0x0, 0x88e7, 'syz_tun\x00', 'syzkaller0\x00', 'ip6gre0\x00', 'ip_vti0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1a}, [0xff, 0x0, 0x0, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0x0, 0xff, 0xff, 0xff, 0xff], 0xb0, 0xe8, 0x120, [@time={'time\x00', 0x18, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x65e18669f4502e37}}}]}, [@snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xb}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}}, {{{0x3, 0x0, 0x0, 'nr0\x00', 'vlan0\x00', 'syzkaller1\x00', 'ip_vti0\x00', @empty, [0x0, 0xed410f649435a91b, 0xff, 0xff, 0x0, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x16}, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0x70, 0xf8, 0x130}, [@snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x10}, 0xffffffffffffffff}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0x17, 0x8, 0x0, 'ip6_vti0\x00', 'ip6gretap0\x00', 'lo\x00', 'gre0\x00', @empty, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xa0, 0x110, 0x158, [@pkttype={'pkttype\x00', 0x8, {{0x1, 0x1}}}]}, [@snat={'snat\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 0xfffffffffffffffd}}}, @arpreply={'arpreply\x00', 0x10, {{@empty, 0xffffffffffffffff}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x1, 0x0, 0xc6}}}}, {{{0x9, 0x0, 0x0, 'syz_tun\x00', 'eql\x00', 'lo\x00', 'bridge0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0x0, 0x0, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0x0, 0x0, 0x0, 0xff, 0x680708851e213d6c], 0xe0, 0x130, 0x168, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0x3f, 0x5}}}, @m802_3={'802_3\x00', 0x8, {{0x0, 0x8}}}]}, [@common=@log={'log\x00', 0x28, {{0x0, "83bfe8d1438ffbf48c003f5fecbdfb4a56f8296b4f615ee0112d0a29d345", 0x4}}}]}, @arpreply={'arpreply\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xb}, 0xfffffffffffffffd}}}}]}]}, 0x618) 2033/05/18 03:35:42 executing program 2 (fault-call:4 fault-nth:8): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:35:42 executing program 6: capset(&(0x7f0000594ff8)={0x19980330}, &(0x7f0000244000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup3(r0, r0, 0x80000) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x88042) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x1, r2}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='rose0\x00', 0x10) 2033/05/18 03:35:42 executing program 7 (fault-call:3 fault-nth:0): perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:35:42 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hf0plus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:35:42 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/fiLe0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:42 executing program 6: r0 = socket$inet6(0xa, 0x4, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = msgget$private(0x0, 0x40) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000100)={0xaf}, 0x4) msgctl$MSG_STAT(r2, 0xb, &(0x7f00000001c0)=""/146) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1, 0xc8f40) r4 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x200004, 0x0) ioctl$LOOP_SET_STATUS(r4, 0xc0481273, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000100000000001bf3ffffff000065000000edff00007db0e6330ee7f9b319d8000018e58d1c43473000e05026fb0000008001d1a7335d5bffff0001d7", "bca40005001500f7ff0002ff000000000000000000819e060000867dfffe0200"}) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f00000000c0)) getsockopt$inet_int(r1, 0x10d, 0xd, &(0x7f0000000140), &(0x7f0000000040)=0x2a) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x80}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={r5, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}}, &(0x7f0000000380)=0x84) [ 204.337652] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 204.363555] FAULT_INJECTION: forcing a failure. [ 204.363555] name failslab, interval 1, probability 0, space 0, times 0 [ 204.374888] CPU: 1 PID: 12660 Comm: syz-executor2 Not tainted 4.16.0+ #1 2033/05/18 03:35:42 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000100)={0x5, 0x1, 0x42aa, 0xffffffffffff0001, &(0x7f00000000c0)=[{}]}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$KDGKBLED(r0, 0x40045109, &(0x7f0000000000)) [ 204.381728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 204.391084] Call Trace: [ 204.393688] dump_stack+0x1b9/0x294 [ 204.397339] ? dump_stack_print_info.cold.2+0x52/0x52 [ 204.402538] ? graph_lock+0x170/0x170 [ 204.406356] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 204.411563] should_fail.cold.4+0xa/0x1a [ 204.415642] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 204.420753] ? find_held_lock+0x36/0x1c0 [ 204.424834] ? graph_lock+0x170/0x170 [ 204.428653] ? debug_check_no_locks_freed+0x310/0x310 [ 204.433853] ? find_held_lock+0x36/0x1c0 2033/05/18 03:35:42 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x10) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x80000000) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:42 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) [ 204.437925] ? __lock_is_held+0xb5/0x140 [ 204.442008] ? check_same_owner+0x320/0x320 [ 204.446345] ? rcu_note_context_switch+0x710/0x710 [ 204.451293] __should_failslab+0x124/0x180 [ 204.455537] should_failslab+0x9/0x14 [ 204.459347] kmem_cache_alloc_trace+0x2cb/0x780 [ 204.464040] snd_seq_port_connect+0xdc/0x710 [ 204.468463] ? snd_seq_get_port_info+0x4f0/0x4f0 [ 204.473232] ? mark_held_locks+0xc9/0x160 [ 204.477391] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 204.481984] ? _raw_spin_unlock_irqrestore+0x74/0xc0 2033/05/18 03:35:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xfffffffffffffff9, 0x2102) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="046304400000000009a25689532925a676e00277f97c72b278ff59c6e15f2952124ca279cdfc7eebbb9490b62f386c7cb241bed2c721e7c6c0681d798aa66b0309ec32a4966528da7f5d9c047ac863af67eb8c70f620af854124332197422bf5b7d6297444a490e8d557401bd352cfe06098ece9f3ac0446cb885083"], 0x0, 0x0, &(0x7f0000008f37)}) fchmod(r1, 0x40) [ 204.487098] ? kasan_check_write+0x14/0x20 [ 204.491343] ? do_raw_read_unlock+0x3f/0x60 [ 204.495669] ? _raw_read_unlock+0x22/0x30 [ 204.499832] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 204.505379] ? check_subscription_permission.isra.7+0x154/0x240 [ 204.511450] snd_seq_ioctl_subscribe_port+0x1d8/0x310 [ 204.516656] ? snd_seq_ioctl_unsubscribe_port+0x310/0x310 [ 204.522213] snd_seq_kernel_client_ctl+0x15a/0x190 [ 204.527161] snd_seq_oss_midi_open+0x4ea/0x900 [ 204.527305] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 204.531747] ? snd_seq_oss_midi_setup+0x50/0x50 [ 204.531776] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 204.531790] ? fput+0x130/0x1a0 [ 204.531811] snd_seq_oss_synth_reset+0x471/0x9f0 [ 204.531832] ? snd_seq_oss_synth_cleanup+0x480/0x480 [ 204.531849] ? fcntl_setlk+0x1020/0x1020 [ 204.531864] ? fsnotify+0x415/0x1100 [ 204.531887] snd_seq_oss_reset+0x79/0x2b0 [ 204.531902] ? free_info_entries+0x3b/0x3b [ 204.531915] snd_seq_oss_release+0x73/0x130 [ 204.531931] odev_release+0x52/0x70 2033/05/18 03:35:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x801) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000140)={"9e17d3cc1d725c51b4d43590db82da92a85769a90b47aa54486cb876635c29b50752fdc6a6088c85eaffb43d86f4dcfe717bcef05bfa87737564482a16fbcf71e6e00716790a61b959dee14793b76a1f42d48de6287d7eec415136a70002fbc6d801e995571ae431c28070748bbec8109eb7a0fb9ee6af5ec37a532f72368cba2bfeefed767935f5fee4e6c8dabbcde736979f7cbdd00fd836c66fd64b2bf84e1110b7ff99ac0f16c90bbc812f776192717b5b971912bbd8a4131c5837ae4cb57fc999946522ee3c84686d0fb78e8151dfc1220eea862a02373683e641321c2eb3887f418996d30209b38256ab41c8948c7f1c1aaebb57377abb27f83ec8e2dd9f0111dafacdd0a846c58e7ee0b40c528cf4d641926ef1570603b7a38f341189439645c6c5e3455acd15ecd8a83878ca3b5fec72a48fc1980ce7d8aeed8ee272ac54db1381ee50efaa10fb8ec1d01cb4a43111e7d7242b86d8953aed60a73320c18860f94ea72a75f9dc7f009ea898154dd071c5de82e1fae1e25e75ef4b7949bcf2c4f6cf8427e0fae2eb360dfa9d3e35117dcb1f3d55b82c4cce7f3d4c0c552a92dbbcac552e34572d0a82715af86b25c71d24d70efb8949bd4e8ec0e5f111ff3772b8ffbb3a98ab8dc81d4a161295b7896cf01eb84b14e3fb496f86b10bf30458c17cd5cce654554a8325600f2e9a1a6f1c0ff7b8cf3f7fbcf441287263b05a4de73a943962c33a83a8599cd52d0bb71e5eaddf74953457aeb11aefd7d5bbd8cd18096329b01c4cbdd9e117d4d9a17119ed85e29936153b2eadd9c19be57c1107e73cf633e630c25f9c38092d1edebf7547bac0e36d1baa68977a7c42c0bacc77fd2f593375e05a0e2616703b3adc782b326c40f8fb73e1b253e35dc85d9f684a9718ce6a07cbfa9520e469cb4aebc48be21ff156f79d44430d0131dc6b831f3d28f6d681f6ae960e936236a76c4e2ab778033a2b4270868ed50b856c20d16c0f5c753fbc40bd09b932da4c89f690c89f32119eae1afe13ffbc3a54d7d03d93a776e26953ae4af8c9c4232b5498418ba4d47e4ce4a41c1ac420ce51585d40abd26eb5bc07cf984a3b3e24b88a05d42cb5e4004d501206d656dbdf08e98aadd551b3c3cfcdb01a9dc5bd68a97029b57dfbdb03908e2ce853d0a31b1433028c2af15b771cb59c3fc8bd85591a893071fb2e2296f84d6a61ebea57da00eb0bbedfd14f4187918cb4e138e7782f88954caea2b98f9d4b8a7ce311b1b54b81c47d72bef1f74f8653c988ce8afb1cd59299ff54bc3ba88f0313b2d2440e724c3df63fa09f630e4145a2ae3fd2cfd24d910fb43024ff1a0107ce44d1fbf40a6ac82ed78bb1c6aa65a03c4c068f74b31d826ea2ded43bf720b622a0682f2125c6d2b2828d950295c68e14e1fe35c935f215064f1172961fbf0cda96c748027037aac3"}) r2 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) [ 204.539046] FAT-fs (loop5): Filesystem has been set read-only [ 204.543672] __fput+0x34d/0x890 [ 204.543691] ? fput+0x1a0/0x1a0 [ 204.543708] ? _raw_spin_unlock_irq+0x27/0x70 [ 204.543726] ____fput+0x15/0x20 [ 204.600483] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 204.603225] task_work_run+0x1e4/0x290 [ 204.603245] ? task_work_cancel+0x240/0x240 [ 204.603266] ? exit_to_usermode_loop+0x87/0x310 [ 204.603289] exit_to_usermode_loop+0x2bd/0x310 [ 204.603308] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 204.603326] ? do_syscall_64+0xb7/0x9d0 [ 204.603348] do_syscall_64+0x792/0x9d0 [ 204.603366] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 204.603384] ? syscall_return_slowpath+0x5c0/0x5c0 [ 204.636869] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 204.639918] ? syscall_return_slowpath+0x30f/0x5c0 [ 204.639942] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 204.639964] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 204.639986] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 204.639999] RIP: 0033:0x455319 2033/05/18 03:35:42 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x101000, 0x0) bind$bt_sco(r1, &(0x7f00000000c0)={0x1f, {0x20, 0x8, 0x8, 0x5, 0x0, 0x7fff}}, 0x8) getsockopt$inet_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000040)=""/6, &(0x7f0000000080)=0x6) dup2(r0, r1) 2033/05/18 03:35:42 executing program 2 (fault-call:4 fault-nth:9): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) [ 204.640008] RSP: 002b:00007f63362dcc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 204.640025] RAX: 0000000000000015 RBX: 00007f63362dd6d4 RCX: 0000000000455319 [ 204.640034] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000000014 [ 204.640043] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 204.640052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 204.640061] R13: 000000000000006c R14: 00000000006f3ac0 R15: 0000000000000008 2033/05/18 03:35:42 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x25) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x7) setsockopt$inet_tcp_int(r0, 0x6, 0x1d, &(0x7f0000000040)=0x738000000, 0x4) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x0, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x1ed) shutdown(r0, 0x1) r1 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x25e06786, 0x60e00) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000100)=0x80000001, 0x4) 2033/05/18 03:35:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="8232d6f6032a42ce1dfb4700522febf51bfcbdfead"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xffffffffffffff33, 0x280000) [ 204.832445] binder: 12709:12711 unknown command -153734526 [ 204.866563] binder: 12709:12711 ioctl c0306201 20007000 returned -22 [ 204.887701] binder: 12709:12711 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 204.903538] binder: 12709:12711 unknown command -153734526 [ 204.910504] binder: 12709:12711 ioctl c0306201 20007000 returned -22 [ 204.917531] binder: 12709:12716 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 205.186436] xt_time: unknown flags 0x34 [ 205.321243] xt_time: unknown flags 0x34 2033/05/18 03:35:43 executing program 1: r0 = socket(0x17, 0xf, 0x3) r1 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f000000cffc), 0x4877e7) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5a020000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x20, 0x70bd28, 0x25dfdbfe, {0xc}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000040) 2033/05/18 03:35:43 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/fi\ne0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:43 executing program 0: semop(0x0, &(0x7f000002efe2)=[{0x0, 0x9}], 0x1) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f000001a000)=[{}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x10) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xfff, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000080)={0x9, {{0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, [], 0x1f}, 0x1000}}}, 0x88) 2033/05/18 03:35:43 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) getdents(r0, &(0x7f0000000040)=""/230, 0xe6) getdents64(r0, &(0x7f0000001180)=""/113, 0x71) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000001200)) recvfrom$ipx(r0, &(0x7f0000000140)=""/4096, 0x1000, 0x10001, &(0x7f0000001140)={0x4, 0x100000001, 0x4, "5c55dd81a948", 0xfffffffffffffffb}, 0x10) dup2(r0, r1) 2033/05/18 03:35:43 executing program 6: recvmsg(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000100)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000001300)=""/209, 0xd1}, 0x2f6e7a499057a8e3) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0xff, &(0x7f0000000040)=0x4) 2033/05/18 03:35:43 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:35:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:43 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfdplus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) [ 205.492908] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 205.500159] FAT-fs (loop5): Filesystem has been set read-only [ 205.545104] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:35:44 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0xff, 0x6, 0xb, 0x3, 0xffffffffffffff9c}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001140)={r0, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000040), &(0x7f0000000100)='U'}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f00000003c0), &(0x7f0000000480)="bb"}, 0x20) syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x400800) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000380)="b1", &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f0000000200)="d1"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000200), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000000300)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000040), &(0x7f0000000080)=""/23}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) 2033/05/18 03:35:44 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000a2efc8)={&(0x7f0000f74000)={0x10}, 0xc, &(0x7f0000007000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001d37be806ef4a30e1300faff01000000100023000c000400292d2b2c7d000000731d61dcfa95170b82aff2953ca791b5fd1c99"], 0x24}, 0x1}, 0x0) 2033/05/18 03:35:44 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x40, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80001000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r1, 0x5, 0x70bd2d, 0x25dfdbfe, {0xf}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xe7e}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000050) r2 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) r4 = dup2(r2, r3) r5 = gettid() perf_event_open(&(0x7f00000003c0)={0x7, 0x70, 0x1000, 0x6, 0x1bb, 0x7, 0x0, 0x2, 0x12004, 0x7, 0x80, 0x4, 0x6, 0x1, 0x6, 0x75, 0x9, 0x6, 0x94e00000, 0x9, 0x6265563e, 0x7, 0x80000000, 0x9, 0xfffffffffffffffe, 0x0, 0x0, 0x590, 0x7, 0x7, 0xff, 0xa00000000000, 0x2, 0x0, 0x100, 0x40, 0x1f, 0x101, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x1}, 0x2, 0x7, 0x6, 0x7, 0x3, 0x1ff, 0x8}, r5, 0x8, r3, 0x1) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, r6, 0x0, 0x70bd29, 0x25dfdbfe, {0xf}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100000000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xebc23b859a2cec17}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local={0xfe, 0x80, [], 0xaa}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xdf8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7fff}]}]}, 0x98}, 0x1}, 0x800) 2033/05/18 03:35:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x80000000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000400)="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", 0x139, 0x1}, {&(0x7f0000000240)="fd663762a921fbfd4778b9c169f6cb3dabe636bba8ddd907fc8db04e27f2d75f892dc5634b7c8fc3d6c7734ed3c27e8901daefabb0ca2a0b39474f0acdbbc8e2f1d3303e29f2bee8d7a7dfb7003f", 0x4e, 0x628}, {&(0x7f00000003c0)="33edf4c2b8fe4b01467712706151799a06c2cfaabc3e75759f31a9129e83fccf", 0x20, 0x5}], 0x1000000000004800, &(0x7f0000000340)={[{@jqfmt_vfsv1='jqfmt=vfsv1', 0x2c}, {@bh='bh', 0x2c}, {@norecovery='norecovery', 0x2c}, {@usrjquota='usrjquota=', 0x2c}, {@nolazytime='nolazytime', 0x2c}, {@journal_async_commit='journal_async_commit', 0x2c}, {@quota='quota', 0x2c}, {@nouid32='nouid32', 0x2c}]}) 2033/05/18 03:35:44 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/fil%0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:44 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='/\x00', 0x0, 0x0, &(0x7f0000000700), 0xa40e0, &(0x7f0000000640)={[{@minixdf='minixdf', 0x2c}]}) socket$netlink(0x10, 0x3, 0x1) 2033/05/18 03:35:44 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfoplus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:35:44 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) [ 206.493748] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 206.500972] FAT-fs (loop5): Filesystem has been set read-only 2033/05/18 03:35:44 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001500)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="07000000080000fa", @ANYRES32=0xffffffff, @ANYBLOB="00000000f40fc9570916d7048e5b16eec620e8ce4be6bc56411245125e1ed7e0cad6d42479b2e671058d3f94083a1b612d375a9b87dc94b0c7e962c95b61a87aaf84a54c7f59f63ad58039e90e74c088205b93d90662ff71e4be3842c2993b24"], 0x10) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x0, 0x2040) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000100)={0x0, 0xf000, 0x101, 0xa, 0xa}) 2033/05/18 03:35:44 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {}, 0x8, {0x2, 0x0, @rand_addr}, 'syzkaller0\x00'}) r2 = socket(0x1000100000010, 0x2, 0x0) write(r2, &(0x7f0000000000)="1f0000001e0007f1ffffffe60802007702000600536b8d3d6c39080001454a", 0x1f) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @local}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=""/219, 0xdb}, 0x0) 2033/05/18 03:35:44 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)=""/126, 0x7e}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f0000000140)=""/242, 0xf2}, {&(0x7f0000000240)=""/244, 0xf4}, {&(0x7f0000000340)=""/234, 0xea}], 0x5, &(0x7f00000004c0)=""/217, 0xd9, 0x7ff}, 0x100) bind$alg(r0, &(0x7f0000e15000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000402f73)="71e67a15", 0x4) 2033/05/18 03:35:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7fff, 0x20c40) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0xe2, "82ed3d235d6e5337085f534bf0a2a8bf9176ece427bc9cf97b63470d21592abf1d9b2050189985529f1bf48e3f752ee36864b82d15b55076437494761fc4b069bff2f5503d903e423ae8b1b0679d96e52c3c20bb7298ca9fa163a9e66ca53aef47e0ecdca70e82bf6e7e2aceeb5b88370248076d14cc10f8605aae79984eef7c3f8a48d245010ef8637b771d29d5d15cfb63f717923a4464d06c5f0692b7706bef0187ec0be5121c9d5a2db3dcfc8e3b622ce6506070f2f6fc6794c303746db7afcd5dfd04cdd7423e72f2ad0d4ee5ed8127b23da204775d995a877fc7555a891ca8"}, &(0x7f0000000340)=0xea) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}}, &(0x7f0000000440)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000500)={0x0, 0x5c, &(0x7f0000000480)=[@in={0x2, 0x4e24, @multicast1=0xe0000001}, @in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e24, 0x5, @empty, 0x5674}, @in={0x2, 0x4e20, @loopback=0x7f000001}]}, &(0x7f0000000540)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e24, 0xab6, @dev={0xfe, 0x80, [], 0x19}, 0x1}}, 0x8, 0x3, 0xff, 0x401}, &(0x7f0000000640)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000008c0)={0x0, 0x6}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000940)={0x0, 0xc02, 0x30, 0x400, 0x7fff}, &(0x7f0000000980)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000009c0)={0x0, 0x5, 0x20}, &(0x7f0000000a00)=0xc) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000a40)={0x0, 0xd7, "df819910764ee3a2942ddae56262ca121c48f3a71e7af747b562d82ca1e5b03663e17248f4abc6854efbcd1cb0454828514744d57b6851bc667953c1c714bf55f33720dd752601603cd333439d469d13f56764baa97310ac0bf87add89a617b661e6630f74d910787894cea56f2e5053a089af1afaa52eb0beb31b74c7bb2ef5724fb6acbcbbda1f6c7cb7b9a92104d76da2e0ff4ee435a52429027239945457be25497c2de4c19708583ca64ab719d0fed143defd00f433e1cfd0d65f4cc22ff2950df901c72070645f785f9a1e2c12d6175a8f9ed39f"}, &(0x7f0000000b40)=0xdf) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000b80)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000bc0)=0x1c) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000c00)={0x0, 0x3f06}, &(0x7f0000000c40)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000001400)={0xeec, 0x3, 0x8001, 0x1000, 0x8, 0x3, 0xf1e2, 0x4, 0x0}, &(0x7f0000001440)=0x20) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001480)={0x10001, 0x4, 0x81, 0x3, 0x0}, &(0x7f00000014c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000001500)={0x0, @in6={{0xa, 0x4e23, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x1}}, 0xffffffffffffe94a, 0x0, 0x3, 0x2, 0x48}, &(0x7f00000015c0)=0x98) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000001600)=@sack_info={0x0, 0x8, 0x7f}, &(0x7f0000001640)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000001680)={0x56f, 0x2, 0xa, 0x4, 0x7, 0x27fa6aba, 0x0, 0x1, 0x0}, &(0x7f00000016c0)=0x20) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001700)={0x0, 0x60d6}, &(0x7f0000001740)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000001780)={0xa0, 0xfffffffffffff02d, 0x9, 0x7, 0x1, 0x101, 0x8, 0xff, 0x0}, &(0x7f00000017c0)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000001c00)={0x0, 0x1c, &(0x7f0000001bc0)=[@in6={0xa, 0x4e20, 0x200, @remote={0xfe, 0x80, [], 0xbb}, 0x3}]}, &(0x7f0000001c40)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000001f80)={0x0, 0xfd, "d565de917a77ed6428f20470d1b011ce0ac5804de9b906d6b0876537c7f914546f373bff418bbd1c1191e1c5405b661ca7551e99e4ee8574a55b8a8444bf5c0e5a9c99515db45c17928dbf230fb0ac899d29e1f6dd02de23ada795d9d8d6da9e22a5907a3410a504a3e6868805858bd08182cd4812cd52e2a44e900a15b26f7e5672815097f470bed87c58930b873ed75beab43f35c64eea255d1d4e8d00ee11aec79b9aa4758cdf499c4efa2858e1184c1156dcdc88c2bba8d86abdc9b867916195573e859b707ec55f137e95071ab89a58b1c9e68bd910d42c0706ec749e99e72b18d4bf6f9877a2fb3c75f6d9e19877051bfd2e3437945f7785ddda"}, &(0x7f00000020c0)=0x105) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000002100)={0x0, 0x200, 0x401, 0x4, 0xe24, 0x1f}, &(0x7f0000002140)=0x14) sendmmsg$inet_sctp(r2, &(0x7f0000002280)=[{&(0x7f0000000080)=@in={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="7e00b6b794d17dc90eed1b15f97eac5cfb4c329546836757aa57112b5919421e92cb12a06797f9c6320814734ba3cf29e42ef06f85ee8d4b0b501026d277923d1037258f3b57cc78cf64bd9436dcc6e6abb32c81c21c5c504e782fb26566561ed2bbdacf41d79107d0f6a66b70f7050946344169dfd84f9c95088df2f0229fc098d336f44356fa5ac0af304810202ba55c5ad8d4ee27cd2486571e17f116c0cf0fa82b50fcfe555ae418ae509ff1811ab2c7ea84ea614d36c1eb9d3a799cb6bb1a77c4ec5d466038e32fbf7066bf300285a9d0ba5727523effc8a89b79aabca53d0f488eafbc36e53d8dce", 0xeb}], 0x1, &(0x7f0000000680)=[@sndrcv={0x30, 0x84, 0x1, {0x400000000000, 0x7, 0x200, 0x5, 0xfc3, 0x200, 0xfff, 0x0, r3}}, @sndinfo={0x20, 0x84, 0x2, {0x800, 0x6, 0x2, 0x9, r4}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x6, 0xfffffffffffffffe, 0x8, r5}}, @init={0x18, 0x84, 0x0, {0xfffffffffffeffff, 0x0, 0x3, 0x20}}, @init={0x18, 0x84, 0x0, {0x40, 0x1, 0x4, 0x28}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x454, 0x8004, 0x800, 0x7fffffff, 0xffff, 0x4, 0x6, r6}}], 0x120, 0x40000}, {&(0x7f00000007c0)=@in6={0xa, 0x4e24, 0x200, @loopback={0x0, 0x1}, 0x4}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000800)="9906d5f5e626f9a7b5c141ef88627ccc876130fdbce5a84d", 0x18}, {&(0x7f0000000840)="72af9124dd83aa7706a08337b9868c55ac08e6b27c87afdc61a3adfefbb103b007aa49490a2c3d2bdcfd92d03c28d3cbfb20f0aec1e0f2", 0x37}], 0x2, &(0x7f0000000c80)=[@init={0x18, 0x84, 0x0, {0x3, 0x876, 0x401, 0x9}}, @sndrcv={0x30, 0x84, 0x1, {0x80000001, 0x7, 0x800f, 0x1, 0x6, 0x7, 0xfff, 0x9, r7}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x467d, 0x8204, 0x3c29709b, 0xe6a4, 0x5, 0x3ddc, 0x7, r8}}, @sndinfo={0x20, 0x84, 0x2, {0x58, 0x2, 0x20ebe87, 0x4, r9}}, @init={0x18, 0x84, 0x0, {0x4, 0x8, 0x1, 0x5}}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0x52, 0x8000, 0x8, 0x9a, 0x4, 0x80, 0x390, r10}}, @sndinfo={0x20, 0x84, 0x2, {0x400, 0x9, 0x1, 0x1, r11}}, @sndinfo={0x20, 0x84, 0x2, {0x3f, 0x200, 0x7f, 0x7, r12}}], 0x180, 0x20000000}, {&(0x7f0000000e00)=@in6={0xa, 0x4e22, 0x9, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x1c, &(0x7f0000001340)=[{&(0x7f0000000e40)="c4e7ef591af6ed0d5f06281be7befdcf9adacab83c97f1dd096fba7ec67130cf3da61f47508039414b216b4828a143b6bbf27b61942dd451ccc7240d9af70fcf84cc645dadf5a559958bc99d0b5b90d7e2f2265edf9c1d47153456c47d997ee04e7d86a050871816c75a603f949e8dd15b1b483bd2e41cf2b782db77cc7d258bfeb732d13488be2ebb896782871fbdcf723589eb23acbbc3f25a010db2a0f305475d13862f688ad5f4bf5b7e06a00e1fc1171e21ecdcb63a341151dca3529f0f5b89f192970d467af968d4f8a85e5c8ebc74796fbf140cadef657a", 0xdb}, {&(0x7f0000000f40)="5b5a01a502d31d", 0x7}, {&(0x7f0000000f80)="a6deea92e42fe300ffab5166ac6cd7e7827ed9d1d1f53adbd21a887db07731432f5c2e115ca1965732b75914001c8e9e10f0b3024399066b5cbf1c518352361062dca7e04e3c17d6e87fb2df3a4d2236e29b0b5d3db33cd0bfbdad03a8de3ac1cfb901022a057fe2ebbb96091b5f2ac9a6eaa2bedc11e1e0d6", 0x79}, {&(0x7f0000001000)="9f58a0b1a06331076a288de55b0fa5e2afba59d493245fb3da4fc8a44f4801e1082740b6af6ec2096d", 0x29}, {&(0x7f0000001040)="dbdbf2ff9c7730c6a0daf8ec7f0f29f031a21a63fd23f33d07977476f2e7cc50c35e5dafdf66ca8f3de912abdacb2cfd5f05eff255663b48245f154b8f8cd07625208083d1f39149ce3e57fd94c966a53c865c5c83ef55493f9674586f1e571013005c2221156633963713c50bfc68fb8a739ed34b910072cdca4d9414ccc63c3b26937cd56992685fc3f54cdc00d1ce3baf06cef97f19da89b2ab8c6e262ee23aeeabe02ab7a2634d637652a3f562a5c4516a96871d0e24280503f87a5d1f365d", 0xc1}, {&(0x7f0000001140)="dc33574f0d49be37baaade76b9c3efbeb0a28562355617d705f0cadac3d0dfb071d3f35794", 0x25}, {&(0x7f0000001180)="7e6da1c1e8eeff152a4c4b02f70bd90dd570801f237869e70504f35d69bb6d8a003a892e7b7db9ebab76cb00d4ddbc45338d7749ad354cc279fc562481d2d924df89ab48ac4ae9423fab2d65061a1655ffd9053b0bc19cecd74a0e9da20d2d4052cccd6a039cf44bab7e3b03c4c6d28d6d1387fb4ceec4fa55cf920ddb79f5fa5a66b2712b0ab00706a380359b959c200d0884667a6f9c989260ea6ab3ed4f840482a5", 0xa3}, {&(0x7f0000001240)="6a8fdb36ef05c7fc2a75a53eeeb4b0f9792d983dc34372eed8ef96609bf1e92c353e95f051e2fdd57addf44160e5872446a5c4fcbcfc3389e50baa84ddc94b5359112fedae59e3ce8050781b66cc06800d10f6a717c4a2a1f1d467078b083464e12e2c9fcdc357468ea59b7f254ef0fe00c5e894dd2c854f1942bca9e1cebed35f4829a5b3079b3ca47c3d44023cb433fb60a5a64280e660ffa76230d64c545a8f1623bba39caec533", 0xa9}, {&(0x7f0000001300)="56e6f4d3d691a5f9e7215be7bfdaae3bb5b2b35503af11e4eeb95235dd58bd9b025b3ab12cdf78e74a48f66bc965a0ca7aec22b1ec7e90de5e53f3864b", 0x3d}], 0x9, &(0x7f0000001800)=[@sndinfo={0x20, 0x84, 0x2, {0x1, 0x8000, 0xfffffffffffff800, 0xffffffffffff8001, r13}}, @sndinfo={0x20, 0x84, 0x2, {0x10000, 0x200, 0xffffffffffff0000, 0xaf46, r14}}, @sndinfo={0x20, 0x84, 0x2, {0x33, 0x200, 0x4, 0x5, r15}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x7fff, 0x8004, 0x53b, 0x9, 0x100000000, 0x200000, 0x68, r16}}, @init={0x18, 0x84, 0x0, {0x56, 0x0, 0xd39a, 0x100000001}}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0x8, 0x8, 0x8, 0x1, 0x4, 0x1ff, 0x0, r17}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0xda, 0x200, 0x1ff, 0xfd, 0x4, 0xffffffff, 0x5, r18}}, @sndrcv={0x30, 0x84, 0x1, {0x54db, 0x3, 0x8005, 0x0, 0x2, 0x0, 0x9, 0x3, r19}}], 0x180, 0x40080}, {&(0x7f0000001980)=@in={0x2, 0x4e21, @rand_addr=0x1}, 0x10, &(0x7f0000001b80)=[{&(0x7f00000019c0)="8f83e5b40528cf63c1f17b1bfa6b5029f18bb8657f8406d40cfeacd3c203dcb98399f98da84c", 0x26}, {&(0x7f0000001a00)="71241a9a15172102d5bcb8fd2249840ddc5d7a59a8cdf018b2", 0x19}, {&(0x7f0000001a40)="d3346ba864d83759ac47e959db228626c9be77499ae07f8e7854ec94fe95178c49bb8ea1cdb326d0b0d4d52e5a1ea3f1eed29239f7c592884280da212defb17f20963978f7dbd00e603dcc0df620c7ac0ce4354c09081b40c3768162cb1d7d95b232ccf8699577701195bca86da4d92165d718bda1727404867833ab7d692fb83c58a7ad61ea8c7a09b5a369e9d56a859d16d54727d8c4228116a0c5afb59bafe0b92ec0195fe06f51fc4b", 0xab}, {&(0x7f0000001b00)="bbcdc3f18c456ca53a7ebf0e547fc6b341323eeb4bed68bea3d398c51a0312f694279ace961ce4c0afa4af50a884207f0fbbb0167cc84f4f5ab7d204c6f8d3c3f2c5a4d44120c1663e78150eb6aa11ebae076572e06e59eae90cdb022bca", 0x5e}], 0x4, &(0x7f0000001c80)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x3, 0x4, 0x6, 0x100000001, 0x3ff, 0x0, 0x100000001, r20}}, @init={0x18, 0x84, 0x0, {0x0, 0x40, 0x2, 0x4}}], 0x60, 0x4000000}, {&(0x7f0000001d00)=@in6={0xa, 0x4e24, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x8}, 0x1c, &(0x7f0000001f40)=[{&(0x7f0000001d40)="d9994c559e729e39fba781592273a2b8f17da3b7a92bce170c319c862435b0f0368ba2fdd3af1f22d6433c450c01862ea32de5faa69894097dff79c3524fd5a512db57497323ef8ed2d4d7083c25a43bff6eeb5d0361d4f4f765fe400fa84a0d2b6465be146e452e38cb6f63e943d1109a2c17f47971194043937daa0d8832c14ec2524da45d6933a1d6ecf7a7159c5a52202f88ac7845fe02f00c3d54f13de6fe2e84aa3c1e95cebf0dd1f59b6fecf865a33d396b9e2ba62a0d167180db7538125216", 0xc3}, {&(0x7f0000001e40)="a48fd9997604b17418913fbd620279ab2771753fabfb4f724c6511f80932904bad139a4665ccd39e18428f34543cb808092be25855f262d11d76925bbb32ff5c1305d6a60850612550b9b8b4c76bdf8e963831c23d285b7b4f6253381113dd2fa0079e256c6f69941b55789d436fd849dcb83a6299babda8d71f03c35560b2f30f2e0c798e95356bbff3afc677b3700615956393584d0ab3ba8fd3f33cc7920a654b616e001aa1aaf97eb492c87b3b063b470a51bae10f2899f86dbf7ae646b492d1faaf958fc8766b4400843f4e97b94997e8f2b02a6bbd5a57cf993e6c", 0xde}], 0x2, &(0x7f0000002180)=[@init={0x18, 0x84, 0x0, {0x4, 0x401, 0x2, 0x5}}, @init={0x18, 0x84, 0x0, {0x1, 0x5, 0x3ff8000000000, 0xfff}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x8008, 0x0, 0x8, r21}}, @init={0x18, 0x84, 0x0, {0x7, 0x1, 0x8, 0xff}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x5, 0x205, 0x3, 0x3, 0x81, 0x0, 0x74, r22}}], 0xf0, 0x4}], 0x5, 0x40) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:44 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r2) [ 206.579501] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:35:44 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x80000001) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) [ 206.728751] binder: 12806:12809 Acquire 1 refcount change on invalid ref 0 ret -22 2033/05/18 03:35:45 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x20144) r1 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000180)={0xff, 0x5, 0x7, 0x1ff, 0x8, 0x7}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000080)={{}, 'port1\x00'}) 2033/05/18 03:35:45 executing program 6: r0 = socket(0x10, 0x2, 0xc) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000a6b000)="1f0000000104ff00fd43544007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f00009ec000)="1f0000000104ff00fdde45c807110000f305f0f00800018001fd00dcffdf00", 0x1f) close(r0) 2033/05/18 03:35:45 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/fil.0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:45 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0xd, &(0x7f0000000000)=0xf29f, 0x3) 2033/05/18 03:35:45 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/igmp6\x00') ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000280)={0x3, 0x8001}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x10000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x3c113b94}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000140)={r4, 0x3f, 0xc4, "03751c592cd387f8ae0e102ba360c0b7094aa8c530b28bf1fb57699b0d5516dd8f5ec4a00cfbd7ce904c8fd7500b6cc30ad46b21213488930617a6d5c926ce149937b213364feb794422911557df7dc1e7fc9c379154ea93ba05242b489caad105be4f4ddc788a5b4cc6ee812c486a3508465d2e1c2e535727f0a95b06312bda796dcf763d9f3d31d2b7b3b0da3573c3c797de67ff62aaa74291abe09de4cfe0475d7dbfbd048331214d6aae44b3d9d48578b42f44478b43c40d3030bd646bdc0d459007"}, 0xcc) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r1) 2033/05/18 03:35:45 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, r0}) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f000045fff8)={0x0, 0x0}) r7 = getpgrp(0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000100)={0x40002000}) capset(&(0x7f0000000ffc)={0x20080522}, &(0x7f0000000000)) kcmp(r6, r7, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r2, r3, 0x2}) 2033/05/18 03:35:45 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfiplus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:35:45 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000540)='/dev/snd/midiC#D#\x00', 0x20000204, 0x8000) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r2, 0x4, &(0x7f0000000500)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x5, r0, &(0x7f0000000080)="70e1f9f36af19c96138208b2404ec13fe59037791117a707db6b82d68b7191a985ffa4be54754e150b25c5c0f6099ef94a2b6a4405aad0e5183c2f6af9f98a8f4da3939ef408284dd63da56ee9c9432e00ca2ce98a525b", 0x57, 0x6, 0x0, 0x1, r1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000000140)="6ddda6c18e2edd15fdbc107360ce86d698d6e524999947a7cc62988ae74797d4db77fe160891848a9dccc9ae4ff877023acb1b0a14ed1d35cf80e0bf11e70101b9d0488986de2e878955e70665f9b4922f97af40557eb1a9eea3d6b784e53f3c4a0f8c5ca8d48891a89a189f994378cd8afe4c49d4156f392ae67d3fbfc718d440776717ac8595847eecd4d44ae9964d454069fca6aa9cc060b79165ffb68348acdc65f3a3cd0fc2f79660d2d26329a8a9c0696d488a5b99b00dade589d75693ed9c17db857bbbe6f7858536602ecb505a4c7f", 0xd3, 0x5, 0x0, 0x1, r1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffb, r1, &(0x7f0000000280)="d51996e07c2a89a3405225924eb4ba132009a83612bdb8a45249197ddd34af4307973c5256c643a447385ae7541c9e9237a65eea23b424036f1fed78bd611da0bbef09a68fae84484ebe4a9fd13dfc1e8503c9db586f31b3e6ab0bd1753bb74f94c5f7c2578ad2fb5195ca9037ac4857ce0231c0b7e0d7038813ea09d79bb562c901bf12b206643662686bc38c2f23000952ba45a230350953aa6cb8e942a32e7d2185a0324be6ee9718e2ee93ec677183e3ebf9c09d05e748995c074ff1b0a39aad", 0xc2, 0x80000000, 0x0, 0x0, r1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x9, r1, &(0x7f00000003c0)="b7449389cd6d36c5e0fdcea59b32a94faedc0f242e40dce425965ccb682ac27e21b837b7fbe94516cfb7bfd5ed79f2f3f440a765500ff193d2917eabd5fc1dbf4564991fae678a870bceb0770ed973e6d3a98e32018157009729bd8468c4e14ea72ddfdb3afddf2cdd72d9acc55c6186a54ca0861bf230e109335cec9aa7625ae9c85f83ee520237078971569eb27370b559f8a99965a0fe4b612a2eabc74d471fa92654d9ca979c04709cd0bbb66c6f269ca961d59a8ab11c6dc7e7f2098f56de72f88155f511be3a4af670e03b38c902b4157f223f717ad46cccc59f6c437bf2", 0xe1, 0x200, 0x0, 0x0, r1}]) poll(&(0x7f0000000000), 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r1, r3) [ 207.516950] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 207.537442] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 207.544695] FAT-fs (loop5): Filesystem has been set read-only 2033/05/18 03:35:45 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xb, 0x2, 0x5, 0x1, 0x1}, 0xfffffeb3) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="827021baca", &(0x7f0000000080)=""/98}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f0000000180), &(0x7f0000000080)=""/140}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000580), &(0x7f0000000540), 0x1}, 0xfffffffffffffdac) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000300)="310c78751f0907fbabdae6db3f8ec627eab6c6530d97905d9fe8ae39f78f7ddb46d736eaa9e9855bcc01e68e424f810e3f8535c8f2f3a1b3a37e45ea9debf3f7eba29233bc99c3926b973ef67c6694d0f3c249afda713c395399753a7a634679510fd23a2ba7ab1c60c15556b9598432ab535b2393d8df16c8d9965c4d589571d61e0c6190a233e6821a97524dabc06084c4c45cc0999cd866d4d7133a232d8b79d4dd046eba349075ac66e92b4c3b991d8cfd2c4888171dcce8b1007ea933c04cf6f40103c06551bb087610bb51e7754a13016ada65a090ebbd2705c71d7e7d1246ee2682ef652ea4925c029892772a617320", &(0x7f0000000240)=""/112}, 0x18) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000480)=[&(0x7f0000000440)='/\x00'], &(0x7f0000000500)=[&(0x7f00000004c0)="706f7369785f61636c5f616363657373d100"]) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, &(0x7f0000000240), &(0x7f0000000280)}, 0x18) ptrace$peek(0x2, 0x0, &(0x7f0000000180)) 2033/05/18 03:35:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xfffffffffffff801, 0x80000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0xa0, "5c0c8294de1b631b2e4523d943ea9be22f3426e11681757a52c294a2851f8877d67e5221bada9cd80e0dfdeb8e2140930cb673742d0ac1d60e4bfe2def8f0846e46dc79796d22ae6d69c5f335467e40e81975a960533ed70d7bec4736dd8f2976e6eba1ab0c1e294266aceee6924bdabc787dce23b60376631c69217366a17da094ddbda5ac5b929f5f5c5d902b26559e1ca26c990b4745a3d14ea5d025efcb4"}, &(0x7f00000000c0)=0xa8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={r3, 0x8}, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) r4 = fcntl$dupfd(r0, 0x406, r1) ioctl$KVM_GET_NR_MMU_PAGES(r4, 0xae45, 0x8000) 2033/05/18 03:35:45 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80984120, &(0x7f0000005e0b)) sendfile(r0, r0, &(0x7f00000000c0), 0x3) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000000)={0xf007, 0x1, 'client0\x00', 0x3, "ca7a396878d0a49a", "fffc0e27df808cac1273075c345fc264a0814145d3173a6d2ef456f229bab0cd", 0x10001, 0x8}) [ 207.587079] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 207.609009] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:35:45 executing program 7: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000000, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xd4, 0x101000) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r1, r2) 2033/05/18 03:35:45 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) socket$can_raw(0x1d, 0x3, 0x1) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) [ 207.647699] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 207.685541] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. 