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", 0x1000) mount(&(0x7f0000000280)=ANY=[@ANYBLOB="2f6465762f6e62643000540a0b1017ccc9afcfab24ab13862d0b7326b34f0260d1ae6d78758b474ba363b3336dd79e658d1af4a02ce2bb67e0a10016719c796e9d63ea88d1c2bb92790750f771532bcc77bf8fbcb81a4116ce627c6c6b7f11d0858e"], &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='xfs\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000180)={0x9a0000, 0x0, 0x2, r0, 0x0, &(0x7f0000000100)={0x990a94, 0x9b43, [], @ptr=0x4}}) write$FUSE_WRITE(r4, &(0x7f00000001c0)={0x18, 0xffffffffffffffda, 0x8, {0xfffff9fa}}, 0x18) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) 00:31:58 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$VIDIOC_G_AUDOUT(r6, 0x80345631, &(0x7f00000000c0)) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') write$tun(r8, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "0000ac", 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @mcast2}}}}}, 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x180ff, 0x0) [ 224.752447] binder_alloc: 9020: binder_alloc_buf, no vma [ 224.815526] binder: 9023:9034 ioctl c0205649 20000180 returned -22 00:31:58 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8948, &(0x7f0000000580)='ip6_vti0\x00') r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000100)) [ 224.905657] block nbd0: Attempted send on invalid socket [ 224.911689] print_req_error: I/O error, dev nbd0, sector 0 [ 224.917746] XFS (nbd0): SB validate failed with error -5. [ 224.991461] binder_alloc: 9045: binder_alloc_buf, no vma [ 225.022038] binder: BINDER_SET_CONTEXT_MGR already set [ 225.061937] binder: 9045:9048 ioctl 40046207 0 returned -16 00:31:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000004c0)={{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100000}) 00:31:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000000c0)={r6}) r7 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@errors_continue='errors=continue'}, {@umask={'umask'}}, {@fmask={'fmask'}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}, {@fmask={'fmask', 0x3d, 0x3}}, {@dmask={'dmask'}}]}) 00:31:59 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="5bf25175200fe122c2e82e5f34080c"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x800, 0x0) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000200)=0xfff) r1 = socket(0x3, 0x1, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x705}, 0x20}}, 0x0) [ 225.431801] ceph: device name is missing path (no : separator in [òQu á"Âè._4 ) [ 225.457921] binder_alloc: 9064: binder_alloc_buf, no vma [ 225.490922] binder: 9064:9072 ioctl c008640a 20000000 returned -22 00:31:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000100)={'L-', 0x80000000}, 0x16, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa6434, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x2, 0x0, 0x7, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0xf, 0x2, {{0x40, 0x0, 0x3}, 0x7}}, 0x18) timerfd_gettime(0xffffffffffffffff, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4e56, 0x2}, 0x0, 0x0, 0x7fffffff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x10, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x8028}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) creat(&(0x7f0000000300)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 225.532359] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. 00:31:59 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x68, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xffe8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x38, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x2}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') preadv(r3, &(0x7f00000017c0), 0x315, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x4800, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9}, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp\x00') ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000200)={0x3, 0x0, 0x10001, 0x1, 0xbc, 0x5}) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x14, &(0x7f00000000c0)}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000280)={@loopback, 0x52, r0}) [ 225.586811] ntfs: (device loop0): ntfs_fill_super(): Unable to determine device size. [ 225.665424] EXT4-fs error (device sda1): mb_free_blocks:1464: group 6, inode 15852: block 227360:freeing already freed block (bit 30752); block bitmap corrupt. [ 225.680549] EXT4-fs error (device sda1): ext4_mb_generate_buddy:754: group 6, block bitmap and bg descriptor inconsistent: 2016 vs 2017 free clusters [ 225.694300] EXT4-fs (sda1): pa ffff88804a4e4740: logic 32768, phys. 227320, len 2048 [ 225.702197] EXT4-fs error (device sda1): ext4_mb_release_inode_pa:3891: group 6, free 2008, pa_free 2007 [ 225.714639] binder_alloc: 9045: binder_alloc_buf, no vma [ 225.721033] binder: BINDER_SET_CONTEXT_MGR already set [ 225.731754] binder: 9045:9051 ioctl 40046207 0 returned -16 00:31:59 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="66696c746572000000000000000000000000f5ffffff000000000000000000000e000000040000009002000000070000c800000060010000c8000000c8000080f8010000f8010000f8010000f8010000f8010000040000000000009cdfffe37e23d785dc974b7500eeffbe000000000100e60000000000000000000000000000efffffffffffffff000000000000000000000000000000000003f200000000000002000000000000000000001d200000000e000000000000a000c80000000000001900087b0100000000000000005c0030006164647274797065000000000002000000000000000000800000000000007abe0000000000000000000000000000280052454a4543540000000000cfdcf6e80000df1c00090000000000010000000006000000000000e0000001ac1414bb0000000000040000677265300000000000200000002000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000020000000000700098000000000000000000000000000000000000000000280052454a45435400000000e0fffffe7f000000fcffffffffffffff0000ff000000000000000000000000000000000000000000000000000000000000009ba7fec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000007000980000000008d4250000000000000000000000000000280053455400000000000000000000000000000000000000000000000000080100000400000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000008a000000000035fc000000000028000000dfffffff000000000000a60000000020000000000000000000000000feffffff"], 0x1) 00:31:59 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9c0000001000f90682410f000000000000000000", @ANYRES32, @ANYBLOB="033d0000000000006800120009000100766c616e"], 0x9c}}, 0x4000) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x1, 0x0) accept$phonet_pipe(r1, &(0x7f0000000100), &(0x7f0000000140)=0x10) 00:31:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000005500)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(r0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x8, 0x0, 0x5, 0xfffffffffffffe00, 0xfffffffffffffff7, 0x401}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000004c0)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x40000000011, r4, 0x0) clone(0x4e0a9700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, &(0x7f0000000480)='y\x00', 0x2, 0x0) fcntl$setstatus(r5, 0x4, 0x6100) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) lsetxattr(0x0, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x4161, 0x0) 00:31:59 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000010405000000000000000000000000000500010001000000ff0f02000000000000000000"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2000000000000004, 0x2) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001540)='/dev/sequencer2\x00', 0x4200, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={r8, @in6={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, [0x0, 0x3, 0xb939, 0x8, 0x80000000, 0x8, 0x7fff, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x8, 0x0, 0xfff]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000040)={r8, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r8, 0x8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000001580)={r8, 0x86, "2bab3a38cd5aba9a3051dcad7a1a4eadaf61a5ade929c2db7e187420eb2277274f210a9b0c4ae625571d424e4c6ff58939695ea3cdcb9538ec63cc7d005eaa190aa09265e1dcb548ed714d55ff02c2779236ac485f8ce0c26ff060e2c7cc37580c2b5bab5a27fd7710986d44322b6856dc1a3ce0d45c598e899a5fb0461afa03953201de7a5a"}, &(0x7f0000001640)=0x8e) [ 225.826848] Cannot find add_set index 0 as target [ 225.837290] nla_parse: 8 callbacks suppressed [ 225.837298] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 225.860517] Cannot find add_set index 0 as target [ 225.879703] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.2'. 