2033/05/18 03:35:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) timerfd_create(0x1, 0x80000) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000200)=0x44) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x804) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304401b7dabf0703b0551e968ac"], 0x0, 0x0, &(0x7f0000002000)}) close(r1) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)=""/13, &(0x7f00000000c0)=0xd) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="04e2f2c3dd742531ee63044000000000dcf7cb4a0a37b049f2a33a326c4035e994ab689bf6f4e6bd4fb8313be085e33d2f50beaf16332c36"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:45 executing program 0: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = accept4$llc(r0, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, &(0x7f0000000140)=0x80, 0x80000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r2, 0xfffffffffffffe07, &(0x7f00000000c0)}, 0xfffffffffffffed1) ioctl$TIOCNXCL(r0, 0x540d) socketpair$inet_icmp(0x13, 0x6612, 0x6f2000, &(0x7f00000003c0)) [ 207.786410] binder: 12890:12891 Acquire 1 refcount change on invalid ref -257196773 ret -22 [ 207.832510] binder: BINDER_SET_CONTEXT_MGR already set [ 207.851682] binder: 12890:12891 ioctl 40046207 0 returned -16 2033/05/18 03:35:46 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000140)=@in={0x2, 0x4e20}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2000000000000000000000000700000083090400000077f60200000000000000"], 0x20}}], 0x2, 0x0) 2033/05/18 03:35:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x400, 0x0) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000200)={"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"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x400) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) syz_open_procfs(r4, &(0x7f0000000600)='net/softnet_stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:46 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/fil:0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:46 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000000)) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x9, 0x8000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={0x0, 0xfd40}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000180)={r2, 0xc9, "7017998df92d02e9f6d4bd33ba90f505b705f668ee1695ae8bcadbcffe2a19c22927630db6901dbc780fbf359aa26a278e92eca62e9b0d279e385d8eddbc0f6e96d6bb653beaa57fc164da5dae3e981abff2d358139baf50a9491d8cc3e6ab06af18f7f75d38f01464560000dda921d4b7e9873be289f9245dfc9f897fc9e4f8270e3efaf4caa7d2d83eff65060b9270440315a9583f715c20966c0437ae3ac77bfd7648ca07c608226cdf40fb6c5a976f8e1e1d96f7a2840880ccc2535663cb5fdae5dfabef7aceb1"}, &(0x7f0000000280)=0xd1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2033/05/18 03:35:46 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x4000) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x1, 0x0) dup2(r0, r1) 2033/05/18 03:35:46 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(r0) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r1, r2) r3 = semget$private(0x0, 0x3, 0x141) semctl$SEM_STAT(r3, 0x0, 0x12, &(0x7f0000000040)) 2033/05/18 03:35:46 executing program 0: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0xa000, 0x0, 0x0, 0x0, 0x0, 0x5) close(r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000800)={'ip6tnl0\x00', 0x0}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000040)={{0x0, 0x3, 0x95, 0x7c97a0bf44ec71ae, 0x40}, 0x8001, 0x100000001, 0x1}) lstat(&(0x7f0000000840)='./control/file1\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x4e21, 0x0, 0x4e23, 0x4, 0xa, 0x20, 0x20, 0x0, r2, r3}, {0x8, 0x243b4537, 0x6, 0x13ab0102, 0x40, 0x0, 0x7, 0x9}, {0x8000, 0x29, 0x7, 0x6}, 0x6, 0x6e6bb5, 0x0, 0x0, 0x2, 0x1}, {{@in=@multicast1=0xe0000001, 0x4d6, 0xff}, 0x0, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x3506, 0x3, 0x0, 0x870, 0x7, 0xffff, 0x3}}, 0x13e) 2033/05/18 03:35:46 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hf+plus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:35:46 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000080)={0x0, 0xffffffff80000000, 0x5, 0x3, 0x2, 0x2, 0x401, 0x7, {0x0, @in6={{0xa, 0x4e23, 0x4, @empty, 0x3}}, 0xb46, 0x1, 0x3ff, 0x7fff, 0x9}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={r3, 0x3e9}, &(0x7f00000001c0)=0xc) bind$alg(r1, &(0x7f0000289fa8)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(anubis-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r4 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000e4b000)=0x0) sendmsg$alg(r4, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000000)="f9e3a127be1d0953084fab7d2701417e", 0x10}], 0x1, &(0x7f0000001380)}, 0x0) socketpair$inet(0x2, 0x807, 0x80000000, &(0x7f0000000040)) io_submit(r5, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f000007d000)="b3", 0x1}]) [ 208.529482] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 208.536690] FAT-fs (loop5): Filesystem has been set read-only 2033/05/18 03:35:46 executing program 7: socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000000c0)) perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x6, 0x101000) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x7ff, 0x4, 0xffff, 0x156, 0x812, 0x1ff, 0x1, 0x1, 0x5, 0x5, 0xeb}) dup2(r0, r1) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5) 2033/05/18 03:35:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) rt_sigaction(0x19, &(0x7f0000000140)={0x90, {0x3ff}, 0x58000000, 0x7}, &(0x7f0000000400), 0x8, &(0x7f0000000440)) clock_gettime(0x2, &(0x7f00000004c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000100)="808fa396bb9f32fe9325e4", 0xb, 0x0, &(0x7f0000000180)={r2, r3+10000000}) r4 = dup(r0) ioctl$KVM_SET_XCRS(r4, 0x4188aea7, &(0x7f00000001c0)={0x2, 0x1, [{0x6bde, 0x0, 0xffffffff}, {0x87b8, 0x0, 0x3c7b}]}) r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) ftruncate(r1, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r5, 0x50, &(0x7f0000000500)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000580)=r6, 0x4) r7 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0, &(0x7f0000002000)}) close(r0) syz_mount_image$jfs(&(0x7f0000000200)='jfs\x00', &(0x7f0000000240)='./file0\x00', 0x929, 0x1, &(0x7f0000000380)=[{&(0x7f0000000280)="dd88093de69a1b020c0d51b434b1ea1bf942824c282a362eac0531d18eb0e1f91a327aac6705f5eb003ac2663bc1790aff87d2113d42a5b2366d46b8cf7103ae7b4bbeb9ace7956919f74048075ed9b24890b15ecef00cfcd4a1dabe9d35ad942e35eddf754336bc9d60817cb5f83ff069c5a69aff6588262ae1d6eddada876b2c3e1ab405fb2b806c8bf4807171376b873755b03f6e7c1ac9150d11014199afd1c4c34ed8ad6e5b23979cbfbe1ee6baa5769eb324aa7bf4616e43f69f9e20ad01567f74dd86e2a5158f6da3c09b47cde62a1f54caac1f961eac59494a7e6da50999b5", 0xe3, 0x7}], 0x0, &(0x7f00000003c0)={[{@nodiscard='nodiscard', 0x2c}, {@resize_size={'resize', 0x3d, [0x34, 0x9db2fe98666f88f5]}, 0x2c}, {@discard_size={'discard', 0x3d, [0x35, 0x39, 0x39, 0x3b]}, 0x2c}, {@umask={'umask', 0x3d, [0x3b, 0x37, 0x7f, 0x0, 0x0]}, 0x2c}]}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="044315400000000062bf"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:46 executing program 6: syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000600)) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, &(0x7f0000000100)=0x80) getsockname(r0, &(0x7f0000000280)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, &(0x7f0000000140)=0x80) syz_mount_image$jfs(&(0x7f0000000180)='jfs\x00', &(0x7f00000001c0)='./file0//ile0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='iocharset=c']) 2033/05/18 03:35:46 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x800000, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) io_setup(0x936, &(0x7f00000000c0)) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) r2 = dup2(r0, r1) fchmod(r2, 0x28) 2033/05/18 03:35:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x3fffffffffc}, 0x2c) [ 208.625694] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 208.678713] binder: 12947:12950 ioctl 4188aea7 200001c0 returned -22 [ 208.702820] REISERFS warning (device loop6): sh-2021 reiserfs_fill_super: can not find reiserfs on loop6 2033/05/18 03:35:46 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/fil\\0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:46 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x1ff, 0x40001) socketpair(0x5, 0x4, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000100)={0x1, r1}) dup2(r0, 0xffffffffffffffff) 2033/05/18 03:35:46 executing program 0: madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x6) ioctl$sock_ipx_SIOCIPXCFGDATA(r0, 0x89e2, &(0x7f0000000040)) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x12000, 0x3, &(0x7f0000fec000/0x12000)=nil) 2033/05/18 03:35:46 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x20000, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc081040}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x27c, 0x3, 0xb, 0x2, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0xa}, [@nested={0xc8, 0xd, [@generic="5cad64437220f501425677f019967a0d427ac9447626029756d7198cd2c1cf9df82efc6873676e51041ae66088723648ec9c939593812bb06d969db654d67321dd4224b1e3fc20782750e66bcf9e98914c9059cc8d73a56652bd0686efa7dcb19f3212852d29659d00dbba93f77dceb1ddd169e11b2beb48c8d3129876e5980e4e9c597051004895bb6966c10f3858095de961e49f3236e59f07550dd52c59079a5f3ff26d9478e5c20b74fefb4d352abffb76feb697064519515e84a2f0e0b546"]}, @generic="4b03f55b7e9ca7a1810728806f44881b898cd1e2654662bacc42eff2b553efc30c60180349f74e8c19b9338b811e295d2f792056e6aaffbdd6b168a8a6384652425658c6b9e91e2f53d3e864135fe46ccce37793b4b6c62d4a113f1472e27915a6a155ad5fa31f3936f815a96790ca01d910372907708a0cfd32d40ce3764db0035b691db9fcec7b294d57c816ee005ffcd96d00b45f1ae81fe51dbad0be0a2e395a3945d29538f9535bdf53cd31a3f1e09423a8e8ab0063c88157b83f0e2e88a461d5f5b55a28dfb9dd7d3802c97602e65d6faf39830a87381ae5b51743883e71239661ffbe8579069bd2cb7b1ba5", @generic="8d04aea55f571f6a0935d286a57f713a679e2a29a3234b46c1eeaf16b32c0a67dd3ae188674c70bdf7db1c73e6ecacd2f830e8c43f7feea49c734e822a277189f860f9263a640a488fe9eab11e018d871a7fc0760c48373be8cf40c3f2cb9cc8d8d7ae15068c3825dca164231ac0c6a06e4b0f9bd97ae93a453c039ec51ca941266bad448ff990867c55a6e74c6b75699a80a11ffa9aee8ae5dc712c84471b2f6df0e1008760e09f0fb3767b3172"]}, 0x27c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r1, r2) [ 208.733180] binder: 12947:12950 unknown command 1075135236 [ 208.745901] binder: 12947:12950 ioctl c0306201 2000dfd0 returned -22 [ 208.754150] binder: BINDER_SET_CONTEXT_MGR already set [ 208.759802] binder: 12947:12963 ioctl 40046207 0 returned -16 [ 208.773580] binder: 12947:12950 ioctl 4188aea7 200001c0 returned -22 [ 208.834870] JFS: charset not found 2033/05/18 03:35:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x46800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) fallocate(r1, 0x2, 0x2, 0x9) close(r0) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfff, 0x20000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3f, @remote={0xfe, 0x80, [], 0xbb}, 0x80000000}], 0x1c) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f0000000140)=""/138) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) [ 208.878558] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 208.885911] FAT-fs (loop5): Filesystem has been set read-only [ 208.892013] REISERFS warning (device loop6): reiserfs_fill_super: Cannot allocate commit workqueue 2033/05/18 03:35:47 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) semget(0x2, 0x1, 0x200) semget(0x2, 0x3, 0x8) semget$private(0x0, 0x0, 0xd1) r0 = semget$private(0x0, 0x4, 0x615) semctl$IPC_RMID(r0, 0x2, 0x10) 2033/05/18 03:35:47 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0xf, 0x803, 0x8, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000001c0)={'icmp\x00'}, &(0x7f0000000200)=0x1e) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x100000001, 0xffffffffffffffe8}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1, 0x200000) r3 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r3, r4) [ 208.947210] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 209.018748] binder: 13000:13003 tried to acquire reference to desc 0, got 1 instead [ 209.074467] binder: 13000:13003 IncRefs 0 refcount change on invalid ref 0 ret -22 2033/05/18 03:35:47 executing program 6: timer_create(0x0, &(0x7f0000adafa0)={0x0, 0x1c, 0x0, @thr={&(0x7f00003b6000), &(0x7f00001a2fa8)}}, &(0x7f000019cffc)) r0 = syz_open_procfs(0x0, &(0x7f0000337ff2)='timers\x00') timer_create(0x0, &(0x7f00000002c0)={0x0, 0x4, 0x0, @thr={&(0x7f0000000140), &(0x7f00000001c0)}}, &(0x7f0000000300)) preadv(r0, &(0x7f0000000000)=[{&(0x7f000036b000)=""/100, 0x64}], 0x1, 0x0) 2033/05/18 03:35:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="f1f3c66180298a072fc2a1c227b15039926efe4215b141736ce68ac6a6b68b1f1f", 0x21) 2033/05/18 03:35:47 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) sendmsg$unix(r0, &(0x7f0000000200)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000000c0)="ca9916594fe528c3ce0c89d6ffc94354d2a4c209d011428c52117db62dff5a7a277b5afe06d596001feeda25d0ac3145710f15b21789e81e05457520e34c72fe8ea1d24a244b8ddf683857d5ee1ce6063c67c1ab5c832f723cc11a09e4540f8a0987042c52fd98a3474a7685c8c755c47d58861ee3b897383dd215ab47ab36d28d", 0x81}], 0x1, 0x0, 0x0, 0x4}, 0x1) 2033/05/18 03:35:47 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/fil\n0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:47 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x800000800000002, 0x0) dup2(r0, r1) 2033/05/18 03:35:47 executing program 0: msgget(0x1, 0x58) msgget$private(0x0, 0x10c) msgget$private(0x0, 0x400) r0 = msgget(0x0, 0x108) msgctl$IPC_RMID(r0, 0x4) 2033/05/18 03:35:47 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfxplus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:35:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x8) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, &(0x7f0000000080)=""/126) 2033/05/18 03:35:47 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x30000, 0x0) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000040)={0x2, 0x81}) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000000c0)={r2, 0x3}) 2033/05/18 03:35:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=ANY=[@ANYBLOB="04632640acdd1ece"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:47 executing program 0: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) rt_sigqueueinfo(r1, 0x4, &(0x7f00000001c0)={0x41, 0x0, 0x80000001}) io_getevents(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000180)) syz_mount_image$bfs(&(0x7f0000000040)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x7e1, 0x6, &(0x7f0000001480)=[{&(0x7f0000000200)="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", 0x1000, 0xfffffffffffffa7d}, {&(0x7f0000000100)="fa97e13dde07cf780df5bbc0b4a4d4997d5e9067729dd85fe081ee8434ba7a070cc50017cc23960d1de8ae4272be0bb1a03d069924f7ddb35fc0bcb1775c667db05f3ebd3f511cf2dc7789a7eb239d8858cb848c9c36083c1f70bf7f96d72a111b8eeec55cb3c9e13721c1db48fcb33f57e50afec7", 0x75, 0x40}, {&(0x7f0000001200)="3723cf9878ad76af7c67ceeae712149a77edd36d51e56e6f6a61656132eb37624f043925606435c54dd18e26383217a4090660a32b7e292ab18be89b2d49fad17930c6ef479ecf00686e816b37", 0x4d, 0x348f}, {&(0x7f0000001280)="1a67ba1a0efcaf3da03ff3cd540887cd8f4c88ecc5756bb169601bd3a163dde81f0e2219da6f0d682755546cd9f3ce310d03c28c6c833ff3a9b22060f5381ea6d61c9a2711bc27cbc7", 0x49, 0x8}, {&(0x7f0000001300)="9a2f0e2739ffc6d8d2a55937b51e5e0cafaaf08df06b4015838bf39efb2674a81ee637dd540679c1efae9ee7150f9106279c7d06541d89c73a49e2fbbf57c99cbb45bdf79a75be791a72c029125dc7b02fa48a2d63b0e6db38069e", 0x5b, 0x2}, {&(0x7f0000001380)="f36fde0130485886da6198be9929cdd3a78ed8a382769d28ba3ed0bc3a8398b9845a40b3b7b6250f7cfa79e4296477d2cf375d62f9d15331a37985b4bf68d73c61d7de5dd6633c7c5d481aaa1ebaee46f3b4f3329811a476d440c7a49033700c171bc29cdad7829ca657bbe6292375029fb57e5d7dbc77c5e7441be72a6987f2c699f0de9a18d1ae98c5d1aa95efc42a9e73688bb5bdac7ecc7cf6439decc342d8b683b6b0ac6c8438c06f2b6faf3c4058441cf3e371c82081ce6ecb3dffcc4f7324dd1c3c59575dff3933bba229fa9e8a8865bfbae4cb0f70ba13e2acf1cfe52f6c", 0xe2, 0x3f}], 0x1000800, 0x0) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x0) [ 209.567206] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 209.574451] FAT-fs (loop5): Filesystem has been set read-only 2033/05/18 03:35:47 executing program 6: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027400f8", 0x16}], 0x0, &(0x7f0000001680)={[{@discard='discard', 0x2c}, {@usefree='usefree', 0x2c}, {@usefree='usefree', 0x2c}, {@fmask={'fmask', 0x3d, [0x32, 0x37, 0x33, 0x32, 0x32]}, 0x2c}, {@uid={'uid', 0x3d, [0x33, 0x31, 0x31, 0x36, 0x37, 0x34, 0x33, 0x35]}, 0x2c}]}) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x7, 0x6, &(0x7f0000000580)=[{&(0x7f0000000140)="e8010ca1009ce4a3578e853da74fd902f024d6cbec73d83147504e8cb57940fc8fced5bf585397f110533ebbaea4146ab21203f1a994fcc6646a18829480bfa6c3565b6bdcc73404dcaf9617dec2f5bbeb1b4c88af7edadaca31cc6aead688015f7eb1be345d8ae020e04a79e0cb050f11e76c36260a31de87d0890c972e", 0x7e, 0xb9b}, {&(0x7f0000000240)="20d4d4f095c5f16bff874e83674888505475da9bc401209c61f6ed3f27e20b65af148a8bb078e8510d473c39a9bc5039ecbbe868a303b884ebc2aa5ef0d31620d31ab2902f9dc2d686", 0x49, 0x17}, {&(0x7f00000000c0), 0x0, 0x2}, {&(0x7f00000002c0)="523228317bf00ce4636f951e4c688006922e733e77746f5326228b18c5142bb3b1c790abcfb553abf04d45feb5a789e6d7015e263367c0e2373645178cec6e9d16dce580d84b85937bf3ce6b30a7372521a5b340b4ebd85a19c2433d99c85f009461ca2f8837a17e155dcbcf9e5c1eb3d0e1c10e1377ad2a031fa8da1727ec1f1a6c267ce5bc9f480bd308cc1bc33ea80a4392558468c42bc578f6b58ed544bb9b03392aaa955d8a18e76fa48c011c576377345a16b9b3fb2978bbe2fb8ecd237f48bc96bc193e03ed8c3f1a5a5c28dc7d4a9f8e08fe19b663784bc3db34fa957514f4f243e8c1b3479725acfcccf903b96295e47f16d9", 0xf7, 0x5}, {&(0x7f00000003c0)="ed2c3c4c5550c345b9edc47a3a2889c1fa91975d593ebaa1bff4218ebcae077b6dffed0bcadcae06f271e69bf02a5220e8810bf3ad33eb423e4471c88744e883bd2856a82a57c1f29242a5c2e325c0e63e24435b6b3d98cfe940467875faf60f9e0b1229495601b8f1357ce623989b2670fac179053e2a8eeb3e59d73b9cda311c19ff31b8e2cdaf131491cd5bad2d17bf76c6220b90fc47d22f787a52235759d03d7fa599116714ddbc5b1cd6cb35703d7959264e163d1b532a59517d5288272182dbfd26ce90c6f281e700052751f9da51c2de6b6408", 0xd7, 0x6}, {&(0x7f00000004c0)="be0c854532b1ddddc9504d3c5ca3968359953dbb00ffa586fc60296af3f392ce67aeb893fad696a950c0058e99237b26d74da99cdf973cd3a4d32b8d423d19ef15c34dc31a2df853477de284cb5ad1a24639b8f35650fb53061557c243abd357d892f524a105f6b65792db16556445e339d5172080ffdd8877e9a078128803a3d247127e367776839cb889dbcea3b50e93465f90a59e409d88ce7527445b9f723b5eaf5123ab880ab10edfe2972fa61d3a5182ba02f10090", 0xb8, 0x1b0e304a}], 0x0, &(0x7f0000000640)={[{@type={'type', 0x3d, "6948cd65"}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp1255'}, 0x2c}, {@codepage={'codepage', 0x3d, 'default'}, 0x2c}, {@umask={'umask', 0x3d, [0x30, 0x36, 0x36, 0x34, 0x35, 0x34]}, 0x2c}, {@session={'session', 0x3d, [0x39, 0x2d, 0x83636da34c8b5e96]}, 0x2c}, {@codepage={'codepage', 0x3d, 'cp855'}, 0x2c}]}) 2033/05/18 03:35:47 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x9}, 0x1c) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000028000)={r0, &(0x7f00004e5fff), &(0x7f00003a3fff)}, 0x20) 2033/05/18 03:35:47 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) [ 209.646986] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 209.674744] binder: 13064:13068 unknown command 1076257540 2033/05/18 03:35:47 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x80, 0x7, &(0x7f0000000580)=[{&(0x7f0000000100)="c73e0ce3429971a88083a2c200e998f10053131775f529cdf7cd30fbcc353ff0786b8b7410ab20787f65025b97883e9d822ed9f808cb136221c2b0f941c5ff968d1fe631edb03cf8b5fea839e66959f5c9918416a99a8c28b5fad01b1642c2a84462d836182cd265f2cc2601c4e5b9f0e66ab2f4b45afcad6a41dadfd3cc0631f49b5a903ec6", 0x86, 0x7}, {&(0x7f00000001c0)="57118ab7c616246068da681756280e146d294cdb96891fe12bd33434c0e874d98eac71785d46132e1cad3414b18af91cb5e768229ff84d3c49931308b83c3df037c4008fb840945af66867f9d1bed0cef57b8ef23a90be9a96f5cad6", 0x5c, 0x400}, {&(0x7f0000000240)="fe7fa184f75dbc9b8edf0417fac4af86abb9d72fea95b1b44059d5ee61c2d9d567650fc22553fb3e5c77176c238cafe5984bc40c74aef256c4cfd10afb98f701fe8769e8be05c63ce18fb61a943df5e71ad8f0a4ee02ca7bd3f89d9e30d8209a466f90dff676887a1118a1135815", 0x6e, 0x8000}, {&(0x7f00000002c0)="2eaddb868d2a4944e2a864e8360e22540ce91aabb045de37c0003b8eebb6d4d0a8f181542b60c04aa1bcb5de152ab32e8278d480e8114a07e27d17dd961faafc3060514b5682defdcfd175db9412e1c47c306240b8ab06c1e2d4be1093de20f81687539f766f1c1b9e6496cb8a629528a0ddda53ba762ba28e4f42726e2e63fc256bcd50ae574df3412d116c05ca80b83c66e4e1f2dda1ce3c22473cde640d8a36c337093878953d3eafb90532491c4095", 0xb1, 0x9}, {&(0x7f0000000380)="914332c415b8b8d7f77649c361deb729c7ccea8fe1a876a316826bc91e611cd38dcf4bf6e663", 0x26, 0x1000}, {&(0x7f00000003c0)="fdacb140a465559212fc5d4ce0f23671bbfd065fe8d95252d378671f08fdb4daa1fcf107535b6b648385177e257a0c815a6089355a13f05d47b943cc8b4f1c0748ce1cd4432f1487f381e832cab3314e6d26c0e02edc9c0f02dbef2737767db9ce7ba3fdac0f9bf43fb93724e55b22676dc5a0a513334d11ac3fb4296efd88427c91c0b1c83e700447391ca680c92e7e4a3c234d9300f05bc9285ddacddbc6b01187b65a556567d3d608cb137b93db641b819acfd8b6304e309db5edfc4f59bb808913469a695a6bfb11429fe84e3026ed60fd60dea806417bdd30484dd5bd6c5f5a2620fc7259", 0xe7, 0x80}, {&(0x7f00000004c0)="30d333b7ba067a4d7c3f6c6eed0532815ed4bd39fccdcb976a5bb0687739b6dac6e1c25b37ec5d3c847ca8ae128c3ac825d27ed6dbc64ee814772773a67b801520fe2eacd7a09f2077d932776d43f54c177cf3578a33e27cd91b4c8080ae1b06379c85c304ef1b1fb975f54c6405c351d07f45475b279d6d7b0679636a394f189012e4ceac55fa1d2be1f1e8e4006be94cb0b2", 0x93, 0x1}], 0x800, &(0x7f0000000640)=ANY=[@ANYBLOB="666d61736b3d3630362c6769643d3337302c6173652c666d61736b3d3326bc000067696800000000000000733d636f6e74696e75652c646d61736b3d343433342c74696d655f6f66667365743d362c0000000000000000000000000000000000"]) [ 209.703569] FAT-fs (loop6): mounting with "discard" option, but the device does not support discard [ 209.710399] binder: 13064:13068 ioctl c0306201 2000dfd0 returned -22 2033/05/18 03:35:47 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x400, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000100)={0xc5, 0x3001}) r3 = getpgid(0x0) ptrace$poke(0x5, r3, &(0x7f0000000000), 0x6) sendfile(r1, r1, &(0x7f0000000080), 0x3) 2033/05/18 03:35:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f00000000c0)={0x8, 0x7, 0xd3, 0x0, 0x3ff}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000040)={0x3400003e, 0x80000000, 0x33}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000380)=[@increfs={0x40046304}, @release={0x40046306}], 0x0, 0x0, &(0x7f00000000c0)}) 2033/05/18 03:35:47 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file%\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:48 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000240)={{0x2, 0x0, @rand_addr=0xfdfdffff}, {}, 0x8, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @broadcast, @rand_addr}, &(0x7f0000000040)=0xc) 2033/05/18 03:35:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x10000, 0x30, 0x8, 0x2}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000000c0)={r2}, 0x8) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000140)={{0x6, 0x3}, 'port0\x00', 0xa8fd7f90dcd14304, 0x10000, 0x1, 0x7ff, 0x8, 0x80000000000, 0x4, 0x0, 0x1, 0x80}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r3) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) r4 = getpid() syz_open_procfs(r4, &(0x7f0000000200)='attr\x00') [ 209.847349] FAT-fs (loop7): Unrecognized mount option "ase" or missing value 2033/05/18 03:35:48 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x4000, 0x0) dup2(r0, r0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) accept$inet(r1, &(0x7f0000000040)={0x0, 0x0, @dev}, &(0x7f0000000080)=0x10) [ 209.922121] binder: tried to use weak ref as strong ref [ 209.927719] binder: 13095:13102 Release 1 refcount change on invalid ref 0 ret -22 [ 209.936659] binder: 13104:13106 ioctl c0a85352 20000140 returned -22 [ 209.959330] FAT-fs (loop7): Unrecognized mount option "ase" or missing value [ 209.981166] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 209.988527] FAT-fs (loop5): Filesystem has been set read-only [ 209.998449] binder: 13104:13113 ioctl c0a85352 20000140 returned -22 2033/05/18 03:35:48 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000080)={0x384e, 0x7c0}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) [ 210.024341] binder: BINDER_SET_CONTEXT_MGR already set [ 210.042178] binder: BINDER_SET_CONTEXT_MGR already set [ 210.048616] binder: 13095:13102 ioctl 40046207 0 returned -16 [ 210.069900] binder: 13104:13106 ioctl 40046207 0 returned -16 [ 210.075997] binder: tried to use weak ref as strong ref [ 210.081523] binder: 13095:13121 Release 1 refcount change on invalid ref 0 ret -22 [ 210.098633] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:35:48 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x9, 0x2) dup2(r0, r1) 2033/05/18 03:35:48 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x110) perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r1, r2) 2033/05/18 03:35:48 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hf%plus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:35:48 executing program 6: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="85a970b0146b", @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x30b, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x4], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x400000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000100)={{0x6a9, 0x7}, 'port1\x00', 0x4, 0xc0000, 0xcce9, 0xa18, 0xb838, 0x0, 0x100000001, 0x0, 0x1, 0x5}) 2033/05/18 03:35:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:48 executing program 0: mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\afles\x00') ioctl(r0, 0x0, &(0x7f0000000100)="c25b83de19ab253eedc11435f575a1df77798023cfc60ee4ebab90e0478d593a507144a595b0d41bceeda4bf13a892b2a351818b0be312a327c88bc0f234bec5920df5d4c24e259f71bcd30aed5e35dda993d191b35fe90cc42c8dc433f77dcc8de031e1684e2232809ca1102f1be8eb5e963eb88b4ac17eb253a50daf705b07a14c14d143f9d775c2901b091bca97a501ca9307d172a3121a62ee0541") getdents64(r0, &(0x7f0000000000)=""/235, 0x93) getdents(r0, &(0x7f0000000ea9)=""/407, 0x197) 2033/05/18 03:35:48 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file+\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:48 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) getpeername$unix(r0, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8000, 0x0) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f00000001c0)=ANY=[@ANYBLOB="070000000400000080000000000000d1d716695ab821fb000000ff07000000000000001000000000000000000000000000003b000000000000000500000000000000060000000000000004000000000000000100000000000000730b00000000000000000000000000000180000000000000"]) 2033/05/18 03:35:48 executing program 0: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfxplus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:35:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:48 executing program 6: sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f0000000000)}, 0x0) r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x80000) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x1c2, 0x2}) syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') ioctl(r1, 0x2285, &(0x7f0000007000)='S') [ 210.559404] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 210.566632] FAT-fs (loop5): Filesystem has been set read-only 2033/05/18 03:35:48 executing program 1: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000000)=""/101, &(0x7f0000000080)=0x65) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x4, 0xc, [], 0x2, &(0x7f0000000100)=[{}, {}], &(0x7f0000000140)=""/107}, &(0x7f0000000240)=0x78) close(0xffffffffffffffff) 2033/05/18 03:35:48 executing program 7: r0 = syz_open_dev$urandom(&(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x210000) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000140)={0x0, 0x1000, "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"}) r1 = perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$audion(&(0x7f0000001200)='/dev/audio#\x00', 0x2f, 0x301081) bind$ax25(r2, &(0x7f00000011c0)={0x3, {"24588fc75f2e0f"}, 0x800}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r4 = getpgrp(r3) r5 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x28, 0x40, 0x1, 0x7, 0x0, 0x40, 0x280, 0x1, 0x9, 0x3, 0x10000, 0x5c3, 0x3, 0x1, 0x3ff, 0x566e, 0x0, 0x6, 0x4, 0x8001, 0x7, 0x5, 0x1f1, 0x100000000, 0x401, 0x1, 0x4, 0x4, 0xbe, 0x3, 0x0, 0x340a, 0x738, 0x3, 0x68ba, 0x800, 0x0, 0x5, 0x4, @perf_config_ext={0x8, 0x65}, 0x8000, 0x0, 0x4, 0x0, 0x8, 0x1a46d204, 0x1}, r4, 0xe, r1, 0x8) syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r5, r5) [ 210.630595] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:35:49 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x200, 0x10000000000) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:35:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x17, 0x1, 0x0, 0x17, 0x0, 0x70bd28, 0x25dfdbff, [@sadb_x_sa2={0x2, 0x13, 0x0, 0x0, 0x0, 0x70bd25, 0x3505}, @sadb_ident={0x2, 0xa, 0x7f, 0x0, 0x4}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e22}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e22}, @sadb_x_sa2={0x2, 0x13, 0x80000000, 0x0, 0x0, 0x70bd27, 0x3505}, @sadb_x_filter={0x5, 0x1a, @in=@loopback=0x7f000001, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x8, 0x10, 0x10}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_ident={0x2, 0xa, 0xffffffff, 0x0, 0x9}, @sadb_x_filter={0x5, 0x1a, @in=@remote={0xac, 0x14, 0x14, 0xbb}, @in=@multicast1=0xe0000001, 0x17, 0x0, 0x10}]}, 0xb8}, 0x1}, 0x4000000) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:49 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file-\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:49 executing program 1: socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="210000003b04631cc2ba068e77cb7e9dd9b9ad1720624ec02bdedb810256a35c84cddf637c0ffef084d2912dd002065733325edc5657e2b6c8cb80eede4113076de5b2203e635d92b2cc0d95c5268bdbfe2bccb9a8505d596313f361b041356edbf14e7524"], &(0x7f0000000140)=0x29) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={r1, 0x7, 0x30, 0x7, 0x100}, &(0x7f00000001c0)=0x18) sendto$ax25(r0, &(0x7f0000000200)="4fdfce0d4048cc9b18e835a0aa0125015748ef0ae9", 0x15, 0x8004, &(0x7f0000000240)={0x3, {"9dff8a09f42846"}, 0xfac7}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f000018effc)=0x1c, 0x4) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) connect$unix(r2, &(0x7f000066fff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) connect$unix(r3, &(0x7f0000000000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) mknod(&(0x7f0000000080)="e91f7189591e9233614b00", 0x0, 0xff) accept4$unix(r3, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 2033/05/18 03:35:49 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000040)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x2c) 2033/05/18 03:35:49 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) fgetxattr(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73797374656d2e24776c616e305c2f404026536c616e3176626f786e6574306574e8312900"], &(0x7f0000000040)=""/48, 0x30) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x68c243, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000140)={@mcast1, 0x0}, &(0x7f0000000180)=0x14) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f00000001c0)={@local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0x1a}, r2}, 0xc) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r3, 0x29, 0x19, 0x0, 0x0) 2033/05/18 03:35:49 executing program 0: r0 = socket(0x10, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000180)={'raw\x00', 0x2, [{}, {}]}, 0x48) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000100)={{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x7, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x18}}, 0x16, {0x2, 0x4e23, @rand_addr=0xb08}, 'dummy0\x00'}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x11, 0x1}, 0x14}, 0x1}, 0x0) 2033/05/18 03:35:49 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hf.plus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:35:49 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) connect(r0, &(0x7f0000000080)=@in6={0xa, 0x4e24, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0xfffffffffffffffb}, 0x80) sendmsg$key(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x200) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 2033/05/18 03:35:49 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x3f, 0x40400) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) [ 211.615823] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 211.623100] FAT-fs (loop5): Filesystem has been set read-only 2033/05/18 03:35:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) r2 = accept(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000300)=0x80, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='A\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000aabfe8), 0x0, 0x0, &(0x7f0000008f37)}) remap_file_pages(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x1000008, 0x401, 0x40000000) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=0x60, 0x80000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) setsockopt(r3, 0x2866400000003, 0x7, &(0x7f0000000340)="6e8e4dc1f127407e849eccfb6a87b0494a77c7d9e886015df2cf06", 0x1b) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'tunl0\x00', r4}) 2033/05/18 03:35:49 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) r3 = dup2(r1, r2) tee(r0, r3, 0x5, 0x8) [ 211.659405] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 211.712715] binder: 13239:13242 unknown command 65 2033/05/18 03:35:49 executing program 0: r0 = socket(0x40000000015, 0x7, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={r1, 0x9}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000400)={0x5, [0x1b84, 0x3, 0x81, 0x8, 0x3]}, 0xe) timerfd_create(0x7, 0x800) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000640)={r2, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000680), &(0x7f00000006c0)=0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000002c0)=0xffffffffffffffc2) quotactl(0x5, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000100)="820b3eae9edf1409769c84cc79b60dae844e74d8d05df8594484fd3a") setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000440)={{0x0, @dev={0xac, 0x14, 0x14, 0x12}, 0x4e23, 0x4, 'fo\x00', 0x2, 0x7fffffff, 0x5}, {@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e20, 0x4, 0xabf, 0x1, 0x7}}, 0x44) mmap(&(0x7f0000000000/0xfb8000)=nil, 0xfb8000, 0xffffffffffffffff, 0x20010, r0, 0xb) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000240)=@get={0x1, &(0x7f0000000140)=""/212, 0xf7c}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000004c0)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f00000003c0)=0xe8) bind(r0, &(0x7f00000005c0)=@hci={0x1f, r4, 0x2}, 0x80) keyctl$join(0x1, &(0x7f0000000080)={0x73, 0x79, 0x7a}) unlink(&(0x7f0000000280)='./file0\x00') 2033/05/18 03:35:49 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file\n\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:49 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) prctl$getname(0x10, &(0x7f0000000000)=""/130) listen(r0, 0x0) listen(r0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x200, 0x0) ioctl$sock_ipx_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'bcsf0\x00', {0x4, 0x1, 0x1, "6fb4f10c0859", 0xea6}}) 2033/05/18 03:35:49 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) dup2(r0, 0xffffffffffffffff) [ 211.743964] binder: 13239:13242 ioctl c0306201 20007000 returned -22 [ 211.778926] binder: 13239:13242 unknown command 65 [ 211.784612] binder: 13239:13242 ioctl c0306201 20007000 returned -22 2033/05/18 03:35:49 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x1, 0x202000) r2 = accept$ax25(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10) poll(&(0x7f00000000c0)=[{r1, 0x102}, {r0, 0x4}, {r0, 0x20}, {r1, 0x100}, {r0, 0x2020}, {r1, 0x4004}, {r1}, {r2, 0x440}], 0x8, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r1, r3) 2033/05/18 03:35:50 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)) 2033/05/18 03:35:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x8000, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000180)=0xfffffecf) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000002000)}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40, 0x0) bind$ax25(r3, &(0x7f0000000080)={0x3, {"792d3f32a25ea1"}, 0x540}, 0x10) close(r0) socket$netlink(0x10, 0x3, 0x13) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={0x0}) r5 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x4012, r1, 0x0) r6 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x13, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000400)={0x8c, 0x0, &(0x7f0000000280)=[@exit_looper={0x630d}, @clear_death={0x400c630f, 0x0, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18, 0x48, &(0x7f00000001c0)=[@flat={0x73682a85, 0x10a, r4}], &(0x7f0000000200)=[0x28, 0x78, 0x0, 0x18, 0x18, 0x28, 0x58, 0x0, 0x40]}}, @request_death={0x400c630e, 0x4, 0x3}, @free_buffer={0x40086303, r5}, @acquire_done={0x40106309, r6, 0x1}, @register_looper={0x630b}], 0xa7, 0x0, &(0x7f0000000340)="0a336b9e1c6984bdd03a948a5e4260b2b953ad98233547ecd4ac2129fc9d3c897ced837401d2dace3aff44330628d1c17460f9a3a7362c18ebb34d688bbbb390b4f76cb7602b46ff5402311d06800191aeeb18b1f0efc40e8358934ee374d301f6584a0e99f6562d169192e55ac48678081489ab6e4b0663e30868c11f9ccea99cfa36693e8389d1c54faae352cab4759b97c4457bcd1346d3cf9b1188492b660f511e785baecb"}) [ 211.895261] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 211.902487] FAT-fs (loop5): Filesystem has been set read-only [ 211.941631] binder: 13272:13276 unknown command 0 [ 211.947940] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 211.983223] binder: 13272:13276 ioctl c0306201 20007000 returned -22 [ 212.012401] binder: 13272:13276 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 212.026007] binder: 13272:13276 unknown command 0 [ 212.031419] binder: 13272:13276 ioctl c0306201 20007000 returned -22 [ 212.037249] binder: 13272:13285 IncRefs 0 refcount change on invalid ref 0 ret -22 2033/05/18 03:35:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) r5 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x66f7c712f8a38ae1) ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000240)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f00000002c0)="0f011d26f2360f350f01caba4000ed0f01c90f01ca6766c7442400910000006766c7442402080000006766c744240600000000670f011c240f08660f6c8fcefe0f09", 0x42}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000180)) getsockopt$sock_int(r4, 0x1, 0x12, &(0x7f00000000c0), &(0x7f0000000140)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2033/05/18 03:35:50 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x7d1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) fadvise64(r0, 0x0, 0x800, 0x7) dup2(r0, r0) 2033/05/18 03:35:50 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x40) dup2(r1, r2) 2033/05/18 03:35:50 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x19, 0x0, 0x0, r0, &(0x7f0000002200)}]) 2033/05/18 03:35:50 executing program 0: sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001f9fe0)}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000b7aff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x8) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0xfffffffffffffffe, 0x80da14, 0x3, 0x20000000}) ioctl$sock_ipx_SIOCAIPXITFCRT(r0, 0x89e0, &(0x7f0000000080)=0x2) fstatfs(r0, &(0x7f0000000040)=""/22) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x10) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2033/05/18 03:35:50 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfpplus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:35:50 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file#\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)=0x5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'system.', '/dev/binder#\x00'}) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:50 executing program 6: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000100)="ce0309af78046f32a3510492e037255cba80e73653ceb14ed10aa2889944f0bf1dde8faaee339341f349bc00185c0234e6d7aeb6403b94982937212bc9ecb4ac9e5d98a9e3bd2f49cfb9fbe408913416ab8cf9a41ac2c508fbee21e2bcc7b5a5793910ef4597ebb6c253eb69ccfe53edf17e5a7c4e24022949fd83a0a277b4643c709f6b68ecb0cc2933644b8ce30c4dc07964f2968e67b7928acc609762", &(0x7f0000000040)="6fe1ea856ea7bafd633f777fa734a90201e8a79868a3b28fc54781286f56", 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xf, 0x4, 0x0, 0x8}, 0x2c) [ 212.602817] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 212.610084] FAT-fs (loop5): Filesystem has been set read-only 2033/05/18 03:35:50 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x200, 0x90002) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:35:50 executing program 0: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x80040, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x14, 0xaa}, 0x1, 0x1, [@multicast2=0xe0000002]}, 0x14) r1 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$getflags(r2, 0x405) 2033/05/18 03:35:50 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20102, 0x0) getsockname$ipx(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) dup2(r0, r1) [ 212.678438] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 212.715275] binder: 13334:13337 tried to acquire reference to desc 0, got 1 instead 2033/05/18 03:35:50 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3}, 0x1c) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000700)=""/4096, &(0x7f0000000080)=0x1000) listen(r0, 0x1008005) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x3}, 0x10) sendmmsg(r1, &(0x7f0000001b00)=[{{&(0x7f0000000180)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)}}, {{&(0x7f0000000680)=@sco={0x1f}, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000000000000000000000000000ead03de458ae66f77a325e2dbf46c1f3"], 0x20}}], 0x2, 0x0) 2033/05/18 03:35:50 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)="2e2f66696c65302f66696c65e500", 0x0, 0x0, 0x0, 0x0, 0x0) [ 212.748286] binder: 13334:13337 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 212.894813] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 212.902096] FAT-fs (loop5): Filesystem has been set read-only [ 212.922077] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:35:51 executing program 0: unshare(0x20000400) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xffffffffffffffff, 0x400080) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x9}, 0x14) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x4}, 0x10) 2033/05/18 03:35:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x220400) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000080)={0x7, 0x20, 0xffff, 0x5, 0x80, 0x7}) r2 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0463044000000000abd5c7ce3cd4b5c1067ff48dfa89848181f87dfe882471c8566d868ac899b60f3ad204308e6a78a2b3a4"], 0x0, 0x0, &(0x7f0000008f37)}) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) 2033/05/18 03:35:51 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000001100)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000000c0)="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", 0x1000, 0xfffffffffffffffa) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000010c0)='encrypted\x00', 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000080)={0x0, 0x7fff}) r4 = dup2(r0, r3) ioctl$VHOST_SET_VRING_ENDIAN(r4, 0x4008af13, &(0x7f0000001140)={0x3, 0x1}) 2033/05/18 03:35:51 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x126) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000680), &(0x7f00000006c0)=0x8) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a6efff), 0x0, 0x2001ffff, &(0x7f0000000280)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[{0x3, 0x6}, {0x8, 0x3}], 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) sendto$inet(r0, &(0x7f00000002c0)='-', 0x1, 0xc0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000300)="b89f74470a8786c25b8d5902ab73835dab85ab91b4643dd1522dc2ea3d7c947e65d4e553c0d6d8ea01e45248c4b2aa9508db9eeb5465b2ec01c4ff31c0d4d50fcfe633aeae8fec620b24912d56ee7a645623f044974f38ed2fbd2bb3054f3568fcb72eeda0dc026bfc478fdb5664e89131cf2b1d4ac8faa91c43397af097f82a252aff835d1afa2733644b4dc6b28d0fcb877511a4cd8884ce", 0x99, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendmsg(r0, &(0x7f0000000400)={&(0x7f00000001c0)=@l2={0x1f}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000017c0)="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", 0x367}], 0x1, &(0x7f0000000a40)=ANY=[]}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x7ffb, 0x7fffffff, 0x2000000}, 0x14) sendto$inet(r0, &(0x7f0000000080)="92", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2033/05/18 03:35:51 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x400000, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:35:51 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hf\nplus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:35:51 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000540)='/dev/audio\x00', 0x0, 0x0) bind$alg(r1, &(0x7f0000299000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x9e9f0677b411c36f) accept$alg(r0, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000000)={0x7, {{0xa, 0x4e21, 0x1ff, @ipv4={[], [0xff, 0xff]}, 0x62caa278}}}, 0x88) timerfd_gettime(r1, &(0x7f00000000c0)) pselect6(0x40, &(0x7f00000abfc0)={0xfffffffffffffffb}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2033/05/18 03:35:51 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file:\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:51 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r1, 0x1, 0x1, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) [ 213.617501] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 213.624712] FAT-fs (loop5): Filesystem has been set read-only 2033/05/18 03:35:51 executing program 0: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x4001}) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x101000) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000300)={@pi={0x0, 0x8100}, @hdr={0xc0ffffff}, @mpls={[], @ipv6={0x0, 0x6, 'qh[', 0x14, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, @empty, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x4a) [ 213.668671] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:35:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r3 = msgget(0x1, 0x80) msgrcv(r3, &(0x7f0000000140)={0x0, ""/68}, 0x4c, 0x3, 0x1000) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) getpgid(0xffffffffffffffff) 2033/05/18 03:35:52 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000940)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=@ipmr_getroute={0x14, 0x1a, 0x70523deb867ff428, 0x70bd29, 0x25dfdbfc, {0x80}, ["", ""]}, 0x14}, 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000980)=@ipv6_newroute={0x1028, 0x18, 0x201, 0x70bd29, 0x25dfdbfe, {0xa, 0x0, 0x10, 0x2, 0x0, 0x4, 0xff, 0x7, 0x2000}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x7}, @RTA_PRIORITY={0x8, 0x6, 0xfffffffffffffffc}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x5}, @RTA_PRIORITY={0x8, 0x6, 0x6}, @RTA_METRICS={0xfe4, 0x8, "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"}]}, 0x1028}, 0x1, 0x0, 0x0, 0x84}, 0x0) socketpair(0x1, 0x80800, 0x8, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x5) 2033/05/18 03:35:52 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f00000000c0), 0x2000000000000152, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:35:52 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = socket(0x17, 0x3, 0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000004740)=[{&(0x7f0000001740)={0x27, 0x0, 0x2, 0x2, 0x101, 0xffffffffffff0000, "1cd799a9098943845cfce204aea912bd698a1ae53ffe3a0a1868a8434db87925381985d6959579f135650ae449e16df75d91a1e8a3dbcffebdd47806902178"}, 0x60, &(0x7f0000001bc0)=[{&(0x7f00000017c0)="417009e093c753e5522dbd731496e48cc2bd9108eec35d708c725438b8df5749f25072889c5c3117dd408ff6773a5a5f1b4fae8bba6caccb70ff22541cf931782a1ad9f009cddb278e3178a67ceb0ac37f3ff539711f03421e6dbad2416fb618e1d77682d9dda116887c3200f730d69bc8e2eb91deacfc5da025", 0x7a}, {&(0x7f0000001840)="758683ab2c2203822543fb92aa59203d94c36ab763a34fdc42c48b91e5619819a63fe07e05d7437c3a9692868a5b79560bbfdef4d8cd835b3a588ff08aacbda6fbb3b5fbe2b90332180ab6dabd10f629377d3b4662415cdfcbff4f40701afd66d6d111f8a1a61b8d189ac9c70c03716a40ab8a9104b2b8e122eecdec7a1a37ed1ea22b7ff1e2f0396ba373ff2c5da4ef1dab1295515282c3857905f712a07a7b393df98aa300b4bac6c87707", 0xac}, {&(0x7f0000001900)="8485873063095dae9f6b5e7d3744179d78836f59e09297a626f1764e53a8e4dd1e9a1ec7bce14233c82059281b549f6260c806d304504f834f705e009dcc52a5b54ceba20de13f1f52fceb2199a6a01bd7aaa050bdae7ed4ff7e85fb05dc1da6bdbcff8a348e852ca7fecc1d0129e86e260e55724aae0175ff88ef1375d821722bc2bbbd4fdebb3a27124c6fb96e41415f298a49262aeac20df9424719e773f6d9778d8df7a15ebadd212d536d20f0116334264717067b8e6c826bd3dbbdb043a76a62d0ac3af26297ab9663ed4b98a2e3526eb3800072022d247eac722177eeb70e4cc3a12eba59790d10044c7c8870e101ec", 0xf3}, {&(0x7f0000001a00)="c03e6410ec4d9f5e44f64dab92e4e18047421d25edd34b9e0c9d3ce5baea9115aceacaa5fcfcff65da1fe69c3558e85f70b30f2683c5410a6a55472c4512aa42fd514c145ce8ad0e6e825cd5755eea60c70de08c3e33bc702a3ea7dd6d2c42ecff31b2a8ef581c3976e62f114fe4faafd9fe2c60baeb31c776dc40fad9b631035ea85e1cb0cca8458f5b6115a3fa5f36caedf7af71a8f3559446dc446d3172d631b632bc01efed8542eb7441565a61", 0xaf}, {&(0x7f0000001ac0)="0cd553eca63fa5ba0c04a34ffd113823c3623c026529e6187a114ef7f790fe7aa9cb6aaf47f765c01e485c4ea9434fb11135ded24128e978a612f9ef124ca758cdf65e677d0e9dfdce3494b2c101be83e7bd8c9217c7df0a8d7e99187f274512029a43dcec9de0cf5ff3b48164f5d922ee5eaa3e879d12aa100fa7256574231a5fa2abc7ebc9ece0f556d3bbd883675153a4499127384137c7fa3749f0243f9350d41099d5eda5210efcd70fb2587403c7c29a5206abc3341dc22c649e8f4b49aed01d066c906150145eb281a8c48d477f251ed6083fdaab53fadb18a172124592717f76d9e7fce4f2bc291b76ffaf", 0xef}], 0x5, &(0x7f0000001c40)={0x70, 0x10f, 0xde, "c21ee2a6180f63c40c54d8e8ab1bc260cac0a2da319fbe506b6109206653ce87a11fa46a423e00f0a9535ac2bcd086324a0a180bf8220aeb39482b41fb972bb9063c83393976911adbefa0af96f610f3a7ab2240b8a31d3dc5dfbae684"}, 0x70, 0x4040}, {&(0x7f0000001cc0)={0x27, 0x0, 0x2, 0x34d71b2fb3c7cdea, 0x1, 0xff, "e675951d8dc72a745eeb63ceac651f7e79b121abcdb15a9673b4c9a8a9fb23499fe57df761c15d3934329b6fba8fbcf033a0b721edaf6e9ea5b76071037d17", 0x20}, 0x60, &(0x7f0000003f00)=[{&(0x7f0000001d40)="8036b0940a6908354157a5a9e31813a930f3803fedc3e36f6492a6cd6723e7567e40c7318805d6c6bd65d97b9bc9e26ffd4f17685571fc3f84c8f8f787c55bff7a546f1103dd56f10d9024c63f0aaf22f8035ba376d3dd90471d6c1c2db265f6ae2f9c441a03a00c2cf79f1afb4d1850166377b73c8ae229d83da83a3819c73d829ffb5d96e41e2883676ec795e05451031497f7a93378dc677f7ac744e3cc9d62e169e8aa505e10d78c0a1e64a6148879d86e54075aa1c2410163574b698bed90be46e47462803e438b7bf44439115bb998635f26203cfd99df385fc921767d424841c17a4b8eb2e7183b3dadfb1903918f233bf4b1ca558e16cb2b360bb150c86f1829e38b19cd9cd8c01bb8e4f2b260d70a6b6d8ed15988e6a037d01b594b712a2aca2f110276bf38a240a354c808657b18d6e4e17ada8e7f002c82468c178dc07c7b07e5bd45ed54e5ff641826ac14d907f0bac86a9e7033aefbcf7fe55a75f2de7345e8e62323b99ce3f515ae49e86a59b8bb19b3265a695fad8c410cc189118ca6c77bddf87ae16c505cc0adec9a45bedd04aff481ec90bb46b041fc17b1cdd43ad1dbd3372cd2e084e7ab369a2404010d53ed8f5e0181df64e120769bbbc3e38660007dacae7a4a8f994601b6a696faca1dadd912591f7b1ca4da2f214f6143859fdfc45a3b5ebff2454e09469932fb012110794f525735eaed7556a91697ed3a8e04e196da14200ccdacf55c9dbdd12e02c901afea2a9feb8f16cf56810d3c2aeae640f2055598facd44d023f31a254e13cff6806e21f90079d78664771f0ad4c7178132fc7b2e6eca27feed88903d9372bb22f259402200053683a7e3c46d125ac2feacf516dc9113e228154df632cb3728584ab5ca860306dd6b2d89b09be1be92df718b33e5fb766eb10910a07ae118c3ba61c073d9f415b8c027410a57c1ba5aa002111157fb515f63f41a0c704b0eae6b1b5499ee0e364ca1e4cac0491b11f3fabb56a19bdbb1fa708dfe327a1f11422a55e956b482a860838456a2f491ae3bd65d79c8e711fcf82b3336e658ecb918bc2bd9b62604d611eb6c28021ba6517f2151db5c76999001fdcf8185ecf5942fc723973e6b6b76589a851ae3a145908208443a661fe324a17289eee46c634b26e4dad23db5611c43c1126b34dc9f99a281de99a95ea7fb92db18f39a5afe86916d0f49c7a7657a7b78c65da0b9201f8c88bfca1a5bdae4f8e9e47eed30dba12b1c8692954dacad6d2e9a3f78c061dc399f1883580a2a58cfe6d0a9a2867fc2396d6df08c5f674103863ec98d1c82c7d508a7b6a5723d0c3b64d40049fa118925f81135c00c267a36b9d9e6f880b534f4d18ed4f07ce423e5968a4f24790534c51a5425b64e281cbebbfa9f8bd9429aee3aa53755a61142554d1ec9147ff840a3bdc3ed340e9752f810dd000a2029c78c4fe8fdba3a0eaf0cac0f7129106e94e0dd22d2bbc158ba079db993650c4cf511dc759de1cd05b2780e401c15adbef36a946264b582c3be54c3c1ea326a0c420f811f399130fbb0268a5a456735fdb012f2d435ce934b1c513cf1b0e1d5e9036827482369d474126fd815832ecebcea203b73e96a05ebf1b34e6af1bb171bc1e11e22dc2a901af07e9121b565c7d431d3ba0d397d588401df335defb4764e97446b69e91ffa2a8f3ff10ecf07208f3de9c862e8d8a6787490e247996e5c54d487d1ee2711522009a34b07d019c4b8de8c3e87595bf483c28f131f3aea0537971436a6880bb1c497cec7cc9a1a6df1055550fa18104abcca027d8e2821d53a53e1a5cfd4442f60f6b6ed2aea71562ed833a7a482ecc8715a51f177d0bb4522628e9c34c36e9673522a959cec0e841d8f2067c5cb5263756635fc65e310a65cfac9c70e2a4bc77ebcea87f9a7431f2324fe3a5ad55f95060c9b93b25d610d877dd164ce30ac68244d1a21be779cd66919ca8bbf868fd54acdacf5f3f924745f3ef26576d9084d2a8c643d3d4e5d1f6242a6bbf060928cac5eb291fd5691056177b3b153b797245417ddf827f84ab3fddf0554b531918575a507064eae89283f1bc6a8937d43b38a705d746135ca49fd7ff10e648374bd008e373d8b7f917aa1f27da4c2df63854d53a860bcc1c169c87005812732e872f2c81d0d9159b79c34c70efd06a08b4e56f72fd67dd823335f604bf3db90e16ba996b08fd4236b278a22aac27c95ffd1ec56f1db409b4ac07ae77de3c1ea1196b3310d253427c5501f0bcac59e1b7264a6cbb354c6796308e700b78cb44339e21977ccc78804c86de6af74e73715106d4513b9ab04dc6ed0a2675bf43689f204222cebd3b52383e9cb7bf53f29a1549587c2dced1208a7e368c9d354c92c5bcb0c7e4f25276fb8696271c3c5f482908d3cd3e80dd7648b8fb5746987e7224be340a653cea808cd34b665074d771f050697e57e1d8a7d7d451260573a92fd822fa53ebfc7651d4ce50bde9e13eb8e148fae7e1f59f2f14765ac74ac8bdd3f38e8872d87064f70380f010cdc6e6b472d130232b92bdc997946da1e8f71e5df4603c2e6da7670ec347807e631391aece202744ce2b75fede723051761321bd88983937b6910162aa181578e1e236ccc9bd62d81f9d9c04e94b655755cc4ddaf662e2ea948427de74f9d5bc8a68761f97299d8cf64f7b2f95af7451a57186a24de81c89604317cbf22903330038fb8a42065564dc187bfc3a8a079ece2bb0b7b05cafbbdbf41d022af04dd3291e27e15f3da88f60649cd6a8edc8e61ac1e9b5318979ad8669b6b3872120c87d837b8938b6f315ac8124544de374d81f0c6d407f44fd344da7216aff2dd8404c5cd149a4bacbb097bfd16c33caf27b19a8e737d1bc0ed60101caf83f6a8dc5f26004275638cff6425aeff9a2336ef0660929ffccca2b90a3808d966c1b962a0c723ee2992d1741f5b3bac3a3632f8f8f596bd8faae290ac8a6d37f068881583bc24117f5dd7d63bdc25d2d8946af25c0f4655553f8d9f4a8e8a3377ebc97e6472636568fdbc265d80c61aa11baefea7bc811743641c2f885f381a1d20e519f0ddd3ad69f5cbd8b97245cdc67f9c78b014c579c93ad3976472f6ae8413c8ac43b181d77edfab95af1285ba332b960495bf4625b7f70d5154bd8e4d95d8758c0248e433acc15eab53846a77d909147a677b0ec1aa98ae9b1c2e7d35c92eaab243c11a67289c7c12af31ec7bbd925aa658598ffa6f66572b0b2ea36ccf2d9e21ea778e11040a5794d66ee7803b12ac1c46e60e238d59a4325333cdb7cdceda9bf653d8b1a40264883727c38657acd319bada59207158380f33e7c158f91f4110960ce124d11f5961b0057c5f7e5614fdc20e99634a67e5045d422b960be79677cfcb7b8d836842c059756b23acbec5e70ed55742ac6cbfa301d4f0b34f1923952fe1d66ef945d9691240bf25024125fc7b22f8ac37ec894741ca89706f48d72a97d3819215a06755903e3244433b693d09088f303dac0e54def1906d09d1875faa1c203f9851d0ddb54b7088a78d1d90e31ab308122d8af4b085002a9a6a3c457ef633b3e110effb5da4ee40dd6aa79695fecd956cf2983ad1f0010f2ac1708d373ad7a4ed4aee4d3255fc0dfbabbbffcd0813e22a9ca530fa71d920f34e1f33f47e9ea2affd8bfffa65791296041c5b8cbd28e0a5f4d5a862a93e72783430d8df88eef46c1d14418a30fe8495a846f3ab257f5e40920dba72ccb4005526337323c3510fc7d6664a2a0c41c6b941d79cd8616b775a25214cf8614fd1e5662166ae31c480d57ee0dffe3d802ae981111b8ac69f6619dcd586f37f77b08d8b57a8b99f3477090ec3c423679d6105d93a343ade29d6d2a340b2e31b71aa300cbacdaf6c6ef82dfad36cd5a50c3188b7cf2f1b2c3463a4b580593ced668ea88da60e6db7c81cfedd064367f552c7aa36e3ec594470fdedb4a7536e53527354a616ea4817d64b751888474c56ab353bc1c6054c7e5f8f9cfb9b430bc1a292e57037be48b13bbfa48847f8b465e9b32a07c886af023f493a5d99a82d779a424040b75f1ca625507d220685d94f24fc04d3db88316e825e5bc34920702d9dcdb233ca306a393684699726e3285a4df01302427a5932e7df696b09b97df7c40e9593ddcdf0b1120f7abeae5973bbe7a67db87fdb40075235d90d8d13c7bf967a492a92a7286bea7086723e858b70dff506a1891ab752037edfef1321074efea8499b510a00b56bac3e146399274f3f1e68f5f3c8a307ae1a65ed9dd440c5585c4aab4dff10f29a2ea87e1e9299fc1269cfce8a22306563ff098724480ef066c10f82617bc0dad6869e55093891a19895afbde31ff3d84713f8846d6639dcc4b406c32070226cbdf8e06cd8518f7b494a1f03001bd9fbba4ded2e7df87eb590831e664d467de3b621592959f64c1bb878ace7d74d5eea3c9143155cd776db5f4fbe756013c3091370a849117b756c3b98796e3398387d1c61200ec82155027b403e323537f8f8d496dcf56b041ef7095a13b1ef698a1891b80450671002b12e60daae905f632ffcbe52ed4f1844c5442b238f1d3dcca7ca2a03932cb0524071341b3a15acdd0862ca5445393e2e4815b7ea2037296b6b2dc5d260605cfa76202484895ba1f96788849845cd9b12c1ef41de5bc7d8c5af59b30a7e04121210ac9ff4267743c265dd6d0ecd4c47afab516b9b4ab79c59e9b1a929de07ed53034bc8a2698b938c61d1750dccf0420c450d4c6cd5f23c9c56d062ad61c5153ef509f2d7c6126ed3a118b82af371e4edd07c3aba0153a68aeee0a3d5017cc7499e8f0c1ec3d220643435b2aacb5da82e21109b10847aac912398af6b448d1c3d17ff2109b12c7b4a743dc0e968077c863eb5a54806b9e53a38410ef3769d987cb93a4a9bcb100c10af690fda0ad5416027ad3233b537c2cee58e57829c0dbf46e193f75fedc08877032c34c22977550a9f3085365eb46fdfc4e7cc365effb735f257aa4bc7ee28da7d7ba78480b9d418e21c9edd04659ca94b9c61922659955ba83b396c7003ef43b020df2648049083f106b3417d412e96c6e3bc5d22ee5396ad549b06ec54b752c496efbd8c772f3c9221b3be95312e9a3a7c3663aba0310864a258f8bad5032f378479e0ccf45f11515fd9c162e942d336a1223f4f3b7fd553928cbd1b7c138161747ff9df390e68e2343eca02e3c5f8ac482d3617329785f2d6175e31f59d194e1b791c43951c9887621e2509cd067704c22bee6660853216c1d30b954d36c8f0599b384d6de9b43432e63172196ef64c41ac2536e14b1cc0766ca793c9facbe15537a19318832c827a0d659285f90693654c428b4bcc5785e06fb86c95ac67b35bc4c1a1621eae3f4c6b5b3a3179406c357ff8eb91bc864642f74d6e63c8cca60aef4ee23f9d5ba0d35fc98aaed0970edb237353f956d0f52622ed562a1e37f990380296601c9cab653ebb3e16bf237f8a68501ee872a55db7a63d1a372a9622bf147b3147b3f3f7a680b4c0929ab388ea8ff8e4de0670bef1540038a5aba7b1a4b0ef8b96eb2b27bf2dd774b7d6fc320b9d5d01cd8d11b4aad7a755956f26ca2156f9265a3edd923f43ec506d91f3eab1c8dae159d411a27939e53777a0a790bced1e604b4d55af517bd55e3cd824a9932f9cb515b788444050aa03927ea22bfeec7782df106d2d5b87f022405a1d6491c17b2eb0559a2ca483bf920dd06e44534eb44a08d20a0c2a29767151cfe4a9c24e3b5e3aded7e88ae7", 0x1000}, {&(0x7f0000002d40)="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", 0x1000}, {&(0x7f0000003d40)="86ed1a9d7b0b46f0b54845256c24ee41b5965257bbb4e2759ebfcb3610b57dc585502fd16526219d3f8dcda723a5d36538942545e0a6f599a7abf2c0955428b3208d590e6e698e8731d20a83eb2f2a71476794e070ccc502eac013fd8a45b36b409158c191a00a57fa7f4b4b7d71db544abad4605fe04f709ae00e404a1ff9ed7558030e2572a2463939b8769577b093569e5a0818cb0a63450fb18c2f0945", 0x9f}, {&(0x7f0000003e00)="6cc5f26bd7e98fabf0b39bcc53287730531013bfd02f0659effe61c7f7d437df4a0ff99e6a6c0003c3f280c0b89f5190134de68d3ee8a1d433723708a1f53d0dee2169179a7649eceb825041bece47d076a8c6", 0x53}, {&(0x7f0000003e80)="37c746026800fcc1f2ec1546b746d240843199bf87bdc5df2b874093ae327ec115b1c44010940c71af6b965f55c30773bb15b72c72d00cc7f0d06166f302993ea70df600ff61dda0fb3f52", 0x4b}], 0x5, &(0x7f0000003f80)={0xe0, 0x105, 0x2, "023b8ebd5359ad9b015f171521ad08f2fa4f754ccf3128cfb6ef279aef6f41d4beae178caa04092283db254da2338ada002782b6a09910507db917ad106ecae6ab662605fa95797e412f95d8b2290c92a4bef2894572f3866e39f90044a503613f6c100fe144f58a52cc736423e8084cb35f1d62dc5fd3fea70d64c7a6eca34904a925369c0498e23133098dc31415c087bfd49c9ede34908743860888e811315d2281a2e31c59bd3d01b9627802195f46d5f578f9b987811bbc10e3d8d46877c263af9ac420f83bb33f5a6b"}, 0xe0, 0x40000}, {&(0x7f0000004080)={0x27, 0x0, 0x2, 0x2, 0x1000, 0x1f, "239bf93d7a4bf309d4c6092151924a41beb1f13e470c9c8302fc4a9bb1a09c3bfa331d9d2e4341744b170da607ca69f22e5e1f3db7016584808b6ad29c38ae", 0x1a}, 0x60, &(0x7f0000004300)=[{&(0x7f0000004100)="a9fcc28c300031fea5fbe8ef35bf563124aeb154bc608a7cff8ed92688ee87edabbd1c0a85348f7dd3e963d1ac06d4f73afffbea04b901ec851f7b4f729cb61cf3d7ca5fa33453ca243b71ad9734335d875dd56286fae39424a312acf407a708a3d650c6fdcd8b55ff6f67f23c383da8534de94d979a9d606668d8f54fe14c2915ea480e68b5b5", 0x87}, {&(0x7f00000041c0)="fd6ca84dc99a40ecec163cc7d3c93eba38e77a0f2ff1da1eab5a6ffb638f41bb9d0f4a60078207890dcb99ff63d7f5044eab96f8f94fe88d27fec39c29336459c7844ac19bd0a71141e99795b342ba72e42b5c5253cad43ccfcc4a5f24f9bf1349256ed7efa6cad82257cc0a7a863bd0cea94d60ba4787fe26e85465210b84ac64fd3e77ee3574c65009b98d2f620f9ea13a3ba6ae513a6929d1", 0x9a}, {&(0x7f0000004280)="8863c60bbde233d323efe604c0dfca13772edef320b895f97cbdc31ed5ee6a2cd977af0411ca7f59941f92414079fde97d347b4ddbdc0bbee7b1ed75346e432c6da549ba2a9ea7257349d69d7c8979d28f714a", 0x53}], 0x3, &(0x7f0000004340)={0x60, 0x11f, 0x83, "1cebda34189c7a0e3116b5681549fcd9cc7b4c70a8a5b49202df11d87363f1d4eb12f26125e3ac6f6e84bbeb4e15583bed7ff18fc58d9195b4aa30c0fa76a731c8efb63750a1f0a000"}, 0x60, 0x40001}, {&(0x7f00000043c0)={0x27, 0x1, 0x2, 0x6, 0x8, 0x80, "df27f77dcd96df0a513acaf49dee486cf7dddfa859d7813331adf93cd5d78e3888bc04c126aff0484cb43f9517e354fb4be0534ee5add7bfa8aa9cd61ac96e", 0x20}, 0x60, &(0x7f00000046c0)=[{&(0x7f0000004440)="fc8c0c8a48bc41d64d1caa221d197a072896bb0e9da6a4beebdce123c5b3341cc88e04cda9fe1a7bda7636ca11cb1419d59b27892aa4b7e9a5d8", 0x3a}, {&(0x7f0000004480)="2695ac60f494ba870ead620d4533ac5a61dfb9bae1769d3e964852e65e2aecc6bbb9a2f627ef67d9b1656a7f8d50baaa7000afaaf8057a1619fdc3a5fc16759dc9f3bafa04fb33726c3b1011ebbe7c4a", 0x50}, {&(0x7f0000004500)="bd99e31377df2d4e489027624f9d81aa3ce04c3be9fe08b693280906c77b0e076c84a379cd", 0x25}, {&(0x7f0000004540)="90ca4b30de5187b77a466826b68a1702a1e820e3948c17f7e78d58c3d8bf37edac44ede12e54efd07b83193b213b9874b86bed16cc4671718c18f3c6807faf78073d0653377941002b897de76ba26529922c0dcfca89a8d8134ee8131fe4d895c2427ca61cc5f882d86102064e7e1073beb1286a50d9209ab4e9a8e31997bd5ad8612a1a7bb17170bf1d4e83ff6d1edcb2087df562bbc7234a859364b573849a86db410065eb4154de9c7dd9b665086b6fc002ea70f46c1f4fd83438686865c22f99e5cd682cc66858b19c202d73bd4286a30d6027b51dc33c3c90988184ad45fb", 0xe1}, {&(0x7f0000004640)="59747355303bcc343b37a50730262752019dab6c895bde547cc7491a15bd1fa87106df93f65b781429570cd011f2683dae21b33d9aaadb6b4bd225f99cbe8d37353bcf7996e87753e6556d73e11e6c3e64895f1cdf86b2d4bb2b", 0x5a}], 0x5, 0x0, 0x0, 0x8000}], 0x4, 0x881) lsetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="736e30e300000000000000"], &(0x7f0000000140)='\x00', 0x1, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file1\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000001580)="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", 0x100000, &(0x7f0000001540)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)='hfs\x00', 0x80000, &(0x7f0000000200)) mount(&(0x7f0000000000)='.', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x0, &(0x7f00000000c0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000000240)='.', &(0x7f0000000280)='mslos\x00', 0x5010, &(0x7f00000002c0)) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001700)='/dev/mixer\x00', 0x800, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f00000000c0)) r4 = add_key(&(0x7f00000002c0)='pkcs7_test\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000400)="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", 0xff8, 0xfffffffffffffffe) setxattr(&(0x7f0000000380)='./file1\x00', &(0x7f0000001480)=ANY=[@ANYBLOB="7472757374657c6e3a6574ff7f000000000000001ea180a8ca64f7cd4c7fd872b438e1ee0cf8ef84acf15f5c5c5e150edbb01dd245c0e2489e5a26aabf5ae215c23621a6f9b2154ef4d1c2e96a9624d85f45f2ff32459a58dce1c2681ce0d1aa403e31d8a8c832d9ed97173506a89dfc1e"], &(0x7f0000001440)=',\x00', 0x2, 0x1) keyctl$invalidate(0x15, r4) umount2(&(0x7f000075e000)='.', 0x0) memfd_create(&(0x7f0000001540)='\x00', 0x2) r5 = dup2(r1, r2) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0106434, &(0x7f00000016c0)={0x5, 0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_FREE_BUFS(r5, 0x4008641a, &(0x7f0000001500)={0x1, &(0x7f0000001400)=[0x0]}) ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000000340)) 2033/05/18 03:35:52 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r0) 2033/05/18 03:35:52 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hf*plus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:35:52 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/fileO\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x20000000000000) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000340)="baf80c66b827183a8566efbafc0cecbad104ed0fc75cafba210066b8613d000066ef0f01cb0f7611b86c018ee066b8000000000f23d80f21f86635000000000f23f80f011f66b96c0300000f32"}], 0x1, 0x0, &(0x7f0000000080), 0x100000000000045f) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@ipv4={[], [], @multicast2}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) ioprio_set$uid(0x3, r3, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000009c0300000000400000000000470f000000000001000040735ba4b345"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="b805000000b9000000800f01d9c74424000d000000c7442402e70309c2c7442406000000000f011c2466baa000ec0f019f00000000c4e28d965300c4c10dd47eaf66baf80cb850d33985ef66bafc0c66b8060066ef0f01cf66b807000f00d03e670f38c886f200", 0x67}], 0x1, 0x8, &(0x7f0000000200), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 214.557980] QAT: Invalid ioctl [ 214.570159] netlink: 'syz-executor6': attribute type 21 has an invalid length. [ 214.577720] netlink: 'syz-executor6': attribute type 21 has an invalid length. [ 214.589905] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.596786] IPv6: NLM_F_CREATE should be set when creating new route [ 214.603319] IPv6: NLM_F_CREATE should be set when creating new route [ 214.605236] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 214.617054] FAT-fs (loop5): Filesystem has been set read-only [ 214.626649] QAT: Invalid ioctl 2033/05/18 03:35:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r2, &(0x7f0000000000)={0x27, 0x0, 0x2, 0x6}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x3, 0x9, 0x2, 0x9}, {0x0, 0x4, 0x6, 0x3}, {0x0, 0x7fffffff, 0x4, 0x9}, {0x8, 0xd03, 0xfff, 0x5}]}, 0x10) r3 = dup2(r1, r1) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f00000001c0)={{0x2, 0x0, 0x9, 0x0, 0x200}, 0x7, 0xffffffff9045182a, 0x7}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, &(0x7f0000000240)={0x20, 0x7, 0xfffffffffffffffb}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="8734046304c1211dbb5320d7adf6b6722ee883b4da862af1230e38e85a143f4c9765d84146d0d8ea2e6d8f40e6f7c3eed03ac9748fd5d2d3e2e3e8bc472b02fdd8ac55c7cf002265a2d2b5cb0b766b313c"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:52 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000100)={0x8001, 0xa}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={r1, 0x80000, r0}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x800000000000005, 0x0) dup2(r0, r2) [ 214.657654] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:35:52 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) [ 214.714794] netlink: 'syz-executor6': attribute type 21 has an invalid length. [ 214.722308] netlink: 'syz-executor6': attribute type 21 has an invalid length. [ 214.738552] binder: 13463:13466 ioctl c0505405 200001c0 returned -22 2033/05/18 03:35:52 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file.\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 214.777482] binder: 13463:13466 ioctl 4010ae74 20000240 returned -22 [ 214.784174] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 2033/05/18 03:35:52 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r3 = msgget(0x1, 0x80) msgrcv(r3, &(0x7f0000000140)={0x0, ""/68}, 0x4c, 0x3, 0x1000) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) getpgid(0xffffffffffffffff) 2033/05/18 03:35:52 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x100008000, &(0x7f00000000c0)) 2033/05/18 03:35:53 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xffff, @local={0xfe, 0x80, [], 0xaa}, 0x200}, 0x1c) dup2(r0, r1) [ 214.820197] binder: 13463:13466 unknown command 1661219975 [ 214.840770] binder: 13463:13466 ioctl c0306201 2000dfd0 returned -22 [ 214.884485] binder: 13463:13478 ioctl c0505405 200001c0 returned -22 [ 214.901535] binder: 13463:13478 ioctl 4010ae74 20000240 returned -22 [ 214.906281] binder: 13463:13482 unknown command 1661219975 [ 214.926409] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 214.933591] FAT-fs (loop5): Filesystem has been set read-only [ 214.960520] binder: 13463:13482 ioctl c0306201 2000dfd0 returned -22 [ 214.983630] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 215.665532] QAT: Invalid ioctl 2033/05/18 03:35:53 executing program 0: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711000000000000000000000000000009500000000000000ea0fb13681a8dae68b9179c73d4dccf86d0214d2a0806a65288cc706b7c24c5ffec849171039a953715c789b556d69ed4564ce80a200d60ee245b1306805dc0b9e119d54971b8cb6370b2e18c519577c6091298568fc605a94c3c31d509537a74b73107a1b8fc9b546e699067d6164d59b4b14dbe1f1636016c8"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x894c, 0xfffffffe, &(0x7f0000000180)) 2033/05/18 03:35:53 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x3, 0x420402) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000080)={0x2, 0x5, [{0x7, 0x0, 0x8001}, {0xe6, 0x0, 0xb55}]}) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000080), 0x625, 0x8000000000020) ioctl$int_out(r1, 0x5462, &(0x7f00000000c0)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r1, r2) 2033/05/18 03:35:53 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x7fffffff, 0x100) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000140)) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x6, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = getgid() setgid(r3) dup2(r1, r2) 2033/05/18 03:35:53 executing program 1: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000100)={0x8001, 0xa}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={r1, 0x80000, r0}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x800000000000005, 0x0) dup2(r0, r2) 2033/05/18 03:35:53 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file\\\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000000)={0x3, r1, 0x1}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x1, 0xff, 0xffffffffffffffff, 0x7, 0x8001, 0x9}, &(0x7f00000000c0)=0x20) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=ANY=[@ANYBLOB="04630d403024de16"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:53 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r3 = msgget(0x1, 0x80) msgrcv(r3, &(0x7f0000000140)={0x0, ""/68}, 0x4c, 0x3, 0x1000) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) getpgid(0xffffffffffffffff) 2033/05/18 03:35:53 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfXplus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:35:54 executing program 1: mmap(&(0x7f0000ad2000/0x4000)=nil, 0x4000, 0x4, 0x32, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000ad2000), &(0x7f0000ad3ffd)=0x4) r1 = syz_open_procfs(0x0, &(0x7f0000d04000)='clear_refs\x00') ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ad3000/0x4000)=nil, 0x4000}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000514fff)='1', 0x1}], 0x1) [ 215.825255] binder: 13517:13524 unknown command 1074619140 [ 215.832920] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 215.840185] FAT-fs (loop5): Filesystem has been set read-only [ 215.845998] binder: 13517:13524 ioctl c0306201 2000dfd0 returned -22 2033/05/18 03:35:54 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x40000, 0x0) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0x1}, &(0x7f0000000100)=0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c08, 0xffffffffffffffff) 2033/05/18 03:35:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x10201, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x1000, 0x4) r2 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) r3 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x13, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000001c0)={r3}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000080)={{0x1}, {0x8, 0x1}, 0x3, 0x2, 0x8001}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x331, 0x14000000, 0xffff}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e21, 0x93e1, @mcast2={0xff, 0x2, [], 0x1}}}, [0x3, 0x1, 0xfffffffffffffff8, 0x3, 0x10001, 0x9, 0x400, 0x3ff, 0x29, 0x5, 0x3, 0x5, 0x5, 0x101, 0x10000]}, &(0x7f0000000380)=0x100) close(r4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=ANY=[@ANYBLOB="0463044000930000"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:54 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x101, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x401, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x6, 0x1000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x800000000000002, 0x0) r3 = dup2(r1, r2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000940)={0x0, 0x3c, "1139789c4dae4473365c890c6ddb86a63211b3d65dfaf6044310aa6ce3cff9355fd1782adf83cf3053823ec68e048114fe7643b0667e80eba82c51f9"}, &(0x7f00000009c0)=0x44) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000a00)=r4, 0x4) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x2, 0x8, 0x3ff, 0x6, 0x2, 0x3e, 0x8001, 0x3e3, 0x40, 0x217, 0x2ec7, 0xc9, 0x38, 0x2, 0x2, 0x2, 0x3}, [{0x7, 0x1ff, 0x1, 0x1, 0x7fffffff, 0x6, 0x1, 0x2000400000000000}, {0x7, 0x1ff, 0x55a, 0x7d, 0x7, 0x10001, 0x5, 0x5eb7606a}], "498cdfc1b53be94a49c1eb4db58a20d0b6df19d119614fd48a3b661ec615641f8baedd8065d7193ac13f88d1e5e0568948ba5f988e48af62e39a21e1346f7428dae842c52d6b6e6c57b5a51048963eb94ce8171aecb2ef52eecc581e0e02607cb12b8541354e7b1d382df9ebc874467a0612f17a3bbb7b830fcc307367819dcf2c5a5c48d2f8acb130a34ab54ab695fa41080c495295e7b96a6bb3c431e0c8722472d2ff4304ae440dc8af832d087cdb031aa3c13d34d3ee52ab0936e44c34e101a903400c8c4a0121dcd2e91d7c3a70edeb2a6d99f3f21f318668c3388e0c", [[], [], [], [], [], []]}, 0x78f) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f00000000c0)={{0x1, 0x865, 0x2457, 0x6, 0x8, 0x3}, 0x5, 0x3ff, 0xff38, 0x8000, 0x6, "354f0826602221e4ac7fd4b0a773ff6afe16f132693c539d624ee8122424b8a1ff86d0131638b5cae30c2fbaae3ff77022604d2e6c54aaec8eb55cb8bea45a7aa896b25ca6e66252ad8ccc19e0215b0fe1ecd2ad5695ecc0e8c3920e519f3ac8c9260722d2f021ba6b120d94c391bdbcff6c21f440d82dd299b098c93fe316cc"}) 2033/05/18 03:35:54 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) r2 = dup2(r0, r1) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_rr_get_interval(r3, &(0x7f0000000080)) [ 215.920665] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:35:54 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:54 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100000001806) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000540)={0x0, 0xcf5, 0x8001, 0x0, 0x0, 0x1}, &(0x7f0000000580)=0x14) r3 = dup2(r1, r0) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f00000000c0)={[], 0x3ff, 0x2e2, 0x101, 0x0, 0x6, 0x4, 0x115000, [], 0x7ff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x81) r4 = shmget(0x3, 0x2000, 0x4, &(0x7f0000011000/0x2000)=nil) setsockopt$inet6_dccp_int(r3, 0x21, 0x7, &(0x7f0000000080)=0x1ff, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) shmat(r4, &(0x7f0000011000/0x1000)=nil, 0x1000) ioctl$KDDISABIO(r3, 0x4b37) r5 = dup2(r0, r2) getpeername$llc(r5, &(0x7f0000000280), &(0x7f00000002c0)=0x10) [ 216.001938] binder: 13550:13553 IncRefs 0 refcount change on invalid ref 37632 ret -22 [ 216.032565] binder: BINDER_SET_CONTEXT_MGR already set [ 216.069670] binder: 13550:13553 ioctl 40046207 0 returned -16 [ 216.095541] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 216.102909] FAT-fs (loop5): Filesystem has been set read-only [ 216.123897] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 216.149642] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 216.645101] QAT: Invalid ioctl 2033/05/18 03:35:54 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140), 0x0) memfd_create(&(0x7f0000000040)='$\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000a8eff8)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000ac5000), 0x4) 2033/05/18 03:35:54 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000100)=0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x101000, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x2, 0x0, 0x7, 0x2, 0x0, 0x0, 0x400, 0x2, 0x7e7, 0xb8, 0x4, 0x232, 0xaa4, 0x9, 0x4000, 0x1fe8, 0xa8de, 0x9, 0x3f, 0x9, 0xbd8f, 0x7, 0x8, 0x5, 0x4, 0x0, 0x4, 0x80, 0x1, 0x0, 0xb9ad, 0x4, 0x1f, 0x52e, 0x8, 0x3f, 0x0, 0x38, 0x4, @perf_bp={&(0x7f0000000040), 0x8}, 0x20, 0x2, 0x3, 0x7, 0x2, 0x140000000000, 0x2}, r0, 0x3, r1, 0x8) perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x4, 0x401, 0x100, 0x5, 0xfbe2a2d, 0x3, 0x80000001, 0x7f, 0x6, 0x6, 0x7fff}, 0xb) dup2(r2, r3) 2033/05/18 03:35:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0xffffffffffffff38, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="63efa77d52e0e2f5fa66d4b27824b48eb5c21293c889"], 0x0, 0x0, &(0x7f0000002000)}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/icmp6\x00') ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000240)={'teql0\x00', 0x3}) close(r0) uselib(&(0x7f0000000000)='./file0\x00') pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x800) ioctl$sock_SIOCGIFCONF(r3, 0x8910, &(0x7f0000000180)=@req={0x28, &(0x7f0000000140)={'syz_tun\x00', @ifru_settings={0x8, 0x10000, @cisco=&(0x7f0000000100)={0x6, 0x9}}}}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000001c0)={0x3, r3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:54 executing program 2: r0 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x2, 0x40) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000380)=0xd, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) r3 = dup2(r1, r2) sendmsg$unix(r3, &(0x7f0000000280)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000000c0)="6f4d2a5128ef0be101401752f7cf2edc01a96ae79c8af58e1f09f153d6beca308facbbd3121b6390925d60676b67cf33e69ff3e6222cfc624cde014553acb4cdbef9f367", 0x44}, {&(0x7f0000000140)="a75d505485d067482198d5077fe6531b02868aa567d9481c2fb87792666be77af17f99418c309cd89c443cbbea63341fc62c9b3658058712cbb23dcefba10e77dcfdd4c77a794200ee9f827b0ee093445718e470c89cf49e6cb2aeb56ef96688872a4204b1afdf6b49382fddde4f254d0c4f289db1411541caff02585bd6e2e09e0d2a1106cb90767cc0271d5d174838dfba8d14efefd3593e8f1cbbbb3505d9f31893b23674b06723c60fae5199fac6d91997b248496e0cd0ccba40509986d248a0e491b63a3f5f12", 0xc9}], 0x2, 0x0, 0x0, 0x40000}, 0x4000800) 2033/05/18 03:35:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x1, r0}) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x19ff, 0x19) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000005000)=""/20) 2033/05/18 03:35:54 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfcplus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:35:54 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:54 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r3 = msgget(0x1, 0x80) msgrcv(r3, &(0x7f0000000140)={0x0, ""/68}, 0x4c, 0x3, 0x1000) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) getpgid(0xffffffffffffffff) [ 216.810762] binder: 13594:13596 unknown command 1785689390 [ 216.848868] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:35:55 executing program 0: r0 = perf_event_open(&(0x7f0000ff3f88)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)={0x3, 0x0, [0x0, 0x0, 0x0]}) 2033/05/18 03:35:55 executing program 1: r0 = socket$inet(0x2, 0x840000000003, 0x8) setsockopt(r0, 0x401, 0x514, &(0x7f0000000040)="ff288930186ab9249ec9db512a6e89e12e64de6f428582207140bc41db5c295dab87095bcfe6c41495c502ae0f2eabdecb93b91f546ca1c23c361264ddab745c03333e917c71873847b69e62f97049e6f577dbb3709c31255308935aa708f28d05cfd534eaf6adabd8763c4f820c867cee6466252b520644", 0x78) setsockopt$inet_int(r0, 0x0, 0xd3, &(0x7f0000000000), 0x0) [ 216.856069] FAT-fs (loop5): Filesystem has been set read-only [ 216.863446] binder: 13594:13596 ioctl c0306201 2000dfd0 returned -22 2033/05/18 03:35:55 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x2000) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:35:55 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = add_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0)="687d0344c03b35be3f6d4e14f2425b2827ee2f2b135f339cee1d3c73a4ff6e6745397ba2ba7494fe5d6fee1c5a63a220e2444401e22918074384c9c21250b51e3e091dec3c23863db3034770ea24d9e7adf972f7bcf28ba17c6345c2c6a7e3c6d38a2866875018a0a598cac9320aafbca10a9fa5fe0e34a091da756d6be3c0fbdba1d380e6e47334d4b8d8bc1e73f1cfb2acfdcf6a1045fcfeb3ca5418f39a9c35d44731aa1726a2cfaf58", 0xab, 0xfffffffffffffffe) r2 = add_key(&(0x7f0000000180)='enc\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="2f69a611012030323a21b26ac22f4a78a2d0f33900", 0x15, r1) keyctl$link(0x8, r1, r2) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r3) 2033/05/18 03:35:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630450"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) r2 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0xc010, r1, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x40, 0x0) get_thread_area(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x9, 0x7, 0x0, 0x6, 0x10001, 0x4}) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req={0x4218, 0xb03, 0x93c, 0x2}, 0x10) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000180)={r2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:55 executing program 0: r0 = perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt(r1, 0x0, &(0x7f0000000180)) r2 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x125, 0x1210c0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x2, 0xd7, &(0x7f0000000040)="e8429a521d0efcf517292882d38cb9da22d217a61dac9f57a83e7566a5e2a156dc526299ae239942c437a91634911a76ffb822edf0024def35924d978c70e5f0ddbd0930d783a07a151afaee6cd476e6678cc1f6302dcd32a620f1b0797a674a7c46e1965529bf519981c0eeb358d5bcbd4da26f21e3aae6156cf5afae787343b0e08807e0bc3ae512522bacc6fdfd77d92c58e8f9aca537a11ead724497cb982b631901d45738900b83caf79377cc70d1232320532800df025df688a72071cf53c2815de469414f2510b0df3d5571e78e0cedc2e0b6ef"}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000240)=0xffffffff) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f00000001c0), &(0x7f0000000200)=0xc) [ 216.909115] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 216.969602] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 216.974850] binder: 13621:13625 unknown command 1342464773 2033/05/18 03:35:55 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)="2e2f66696c65302f66696c653013", 0x0, 0x0, 0x0, 0x0, 0x0) [ 217.021380] binder: 13621:13625 ioctl c0306201 20007000 returned -22 [ 217.060792] QAT: Invalid ioctl [ 217.085479] binder: 13621:13625 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 217.103246] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 217.110468] FAT-fs (loop5): Filesystem has been set read-only [ 217.126174] binder: 13621:13625 unknown command 1342464773 [ 217.134611] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 217.139216] binder: 13621:13625 ioctl c0306201 20007000 returned -22 [ 217.155289] binder: 13621:13640 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 217.163151] QAT: Invalid ioctl [ 217.615933] QAT: Invalid ioctl 2033/05/18 03:35:55 executing program 1: socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000140)=""/38, &(0x7f0000000440)=0x26) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000380)=""/133, &(0x7f0000000000)=0x85) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r2, &(0x7f0000001040)=@query={0x13, 0x10, 0xfa00, {&(0x7f0000000180)}}, 0x18) ustat(0x2, &(0x7f0000000480)) 2033/05/18 03:35:55 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x3f, 0x100000) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:35:55 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file0H', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:55 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x0, 0x20000000001, 0x0, 0x0, 0x3e}, 0x0) mknod(&(0x7f0000b75ff8)='./file0\x00', 0x2001001, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) open(&(0x7f0000000100)='./file0\x00', 0x502, 0x0) socket$l2tp(0x18, 0x1, 0x1) 2033/05/18 03:35:55 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x400480) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:35:55 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hflplus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:35:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) finit_module(r0, &(0x7f0000000000)='/dev/binder#\x00', 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x4bf4, 0x200400) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:55 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r3 = msgget(0x1, 0x80) msgrcv(r3, &(0x7f0000000140)={0x0, ""/68}, 0x4c, 0x3, 0x1000) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) [ 217.813747] binder: 13659:13675 tried to acquire reference to desc 0, got 1 instead [ 217.824674] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 217.831894] FAT-fs (loop5): Filesystem has been set read-only 2033/05/18 03:35:56 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000400002, 0x0) dup2(r0, r1) 2033/05/18 03:35:56 executing program 