00:31:59 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000240)=0x44) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) write$FUSE_DIRENT(r3, &(0x7f0000000080)={0xc8, 0x0, 0x7, [{0x6, 0x4, 0x0, 0x3}, {0x3, 0x5, 0x9, 0x4, 'fdinfo/3\x00'}, {0x0, 0x7, 0x9, 0x4, 'fdinfo/3\x00'}, {0x2, 0x1ff, 0xc, 0x4, 'lo)security('}, {0x3, 0x5, 0x9, 0x7f, 'fdinfo/3\x00'}]}, 0xc8) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0x209) [ 225.956931] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:32:00 executing program 3: statfs(0x0, &(0x7f0000000080)=""/218) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup(r0, 0x0, 0x200002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x1100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xf17) unshare(0x6e040d80) bpf$MAP_CREATE(0x0, &(0x7f0000000600)={0x16, 0x4719d2fb, 0x6620, 0xe9, 0x0, 0xffffffffffffffff, 0xc, [], 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x40) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x77) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000380)) lsetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000300)='systemem0md5sum$\x00', 0x11, 0x3) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, [0x0, 0x3, 0xb939, 0x8, 0x80000000, 0x8, 0x7fff, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x8, 0x0, 0xfff]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYBLOB="6e000000ee4ecd41423c9eb12da97abce3f26e7a736596ca8c3a10adce240857f58411331e4a004edeec4c1fceca4388c045e02ae3ea16cd5d7a5b0dbcdd537751b7d9dd7c47cdd4f6a93df19a6037b2940ad38339020000c754c1de54705c1d6b847df250875a38ba2c17d1caf361bf5123f077382a0ac49c3a4d8b5bf595e37edd8a19b5a66d575340fd779c9eb7c2b312e206b5a818245aa8c809ea1c09c3623ade5c0b2cc1699a05d80d34c28f220462ad7940a8f8cb51cdb2dddb5ba0532ebd67b878aa8b43e5df97614cb22b9a291555f2"], &(0x7f0000000280)=0x76) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r2, 0x1}, &(0x7f0000000340)=0x8) memfd_create(0x0, 0x5) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000240)=0x2) [ 226.166953] EXT4-fs error (device sda1): mb_free_blocks:1464: group 8, inode 15852: block 266280:freeing already freed block (bit 4136); block bitmap corrupt. [ 226.181490] EXT4-fs error (device sda1): ext4_mb_generate_buddy:754: group 8, block bitmap and bg descriptor inconsistent: 28631 vs 28632 free clusters [ 226.195603] EXT4-fs (sda1): pa ffff88804a4e4aa0: logic 32768, phys. 266240, len 2048 [ 226.203561] EXT4-fs error (device sda1): ext4_mb_release_inode_pa:3891: group 8, free 2008, pa_free 2007 00:32:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002c00)={0x51, 0x6, 0x401, 0x4, 0x8, 0x3ff}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) sendmmsg$nfc_llcp(r3, &(0x7f0000002e00)=[{&(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x20, 0x7, "f83f9c9c0ac661e499420e931b0d1a1faada0aaa38d025d77fd7bda83fcc38cb5b44d1fef76187949ec685292759dd41e15d5c9e9c456fbc923683e23c1deb", 0x18}, 0x60, &(0x7f0000000700)=[{&(0x7f0000000100)="70dcfc9d1c91f0b33c7d83dc51eb6b992224b6a3416f58283648770d71b0ff1951bee0248ae4f63d60877ea5153fad5c0e91f65c0e4599c1bcb40d1f4fc6476139710a0f70ade934ae82b7b70fc35ea8e328238e184da70dbb6182b696be70ad64df29fba33fa5c9a7136e2797be39b991236323bf925d9dd209316ccd32659054f29ed6a1208984663e657d61ea8ecec6b7072bb4fce7010ad47f943237139c5a66e40e3743b5867e465386d1cb9add44ca8c8a53e603abaa1ab9b5a73508789bc82910b2e772a15b2a20a040709e9a7d8212cb", 0xd4}, {&(0x7f0000000200)="3dc5064dfef38b575df9b8045dfc29ff6a7369f8549c12a5160dec57ab4db347d33d80a22e81f4c26fb405796fc1d54f940ade04ed04d6175a07a9e25065829b7cc9e05dfcf69f753c2a4c6cfbc418e56deac9dd3d629b68aa8d02ed6fd1bc9d1c27910250180d2d542609a9c1ed2f8f31d02419d17f97232f3e5682d56d90", 0x7f}, {&(0x7f0000000280)="2323fc72dd9610f69ff6512c864e3501c948d5b428f9fd8644f1e557c3cba50c43f879a2e808171f709c361d2bb52e0693e20c4a6ebf1e9e63d138f91e0ce8d8d056591969ce1cea1209a4b67db150ab523455ee1b647a4fb3f650d6b5b2bbc391c19099616d672cdfcecd0cdb8366458adeeabcd7a21cbc7612a2fffc083ca09e357c79b67ea414e7a89480a84ad4", 0x8f}, {&(0x7f0000000340)="56bda3cfb8fc82713a8edfe18ceb61d3111c", 0x12}, {&(0x7f0000000380)="12019523befca8d30a03bccbc5961ff3b951f7", 0x13}, {&(0x7f00000003c0)="15ec3015a465d19e1926ed22b7fc700f5ca52601b182d4767732e46a19a5c71f5cb66ce12b65d20161edd4b55ccab1b319f9bbc4d6720dab44b1376227940eb99e49ef28fe7a84cd6b930c3af39f665d4311a812ff74e7dd77b835ac4238c184ae847d79d6ba86b3414bbb66697cca4d012c2d8be90eb84f4416a916cdaa7cb7ed72e214b231d292d0f990a87342e5e252ba6b8f88651d7711b2440ea021f25e8b6db22e08cb145ec8c85a79af9a8f7c7e59cf31b9584fd21b", 0xb9}, {&(0x7f0000000480)="028e5f6979557076f7ab1d2268f70f5a4db3c288816e7b061b96660784445b1b125c9167a955a9a8f6448ed13f2a1fe090a97d43665fd33fe7a5dcb6bbbdde9f8ce909c1a752edc3b96300cd0fbabbe362aa8b235b711751b5e5d5703896a8ffeebf06ef4c21ac74ffa40e2cd370ebe9c715cec68ad0206436c87777186fd92b61aa7df886577a5ef25866cf1af9b6b0", 0x90}, {&(0x7f0000000540)="5e4da828f31503519c28733def8a582101da0cf2050ff6145d1aa204a2a80650a6f2994d5bb73955ee5ecf4ea8d63a38676a28bd2fdc011be6a46a2052d7bada0ce9be96fce532c8f5c10e4f127ee0d2bb0ce2de8f8bfa43b38808513b60cda840948c37fb03bdf30d5b", 0x6a}, {&(0x7f00000005c0)="5f065e5b218b9dc8aa5b4157ea3b6f27c720b915977fe95383411adc41075ae19246d2cf71593fd160350034236f5765c0c9da42b855a7defee560f24c8fdd1630675e2fff29f194d080074a", 0x4c}, {&(0x7f0000000640)="ac6c99c58c28edddccae763ba3eacb31ce8561a6935ffb0f4cce2e9b54144c7e51946e6751c47584bfcbbc48dde5d0f35d2355f4af537531f37552a5f08b2a716f4f1fa626cc915b3629b8ee85c3d44bae5482a2804a7ebdcd59e7a16ac21695f4ebfb687ea7000ea388e36c8b90fe0c1e477026ad5d5e7a79c0893ab7db3285aa7387ee526126ec94a1e9ad6097dccd47e7e6737855d8e695766aff", 0x9c}], 0xa, &(0x7f00000007c0)={0x108, 0x104, 0x0, "de0473d8bb6cbdb59473225157c412050eb58971355917b576c82a545f874f1686d662ab856e93513dd243d7a6877a939b8555d3ebd5d1b0ce237828248adde9c7377dad11e7687df887b22865b06a83b0a9124329baa6098db0bfe3dc89ce5aaaed1f532249a8789f3bcc033ee29864d477cc99a39afa267f8247ea2801da022be334361f99706891ad25d511a76e1e7a04598e870704b08406a1995a0f27b51899520961ae6acafe5858e14e78ba55149a2a85fe3f7fb7ad58dfa6fdf161d072b22f57da016b1683b3f2eab5a053750d48961040fc7be8d4341537b07d7dc2b14138005226b55ee654f18075a9db84dfec07b8c7"}, 0x108, 0x40014}, {&(0x7f0000000900)={0x27, 0x1, 0x2, 0x2, 0x3f, 0xba, "c08cb10191bf87457ef288f2494ff08ee628f8ac4fc0641e7679cd4e4a95f925e42eaef5333507686c75c27a31351a38a3ddc52ff3bcf1e765876e9d1f9f78", 0x11}, 0x60, &(0x7f0000000a00)=[{&(0x7f0000000980)="3d5db9d03fbff4e19bbdccece71691a8daaaf5dbb9c654175c8141ab6260e3695a8ff1d5295b88688d664f4c1c60644bda16e41ae1eb64d1988300bb8599a09c27494b1736971de50a3c5686038bd5cd70ca714d3c0fff7205f900ae9ea14e836b2780bcaaf21b44af2b241240ca9073f510efd80c2a", 0x76}], 0x1, &(0x7f0000000a40)={0x38, 0x115, 0xffffffff, "ad06fb174d060412ad97db8d7c9ca5fce122d2d18e40df4b25e23a33ca3e3dbba9ce0451"}, 0x38, 0x4088000}, {&(0x7f0000001ec0)={0x27, 0x1, 0x2, 0x2, 0x0, 0x1, "2cbed6cd0f6c25a5984ab3ede3cd82d36442689613ec0b00ebfd4770e89b359ef3cfcd17ff1787b8cef7f51a11dfd379b72e3dbb93e86ea2547eac6d67b0b4", 0x19}, 0x60, &(0x7f0000002280)=[{&(0x7f0000001f40)="3ce97c7eac5ac3fe32ee79a13a6b08e2e00df550c20ce95ddc83ed18f8eafff62ea38d06811f71caa1cf415a67deaaa8a4edc2e6d0c1eb52039a5bc8a3a02bfdcf2479686af1f0cf84fa2774e0fc2b92d2d86e1ddb90126acfc72ceb1e499f169958187af9c173deadc383d4b1dbc70a8a", 0x71}, {&(0x7f0000001fc0)="f648967c06e74a90075b19acd81ddacdfb535255c0c9d0c2f01052fd543a15353554c06f9cb9b9f1e28e3eabd9f981a0dcd93ec3bd0572eea3641ccd6646d5e8096271a6259414fdce6a53c72894fdac2eb95e061e532d472364464cb6eaf52a9a2115046afa052ebfa6021b89b98e930f532d68dbc85b77ca3cb33d2589b0d92078baeebd24a8f6e8d3713560b000a473b7d7ee4fd257ff878cca34bf877f76a3918972f46624800aa6e0cb5d12430f8866eaaf8dcf3fde005e716e944e4305ce748805d9bcd5a981fee2b0d71a2b20a0a000aa46e53619", 0xd8}, {&(0x7f00000020c0)="418f78ff245e46abb6249b56a9b58b5f8c753c32fd0eb1b96df23855923a6b66ff7be5322f5f13a25f437e5b07d46d6061aa273491230e7e2e9aecf186e78d5fa482a58da43e4890615432cec9c39faff34cd8a53db6f2ffb38ae069e415f4ce083c4dee928fb5e568ec8290999d159c20b48fd352812e0f77a23de11b01e118eaa2b51199512b9a", 0x88}, {&(0x7f0000002180)="e26d266e8a2887e9b4346755cbe408bb891e5f22e9ec5d2e1a7ffd9efafc2a4deffde3566af9bfe7ddb36472acce8e11178d6ac2f44c6bb3912d634985e75a7478f0493b7aae01425be3b80b289c5fff660f7e5117c86693b036de557eeac714870ed6f579824d68c7fb330b301bee485f2a282d6c4a618bfffccf96428341e14e4b6afc00c42b0cf6ab7e2245dda59d3c9014be6e40996a8cf50af80e96f0e0514e7d3a6195a308ecb34fd1de442f85d9c3e57f16044e6d0e04520f6082c8f6b59427128b2fc8fb0ef8952f18145b7ca7aec6ee3181ccbaf581cdc85cce7bb6cc872db40b686154c8e8530394932c70", 0xf0}], 0x4, &(0x7f00000022c0)={0x10, 0x117, 0x2}, 0x10, 0x810}, {&(0x7f0000002300)={0x27, 0x0, 