1: keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000280)='.dead\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000000080)={0x7, 0xfffffffffffffeff, 0x6, 0x6, 0x7fff}) 2033/05/18 03:35:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mq_open(&(0x7f0000000080)="2f6465765d01eac8990d6b98bc752f736e649ca01ce7827f3b94a014418d4620e5d7cc1b8665fb9028bb91f2cf1163c10751afdfab44638006612570c2", 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000009f7c)=""/132, 0x84}, {&(0x7f0000012000)=""/252, 0xfc}, {&(0x7f0000012000)=""/155, 0x9b}, {&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f0000000000)=""/102, 0xfffffffffffffef8}], 0x5, 0x0) ioctl(r2, 0xc2604110, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0xdcf7ba20ed89afc6, 0x0) rt_sigsuspend(&(0x7f00000000c0)={0x5}, 0x8) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000080)) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000140)) 2033/05/18 03:35:56 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000200)=[{r0, 0x10}, {r0, 0x200}], 0x2, 0x3) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) r3 = dup2(r1, r2) io_setup(0x2, &(0x7f0000000040)=0x0) io_cancel(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xc5dc9ac62c28f230, 0xfffffffffffffffa, r0, &(0x7f0000000080)="92177ce70d2149cb1c68e1847b2d497d3299c9d24972399f198b49a8656cb8a4c9af84c6853fb5f52a95aedbd29fcb67473bff2859cb28e6b81e2f25fac7a9f36ec0816b0f63e452e266c56b41828cba75d2191f410e233f1356834dfe271814c0129b1cdb82dfe7826e47b685fc78faf5b0ae7f4a7b8e342e91a8a43e40a7eb5e71f973c058f0a1d207b42b3a03df8addf026047e362c36b8328c81ef4ae1dbbd472a1185c300be66335d06f812f3ad9d60094791199ff3042bbec277d20c4b06c174edd6d5cfd65580", 0xca, 0x6, 0x0, 0x1, r1}, &(0x7f00000001c0)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000240)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000380)={@local={0xfe, 0x80, [], 0xaa}, 0x10, r5}) [ 217.879767] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:35:56 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:56 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) r2 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x7, 0x10080) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f00000000c0)={0xff, 0xd7, 0x0, 0x0, 0x6, 0x6}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000bbfe8)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r3 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000e4b000)=0x0) io_submit(r4, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f000007d000)="b3", 0x1}]) 2033/05/18 03:35:56 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x4101, 0x0) dup2(r0, r1) 2033/05/18 03:35:56 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x16) r2 = dup2(r0, r1) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000000c0)) 2033/05/18 03:35:56 executing program 1: mkdir(&(0x7f0000efa000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) getgroups(0x3, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8) syz_fuse_mount(&(0x7f0000000100)='./file0\x00', 0x0, r1, r0, 0x0, 0x140000) [ 218.060820] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 218.068075] FAT-fs (loop5): Filesystem has been set read-only [ 218.075426] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 218.087409] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:35:56 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) r2 = dup2(r0, r1) r3 = openat(r2, &(0x7f0000000100)='./file0\x00', 0x0, 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000180)=0x1e) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000040)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f00000000c0)=0x6) 2033/05/18 03:35:56 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 218.229455] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 218.236702] FAT-fs (loop5): Filesystem has been set read-only [ 218.245064] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 218.272584] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 218.585868] QAT: Invalid ioctl 2033/05/18 03:35:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x4, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x7, r2}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)=0x0) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r3, &(0x7f0000002440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x2260, 0x2a, 0x2, 0x70bd2c, 0x25dfdbfc, {0x7ff}, [@typed={0x10, 0x3a, @str='/dev/kvm\x00'}, @nested={0xc, 0x87, [@typed={0x8, 0x70, @u32=0x4}]}, @generic="631567da26a4ebf2e46cde6f47ca61ca66a811ee5b3b50adc3818d850d39e835b5a7c0ef9ec431932e877593191a65a53ca32047e12ea03ac4377585a75d691b3ab8f308684ec6076260d844fd9eedb6e00b6d094b4dd8cfb9e330a9c5f2ed6b74e9a170ee", @generic="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", @nested={0x20cc, 0x3c, [@generic="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", @generic="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", @typed={0x8, 0x50, @fd=r2}, @typed={0x8, 0x5c, @pid=r4}, @typed={0x8, 0x50, @uid=r5}, @generic="49f6c742adbf7489ba476d08e93bc3a87099bda978dd9229399e1f612bc5d117552cb2b5b753b0ea9c7a705229d6bbe01f6f28", @typed={0x4}, @typed={0xc, 0x96, @u64=0x305}, @generic="93e480b8d84454c64933cf421dabf8f7663b7b8ff4b5b4e09ef372225ae0850a73ab128e1db47bdc92502ec78f6a97bcfde711c366eb929524dd950020a836772a6dd9ef40255e55b24e21c8f6e81520712959de6fa7f95e71d8dd6753e1d50b48b5abb4aab80967ef", @typed={0x4, 0x5e}]}]}, 0x2260}, 0x1, 0x0, 0x0, 0xc040}, 0x800) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2033/05/18 03:35:56 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 2033/05/18 03:35:56 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:56 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xef) read(r0, &(0x7f0000004f45)=""/187, 0xbb) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0000005a84b6fd0a1526f219a94543259d8df98c608a6fad000ff500"], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000013ffc)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000001ffe), 0x0, 0x0, &(0x7f0000003000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2033/05/18 03:35:56 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) dup2(r0, r1) 2033/05/18 03:35:56 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r2 = msgget(0x1, 0x80) msgrcv(r2, &(0x7f0000000140)={0x0, ""/68}, 0x4c, 0x3, 0x1000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:56 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfuplus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) [ 218.870573] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 218.877832] FAT-fs (loop5): Filesystem has been set read-only [ 218.885336] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 218.896113] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:35:58 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f00000000c0)={0x1, 0x100000000, 0x0, 0x1, 0x2, 0x9}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffeffff, 0x200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:58 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) msgget(0x1, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:58 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x8000) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2033/05/18 03:35:58 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hf-plus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:35:58 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000180)=[{r1, 0x1}, {r0, 0x4}, {r1, 0x4036}, {r0, 0x20}, {r0, 0xc}, {r0, 0x202}, {r0, 0x82}], 0x7, 0x7fffffff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x1, 0x3f, 0x100000000, 0x85, 0x4a8, 0x7fff, 0xff, 0x401, 0x981f, 0x5, 0x6, 0x6, 0x5, 0x101, 0x946, 0x7ff], 0x2000, 0x4}) dup2(r1, r2) 2033/05/18 03:35:58 executing program 7: exit(0x1) perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:35:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000700)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000004", @ANYRES16=r1, @ANYBLOB="010000000000000000000900000004000300"], 0x18}, 0x1}, 0x0) 2033/05/18 03:35:58 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:58 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) [ 219.939623] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 219.946876] FAT-fs (loop5): Filesystem has been set read-only [ 219.984896] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 220.015891] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:35:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x80000, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f00000000c0)=0x1e) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:59 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x20000) r1 = getpgid(0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)=0x0) kcmp(r1, r2, 0x5, r0, r0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x10000, 0x7, 0xfff, 0x9}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000009000)='/dev/dsp\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r3, 0x800000c0044dff, &(0x7f0000001000)) 2033/05/18 03:35:59 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0x8004587d, &(0x7f0000000080)={0x20000000000000ee}) rt_sigsuspend(&(0x7f0000000000)={0x14a3c2bf}, 0x8) 2033/05/18 03:35:59 executing program 2: lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x12, 0x95b876c214be561e) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x44200, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000180)="7786e3d7146f6876917e0c48c1f58bf2e328238f9d8068c946f1") r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x3) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) poll(&(0x7f0000000080)=[{r1, 0x20}, {r2, 0x1008}, {r1, 0x20}, {r2, 0x28}, {r1, 0x96}, {r1, 0x10}, {r2, 0x4000}], 0x20000000000002f5, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r2, r3) 2033/05/18 03:35:59 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:59 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:59 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x6, 0xc8200) 2033/05/18 03:35:59 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hf#plus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:35:59 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) [ 221.004415] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 221.011697] FAT-fs (loop5): Filesystem has been set read-only 2033/05/18 03:35:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="dcbb3ba5768339020ac1747f2868b4c53903ee197ef380"], 0x0, 0x0, &(0x7f0000002000)}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000001140)={0x0, @in6={{0xa, 0x4e21, 0x3f, @mcast1={0xff, 0x1, [], 0x1}, 0x101}}}, &(0x7f0000000080)=0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000012c0)={0x0, 0x1, 0x7, 0x1, r3}, 0x140) r4 = msgget(0x3, 0x20) msgctl$MSG_STAT(r4, 0xb, &(0x7f0000001240)=""/71) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000140)=""/4096) close(r0) r5 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000001300)={0x3, 0x70, 0x3, 0x40, 0x9, 0x7f, 0x0, 0x20, 0x10001, 0x8, 0x4, 0xa5, 0x8, 0x100, 0x8, 0x5, 0x710, 0x1f, 0x6, 0xbb, 0x3, 0x56e, 0x8, 0x8, 0x100, 0x0, 0x3ff, 0x3, 0xa783, 0x3ff, 0x8, 0x6, 0x7f, 0x100000001, 0x5, 0x20, 0x19, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000100)}, 0x2, 0xa4, 0x100, 0x3, 0x1ff, 0x1, 0x6}, r5, 0x7, r2, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="04630440000000000954e49bebb4a2ef460e6c780647943a75079dd0ba003fe2e5dee3e42aaf8cb9"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:59 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) fcntl$notify(r0, 0x402, 0x80000006) socket$bt_hidp(0x1f, 0x3, 0x6) dup2(r1, r1) 2033/05/18 03:35:59 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) [ 221.073622] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 221.102537] binder: 13878:13879 unknown command -1522811940 [ 221.114011] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:35:59 executing program 0: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) timer_create(0x0, &(0x7f0000000000)={0x1f, 0x4}, &(0x7f00000ad000)) r0 = syz_open_procfs(0x0, &(0x7f0000337ff2)='timers\x00') readv(r0, &(0x7f0000d0bf70)=[{&(0x7f000041bf0d)=""/243, 0xffffffffffffff6e}], 0x1) [ 221.123374] binder: 13878:13879 ioctl c0306201 20007000 returned -22 [ 221.139757] binder: 13878:13879 IncRefs 0 refcount change on invalid ref 0 ret -22 2033/05/18 03:35:59 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)="2e2f66696c65302f66696c653003", 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:59 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:35:59 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3697, 0x7}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r1, 0x2}, &(0x7f0000000100)=0x8) poll(&(0x7f0000000000), 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r2) [ 221.187830] binder: 13878:13879 unknown command -1522811940 [ 221.194643] binder: 13878:13879 ioctl c0306201 20007000 returned -22 2033/05/18 03:35:59 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000588ff1)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000)) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r2 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x80000, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000200)) open(&(0x7f0000000240)='./file0\x00', 0x10000, 0x10) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/127, 0x7f) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000080)=""/82) 2033/05/18 03:35:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) [ 221.316857] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 221.324140] FAT-fs (loop5): Filesystem has been set read-only [ 221.342253] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:36:00 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfsdlus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:36:00 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x20, 0x80400) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x20000400) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup3(r1, r1, 0x80000) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000040)) r3 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x9, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r3, r4) 2033/05/18 03:36:00 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) sendmsg$rds(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001040)=""/109, 0x6d}, {&(0x7f00000010c0)=""/119, 0x77}, {&(0x7f0000001140)=""/161, 0xa1}], 0x3, &(0x7f0000001440)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001240)=""/45, 0x2d}, &(0x7f0000001280), 0x2}}, @cswp={0x58, 0x114, 0x7, {{0x1000}, &(0x7f00000012c0)=0x40, &(0x7f0000001300)=0x2, 0x3, 0x1f, 0x5, 0x9, 0x1, 0x5}}, @mask_fadd={0x58, 0x114, 0x8, {{0x7, 0x8001}, &(0x7f0000001340)=0xe9b, &(0x7f0000001380), 0x3, 0xe8, 0x80, 0x6, 0x8, 0x5a0a0115}}, @mask_fadd={0x58, 0x114, 0x8, {{0x2, 0xdec5}, &(0x7f00000013c0)=0x2, &(0x7f0000001400)=0x7, 0x100000001, 0x420, 0x6, 0xfff, 0x20, 0x4}}], 0x138, 0x20000000}, 0x40041) r2 = getpid() ptrace$cont(0x9, r2, 0x8, 0xfffffffffffffc00) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000040)=""/4096) 2033/05/18 03:36:00 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r3, 0x800}, &(0x7f0000000180)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:00 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)="2e2f66696c65302f66696c653005", 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:36:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x400) dup3(r1, r0, 0x80000) socketpair(0x1, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff}) getsockopt$inet_dccp_buf(r2, 0x21, 0xf, &(0x7f0000000180)=""/139, &(0x7f0000000100)=0x8b) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x60000006}) epoll_wait(0xffffffffffffffff, &(0x7f00004b4000)=[{}], 0x1, 0x0) close(r3) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proet/ipv!/vs/snat_rmroute\x00', 0x2, 0x0) 2033/05/18 03:36:00 executing program 1: memfd_create(&(0x7f0000000d80)='\x00', 0x2) r0 = socket$inet(0x2, 0x3, 0xfa2b) r1 = fcntl$getown(r0, 0x9) process_vm_writev(r1, &(0x7f0000000780)=[{&(0x7f0000000280)=""/202, 0xca}, {&(0x7f0000000380)=""/80, 0x50}, {&(0x7f0000000400)=""/165, 0xa5}, {&(0x7f00000004c0)=""/169, 0xa9}, {&(0x7f0000000580)=""/24, 0x18}, {&(0x7f00000005c0)=""/161, 0xa1}, {&(0x7f0000000680)=""/247, 0xf7}], 0x7, &(0x7f0000000cc0)=[{&(0x7f0000000800)=""/45, 0x2d}, {&(0x7f0000000840)=""/141, 0x8d}, {&(0x7f0000000900)=""/148, 0x94}, {&(0x7f00000009c0)=""/60, 0x3c}, {&(0x7f0000000a00)=""/102, 0x66}, {&(0x7f0000000a80)=""/29, 0x1d}, {&(0x7f0000000ac0)=""/154, 0x9a}, {&(0x7f0000000b80)=""/44, 0x2c}, {&(0x7f0000000bc0)=""/216, 0xd8}], 0x9, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0x2, &(0x7f0000000200)={&(0x7f0000000040)=@getae={0x1a8, 0x1f, 0x702, 0x70bd2c, 0x25dfdbfe, {{@in6, 0x4d6, 0x2, 0xff}, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x2400000}, [@algo_auth={0x144, 0x1, {{'tgr160-generic\x00'}, 0x7d0, "5bfb71db1d6ecdb7d7b7e74e42e198a8c2fc28a0c3dab4d48a673fd70849ae328e631fa67d02396ad0bf681810c83aa0ed343b172229fc825415d6313b4bb746b337a47980c41897a6bc6868f0924f81b7bebff45994107f2cdeacbb24722655197e776046b4df82a3f399967c6529138ff0dabb63c28a2a79d8229e23c7a6bfad3fd58ec10e486484961bcd7c6d542bc3a91cbac8ee04e6f5f2569e0a906a80873295d4942ebc3f3ba0791934960849b4e7cd6ff99f96b345db8facb4c767543fbec5bdaa36eaab3601fd74dc05ad5017d2079c0ca48ff330d8e7fbb0c1710065f00289d5125ecf309ec123fac79af9d2f4c8da699331915dea"}}, @encap={0x1c, 0x4, {0x2, 0x4e21, 0x4e23, @in=@local={0xac, 0x14, 0x14, 0xaa}}}, @proto={0x8, 0x19, 0x3b}]}, 0x1a8}, 0x1}, 0xfffffffffffffffe) sendmsg$nl_xfrm(r2, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in6}, {@in=@loopback=0x7f000001, 0x0, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0x2}, [@etimer_thresh={0x8, 0xb}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}, 0x1}, 0x0) 2033/05/18 03:36:00 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) [ 221.983729] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 221.990946] FAT-fs (loop5): Filesystem has been set read-only 2033/05/18 03:36:00 executing program 0: mlockall(0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000032e000)) chdir(&(0x7f0000f95000)='./file0\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r1 = dup(r0) ftruncate(r1, 0x7fff) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0) faccessat(r2, &(0x7f0000000140)='./bus\x00', 0x40, 0x800) munmap(&(0x7f0000005000/0x2000)=nil, 0x2000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000180)={0x9623, 0x0, 0xfffffffffffffffd, 0x1, 0x8, 0xfff}) r6 = dup3(r4, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x1000}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="440f20c0350e000000440f22c0260f013ab805000000b9078000000f01d9b9321001c0b802000000ba000000000f30c744240000f0d9e8c744240204000000c7442406000000000f011424c4227d0ff70f353e660f38814d0ac4e27d8c07668ec5", 0x61}], 0x1, 0xfffffffffffffffe, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2033/05/18 03:36:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) fallocate(r0, 0x0, 0x7ff, 0x4) close(r0) r2 = syz_open_dev$usbmon(&(0x7f0000001300)='/dev/usbmon#\x00', 0x31c59962, 0x4be03328e76f94de) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001340)={0x0, @loopback, @local}, &(0x7f0000001380)=0xc) sendmsg$can_bcm(r2, &(0x7f00000014c0)={&(0x7f00000013c0)={0x1d, r3}, 0x10, &(0x7f0000001480)={&(0x7f0000001400)={0x3, 0x400, 0x80000001, {0x77359400}, {}, {0x2, 0x101, 0x6}, 0x1, @canfd={{0x4, 0x8, 0x3ff, 0xffffffffffff8ac3}, 0x1, 0x1, 0x0, 0x0, "0b165187af4a9f3a933cbb8d2cfce32b842d0f3b45f000f144f21c2d5c59a6b5c3b2f99f0d236692a90be55b6ac546d67b304c7dc31ea6be9ac7a2daaa235668"}}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) [ 222.032830] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:36:00 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x20000, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000100)=0xec) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e22, 0x1ff, @local={0xfe, 0x80, [], 0xaa}, 0x7}, @in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e22, 0x5, @loopback={0x0, 0x1}, 0x9}], 0x58) dup2(r1, r2) 2033/05/18 03:36:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21}, 0xfffffffffffffdc8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000034300000000000004a60f344537cdfd429a8cd79d44ee4aff89710064a9cb49d03cf6fb311be11c4756e4fecc75f956829a9cb9b51a3a3a28aa63c237a1676e9d77db8e91acaabf8818b121f62530b9019d48ba384afa85806dacf80cf86f19573f28ce25fe2c221be0954e8e5de1b35ae997049c19065952a0819427def2dfcdc04033cc8b5c71d762e231c8b5a347e55b5ccb55a15bd51e1e6882b6a18a369f9bc5faf0f5da3422e1453754fe543a8183aa3ba94c86fc05fa6369a9af07e0710b2900daeb0dd090fbc43c51d9bfdb09b760d12591a"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000280)={r0, r1}) shutdown(r0, 0x1) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x24800, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f0000000180)={0x7ff, 0x7, 0x2, 0xffffffffffff0a12, "11c97f5a23d0d3d02903547c4523116a675efc88b4012816e611ad9ebd255d9deefb8e47f62b773f1915539c", 0x1}) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f00000002c0)={0x5, 0x0, [{}, {}, {}, {}, {}]}) fcntl$getownex(r3, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000240)={0x4}) 2033/05/18 03:36:01 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:36:01 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10010, r0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000300)='/dev/snd/midiC#D#\x00', 0x6, 0x8c00) r2 = getuid() accept4$inet(r1, &(0x7f0000000440)={0x0, 0x0, @remote}, &(0x7f0000000480)=0x10, 0x80000) getresgid(&(0x7f0000000040), &(0x7f0000000340)=0x0, &(0x7f0000000380)) prctl$getname(0x10, &(0x7f0000000680)=""/74) getgroups(0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0x0]) syz_fuseblk_mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x8000, r2, r4, 0x7, 0x6, 0x80) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22}}, [0x3ff, 0x667, 0x7fff, 0x8, 0x2, 0xc824, 0xb05, 0x0, 0xd1, 0xd6a1, 0x8, 0x1, 0x40, 0x7, 0x84f4]}, &(0x7f00000001c0)=0x100) poll(&(0x7f0000000000), 0x0, 0x0) fadvise64(r0, 0x0, 0xffffffffffffffc0, 0x2) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f00000004c0)=0xc0cd) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r1, r5) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f00000002c0)) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000003c0)='./file0\x00', 0x21, 0x1, &(0x7f0000000500)=[{&(0x7f0000000400), 0x0, 0x401}], 0x8, &(0x7f0000000540)={[{@inode_cache='inode_cache', 0x2c}, {@thread_pool={'thread_pool', 0x3d, [0x37, 0x32, 0x32, 0x31, 0x0]}, 0x2c}, {@noenospc_debug='noenospc_debug', 0x2c}, {@device={'device', 0x3d, './file0'}, 0x2c}]}) 2033/05/18 03:36:01 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1c, 0x200000) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000080)) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r1, r2) 2033/05/18 03:36:01 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=ANY=[@ANYBLOB="0100000000000000"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:01 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfs0lus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:36:01 executing program 1: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00001c1000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)) 2033/05/18 03:36:01 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x80000, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000100)={0xfffffffffffffffb, 0xc1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, [0x81, 0x2, 0x8000]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000001c0)={'ifb0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)={0x800000000}) [ 222.960711] binder: 14009:14014 unknown command 1 2033/05/18 03:36:01 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:01 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='wchan\x00') ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000000c0)=""/247) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, 0x9, 0x5, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x20}) write$evdev(r0, &(0x7f0000f15fd0)=[{{}, 0x1, 0x63, 0x2}, {}], 0x30) [ 222.991737] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 222.998993] FAT-fs (loop5): Filesystem has been set read-only [ 223.006793] binder: 14009:14014 ioctl c0306201 2000dfd0 returned -22 2033/05/18 03:36:01 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000080)) keyctl$session_to_parent(0x12) dup2(r0, r1) umount2(&(0x7f0000000100)='./file0\x00', 0x10) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x100000000, 0x1f0187eb56bccd37) 2033/05/18 03:36:01 executing program 0: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000040)={'nat\x00'}, &(0x7f00000000c0)=0x78) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) listen(r0, 0x110000000009) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) r1 = accept(r0, &(0x7f0000317000)=ANY=[], &(0x7f0000123000)) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180), 0x4) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r3 = getpgid(0x0) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000001c0)=r3) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x16) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000140)) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000380)=r3) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r4, 0x21, 0x70bd28, 0x25dfdbfd, {0x2}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x2f}, @FOU_ATTR_TYPE={0x8, 0x4}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xfb}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x5c}, 0x1}, 0x801) [ 223.046102] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:36:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440a4dee2049ce34a10d1d0be8a2945b0b1790f6c5f288e1ecb827cacc649f396762a16"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:01 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000080)=[{r1, 0x2}, {r0, 0x400a}, {r1, 0x80}, {r1, 0x400}, {r1, 0x241}, {r0, 0x200}, {r0, 0x1008}], 0x200000000000012b, 0x2) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r2, r0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x100, 0x0) [ 223.097887] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 223.188786] binder: 14041:14044 Acquire 1 refcount change on invalid ref 81976996 ret -22 [ 223.221656] binder: 14041:14044 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 223.246306] binder: 14041:14044 Acquire 1 refcount change on invalid ref 81976996 ret -22 [ 223.865155] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 223.972305] sctp: [Deprecated]: syz-executor0 (pid 14067) Use of int in maxseg socket option. [ 223.972305] Use struct sctp_assoc_value instead [ 224.148945] sctp: [Deprecated]: syz-executor0 (pid 14069) Use of int in maxseg socket option. [ 224.148945] Use struct sctp_assoc_value instead 2033/05/18 03:36:02 executing program 6: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:02 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:36:02 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) socket$inet_smc(0x2b, 0x1, 0x0) 2033/05/18 03:36:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0xc00448ff, &(0x7f0000000200)="a8cc1e618cc5ccacf5f57a98114d94ba0a2df6024238eb35ab2ef6c8ff3bdea4f9cc3150ef65b5620898e1fb809ce3634d1259299ba8e79bcc090afa5bc16b1dd4b73449c24899d1157063be16339f8da646a6524c92d512bdd23cf979cc716e6dc188382448200f47fd947fc6cbfe2fcdbde75b38c3b1d690b4af70b56b4b9fd99757b36f3c") setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f0000356000)=0xfffd, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_targets\x00') getsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x0, "dcbd7013560987c90ebd84b6e984c7242a057f7f7f8b85f0aba26dc45e69c2db87180107eba9f36e22ba7df5228e6a97e954627eb3966137d05054d92ff0e25078b35ba8d6f9e3ab5b89afb667676ae0"}, 0xd8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000480)='syz_tun\x00', 0x25) sendto$inet6(r0, &(0x7f0000000000)="15", 0x1, 0x200408d6, &(0x7f00000011c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], 0xbb}}, 0x1c) 2033/05/18 03:36:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) r2 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {{0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)=[@fda={0x66646185, 0xa, 0x3, 0x30}, @flat={0x73682a85, 0x100, r2, 0x1}, @fda={0x66646185, 0x7, 0x3, 0x14}], &(0x7f0000000080)=[0x40, 0x40, 0x38]}, 0x1}}], 0xffffffffffffff45, 0x0, &(0x7f0000000300)="81379c77ec31cadd1f302dd6e41a8dc056f65c0a6abb8248587e5eb894afd84c14e03d32d03d42869dc50c05bb80388829b4c5144c143f9fe0d2e6ddb47b7e3a0de1286331b83d62a215bfda1c17d1e07c22d9124358ca2f0101c60c204bc9b85019e352ce669c39e73d3891c2150dfcaa38abe3082f4c37a07d2224e8e9001c8dad95845b464cabfae22e58d48f82cd83b9a68af55890c6f99f8c27e0b82d73e98e1ff6f403257fccce272a8a8781cf40b7533034c4f578479777e29d95999f43a0bd0914045594045be9bb7eff9e9308a18c540b327343b1553b8a7a7188bafaa4552b621a3fff63838d61a258c6130adfd6bc"}) 2033/05/18 03:36:02 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x800000120000002, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) fcntl$setpipe(r0, 0x407, 0x6) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) close(r1) 2033/05/18 03:36:02 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xffffffff, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:36:02 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfsilus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) [ 224.320723] binder: 14077:14081 Acquire 1 refcount change on invalid ref 0 ret -22 [ 224.333531] binder: BINDER_SET_CONTEXT_MGR already set [ 224.346231] binder: 14083:14086 ioctl 40046207 0 returned -16 [ 224.352924] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 224.360154] FAT-fs (loop5): Filesystem has been set read-only 2033/05/18 03:36:02 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x6200}, {r0, 0xc020}, {r0, 0x300}, {r2, 0x1000}, {r1, 0x66c0}], 0x5, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000100), 0x8) openat$cgroup_subtree(r2, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) dup2(r1, r2) 2033/05/18 03:36:02 executing program 1: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback=0x7f000001}], 0x10) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) listen(r0, 0x11000000000f) r1 = accept(r0, &(0x7f0000317000)=ANY=[], &(0x7f0000123000)) listen(r0, 0x0) sendto$inet(r0, &(0x7f00000000c0)="cf", 0x1, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) shutdown(r1, 0x4000100000002) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x307, @link_local={0x1, 0x80, 0xc2}}, 0x8, {0x2, 0x4e23, @rand_addr=0xc976}, 'veth1_to_bond\x00'}) 2033/05/18 03:36:02 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x1, r1}) poll(&(0x7f0000000080)=[{r1, 0x2}, {r2}, {r0, 0x10}, {r0, 0x20}], 0x4, 0x8e4d) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r1, r3) 2033/05/18 03:36:02 executing program 6: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) [ 224.368129] binder: 14077:14081 Acquire 1 refcount change on invalid ref 0 ret -22 [ 224.377438] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 224.385085] binder: 14083:14086 Acquire 1 refcount change on invalid ref 0 ret -22 [ 224.393499] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:36:02 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000029c0)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f0000002980)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x14}, 0x1}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x80, 0x0) sendmsg$alg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="ce5aadc8cc950db2c9a925320aac5fd0495e2af57195185b51cfe5ca9859d4d4d2f0762b50d7d083c7cd00adebba", 0x2e}], 0x1, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x9}], 0x30, 0x8000}, 0x0) setfsgid(r1) 2033/05/18 03:36:02 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:36:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000001b80)=0x98a5) r2 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000001dc0)='hfsplus\x00', &(0x7f0000001e00)='./file0\x00', 0x7, 0x4, &(0x7f0000002100)=[{&(0x7f0000001e40)="cccfdf85dc20ecd548626c1491ae709bd5d35651594b0f3a1bdb0919f352770f48541d48e669bb7c8779fa8927c9e06a9d21f6ac47ecd5b200a8e1844ec15ef61b45100665f97308e9a6b9e47d2d8b2bd41f7b286abfd5b42dc8f9b2e5d0600977390736917df7fb0ef7ea5b7dac62ea368e36a3ed61559e5a3e745bd841851d8816833242535c181692aa5215041eeb909a2a431adf2a0ecb477d0660", 0x9d, 0x3}, {&(0x7f0000001f00)="26c138eea2e804453310d04f419f9c2d92fec375ef864d178dfebf03c9d0277656e4f8934f37306da532fb7f3a8b67d0ff747892257f50839ac3e148774826af5d9ab2ae548bf96965befb5fee25c26328106d871ff99442691cc2b6da7549733225edd552978acd790d3baf167f14ffba84df6f1ee5323645a19da6956b641727fb49acddbecbc7f8c0d5b08b94e4be012239b26c08e5a91f4de8525fce5b1d7ee67ad50340d640a7169562ae18f49864b1fe994a4d86a143e7c895ce331d6ba45e487a06fc53bded216531f46dcae98183504565d60570bae21d41574100a056c8681e8a7b5030afc08314feee03c6", 0xf0, 0x8001}, {&(0x7f0000002000)="5134b80ac96961dffaba956a04a75fdf57fa1e6093eba99ab606153c43ab1f00b130957531c2d5ddc80c4495a4d467e59e", 0x31, 0x8}, {&(0x7f0000002040)="f7d767bc3f072110b4f8383ffe5d2172ca25f23ac06e558e4dff5e3ac2d630003619cebbbcf3a60099e05e9731c90f5332df2b9fec2e2cc18a00d1ce4c941027890ec6941e2c4e86b7a28ced48467283f3e029eb0d6a8e2790782028111cff4ba25d56ef3e7fea467acbacdff5067e482753364ba857f1eb6dfc31a11a5471857faf299690d90d9464de8e", 0x8b, 0x100}], 0x0, &(0x7f0000002180)={[{@session={'session', 0x3d, [0x39, 0x31, 0x98fd42c51f0c3cab]}, 0x2c}, {@gid={'gid', 0x3d, [0x3f, 0x37, 0x31, 0x78, 0x3d, 0x7f, 0x37, 0x37, 0x3d]}, 0x2c}]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000080)={0x1000, 0x0, 0x0, 0xe17}) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0106438, &(0x7f00000000c0)={0x10001, r4}) close(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x1, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0xb9, 0x0, &(0x7f0000001c00)="9d4e3210e9d3d88d0cf824cf8f43d0a9f060cd83afebeea7e25e13859c69e4da5248b18c5e2f24c3c0887e64befc873933e92d8ed697c59a46a05022d85254aa99a00000000089024a684308494c2936ddbb314726f4f46f8061946452af794dbec76ddbf679cf87a095f556ca1220247bbc35ddf6aad378c377e08db8b80f6971210a445274d17aaf91dc21af8ccae29fa7e1d9f3be7e3958db1cc5e05403550836fc6bfd85a4e18135419a7946d22ee4e098876c1b884fa2"}) r5 = getpgrp(0x0) lstat(&(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() r8 = getpgrp(0xffffffffffffffff) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000001bc0)={0x9}, 0x4) getresgid(&(0x7f0000001740), &(0x7f0000001780)=0x0, &(0x7f00000017c0)) fcntl$getownex(r2, 0x10, &(0x7f0000001800)={0x0, 0x0}) r12 = getuid() getresgid(&(0x7f0000001840), &(0x7f0000001880)=0x0, &(0x7f00000018c0)) r14 = gettid() recvfrom$ax25(r1, &(0x7f0000001cc0)=""/134, 0x86, 0x10100, &(0x7f0000001d80)={0x3, {"d30c87ae03b41f"}, 0x100}, 0x10) fstat(r2, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001980)={0x0, 0x0, 0x0}, &(0x7f00000019c0)=0xc) sendmsg$unix(r3, &(0x7f0000001b00)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001540)=[{&(0x7f00000001c0)="226f1ca028f37766d22846ae7ec4815ca779697f6be0905ebc04f4b371861c5cfb7a11685bea4aa94a16f2cca304660887d79d311215313e13cc71f50357ca7061672b665b80a777a8bd51e18c64fa0d40cb020d729581b55c70fd970e44d0a69b9fa982ca07a1bff255c426f27deec9c68f562c543e203c42397f4bc1789863efe5840610c2dc506d3b963cf20bf18db4999e30cb69ecbc1a146128d04e1b10bed3d3f0e6728e542d7876fb7d3233c1cfe83f1dd3", 0xb5}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="9aaea9ce60fa674d1a7d2079da10e12d6c6f11ccb733387cd866ef5db7437742565d149b634375a14c0e0e216970f0df5c726d482aa404d5c95bcb43c7254e47219ba29d38c6a0fd530ba24f3b70ef78135603ecd0de0de4a8e5a9e75fb0d7af4ab6f323a94015d2b5da39bafd2c09acce6f8a52aa88bc3ffb01e0f43e3a9f2c74b93c8b3be3a06152f3860300baf92b0f9035ab22e57232ad184961137ff910ff5bdafde5915524a8d628f03068f76d3200", 0xb2}, {&(0x7f0000001340)="69211592b21dd810dfe557c874904428ac01a76f93ea2f6c4ab6f6d1cdcd2a9bc6082c9e6de660c795a7008b1bb01e517981f0d44147af1774d3b67e21b282a1e33df5264f402cb4e3000bf6b5a92be51b5842ce9f240430128e249bb6d0e757fe1c7d579223c204e91a56d69086151fe4383e5d64e09a006ce199807bd72bdeb9ccd20e83069451326a27185aafcaf2490f5633ebd7ec62205591f138666bb6cff559856de2ace9691a60cf7a", 0xad}, {&(0x7f0000001400)="64aebd41891380cf66108c1e9f43898b1bc400a151102b8cfc5a19a33ced2c8d72a235d887593c783e164a8b18cb0e8e15b78abc84d8f17da81287b38b7386216c33ea75f2d0aa19db07dd718c6793e0f731b1b672bda86869124121c8e35f23f4c59ec4f2dd7a1a1cc93dbe5228030b8ec0a653173e0500e11d1b39af6ef93a186dd42b596da412ed616ecf192197b193682bac3d30746e03f9677d4410af025e4a04733e04ff18c6773df7df2fa52b", 0xb0}, {&(0x7f00000014c0)="1b5cd3562823ed8f7179935165952276e319dcc4b7072042562c7fbcad89cc413ba88c287697246e506d904e080d22d85d60aac1f2fe5d088ee7c0b9f537f06ebdbf0b1f93adfa59c9072b9fe234", 0x4e}], 0x6, &(0x7f0000001a00)=[@rights={0x38, 0x1, 0x1, [r3, r0, r2, r2, r0, r0, r2, r0, r3]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @cred={0x20, 0x1, 0x2, r14, r15, r16}], 0xd8, 0x10}, 0x44000) [ 224.547524] binder: 14112:14116 Acquire 1 refcount change on invalid ref 0 ret -22 [ 224.558992] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 224.566233] FAT-fs (loop5): Filesystem has been set read-only [ 224.587414] binder: 14112:14116 Acquire 1 refcount change on invalid ref 0 ret -22 2033/05/18 03:36:02 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xffffffffffffff26, 0x22}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:36:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x800000e000, 0x5, &(0x7f00000002c0)=[{&(0x7f00000000c0)="195d0106da0ebbefad3ebbdf2cc7c7c683fc498e87e971014129d7c4d6b3d59569594c8a1fe4d7e922caf61f", 0x2c, 0x33}, {&(0x7f0000000140), 0x0, 0x8000}, {&(0x7f0000000240)="0f09c4683ae7450d624f941e86c00d6426", 0x11, 0x7ff}, {&(0x7f0000000280), 0x0, 0x6}, {&(0x7f0000000480)="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", 0x1000, 0x1}], 0x0, &(0x7f0000000080)=ANY=[]) creat(&(0x7f0000000440)='./file0/fil..\x00', 0x0) stat(&(0x7f0000000180)='./file0/fil..