0x1, 0x1, 0xff, 0x1, "decef7593c62b8029c3c93620024d04094d0e615d619d262a30ee6f7bd891ce1685fbfe6c14fa33a88bb9b5490883098f76cf505ce109297642e26b6816da1", 0x35}, 0x60, &(0x7f0000002400)=[{&(0x7f0000002380)="8a329e0cfd41e873eefaed40963e47fe9963cdfa623073b4a785925699e1d6d83530c04cab829a3c08943943ca1e4737f489cc52dc7a155cf4a79b6530bf51aceea8f6e3e70eba27d7d7", 0x4a}], 0x1, &(0x7f0000002440)={0xa0, 0x10c, 0x7, "aea553baa767fe0f4a24af541ba7c7206c3e40e63db0b2265c3a257ba6bdfeb7043287354f07d04907f294b4864d938427fcf662d71288782ab0d5c6ca4f628d8bd8194545035172b576d6bf10959521c1557d06d58e187376712d6cb8b708dad5dc87db4f4707a5c2607aa70a11d4715eac3fa54f3a9336d9a8ff21d86013e75115254ebb1044be10c80fa82c"}, 0xa0, 0xc040}, {&(0x7f0000002500)={0x27, 0x0, 0x0, 0x5, 0x5, 0x80, "a9b583f286e9b1a65a20bc89ff5824a80af2e6ce808b8f93bc398ee006ce892b1152e33202a78e3ba665a4f339aada9c984fbdf05f0313596adadf6eb0ed3e", 0x32}, 0x60, &(0x7f0000002640)=[{&(0x7f0000002580)="f3c5005f2f57882f1290791f765c45e8d7fc89b54a7a4624737f279e739e8f831e8bdaec433a1ba96514114af4c2fc411d252f581fc6425429578f3947d3f9db3a915deb4b5ea9c6d915385d67e09a389b0e3bb8e699c702", 0x58}, {&(0x7f0000002600)="a48db7f16e92615235c73965", 0xc}], 0x2, 0x0, 0x0, 0x40001}, {&(0x7f0000002680)={0x27, 0x0, 0x1, 0x6, 0x1, 0xff, "362b5600b0a955ffef566bdc8cd247ef745b76be1cad3938b4fc103851dafa8b2e2c166353a99d93ce60c13c0a85e335826fcd85c38657d0c67c74f21f2c0d", 0x24}, 0x60, &(0x7f0000002940)=[{&(0x7f0000002700)="c869c26addbb9a837c2a6f9d930ab6f73c5767d0901d05f03fe585c49c65293492913c40891f7ac47df4a0945530c045345b3fa72df0ebfc0df2a9922b04cb7a2d956a8c23b077e5c02baa39b0a724bd6255f8337a2fa575b7f18c5f50b7a4dd8356eea9cbb5ea4b0d3e9df36fabd0933b968c460e26d9b4f98fc50b0c3355df030d4b020a481b1dae4f2c11ccf8d7ab42147892015ee04a6d372bb2bc2fd2895d274f1b81672bf2309ce301b9bac418e55937bb867f059375b16253b59cae063fff1a93a40cea679546cb17546c5c416aa445be61a2c72f7524870f14", 0xdd}, {&(0x7f0000002800)="805880bceba9d42074281afc3f0e0511779dbbbcde8190a6e5d66ea8e5ebca2f0364eb1e072c0fc0e1ba389136f6963472e45fa474bd74aa9eca5643e964bece445cdaf619308bd0c0db5aa923216e11db35b1acea3ea26c4b67a546ef76ec", 0x5f}, {&(0x7f0000002880)="80e7b120d6b97c98813d4e6592ab80fc1e959e7693a9e767b9e6df154b17f60d2f95cccaec96d4bb04e5ca2a96138d719584f0f126e1aab821dfb9c79f95949bc6e3ce3d396a2d18062250f40b5168b858c6492fbc9b444cc2cba0501763852f57b2adaac3f55cb72cedaefe4df8b8b646155dd69183816ae3b6fa94f55676d1a595654c591acbd21843eeed38", 0x8d}], 0x3, 0x0, 0x0, 0x80}, {&(0x7f0000002980)={0x27, 0x1, 0x0, 0x5, 0xff, 0x7f, "e1d6d0077366fba6a8df7aadb4f011a62778d6e19121495d2cc06936ba28e7a2d32206bad4d4ffea7b9057d8020a40f99c0fa83ee808233093df795e6f290a", 0x2d}, 0x60, &(0x7f0000002d80)=[{&(0x7f0000002a00)="376bc363690c7752cc9c4e452f9ef05ce4f7915a435a154266fc5138f910d457054df0950c886f5edec0b3d2bb2c7b5a7fa14af35f29a4c9b11ea36bb6a4d54a4d76107a0dd3f1d342f4d3ba39465dd7aa31261b6e39e6d3447b76c0147dc6ee867372c40d79b97e63d2e2531f7be7e8167ca453dbd04ea75f12cb48219ec11f5d5361ca2730ec0217b3bc3e0152a991de247743cd3bca8efaf0fd77c3c0c1a14ba0", 0xa2}, {&(0x7f0000002ac0)="41d20b316ddc054ebf38cdd56b5f7fd7f056b5af68bb5f4abd78624f9d9a2299c63007c2fae600391e91dd00698cc0ac6678f175352e33c5c206344d0e9543e33dc74c783577c719f0b5dfe7174618591c6729fbd4b2f7500807945aaf370ff6d516527b49b6ac5daa3d614b1d", 0x6d}, {&(0x7f0000002b40)="6c706271d3c85d05105929ed1aee288fb53f74e7dbb9c5e297db2a9aeeb1ae6450e44954f7f03fa27b08d603a3c3b8043a5e56769b5d46d7020b7a913cedfcc5526072bbf414aa74b5dfdf14f997b9c7ee350468e2f10a6afce580d56588bedc0386e8132f9ccee9f437ebcde0a73b666941e32b5004f129cb57e2ff171b0060bccbb3e5e6f1f5a92f6bafb42e18829436f4", 0x92}, {&(0x7f0000002c00)}, {&(0x7f0000002c40)="070d846cebf09243f37029bedf18a0fbaa7665", 0x13}, {&(0x7f0000002c80)="ad7890a69dcb0d3e4de2cc275c1949328f780f98d69d27473f1a05f1a920ee57c47eef5e5da5d0db41a639fcdab756d1940176dd33ca9d39c8c8bc13640f9465d847bfb14e7c2e2b3fd3d056ec73b83018e6c6dd8ab877ef5f8cd857f1515dc37f06694d0184ba31f51e", 0x6a}, {&(0x7f0000002d00)="51d5bcc14b966f1449e6c534563a6fdd34dbe8", 0x13}, {&(0x7f0000002d40)="8fcd527727831e1cd977ff0e88", 0xd}], 0x8, 0x0, 0x0, 0x80}], 0x7, 0x48014) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0xe, 0x4, 0x13a8, 0x0, 0x0, 0x1208, 0x108, 0x108, 0x12d8, 0x12d8, 0x12d8, 0x12d8, 0x12d8, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast1, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'rose0\x00', 'netdevsim0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x0, 0x1, 0x0, 0x0, './cgroup/syz0\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1408) sendmsg$kcm(r3, &(0x7f0000003800)={0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000002fc0)="db4a86bb7b09389ecb043337daf693f7dfaffe0bfc71d3fca032371be2938de25fd7457dc73806b096555feba4eb85b07b145ac06411b08959664892c496cfce98312400487d594da2479e0167da477a32363fd5d3820fa0a7a388880189e9cf6f143dc99e7461b6388e75fc4c33a58a0ddac9df17ce9f849e78297d1db6585bde1d70e67e5ac337b3eef6b724a39422e7189fff12e3e849c0addf240b1a57f47af3426b25368aa1056f788c25b03327371d7ff748ed7413413eb1cbea2bef5f3ee231c2799e1600d7673f53a28effdec5cfe48f54511877b97ffe83f668eed87f", 0xe1}, {&(0x7f00000030c0)="2b95b65c9906a3d3033b525a50d1d841c360a98f5f1593bda079a7e0470b577b35c44b02bb6315e01be51b0f79941275f17f721b8fd56e301c5acbf9809e8b0192e58502986f1b2c53ce606e899b3dafbfab6457b4877e2b4287ea9ccb7b75168b17f7967b4f0f77fd744afee71ac65af46bd19d6d5c5aa60fec47336bc57a3245fd40eeb9479e33ff66446d3a1c8ccd6f3b3f6ef585704123a94defbc9d52d977ed6cc7cbde922e6ec7d746b2a39b6044dc009312f49430b4fe5bebf37b1a16dc46ad858389769b386f2aeb5a533b011c73b3b9cc444349e21124eb574f0446d4d3a6ec03", 0xe5}, {&(0x7f00000031c0)="22dc7d4c23bde99b107b23d031cc85ae9ab5e0d59a871a7bff689bff3deed538f3d49dc9c1ce326d75f9e82e841d24c0ac7b3b60e37203733a8deb3be280c25e62e360fc809d15932061d3553cffac7af2dfbcc26353a8efa78e802c377bf0ac84062891f415e5d763f78e4d04f06a817a0a5c784290ff48e2b2ad3313701d7e41e7e1f92ff450c7a699", 0x8a}], 0x3, &(0x7f00000032c0)=[{0x78, 0x112, 0x3f, "2d099ca1a094359ca3e427e269d076a419f9e021f16381c68c48a444809a540576ebd5c35471152da859c804165db7ea2777c52d137057c53d966f78d7a3e4dd9e2aa2dbb1f5fc0afb798e223251ee98ebe754280b127725213f9aff971cd9767d2aec48"}, {0x40, 0x108, 0x3, "1b15745745642c1de9407b375b6a94a368f6d3b2d6be2884aa522fd8c8ed3a872d5ee7b15cad1c12e1534ac817bd03"}, {0x110, 0x0, 0x6, "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"}, {0x108, 0x0, 0x461c, "0556cc57ba6732e0458b5b95cbf9c282a83d1e089ba4cc451e6f89079e675cc84d7109560694774329ee04eac7580aacc3e265dcbf4328816ef2bbb23ca07638c1700a5648d745786870e8f82c471e4d8f0d5194c6258e0b058fa158e448c51a1a90e75e47d87ac1c87986b85c8722624a8a564102801463bb55b7b8f99079ab46cf5bea772082babe97c0aba03e633fc9110cad9de0117ac0c19b7d11751a9440d3828e93f698a0530a82213685eb608196c5594cdc38936bf4a8cd79114f24130ab0e4bafb91ff48059e260ed3f951e06a02008baf74e3ceb10d92927b6e2dd0e4ce80466937944e21c947883ac1a2ebd2866f994277c0"}, {0xa8, 0x114, 0x2abf, "40f79bdd6d8f1835ba87d17bd4f64302a97270c213f7c8921af19ebdb1764d00d0ea2e5feac16209fbff314344bc2cc5bcfced7c1ddcb2b59291da21ca16386d603b62c13c84c9faa4b0906570a543e5d4eec2d94f8a6aaba98898f0bcf2c040b9dab98fe1e5f7c3fa26a94dc649090453cd10d26b443aeecf065f8b4a5c7baeb5134ad1c79660ffe474bdb4e9ae12cbc946277b64"}, {0xc8, 0x119, 0xe3, "aa63a516fc8a19ccc51f09a9441e474ea4a6f0f0e0ce27426c0ef2beeb0944fb5c44313f80bb876f34cc770a39aeb6972c99f84e5428abdfd4cfa1e8f2f4966ac953b8d6f59b16a0c78d735ba6c2031a3106c5127af43a3a81c2069978cfc538b563088fd9632ce1c32afbfc5d7e097847fc09cfc21f13e630bf16b5bb2ed7a98c8b4f98ab1398a83eed9970f72c76e078abac6110f0e87639ac82f7191535962938a8f6bde4f54e2d374b1d901886b33f72a734f2a9065c"}, {0x40, 0x112, 0x10000, "2e52c5b7f858968d86d8494296804c538c4897b3a3cddd81487dbb15bc339c449b93e9c5670a9fa43023050683"}, {0x98, 0x6, 0x0, "574331b61073906c7737e8425406637449f28dceda118fab6b31171a012a0df7846a0c97ce06012d13532b597e846f8e0722a75efbb356d4abebc68ae259acedf9c4f7457643ccd75b8d1e39b88d71b0b263b2b631e7dac8d26a356e992f5b840bfcf9cd863c688bb172fb8aff94cd9e3e2de4c36e052e7457b3ec6ddcc67d268cfca584a79e"}], 0x518}, 0x810) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000003840)) 00:32:00 executing program 3: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x48280) fcntl$setstatus(r0, 0x4, 0x6100) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r4) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r7 = dup2(r6, r5) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0xdd) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x28}, 0x87ffffc) 00:32:00 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="03007fa13517bf1be20000000000001800128008000100736928f4000c000280080021", @ANYRES32=r2, @ANYBLOB="f40cdc96ae83bd5fdda86c939d99ebae00e1bc2c6cd2a86af5f662a2adeff1c87c87dde872dfe64ccd8c757e792a04e76a124324a33e49dcffcaa6d6e91fabcf77f84bfe18611dc13f0c91e016615bc09aad2d1013a07038af314d7a06ddb18fba9eec7e3329085a24633cc2782b2d0321b1a7b76786f1ad246e814be09b469d609150b30f0d133d0a208d2a91de7e08c5a0ff5e6485cf21cbb7acd0bc058a954459604b32ddf6aa84ee03635afaf0284ac1d9c1846fa51520ed54f113c782de97d8ffed2e9bfa2c5ceed8201cf55757fe66603cb730566adf731a019af0de3e6ffbe6af0d616e68a257b2901eb60f88f80a9b002c"], 0x38}}, 0x0) socket$key(0xf, 0x3, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x0) [ 226.270074] binder_alloc: 9122: binder_alloc_buf, no vma [ 226.341310] audit: type=1800 audit(1590107520.272:43): pid=9137 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="bus" dev="sda1" ino=15852 res=0 [ 226.392038] binder_alloc: 9131: binder_alloc_buf, no vma [ 226.392304] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 226.410069] binder_alloc: 9132: binder_alloc_buf, no vma [ 226.417843] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 226.424168] binder: 9132:9141 ioctl 8912 dd returned -22 [ 226.450959] audit: type=1800 audit(1590107520.382:44): pid=9141 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="bus" dev="sda1" ino=15852 res=0 [ 226.469544] binder: 9131:9144 ioctl 5411 20003840 returned -22 [ 226.505292] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:32:00 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x9) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) syz_genetlink_get_family_id$netlbl_unlabel(0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x48, 0x1, 0x3, 0xbb, 0x637a716d, 0x3, 0x0, 0x20000}, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x8000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8000000200036150, 0x800007b, 0x0, 0x1, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) listen(r4, 0xcb) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) 00:32:00 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x93edd86}) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x3, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x4a2cb47eea) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r4, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1fa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfdf}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040080) 00:32:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newlink={0x19c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @gre={{0x8, 0x1, 'gre\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x80}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x6c746}, @IFLA_GRE_OKEY={0x8, 0x5, 0x401}, @IFLA_GRE_TOS={0x5}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_IGNORE_DF={0x5}]}}}, @IFLA_VF_PORTS={0x100, 0x18, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xca}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "7942fea2fffe3b5415894eeaab36bd53"}, @IFLA_PORT_VF={0x8, 0x1, 0x100}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8, 0x1, 0xffffffa0}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xe, 0x2, '&vmnet1!(\x00'}, @IFLA_PORT_PROFILE={0x6, 0x2, '&\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b7f64637c9df3b846ed3d21049a43ff6"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "58c2f4d5593845c541436235e78a2f56"}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8733af7f7ded57fb21148fc750526f42"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "99051665d64ff8bb54df7fb424aee633"}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xe, 0x2, 'ip6gretap\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xe7}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "1edb1ea848071c159a5f6f0824f7d86d"}]}]}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_EVENT={0x8, 0x2c, 0xff}, @IFLA_IFALIAS={0x14, 0x14, 'gre0\x00'}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x8}]}, 0x19c}}, 0x4004880) 00:32:00 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x40087101, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0xcf, &(0x7f00000012c0)=""/197, 0x0) getpriority(0x0, 0x0) r1 = geteuid() pipe2$9p(&(0x7f00000001c0), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001bc0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40008}, {0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000017c0)="c4fe9f834f655af8dfe5898f29f701d2ef0310dc2389800adc25bd1cb2dbb0afd2be016a290f028149403d29f80989148c16b4d9da31469936cbcff444f15de7f52a", 0x42}, {0x0}, {0x0}, {&(0x7f0000001a00)}], 0x4, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000104000002000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0000000019ddd24b07979d4997541583d8eb0faf856639eb3eb217ab4f39a7bcab26c189810be7de78c7a6659193613a30e198cdb81bbbea3c1c91a7effa72c0586abb4476603af8a9ee8e1b7792ddd458228ffcf23b7378f9ca01edb345bd17b02c90bf6c13f596e84727a2ce2cef8cb621d9a82d7180829a35f396c70ed5ba45ad00503325b320bd3e0e8200000000000000000000000000556e8a5a9eb5219ad756b899e84c725e212605c5bff4facca4f9af51933eb8e7bbfb5479a87f079c2e16e8175fc7c02b5940463ceaab0868e63a25f97414bc55796080ba5ed2f55971e2b3aa7ddeb364090a0e3c4ae12267ae5ce978c4b28c4ee05c95537c175e84295aa8c2706cca06e92d01e574996313718ec231eac4f0fee5c5ab7651b29386ad051761a311688552d4ed336ddeafbc2de78a1a9d81ceed59ac02f1f6618e218b50b85fadb85d81f1bb30f3aaed843949777a"], 0x48, 0x4c000}], 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) unshare(0x600) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000010002000000000002000100", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r2, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r3, @ANYBLOB="08000600", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r2, @ANYBLOB="1000b35b000000002000000000000000"], 0x6c, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00', {0x2, 0x0, @rand_addr=0x2000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @loopback}}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000200)=0x2715, 0x0) 00:32:00 executing program 1: perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x80, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x2, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="a200000000f2c203b3017b6285da3db556c80db5d9fa38f3fe5c0bf65ceba5981e7b8aa98b52a9dc0e7c403d2afe885b4c671ee4a76fba4358c4caf4087c3d11d39920d2ea26e95883ef04a60cc45900991f0b35c3a86bf6bf9bbbc386c9d65c03928293941cf5ef2727349b37cfece56ab8e3021a06e358c7a53e31f25eca772c357269bcd76b62628b0b5a40d977c26e3efb7d7ab79788e9923eb2b1f007e47922ef12c663c6dce9800ea9081989779cc5d7363ca2ae64755d"], 0x0, 0x0, 0x0}) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x9) r4 = dup(r0) write$uinput_user_dev(r4, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) socket$alg(0x26, 0x5, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) fanotify_mark(r4, 0x0, 0x20, 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') clone(0x20986500, 0x0, 0x0, 0x0, &(0x7f0000000040)="d353ff072d68b2e4dc14aa5f7e25908384") [ 226.876733] binder_alloc: 9151: binder_alloc_buf, no vma 00:32:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="66b8d60000000f23c00f21f86635010004000f23f80912baf80c66b810cf048466efbafc0cb88366ef260fc76a0066b9800000c00f326635002000000f303e660f38828b00000fc79c0070660fc77080660f38cff4f00fbb360200", 0x5b}], 0x1, 0x3a, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 226.954318] binder: BINDER_SET_CONTEXT_MGR already set [ 226.959812] binder: 9122:9123 ioctl 40046207 0 returned -16 00:32:00 executing program 2: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x2, {{0x80, 0x2, 0x7}, 0x1000}}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x5c}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x2c, 0x30, 0x1, 0x0, 0x0, {}, [{0x18, 0x1, [@m_ife={0x14, 0x1, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x4}, {0x4}}}]}]}, 0x2c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 227.011364] binder: 9170:9176 unknown command 162 [ 227.030951] binder: 9170:9176 ioctl c0306201 20000280 returned -22 [ 227.063064] binder: 9170:9179 ioctl 40045569 9 returned -22 [ 227.094924] input: syz0 as /devices/virtual/input/input5 00:32:01 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="2f6465762f6e0300000000000084532e00f49cbb1d5b59d3f94f2049ed45043498e5afbe014f15aeee1ced7c68029ae9fef2fd2d2f4489b947de02dd67990782e081e072505a7da960207a21"], &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='xfs\x00', 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) 00:32:01 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x2000000000000006, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000000)={0x5, &(0x7f00000000c0)=[{}, {}, {@fixed}, {}, {@fixed}]}) setuid(0x0) clone(0x80000000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) [ 