\x00', &(0x7f00000001c0)) 2033/05/18 03:36:02 executing program 6: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) [ 224.597294] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 224.625496] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 224.682997] binder: 14126:14128 Acquire 1 refcount change on invalid ref 0 ret -22 [ 224.717218] binder: 14126:14128 Acquire 1 refcount change on invalid ref 0 ret -22 2033/05/18 03:36:03 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) getgroups(0x9, &(0x7f0000000100)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) setgid(r1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x4a4040, 0x0) dup2(r0, r2) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) 2033/05/18 03:36:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x100, 0x0) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f00000001c0)=""/232) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000000c0)={0xfffd, 0x20, 0x0, r3}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r5, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000080)) 2033/05/18 03:36:03 executing program 0: r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0) ftruncate(r0, 0xffff) write(r0, &(0x7f0000002000)='v', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) socket$key(0xf, 0x3, 0x2) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002ff4)={&(0x7f0000001000)='./file0\x00'}, 0xc) open$dir(&(0x7f0000000040)='./file0\x00', 0x300, 0x52) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000080)=0x7, 0x4) 2033/05/18 03:36:03 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:36:03 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @random="2f39c4f770e5", 'veth0\x00'}}, 0x1e) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000080)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x0, 0x0) dup2(r0, r1) 2033/05/18 03:36:03 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfs%lus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:36:03 executing program 6: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) fcntl$setpipe(r0, 0x407, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) [ 225.647824] binder: 14156:14158 Acquire 1 refcount change on invalid ref 0 ret -22 [ 225.685158] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:36:03 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x200, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f00000000c0)) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000300)={r1, 0x1}) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x5}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e20, 0x100000001, @ipv4={[], [0xff, 0xff]}, 0x8}}, 0x7fffffff, 0x8}, &(0x7f0000000280)=0x90) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x15fffff, 0x0) [ 225.689671] binder: 14156:14158 Acquire 1 refcount change on invalid ref 0 ret -22 [ 225.692382] FAT-fs (loop5): Filesystem has been set read-only 2033/05/18 03:36:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/43, 0x2b}], 0x1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x1, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000380)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000004c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x52, 0x0, &(0x7f0000000080)=[@increfs_done={0x40106308, r3, 0x4}], 0x0, 0x0, &(0x7f0000008f37)}) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f00000003c0)=""/169) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000480)={0x6, 0xee4, 0x81, 0x2, 0x7fff}) 2033/05/18 03:36:03 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x1, r1}) poll(&(0x7f0000000080)=[{r1, 0x2}, {r2}, {r0, 0x10}, {r0, 0x20}], 0x4, 0x8e4d) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r1, r3) 2033/05/18 03:36:03 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) fcntl$setlease(r0, 0x400, 0x0) 2033/05/18 03:36:03 executing program 1: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x40) accept4$bt_l2cap(r0, &(0x7f0000000200), &(0x7f0000000240)=0xe, 0x80800) mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000432fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000013000/0x4000)=nil, 0x4000}, 0x1}) r2 = socket$netlink(0x10, 0x3, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000012000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000002000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) connect$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @rand_addr}, 0x10) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000280)={0x1, r0}) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000080)=0x5, 0x4) r3 = dup3(r2, r2, 0x80000) getsockname$packet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000180)=0xffffffffffffffb2) ioctl$KDGETLED(r3, 0x4b31, &(0x7f00000000c0)) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000140)=r4) [ 225.749966] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 225.789620] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:36:03 executing program 6: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:04 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)="2e2f66696c65302f66696c65307f", 0x0, 0x0, 0x0, 0x0, 0x0) [ 225.825098] binder: 14186:14189 BC_INCREFS_DONE u0000000000000000 no match [ 225.832211] binder: 14186:14189 unknown command 0 [ 225.887748] binder: 14198:14199 Acquire 1 refcount change on invalid ref 0 ret -22 [ 225.895910] binder: 14198:14199 Acquire 1 refcount change on invalid ref 0 ret -22 [ 225.898421] binder: 14186:14189 ioctl c0306201 2000dfd0 returned -22 [ 225.956007] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 225.963298] FAT-fs (loop5): Filesystem has been set read-only [ 225.981179] binder: 14186:14205 BC_INCREFS_DONE u0000000000000000 no match [ 225.988297] binder: 14186:14205 unknown command 0 [ 225.996361] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 226.014344] binder: 14186:14205 ioctl c0306201 2000dfd0 returned -22 [ 226.650319] FAULT_FLAG_ALLOW_RETRY missing 30 [ 226.654911] CPU: 0 PID: 14194 Comm: syz-executor1 Not tainted 4.16.0+ #1 [ 226.661740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 226.671069] Call Trace: [ 226.673647] dump_stack+0x1b9/0x294 [ 226.677258] ? dump_stack_print_info.cold.2+0x52/0x52 [ 226.682433] ? kasan_check_write+0x14/0x20 [ 226.686650] ? do_raw_spin_lock+0xc1/0x200 [ 226.690868] handle_userfault.cold.32+0x44/0x57 [ 226.695515] ? handle_userfault+0x16c6/0x2760 [ 226.700012] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 226.704587] ? debug_check_no_locks_freed+0x310/0x310 [ 226.709766] ? graph_lock+0x170/0x170 [ 226.713547] ? plist_check_list+0xa0/0xa0 [ 226.717675] ? wakeup_preempt_entity.isra.63+0x7b/0xb0 [ 226.722931] ? print_usage_bug+0xc0/0xc0 [ 226.726985] ? print_usage_bug+0xc0/0xc0 [ 226.731043] ? perf_trace_lock+0xd6/0x900 [ 226.735178] ? __lock_acquire+0x7f5/0x5140 [ 226.739413] ? graph_lock+0x170/0x170 [ 226.743199] ? debug_check_no_locks_freed+0x310/0x310 [ 226.748367] ? find_held_lock+0x36/0x1c0 [ 226.752411] ? lock_downgrade+0x8e0/0x8e0 [ 226.756539] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 226.762062] ? kasan_check_read+0x11/0x20 [ 226.766189] ? do_raw_spin_unlock+0x9e/0x2e0 [ 226.770577] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 226.775141] ? kasan_check_write+0x14/0x20 [ 226.779359] ? do_raw_spin_lock+0xc1/0x200 [ 226.783576] __handle_mm_fault+0x34be/0x4150 [ 226.787970] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 226.792706] ? graph_lock+0x170/0x170 [ 226.796495] ? find_held_lock+0x36/0x1c0 [ 226.800540] ? lock_downgrade+0x8e0/0x8e0 [ 226.804674] ? handle_mm_fault+0x8c0/0xc70 [ 226.808894] handle_mm_fault+0x53a/0xc70 [ 226.812937] ? __handle_mm_fault+0x4150/0x4150 [ 226.817501] ? find_vma+0x34/0x190 [ 226.821034] __do_page_fault+0x60b/0xe40 [ 226.825087] ? mm_fault_error+0x380/0x380 [ 226.829216] ? graph_lock+0x170/0x170 [ 226.833010] do_page_fault+0xee/0x8a7 [ 226.836799] ? vmalloc_sync_all+0x30/0x30 [ 226.840930] ? find_held_lock+0x36/0x1c0 [ 226.844982] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 226.849808] page_fault+0x25/0x50 [ 226.853242] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 226.858841] RSP: 0018:ffff880193c97c18 EFLAGS: 00010202 [ 226.864183] RAX: ffffed0032792faf RBX: 0000000000000020 RCX: 0000000000000004 [ 226.871430] RDX: 0000000000000000 RSI: 0000000020013000 RDI: ffff880193c97d58 [ 226.878679] RBP: ffff880193c97c50 R08: ffffed0032792faf R09: ffffed0032792fab [ 226.886312] R10: ffffed0032792fae R11: ffff880193c97d77 R12: 0000000020013020 [ 226.893560] R13: 0000000020013000 R14: ffff880193c97d58 R15: 00007ffffffff000 [ 226.900826] ? _copy_from_user+0x10d/0x150 [ 226.905046] do_fcntl+0xccf/0x14b0 [ 226.908574] ? f_getown+0xc0/0xc0 [ 226.912014] ? fget_raw+0x20/0x20 [ 226.915467] ? SyS_futex+0x3a4/0x56d [ 226.919168] ? fd_install+0x4d/0x60 [ 226.922773] ? do_futex+0x27d0/0x27d0 [ 226.926550] ? move_addr_to_kernel+0x70/0x70 [ 226.930937] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 226.936453] ? fput+0x130/0x1a0 [ 226.939711] ? security_file_fcntl+0x94/0xc0 [ 226.944100] SyS_fcntl+0x111/0x170 [ 226.947618] ? do_compat_fcntl64+0xb80/0xb80 [ 226.952008] do_syscall_64+0x29e/0x9d0 [ 226.955882] ? vmalloc_sync_all+0x30/0x30 [ 226.960019] ? _raw_spin_unlock_irq+0x27/0x70 [ 226.964514] ? finish_task_switch+0x1ca/0x810 [ 226.968991] ? syscall_return_slowpath+0x5c0/0x5c0 [ 226.973906] ? syscall_return_slowpath+0x30f/0x5c0 [ 226.978818] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 226.984164] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 226.988990] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 226.994163] RIP: 0033:0x455319 2033/05/18 03:36:05 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x2, 0x0) r2 = dup2(r0, r1) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x3}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000002c0)={0x0, 0xd2, "a6b7667d3f1bc207dc0bf299850345c23db47a3a3528442f463084466b0fa20715d10bd90336cde8355ceef8c21b96acdf2e8b3b87aa788f7cc5c0a043f20b7bee2f2abaf361598766a981fc7708c6b4a2eeeab0c0ef8225765e1082d335f8896d4eb8db671db36477dc3b7ac4db51da2922469ee31ea1727cc2c7c06f8f9d5e30f6018e57844172024da67ec378822eacea3552a1e35a47bf82aaac303a191dba4ff73510fb60266ab2fc650aa5aa0a3ac5970118ec1eec7c8c4ddbff8bed3048a5871b7762282368830d21b3945ebecffc"}, &(0x7f00000003c0)=0xda) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, 0x80, 0x3, 0x5, 0x800, 0x111}, &(0x7f00000004c0)=0x98) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000040)={r3, @in6={{0xa, 0x4e21, 0x20000000000, @remote={0xfe, 0x80, [], 0xbb}}}}, &(0x7f0000000280)=0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000140)={r4, 0xffffffff00000001, 0x0, 0x7fffffff, 0x6b9}, &(0x7f0000000180)=0x18) pselect6(0x40, &(0x7f0000000100)={0xe000000, 0x100000000, 0x9, 0x4, 0x200, 0x7c, 0x6, 0x7f}, &(0x7f0000000500)={0x8001, 0xfff, 0x5, 0x1, 0x7, 0x297b, 0xfffffffffffffff7, 0x8001}, &(0x7f0000000540)={0x77, 0x5, 0x4, 0x7fffffff, 0x6, 0x4, 0x90, 0x8}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={0x81}, 0x8}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000740)={0x3, 0x3, 0x80000000, 'queue0\x00', 0xffffffffffffff7f}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000640)={{0xffffffffffffffff, 0x3, 0xff, 0x2}}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000006c0)={&(0x7f0000000680)=[0x5c, 0x1ff, 0x3, 0x7fffffff], 0x4, 0x5, 0xff, 0x7, 0x7b, 0x9740, {0x6, 0x8d3, 0x138b, 0x40, 0x991a, 0x9, 0x80000000, 0x0, 0xfffffffffffff6c8, 0x100000000, 0x0, 0x2ac, 0xffff, 0xff, "9d319b20fad5e667dc6e95a86eaea9aeed6c6715f266eb50c4a0d419f2cb2500"}}) 2033/05/18 03:36:05 executing program 0: r0 = socket(0x10, 0x2, 0x7fffffff) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000164ff0)={0x2, &(0x7f0000000000)=[{0x8000000000b1, 0x0, 0x0, 0xff7ffffff7fffffe}, {0x6}]}, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x0, 0x0, {0x5}}, 0x14}, 0x1}, 0x0) connect(r0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @broadcast=0xffffffff}, 0x4, 0x4, 0x2, 0x1}}, 0x80) 2033/05/18 03:36:05 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x4, [0x0, 0x6, 0x8, 0xf5]}, &(0x7f0000000080)=0xc) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:36:05 executing program 6: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="5ee52a4661046611b465289c694946786976a2192a661b0812208e1c3fd05979c777f8ccf8eaca12330ad1f8d5dd6dfbc19dd7aeec971b7d99606284733662773425580b7c8bb727f27e38"], 0x0, 0x0, &(0x7f0000002000)}) close(r1) r2 = request_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000000c0)='/dev/binder#\x00', 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate(0xc, r2, &(0x7f0000000140)="6ba1ec335489bfe77b909ee4b7a49dfee92863da0d721a3d01b2437db2fd53f5bcb914e3fe3cd199eecfcfb9b26b0e9c4b4162aafe2d86f024095f078c35099eabd5b288f0dc80d622573b96b6946219a05bf57305eb14d3cd9224db64bb2aa9ccba7330e0c577148e17fb548ae892349646ec8a8e322a594f96a2b574627c7863e750ab505d9b9feac1ac604f423348ed5e4013f78342f47d26d32e04cb9e2eacb84fca1c9782071f94f0d846707a7022f0eb952a8ecc414ab939edd72d", 0xbe, r3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:05 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)="2e2f66696c65302f66696c653003", 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:36:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080), &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x8001, @empty, 0x9b}}}, &(0x7f00000001c0)=0x84) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)=ANY=[@ANYBLOB="5731945ad5d629d928f0aeb294b8ec386b33691507bb733fca9f13ecf9c96499bb13101812"], &(0x7f0000000440)=0x1) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000500)="0f005c0666b8ef0000000f23d00f21f86635300000010f23f866b9770b000066b80000008066ba000000000f30f20f35f30f1bcff4650f01cabaf80c66b8c261a58266efbafc0cb874daef0f236d0f32", 0x50}], 0x0, 0x1c, &(0x7f0000000280), 0x100) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2033/05/18 03:36:05 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfsolus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) [ 226.997330] RSP: 002b:00007f24d50fac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 227.005021] RAX: ffffffffffffffda RBX: 00007f24d50fb6d4 RCX: 0000000000455319 [ 227.012273] RDX: 0000000020013000 RSI: 0000000000000006 RDI: 0000000000000015 [ 227.019519] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 227.026772] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 227.034025] R13: 000000000000008e R14: 00000000006f3df0 R15: 0000000000000000 [ 227.108191] binder: 14230:14243 unknown command 1177216350 [ 227.115115] binder: 14239:14244 Acquire 1 refcount change on invalid ref 0 ret -22 [ 227.126083] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 227.133295] FAT-fs (loop5): Filesystem has been set read-only 2033/05/18 03:36:05 executing program 0: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000a00000)={0x73, 0x79, 0x7a}, &(0x7f0000facfff)="01", 0x1, r1) keyctl$instantiate(0xc, r0, &(0x7f0000000380)="b828200211b0cff3a602e56d01b3dc9fac176948b2f087a60afde57e770e65fc", 0x20, r0) r3 = add_key$user(&(0x7f0000fc0ffb)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00003eb000)="b3", 0x1, r1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.events\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000000c0)=0x0) getpriority(0x0, r5) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x3, 0xffe, 0x10000000008001}, &(0x7f00000004c0)=0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000400), &(0x7f0000000440)=0x4) keyctl$update(0x2, r3, &(0x7f0000000240)="df02754677212dfc3e2acc26fdc3ffa64813da494137e175e9f2780ac5e2a09f43a1fcebf272a5a135de92bf4a9033933824f6e6aa023895113293535d1c0066d20e0f275188b4b4c187e18774fc2227cbb60fc6697f5337726164c8fbe1181e6d50986cd98a5c44ac0ec375deb27eafcf7d06438f252510d87bd91d03e7dc2faed85adcd88ca30e75b1e143a72d94defa187e48b89efbbbcc9b9a9a307353df7a21affce4e9149eb122cbc356cb681365afd979e97b57b596e901864a68679f", 0xc0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000480)={0x9, 0x96b9, 0x0, 0x80000000, 0xb52e, 0x100000000000, 0x0, 0x101, r6}, &(0x7f0000000500)=0x20) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r3}, &(0x7f0000000140)=""/5, 0x5, &(0x7f00000001c0)={&(0x7f0000000180)={'sha384-avx2\x00'}}) connect$bt_sco(r4, &(0x7f0000000000)={0x1f, {0x40, 0xffff, 0x400, 0x12, 0x7fff, 0x8}}, 0x8) 2033/05/18 03:36:05 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) 2033/05/18 03:36:05 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9d9, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) [ 227.158173] binder: 14230:14243 ioctl c0306201 20007000 returned -22 [ 227.166386] binder: 14239:14244 Acquire 1 refcount change on invalid ref 0 ret -22 [ 227.178136] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 227.199274] binder: BINDER_SET_CONTEXT_MGR already set 2033/05/18 03:36:05 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) [ 227.235538] binder: 14230:14243 ioctl 40046207 0 returned -16 2033/05/18 03:36:05 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(blowfish-generic)\x00'}, 0x58) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x40, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab2719", 0x3c5989f2b0d4c2db) 2033/05/18 03:36:05 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 227.288671] binder: 14230:14255 unknown command 1177216350 [ 227.315589] binder: 14230:14255 ioctl c0306201 20007000 returned -22 2033/05/18 03:36:05 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) signalfd4(r0, &(0x7f0000000000)={0x4}, 0x8, 0x0) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="97", 0x1}], 0x1, 0x0) [ 227.333909] binder: 14269:14271 Acquire 1 refcount change on invalid ref 0 ret -22 2033/05/18 03:36:05 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000080)={r2}) poll(&(0x7f0000000000), 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x5, 0x2) dup2(r0, r3) [ 227.388213] binder: 14269:14271 Acquire 1 refcount change on invalid ref 0 ret -22 [ 227.416267] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 227.423507] FAT-fs (loop5): Filesystem has been set read-only [ 227.507438] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 227.527778] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:36:06 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tee(r0, r0, 0x3f, 0x9) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) fstat(r1, &(0x7f0000000040)) pread64(r1, &(0x7f00000000c0)=""/45, 0x2d, 0x0) 2033/05/18 03:36:06 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:36:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0xc0400, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000140)={0xfff, 0x6, 0xfffffffffffffff8, 'queue0\x00', 0x3adbb0ba}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:06 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) connect$inet6(r1, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x79, &(0x7f00002c9000)={0x0, 0x0, 0x80000000000004be}, 0x8) 2033/05/18 03:36:06 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:06 executing program 0: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1040000000000007, 0x400000a4}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x930000, 0x705000, 0x1, &(0x7f0000000000)) 2033/05/18 03:36:06 executing program 2: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000001800)={"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"}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000016c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x2200) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000001700)=""/143) getpeername$packet(r1, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000001d80)=0x14) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000001dc0)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @empty, 0x1, 0x1, 0x7, 0x400, 0xffffffffffff7624, 0x44010000, r2}) r3 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) ioctl$TCGETA(r3, 0x5405, &(0x7f00000017c0)) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1658) 2033/05/18 03:36:06 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfs#lus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) [ 228.065821] binder: 14322:14325 Acquire 1 refcount change on invalid ref 0 ret -22 [ 228.086192] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 228.093502] FAT-fs (loop5): Filesystem has been set read-only 2033/05/18 03:36:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x4000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000080)=""/78, &(0x7f0000000140)=0x4e) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) fanotify_init(0x94942ace5d8f49ba, 0x40000) dup(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:06 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/55) 2033/05/18 03:36:06 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:36:06 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000080)=0x3) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x8) poll(&(0x7f0000000000), 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r1, r2) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)) [ 228.122097] binder: 14322:14325 Acquire 1 refcount change on invalid ref 0 ret -22 [ 228.150585] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:36:06 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) [ 228.209897] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:36:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0xc0080, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$int_out(r1, 0x5462, &(0x7f0000000140)) [ 228.314232] binder: 14351:14352 Acquire 1 refcount change on invalid ref 0 ret -22 [ 228.338059] binder: 14356:14357 ioctl 5462 20000140 returned -22 [ 228.356192] binder: 14351:14352 Acquire 1 refcount change on invalid ref 0 ret -22 [ 228.375309] binder: 14356:14359 ioctl 5462 20000140 returned -22 2033/05/18 03:36:07 executing program 1: syz_emit_ethernet(0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa4e204e20", @ANYRES32=0x41424344, @ANYBLOB="50000000927800007a6d2e445c99293df9cc553640511423bb0df21bf7cdfcfbc5f5c854c00c405f439d81e720c124f581c99a162866d516cbd8bc14bb988749c518198ceafebde1fcb019a3fbbc8572df39a6371647a973cc75b656bca23a1fc1088e6b0bebea3e59f8e0b6909ad106fb0ce3965e15ff7334aefc4540596bd3789bcb4581ab9f0b86fcd5ecfe4b43f6d3846296874b5e2a9eb78a5e783653175865f5e799188c700757a3487e50b2a3946022fee03fa7fe7b46cc83948d33b71d2f413564771be001ea61b591ba07cfd63ea320a23968fb3af15083f7c4056e4dca122e4352b2"], &(0x7f00000002c0)) 2033/05/18 03:36:07 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:36:07 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f00000010c0)='/dev/snd/pcmC#D#p\x00', 0x8, 0x2) sendmsg$kcm(r0, &(0x7f0000002440)={&(0x7f0000001100)=@generic={0x4, "0452a3b7f3b7846ba921c8116b60c82a00a8a5d799f56326340be6579ef99f97320505dad7df90d1f980ff4309a5b024aede7b7102c6c2ae0bd2945746222323e2d6d16564de32345c4797cb4e960abb076ff6827ddbce0f7c507ad83060fd38a5b442d6fdc4849412f4d6802309af96dd8c81b6bf59230437a49d31d948"}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001180)="ca30e48947163549c0f42badaf8155302c423269dd1313424091426078492b70ee095ea8d37cdd341f0119678900fa444aa251906b1198d1658e8db4b669ce499afe8762604abbc88f447219ecb84dc21e8ec73ea3079e51d4ae2e8044890099882f916340ecbd2ec6823f83e1d6c0f2f11b44fc9a59d84f9bebd6d10fadba29f9926fef88b45b7eb9f16d34c6227f6ae350cc80a0e34cff72f5eaa258f03e9110e4", 0xa2}, {&(0x7f0000001240)="e18cbc57fa3e1c8f2fe6deb74c10842f8ab5199e99e18931d7ca7513d8e8ac4c5aa44d5895f1e59447ea0782ac6f775040d046213eb89845116d4d4acc8a8861952895d2f710f48add1b6dd6d75062d1d2aaec7181897fefd1b35e844af496a8264473c8d879b624a56d812ff539c8d45406fcaa2fbb0d58cbb1f355a3dd6a806999cdd6be3dca271f90939eb231591fc703405d8a4952edb7b18ce348bfd22bac0dd3b69677f6d12abb3ea27280cae769f394dd322e9488837b3e41a9bf7c07c4c73aef7191a4db189fc1f4bebc4bda3ee5a1", 0xd3}], 0x2, &(0x7f0000001380)=[{0x1010, 0x115, 0x8, "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"}, {0x40, 0x13f, 0xd63, "4b60beb2883106d03d162d6cd5ed27afcf2a8f12fb8d7af28eb89ec127f56f58a5b7fc466765473c0e34"}, {0x60, 0x115, 0xff, "d1dccda8eac4e430f06b9570bc180b60c4f4427ea1c57b9e9f5adf54f59ed5f33c4ce6a2fccb5a2bc548b0fda1d538c7ec64a6dda11e8245cb7544283cf1dd020111986d7847885b5c"}], 0x10b0, 0x4814}, 0x8000) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040)=0x7fffffff, 0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=0x1000) dup2(r1, r2) 2033/05/18 03:36:07 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000000fe0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, &(0x7f0000bbfff8), 0x8) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000553ff8), 0x8}) 2033/05/18 03:36:07 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000040), 0x0, 0x80) r1 = getpid() getpgrp(r1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800040000000002, 0x0) dup2(r0, r2) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', './file0', [{0x20, '+'}], 0xa, "2030d32215e742516a666445e2e11ec783d5b4f087f5d9f40a5559efd4683d2af83c76348dabfaaaed942daf0ff89ac4ce78f8a850100b42804573d830d30bc165cdb55aa6d76302e819db4055a28d11fadb30ff5966bddc7c6db12e032d5bada65a7ed24ceee9bab2f261cdcbffbcc0045399256b65c000e36a68e814"}, 0x8a) 2033/05/18 03:36:07 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:07 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfsulus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:36:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7fff, 0x212040) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) [ 228.996056] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 2033/05/18 03:36:07 executing program 1: r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x5, [], 0x1}}, 0x80, &(0x7f0000001600)}, 0x0) [ 229.063694] binder: 14374:14384 Acquire 1 refcount change on invalid ref 0 ret -22 [ 229.076411] binder: 14382:14389 tried to acquire reference to desc 0, got 1 instead [ 229.102148] binder: 14374:14384 Acquire 1 refcount change on invalid ref 0 ret -22 [ 229.115657] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 229.122943] FAT-fs (loop5): Filesystem has been set read-only [ 229.133514] binder: 14382:14389 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 229.158738] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:36:07 executing program 0: mremap(&(0x7f000005d000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a00)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r2 = dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x4000) write$cgroup_type(r2, &(0x7f0000000600)='threaded\x00', 0xffffff67) 2033/05/18 03:36:07 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x200, 0x800000000000) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:36:07 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)={{0x0, 0x3f, 0x80, 0x323, 0x34f, 0x4, 0x29b, 0x6}, "bef1a832a0adea8ffe4d1ef7c9a8bcc4aa447bbafaafeeabac80a95c94c100a73b6f4e499d899984bd19c68e6c35f2f0afe57ee15d0463b434960bf479202f84aa398abdcd217b96838e0528e7f09c119be1807dffe562437942b7673ca22261b64602abbdf6318cb855b8ecc5ec605db8dbe71d3adc6cd7deb6dc9174633f82352215e681c9ad7ea6346135e77462fb0b984670802246a29a84c9fcc9bdfaa4fb1ff3d0ec701bc03f3920779aa7412cb80fd17dab1f3040d0c15f0a236ec386d1", [[], [], [], [], [], [], [], [], []]}, 0x9e1) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:07 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x100000001}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={r1, 0x78, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x8}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in={0x2, 0x4e22, @loopback=0x7f000001}, @in={0x2, 0x4e21, @loopback=0x7f000001}, @in={0x2, 0x4e20, @multicast2=0xe0000002}, @in6={0xa, 0x4e24, 0x14eb, @loopback={0x0, 0x1}, 0xffffffff}]}, &(0x7f0000000340)=0x10) open(&(0x7f0000000000)='./bus\x00', 0x100000141841, 0x0) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f00000005c0), 0x1000, &(0x7f00000006c0)=ANY=[]) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000400)=[{&(0x7f0000000140), 0x0, 0x8001}], 0x0, &(0x7f0000000580)=ANY=[]) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x7, 0x11, r2, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x15555555555555bf, &(0x7f00000002c0), 0x0, &(0x7f0000000780)=ANY=[]) madvise(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x9) [ 229.209728] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 229.269852] binder: 14409:14410 Acquire 1 refcount change on invalid ref 0 ret -22 2033/05/18 03:36:07 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x80, 0x4422c0) poll(&(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000080)={{{@in=@local, @in6}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) dup2(r0, r0) [ 229.313511] binder: 14414:14422 tried to acquire reference to desc 0, got 1 instead [ 229.334708] binder: 14409:14410 Acquire 1 refcount change on invalid ref 0 ret -22 [ 229.356175] binder: 14414:14422 IncRefs 0 refcount change on invalid ref 0 ret -22 2033/05/18 03:36:07 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000800002, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000000c0)={0x2, 0xfffffffffffffffc, 0x6, 0x3, 0x7, 0x3ff}) dup2(r0, r1) 2033/05/18 03:36:07 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00003e2ff6)='net/ptype\x00') pread64(r0, &(0x7f0000000000)=""/4096, 0x1000, 0x0) 2033/05/18 03:36:07 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:36:07 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000b3dfc8)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)={0x1c, 0x22, 0x109, 0x0, 0x0, {0x5}, [@typed={0x8, 0xa, @u32}]}, 0x1c}, 0x1}, 0x0) 2033/05/18 03:36:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x80000001, 0x800) ioctl$TIOCLINUX5(r2, 0x541c, &(0x7f0000000080)={0x5, 0x0, 0x4f, 0x1, 0x9b3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=ANY=[@ANYBLOB="045b044000000000"], 0x0, 0x0, &(0x7f0000008f37)}) [ 229.485110] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 229.492364] FAT-fs (loop5): Filesystem has been set read-only [ 229.519647] binder: BINDER_SET_CONTEXT_MGR already set [ 229.527455] binder: 14444:14446 ioctl 40046207 0 returned -16 [ 229.535328] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 229.555268] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:36:08 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:08 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) r2 = dup2(r0, r1) accept$inet6(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000080)=0x1c) 2033/05/18 03:36:08 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 2033/05/18 03:36:08 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000180)=[{&(0x7f00000000c0)="262abfb7b847b34a799e93e370ed7a13b3f1e21b9b245a94ddea7abd3993ec3b5f1dba4d71e1727c958ff70ec95419a03b20ca715aef1a4e02f8794af0f61edf8f7ea858cf5bf0c859cc77fd338d43df7d0f65c9bc571047650f28822587f3759706fa4619de68f5ebf1584b2396ab3d50797447d8aae4bdce73ed0aeb26702bcca8704fa1f579bd75a8e8008f9a2d01e1568eba223a847486a1dbba783698aa95ebc046b8cb98a86239949fd38ee3d26530ec", 0xb3, 0x9}], 0x202800, &(0x7f00000001c0)={[{@nointegrity='nointegrity', 0x2c}, {@usrquota='usrquota', 0x2c}, {@errors_continue='errors=continue', 0x2c}, {@errors_continue='errors=continue', 0x2c}]}) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:36:08 executing program 0: 2033/05/18 03:36:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0xfffffffffffffbff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4000, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000140)=""/231) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000080)={@loopback, @local}, &(0x7f00000000c0)=0x8) 2033/05/18 03:36:08 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfsllus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:36:08 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 230.061014] binder: 14470:14475 Acquire 1 refcount change on invalid ref 0 ret -22 [ 230.073440] binder: 14477:14481 Acquire 1 refcount change on invalid ref 0 ret -22 [ 230.091864] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 230.099111] FAT-fs (loop5): Filesystem has been set read-only 2033/05/18 03:36:08 executing program 0: [ 230.122073] binder: 14470:14475 Acquire 1 refcount change on invalid ref 0 ret -22 [ 230.147092] binder: 14477:14481 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 230.167295] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:36:08 executing program 1: 2033/05/18 03:36:08 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:36:08 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:08 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffff9, 0xfffc) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0xffffffffffffff54) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000040)={0x8, 0x8001}) r2 = add_key(&(0x7f00000001c0)='rxrpc\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000140)="d48a480b88e83965a94b59c8d553a71eb4c81d90d5c9feff15c69252ddeed3a23a26b1cb7185d59120f23ccc404687186b48aed93693362fd16488f9b65d56f99eb23fd655b8837720afa50b195d2e394b457a67e08b6fd4529c73756c3515ff5a7e15e2c9efd8b5e83287f2fc1261a2f50944045067d88bff082d", 0x7b, r2) [ 230.202663] binder: 14477:14481 Acquire 1 refcount change on invalid ref 0 ret -22 [ 230.224157] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:36:08 executing program 0: 2033/05/18 03:36:08 executing program 1: [ 230.258365] binder: 14477:14481 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 230.286258] binder: 14504:14506 Acquire 1 refcount change on invalid ref 0 ret -22 [ 230.333627] binder: 14504:14506 Acquire 1 refcount change on invalid ref 0 ret -22 2033/05/18 03:36:09 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:36:09 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x30d800) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x1, 0x101, 0xffffffff, 0x800, 0x7fffffff, 0xfffffffffffff1a9, 0xc5, 0x8, 0x1f, 0x3}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000140)=""/111) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="046304400000000058bbdc37db918f529cfbc1ad739be97fc380d2aee536d9fac3c0dc34f0407559fd7fe5716779098ec42c75a1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:09 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:09 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfs.lus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:36:09 executing program 1: 2033/05/18 03:36:09 executing program 2: r0 = dup(0xffffffffffffff9c) fchdir(r0) bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x1, 0x2, 0x7, 0x2, 0xffffffffffffffff, "086fb87f5a30348561fd7b8b9d585fa56fdc024ff516eaba411709b69e8311b010058195ceeeec9344091cb6d86237fddab18400e49db36ffbbb3a3a71cae5", 0x12}, 0x60) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000100)={r0, 0x6, 0x2, r0}) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r1, r2) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f00000000c0)=0x1, 0x4) 2033/05/18 03:36:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000090d8b75e67e16b394342abb5158df87ea8984e79c93df7498b2b34796068700e29fbd789f9a031f23e16c96e30baed2961953b057f7a3222943acc4b8cfa4de553f8276731ddeb811efd44ea011e1a0db9074a28a826c88566b89c57cc3cca4aec41d37fa27c8daa19030d03139d0aea71d509d9a20ba7deceb656cc1308d9d1f111b6bd1595486f55e229923be4ed8cbfb78e86280b4cacf386bfa8840afb312a4c520a03b27f805d181bd09ea208931a36e888060a2d") fgetxattr(r0, &(0x7f0000000080)=@known='user.syz\x00', &(0x7f0000000040), 0xfc99) 2033/05/18 03:36:09 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x4000000000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x2000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r2 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r2, r3) pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000080)="488ff17ab3edacc20f60cf8b159fe7537794d8ecb1c98797c003ada0d2b78adb4abd3ca076b784eaeb0443132b8eaa8bcdd7198f753da80501d6177945a5d4d8e5c8b1423b50f60295", 0x49}, {&(0x7f0000000100)="59e31b34654089244d12ce194ac5093f7168de09867286aaab9f46082f52ed4cdc8a293d1d446b6bdb6023b674937efc9fbc522f5b89654172747497e9e6d9125c90a32a65ea9c45350328278253eb809b3152e65eefa19f6beeb6260b1e390d938b22be34a6b08c5469f945efe6d58653691a232f9c466d3c87cdab939f59631061f4100074a2fa08a273d8c8eb6abeb23c4bde8a5418f98e38bac3430e74f183fef97fb07986ad6e844a485aec86876ecd4e0873d0f0d1815c2bf5611e426b1a682bfc03e1f0f22b0e", 0xca}], 0x2, 0x0) [ 231.069170] binder: 14540:14542 Acquire 1 refcount change on invalid ref 0 ret -22 [ 231.102728] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 231.110005] FAT-fs (loop5): Filesystem has been set read-only 2033/05/18 03:36:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'lo\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='\n']}) 2033/05/18 03:36:09 executing program 0: creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f0000000400)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x400000000000fffc, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="cefaad1b000e0000ffff", 0xa}], 0x8000, 0x0) 2033/05/18 03:36:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x6) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) [ 231.119457] binder: 14540:14542 Acquire 1 refcount change on invalid ref 0 ret -22 2033/05/18 03:36:09 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r0, 0x80000) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r1, r2) 2033/05/18 03:36:09 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) [ 231.193977] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 231.232514] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 231.264717] binder: 14569:14570 Acquire 1 refcount change on invalid ref 0 ret -22 [ 231.315793] binder: 14569:14570 Acquire 1 refcount change on invalid ref 0 ret -22 [ 232.015794] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 2033/05/18 03:36:10 executing program 1: mmap(&(0x7f0000000000/0xe73000)=nil, 0xe73000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) 2033/05/18 03:36:10 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000100)='ns/user\x00') 2033/05/18 03:36:10 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000040)=0x6) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/173, 0xad}, {&(0x7f0000000140)=""/109, 0x6d}, {&(0x7f00000001c0)=""/203, 0xcb}], 0x3) dup2(r1, r2) 2033/05/18 03:36:10 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:36:10 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_init() r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:36:10 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfsXlus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:36:10 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="f50001338a9e5040"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=0x0) wait4(r2, &(0x7f0000000080), 0xc0000003, &(0x7f0000000140)) 2033/05/18 03:36:10 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="cd5c0b081bf2aaaaaaaa00ff86dd60ff07030030040000000000000000000000ffff20000000ff02000000000000000000000000000104009078000000006009aea500000000fe800000000000000000000000000000fe800000000000000000000000000000c036828ddc7ddc31024f64fc853345e3bd7682be26ac72e51eba8e234e5fe046b9cdac907f3eaf9ebd51e6f6"], 0x0) [ 232.105088] binder: 14595:14596 unknown command 855703797 [ 232.126184] binder: 14595:14596 ioctl c0306201 20007000 returned -22 2033/05/18 03:36:10 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) [ 232.147999] binder: 14595:14596 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 232.170869] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 232.178146] FAT-fs (loop5): Filesystem has been set read-only 2033/05/18 03:36:10 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000100)='ns/user\x00') [ 232.201966] binder: 14595:14596 ioctl 5429 20000000 returned -22 2033/05/18 03:36:10 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x4007fd, 0x39) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:36:10 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:10 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040)={0x7, 0x0, 0x81, 0xffffffffffff4914, 0xf8, 0x7fffffff, 0x3ff, 0x6}, &(0x7f0000000080)={0x7, 0x3c0, 0xff, 0x5, 0x8, 0x10000, 0x3, 0x7}, &(0x7f00000000c0)={0x6, 0x10000, 0x0, 0xe30, 0x6, 0x1000, 0x5, 0x4}, &(0x7f0000000140)={r1, r2+30000000}, &(0x7f00000001c0)={&(0x7f0000000180)={0x1000}, 0x8}) poll(&(0x7f0000000000), 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r3) [ 232.227280] binder: 14595:14596 unknown command 855703797 [ 232.246442] binder: 14595:14596 ioctl c0306201 20007000 returned -22 [ 232.255624] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:36:10 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000aef9f9)={{0x80}, "706f7274310000004000000000000000000000d600fffffff00000000000000000000000000000000000000700", 0xfffffffffffffff9, 0x2}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000100)={@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000385f58)={{0x80}, "706f72743000000000000000000000000000000000000000000000000000000000000000000000000000e100000000000000000600", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) [ 232.283989] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 232.288791] binder: 14595:14617 IncRefs 0 refcount change on invalid ref 0 ret -22 2033/05/18 03:36:10 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)="2e2f66696c65302f66696c6530ff", 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:36:10 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000100)='ns/user\x00') [ 232.359890] binder: 14595:14624 ioctl 5429 20000000 returned -22 2033/05/18 03:36:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000140)=0x8) mq_notify(r2, &(0x7f0000000380)={0x0, 0x1a, 0x4, @thr={&(0x7f0000000240)="9bdfd4415fad8ed77149f79e894423c4ea9e1c61fff354e648aa063347a324d5272de6eaa2db4c87833221195cad72defe7e2bffc33ee48ce890fac5191d75586d701e4f070e3b28d82e611e0de45ddc4831c02ec1e259b86d90bafd6dc2787788", &(0x7f00000002c0)="2eb1247af71802ab2e08969268d32ea540971d97163e4102d55415cb35fe36cd9b69b36182c56a6ec8c9227455ddd7e930ff5044db074b80b8de92c2f0d5f4de89536585ef440d9125151e102a98ffcd4b1cfc67b463cdb9e5b5da0f12ff2ad37cb976de34ad7f5965971021375fae83b5cfa3287fb6327f393564ad4226a5b92181681210aa0783e5e6fd86a986e238655997b0bec89a081f527d54207695e5b023d3e7f7ba6378679c01a114620f3c45991a8ac6b302d8493b8506d1"}}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000180)={r4, 0x6a, "fec09966c4f06e02b0d63f29c5f324c23b3df7357d7746346b25a4b1239cc7985e62fd420c30379d42804266fb101002a7dc1f8dbd535f61010c06e47a315867a2a657f1116e0d3a3c5a37c1f3d2ccdfb229ea16bd4b3609827e6bdb6765b21979c9f9dda1d311d96702"}, &(0x7f0000000200)=0x72) 2033/05/18 03:36:10 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:10 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) r2 = dup2(r0, r1) accept$inet6(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000080)=0x1c) [ 232.497974] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 232.505237] FAT-fs (loop5): Filesystem has been set read-only [ 232.580140] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:36:11 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x34b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) r2 = dup2(r0, r1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22}}, 0x9, 0x2}, &(0x7f0000000100)=0x90) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r3, 0x9}, 0x8) 2033/05/18 03:36:11 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) r2 = getpid() perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x101, 0x52b2fef, 0x6159, 0x9eb, 0x0, 0x8, 0x10000, 0xc, 0x5, 0x7, 0x1920, 0x343f, 0x3, 0x0, 0x3, 0x2, 0x0, 0x4, 0x1, 0x8001, 0x800, 0x101, 0x7ff, 0x17, 0x6, 0x8001, 0x1, 0x7, 0xcfd, 0x400, 0x800, 0x7fff, 0x1, 0x59be, 0x3, 0x4, 0x0, 0x10001, 0x0, @perf_config_ext={0x7, 0xc6b}, 0x4, 0x4a, 0x80000001, 0x7, 0x6, 0x3ff, 0x7f}, r2, 0x3, r1, 0x2) 2033/05/18 03:36:11 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:11 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000100)='ns/user\x00') 2033/05/18 03:36:11 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="827021baca", &(0x7f0000000080)=""/98}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f0000000180), &(0x7f0000000080)=""/140}, 0x18) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x3ab) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000180)="01", &(0x7f0000000300)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) r2 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x7, 0x0) getsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000340)=0x8, &(0x7f0000000380)=0x4) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f00000003c0)={0x8, 0xffffffffffffff00, 0x80000001, 0x6b87}, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000480)='fou\x00') ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f00000005c0)=&(0x7f0000000580)) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000428bd7000ffdbdf25030000000800011f0000000000000000060000000800eb000000000004000500"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000240), 0x4) 2033/05/18 03:36:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200, 0x0) 2033/05/18 03:36:11 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfsxlus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:36:11 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:36:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000100)={0xb1, 0x5, 0x2, 0x0, 0x2, [{0x4, 0x4, 0x80000001, 0x0, 0x0, 0x100}, {0x5, 0x7b, 0x100000001, 0x0, 0x0, 0x1580}]}) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000e3c000)=[{0x0, 0x0, &(0x7f0000a70f80), 0x0, &(0x7f0000917000)}], 0x1, 0x8000) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-twofish-3way\x00'}, 0x58) r2 = accept(r1, 0x0, &(0x7f0000000000)=0x7659926d) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000040)=0x2, 0x2) 2033/05/18 03:36:11 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) [ 233.090632] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 233.097828] FAT-fs (loop5): Filesystem has been set read-only 2033/05/18 03:36:11 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x200, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000040)={{0x3d, @remote={0xac, 0x14, 0x14, 0xbb}, 0x4e22, 0x2, 'none\x00', 0x1, 0x1ff, 0x5d}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e22, 0x0, 0x54, 0x1, 0x3}}, 0x44) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000280)) dup2(0xffffffffffffffff, r0) 2033/05/18 03:36:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@acquire={0x40046305, 0x2}], 0xffffffffffffffd0, 0x0, &(0x7f0000000080)}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x22100) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) [ 233.155226] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 233.191550] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:36:11 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='ns/user\x00') 2033/05/18 03:36:11 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f7274310000000000000000000000000000000000001000", 0xc7, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) 2033/05/18 03:36:11 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) [ 233.250583] binder: 14713:14714 Acquire 1 refcount change on invalid ref 2 ret -22 2033/05/18 03:36:12 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:36:12 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101000, 0x0) dup2(r0, r1) 2033/05/18 03:36:12 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r2) 2033/05/18 03:36:12 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:12 executing program 1: r0 = socket$nl_xfrm(0x2, 0x6, 0x21) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10d, 0x10, &(0x7f00000001c0)=0x4, 0x2d3) r1 = getpgid(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x1, &(0x7f0000000000)=""/62) 2033/05/18 03:36:12 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='ns/user\x00') 2033/05/18 03:36:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="c8b22c4324a114960f57a549d888d59d83e287b922b64b10d1977c034989e32bf35220a4260a4eb7a79123781d7d11fa3c45a3ff4929a6428fa606dd01000000e2d1c6727424d253febfdff8725df89fea3a5b223068b5d438b57e5be9a6c9ef689cf7d930002f96192f10824951a30a7651c188c36932e41c1c59912a2a73b4b526589e201ee7c1da9bd87a1e4c8d8d326ed4707f4ef4cea050e1cdbcd057108cadb79aa3c255ba5fc20cf69a389d1bab986cacb5dd9c267a365064896c500f2e5040d958"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:12 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfs-lus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) [ 234.152166] binder: 14713:14743 Acquire 1 refcount change on invalid ref 2 ret -22 2033/05/18 03:36:12 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000cbeff8)='.', &(0x7f0000000100)='nilfs2\x00', 0x2000, &(0x7f000002f000)) r0 = getpid() sched_getattr(r0, &(0x7f0000000000), 0x30, 0x0) [ 234.224948] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 234.232182] FAT-fs (loop5): Filesystem has been set read-only [ 234.242285] binder: 14763:14766 unknown command 1127002824 2033/05/18 03:36:12 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:12 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xffffffff, 0x80) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r1, r2) 2033/05/18 03:36:12 executing program 2: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x7a}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x28, 0x2, 0x1, &(0x7f0000000000)) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000280)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r1, r2) [ 234.278104] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 234.278224] binder: 14763:14766 ioctl c0306201 2000dfd0 returned -22 2033/05/18 03:36:12 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='ns/user\x00') [ 234.334297] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 234.345441] binder: 14763:14766 tried to acquire reference to desc 0, got 1 instead 2033/05/18 03:36:13 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0xd5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1d, &(0x7f0000001040)=""/4096, &(0x7f0000000000)=0x1000) 2033/05/18 03:36:13 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:13 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x85, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = request_key(&(0x7f0000000180)='rxrpc_s\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000200)="766d6e657431a97b00", 0x0) add_key(&(0x7f0000000080)='blacklist\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000100)="d2b0dbdbf4f8cce831037e7b231ad916005b276b4d3c3f732c7fe206af3ebce86556c866bc6b0e694b3adc724498577225265eb8771ba32218f1612b5cbe1e0d54e9d5f92da6267de8c72cd5e30648298223dc97406bb686fd", 0x59, r1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) r3 = getpid() sched_getparam(r3, &(0x7f0000000280)) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000002c0)={0x9, {{0xa, 0x4e20, 0x203, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0xc}}}, 0x88) dup2(r0, r2) 2033/05/18 03:36:13 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)="2e2f66696c65302f66696c6530ff", 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:36:13 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x200, 0x80000) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd4, r2, 0x2, 0x70bd2a, 0x25dfdbfd, {0xe}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000000}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x800}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xc916026a37c49995}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x11}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4a}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x4, 0x3}]}, 0xd4}, 0x1, 0x0, 0x0, 0xb338147b8fd6f779}, 0x10) dup2(r0, r1) getpeername$inet(r1, &(0x7f0000000040)={0x0, 0x0, @local}, &(0x7f0000000080)=0x10) 2033/05/18 03:36:13 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfs+lus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:36:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x64f, 0x16441) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) r2 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f00000000c0)=0x7a6) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:13 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000100)='ns/user\x00') [ 235.176744] binder: 14810:14811 unknown command 25349 [ 235.201479] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 235.208730] FAT-fs (loop5): Filesystem has been set read-only [ 235.219413] binder: 14810:14811 ioctl c0306201 20007000 returned -22 [ 235.232609] binder: 14814:14824 ioctl 400454d4 200000c0 returned -22 2033/05/18 03:36:13 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000100)='ns/user\x00') 2033/05/18 03:36:13 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x7, 0x10000, 0x5, 0x15, 0xffffffffffffffff, 0x2}, 0x2c) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x200000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r0, 0x50, &(0x7f0000000100)}, 0x10) rt_sigaction(0x7, &(0x7f0000000080)={0xffffffffffffff0f, {0xfffffffffffffffd}}, &(0x7f00000000c0), 0x8, &(0x7f0000312ff8)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00008f0a07)='pagemap\x00') 2033/05/18 03:36:13 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:13 executing program 7: uname(&(0x7f0000000040)=""/146) perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) [ 235.277007] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 235.296320] binder: 14814:14824 ioctl 400454d4 200000c0 returned -22 2033/05/18 03:36:13 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:36:13 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000100)='ns/user\x00') 2033/05/18 03:36:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sched_yield() 2033/05/18 03:36:13 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:36:13 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000100)=@get={0x1, &(0x7f00000001c0)=""/4096, 0x24596e09}) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000000c0)=0x78, 0x4) r2 = userfaultfd(0x0) openat(r1, &(0x7f0000000080)='./file0\x00', 0x101000, 0x6) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x4000}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) read(r0, &(0x7f0000000000)=""/126, 0x7e) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000604ffc)) dup2(r0, r2) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000140)=0x1ff, 0x4) [ 235.377262] binder: 14842:14846 unknown command 25349 [ 235.405627] binder: 14842:14846 ioctl c0306201 20007000 returned -22 2033/05/18 03:36:13 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:13 executing program 0: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000100)='ns/user\x00') [ 235.560908] binder: 14869:14870 unknown command 25349 [ 235.573456] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 235.578895] binder: 14869:14870 ioctl c0306201 20007000 returned -22 [ 235.580711] FAT-fs (loop5): Filesystem has been set read-only [ 235.604922] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 235.627800] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:36:14 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000131fee)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x96, 0x1) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000040)) ioctl(r0, 0x100004521, &(0x7f0000000040)) 2033/05/18 03:36:14 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="2749324b3a1b7d456ab0a2ac1832e57ab22d32b01d569dc261979170b5a8267086603c2b3f85b3a99966bcae9715ae5647b6ac3134c0e2128bdb665f16c307af8248c4b305f8ce1837c3ea75a9bc145141bd2f297ade035aae068669567c470b507de9aa9a810475532d6275cee0c9331326bc7f4d", 0x75}], 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x203, 0x0) dup2(r0, r1) rt_sigpending(&(0x7f0000000040), 0x8) 2033/05/18 03:36:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) unlink(&(0x7f0000000140)='./file0\x00') r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x42000, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x0, 0x1, 0x40, 0xbf7}, 0x32}, 0xa) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000180)=""/147) openat$cuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x4502, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=ANY=[@ANYBLOB="046344d0b6231000"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:14 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x3, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:14 executing program 0: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000100)='ns/user\x00') 2033/05/18 03:36:14 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfsslus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:36:14 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) getgroups(0x0, &(0x7f0000000140)) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='bic\x00', 0xda) r2 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000140)) fchmod(r0, 0x8) linkat(r2, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x1400) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x541100, 0x0) dup2(r2, r3) 2033/05/18 03:36:14 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 236.211895] binder: 14895:14897 unknown command 287493 [ 236.246934] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 236.254251] FAT-fs (loop5): Filesystem has been set read-only 2033/05/18 03:36:14 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x800000000000001, 0x0) dup2(r0, r1) [ 236.260182] binder: 14895:14897 ioctl c0306201 20007000 returned -22 2033/05/18 03:36:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) r2 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@pppoe={0x0, 0x0, {0x0, @local}}, &(0x7f0000000240)=0x80, 0x80800) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @loopback=0x7f000001}}, 0x7ff, 0x6483, 0x9, 0x857, 0x2}, &(0x7f0000000340)=0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000003c0)={r3, 0x38, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x14, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x4}, @in6={0xa, 0x4e23, 0x101, @local={0xfe, 0x80, [], 0xaa}, 0xffffffff}]}, &(0x7f0000000400)=0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:14 executing program 0: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000100)='ns/user\x00') 2033/05/18 03:36:14 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x3, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:14 executing program 1: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000001000)={0x77359400}, &(0x7f0000048000), 0x0) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x8, 0x8}, 0xc) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) r2 = add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000001040)="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", 0x1000, 0xfffffffffffffff8) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000001c0)="11c04ee27048c6be9995feb36745bf78d740bd1abc9a5bbd586f7581df7e26bcde5d9554e34a5e358e327d54ab97ed3109a3c507cb3cc48070e0c156037e198457d5bd6ad83aedffe83238e62941b775585822ecf356c7a12de4b54d316655b78eb5a533c3f9b2053f8276e7a5a834c3472c7686186d757c7cc6eabcc676003769c46677efc11b517ce71545f12b507b8fc2adb7db79dfe0be38864c19c7ab7957973486cf71c175f875231d2dbd92ce931960a85ab7e11c93ab6488aa5edf32d33a344a5fbea531339521464eda160f4305", 0xd2, r2) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x40}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYBLOB="030001000100f9a64efd2f25ebb14b8904799184682401d012d296b7b583a50590b49ea17dc80975b9049bf169a4a385ec8b93828175c6fd1ba6729ca64dc5a945d4173bcd"], 0xa) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x1, 0x8, &(0x7f0000451000), &(0x7f0000000180), 0x0) 2033/05/18 03:36:14 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x8, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) r2 = dup2(r0, r1) fdatasync(r2) [ 236.307874] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 236.379772] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 236.402955] binder: 14924:14927 unknown command 287493 [ 236.436667] binder: 14924:14927 ioctl c0306201 20007000 returned -22 2033/05/18 03:36:15 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000480)=0xe8) r3 = getpgid(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f00000005c0)=0xe8) r5 = getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000700)=0xe8) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000740)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000002100)=0x0) r9 = getuid() r10 = getegid() r11 = getpgid(0x0) r12 = getuid() r13 = getegid() sendmsg$netlink(r1, &(0x7f0000002240)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x20000}, 0xc, &(0x7f00000020c0)=[{&(0x7f0000000100)={0x248, 0x1b, 0x800, 0x70bd28, 0x25dfdbfe, "", [@generic="9c350ad20dd8d38a4bf9b03537e0cac40d83e14c06c89f69cfbc70479f8c482019df2bd02f07fb2238cf3f77eb06dec5f86f83455891b7d0dd057f2aff76a4fa99e4be4da94af5167c670d16244a9917638cec166b070b95c696c0a84f9c004f45b8780e917a64d0a8fbb8ae23d12babf87a508d4e28526f1ad3eb07a3ffbe5708ef30239a0955eaf827c3895bc4f8742c41385ca7429d2db781920e493e3243a6067c5d219a9121a6f43bd0212f16ab5af3ff3beca7e530f9f49d44e6d2062ad525f07865", @nested={0x18, 0x72, [@typed={0x14, 0x95, @ipv6=@dev={0xfe, 0x80, [], 0x20}}]}, @generic="8daaa1276245d57a4da4cd022478dcccb7360131e622b32da36c0d3b094e587755e0e62eb0d88a0d70477f2e43106a1fa51f3acc1585ee429cb1407d618f6f23be41d96100274344331b6bdadc8905bc723741748cb392f059e634fdddb71e49000c8af295fdf87f1091e7ffdc2067a4f5f7646d053cf6108a77cc91d581c3bd5c6a7b441413ac996e0507f69056a6460992e69c2a0264e64b5cd3e7de2ff63c9e3f0081b3a42b646b26d8040b9bf3ade937bf8af370f99b8a51a14956af34e278676d18d7a0cf86578024df582fa3b739298c13ab0bbb366a553fee06dc5c9cac788d4b653d15cdd6ab16", @generic="717b21c021e3033a864db9c78ea89903b430a8882835ea161fdc781d669d422e185941eff4a318dc99104047c433ae5f55f5b0e33ed1c41c36be01512447d2a85d59d331ad2b3edaf06d7055", @nested={0x18, 0x11, [@typed={0x8, 0x23, @str='].:\x00'}, @typed={0xc, 0x3c, @u64=0xfffffffffffffffd}]}, @generic="90161e87ed5ef641b27c41"]}, 0x248}, {&(0x7f0000000780)={0x1938, 0x35, 0x4, 0x70bd29, 0x25dfdbff, "", [@generic="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", @nested={0x148, 0x5d, [@generic="d29d6984db8c0a5e5dd47344c98e67919102a9db77980c8f7942d2ff5ad3362127ff8375ab755a5847a5db80b2dfbcc30ffd", @generic="de955c4c5378e8111194b2b43f869900220966c710475b30b7242a4f60bf3e1747c8173b2537724a053bdb7dde685f9308eac5809b4c4ab5b0dfa6980eba7747594344019e8904614e33b3fb916a1eb4d7c2e05d8d8086027de93f8ab83c4775c5637fe5bca5528a16107f45fafb", @generic="ba2ae07875db2f37c8a79be547de3d41834cc9f39127a614e84fd1b643e8cd9710ac6541fbc2b9d0731f3822f4dc09026828d21ad5db938abe44110a36f97ea98248feb30bd8b6", @typed={0x14, 0x60, @ipv6=@local={0xfe, 0x80, [], 0xaa}}, @typed={0x8, 0x51, @u32=0x8000}, @typed={0x8, 0x7a, @uid=r2}, @generic="91afa356150ebef108ade21e41b13e1d0b63096b9c0bc4e7dec0bab7134744e385c5eba7160cb30aea160265d08c", @typed={0x8, 0x76, @pid=r3}]}, @typed={0x8, 0x5e, @uid=r4}, @generic="a2153f399180f39e102147729cb8d1d430be9f5abf140c24c9a525d5b9a922897a7ca7645db4f4205f3291ac10b7ae50652d0f46a2d2ffc9b993fdcbccc61f7fb7ebc2b92d65d4ba5509b7c62309bb88a34340ddc68c1bbd212bd47bd32cdce08016fdd579c3696d8196d2e1b26338b8d13b1b3e9580c4156cf547e5a839491bdcfef34ffed211bb279c35e9e6bab11e39df249af383ccdc6a506d6541ed9e1b34cc429768999c8ded13a0b843ef5fc72730b9d14504b0b6cde3c877a55590adb3e8324e8f8d96cb37524740bdaddce3e91d5aa33cae4009", @nested={0x130c, 0x4b, [@generic="e47bb2240d5f310ee7014df401937f20f4c7bf09a6e984f858575c2b4aeb5108baa69f7d8782fa3354d1fdaad04681aa9b85e5f9dbb022b6fa27db3e6bd453c80522d05c685581c94f251a6960a1c145bf9f83eb676a646d6d29ef1f0ee46d17d4c73e1e4a7f6a73a463db8096", @typed={0xbc, 0x17, @binary="74da3d7a06213b540da2c09e1514068c68235646797cbb3669bcf898a65226ac5fba0219f6451f0ef59f45a3beef808d8028591e814018f26439613c8484ba9cfd99ebd1f0d0ff347e8f963ac48d9e63e17a2536356b6a836f782077d2e5c94d255945d0b201d0f80f896dab0f0754fe12cb761cf6adbef259123ff71bc1be3ef7338454b9f8cc3cc03cbecf5a1d0fa3e1495c3a460e3f8556c12d391927a43f7c86b037d5350385b11153cba3390a967937aef4bc"}, @generic="865c473cb2469b15e130963228c1a738efe4f2b3878786f0d291cd5a72a5b6eb66fe0fabf1149a4a354f74060fc2f646129d29a294ca15fe30fcbc46cb1177cf0e39c1102c73bce4b423ac064ac088ae6a00fa6416d9239389a498dcd5c5364878d747e574cfbd2816e2", @generic="d730af56c8ee8944b709d5fdc4e7126099171fd8af33436f8bb59f0d37141bd8afa5edadb9431902a78e7625a0dd2cafb75c1bf29fbb6bb697b97a446290220caf2fd3f0f00ff35984490106f795600e4881950e7c7eb491b7419e1aefca6a6bf580d0ae81ae74e0017c6f5c3113a9efac7c99192b8c2c359c0aaebf15169fd2afa8dc1343d5cef15c170407a3b669081a39b43b7ff51b43488f9a432c1fe0424c325c35bdae8f7d70f3", @generic="4df0d5656fe841f4dee8e7c0f57b3fa4713b3eed58dbf9c5301d93f2618f4cc9ce94fbd682ffecfc2122fbeb2640491c4ec40072b0f4569034f464fd7167b5faa457a2cfa681891b22b05e3db461fe5ef760e2f89693b0ce59103599e92689b7a4e5be495a1c17c12c5cf66ea729e3e132ffe728d8366a581aa6e7d2663636d5484322927b94c5c95e8084c45d0250621be34eea0b69beb23dd180bc24219d9ba90a9ec7e59890e888b5457f31a9bc09108ca62e57773453203da31145c1c7740e4baa84e7e40910bd33", @generic="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"]}, @nested={0x1c8, 0x39, [@generic="653641e7edc5c8f0db56cc2bf4754b527feb35b9abc579d432d28198800f4140fd65db1bbb0ad4d716abe64f8fe5e15a2e46df6418c393bbb10bcfc0e8965a30d7fd05af48277a9907f459775ab59e9b72ada694ef769c679f765df1131f2065443f3284adede252702589e42a144650229260c5e878a5304a64a8c1576861ce7a2dbdc2143845ca136569e6e78a387e0f20113589b93db87eb2b6f1fd81911c1d44a3a7cfa0606e252da95e20fd46c99c32ffa92ae3fca68e343599a1a9573736af518221fc004261de424a6183309263", @generic="6d2062b930b2d7366469bdda14088dd39edae92c119d9c12547082d602e53a453a3bbae29160ea916a2d979cf1f114ff76923524", @generic="1c3283c2cd29274e9dccab253f1e8e3695e45532efde290cea88f4b35995300f150b8ded2fd10f9793370811d17d5a2be155c2bdf4d0fe2cb25efdd6f75871f0d2f524c785b7929d88f648d879b219dcb4de51e7b3b1bb43b0f0a03087b94ff2b06cb34cdcf456f84de0631b3bd13ae882b9e2ae5345de38f4a3bb0e546b894a19", @typed={0xc, 0x77, @u64=0x400}, @typed={0x8, 0x6d, @pid=r5}, @typed={0x8, 0xfffffffffffffffc, @uid=r6}, @typed={0x18, 0x2a, @str='/dev/snd/midiC#D#\x00'}, @typed={0x8, 0x23, @fd=r0}]}, @nested={0x28, 0x26, [@typed={0x8, 0x27, @pid=r7}, @typed={0x8, 0x41, @ipv4=@remote={0xac, 0x14, 0x14, 0xbb}}, @typed={0x14, 0x4, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}]}, @generic="d3dc9beae9a423ffa00388ab7779165e5e313fb7ed57e92a9a1f0b71b16fe6d2205f6c9321bfb3fffd358ec34dad4961bc58c10d464965907400042292dc2ac3acde803e37f52dbcf8798b4ebf38b3cf7f45d02a2aa4679ee675ef766974635a3be772c0adf44941d071b358b43b31e7b78978679b3cdd99254250b73777c0603a4932af3a933fd820c1bfda8ad3ead348ea67db2dc839a70050e4ff71cbae26a3b2b56aef8510bd5db40d46bd5772c12caf5fb8e36e3791dc8956d05010e25299e33a2b50a4be141390da081904dd0b314e8b1a8c514be207339ec70ab7e21500", @typed={0x28, 0x1b, @binary="6fabb5771bc487297e6dccddd66e2f6b581be862de4ba063173f5bf8c90f967715231e"}]}, 0x1938}], 0x2, &(0x7f0000002140)=[@rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffff9c, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}], 0xd0, 0x20000045}, 0x1) r14 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r15 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r14, r15) pipe(&(0x7f0000000040)) 2033/05/18 03:36:15 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)="2e2f66696c65302f66696c653002", 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:36:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x8000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x281, 0x0) getsockopt$inet_int(r2, 0x0, 0x3f, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r3 = dup3(r1, r1, 0x80000) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @multicast2=0xe0000002}}, 0x4, 0x4, 0xc62, 0xfff, 0x10}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000280)={r4, 0x4c, "c12222a6b84fa407a52eaae620e29367296b0d42e564c72ecc089ec8142138bfaa95568fe8bebf40f84c5d632af6f67c82a3be6d4c033afc712406e4c5df80bf4e382c968b1019c43381dba4"}, &(0x7f0000000300)=0x54) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:15 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000100)='ns/user\x00') 2033/05/18 03:36:15 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x3, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:15 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x2000) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:36:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x1000000084) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x3) getsockopt$bt_hci(r0, 0x84, 0xb, &(0x7f0000000080)=""/4096, &(0x7f0000000000)=0xac6) 2033/05/18 03:36:15 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfsclus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) [ 237.426969] binder: 14956:14959 unknown command 287493 [ 237.466090] binder: 14956:14959 ioctl c0306201 20007000 returned -22 2033/05/18 03:36:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:15 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000100)='ns/user\x00') [ 237.475813] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 237.483080] FAT-fs (loop5): Filesystem has been set read-only 2033/05/18 03:36:15 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x100) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}}}, &(0x7f00000001c0)=0xe8) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="029c000101967f240e6e263a9362240000000000008000000000fc8b6e9d9e8dd495035ca6b3fa0d82fa1706fe31a526a95e32c4a7c44b07bee0c5f6546052e9a523374422d44c7b6cf987d892376d7598a8d71c73a6850ddfbb293269be506d0327bc12d98cc3a9245ae6ae81f9342b30693f6b30"], 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x4e24, 0x101, 0x4e21, 0x100000000, 0x2, 0xa0, 0xa0, 0x7b, r3, r4}, {0x7f, 0x4, 0x6, 0x6, 0x1f, 0x100000000, 0x2, 0x500000}, {0x9, 0x0, 0x8e7, 0x8}, 0x2, 0x6e6bb1, 0x1, 0x0, 0x1, 0x3}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4d6, 0xff}, 0xa, @in6=@loopback={0x0, 0x1}, 0x3502, 0x0, 0x2, 0x0, 0x2, 0x1, 0xffffffffffffffff}}, 0xe8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}, [0x5, 0x2, 0xfffffffffffffff8, 0x2, 0x100000001, 0x3, 0x1, 0x101, 0x4, 0x100000001, 0x1, 0x1, 0x81, 0x8, 0x10000]}, &(0x7f0000000540)=0x100) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000580)={r5, 0x1, 0x30, 0xffffffff, 0x41f6}, &(0x7f00000005c0)=0x18) syz_open_dev$urandom(&(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x80) 2033/05/18 03:36:15 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:15 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) dup2(r0, 0xffffffffffffffff) [ 237.549087] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:36:15 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x100000001}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={r1, 0xa8, "daa18591b65e29605820b19a19b4720d1553a8a9bc3c6aa6032342b0e75c91c73a10206b132fbf5259d2d3039a660f55d0d003c20149c43834eb6cf878e4625dca6b8a9db42ebad0f207f9c44c960c8acd590957019e07118321f58849ad85341e6759ddddf01ce9baeb5c823917e72dc22c2ca23ced83c0f169c81f2831ba1fce069b495fad5c0399a862e5a4b8408e0d74b1cbcdbcd7d56e75fe4453b18f17b076548277ad28ac"}, &(0x7f0000000240)=0xb0) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x2e, 0xaff, 0x0, 0x0, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0xa, @binary='`'}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:36:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) r2 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000000)={0x7, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}]}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:15 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file0\a', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:36:15 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:15 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000100)='ns/user\x00') [ 237.697234] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 237.733981] binder: 15000:15004 ioctl 800448d2 20000000 returned -22 [ 237.767550] binder: BINDER_SET_CONTEXT_MGR already set [ 237.774773] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 237.781112] binder: 15000:15013 ioctl 40046207 0 returned -16 [ 237.781996] FAT-fs (loop5): Filesystem has been set read-only [ 237.801242] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 237.810886] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 237.822181] binder: 15000:15013 ioctl 800448d2 20000000 returned -22 2033/05/18 03:36:16 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:36:16 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfs\nlus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:36:16 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000100)='ns/user\x00') 2033/05/18 03:36:16 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:36:16 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000014c0)={0x0, 0x3, 0x20}, &(0x7f0000001500)=0xc) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000001540)={0x0, 0x1}, &(0x7f0000001580)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000015c0)={0x0, 0x7}, &(0x7f0000001600)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001640)=@assoc_value={0x0}, &(0x7f0000001680)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000002a80)=[{&(0x7f00000010c0)=@in6={0xa, 0x4e20, 0x1f, @dev={0xfe, 0x80, [], 0x20}, 0x123d}, 0x1c, &(0x7f0000001440)=[{&(0x7f0000001100)="70ac4e0f424a10cf2db5d0062dfd5bce337e70e32eb4a7a640b48a6c152a07fc9eaa30397a77c145a7af03b891c59dc78ee941e0bb047680c219f286658cb0a82cd4b8542f3161423884c59509a3f9c14109a5185531ebb9cc38a46189b09ad3acadb5e1d0f98f4a10e7ab7ceedbb2d116b5de6147b5b59e5294ec11d99c242d8dc2c846e1fafbb76b175026e96fcb266c9c2a06ad78620a416746731e241075ac47253928897d68c8a996689ab9403f25cd8db3ac0941c46c1f3f4393548081b94ea22fdb86bc91d59ce662766110ac2eb6dcf67b2be04d7f34b0710cb518c1b7934c179072", 0xe6}, {&(0x7f0000001200)}, {&(0x7f0000001240)="26ac15718bb0b9ea77de391098bb69bad6e66d812de44c6a1e722e7d978fc8b10945eda52a40d1987b56c597dd72935574fc5b62e6b9a19a977e65f38a9bd39b3fa7c7681fd022a908cc97e16218af25df68a46d3cfd31256ad9ae67ecd280d8", 0x60}, {&(0x7f00000012c0)="411d78520ddc5e7c1bb69134ef7a5d234d19003e02a648b9fad44d9d7b183e", 0x1f}, {&(0x7f0000001300)="0b6aed897574a42d25ffe896d0182353367cb78cf4f172511afae84a8b738315f77e5879df309361f6734e3fd870cbef351786706d5b5c803deaf98ca480e43f5218ee5b28b3773e4b1f58f674a289ab6742dd336ed36da4477c45acb3dda71dc715bc7c90c22580fe141d6b7ed0", 0x6e}, {&(0x7f0000001380)="3ea0afdb32e32c2c9777357cf6163368ec63c30a3e3902ee8827dc0e0675b85c47a3314d77d1d892a1ffd0f479b239ed8ac79184ffce0b68c50c2df0496f0f8b7ab9017bf7c6fdfd7827f050c1fce4cb3033a188bb58e1940f480bce", 0x5c}, {&(0x7f0000001400)="2f18ef07bc2263038ad33bd6871edbc15aba48", 0x13}], 0x7, &(0x7f00000016c0)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0x1000, 0x1, 0x18a33cb5, 0x8b, 0x0, 0x7, 0x9, r2}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x1, 0x5, 0x1ff, r3}}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0x3f, 0xd46a40c574088885, 0x100, 0xfffffffffffffffb, 0xf59, 0x8000, 0x3, r4}}, @init={0x18, 0x84, 0x0, {0x9, 0x3, 0xfffffffffffff655, 0xff}}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0x3, 0x4, 0x1, 0x20, 0x7ff, 0x3, 0xfc, r5}}], 0xf0, 0x4}, {&(0x7f00000017c0)=@in6={0xa, 0x4e22, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0x20}, 0x1c, &(0x7f0000002a40)=[{&(0x7f0000001800)="99413d9b6cf74041f5c22edce72d4aab3d3292525d4fad2bf7e922a60996d5827ab2b138a39f19145ebddced076288ce54f1ee6bf83d4e2991ad4bbc43472ab1a18646d07e061bcc77022c1725ee2f300ba78315639a1b96235d53f58718ad878bae501656f728263127bb936f27f9ffd9ce8085db0a73ce702a7515ffc7ae3b11b637a870b62d0058c644c8e115c54d858422351c42305a4d1cdaaec29a6e82afd8399b93c9", 0xa6}, {&(0x7f00000018c0)="a58793ef0daed579a762b9ce8f892f5d1ca7aa877066bd39bda8b6aeabc4e764282e1a76b57bba37d248cec65e19121ecddbda0da32b8811a34cafa9a643c25f995d0825114b031a9b841bd9a013419d3b349bf5fda7fd29", 0x58}, {&(0x7f0000001940)="c1707abd955fe1adf97043d5ed387872d4df9a3cebb9f32eb0b9a379b2497a499b585e8a40f69b07759d600a12cd4877af2a5f94efda1142880d21a8ea44273586feb3040c3e3cc0c63bc400698db52c5a82a70525f68ed2bd7515660def94e06d43f9dd88bfcb243baaf8711709732c757c9c15e0e8a7bc47647aa3e46d89503c2200695c7953c54eeb1c085f68ea00d22614174ec78902af34c6ecb6932233fbead1d9446d6c252ba04e6dc6a1b6109dfcd43f9cf9c61ff57ce6663febff58f125c546bb6164263c84ad3603ce43401a8444dc048a56", 0xd7}, {&(0x7f0000001a40)="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", 0x1000}], 0x4, 0x0, 0x0, 0x4000}], 0x2, 0x4004014) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000002b00)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="2000010000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="d207c20c1c72fb9cc6a14e142a770b57"], @ANYBLOB="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"]) dup2(r0, r1) 2033/05/18 03:36:16 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000380)={r1, 0x1, 0x0, r1}) close(r1) syz_open_dev$tun(&(0x7f0000000500)='/dev/net/tun\x00', 0x0, 0x240185) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000333f88)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x60}, 0x1}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) delete_module(&(0x7f0000000440)='dev ', 0x200) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000040)=""/254, &(0x7f0000000140)=""/119, &(0x7f00000001c0)=""/150}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'dummy0\x00', 0x1}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x1, r1}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f0000000080)='dev ', 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYBLOB="cf000000f453936a64768c4d8d687b2549dd4093ae3ef12ce13709e621cad6e4a493fabd8b935e0af0291a0a519bb68defc5f4d99125dd9d1043531d9c2dfb21ce456575979dfc76a4f5b93b6d1fea75dc5407e5f6a30131adc77d9f4328d79aa242289d5c56d2ebc103af35988c2921041950b5fcbad297915208ca8a99a8c3537d1361d693469a475f6d3a270153b84743c9924396f944a2b12c736f5702cd8609000000b225fb7ada3c78b3c7e844c3acfaea90d252175bf24b03c463a6b5687a82f8f83a3c41882e7681c594ac6a800bd062746bb9965a09b8f47e518a2780c311bff7deea32e3dca3dc022b"], &(0x7f0000000600)=0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000680)={r5, 0x3c, &(0x7f0000000640)=[@in={0x2, 0x4e22, @broadcast=0xffffffff}, @in6={0xa, 0x4e23, 0x29e, @empty, 0x79}, @in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}]}, &(0x7f00000006c0)=0x10) fallocate(r4, 0x0, 0x0, 0x1) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x0, 0x1}) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet_sctp(0x2, 0x4000000000005, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) io_setup(0x1f, &(0x7f0000000400)) r7 = add_key(&(0x7f0000000480)='user\x00', &(0x7f00000004c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000500), 0x0, 0xfffffffffffffffb) keyctl$reject(0x13, r7, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000200)={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0xfffffffffffffffd, {0x2, 0x0, @broadcast=0xffffffff}, 'syz_tun\x00'}) setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f00000000c0)=0x5, 0x4) accept$inet(r6, &(0x7f0000000100)={0x0, 0x0, @rand_addr}, &(0x7f00000003c0)=0xffffffffffffff54) 2033/05/18 03:36:16 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:16 executing program 3: syz_open_dev$sndseq(&(0x7f0000000640)='/dev/snd/seq\x00', 0x0, 0x10000) r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x101001) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x5, 0x4) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000000780)=0xe8) r3 = getuid() fstat(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r2, r3, r4) r5 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9b, 0x20000) ioctl$KVM_GET_LAPIC(r5, 0x8400ae8e, &(0x7f0000001180)={"20be3a9d3ba58816e7afb570dd1ebc6e31926a381d4c289d6d3ca1a9562b35d0e9a1766bc63ae74dc2b5a84ae5ab6803211b629f050253c890c5177654879fc378c895c87d2cd41f5c69dec5d5340dce4562c4fb92dd6c53e5f888aa55e8a72d6514a1c4137575d6ee7cdf6f682fbb0efdbaaa263bd2878d3d3a6322bf9e4c58b165ff1b86aef0fd3d9802c18710e1ec3fbd15696f5db8d43fbbabb00ba7e0fb0a5d43ec269e7e63ede643de67c5ee84886e7034d63a2fd28b3f019582bffb3f5fab01583f338d014c9de97155673d43915849683bd3c11a1737668b4f3474c3c25187390d902c6083b29b1557e1e29c45c5f96ab4241a7f8b1d0a6d3379920f0fb09e098a2684a12d72fb9381699ff4526cc27499acca8efbac8e362f2c56e805bca383fd50cd0341532a61af198569ace31bebc4be2d2b1b78336e09c0d4fd741ddfb524edf680d4b453c616c2c3650700000000000000139376b5adfd8cb5d76891fe91d25ca347c6f5563773e1ca44478a47c0ea6e66726ff827aaa9b05c5db0afbd6ddfb49f0df99645e80906f7fa6e6a1bb55bc7367a3051442af96f1131b95b67ca36840fa2deff4b23dbacf34ed60f79539b0e75ea2b003f73791ecb97153170663f1ae3c7577a731c7760a7156c2a7f3f7a85984d68cd000000000000ec371a3bbb7cf936794a916746cba467976092fdd61c28319f2f561f63020f33863c793d44e95f668ee035315631e1dad867e7cfa4cdaca8c9a4ebcf0100c2deb022f057fc3e338f8baf0089d047ee2099c18d82b3ed5fbdc441e3d93d1c65fd506972fda480361450ec026bc23f9bdebe680eec68b63e8572b83ac24ca7e4231e406676dd4c647bc80453d3696bbd4741a1ae4ab970c9dfe96f4c816c43ca6bbab35082a738311b1ab9ddd313acd278c04fb4c0c1a74565246feacd87cd7fbf8f37e8478a7b239f59f6277837c8b573f6b4ed44ad8a69072b885433ca091108f09a23eec871fcf2ca9b696e2e871c85423b6d43edcc581e2a7a3a1268d0110c1588b12d3078c33050709eb90469bd788e56a677f38fbcb5e22955384742d502ab8486307b3a090e747d961c0ee88a7da4ba12b36d16749f672462f42c95908ddb31a71b5ca61a49923afa520c480e1e28185dc31817566bf516fe34fd940940a8d3ce1eaf14701259da9ac5bcd9622bf7bb1e9617230b531fbe1f7bfdd24f4b7dc8f2357109e3b1800539a36241f951e593da13406c481109ff347f29527079eac59eff17bdb21d094a1e6506d6f0ae87a6770fb0d353a94e89c39da71021f0587573a1b7427cf9b8eb86ad90ecb122ea608c1ec4578eb7160ea32505ec9f1d05f446c0a050d230fd81c0c814944d5992375b0e5d2fe46ceaf246121f8be5cc34ffa94cf78cda51b5706243195fca8077303d0df566f2f482949a9828169a"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r6 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="15005e76"], 0x0, 0x0, &(0x7f0000002000)}) close(r1) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0, &(0x7f0000008f37)}) [ 238.420435] binder: 15034:15048 unknown command 1985871893 [ 238.428204] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 238.435458] FAT-fs (loop5): Filesystem has been set read-only [ 238.457464] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:36:16 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x0, 0x400) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0x6, "82c0c2b2011e"}, &(0x7f0000000280)=0xe) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000002c0)=r3, 0x4) msgget$private(0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040)={0x1ff, 0x100000, 0x400, 0x0, 0x1, 0x8, 0x100000000, 0x6, 0x3f, 0x222}, 0x10) dup2(r0, r1) 2033/05/18 03:36:16 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:16 executing program 0 (fault-call:2 fault-nth:0): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000100)='ns/user\x00') [ 238.464258] binder: 15034:15048 ioctl c0306201 20007000 returned -22 [ 238.481635] binder: 15034:15048 IncRefs 0 refcount change on invalid ref 56832 ret -22 [ 238.486107] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 238.524422] binder: 15034:15059 unknown command 1985871893 [ 238.530455] binder: 15034:15059 ioctl c0306201 20007000 returned -22 [ 238.553262] binder: 15034:15059 IncRefs 0 refcount change on invalid ref 56832 ret -22 [ 238.598280] FAULT_INJECTION: forcing a failure. [ 238.598280] name failslab, interval 1, probability 0, space 0, times 0 [ 238.609679] CPU: 1 PID: 15068 Comm: syz-executor0 Not tainted 4.16.0+ #1 [ 238.616531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 238.625898] Call Trace: [ 238.628503] dump_stack+0x1b9/0x294 [ 238.632154] ? dump_stack_print_info.cold.2+0x52/0x52 [ 238.637365] should_fail.cold.4+0xa/0x1a [ 238.641448] ? fault_create_debugfs_attr+0x1f0/0x1f0 2033/05/18 03:36:16 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000080)=[{r0}, {r1, 0x420}, {r0, 0x4000}, {r1, 0x100}, {r1, 0x8}, {r0, 0x20}, {r1, 0x2}], 0x7, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r1, r2) [ 238.646576] ? find_held_lock+0x36/0x1c0 [ 238.650661] ? find_held_lock+0x36/0x1c0 [ 238.654761] ? check_same_owner+0x320/0x320 [ 238.659106] ? rcu_note_context_switch+0x710/0x710 [ 238.664049] ? wait_for_completion+0x870/0x870 [ 238.668654] __should_failslab+0x124/0x180 [ 238.672907] should_failslab+0x9/0x14 [ 238.676724] kmem_cache_alloc+0x2af/0x760 [ 238.680895] getname_flags+0xd0/0x5a0 [ 238.684713] getname+0x19/0x20 [ 238.687918] do_sys_open+0x39a/0x740 [ 238.691647] ? filp_open+0x80/0x80 [ 238.695196] ? mm_fault_error+0x380/0x380 [ 238.700235] SyS_open+0x2d/0x40 [ 238.703526] ? do_sys_open+0x740/0x740 [ 238.707425] do_syscall_64+0x29e/0x9d0 [ 238.711323] ? vmalloc_sync_all+0x30/0x30 [ 238.715482] ? kasan_check_write+0x14/0x20 [ 238.719731] ? syscall_return_slowpath+0x5c0/0x5c0 [ 238.724677] ? syscall_return_slowpath+0x30f/0x5c0 [ 238.729624] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 238.735005] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 238.739867] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 238.745060] RIP: 0033:0x40f571 [ 238.748253] RSP: 002b:00007fc6cb1d6bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 238.755962] RAX: ffffffffffffffda RBX: 00007fc6cb1d76d4 RCX: 000000000040f571 [ 238.763227] RDX: 00007fc6cb1d6be2 RSI: 0000000000000002 RDI: 00007fc6cb1d6bd0 [ 238.770507] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000012 [ 238.777777] R10: 0000000000000007 R11: 0000000000000293 R12: 0000000000000015 [ 238.785037] R13: 0000000000000697 R14: 00000000006fcec8 R15: 0000000000000000 [ 239.326699] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 2033/05/18 03:36:17 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x7, 0x4) 2033/05/18 03:36:17 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x200400, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1273d5dd82c4c641e0d9478a5d3e5d4fd03bc0ba90015ddb49094b9f7f9ec50612b43f614f7d93bfbe256ffc0b381596011150d30fb54392454803caeae9f68520740665169ab99e719853730a46220b4e97f6d51ad575aa9000a2d53e92580d863e6c1e7836edb835e388d9bb8a7ba8b1d2446ce0dbbc8919f6407e106d31e0602404ba3321fee57907b1afc9403d5d45f79141ee1e6a20bb66a39b6fae01be9de84687f9712016fa452b5ec686c114", @ANYRES16=r2, @ANYBLOB="00042dbd7000fedbdf250f0000002c000200080002004e240000ff000b0002000000080005100000000008000300000000000800060008000000140001000800080000000000080004004e200000080004000500000008000500030000000800060009000000080004dd0100000008000500070000000c00020008000700ffffff7f0800040007000000"], 0x90}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) r3 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r3) r4 = fcntl$getown(r3, 0x9) fcntl$setown(r3, 0x8, r4) 2033/05/18 03:36:17 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)="2e2f66696c65302f66696c6530ff", 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:36:17 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:17 executing program 1: r0 = socket$inet6(0xa, 0x2, 0xfffffffffffffffc) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x902, 0x4) sendto$inet6(r0, &(0x7f000005d000), 0x0, 0x0, &(0x7f0000737000)={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) recvfrom$inet6(r0, &(0x7f00000002c0)=""/246, 0x3f34487329ce96f, 0x2000, 0x0, 0x0) 2033/05/18 