227.157672] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 227.174853] binder: 9131:9144 ioctl 5411 20003840 returned -22 00:32:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002c00)={0x51, 0x6, 0x401, 0x4, 0x8, 0x3ff}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) sendmmsg$nfc_llcp(r3, &(0x7f0000002e00)=[{&(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x20, 0x7, "f83f9c9c0ac661e499420e931b0d1a1faada0aaa38d025d77fd7bda83fcc38cb5b44d1fef76187949ec685292759dd41e15d5c9e9c456fbc923683e23c1deb", 0x18}, 0x60, &(0x7f0000000700)=[{&(0x7f0000000100)="70dcfc9d1c91f0b33c7d83dc51eb6b992224b6a3416f58283648770d71b0ff1951bee0248ae4f63d60877ea5153fad5c0e91f65c0e4599c1bcb40d1f4fc6476139710a0f70ade934ae82b7b70fc35ea8e328238e184da70dbb6182b696be70ad64df29fba33fa5c9a7136e2797be39b991236323bf925d9dd209316ccd32659054f29ed6a1208984663e657d61ea8ecec6b7072bb4fce7010ad47f943237139c5a66e40e3743b5867e465386d1cb9add44ca8c8a53e603abaa1ab9b5a73508789bc82910b2e772a15b2a20a040709e9a7d8212cb", 0xd4}, {&(0x7f0000000200)="3dc5064dfef38b575df9b8045dfc29ff6a7369f8549c12a5160dec57ab4db347d33d80a22e81f4c26fb405796fc1d54f940ade04ed04d6175a07a9e25065829b7cc9e05dfcf69f753c2a4c6cfbc418e56deac9dd3d629b68aa8d02ed6fd1bc9d1c27910250180d2d542609a9c1ed2f8f31d02419d17f97232f3e5682d56d90", 0x7f}, {&(0x7f0000000280)="2323fc72dd9610f69ff6512c864e3501c948d5b428f9fd8644f1e557c3cba50c43f879a2e808171f709c361d2bb52e0693e20c4a6ebf1e9e63d138f91e0ce8d8d056591969ce1cea1209a4b67db150ab523455ee1b647a4fb3f650d6b5b2bbc391c19099616d672cdfcecd0cdb8366458adeeabcd7a21cbc7612a2fffc083ca09e357c79b67ea414e7a89480a84ad4", 0x8f}, {&(0x7f0000000340)="56bda3cfb8fc82713a8edfe18ceb61d3111c", 0x12}, {&(0x7f0000000380)="12019523befca8d30a03bccbc5961ff3b951f7", 0x13}, {&(0x7f00000003c0)="15ec3015a465d19e1926ed22b7fc700f5ca52601b182d4767732e46a19a5c71f5cb66ce12b65d20161edd4b55ccab1b319f9bbc4d6720dab44b1376227940eb99e49ef28fe7a84cd6b930c3af39f665d4311a812ff74e7dd77b835ac4238c184ae847d79d6ba86b3414bbb66697cca4d012c2d8be90eb84f4416a916cdaa7cb7ed72e214b231d292d0f990a87342e5e252ba6b8f88651d7711b2440ea021f25e8b6db22e08cb145ec8c85a79af9a8f7c7e59cf31b9584fd21b", 0xb9}, {&(0x7f0000000480)="028e5f6979557076f7ab1d2268f70f5a4db3c288816e7b061b96660784445b1b125c9167a955a9a8f6448ed13f2a1fe090a97d43665fd33fe7a5dcb6bbbdde9f8ce909c1a752edc3b96300cd0fbabbe362aa8b235b711751b5e5d5703896a8ffeebf06ef4c21ac74ffa40e2cd370ebe9c715cec68ad0206436c87777186fd92b61aa7df886577a5ef25866cf1af9b6b0", 0x90}, {&(0x7f0000000540)="5e4da828f31503519c28733def8a582101da0cf2050ff6145d1aa204a2a80650a6f2994d5bb73955ee5ecf4ea8d63a38676a28bd2fdc011be6a46a2052d7bada0ce9be96fce532c8f5c10e4f127ee0d2bb0ce2de8f8bfa43b38808513b60cda840948c37fb03bdf30d5b", 0x6a}, {&(0x7f00000005c0)="5f065e5b218b9dc8aa5b4157ea3b6f27c720b915977fe95383411adc41075ae19246d2cf71593fd160350034236f5765c0c9da42b855a7defee560f24c8fdd1630675e2fff29f194d080074a", 0x4c}, {&(0x7f0000000640)="ac6c99c58c28edddccae763ba3eacb31ce8561a6935ffb0f4cce2e9b54144c7e51946e6751c47584bfcbbc48dde5d0f35d2355f4af537531f37552a5f08b2a716f4f1fa626cc915b3629b8ee85c3d44bae5482a2804a7ebdcd59e7a16ac21695f4ebfb687ea7000ea388e36c8b90fe0c1e477026ad5d5e7a79c0893ab7db3285aa7387ee526126ec94a1e9ad6097dccd47e7e6737855d8e695766aff", 0x9c}], 0xa, &(0x7f00000007c0)={0x108, 0x104, 0x0, "de0473d8bb6cbdb59473225157c412050eb58971355917b576c82a545f874f1686d662ab856e93513dd243d7a6877a939b8555d3ebd5d1b0ce237828248adde9c7377dad11e7687df887b22865b06a83b0a9124329baa6098db0bfe3dc89ce5aaaed1f532249a8789f3bcc033ee29864d477cc99a39afa267f8247ea2801da022be334361f99706891ad25d511a76e1e7a04598e870704b08406a1995a0f27b51899520961ae6acafe5858e14e78ba55149a2a85fe3f7fb7ad58dfa6fdf161d072b22f57da016b1683b3f2eab5a053750d48961040fc7be8d4341537b07d7dc2b14138005226b55ee654f18075a9db84dfec07b8c7"}, 0x108, 0x40014}, {&(0x7f0000000900)={0x27, 0x1, 0x2, 0x2, 0x3f, 0xba, "c08cb10191bf87457ef288f2494ff08ee628f8ac4fc0641e7679cd4e4a95f925e42eaef5333507686c75c27a31351a38a3ddc52ff3bcf1e765876e9d1f9f78", 0x11}, 0x60, &(0x7f0000000a00)=[{&(0x7f0000000980)="3d5db9d03fbff4e19bbdccece71691a8daaaf5dbb9c654175c8141ab6260e3695a8ff1d5295b88688d664f4c1c60644bda16e41ae1eb64d1988300bb8599a09c27494b1736971de50a3c5686038bd5cd70ca714d3c0fff7205f900ae9ea14e836b2780bcaaf21b44af2b241240ca9073f510efd80c2a", 0x76}], 0x1, &(0x7f0000000a40)={0x38, 0x115, 0xffffffff, "ad06fb174d060412ad97db8d7c9ca5fce122d2d18e40df4b25e23a33ca3e3dbba9ce0451"}, 0x38, 0x4088000}, {&(0x7f0000001ec0)={0x27, 0x1, 0x2, 0x2, 0x0, 0x1, "2cbed6cd0f6c25a5984ab3ede3cd82d36442689613ec0b00ebfd4770e89b359ef3cfcd17ff1787b8cef7f51a11dfd379b72e3dbb93e86ea2547eac6d67b0b4", 0x19}, 0x60, &(0x7f0000002280)=[{&(0x7f0000001f40)="3ce97c7eac5ac3fe32ee79a13a6b08e2e00df550c20ce95ddc83ed18f8eafff62ea38d06811f71caa1cf415a67deaaa8a4edc2e6d0c1eb52039a5bc8a3a02bfdcf2479686af1f0cf84fa2774e0fc2b92d2d86e1ddb90126acfc72ceb1e499f169958187af9c173deadc383d4b1dbc70a8a", 0x71}, {&(0x7f0000001fc0)="f648967c06e74a90075b19acd81ddacdfb535255c0c9d0c2f01052fd543a15353554c06f9cb9b9f1e28e3eabd9f981a0dcd93ec3bd0572eea3641ccd6646d5e8096271a6259414fdce6a53c72894fdac2eb95e061e532d472364464cb6eaf52a9a2115046afa052ebfa6021b89b98e930f532d68dbc85b77ca3cb33d2589b0d92078baeebd24a8f6e8d3713560b000a473b7d7ee4fd257ff878cca34bf877f76a3918972f46624800aa6e0cb5d12430f8866eaaf8dcf3fde005e716e944e4305ce748805d9bcd5a981fee2b0d71a2b20a0a000aa46e53619", 0xd8}, {&(0x7f00000020c0)="418f78ff245e46abb6249b56a9b58b5f8c753c32fd0eb1b96df23855923a6b66ff7be5322f5f13a25f437e5b07d46d6061aa273491230e7e2e9aecf186e78d5fa482a58da43e4890615432cec9c39faff34cd8a53db6f2ffb38ae069e415f4ce083c4dee928fb5e568ec8290999d159c20b48fd352812e0f77a23de11b01e118eaa2b51199512b9a", 0x88}, {&(0x7f0000002180)="e26d266e8a2887e9b4346755cbe408bb891e5f22e9ec5d2e1a7ffd9efafc2a4deffde3566af9bfe7ddb36472acce8e11178d6ac2f44c6bb3912d634985e75a7478f0493b7aae01425be3b80b289c5fff660f7e5117c86693b036de557eeac714870ed6f579824d68c7fb330b301bee485f2a282d6c4a618bfffccf96428341e14e4b6afc00c42b0cf6ab7e2245dda59d3c9014be6e40996a8cf50af80e96f0e0514e7d3a6195a308ecb34fd1de442f85d9c3e57f16044e6d0e04520f6082c8f6b59427128b2fc8fb0ef8952f18145b7ca7aec6ee3181ccbaf581cdc85cce7bb6cc872db40b686154c8e8530394932c70", 0xf0}], 0x4, &(0x7f00000022c0)={0x10, 0x117, 0x2}, 0x10, 0x810}, {&(0x7f0000002300)={0x27, 0x0, 0x1, 0x1, 0xff, 0x1, "decef7593c62b8029c3c93620024d04094d0e615d619d262a30ee6f7bd891ce1685fbfe6c14fa33a88bb9b5490883098f76cf505ce109297642e26b6816da1", 0x35}, 0x60, &(0x7f0000002400)=[{&(0x7f0000002380)="8a329e0cfd41e873eefaed40963e47fe9963cdfa623073b4a785925699e1d6d83530c04cab829a3c08943943ca1e4737f489cc52dc7a155cf4a79b6530bf51aceea8f6e3e70eba27d7d7", 0x4a}], 0x1, &(0x7f0000002440)={0xa0, 0x10c, 0x7, "aea553baa767fe0f4a24af541ba7c7206c3e40e63db0b2265c3a257ba6bdfeb7043287354f07d04907f294b4864d938427fcf662d71288782ab0d5c6ca4f628d8bd8194545035172b576d6bf10959521c1557d06d58e187376712d6cb8b708dad5dc87db4f4707a5c2607aa70a11d4715eac3fa54f3a9336d9a8ff21d86013e75115254ebb1044be10c80fa82c"}, 0xa0, 0xc040}, {&(0x7f0000002500)={0x27, 0x0, 0x0, 0x5, 0x5, 0x80, "a9b583f286e9b1a65a20bc89ff5824a80af2e6ce808b8f93bc398ee006ce892b1152e33202a78e3ba665a4f339aada9c984fbdf05f0313596adadf6eb0ed3e", 0x32}, 0x60, &(0x7f0000002640)=[{&(0x7f0000002580)="f3c5005f2f57882f1290791f765c45e8d7fc89b54a7a4624737f279e739e8f831e8bdaec433a1ba96514114af4c2fc411d252f581fc6425429578f3947d3f9db3a915deb4b5ea9c6d915385d67e09a389b0e3bb8e699c702", 0x58}, {&(0x7f0000002600)="a48db7f16e92615235c73965", 0xc}], 0x2, 0x0, 0x0, 0x40001}, {&(0x7f0000002680)={0x27, 0x0, 0x1, 0x6, 0x1, 0xff, "362b5600b0a955ffef566bdc8cd247ef745b76be1cad3938b4fc103851dafa8b2e2c166353a99d93ce60c13c0a85e335826fcd85c38657d0c67c74f21f2c0d", 0x24}, 0x60, &(0x7f0000002940)=[{&(0x7f0000002700)="c869c26addbb9a837c2a6f9d930ab6f73c5767d0901d05f03fe585c49c65293492913c40891f7ac47df4a0945530c045345b3fa72df0ebfc0df2a9922b04cb7a2d956a8c23b077e5c02baa39b0a724bd6255f8337a2fa575b7f18c5f50b7a4dd8356eea9cbb5ea4b0d3e9df36fabd0933b968c460e26d9b4f98fc50b0c3355df030d4b020a481b1dae4f2c11ccf8d7ab42147892015ee04a6d372bb2bc2fd2895d274f1b81672bf2309ce301b9bac418e55937bb867f059375b16253b59cae063fff1a93a40cea679546cb17546c5c416aa445be61a2c72f7524870f14", 0xdd}, {&(0x7f0000002800)="805880bceba9d42074281afc3f0e0511779dbbbcde8190a6e5d66ea8e5ebca2f0364eb1e072c0fc0e1ba389136f6963472e45fa474bd74aa9eca5643e964bece445cdaf619308bd0c0db5aa923216e11db35b1acea3ea26c4b67a546ef76ec", 