03:36:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0563044053eea8aa67dfc0856888a19964254339fff362e08e404f52fcba47a8fcc72ff90abfc587d5a5a725266b4ce044e6ba8dd7cb08e75249b2a279236678f416f2bf97491c0a3d6c885a5a80f33e1d6743e750bee1872f4748c2d09903eda8dff0eabf3f8699d0591bde0a96f6665d89d350fbb2df36e497cbfc368fba3f9b3a0663b4ccf3"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x80) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000080)=0x3f) 2033/05/18 03:36:17 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfs*lus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:36:17 executing program 0 (fault-call:2 fault-nth:1): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000100)='ns/user\x00') [ 239.425602] binder: 15098:15101 Acquire 1 refcount change on invalid ref -1431769517 ret -22 [ 239.431801] FAULT_INJECTION: forcing a failure. [ 239.431801] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 239.443503] binder: 15098:15101 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 239.446050] CPU: 0 PID: 15094 Comm: syz-executor0 Not tainted 4.16.0+ #1 [ 239.446062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.446071] Call Trace: [ 239.446100] dump_stack+0x1b9/0x294 [ 239.446125] ? dump_stack_print_info.cold.2+0x52/0x52 [ 239.464087] binder: 15098:15101 Acquire 1 refcount change on invalid ref -1431769517 ret -22 [ 239.470075] should_fail.cold.4+0xa/0x1a [ 239.470109] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 239.470129] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 239.470149] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 239.480306] binder: 15098:15101 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 239.481551] ? perf_tp_event+0xc30/0xc30 [ 239.481576] ? perf_trace_lock+0x495/0x900 [ 239.481599] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 239.481618] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 239.535629] ? memset+0x31/0x40 [ 239.538936] ? find_held_lock+0x36/0x1c0 [ 239.543006] ? zap_class+0x720/0x720 [ 239.546734] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 239.552282] ? should_fail+0x21b/0xbcd [ 239.556175] __alloc_pages_nodemask+0x34e/0xd70 [ 239.560840] ? find_held_lock+0x36/0x1c0 [ 239.564908] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 239.569938] ? find_held_lock+0x36/0x1c0 [ 239.574031] ? check_same_owner+0x320/0x320 [ 239.578354] cache_grow_begin+0x72/0x6c0 [ 239.582409] kmem_cache_alloc+0x689/0x760 [ 239.586583] getname_flags+0xd0/0x5a0 [ 239.590381] getname+0x19/0x20 [ 239.593577] do_sys_open+0x39a/0x740 [ 239.597291] ? filp_open+0x80/0x80 [ 239.600822] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 239.605657] SyS_open+0x2d/0x40 [ 239.608926] ? do_sys_open+0x740/0x740 [ 239.612800] do_syscall_64+0x29e/0x9d0 [ 239.616686] ? vmalloc_sync_all+0x30/0x30 [ 239.620829] ? _raw_spin_unlock_irq+0x27/0x70 [ 239.625320] ? finish_task_switch+0x1ca/0x810 [ 239.629825] ? syscall_return_slowpath+0x5c0/0x5c0 [ 239.634742] ? syscall_return_slowpath+0x30f/0x5c0 [ 239.639669] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 239.645055] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 239.649894] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 239.655078] RIP: 0033:0x40f571 [ 239.658258] RSP: 002b:00007fc6cb1d6bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 239.665975] RAX: ffffffffffffffda RBX: 00007fc6cb1d76d4 RCX: 000000000040f571 2033/05/18 03:36:17 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) [ 239.673241] RDX: 00007fc6cb1d6be2 RSI: 0000000000000002 RDI: 00007fc6cb1d6bd0 [ 239.680499] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000012 [ 239.687754] R10: 0000000000000007 R11: 0000000000000293 R12: 0000000000000015 [ 239.695020] R13: 0000000000000697 R14: 00000000006fcec8 R15: 0000000000000001 2033/05/18 03:36:17 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f00006ba000)=ANY=[@ANYBLOB="ffffffffffffe2701bb605a908004500001c000000000032907800000000ffffffff00009078e0000001"], &(0x7f0000000040)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x101000, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000001340)={@un=@file={0x0, './file0\x00'}, {&(0x7f0000000300)=""/4096, 0x1000}, &(0x7f0000001300), 0x64}, 0xa0) [ 239.731398] binder: 15113:15115 unknown command 0 [ 239.744510] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 239.751706] FAT-fs (loop5): Filesystem has been set read-only [ 239.770531] binder: 15113:15115 ioctl c0306201 20007000 returned -22 2033/05/18 03:36:17 executing program 7: lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'trusted.', '(security:\x00'}) perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:36:17 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:18 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x8, 0x80) poll(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) r4 = dup2(r1, r3) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f00000000c0)={0x101ff, 0x0, &(0x7f0000fff000/0x1000)=nil}) [ 239.813606] binder: 15113:15115 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 239.850758] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:36:18 executing program 0 (fault-call:2 fault-nth:2): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000100)='ns/user\x00') [ 239.877983] binder: 15113:15115 unknown command 0 [ 239.910481] binder: 15113:15115 ioctl c0306201 20007000 returned -22 [ 239.945598] FAULT_INJECTION: forcing a failure. [ 239.945598] name failslab, interval 1, probability 0, space 0, times 0 [ 239.957064] CPU: 1 PID: 15138 Comm: syz-executor0 Not tainted 4.16.0+ #1 [ 239.963912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.973273] Call Trace: [ 239.975878] dump_stack+0x1b9/0x294 [ 239.979524] ? dump_stack_print_info.cold.2+0x52/0x52 [ 239.984741] should_fail.cold.4+0xa/0x1a [ 239.988822] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 239.993944] ? debug_check_no_locks_freed+0x310/0x310 [ 239.999150] ? print_usage_bug+0xc0/0xc0 [ 240.003226] ? find_held_lock+0x36/0x1c0 2033/05/18 03:36:18 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)="2e2f66696c65302f66696c6530ff", 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:36:18 executing program 1: r0 = socket$inet(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000016c0)='cpu.stat\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000680)=0xc) getgroups(0x8, &(0x7f00000006c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0]) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0, 0x0}, &(0x7f0000000740)=0xc) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000780)=@nat={'nat\x00', 0x19, 0x8, 0x1458, [0x20001dc0, 0x0, 0x0, 0x200028b8, 0x20002d00], 0x0, &(0x7f0000000240), &(0x7f0000001dc0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x5, 0x4, 0x8035, 'veth1\x00', 'tunl0\x00', 'veth0\x00', 'gre0\x00', @empty, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0xff, 0x0, 0xff, 0xff, 0xff], 0x108, 0x108, 0x140, [@physdev={'physdev\x00', 0x70, {{'veth0_to_bridge\x00', {}, 'bridge_slave_0\x00', {0xff}, 0x6, 0x3}}}]}}, @snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffe}}}}, {{{0x5, 0x2c, 0x9, 'gre0\x00', 'bcsh0\x00', 'vcan0\x00', 'dummy0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [0x0, 0xff], 0x950, 0x950, 0x988, [@ip6={'ip6\x00', 0x50, {{@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, @remote={0xfe, 0x80, [], 0xbb}, [0x0, 0xff000000, 0xff000000], [0xff, 0xffffff00, 0xffffffff, 0xffffff00], 0x1, 0x16, 0x2, 0x0, 0x4e20, 0x4e24, 0x4e21, 0x4e22}}}, @among={'among\x00', 0x840, {{0x40, 0x7, 0x1, {[0x9, 0x200000000, 0x4, 0x761, 0x8, 0x100000000, 0x1000, 0x8, 0x7, 0x3750982f, 0x3, 0x7, 0x80000000, 0x0, 0xffffffff, 0xd5c, 0x20, 0x8, 0x3631, 0x4d3, 0x1, 0x544, 0x5, 0x7, 0x9e, 0x6, 0xfffffffffffffffe, 0x3, 0x1, 0xf0, 0x7f, 0x78, 0x1, 0xfff, 0x1, 0xff, 0x1, 0x6, 0x9, 0x0, 0x10, 0x0, 0x7, 0x9, 0x0, 0x7ff, 0x7f, 0x30b85b4b, 0x8001, 0x20, 0x5, 0x2, 0x3, 0xfff, 0x80, 0x800000, 0x2, 0xffff, 0x1, 0x5b03ec86, 0xfff, 0xd2c, 0x401, 0x2ad, 0x800, 0xb7f0, 0x5d3, 0x1, 0xe9ea, 0x4, 0x81, 0x6, 0x0, 0x0, 0x80000000, 0x272eda47, 0x6, 0x100000001, 0x0, 0x20, 0x43, 0x400000000000000, 0x9, 0x3f, 0x7fffffff, 0x12, 0x9, 0xc3, 0x9, 0xa7, 0x8000, 0x6, 0x1000, 0x80000001, 0x5, 0x0, 0xfffffffeffffffff, 0x10001, 0x1, 0x200, 0x49, 0x1, 0x7, 0x4, 0x7fffffff, 0xd2cd, 0x9, 0x3, 0x1, 0x2, 0x3, 0x10000, 0x0, 0x100000000, 0x6, 0x800, 0x1, 0x901, 0xe55, 0x5, 0xda7f, 0x6, 0xfffffffffffffff8, 0xff, 0x1, 0x4, 0x4, 0x20, 0x20, 0xfff, 0x2, 0x3, 0x3, 0x7, 0x7f, 0x1, 0xfffffffffffffff8, 0x9, 0x1, 0x80, 0x6, 0x1, 0x90, 0x3ff, 0x2, 0x800, 0x8, 0xe, 0xfffffffffffffffb, 0x3ff, 0x5, 0x50, 0x6, 0xfffffffffffffffb, 0x7, 0xffffffff00000000, 0x10001, 0x4, 0xba5, 0xfff, 0x5, 0x2aea, 0x8001, 0x101, 0x6d83, 0x800, 0x7, 0x69, 0x80000001, 0x8001, 0x0, 0x1, 0x1f, 0x6, 0xb, 0xfffffffffffffff8, 0xffffffffa09393e5, 0x9, 0x8, 0x101, 0x7, 0x1f, 0x20, 0x200, 0x5, 0xd7a, 0x8, 0x7, 0x0, 0xffffffffffffff01, 0x5, 0x0, 0x9, 0x5, 0x3ff, 0x0, 0x200, 0x7f, 0x9, 0x88, 0x7, 0xfffffffffffffff8, 0x33bb9f62, 0xfffffffffffffffe, 0x78, 0x2, 0x8, 0x0, 0x0, 0x3f, 0x7, 0xfffffffffffff41e, 0xfffffffffffffc00, 0x3ff, 0x8000, 0x81, 0x1, 0xffffffffffff7c19, 0x43, 0x678000, 0x8, 0x80000001, 0x4, 0x4, 0x7f, 0x8, 0xb5, 0x2, 0x20, 0x6, 0x8, 0x1, 0x1, 0x100000000, 0x200, 0x0, 0x6, 0xfffffffffffff2a9, 0x6, 0x5, 0xd79d, 0x8, 0x3, 0x3d6b, 0x0, 0x800, 0x80000001, 0x6, 0x401, 0x0, 0x80000000, 0x10001, 0x5, 0x2, 0x9, 0x0, 0x3], 0x1, [{[0x400, 0x2], @multicast2=0xe0000002}]}, {[0x3, 0xc37e, 0x3f, 0x7, 0x8, 0x7, 0x6, 0x0, 0x20, 0x5, 0x6, 0x10001, 0x9656, 0x7fff, 0x72, 0x667, 0x9, 0x7f, 0x6, 0x8fe4, 0xad4, 0x3f, 0x800, 0xfffffffffffffffb, 0x7, 0x40, 0x767f, 0x5, 0x81, 0x9ff, 0x964c0000000, 0xff, 0x34, 0x6, 0xffffffffffff1c62, 0x7fffffff, 0x2, 0xe7, 0x1, 0x1, 0x8, 0x8000, 0x1, 0x80000000, 0x0, 0x1, 0x40, 0x11a1, 0x6, 0x6, 0x3, 0x7, 0x2, 0x20000000, 0x80000001, 0x38, 0x7, 0x6, 0x5, 0xb796, 0x100000001, 0x7f, 0xfffffffffffffffa, 0x9, 0x9, 0x9, 0xdf, 0x7fff, 0x2, 0x100000001, 0x3, 0x3ff, 0x41f, 0x7, 0xd40c, 0x80, 0xed05, 0x4, 0x9, 0x5, 0x0, 0x0, 0xd07b, 0x1, 0x0, 0x0, 0x1, 0x10000, 0x5, 0xf303, 0x1, 0x3, 0x4, 0x7fff, 0x17, 0xd63, 0x64, 0x0, 0x8, 0x100000001, 0x8001, 0x5, 0x6d3f, 0x5, 0x3, 0x0, 0x5, 0x2, 0x4, 0xc9, 0x7fffffff, 0x20, 0x5, 0x7, 0x6, 0x3f, 0x8, 0x5, 0x9, 0x80000000, 0x7, 0xfff, 0x9, 0xfffffffffffffc18, 0x3f, 0x0, 0x7ff, 0x773, 0x5, 0x7, 0x3, 0x1000, 0x0, 0x6a, 0x80000000, 0x3, 0x8, 0x4f5, 0x5, 0x2, 0x2, 0x3, 0x1f, 0x36, 0x40, 0x8001, 0x80000000, 0x100000001, 0x9, 0x3, 0x400, 0x5, 0x7d4, 0x1000, 0xfffffffffffffffd, 0xbb, 0x8, 0x6, 0x9, 0x1, 0x9, 0x6, 0x1, 0x1000, 0x4, 0x800, 0x101, 0x93, 0x1ff, 0x0, 0x3, 0x10000, 0x401, 0x20, 0x1, 0x100000001, 0x9ddd, 0xff, 0x8001, 0xfffffffffffffffc, 0x4, 0x9, 0x7, 0x7fff, 0x80000001, 0x3, 0x7, 0x6, 0x9, 0x7, 0x8, 0x101, 0x0, 0x100000000, 0x7e471c2f, 0xfffffffffffffff7, 0x7fffffff, 0x30e2a329, 0x7f, 0x9, 0x0, 0x3, 0x8000000, 0x90, 0x8, 0x10001, 0x2, 0x0, 0x9, 0x3, 0x7, 0xfff, 0x8, 0x9, 0x4b, 0x1, 0x100000000, 0xe00000000000, 0x2, 0x7fff, 0x7, 0xf33, 0x3, 0x7, 0xdf7, 0x10000, 0x100000001, 0xe5, 0x6, 0x3, 0x0, 0x4, 0x200, 0xfffffffffffffe01, 0x7, 0x7ff, 0x1, 0x7fffffff, 0x3494, 0xfffffffffffff800, 0x1000, 0x1, 0x3, 0x4, 0x9, 0xe7a9, 0x80000001, 0x7ff, 0x326c, 0x4, 0x218, 0x6, 0x1, 0x8, 0x8, 0x0, 0x10001], 0x2, [{[0x100000001, 0xe4], @multicast1=0xe0000001}, {[0xc0f7, 0x5], @multicast1=0xe0000001}]}}}}]}}, @arpreply={'arpreply\x00', 0x10, {{@random="7b6a51a71d04", 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0x3, 0x35, 0x6003, 'teql0\x00', 'bcsh0\x00', 'ip6_vti0\x00', 'ip6_vti0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], @random="aae2c00dedf8", [0x0, 0x79766b3d3736ee60, 0xff], 0x110, 0x1d0, 0x208, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0x7}}}, @arp={'arp\x00', 0x38, {{0xffff, 0x0, 0x4, @broadcast=0xffffffff, 0xffffffff, @remote={0xac, 0x14, 0x14, 0xbb}, 0xff000000, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x40, 0x80}}}]}, [@common=@nflog={'nflog\x00', 0x50, {{0x3f, 0xffffffff, 0x7, 0x0, 0x0, "5cbfc5c23b74e62933399815a326f659e9d73f971626beae953dfa9c9c3f776b1c4a8bd5fbe412e5f1f4b62c0ec24091be159e776d316539b4d469b91d63cc83"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x6, 0x6, 0x8001}}}]}, @snat={'snat\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}}}}, {{{0x5, 0x1, 0x9bff, 'veth1_to_bridge\x00', 'ip6gretap0\x00', '\x00', 'ip6tnl0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0x110, 0x1d8, 0x210, [@owner={'owner\x00', 0x18, {{r2, r3, r4, r5, 0x5, 0x4}}}, @arp={'arp\x00', 0x38, {{0x335, 0x0, 0x0, @broadcast=0xffffffff, 0xff000000, @multicast2=0xe0000002, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xf}, [0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x82, 0x2}}}]}, [@common=@log={'log\x00', 0x28, {{0x4, "451a38e500b7795640ad3d6b3ea61c7c535a907e99bd959a4dd00e4711d3", 0x8}}}, @common=@nflog={'nflog\x00', 0x50, {{0x5, 0x74db65ad, 0x101, 0x0, 0x0, "45b51e9c58ac50d33f5ab28849a107600ea436b6a536ff044585d0ea199811180411a8e5724fbff4fbde0263e74f43fb0e003b48f3c80db82580d3194079757d"}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{{{0x9, 0x18, 0x6002, 'syzkaller0\x00', 'gretap0\x00', 'ip6gre0\x00', 'ifb0\x00', @random="fa6561d439be", [0xff, 0xff, 0x0, 0x0, 0xf791502b84e2e03e], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0xb0, 0xe8, 0x120, [@devgroup={'devgroup\x00', 0x18, {{0x0, 0x87e8, 0x7, 0x10000, 0x3ff}}}]}, [@snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x10}}}]}, @snat={'snat\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 0xffffffffffffffff}}}}, {{{0x5, 0x26, 0x60fb, 'team_slave_0\x00', 'ip6gretap0\x00', 'nr0\x00', 'irlan0\x00', @empty, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x12}, [0xff, 0xff, 0xff, 0xff], 0x70, 0xa8, 0xe0}, [@arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}]}, @snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x6, 0xfffffffffffffffe, 0x2, [{{{0xd, 0x40, 0x0, 'tunl0\x00', 'bpq0\x00', 'veth0_to_bond\x00', 'eql\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], @random="cc1156e4af57", [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0xa0, 0xd8, 0x128, [@vlan={'vlan\x00', 0x8, {{0x4, 0x4, 0x0, 0x1, 0x2}}}]}, [@snat={'snat\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0xfffffffffffffffe}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x3, 'syz0\x00', 0x3}}}}, {{{0x11, 0x0, 0x897f, 'nr0\x00', 'team_slave_0\x00', 'team_slave_0\x00', '\x00', @random="5e831906ec9e", [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xd}, [0xff, 0x0, 0x0, 0xff, 0xff], 0x120, 0x158, 0x190, [@connbytes={'connbytes\x00', 0x18, {{0x5, 0x9, 0x1, 0x2}}}, @stp={'stp\x00', 0x48, {{0x9, {0xfffffffffffffff9, 0xac5, 0x4e, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], 0x1, 0x4000000000, 0x80, 0x5, @empty, [0xff, 0x0, 0xff, 0xff, 0xff], 0x4e21, 0x4e24, 0xf4cf, 0x1, 0x8, 0x400, 0x0, 0x1000, 0x8, 0x40}, 0x20, 0x908}}}]}, [@snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x16}, 0xfffffffffffffffe}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@random="5a0599ed349f", 0xfffffffffffffffe}}}}]}]}, 0x14d0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x48, "0481eecd931467a2080f245a9f4fc918aee60ecf8294e1b709ec7e445be0cd59cfc77256336bb528a953f897ac8070265df4e5368024b349e1800f0a4aa2f9331e78ca16457a066e"}, &(0x7f0000000180)=0x50) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000001c0)={0x0, 0x21, "06d320b25000708825f246dca998786a62b4a210327b4e162b0500b49b4b323e33"}, &(0x7f0000000200)=0x29) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000000)={r6, 0x74, "72ad5ee4d2c2df76a02ca5059eec0dcf470e9d4e06f4bbd664a7cbc8df3b4dbc4c9fa931ceb5009bec12847e76405c00607ac62be0b3a1a3bf02e258b7ae7ed59e61e4fbd74bb066a73a2ddf70b0a9566de51390451ae06b0e1d63793ab724d45a34c99de4d6e8eba76f23a7b336f1684102d858"}, &(0x7f0000000080)=0x141) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000001700)=@assoc_id=r7, &(0x7f00000000c0)=0x4) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000001780), &(0x7f00000017c0)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000380)=@broute={'broute\x00', 0x20, 0x1, 0x280, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000400], 0x2, &(0x7f0000001d80), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'vcan0\x00', 'syz_tun\x00', 'irlan0\x00', 'syzkaller1\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x120, 0x120, 0x250, [@rateest={'rateest\x00', 0x48, {{'lo\x00', 'gretap0\x00', 0x14, 0x1}}}, @devgroup={'devgroup\x00', 0x18}]}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:event_device_t:s0\x00'}}}}]}]}, 0x2f8) [ 240.007323] ? check_same_owner+0x320/0x320 [ 240.011668] ? rcu_note_context_switch+0x710/0x710 [ 240.016617] __should_failslab+0x124/0x180 [ 240.020865] should_failslab+0x9/0x14 [ 240.024678] kmem_cache_alloc+0x2af/0x760 [ 240.028840] ? debug_check_no_locks_freed+0x310/0x310 [ 240.034044] get_empty_filp+0x125/0x520 [ 240.038029] ? proc_nr_files+0x60/0x60 [ 240.041936] ? lock_downgrade+0x8e0/0x8e0 [ 240.046096] ? perf_trace_lock+0xd6/0x900 [ 240.050260] ? rcu_is_watching+0x85/0x140 [ 240.054428] path_openat+0x116/0x4e20 [ 240.058266] ? unwind_get_return_address+0x61/0xa0 [ 240.063212] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 240.068239] ? path_lookupat.isra.44+0xbd0/0xbd0 [ 240.073009] ? find_held_lock+0x36/0x1c0 [ 240.077092] ? lock_downgrade+0x8e0/0x8e0 [ 240.081249] ? do_sys_open+0x39a/0x740 [ 240.085154] ? kasan_check_read+0x11/0x20 [ 240.089312] ? do_raw_spin_unlock+0x9e/0x2e0 [ 240.093731] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 240.098323] ? __lock_is_held+0xb5/0x140 [ 240.102404] ? _raw_spin_unlock+0x22/0x30 [ 240.106574] ? __alloc_fd+0x346/0x700 [ 240.110384] ? usercopy_warn+0x120/0x120 [ 240.114480] do_filp_open+0x249/0x350 [ 240.118293] ? may_open_dev+0x100/0x100 [ 240.122277] ? strncpy_from_user+0x3b6/0x500 [ 240.125679] x_tables: eb_tables: physdev.0 match: invalid size 72 (kernel) != (user) 112 [ 240.126696] ? mpi_free.cold.1+0x19/0x19 [ 240.126722] ? get_unused_fd_flags+0x121/0x190 [ 240.143560] ? getname_flags+0xd0/0x5a0 [ 240.147549] ? getname_flags+0x26e/0x5a0 [ 240.151637] do_sys_open+0x56f/0x740 [ 240.155365] ? filp_open+0x80/0x80 [ 240.155993] x_tables: eb_tables: physdev.0 match: invalid size 72 (kernel) != (user) 112 [ 240.158913] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 240.158936] SyS_open+0x2d/0x40 [ 240.158951] ? do_sys_open+0x740/0x740 [ 240.158966] do_syscall_64+0x29e/0x9d0 [ 240.158978] ? vmalloc_sync_all+0x30/0x30 [ 240.158997] ? _raw_spin_unlock_irq+0x27/0x70 [ 240.191664] ? finish_task_switch+0x1ca/0x810 [ 240.196176] ? syscall_return_slowpath+0x5c0/0x5c0 [ 240.201116] ? syscall_return_slowpath+0x30f/0x5c0 [ 240.206059] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 240.211444] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 240.216305] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 240.221487] RIP: 0033:0x40f571 [ 240.224658] RSP: 002b:00007fc6cb1d6bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 240.232350] RAX: ffffffffffffffda RBX: 00007fc6cb1d76d4 RCX: 000000000040f571 [ 240.239604] RDX: 00007fc6cb1d6be2 RSI: 0000000000000002 RDI: 00007fc6cb1d6bd0 [ 240.246859] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000012 [ 240.254112] R10: 0000000000000007 R11: 0000000000000293 R12: 0000000000000015 [ 240.261374] R13: 0000000000000697 R14: 00000000006fcec8 R15: 0000000000000002 [ 240.314934] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 240.322190] FAT-fs (loop5): Filesystem has been set read-only [ 240.335576] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:36:18 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x3d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e9"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000140)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x3, &(0x7f0000000180)=""/18) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f00000001c0)={0x3, 0x4, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:18 executing program 7: pipe(&(0x7f0000000040)={0xffffffffffffffff}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x5) perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(0xffffffffffffffff, r1) 2033/05/18 03:36:18 executing program 0 (fault-call:2 fault-nth:3): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000100)='ns/user\x00') 2033/05/18 03:36:18 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0x20}}}, &(0x7f0000000140)=0x84) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000200)={0x3, {{0xa, 0x4e20, 0x4, @ipv4={[], [0xff, 0xff]}, 0xff}}}, 0x88) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={r1, 0x800, 0x1, [0x0]}, &(0x7f00000001c0)=0xa) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x6333, 0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r2) 2033/05/18 03:36:18 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)=0xfffffffffffffe01, 0x4) setsockopt$inet6_int(r0, 0x29, 0x800000000000048, &(0x7f0000000040)=0x2, 0x30d) getsockopt$inet6_mtu(r0, 0x29, 0x48, &(0x7f0000000080), &(0x7f00000001c0)=0x2f) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f00000000c0)=0x1, 0x4) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x40, 0x10000) 2033/05/18 03:36:18 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfsp+us\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:36:18 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file0\a', 0x0, 0x0, 0x0, 0x0, 0x0) [ 240.684747] FAULT_INJECTION: forcing a failure. [ 240.684747] name failslab, interval 1, probability 0, space 0, times 0 [ 240.696085] CPU: 1 PID: 15175 Comm: syz-executor0 Not tainted 4.16.0+ #1 [ 240.700692] binder: 15180:15183 unknown command -1691478564 [ 240.703712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 240.703718] Call Trace: [ 240.703742] dump_stack+0x1b9/0x294 [ 240.703765] ? dump_stack_print_info.cold.2+0x52/0x52 2033/05/18 03:36:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) dup2(r0, r1) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) r2 = getuid() getgroups(0x7, &(0x7f0000000080)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0]) lchown(&(0x7f0000000000)='./file0\x00', r2, r3) 2033/05/18 03:36:18 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x5c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bd"], 0x0, 0x0, &(0x7f0000008f37)}) [ 240.716179] binder: 15180:15183 ioctl c0306201 2000dfd0 returned -22 [ 240.718827] should_fail.cold.4+0xa/0x1a [ 240.718854] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 240.718870] ? graph_lock+0x170/0x170 [ 240.718903] ? lock_downgrade+0x8e0/0x8e0 [ 240.753828] ? find_held_lock+0x36/0x1c0 [ 240.757916] ? lock_downgrade+0x8e0/0x8e0 [ 240.762088] ? rcu_is_watching+0x85/0x140 [ 240.766254] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 240.771470] __should_failslab+0x124/0x180 [ 240.775718] should_failslab+0x9/0x14 [ 240.779535] kmem_cache_alloc_trace+0x4b/0x780 [ 240.781034] binder: BINDER_SET_CONTEXT_MGR already set [ 240.784125] ? delayed_put_pid+0x30/0x30 [ 240.784147] ? new_inode+0x40/0x40 [ 240.784165] ? security_inode_permission+0xd2/0x100 [ 240.784187] proc_self_get_link+0x16f/0x1c0 [ 240.784204] ? proc_ns_dir_readdir+0x560/0x560 [ 240.789951] binder: 15186:15188 unknown command -1691478564 [ 240.793517] link_path_walk+0xfff/0x1520 [ 240.793533] ? pick_link+0xb00/0xb00 [ 240.793559] ? walk_component+0x2550/0x2550 [ 240.793575] ? get_empty_filp+0x37a/0x520 2033/05/18 03:36:18 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x6b, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="400000f2b756efb5f5b024d20c7798edb0a0ce3759e826291b3176d73da68150a08251be3fcde97d6f42b159bf3ac27e6c"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="04630440000b00ceac6dcb834afa7aab43ccfe3bf5980f003e"], 0x0, 0x0, &(0x7f0000008f37)}) [ 240.793588] ? proc_nr_files+0x60/0x60 [ 240.793607] ? lock_downgrade+0x8e0/0x8e0 [ 240.798162] binder: 15186:15188 ioctl c0306201 2000dfd0 returned -22 [ 240.802135] ? perf_trace_lock+0xd6/0x900 [ 240.802153] ? rcu_is_watching+0x85/0x140 [ 240.802175] path_openat+0x246/0x4e20 [ 240.802210] ? unwind_get_return_address+0x61/0xa0 [ 240.806932] binder: 15185:15187 ioctl 40046207 0 returned -16 [ 240.811081] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 240.811096] ? path_lookupat.isra.44+0xbd0/0xbd0 [ 240.811115] ? find_held_lock+0x36/0x1c0 [ 240.811141] ? lock_downgrade+0x8e0/0x8e0 [ 240.811156] ? do_sys_open+0x39a/0x740 [ 240.811181] ? kasan_check_read+0x11/0x20 [ 240.874702] binder: 15191:15193 unknown command -1691478564 [ 240.875381] ? do_raw_spin_unlock+0x9e/0x2e0 [ 240.875400] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 240.875415] ? __lock_is_held+0xb5/0x140 [ 240.875438] ? _raw_spin_unlock+0x22/0x30 [ 240.882720] binder: 15192:15194 unknown command -234880960 [ 240.884239] ? __alloc_fd+0x346/0x700 [ 240.884255] ? usercopy_warn+0x120/0x120 2033/05/18 03:36:19 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x73, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4"], 0x0, 0x0, &(0x7f0000008f37)}) [ 240.884283] do_filp_open+0x249/0x350 [ 240.884300] ? may_open_dev+0x100/0x100 [ 240.888574] binder: 15191:15193 ioctl c0306201 2000dfd0 returned -22 [ 240.892301] ? strncpy_from_user+0x3b6/0x500 [ 240.892332] ? get_unused_fd_flags+0x121/0x190 [ 240.892346] ? getname_flags+0xd0/0x5a0 [ 240.892364] ? getname_flags+0x26e/0x5a0 [ 240.892389] do_sys_open+0x56f/0x740 [ 240.897117] binder: 15192:15194 ioctl c0306201 20007000 returned -22 [ 240.902214] ? filp_open+0x80/0x80 [ 240.902235] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 240.902255] SyS_open+0x2d/0x40 [ 240.902269] ? do_sys_open+0x740/0x740 [ 240.902282] do_syscall_64+0x29e/0x9d0 [ 240.902299] ? vmalloc_sync_all+0x30/0x30 [ 240.913323] binder: 15192:15194 IncRefs 0 refcount change on invalid ref -838857984 ret -22 [ 240.915307] ? _raw_spin_unlock_irq+0x27/0x70 [ 240.915326] ? finish_task_switch+0x1ca/0x810 [ 240.915346] ? syscall_return_slowpath+0x5c0/0x5c0 [ 240.915360] ? syscall_return_slowpath+0x30f/0x5c0 [ 240.915399] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 240.931948] binder: 15192:15194 unknown command -234880960 [ 240.932966] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 240.932992] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 240.933004] RIP: 0033:0x40f571 [ 240.933013] RSP: 002b:00007fc6cb1d6bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 240.933029] RAX: ffffffffffffffda RBX: 00007fc6cb1d76d4 RCX: 000000000040f571 [ 240.933037] RDX: 00007fc6cb1d6be2 RSI: 0000000000000002 RDI: 00007fc6cb1d6bd0 [ 240.933044] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000012 2033/05/18 03:36:19 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) fcntl$notify(r0, 0x402, 0x8000002a) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r1, r2) 2033/05/18 03:36:19 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000000c0)=0xff) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) read$eventfd(r2, &(0x7f0000000040), 0x8) dup2(r1, r2) 2033/05/18 03:36:19 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x110) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xb760, 0x80000) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) getpeername$inet6(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) socket$alg(0x26, 0x5, 0x0) [ 240.933058] R10: 0000000000000007 R11: 0000000000000293 R12: 0000000000000015 [ 240.944509] binder: 15192:15194 ioctl c0306201 20007000 returned -22 [ 240.947275] R13: 0000000000000697 R14: 00000000006fcec8 R15: 0000000000000003 2033/05/18 03:36:19 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:36:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x10002, 0x0) getsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e21, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0xfffffffffffffffc}, {0xa, 0x4e20, 0x200, @remote={0xfe, 0x80, [], 0xbb}, 0xfffffffffffffff8}, 0x56, [0x1, 0x6, 0x6, 0xe1, 0x400, 0xffffffff80000000, 0x100000001, 0x1000]}, 0x5c) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000140)) 2033/05/18 03:36:19 executing program 0 (fault-call:2 fault-nth:4): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000100)='ns/user\x00') [ 241.143347] binder: 15202:15219 unknown command -1691478564 [ 241.151627] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 241.158889] FAT-fs (loop5): Filesystem has been set read-only [ 241.179463] binder: 15202:15219 ioctl c0306201 2000dfd0 returned -22 [ 241.227778] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 241.252424] FAULT_INJECTION: forcing a failure. [ 241.252424] name failslab, interval 1, probability 0, space 0, times 0 [ 241.263782] CPU: 0 PID: 15226 Comm: syz-executor0 Not tainted 4.16.0+ #1 [ 241.270639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.280012] Call Trace: [ 241.282628] dump_stack+0x1b9/0x294 [ 241.286292] ? dump_stack_print_info.cold.2+0x52/0x52 [ 241.291523] should_fail.cold.4+0xa/0x1a [ 241.295602] ? unwind_get_return_address+0x61/0xa0 [ 241.300565] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 241.305712] ? save_stack+0xa9/0xd0 [ 241.309371] ? find_held_lock+0x36/0x1c0 [ 241.313490] ? check_same_owner+0x320/0x320 [ 241.317829] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 241.322962] ? rcu_note_context_switch+0x710/0x710 [ 241.327925] __should_failslab+0x124/0x180 [ 241.332184] should_failslab+0x9/0x14 [ 241.336005] kmem_cache_alloc+0x2af/0x760 [ 241.340178] ? putname+0xf2/0x130 [ 241.343664] getname_flags+0xd0/0x5a0 [ 241.347496] getname+0x19/0x20 [ 241.350711] do_sys_open+0x39a/0x740 [ 241.354450] ? filp_open+0x80/0x80 [ 241.358002] ? mm_fault_error+0x380/0x380 [ 241.362170] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 241.367048] SyS_open+0x2d/0x40 [ 241.370350] ? do_sys_open+0x740/0x740 [ 241.374259] do_syscall_64+0x29e/0x9d0 2033/05/18 03:36:19 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x2, 0xb40e}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000080)={0x2, r3}) dup2(r0, r2) [ 241.378164] ? vmalloc_sync_all+0x30/0x30 [ 241.382331] ? _raw_spin_unlock_irq+0x27/0x70 [ 241.386854] ? finish_task_switch+0x1ca/0x810 [ 241.391376] ? syscall_return_slowpath+0x5c0/0x5c0 [ 241.396331] ? syscall_return_slowpath+0x30f/0x5c0 [ 241.401289] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 241.406687] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 241.411565] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 241.416770] RIP: 0033:0x40f571 [ 241.419976] RSP: 002b:00007fc6cb1d6bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 241.427709] RAX: ffffffffffffffda RBX: 00007fc6cb1d76d4 RCX: 000000000040f571 [ 241.434996] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00007fc6cb1d6bd0 [ 241.442280] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000012 [ 241.449564] R10: 0000000000000007 R11: 0000000000000293 R12: 0000000000000015 [ 241.456853] R13: 0000000000000697 R14: 00000000006fcec8 R15: 0000000000000004 2033/05/18 03:36:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x2, 0x8, 0x6, 0x1}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101000, 0x0) 2033/05/18 03:36:20 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000006000)) io_setup(0x8, &(0x7f00000000c0)=0x0) io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7ff, r0, &(0x7f0000000280)="42555f9bbc487b08a883ff900f9ff6fc07cf71be49dcb5fc3b2eaf84d252c61c8fda797af258863ebfaaf2fc836943dddce1f8798c716bc5ee61c3e722a044c165c827f97b7113c9dff84f65c6bb1d2fec5a26a3d0b3d5d19aa45d1ab26ee1d2559c7dd39c5166990eaf9b1d93e690abfc3bbe9455c17cd0edef85afa7ec5aaca1b758763327434004648e703ad6222ea940aa1632ce9ce9736b17d6236839c71317624be7439c89603287b43cba28389367b30b86b3", 0xb6, 0x2, 0x0, 0x0, r0}, &(0x7f0000000140)) read(r0, &(0x7f0000000200)=""/90, 0xedf40ca8) r2 = memfd_create(&(0x7f0000f9dffe)="c403", 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/102, 0x66}], 0x1) mmap(&(0x7f0000000000/0xaa7000)=nil, 0xaa7000, 0x0, 0x12, r2, 0x0) 2033/05/18 03:36:20 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:36:20 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r0}) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/4096) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r1, r1) socket$inet_tcp(0x2, 0x1, 0x0) pause() bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x2, 0x31c, 0x5, 0x2, 0x0, r0, 0x7}, 0x2c) 2033/05/18 03:36:20 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x77, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:20 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfsp%us\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:36:20 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000240)=""/204) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) fsetxattr(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="757365623f260073ed433337ce36880e6365724000c046f1fbcf1f9dede8807b9d3a81e9a1ab8c6b43a1a47b0352c2fc1639f4bb1804fb5ce5e078c29582b2f0352d61d79296a1e70373dd948fe4b1d3ae3f7c83274114cceb58c7c5c60b5c9dca5ca31347cd514e9f4fd6d63fcfa2519a"], &(0x7f0000000080)='/dev/sequencer2\x00', 0x10, 0xffffffffffffffff) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000180)={0x8, {{0xa, 0x4e22, 0x5, @empty, 0x4}}}, 0x88) dup2(r2, r0) r3 = add_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000380)="2cefc2281893f6c89cf95585a3beac909c62a55fff80787147bdb6cb7e14dc9cd785392aba01e53c3e9ff06201ac", 0x2e, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x1000) 2033/05/18 03:36:20 executing program 0 (fault-call:2 fault-nth:5): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000100)='ns/user\x00') [ 242.081232] FAULT_INJECTION: forcing a failure. [ 242.081232] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 242.093273] CPU: 0 PID: 15260 Comm: syz-executor0 Not tainted 4.16.0+ #1 [ 242.100130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.109503] Call Trace: [ 242.112124] dump_stack+0x1b9/0x294 [ 242.115792] ? dump_stack_print_info.cold.2+0x52/0x52 [ 242.121022] should_fail.cold.4+0xa/0x1a [ 242.123444] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 242.125110] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 242.125134] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 242.125159] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 242.125187] ? perf_tp_event+0xc30/0xc30 [ 242.125204] ? lock_downgrade+0x8e0/0x8e0 [ 242.132354] FAT-fs (loop5): Filesystem has been set read-only [ 242.137417] ? memset+0x31/0x40 [ 242.137467] ? zap_class+0x720/0x720 [ 242.146373] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 242.147648] ? __unwind_start+0x166/0x330 [ 242.147673] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 242.147696] ? should_fail+0x21b/0xbcd [ 242.147714] ? unwind_get_return_address+0x61/0xa0 [ 242.147745] __alloc_pages_nodemask+0x34e/0xd70 [ 242.147778] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 242.166137] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 242.168849] ? save_stack+0xa9/0xd0 [ 242.168879] ? find_held_lock+0x36/0x1c0 [ 242.168940] ? check_same_owner+0x320/0x320 [ 242.168957] ? _raw_spin_unlock_irqrestore+0x63/0xc0 2033/05/18 03:36:20 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 242.168978] cache_grow_begin+0x72/0x6c0 [ 242.196413] binder: 15258:15266 tried to acquire reference to desc 0, got 1 instead [ 242.199201] kmem_cache_alloc+0x689/0x760 [ 242.199223] ? putname+0xf2/0x130 [ 242.220279] binder: 15263:15269 unknown command -1691478564 [ 242.223305] getname_flags+0xd0/0x5a0 [ 242.223332] getname+0x19/0x20 [ 242.223351] do_sys_open+0x39a/0x740 [ 242.223374] ? filp_open+0x80/0x80 [ 242.236479] binder: 15263:15269 ioctl c0306201 2000dfd0 returned -22 [ 242.240301] ? syscall_slow_exit_work+0x4f0/0x4f0 2033/05/18 03:36:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0xfffffffffffffffe) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:20 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x79, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96"], 0x0, 0x0, &(0x7f0000008f37)}) [ 242.240335] SyS_open+0x2d/0x40 [ 242.240353] ? do_sys_open+0x740/0x740 [ 242.240372] do_syscall_64+0x29e/0x9d0 [ 242.240390] ? vmalloc_sync_all+0x30/0x30 [ 242.294357] ? _raw_spin_unlock_irq+0x27/0x70 [ 242.298874] ? finish_task_switch+0x1ca/0x810 [ 242.303397] ? syscall_return_slowpath+0x5c0/0x5c0 [ 242.308350] ? syscall_return_slowpath+0x30f/0x5c0 [ 242.313309] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 242.318707] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 242.323588] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 242.328813] RIP: 0033:0x40f571 2033/05/18 03:36:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b37abf6c4b692a7a126cfa0b6688bfe970dd94252e5a6fafa030b31d57f43411d5537ba85bd5e759b4598c6ede09edae521f64a6d919d7e5e422ace161fd2ea19275f0883bca81c06cf75c08d6c6c15850e7520c872a8010000007d99465e91d6dc6b114c372d8c13cd3e871fc2fb8f16b566fba34f53e1cdf5f66f785e5b110447bbf506a46f34b63f8eaf9c512fe417fe570baae4d809513221bc58db"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x5, 0x0) [ 242.332012] RSP: 002b:00007fc6cb1d6bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 242.339746] RAX: ffffffffffffffda RBX: 00007fc6cb1d76d4 RCX: 000000000040f571 [ 242.347038] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00007fc6cb1d6bd0 [ 242.354327] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000012 [ 242.361611] R10: 0000000000000007 R11: 0000000000000293 R12: 0000000000000015 [ 242.368900] R13: 0000000000000697 R14: 00000000006fcec8 R15: 0000000000000005 [ 242.374129] binder: 15283:15284 unknown command -156551397 2033/05/18 03:36:20 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x800000000000006, 0x0) dup2(r0, r1) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x3f}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={r2, @in={{0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x5, 0x7}, 0x90) [ 242.379849] binder: 15280:15285 unknown command -1691478564 [ 242.383549] binder: 15283:15284 ioctl c0306201 20007000 returned -22 [ 242.399207] binder: 15280:15285 ioctl c0306201 2000dfd0 returned -22 2033/05/18 03:36:20 executing program 6 (fault-call:4 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x7a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) [ 242.438307] binder: 15283:15284 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 242.489800] binder: 15283:15284 unknown command -156551397 [ 242.504757] binder: 15299:15300 unknown command -1691478564 [ 242.511451] binder: 15283:15284 ioctl c0306201 20007000 returned -22 [ 242.518393] binder: 15299:15300 ioctl c0306201 2000dfd0 returned -22 [ 242.527114] binder: 15283:15297 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 242.542257] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 242.549443] FAT-fs (loop5): Filesystem has been set read-only [ 242.558995] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 242.574621] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:36:21 executing program 0 (fault-call:2 fault-nth:6): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000100)='ns/user\x00') 2033/05/18 03:36:21 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) r2 = dup2(r0, r1) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000000040)=0x5, 0x4) 2033/05/18 03:36:21 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x7a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:21 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x200000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x8800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000180)={0x3, 0x3, 0x7808, 'queue0\x00', 0x29}) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e23, 0x40, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, {0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, [], 0x1e}, 0x3}, 0x2, [0x800, 0x15d, 0x3, 0x1, 0x2, 0x3ff, 0x2, 0xffffffff00000001]}, 0x5c) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:21 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:36:21 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfsp-us\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:36:21 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) r2 = semget$private(0x0, 0x0, 0x400) semtimedop(r2, &(0x7f0000000040)=[{0x0, 0x9, 0x1000}, {0x2, 0x8001, 0x800}, {0x0, 0x4, 0x1000}], 0x3, &(0x7f0000000080)={0x77359400}) 2033/05/18 03:36:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f00002b8ff6)="940a0ed3084f8823a7", 0x9) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) sendto$inet(r0, &(0x7f0000e76000)="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", 0x573, 0x0, &(0x7f0000bc8ff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) [ 243.382907] binder: 15329:15331 unknown command -1691478564 [ 243.403472] FAULT_INJECTION: forcing a failure. [ 243.403472] name failslab, interval 1, probability 0, space 0, times 0 [ 243.408866] binder: 15329:15331 ioctl c0306201 2000dfd0 returned -22 [ 243.414973] CPU: 0 PID: 15335 Comm: syz-executor0 Not tainted 4.16.0+ #1 [ 243.428143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.437521] Call Trace: [ 243.440142] dump_stack+0x1b9/0x294 [ 243.443803] ? dump_stack_print_info.cold.2+0x52/0x52 [ 243.449032] should_fail.cold.4+0xa/0x1a [ 243.453130] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 243.458259] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 243.463385] ? perf_trace_run_bpf_submit+0x246/0x370 [ 243.468516] ? perf_tp_event+0xc30/0xc30 [ 243.472619] ? find_held_lock+0x36/0x1c0 [ 243.476750] ? check_same_owner+0x320/0x320 [ 243.481101] ? rcu_note_context_switch+0x710/0x710 [ 243.486071] __should_failslab+0x124/0x180 [ 243.490336] should_failslab+0x9/0x14 [ 243.494160] kmem_cache_alloc+0x2af/0x760 [ 243.498327] ? perf_trace_run_bpf_submit+0x246/0x370 [ 243.503471] get_empty_filp+0x125/0x520 [ 243.507466] ? proc_nr_files+0x60/0x60 [ 243.511378] ? memset+0x31/0x40 [ 243.514693] ? perf_trace_lock+0x495/0x900 [ 243.518967] path_openat+0x116/0x4e20 [ 243.522810] ? unwind_get_return_address+0x61/0xa0 [ 243.527763] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 243.532800] ? path_lookupat.isra.44+0xbd0/0xbd0 [ 243.537587] ? find_held_lock+0x36/0x1c0 [ 243.541700] ? lock_downgrade+0x8e0/0x8e0 [ 243.545868] ? do_sys_open+0x39a/0x740 [ 243.549789] ? kasan_check_read+0x11/0x20 [ 243.553958] ? do_raw_spin_unlock+0x9e/0x2e0 [ 243.558388] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 243.562989] ? __lock_is_held+0xb5/0x140 [ 243.567086] ? _raw_spin_unlock+0x22/0x30 [ 243.571255] ? __alloc_fd+0x346/0x700 [ 243.575073] ? usercopy_warn+0x120/0x120 [ 243.579180] do_filp_open+0x249/0x350 [ 243.583005] ? may_open_dev+0x100/0x100 [ 243.586997] ? strncpy_from_user+0x3b6/0x500 [ 243.591432] ? mpi_free.cold.1+0x19/0x19 [ 243.595528] ? get_unused_fd_flags+0x121/0x190 [ 243.600133] ? getname_flags+0xd0/0x5a0 [ 243.604138] ? getname_flags+0x26e/0x5a0 [ 243.608235] do_sys_open+0x56f/0x740 [ 243.611978] ? filp_open+0x80/0x80 [ 243.615540] ? mm_fault_error+0x380/0x380 [ 243.619726] SyS_open+0x2d/0x40 [ 243.622899] binder: 15352:15353 ioctl c0306263 2000dfd0 returned -22 [ 243.623011] ? do_sys_open+0x740/0x740 2033/05/18 03:36:21 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306263, &(0x7f000000dfd0)={0x7a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0xfffffffffffffe82, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) r2 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x3, 0x80) sendmsg$alg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="255be12ad501", 0x6}, {&(0x7f0000000180)="f9f8e9bd7cdb0655b62107b538afddd4c8c0644d819663339476d776ab9908d1b127aa038ec846bb4fd6b917db98c444df30238fc2ff2b209614d9ae7d712335eaed423cf2f68b2481", 0x49}], 0x2, &(0x7f0000000540)=[@iv={0x60, 0x117, 0x2, 0x48, "2a55b3d80714817a54467f3ec60265e068148f24a33f0c94979a179cd49d33bc867475d69655c274133e60035b23a546ab414513c9d3a759bb3ee8f3ca4406d9c92a0a18f3ddf75f"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x1078, 0x4}, 0x20000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380), 0x1, 0x0, &(0x7f00000003c0)="95"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000440)}}}], 0x0, 0x0, &(0x7f00000000c0)}) 2033/05/18 03:36:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3, 0x210400) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:21 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r2, r0) dup2(r1, r2) 2033/05/18 03:36:21 executing program 2: socket$pppoe(0x18, 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) sched_setparam(r0, &(0x7f00000000c0)=0xce7) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x1, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r1, r2) memfd_create(&(0x7f0000000040)='/dev/sequencer2\x00', 0x1) [ 243.633408] do_syscall_64+0x29e/0x9d0 [ 243.637316] ? vmalloc_sync_all+0x30/0x30 [ 243.641480] ? _raw_spin_unlock_irq+0x27/0x70 [ 243.646000] ? finish_task_switch+0x1ca/0x810 [ 243.650519] ? syscall_return_slowpath+0x5c0/0x5c0 [ 243.653377] binder: BINDER_SET_CONTEXT_MGR already set [ 243.655467] ? syscall_return_slowpath+0x30f/0x5c0 [ 243.655499] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 243.655527] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 243.655560] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 243.670297] binder: 15355:15360 tried to acquire reference to desc 0, got 1 instead [ 243.671103] RIP: 0033:0x40f571 [ 243.671115] RSP: 002b:00007fc6cb1d6bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 243.671136] RAX: ffffffffffffffda RBX: 00007fc6cb1d76d4 RCX: 000000000040f571 [ 243.671149] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00007fc6cb1d6bd0 [ 243.671160] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000012 [ 243.671171] R10: 0000000000000007 R11: 0000000000000293 R12: 0000000000000015 2033/05/18 03:36:21 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x1, 0x0, 0x2, 0x0, 0xc}) [ 243.671180] R13: 0000000000000697 R14: 00000000006fcec8 R15: 0000000000000006 [ 243.682407] binder: 15352:15353 ioctl 40046207 0 returned -16 [ 243.700748] binder: 15352:15365 ioctl c0306263 2000dfd0 returned -22 [ 243.763130] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 243.770377] FAT-fs (loop5): Filesystem has been set read-only 2033/05/18 03:36:21 executing program 7: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x80000000, 0x800) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x108, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2000000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, r0, 0xf, r1, 0x100000) r2 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f00000000c0)={0x6, 0x9}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r2, r3) 2033/05/18 03:36:21 executing program 0 (fault-call:2 fault-nth:7): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000100)='ns/user\x00') 2033/05/18 03:36:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=ANY=[@ANYBLOB="0463044000000700"], 0x0, 0x0, &(0x7f0000008f37)}) mkdir(&(0x7f0000000000)='./file0\x00', 0x30) [ 243.809135] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 243.841974] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 243.873394] FAULT_INJECTION: forcing a failure. [ 243.873394] name failslab, interval 1, probability 0, space 0, times 0 [ 243.884797] CPU: 1 PID: 15380 Comm: syz-executor0 Not tainted 4.16.0+ #1 [ 243.891649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.901005] Call Trace: [ 243.903605] dump_stack+0x1b9/0x294 [ 243.907251] ? dump_stack_print_info.cold.2+0x52/0x52 [ 243.912462] should_fail.cold.4+0xa/0x1a [ 243.916542] ? fault_create_debugfs_attr+0x1f0/0x1f0 2033/05/18 03:36:22 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f000000dfd0)={0x7a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:22 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 243.921657] ? graph_lock+0x170/0x170 [ 243.925475] ? lock_downgrade+0x8e0/0x8e0 [ 243.929638] ? find_held_lock+0x36/0x1c0 [ 243.933722] ? lock_downgrade+0x8e0/0x8e0 [ 243.937889] ? rcu_is_watching+0x85/0x140 [ 243.942052] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 243.947262] __should_failslab+0x124/0x180 [ 243.951511] should_failslab+0x9/0x14 [ 243.955322] kmem_cache_alloc_trace+0x4b/0x780 [ 243.959914] ? delayed_put_pid+0x30/0x30 [ 243.963996] ? new_inode+0x40/0x40 [ 243.967551] ? security_inode_permission+0xd2/0x100 2033/05/18 03:36:22 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fgetxattr(r0, &(0x7f00000001c0)=@random={'security.', 'eth0+vboxnet0\x00'}, &(0x7f0000000200)=""/77, 0x4d) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x808004}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getneightbl={0x14, 0x42, 0x200, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c804}, 0xc004) r3 = dup2(r1, r2) pwrite64(r1, &(0x7f0000000040)="ad927c091bed617ea1cc1f31eb6d9b1f436b26512892f399e644b302205a58c4a9cdd7861b6ad5621d488f5ed65d347aa86917528eb622e44665123a348a6f731c1e2e9f8a95f956f7df83533b2c3a4cddb13f1e96697d4b4f85fd04003b", 0x5e, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000300)={"a307cdb920dfd4362ff2ce102fe70d09e68ce6c14ca8ba1e8bf2c2d800db20a14aeef5ace46ac4e2e54b7ec8b4bad7f8b24d70d5e8f9490e69ab7faddc67425ec0055c269eac053c6e54d4fc56feeccdf6a62a35a09112b25893960f62dd06437079036a3fb394d2388f817f87f8edf0eddbf11402000a0df7c1890732651c7d5152ea7034ac75e969c80431d0c0ba80521f941db49b783c51d57872b14e4f536da0461fb161f10a3d156d53829b9fe1f3b7a808f6c912d5363fd502e3fcc739fceaafaa99410d2cb41130ea4b5b898c505b1dc95c87ca829adfc423f17268f6264b8d5f1f7e8706993f59e2ffd5d9eba49f2d88ea56ee684dd079d8606e09d1d7bbd38d43654fde59b7d18b5cc8b018e567b94db710517b1d616d066d1a4baa00916a71cc28305094128dc2e2b724f2b3de51fd6d39d07dbb9160a6c50f18848a2f568bc34978eada89dc6a1b788785c9e65785b99145ec802257f456aec2959acd2d45a075f430fbe8f26d6d9658afac88cc91206297da374ac9b509f66b0a0e1c7b7baafb5701ed7a15c4336db2fa2e917180dab2f7c56e67cd046dcaa6ed2b69c55831876400457a8b3bad7b56a06b1fc1a3b436fdc5aa7d8070826a701b730ec0fc09d00c9115cb1a48ba41a06efdab0d57d632dfc938683638b62cff12c89192962d38eb9c60986680f5460976a721db78212abca06ff959bc2fa39faea59a6998c3b68f2905e801a9c77cb81d9bc131fa63fea68a6f9685776875b2f501173d81ab77830f12d946dd94f8ed9403107f3bdf621ea7ea7a9771d7f4c2e28193c068ec866a2b0e5d7f310f9a25c7ab09909b04a5cebbbfe6a92a1562ef2a8d96a077658dc875de4e3286db64b7a922818f79ee5a948022bdc0f2488d38a29da134b0fce4447d26b6137d6fe0ef1e577ff26375f309c1ad6c28f22b75cb72ff8bb80f2ddfee6519426323025a979c94559f65ea4439bc93db89ee18b3bfc71a6f890156480936542cfc08686f5b5ef76422c2fd13dd04539ed34daed7bef2c1e71c41034b1b48913d9a07f970ad51315caf4732a5753d72d90a18ce449a7616ee408cda1234f9b5dd4cdc57cf8593654da35f62d58cc568daeae4a68eb6b4074b6bcb3b712a5b9ca081d1d3f10202511fe19a0976f91eeed7fc374ffcee13e091709eba6668b8e6445d9646b0e06782af1baabfdbefb8fb8836dfa0196bfd837e97d30154832872917105f2c67ad59246e45888b609e5d74b55a0a1270eb83a8cf25ba21eab2892af80a3aa6c7fec80ee9fa1e9cc62000e865dd88d88657a4eae0bb5adeddee44a89d6436ab2fb9559571171a173cb6f887136bad2c5f0326ac29b3fdbde7434a58648f68470626b50e600aa64ee2341811de106ffd37a697a72e0ccbe5415ca7f696307bb60d1ed843268f6f3fa1189b05f4107d19f5ed8"}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, @in={0x2, 0x4e20, @multicast1=0xe0000001}, @in6={0xa, 0x4e24, 0xffffffffffffff80, @local={0xfe, 0x80, [], 0xaa}, 0xfffffffffffffd73}, @in6={0xa, 0x4e23, 0x3c, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x2}], 0x58) [ 243.972581] proc_self_get_link+0x16f/0x1c0 [ 243.976912] ? proc_ns_dir_readdir+0x560/0x560 [ 243.981516] link_path_walk+0xfff/0x1520 [ 243.981804] binder: 15381:15384 IncRefs 0 refcount change on invalid ref 458752 ret -22 [ 243.985585] ? pick_link+0xb00/0xb00 [ 243.985614] ? walk_component+0x2550/0x2550 [ 243.985630] ? get_empty_filp+0x37a/0x520 [ 243.985644] ? proc_nr_files+0x60/0x60 [ 243.985663] ? lock_downgrade+0x8e0/0x8e0 [ 244.013953] ? perf_trace_lock+0xd6/0x900 [ 244.018111] ? rcu_is_watching+0x85/0x140 2033/05/18 03:36:22 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r2 = getpgid(0xffffffffffffffff) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) fstat(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='proc\x00', 0x2240008, &(0x7f0000000880)="6262b65380a5db0c482f7ac5b2b55268618ca64cf34769b3f9f96563330aad2064a57e144062189c843bc220af14a6a8918fb0e896ff8a1023") sendmsg$unix(r1, &(0x7f0000000700)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000480)=[{&(0x7f00000000c0)="a540bad302f393417a002522fb56fb0c643a103820ff3e595520bd16b9af5608ed5ec2904bba32287923241567855709074b9c23d518aebc319a504bec2c160f30087d866d9d22957683f85f2e86373bc91d7e62986a85eb1c7475d9e1d39a49d3b2de708c460962a57c62eb4fe18611e4ae8c9710ca2bcf1de91689b54dd32b830044054723e6af3e1ecd3f00b4e6238bf50264d48d48eed4b6a709b5cbe3351610db356f17a2fea88dd5b8a3f824f418a4a829b8f8565d102a30110f2d9a94182027416ad95369d34c", 0xca}, {&(0x7f00000001c0)="cf6027f9e6126f16da21cdec32b697a2ed0f88ff7a8035dd912d6825e9fb9913026a3e726988122d78b829e1918d0e1de2ec5a84fbf041e95c2d1a3a2c470ce19b7165871c3f75a29dc85ad5ec6bbd3af402e16ecf1e5fc0c0c100ce6d589d9be2cc48ed641bdb42d4061bb410b732ea0696b147cc306330199eb4a812b73d0ff87cc879b48f08fefedee5e04b42020c3bca5ebd74f3d78047d4a925db7f7621db4e04d00f1a38adf63954ea7396df6b9c86ffa69ce1ba", 0xb7}, {&(0x7f0000000280)="e7e4d9dfdbf74a91958c28e6dd69cf7dc42286439480dfbd05957362e23a394881ccc76244358bc8b1bf36d83fb8794d8cdc41b7b2eb3f8266e03ff567b9399050912fc25d996676f2d47aeddcfa9a8d0782d3d69666496a82de9ac8c5a99d73ae31ef66001ba36ccabd5b9a6289b15a85a98aeb9d50095d786f3c359d3a80c38ed6594283ff4dcef788dd71ba717a91", 0x90}, {&(0x7f0000000340)="236f3f9c69b6d25b61bd3e5e7f6b8e9e2c8b1797373f418c2d764bd7f99243c3f7f4a3c677f5a36223c015106c2aa1cbbd6a66d4583a2ef4d82c1278497c027c5b651c7c70a4dd476eb96f620af191205fe07165fd6336d7c2f7852cf77f852eff45989530d13157f12fd2aa83682861ce0d98ab46f0f49006f2380490273fa415733026e476a7a5bd306363d76da059990a3cf3", 0x94}, {&(0x7f0000000400)="f5415e91e144d2a3cd6ce93cd71e165e63fb93e8b7af45c056ef82bd199e3b210878c5ed81ffc904bc1faf18d9e74fb34a1e577a31e141be73b6c0f1a4d667fd50a5698fcb2a7e2bbb9c06a60d09d16f5000d46b7597f9c9fd835118c155f402826c87e0ddc7", 0x66}], 0x5, &(0x7f00000006c0)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20, 0x4}, 0x4000000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000cc0)={0x0, 0xfffffffffffffff8, 0x1000}, &(0x7f0000000d00)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000d40)={0x0, 0x59, "672407f4b54f589d7e90ca3953bba0d47f39fd5c4aa2e52d95acd743473e09f22c5f13a8b5971144aff8b1dced29107c86fa6609fe88491d806af80415e508a4d96522a3c5a9d439c27b72a10632ca69f91936771295fe6e3f"}, &(0x7f0000000dc0)=0x61) sendmsg$inet_sctp(r1, &(0x7f0000000f40)={&(0x7f0000000740)=@in6={0xa, 0x4e22, 0xfffffffffffffffa, @remote={0xfe, 0x80, [], 0xbb}, 0x7}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000940)="d7b878fed68d61eea87894061dcbc8e7d129e1d0fec6264f0423db69375c83eed086544b4397154250714a69e6530517fcadc5df4bc752aecd7224aa3be98e0d0bbaace83edab4e93d6b22a20cae7d8f7178f22462d6eb9b8c721bf1b851d82f7c7649401e5a2a1b5f3de0d11e773f21554048d85998bde1d27a686fae9ee620ab374cd24921e4fca8add9c9af4453f4d7b361174009ac665187aa3b7e60e012d54c38e0ffe3ca2abd5463dc58a4cdcee0e24efac4e3752f5226a14dab39b8ce55fe0a2fb0f4991f8afda36898bb6ffe5f7904364822ea89aef155e9909ca8406be1c0", 0xe3}, {&(0x7f0000000a40)="f3f7357ec16f90c369af3c7527fc54a23f21e0d3a7aee3ed631a1562b961872b6c8d5521a75eaa5e39f2fd9a97aa1cd53d8bb29312085f309bf68483d7d0efdacf35774fd98f510130258071229e16a0379997aed8512730d9cc1f03e23138745b42bb396e70bea6", 0x68}, {&(0x7f0000000ac0)="74af732af0dfaaa492b47ede4ff7444fb70a425b14dee71cb3dc931fc6192178d4982969d7f7e83c5f312be9b313a79c93a3b28cc15b10dc5294c143d66b", 0x3e}, {&(0x7f0000000b00)="7d5e54dabdd06003ee610b5b08dbaf17a05be47e", 0x14}, {&(0x7f0000000b40)="9a09f10bf76801806a19606671a31b1577e0e44a79626df1d72e50ab52688e7d77c1166baf5cf6b6c96894b60bcbbb6fd055d940e44adccafb72c27f0555117f789cb03c6443be4b1c42f533b34b73d062585a69886f8ff568e7c37dd74098d9dd01418fe84e57757d1403ab614371aba451cec725dc43abbd3fd3f794ec1da069aa1e779c5ed264a29aee078322ac88ac5264fd29edb340e7b6cbbfab26a21679937c5810c7eb3e881cd768b1274e127f5d919fb2ec68f330fb152d2772007e40984c", 0xc3}], 0x5, &(0x7f0000000e00)=[@init={0x18, 0x84, 0x0, {0x8, 0x3ff, 0x7f, 0x9}}, @init={0x18, 0x84, 0x0, {0x8001, 0x2cf756b7, 0x1, 0x7}}, @init={0x18, 0x84, 0x0, {0x2, 0x7fffffff, 0x6, 0x6e}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x1000, 0x20c, 0x1, 0xfff, 0xf0, 0x2, 0x7fffffff, r5}}, @init={0x18, 0x84, 0x0, {0x10001, 0xa355, 0x0, 0xffffffff}}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0x200, 0x208, 0xd66, 0x5, 0x4, 0x6, 0x1ff, r6}}], 0x120, 0x20004014}, 0x8000) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000900)='/dev/sequencer2\x00', 0x800000000000001, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f00000008c0)={0x6, 0x8, 0xba7}) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000780)={0x100, 0x0, 0x3fe, 0x4, 0x20, 0x80}) dup2(r1, r7) [ 244.022050] binder: 15381:15384 IncRefs 0 refcount change on invalid ref 458752 ret -22 [ 244.022272] path_openat+0x246/0x4e20 [ 244.022300] ? unwind_get_return_address+0x61/0xa0 [ 244.039144] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 244.044174] ? path_lookupat.isra.44+0xbd0/0xbd0 [ 244.048950] ? find_held_lock+0x36/0x1c0 [ 244.053036] ? lock_downgrade+0x8e0/0x8e0 [ 244.057194] ? do_sys_open+0x39a/0x740 [ 244.061100] ? kasan_check_read+0x11/0x20 [ 244.065266] ? do_raw_spin_unlock+0x9e/0x2e0 [ 244.069692] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 244.074283] ? __lock_is_held+0xb5/0x140 [ 244.078361] ? _raw_spin_unlock+0x22/0x30 [ 244.082521] ? __alloc_fd+0x346/0x700 [ 244.086330] ? usercopy_warn+0x120/0x120 [ 244.090403] do_filp_open+0x249/0x350 [ 244.094211] ? may_open_dev+0x100/0x100 [ 244.098189] ? strncpy_from_user+0x3b6/0x500 [ 244.102305] binder: BINDER_SET_CONTEXT_MGR already set [ 244.102611] ? get_unused_fd_flags+0x121/0x190 [ 244.110165] binder: 15388:15391 ioctl 40046207 0 returned -16 [ 244.112430] ? getname_flags+0xd0/0x5a0 [ 244.112450] ? getname_flags+0x26e/0x5a0 [ 244.112475] do_sys_open+0x56f/0x740 [ 244.112496] ? filp_open+0x80/0x80 [ 244.112511] ? mm_fault_error+0x380/0x380 [ 244.112535] SyS_open+0x2d/0x40 [ 244.112553] ? do_sys_open+0x740/0x740 [ 244.144925] do_syscall_64+0x29e/0x9d0 [ 244.148819] ? vmalloc_sync_all+0x30/0x30 [ 244.152968] ? _raw_spin_unlock_irq+0x27/0x70 [ 244.157469] ? finish_task_switch+0x1ca/0x810 [ 244.161972] ? syscall_return_slowpath+0x5c0/0x5c0 [ 244.166910] ? syscall_return_slowpath+0x30f/0x5c0 [ 244.171854] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 244.177232] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 244.182095] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 244.187287] RIP: 0033:0x40f571 [ 244.190474] RSP: 002b:00007fc6cb1d6bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 244.198186] RAX: ffffffffffffffda RBX: 00007fc6cb1d76d4 RCX: 000000000040f571 [ 244.205453] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00007fc6cb1d6bd0 [ 244.212726] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000012 [ 244.220002] R10: 0000000000000007 R11: 0000000000000293 R12: 0000000000000015 [ 244.227273] R13: 0000000000000697 R14: 00000000006fcec8 R15: 0000000000000007 [ 244.295360] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 244.302527] FAT-fs (loop5): Filesystem has been set read-only [ 244.309433] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 244.320200] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 244.566947] binder: BINDER_SET_CONTEXT_MGR already set [ 244.572382] binder: 15351:15413 ioctl 40046207 0 returned -16 [ 244.581793] binder_alloc: binder_alloc_mmap_handler: 15351 2000c000-2000e000 already mapped failed -16 [ 244.594753] binder_alloc: 15351: binder_alloc_buf, no vma [ 244.600608] binder: 15351:15413 transaction failed 29189/-3, size 0-0 line 2963 [ 244.616820] binder: release 15351:15411 transaction 789 out, still active [ 244.623998] binder: undelivered TRANSACTION_COMPLETE [ 244.629279] binder: release 15351:15412 transaction 790 out, still active [ 244.636242] binder: undelivered TRANSACTION_COMPLETE [ 244.641409] binder: undelivered TRANSACTION_ERROR: 29189 [ 244.646932] binder: send failed reply for transaction 789, target dead [ 244.653659] binder: send failed reply for transaction 790, target dead 2033/05/18 03:36:22 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfsp-us\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:36:22 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfsp.us\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:36:22 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x5460, &(0x7f000000dfd0)={0x7a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:22 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0xed, &(0x7f00000001c0)=""/30, &(0x7f0000000140)=0x18) 2033/05/18 03:36:22 executing program 7: syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xff, 0x400) perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:36:22 executing program 0 (fault-call:2 fault-nth:8): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000100)='ns/user\x00') 2033/05/18 03:36:22 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x2, 0x2e}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r1, 0x4}, &(0x7f0000000180)=0x8) poll(&(0x7f0000000000), 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) r3 = dup2(r0, r2) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0xdd, r4, 0x2, 0x202}) 2033/05/18 03:36:22 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)="2e2f66696c65302f66696c65300f", 0x0, 0x0, 0x0, 0x0, 0x0) [ 244.767476] binder: BINDER_SET_CONTEXT_MGR already set [ 244.781224] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 244.788470] FAT-fs (loop5): Filesystem has been set read-only [ 244.805729] binder: 15440:15443 ioctl 40046207 0 returned -16 [ 244.830851] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:36:23 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000100)='ns/user\x00') 2033/05/18 03:36:23 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x10000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00005a3fcc)={{0x0, 0x2, 0x0, 0xffffffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000db9ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000000)=0x200) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 2033/05/18 03:36:23 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) ioctl$sock_proto_private(r0, 0x89e5, &(0x7f0000000400)="e92869c9bde60c5832ff4c331b5d64997b747aafe7194ae53e15dc2c919a1a8e7885fce92c0de14ec5aba274a2c1b486905c08ac059e6a4291139b670662795c5c8821484434ee65d827f136ddce3cedfe1439ca25da11a05113872134eef5b5d43e6f4001dbe578e8190505c9f53d3492ad53a5c0526a851fca5052a5bf5733c0229cb1b649dae3e8c0d79737d5b78d66ba8010cec13b79c6cd63453ba7fde95579a201d9931e8798e8a4d546d08089d48e0553e24f5591baa41e6f10") getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x48, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e20, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x80000001}, @in6={0xa, 0x4e21, 0xf0d5, @local={0xfe, 0x80, [], 0xaa}, 0x2663ef89}]}, &(0x7f0000000280)=0x10) accept4$netrom(r0, &(0x7f0000000380)=@full, &(0x7f00000005c0)=0x48, 0x80800) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=r1, &(0x7f0000000300)=0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) r3 = dup2(r0, r2) accept4$netrom(r2, &(0x7f0000000040)=@full, &(0x7f00000000c0)=0x48, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) statx(r2, &(0x7f0000000340)='./file0\x00', 0x2c00, 0xfff, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f0000000100)={0x7, 0x8, [0xda1, 0x3]}) 2033/05/18 03:36:23 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000040)) dup2(r0, r1) 2033/05/18 03:36:23 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0x40046207, &(0x7f000000dfd0)={0x7a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:23 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:36:23 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfspmus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:36:23 executing program 1: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/100, 0x64}], 0x1) sendmmsg$unix(r0, &(0x7f0000000180), 0x4924924924925a6, 0x0) preadv(r1, &(0x7f0000000000), 0x0, 0x1d) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0xc0200, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) [ 245.725318] Buffer I/O error on dev loop0, logical block 0, async page read [ 245.750135] Buffer I/O error on dev loop0, logical block 1, async page read [ 245.760538] binder: BINDER_SET_CONTEXT_MGR already set [ 245.797759] binder: 15483:15488 ioctl 40046207 2000dfd0 returned -16 [ 245.826780] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 245.834083] FAT-fs (loop5): Filesystem has been set read-only [ 245.841854] binder: BINDER_SET_CONTEXT_MGR already set 2033/05/18 03:36:24 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) dup(r1) 2033/05/18 03:36:24 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x1ffffc, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffff, 0x8, 0xf4, 0x2, 0xfffffffffffffffe, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x13}}, 0x10) r1 = semget$private(0x0, 0x1000, 0x0) semop(r1, &(0x7f0000000080)=[{0x0, 0xfffffffffffffffa}], 0x1) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) pkey_alloc(0x0, 0x1) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f00000000c0)=0xfffffffffffffbb3, 0x4) semctl$IPC_RMID(r1, 0x0, 0x0) 2033/05/18 03:36:24 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000100)='.s/user\x00') 2033/05/18 03:36:24 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r2 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) poll(&(0x7f00000000c0)=[{r0, 0x122}, {r1, 0x8}, {r1, 0x900de61170435f18}, {r1}, {r1, 0x8000}, {r0}, {r0, 0x8004}, {r2, 0x623}], 0x8, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x198, 0x1000, 0x1, {0x77359400}, 0x9, 0x5}) dup2(r1, r3) [ 245.860256] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 245.869581] binder: 15483:15488 ioctl 40046207 0 returned -16 [ 245.878236] binder: BINDER_SET_CONTEXT_MGR already set [ 245.895919] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:36:24 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x14) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x5, 0x10000) 2033/05/18 03:36:24 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 245.933239] binder: 15483:15506 ioctl 40046207 2000dfd0 returned -16 2033/05/18 03:36:24 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306202, &(0x7f000000dfd0)={0x7a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:24 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000100)='/s/user\x00') 2033/05/18 03:36:24 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000080), 0x200000000000007d, 0x1000000000000000) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) unshare(0x400) [ 246.065560] binder: 15532:15535 ioctl c0306202 2000dfd0 returned -22 [ 246.099190] binder: BINDER_SET_CONTEXT_MGR already set [ 246.119278] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 246.126471] FAT-fs (loop5): Filesystem has been set read-only [ 246.127051] binder: 15532:15535 ioctl 40046207 0 returned -16 [ 246.145909] binder: 15532:15540 ioctl c0306202 2000dfd0 returned -22 [ 246.154428] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 246.170457] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:36:24 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) pwrite64(r1, &(0x7f0000000080)="840fa0d423625abdd27e80254ad3fe59ada492e3c784b9b1aa9477a7d028089e8bc7891cd3e868f35f5eb24dc082924ac0e2d4855bf5e0f4328b4bf91f9daaf079e203fdd10405a6f98da3cde452af891ae5ade037bd9f4c341fc28acda38317c126caf6af5d66a1f5", 0x69, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r2) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000140)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x30180, 0x0) 2033/05/18 03:36:24 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000100)='n./user\x00') 2033/05/18 03:36:24 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306209, &(0x7f000000dfd0)={0x7a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00') ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x3) r1 = epoll_create(0x1f) poll(&(0x7f0000000000)=[{r1}, {r0}], 0x2, 0x7f) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000faeff4)) mkdir(&(0x7f0000b08ff8)='./file0\x00', 0x0) chmod(&(0x7f00000000c0)='./file0\x00', 0x4) mkdir(&(0x7f00006aaff8)='./file1\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000a9eff8)='./file0\x00', &(0x7f00000db000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000451ff8)='./file0\x00', &(0x7f000069cff8)='./file1\x00', &(0x7f0000847000)="07e372f2", 0x2003, &(0x7f000012c000)) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000080)=""/11) 2033/05/18 03:36:24 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:36:24 executing program 2: r0 = syz_open_dev$midi(&(0x7f00000004c0)='/dev/midi#\x00', 0x24b4, 0x40400) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000500)) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x7e, 0x100) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x80, 0x0) poll(&(0x7f0000000080)=[{r1}, {r2, 0x80}], 0x20000000000001d8, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) r4 = dup2(r1, r3) dup3(r4, r3, 0x80000) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f00000000c0)={"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"}) 2033/05/18 03:36:24 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') syz_mount_image$hfsplus(&(0x7f0000000bc0)='hfspkus\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)) close(r0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1c4, &(0x7f0000000a40), 0x0, &(0x7f0000000d80)=ANY=[]) 2033/05/18 03:36:24 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f00000013c0)=0x100000000) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x7fffffff, 0x0, r0, 0x0, [0x305f]}, 0x2c) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffe1, 0x8, &(0x7f0000001440)=[{&(0x7f00000000c0)="2a67c6de48bf20aa8b52853c8a862684664901c466e1e5835c7320e8d88ab99bc5d762e5c5b4d064e3a54e0c966fd4a1179158db0b02a1ecbc580bdb5be1973f719a99862e61486e8c5165c798624cbbfe088854edeead08fb50d72d0c8f0b80cd81850828d1a5d1", 0x68, 0xa7}, {&(0x7f0000000140)="6a4b7120bc69e4df6c66cacf6e44a06c376fdeafe3c10e6becc72a82a288e1893cc50f8197ae6b1e0559935f6adcabc331bf512312ae2ac307ea721174b817e9abaff22b2b00567eb8bff829b69731ce5bb9c634b9204e63918fc3a43ba293de4b653c103a600436515fe0844c7211fd87a081150a4e263756c634f4c85ad0d4e015b7495adee043387080294dd9f2819b6fff7b4c35f20de16e20fe74cf57a71200e051357f08e0994885c98d", 0xad, 0x8}, {&(0x7f0000000200)="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", 0x1000, 0x7}, {&(0x7f0000001200)="0ef445f46bc38d65d10715464f248c8540f1fce2b6ef8640e065813726d7bbeae4597f8e002c860be32a130670d5597a39512da13313a765029498c308a775bcbc433655a44c7d1ba03fdd4d5a2d4cff600430511feb5992bef55276d3e91bbe", 0x60, 0x100}, {&(0x7f0000001280)="acebc19313563433def5f33213a689e1ecf717aa27b03445bc9b4bed6b3d9ac88094599514d6deb3e2a80e5915513c2aed5854ab1eb7e5151020faa3399b4e98ec0c8fdef1c98236d44257a52a0fd9b3890fcf5f603b280ca2c17cb88998bcd95915", 0x62, 0x4}, {&(0x7f0000001300)="2bc1befc86a23f45c74c7c53262651b7943dd4fc6dd8cc753e171e74c64b909a401f93004ea6ac6dc8a9c888425564b59e8dc14f7569d0c7e468fa6718419fbb172cea83534e6ad9f39732d8360871ebfb3ad19704c67fa2ce4c499af1b5af4639f777c1c5f281c2774401ed5f4de52997a3db803add93db6bc1dc60390edf991b0f19c079d80e69ccbe4895458d083fa2f7bff85458933dd995b3fb47cbb10080dbd143583b3f8d41c5d1", 0xab, 0x6}, {&(0x7f00000013c0), 0x0, 0x3}, {&(0x7f0000001400)="64df7840f161e7a6b25bd18c1dd814d326db9f1b1cbeaf7c5ebcc835e384932acec5778c05", 0x25, 0x400}], 0x20, &(0x7f0000001500)={[{@dir_umask={'dir_umask', 0x3d, [0x34, 0x34]}, 0x2c}, {@dir_umask={'dir_umask', 0x3d, [0x35, 0x32, 0x30, 0x34, 0x33]}, 0x2c}]}) [ 246.803671] binder: 15578:15580 ioctl c0306209 2000dfd0 returned -22 [ 246.836658] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 246.838709] binder: BINDER_SET_CONTEXT_MGR already set 2033/05/18 03:36:25 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000100)='n//user\x00') [ 246.844051] FAT-fs (loop5): Filesystem has been set read-only 2033/05/18 03:36:25 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:36:25 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) [ 246.878297] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 246.888896] binder: 15578:15580 ioctl 40046207 0 returned -16 [ 246.914567] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 2033/05/18 03:36:25 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000100)='ns/Xser\x00') [ 246.927434] binder: 15578:15589 ioctl c0306209 2000dfd0 returned -22 2033/05/18 03:36:25 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306225, &(0x7f000000dfd0)={0x7a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044000000000dc152e9b1f6460f8b725127f73ea84aab9ba53ac662b999fcae25c7a03db7bc70adaee1f268a9d123eb79f895b9c569d5a16ffb1e90e848c790f0ddc698efc1722a9022f4d34372502626df1298190e621c5a1bddd479be101a2205c374a1ea2407918bb290810443e85d4bb5550b3de96c1"], 0x0, 0x0, &(0x7f0000008f37)}) 2033/05/18 03:36:25 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x5, 0x0) r1 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x255c0633, 0xffff, 0x196, 0x2, 0x0, 0xffffffff, 0x2, 0x2, 0x9, 0x2, 0x3ff, 0x2300a5ec, 0x100000000, 0x4, 0x4, 0x8, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x7, 0x1, 0xfffffffffffffff9, 0x0, 0x6, 0x5, 0x1, 0x80, 0x100, 0x7, 0x7fff, 0x5, 0x9, 0x9, 0x0, 0x5, 0x1, @perf_config_ext={0x7fffffff, 0x800}, 0x40, 0x8, 0x7, 0x1, 0x9, 0x2, 0x9}, r1, 0xe, r0, 0x9) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r2) 2033/05/18 03:36:25 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuse_mount(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:36:25 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x80001) poll(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) 2033/05/18 03:36:25 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x3af, 0x30, 0x81, 0x7}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r1, 0x1, 0x6}, 0x8) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r2) [ 247.064228] binder: 15616:15617 ioctl c0306225 2000dfd0 returned -22 [ 247.136553] binder: BINDER_SET_CONTEXT_MGR already set [ 247.143974] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 247.151231] FAT-fs (loop5): Filesystem has been set read-only [ 247.160497] binder: 15616:15629 ioctl c0306225 2000dfd0 returned -22 [ 247.168561] binder: 15616:15617 ioctl 40046207 0 returned -16 [ 247.177694] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 247.198267] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) [ 394.208571] kworker/dying (6) used greatest stack depth: 8440 bytes left [ 492.512221] INFO: task syz-executor3:4508 blocked for more than 120 seconds. [ 492.519482] Not tainted 4.16.0+ #1 [ 492.523557] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 492.531534] syz-executor3 D21192 4508 1 0x00000004 [ 492.537192] Call Trace: [ 492.539795] __schedule+0x801/0x1e30 [ 492.543524] ? perf_trace_lock+0xd6/0x900 [ 492.547864] ? __sched_text_start+0x8/0x8 [ 492.552032] ? debug_check_no_locks_freed+0x310/0x310 [ 492.557240] ? __lock_acquire+0x7f5/0x5140 [ 492.561494] ? graph_lock+0x170/0x170 [ 492.565315] ? graph_lock+0x170/0x170 [ 492.569124] ? lock_acquire+0x1dc/0x520 [ 492.573118] ? find_held_lock+0x36/0x1c0 [ 492.577193] schedule+0xef/0x430 [ 492.580601] ? __schedule+0x1e30/0x1e30 [ 492.584600] ? kasan_check_read+0x11/0x20 [ 492.588758] ? do_raw_spin_unlock+0x9e/0x2e0 [ 492.593176] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 492.597773] ? debug_mutex_free_waiter+0x1b0/0x1b0 [ 492.602725] ? mutex_destroy+0x1f0/0x1f0 [ 492.606824] ? do_raw_spin_lock+0xc1/0x200 [ 492.611089] schedule_preempt_disabled+0x10/0x20 [ 492.615863] __mutex_lock+0xe38/0x17f0 [ 492.619752] ? __blkdev_get+0x193/0x13a0 [ 492.623830] ? mutex_trylock+0x2a0/0x2a0 [ 492.627915] ? perf_trace_lock+0xd6/0x900 [ 492.632077] ? zap_class+0x720/0x720 [ 492.635800] ? __lock_acquire+0x7f5/0x5140 [ 492.640061] ? graph_lock+0x170/0x170 [ 492.643870] ? kasan_check_write+0x14/0x20 [ 492.648124] ? get_gendisk+0x78/0x380 [ 492.651934] ? find_held_lock+0x36/0x1c0 [ 492.656033] ? lock_downgrade+0x8e0/0x8e0 [ 492.660198] ? down_read+0xaf/0x1b0 [ 492.663820] ? get_gendisk+0x78/0x380 [ 492.667628] ? __down_interruptible+0x6e0/0x6e0 [ 492.672302] ? kobj_lookup+0x36a/0x460 [ 492.676203] mutex_lock_nested+0x16/0x20 [ 492.680286] ? mutex_lock_nested+0x16/0x20 [ 492.684548] __blkdev_get+0x193/0x13a0 [ 492.688445] ? graph_lock+0x170/0x170 [ 492.692256] ? blkdev_get_block+0xc0/0xc0 [ 492.696423] blkdev_get+0xb9/0xb30 [ 492.699977] ? bdget+0x5c0/0x5c0 [ 492.703359] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 492.707961] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 492.713515] ? errseq_sample+0xf9/0x160 [ 492.717527] ? errseq_check+0x140/0x140 [ 492.721521] ? _raw_spin_unlock+0x22/0x30 [ 492.725693] blkdev_open+0x1fb/0x280 [ 492.729426] do_dentry_open+0x7ef/0xf10 [ 492.733425] ? bd_acquire+0x2c0/0x2c0 [ 492.737239] vfs_open+0x139/0x230 [ 492.740707] path_openat+0x1676/0x4e20 [ 492.744625] ? path_lookupat.isra.44+0xbd0/0xbd0 [ 492.749391] ? find_held_lock+0x36/0x1c0 [ 492.753466] ? lock_downgrade+0x8e0/0x8e0 [ 492.757626] ? do_sys_open+0x39a/0x740 [ 492.761533] ? kasan_check_read+0x11/0x20 [ 492.765692] ? do_raw_spin_unlock+0x9e/0x2e0 [ 492.770141] ? __lock_is_held+0xb5/0x140 [ 492.774209] ? _raw_spin_unlock+0x22/0x30 [ 492.778369] ? __alloc_fd+0x346/0x700 [ 492.782182] ? usercopy_warn+0x120/0x120 [ 492.786258] do_filp_open+0x249/0x350 [ 492.790066] ? may_open_dev+0x100/0x100 [ 492.794049] ? strncpy_from_user+0x3b6/0x500 [ 492.798485] ? mpi_free.cold.1+0x19/0x19 [ 492.802558] ? get_unused_fd_flags+0x121/0x190 [ 492.807151] ? getname_flags+0xd0/0x5a0 [ 492.811137] ? getname_flags+0x26e/0x5a0 [ 492.815217] do_sys_open+0x56f/0x740 [ 492.818944] ? filp_open+0x80/0x80 [ 492.822494] ? SyS_mknod+0x40/0x40 [ 492.826052] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 492.830905] SyS_open+0x2d/0x40 [ 492.834198] ? do_sys_open+0x740/0x740 [ 492.838092] do_syscall_64+0x29e/0x9d0 [ 492.841985] ? vmalloc_sync_all+0x30/0x30 [ 492.846143] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 492.850997] ? syscall_return_slowpath+0x5c0/0x5c0 [ 492.855949] ? syscall_return_slowpath+0x30f/0x5c0 [ 492.860908] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 492.866287] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 492.871152] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 492.876356] RIP: 0033:0x40f550 [ 492.879556] RSP: 002b:00007ffd176be968 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 492.887303] RAX: ffffffffffffffda RBX: 00000000000000f0 RCX: 000000000040f550 [ 492.894594] RDX: 00007ffd176bf72a RSI: 0000000000000002 RDI: 00007ffd176bf720 [ 492.901878] RBP: 00007ffd176be990 R08: 0000000000000000 R09: 000000000000000a [ 492.909159] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000013 [ 492.916451] R13: 0000000000000000 R14: 00000000006fe800 R15: 0000000000001380 [ 492.923832] [ 492.923832] Showing all locks held in the system: [ 492.930167] 2 locks held by khungtaskd/889: [ 492.934629] #0: 00000000e905f014 (rcu_read_lock){....}, at: watchdog+0x1ff/0xf60 [ 492.942303] #1: 00000000bc8605c1 (tasklist_lock){.+.+}, at: debug_show_all_locks+0xde/0x34a [ 492.950961] 2 locks held by getty/4429: [ 492.954935] #0: 000000007c48ef3c (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 492.963199] #1: 00000000c95eb0f9 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 [ 492.972071] 2 locks held by getty/4430: [ 492.976045] #0: 000000004808caf3 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 492.984305] #1: 0000000045b8ddef (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 [ 492.993186] 2 locks held by getty/4431: [ 492.997169] #0: 000000007cc2fadb (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 493.005430] #1: 00000000cfd1fdec (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 [ 493.014312] 2 locks held by getty/4432: [ 493.018319] #0: 000000000a2fcb03 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 493.026581] #1: 00000000b009c81a (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 [ 493.035459] 2 locks held by getty/4433: [ 493.039430] #0: 0000000023d4821b (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 493.047779] #1: 00000000ea1f049b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 [ 493.056654] 2 locks held by getty/4434: [ 493.060638] #0: 0000000093def349 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 493.068896] #1: 0000000009521298 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 [ 493.077773] 2 locks held by getty/4435: [ 493.081758] #0: 00000000535af5d4 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 493.090029] #1: 00000000ffc79f95 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 [ 493.098899] 1 lock held by syz-executor3/4508: [ 493.103485] #0: 00000000dcdbea36 (&bdev->bd_mutex){+.+.}, at: __blkdev_get+0x193/0x13a0 [ 493.111761] 1 lock held by blkid/11294: [ 493.115740] #0: 00000000dcdbea36 (&bdev->bd_mutex){+.+.}, at: __blkdev_put+0xc2/0x830 [ 493.123843] [ 493.125483] ============================================= [ 493.125483] [ 493.132511] NMI backtrace for cpu 0 [ 493.136155] CPU: 0 PID: 889 Comm: khungtaskd Not tainted 4.16.0+ #1 [ 493.142547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 493.151879] Call Trace: [ 493.154459] dump_stack+0x1b9/0x294 [ 493.158066] ? dump_stack_print_info.cold.2+0x52/0x52 [ 493.163236] nmi_cpu_backtrace.cold.4+0x19/0xce [ 493.168056] ? lapic_can_unplug_cpu.cold.26+0x3f/0x3f [ 493.173223] nmi_trigger_cpumask_backtrace+0x151/0x192 [ 493.178486] arch_trigger_cpumask_backtrace+0x14/0x20 [ 493.183652] watchdog+0xc10/0xf60 [ 493.187098] ? reset_hung_task_detector+0xb0/0xb0 [ 493.191924] ? __schedule+0x1e30/0x1e30 [ 493.195883] ? retint_kernel+0x10/0x10 [ 493.199762] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 493.205280] ? __kthread_parkme+0x1b7/0x280 [ 493.209582] kthread+0x345/0x410 [ 493.212942] ? reset_hung_task_detector+0xb0/0xb0 [ 493.217763] ? kthread_bind+0x40/0x40 [ 493.221543] ret_from_fork+0x3a/0x50 [ 493.225309] Sending NMI from CPU 0 to CPUs 1: [ 493.229826] NMI backtrace for cpu 1 skipped: idling at native_safe_halt+0x6/0x10 [ 493.230810] Kernel panic - not syncing: hung_task: blocked tasks [ 493.243705] CPU: 0 PID: 889 Comm: khungtaskd Not tainted 4.16.0+ #1 [ 493.250088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 493.259419] Call Trace: [ 493.261995] dump_stack+0x1b9/0x294 [ 493.265607] ? dump_stack_print_info.cold.2+0x52/0x52 [ 493.270778] ? printk_safe_log_store+0x260/0x260 [ 493.275521] panic+0x22f/0x4de [ 493.278691] ? add_taint.cold.5+0x16/0x16 [ 493.282818] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 493.288337] ? nmi_trigger_cpumask_backtrace+0x13a/0x192 [ 493.293765] ? printk_safe_flush+0xd7/0x130 [ 493.298066] watchdog+0xc21/0xf60 [ 493.301502] ? reset_hung_task_detector+0xb0/0xb0 [ 493.306327] ? __schedule+0x1e30/0x1e30 [ 493.310279] ? retint_kernel+0x10/0x10 [ 493.314150] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 493.319666] ? __kthread_parkme+0x1b7/0x280 [ 493.323967] kthread+0x345/0x410 [ 493.327319] ? reset_hung_task_detector+0xb0/0xb0 [ 493.332138] ? kthread_bind+0x40/0x40 [ 493.335922] ret_from_fork+0x3a/0x50 [ 493.340022] Dumping ftrace buffer: [ 493.343714] (ftrace buffer empty) [ 493.347408] Kernel Offset: disabled [ 493.351017] Rebooting in 86400 seconds..