0x5f}, {&(0x7f0000002880)="80e7b120d6b97c98813d4e6592ab80fc1e959e7693a9e767b9e6df154b17f60d2f95cccaec96d4bb04e5ca2a96138d719584f0f126e1aab821dfb9c79f95949bc6e3ce3d396a2d18062250f40b5168b858c6492fbc9b444cc2cba0501763852f57b2adaac3f55cb72cedaefe4df8b8b646155dd69183816ae3b6fa94f55676d1a595654c591acbd21843eeed38", 0x8d}], 0x3, 0x0, 0x0, 0x80}, {&(0x7f0000002980)={0x27, 0x1, 0x0, 0x5, 0xff, 0x7f, "e1d6d0077366fba6a8df7aadb4f011a62778d6e19121495d2cc06936ba28e7a2d32206bad4d4ffea7b9057d8020a40f99c0fa83ee808233093df795e6f290a", 0x2d}, 0x60, &(0x7f0000002d80)=[{&(0x7f0000002a00)="376bc363690c7752cc9c4e452f9ef05ce4f7915a435a154266fc5138f910d457054df0950c886f5edec0b3d2bb2c7b5a7fa14af35f29a4c9b11ea36bb6a4d54a4d76107a0dd3f1d342f4d3ba39465dd7aa31261b6e39e6d3447b76c0147dc6ee867372c40d79b97e63d2e2531f7be7e8167ca453dbd04ea75f12cb48219ec11f5d5361ca2730ec0217b3bc3e0152a991de247743cd3bca8efaf0fd77c3c0c1a14ba0", 0xa2}, {&(0x7f0000002ac0)="41d20b316ddc054ebf38cdd56b5f7fd7f056b5af68bb5f4abd78624f9d9a2299c63007c2fae600391e91dd00698cc0ac6678f175352e33c5c206344d0e9543e33dc74c783577c719f0b5dfe7174618591c6729fbd4b2f7500807945aaf370ff6d516527b49b6ac5daa3d614b1d", 0x6d}, {&(0x7f0000002b40)="6c706271d3c85d05105929ed1aee288fb53f74e7dbb9c5e297db2a9aeeb1ae6450e44954f7f03fa27b08d603a3c3b8043a5e56769b5d46d7020b7a913cedfcc5526072bbf414aa74b5dfdf14f997b9c7ee350468e2f10a6afce580d56588bedc0386e8132f9ccee9f437ebcde0a73b666941e32b5004f129cb57e2ff171b0060bccbb3e5e6f1f5a92f6bafb42e18829436f4", 0x92}, {&(0x7f0000002c00)}, {&(0x7f0000002c40)="070d846cebf09243f37029bedf18a0fbaa7665", 0x13}, {&(0x7f0000002c80)="ad7890a69dcb0d3e4de2cc275c1949328f780f98d69d27473f1a05f1a920ee57c47eef5e5da5d0db41a639fcdab756d1940176dd33ca9d39c8c8bc13640f9465d847bfb14e7c2e2b3fd3d056ec73b83018e6c6dd8ab877ef5f8cd857f1515dc37f06694d0184ba31f51e", 0x6a}, {&(0x7f0000002d00)="51d5bcc14b966f1449e6c534563a6fdd34dbe8", 0x13}, {&(0x7f0000002d40)="8fcd527727831e1cd977ff0e88", 0xd}], 0x8, 0x0, 0x0, 0x80}], 0x7, 0x48014) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0xe, 0x4, 0x13a8, 0x0, 0x0, 0x1208, 0x108, 0x108, 0x12d8, 0x12d8, 0x12d8, 0x12d8, 0x12d8, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast1, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'rose0\x00', 'netdevsim0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x0, 0x1, 0x0, 0x0, './cgroup/syz0\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1408) sendmsg$kcm(r3, &(0x7f0000003800)={0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000002fc0)="db4a86bb7b09389ecb043337daf693f7dfaffe0bfc71d3fca032371be2938de25fd7457dc73806b096555feba4eb85b07b145ac06411b08959664892c496cfce98312400487d594da2479e0167da477a32363fd5d3820fa0a7a388880189e9cf6f143dc99e7461b6388e75fc4c33a58a0ddac9df17ce9f849e78297d1db6585bde1d70e67e5ac337b3eef6b724a39422e7189fff12e3e849c0addf240b1a57f47af3426b25368aa1056f788c25b03327371d7ff748ed7413413eb1cbea2bef5f3ee231c2799e1600d7673f53a28effdec5cfe48f54511877b97ffe83f668eed87f", 0xe1}, {&(0x7f00000030c0)="2b95b65c9906a3d3033b525a50d1d841c360a98f5f1593bda079a7e0470b577b35c44b02bb6315e01be51b0f79941275f17f721b8fd56e301c5acbf9809e8b0192e58502986f1b2c53ce606e899b3dafbfab6457b4877e2b4287ea9ccb7b75168b17f7967b4f0f77fd744afee71ac65af46bd19d6d5c5aa60fec47336bc57a3245fd40eeb9479e33ff66446d3a1c8ccd6f3b3f6ef585704123a94defbc9d52d977ed6cc7cbde922e6ec7d746b2a39b6044dc009312f49430b4fe5bebf37b1a16dc46ad858389769b386f2aeb5a533b011c73b3b9cc444349e21124eb574f0446d4d3a6ec03", 0xe5}, {&(0x7f00000031c0)="22dc7d4c23bde99b107b23d031cc85ae9ab5e0d59a871a7bff689bff3deed538f3d49dc9c1ce326d75f9e82e841d24c0ac7b3b60e37203733a8deb3be280c25e62e360fc809d15932061d3553cffac7af2dfbcc26353a8efa78e802c377bf0ac84062891f415e5d763f78e4d04f06a817a0a5c784290ff48e2b2ad3313701d7e41e7e1f92ff450c7a699", 0x8a}], 0x3, &(0x7f00000032c0)=[{0x78, 0x112, 0x3f, "2d099ca1a094359ca3e427e269d076a419f9e021f16381c68c48a444809a540576ebd5c35471152da859c804165db7ea2777c52d137057c53d966f78d7a3e4dd9e2aa2dbb1f5fc0afb798e223251ee98ebe754280b127725213f9aff971cd9767d2aec48"}, {0x40, 0x108, 0x3, "1b15745745642c1de9407b375b6a94a368f6d3b2d6be2884aa522fd8c8ed3a872d5ee7b15cad1c12e1534ac817bd03"}, {0x110, 0x0, 0x6, "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"}, {0x108, 0x0, 0x461c, "0556cc57ba6732e0458b5b95cbf9c282a83d1e089ba4cc451e6f89079e675cc84d7109560694774329ee04eac7580aacc3e265dcbf4328816ef2bbb23ca07638c1700a5648d745786870e8f82c471e4d8f0d5194c6258e0b058fa158e448c51a1a90e75e47d87ac1c87986b85c8722624a8a564102801463bb55b7b8f99079ab46cf5bea772082babe97c0aba03e633fc9110cad9de0117ac0c19b7d11751a9440d3828e93f698a0530a82213685eb608196c5594cdc38936bf4a8cd79114f24130ab0e4bafb91ff48059e260ed3f951e06a02008baf74e3ceb10d92927b6e2dd0e4ce80466937944e21c947883ac1a2ebd2866f994277c0"}, {0xa8, 0x114, 0x2abf, "40f79bdd6d8f1835ba87d17bd4f64302a97270c213f7c8921af19ebdb1764d00d0ea2e5feac16209fbff314344bc2cc5bcfced7c1ddcb2b59291da21ca16386d603b62c13c84c9faa4b0906570a543e5d4eec2d94f8a6aaba98898f0bcf2c040b9dab98fe1e5f7c3fa26a94dc649090453cd10d26b443aeecf065f8b4a5c7baeb5134ad1c79660ffe474bdb4e9ae12cbc946277b64"}, {0xc8, 0x119, 0xe3, "aa63a516fc8a19ccc51f09a9441e474ea4a6f0f0e0ce27426c0ef2beeb0944fb5c44313f80bb876f34cc770a39aeb6972c99f84e5428abdfd4cfa1e8f2f4966ac953b8d6f59b16a0c78d735ba6c2031a3106c5127af43a3a81c2069978cfc538b563088fd9632ce1c32afbfc5d7e097847fc09cfc21f13e630bf16b5bb2ed7a98c8b4f98ab1398a83eed9970f72c76e078abac6110f0e87639ac82f7191535962938a8f6bde4f54e2d374b1d901886b33f72a734f2a9065c"}, {0x40, 0x112, 0x10000, "2e52c5b7f858968d86d8494296804c538c4897b3a3cddd81487dbb15bc339c449b93e9c5670a9fa43023050683"}, {0x98, 0x6, 0x0, "574331b61073906c7737e8425406637449f28dceda118fab6b31171a012a0df7846a0c97ce06012d13532b597e846f8e0722a75efbb356d4abebc68ae259acedf9c4f7457643ccd75b8d1e39b88d71b0b263b2b631e7dac8d26a356e992f5b840bfcf9cd863c688bb172fb8aff94cd9e3e2de4c36e052e7457b3ec6ddcc67d268cfca584a79e"}], 0x518}, 0x810) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000003840)) 00:32:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000780)=[{{&(0x7f00000003c0)=@can, 0x80, &(0x7f00000006c0)=[{&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000440)=""/230, 0xe6}, {&(0x7f0000000540)=""/126, 0x7e}, {&(0x7f00000005c0)=""/68, 0x44}, {&(0x7f0000000640)=""/90, 0x5a}, {&(0x7f0000000ac0)=""/228, 0xe4}], 0x6, &(0x7f0000000bc0)=""/106, 0x6a}}, {{&(0x7f0000000c40)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000e00)=[{0x0}], 0x1, &(0x7f0000000e40)=""/89, 0x59}, 0x9}, {{&(0x7f0000000ec0)=@tipc=@id, 0x80, 0x0}}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1c) io_submit(0x0, 0x0, 0x0) socket$inet(0x2, 0x803, 0xa0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x1, 0x0, @private2={0xfc, 0x2, [], 0x1}, 0x40000000}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg$inet(r4, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1b1, 0x0) socket$inet(0x2, 0x0, 0x9) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) [ 227.269802] misc userio: Invalid payload size [ 227.415751] binder_alloc: 9199: binder_alloc_buf, no vma [ 227.500561] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 227.546421] binder: 9199:9204 ioctl 5411 20003840 returned -22 [ 227.607996] binder_alloc: 9151: binder_alloc_buf, no vma 00:32:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xff, 0x80, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @local}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\t\x00\x00\x00'], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r3], 0x0, 0x0, 0x0}) sendmsg$AUDIT_TTY_SET(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x3f9, 0x4, 0x70bd2a, 0x25dfdbfd, {0x1, 0x1}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) syz_open_procfs(0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000080)) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) 00:32:01 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x189302, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04770440"], 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b63c71394b78babb20000"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) ioctl$KVM_S390_INTERRUPT_CPU(r6, 0x4010ae94, &(0x7f0000000180)={0x1, 0x800, 0xf1a}) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x400, 0x0) write$tun(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbb000101000000ffff4500001c0000000000029078640101020000000000009078ffffffff"], 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 227.788951] binder: 9170:9179 unknown command 162 [ 227.794306] binder: 9170:9179 ioctl c0306201 20000280 returned -22 [ 227.825235] binder: 9217:9224 unknown command 9 [ 227.830458] binder: 9170:9171 ioctl 40045569 9 returned -22 00:32:01 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 227.839213] input: syz0 as /devices/virtual/input/input6 [ 227.851196] binder: 9217:9224 ioctl c0306201 200000c0 returned -22 [ 227.869027] binder: 9217:9224 unknown command 808464432 00:32:01 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x20, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000), 0x8) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:watchdog_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x13}}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x20040080) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x8}}, [0xeb4, 0x1, 0x0, 0x6, 0x9, 0x800, 0x2b8, 0x8, 0x101, 0x100000000, 0x3, 0x7f, 0x4, 0x5]}, &(0x7f0000000300)=0x100) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x20000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='mountstats\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 00:32:01 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)="6daa61850e4cbe2f067f0085ab2652c1121c36c43f50c79cdc0830564093d7df5d910e766317eaea5029051de6c22a38466757e864bd43bc06faaa8e1e552ff5378d9c18e79326a2875e3879a874962d5d35a96da6dbc30e29b728b36074b58b255232e372757c829f508b6158c26f0c618b903a4cf2d5eb6e1710b53533e0c0dc971fe95a3e8ae7c05fbf2257101f5f2a29c635d788b0dee99b425fc4cab54a22af6e60e5d76e0d52eddb9154c91b5eda1bdc24ec6d7dba5f7aa5f4acf4c8f116502a0b1b98c6db9214dcff2b5a3e44af7642ab58a20a7e88238825cdcf9396ddfe", 0xe2) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) mkdir(0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000580)) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000008440)=[{{0x0, 0x0, 0x0}}], 0x4de, 0xff00) [ 227.904892] binder: 9217:9224 ioctl c0306201 20000280 returned -22 [ 227.934059] binder: 9217:9240 unknown command 9 [ 227.938830] binder: 9217:9240 ioctl c0306201 200000c0 returned -22 [ 227.948992] binder: 9217:9240 unknown command 808464432 00:32:01 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000540)="335d96dc96ef98a9f1fe9b420e8fbe2e6b2b6af217ed5cb08d41f9193faa215964a118df2f1633b2fc921ed026760dcad6a138c5a2e9", 0x36}], 0x1, 0x0, 0x1d8}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x351001, 0x20) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r3, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000003c0)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="a20482b35fcf2c560d1fb85852ff7ae160b4d5195c489b62307583adf228fea1557887a3119c36062227a0d1fcfafe8cf5b778a669a25cdf9790761e755aae5e457ec40a186f127d5330685288d3c246f836610bfc20db754f13a0f0709c9366242c9e113524eb513990d642218dc1a45da4c23a8b658ea92e8484a868d51f654689844c97934839fcd45aeacc2307d8c61442f6b7b6b6bc6cfa424d75e352e6950f849d6e233578053b32be167973e9181c7927aa1df1ce259a382a2869afe7d29aa7d077b90dc551cf69e1726ce0f3f5eef40700d0c6328d233728ab232ad1d63f64e5fe16b256c8da7e2aa3c8c051383a7c8bb8"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\vk\x00\x00'], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x4e0, 0x11, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0xf}, {0xb, 0xa}, {0x0, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x24, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff1, 0x4}}]}}, @filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x14, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x2, 0xd}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfffd, 0xffe0}}]}}, @filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x42c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x2, 0x7, 0x8, 0x3, 0x52c7, 0x7f, 0x2, 0x9, 0xf45c, 0x5, 0xfffffffd, 0x3ff, 0xffffffff, 0x5, 0x8, 0x0, 0x4, 0x7, 0xc567, 0x6, 0x400, 0x81, 0x6, 0xfffffff8, 0x9, 0x6, 0x6, 0x200, 0x6daf, 0x800, 0x40000, 0x10000, 0x80000001, 0x5, 0x7b, 0x0, 0x40, 0x7, 0x2, 0x924, 0x9, 0x2, 0x0, 0x0, 0x23, 0x81, 0xb, 0x7, 0x1, 0x3ff, 0x8, 0x3, 0x8000, 0x42b5, 0x8, 0x20, 0x400, 0x1000, 0x7e, 0x3, 0x1, 0x8, 0xd1, 0xf9b, 0x41c7, 0x9, 0x6, 0x5, 0xffffffff, 0x7, 0x5, 0x1, 0x9, 0x3, 0x40, 0x9, 0x8, 0x7ff, 0xfdc7, 0x7, 0x7, 0x3, 0xff, 0x31, 0x5, 0x4, 0x4cb66224, 0x200, 0x4, 0xffffff74, 0x70000000, 0x6, 0xbf, 0x8001, 0x3f, 0x3, 0x9, 0x8cd, 0x20, 0xc, 0x7, 0x3fe, 0x5, 0x4, 0x6, 0x10001, 0x6, 0x1, 0x4, 0x1, 0x6, 0x5, 0x6, 0x1, 0x555, 0x81, 0x7f, 0x0, 0x9e3c, 0x80000001, 0xfffffffa, 0xff, 0x9, 0x2999, 0x0, 0x8000, 0xffffffff, 0xc2, 0x7fffffff, 0x101, 0x0, 0x3, 0x99, 0xdfc, 0x7, 0x2, 0x80000001, 0x4, 0x9, 0x4, 0x0, 0xffffffff, 0x8001, 0x2, 0x7, 0x4, 0x1f, 0x7fff, 0x5, 0x58724f06, 0x5, 0xfffffe67, 0x4, 0x7fffffff, 0xf, 0x13, 0x8, 0x4, 0x81, 0x8, 0x80000001, 0x1, 0x4, 0x2, 0x9, 0xb, 0xffffffff, 0x9, 0xbf, 0x6, 0x80000001, 0x1ff, 0x2a, 0x202, 0xfff, 0xffff8000, 0xff660be, 0x7, 0x5, 0x6, 0x7, 0x0, 0x0, 0x80000001, 0x200, 0x8, 0x1, 0x1, 0x8, 0x0, 0x3f, 0x2, 0x1ff, 0x6, 0xe89, 0x200, 0x3, 0x8, 0x0, 0x8, 0x400, 0x7, 0x1, 0x3, 0x3, 0xffffffd6, 0x8, 0x6, 0xfb9, 0x0, 0x7, 0x4, 0x9, 0x6, 0x2, 0x8, 0x8, 0x103c0, 0x8001, 0x800, 0xff, 0x5, 0x9, 0xb, 0x0, 0x80000, 0x9, 0x2, 0x80000000, 0x1, 0xfffffffa, 0x5, 0x1ff, 0xffffffc0, 0x6148af16, 0x6, 0x0, 0x4, 0x3, 0xffffffff, 0x4, 0x0, 0x6, 0x3, 0x5a9e337a, 0x5, 0x5, 0x6, 0x6, 0x8, 0xff, 0x6, 0x8000, 0x87f2, 0x41]}]}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_MASK={0x8, 0x6, 0x401}, @TCA_FLOW_XOR={0x8, 0x7, 0xea15}, @TCA_FLOW_MODE={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x1000}, @TCA_RATE={0x6, 0x5, {0x8, 0x3f}}, @TCA_CHAIN={0x8, 0xb, 0xeb}, @TCA_CHAIN={0x8}]}, 0x4e0}}, 0x4000) [ 227.965881] binder: 9217:9240 ioctl c0306201 20000280 returned -22 00:32:01 executing program 3: r0 = fanotify_init(0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000005f80)=ANY=[@ANYBLOB="046304407278d154ad503564654df9387d76b527b6f27de77de954d4f700004dfc78622651667aff724c998b5a7a29558947d4caea4fc2af43ee842cc09b2b351b8eec104294148f5963a6119d4955196eff74a21b419e93744f9aaebf042df2404cbb3b2bdfed2dc9bb8d328446e21c85a6cd12a298720066fd220e739c34ff950f73211cdb56e89908cec000f508b63a7300f6c550b1ab5436df5f39ae1b51c31ee8adb19413222cebe077b10215cde6c1945a2a00c34bac3dac0a4b0c057873e33b2c65912c83ee4c9055e59e8ef3"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r4 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x9, 0x4000) ioctl$EVIOCGVERSION(r4, 0x80044501, &(0x7f0000005e80)=""/213) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req={0x400, 0x1d68, 0x1, 0x3ff}, 0x10) recvmmsg(r3, &(0x7f0000005c80)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000380)=""/69, 0x45}, {&(0x7f0000000400)=""/124, 0x7c}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/253, 0xfd}, {&(0x7f0000001580)=""/26, 0x1a}, {&(0x7f00000015c0)=""/4, 0x4}, {&(0x7f0000001600)=""/68, 0x44}], 0x7}, 0xfaf2}, {{&(0x7f0000001700)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000003880)=[{&(0x7f0000001780)=""/238, 0xee}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/4096, 0x1000}], 0x3, &(0x7f00000038c0)=""/97, 0x61}, 0x5}, {{&(0x7f0000003940)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000003a00)=[{&(0x7f00000039c0)=""/5, 0x5}], 0x1, &(0x7f0000003a40)=""/124, 0x7c}, 0x7}, {{&(0x7f0000003ac0)=@nfc_llcp, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003b40)=""/49, 0x31}, {&(0x7f0000003b80)=""/151, 0x97}, {&(0x7f0000003c40)=""/25, 0x19}, {&(0x7f0000003c80)=""/121, 0x79}, {&(0x7f0000003d00)=""/31, 0x1f}, {&(0x7f0000003d40)=""/181, 0xb5}, {&(0x7f0000003e00)=""/231, 0xe7}, {&(0x7f0000003f00)=""/62, 0x3e}], 0x8, &(0x7f0000003fc0)=""/210, 0xd2}, 0x43f}, {{&(0x7f00000040c0)=@nl=@unspec, 0x80, &(0x7f0000004400)=[{&(0x7f0000004140)=""/190, 0xbe}, {&(0x7f0000004200)=""/53, 0x35}, {&(0x7f0000004240)=""/164, 0xa4}, {&(0x7f0000004300)=""/27, 0x1b}, {&(0x7f0000004340)=""/174, 0xae}], 0x5}, 0x20}, {{&(0x7f0000004480)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000005840)=[{&(0x7f0000004500)=""/44, 0x2c}, {&(0x7f0000004540)=""/9, 0x9}, {&(0x7f0000004580)=""/181, 0xb5}, {&(0x7f0000004640)=""/194, 0xc2}, {&(0x7f0000004740)=""/65, 0x41}, {&(0x7f00000047c0)=""/112, 0x70}, {&(0x7f0000004840)=""/4096, 0x1000}], 0x7, &(0x7f00000058c0)=""/168, 0xa8}, 0x9}, {{&(0x7f0000005980)=@l2, 0x80, &(0x7f0000005c00)=[{&(0x7f0000005a00)=""/198, 0xc6}, {&(0x7f0000005b00)=""/208, 0xd0}], 0x2, &(0x7f0000005c40)=""/61, 0x3d}, 0x3}], 0x7, 0x10000, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000005e40)={0x4, [0x0, 0x7, 0x8, 0x7ff]}, 0xc) r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x9, 0x48000020, r6, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) [ 228.049810] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 228.077419] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 228.152324] binder: 9250:9265 unknown command -1283324766 [ 228.219987] binder: 9250:9253 unknown command 27403 00:32:02 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xc60}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bind$inet(r2, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8ae0dfc300000000000000ed8ba26f305d812899d7555be10845233eece99725393139c9ba31bccc9a38a8d0318b590a5ee81b96eae232"], 0x0, 0x0, 0x0}) dup2(r7, r6) fcntl$getown(r6, 0x9) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 228.253174] binder: 9250:9265 ioctl c0306201 20000200 returned -22 [ 228.268440] binder: 9250:9253 ioctl c0306201 200000c0 returned -22 00:32:02 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f0000000440)={0x5, 0x70, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x9}, r0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x37}, 0x8000000200006117, 0x0, 0x0, 0x1, 0x100000001, 0xd34, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="04630440", @ANYBLOB="b8023d6b5578d7f14aeb7c9ab67c7f9a2b766685c8d8157b4e6b415e34a69b50b6c2f7df730d10d3149a8b5e599e08077e3b941292fd75df0a4ef8fba5971254a8829b3e91113c48b927b5421a9e886b2571f78d8ba51d906d93300dc72fecc9b714635cd6892e04b6e97c64668bcfcfc135d37817e773685cfc3209be18889b29a4dd0026b6de61f483fb210a7ba959e2c62cfdbccc510079e5cf9ff2a3370d9c46b694a501e02ac292e2394fb6b21ba056c864fd42e304128a73d28c6c7c29a8592db77829eb2038140c7929d57b7f11d26e6affe9392635a23c2c9bb4a53ed17e3aa0fc8d5d8f9f2a0e798c5d117450376ef0fc69"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b63003be171d7102bfab6b36dffe4380b6a53ba82831e4abe3c78c2af45b4213d50cc3534b075fa65898cd0c7d956ba2fe3e7ef0e6f20a7cd07955036e99977515d94092b2efe89ed0c9ca3b37fd335a2d8d1b833017f0adc2edecfbf8963b1500b4afaab618c084381cf2596ac3c1fbc0390cb1dd2b9c4d2572993a22e6626f7b5b479f81f5312af2257cd3bd337d51351de50bfdb18c32374cd5a21fd5f881582b21dc2b7110ef5abfbda3a0aa742e13d2a973272fb33f7c3f07ff7a085dc27878cc500402256ce372b7180f761e54962eea3031b0bb64b0df9cfb86ca1ac2a2891ac1630a09fe81bd463"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000001c0)={{0xa, 0x4e21, 0x584e45bb, @private2={0xfc, 0x2, [], 0x1}, 0x81}, {0xa, 0x4e22, 0xfffffffd, @private2={0xfc, 0x2, [], 0x1}, 0x6df}, 0x101, [0x100, 0x3, 0x7fff, 0x0, 0xffffffff, 0xea05, 0xaf6, 0x9]}, 0x5c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748c", 0x5, 0x1}], 0x100488, 0x0) r4 = inotify_init() mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x2010, r4, 0x2d20c000) syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x200, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 228.322355] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 228.336736] binder: 9274:9275 unknown command 989881099 [ 228.342337] binder: 9274:9275 ioctl c0306201 200000c0 returned -22 [ 228.365480] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 228.365589] binder: 9250:9269 unknown command 27403 [ 228.386338] binder: 9250:9269 ioctl c0306201 200000c0 returned -22 [ 228.398558] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=00000000) [ 228.411669] binder: BINDER_SET_CONTEXT_MGR already set 00:32:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x202b008, &(0x7f0000000340)={[{@quota='quota'}, {@wsync='wsync'}, {@gqnoenforce='gqnoenforce'}, {@bsdgroups='bsdgroups'}, {@nolargeio='nolargeio'}, {@logbufs={'logbufs', 0x3d, 0x2}}, {@nolazytime='nolazytime'}, {@largeio='largeio'}, {@grpid='grpid'}]}) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630040"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, r6, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x30}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(r7, r7, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x16, 0x2, 0x70bd26, 0x25dfdbfb, {0x8}, [@nested={0x4, 0xa}, @typed={0x8, 0x8c, 0x0, 0x0, @fd}, @typed={0x8, 0x89, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x80, 0x0, 0x1, [@typed={0x8, 0x4a, 0x0, 0x0, @uid=r7}]}, @typed={0x8, 0x30, 0x0, 0x0, @fd=r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040810}, 0x1) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r6, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x80}]}, 0x34}}, 0x8080) [ 228.421722] binder: 9250:9253 ioctl 40046207 0 returned -16 00:32:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x84) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000020603e40000000000000000010000000c000300686173683a69700005000400000000000900020073797a3100200000050005000200000005000100060020000c000780080006400011"], 0x50}}, 0x0) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe0, 0x0) 00:32:02 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x6, 0xfffffffd) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000001000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400104, r3}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000140)={'security\x00'}, &(0x7f00000000c0)=0x54) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast1, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) [ 228.475744] binder: 9274:9275 unknown command 989881099 [ 228.482074] binder: 9274:9275 ioctl c0306201 200000c0 returned -22 [ 228.519542] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=00000000) [ 228.520730] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:32:02 executing program 5: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) syz_mount_image$btrfs(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x5, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000300)="fc7d0fd27256fb6c2e589417cca834d416fa0517cf1fb10080cf8dac36eefce1d4c5a7ffd3ccabd0226c928ed20ed774c60b9d0f921fc0337d6022eb9f885752db71675d05d7b330475d32075721b80afe972515eb0880dbf2f0a1ff71f2a69d6eaf77b2ffef431421bb9e40ff0d56ea59f574c0f1447365e0352d0800d0ffb49d9cc774e78ad883989188c28dec1c5b34b632b835f2733b8e821337e4833d3caf58086b5645eda6889baf2b75b4b10444955cc8dfd611c0ee4cd1c515ff7129a87dc7a94535b73ae4bd5370bfe644e7efdc12ec10a6bd17d513b76471", 0xdd}, {&(0x7f00000004c0)="54c0d309a96371b1f6bdaa8e4e7cb1ee73238c4f513ae064c8775e92e5cbbd3837dadb6d518ec59f81baeda8ed852eaeb4ea843290ae721b80fb1677d4c53c3fc3883ece0875ad652cdbaf9ebc3c1dec23ec776b666cfbe8ae9c4c1793bb349e1c853d907c22e32f989600889427262c3c76d8b63f7b8ba5e128a261a3dacdc312edf9879bf34e92a073c167d31d2dbc3b75a4a61516adaa0a664c9e0525e68cf6e5a00558ea8eadbc732cea5ee14a12522acf8b9cdce95e6e184d25955b7532eace062bdd73d42a4d8422", 0xcb, 0x6}, {&(0x7f0000000400)="9c3ebaa2b0619923b1360804ecddc6205073ba00006ba287986f9d4d3ffb", 0x1e, 0x9e4b}, {0x0, 0x0, 0x8}], 0x150002, &(0x7f0000000180)=ANY=[@ANYRES64]) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000700)={{0x1, 0x0, @descriptor="4483d46a6d87e93e"}, 0xb7, [], "98c8095d4ad38ec7035a5f3f17f09f837df07c81aea040750e5810500f403c00c344e3b7b9e792a444bb58789637050436a6736cc180901da9d310e7589c859f2ea373d60a0c41697a92d15c9e650d17edb76117feff47a14ffd79f0ea1746ea1029c5b8af302838b74831dcb72d5208e13ea23abad862bffecbbf3df49b364dec752f3aba605f990e6596bc3cda6124cf781add45e73582ad049556db0e23d96d697dbac12658f69776698b6f82f838ff8a6a6f544aef"}) fallocate(r2, 0x0, 0x0, 0x1000f3) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000012c0)={0x2, 0x0, @rand_addr=0x40}, 0x10, 0x0}}], 0x1, 0x804) ftruncate(r1, 0x8200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x8}, 0x8000, 0xdf, 0x0, 0x6, 0x0, 0x74a3be8f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') pipe(0x0) socket$inet(0x2, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) [ 228.563399] binder_alloc: 9293: binder_alloc_buf, no vma [ 228.603344] binder: 9293:9305 ioctl 8912 84 returned -22 [ 228.641743] binder_alloc: 9297: binder_alloc_buf, no vma 00:32:02 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) getsockopt$inet6_opts(0xffffffffffffffff, 0x6, 0x8, 0x0, &(0x7f0000000040)) syz_mount_image$xfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x22080, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x103, 0x0) perf_event_open(&(0x7f0000000740)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:32:02 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000003e000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="046304400d79e5fd9b3f072a5367f958094daba720b4e9bc62bd3e7d31dfa5c3a8c284d059515e00584081d53fb16087de2fd64318cceeb3d21093611d30a15cd9fa8b2b161b0f56000000"], 0x0, 0x0, 0x0}) r5 = dup2(r4, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$sock_netdev_private(r5, 0x89ff, &(0x7f0000000140)="06f32e9e") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 228.799283] audit: type=1804 audit(1590107522.732:45): pid=9329 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir207641660/syzkaller.NN2tbs/38/bus" dev="sda1" ino=15854 res=1 00:32:02 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x4) recvmmsg(r1, &(0x7f0000002580)=[{{&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000200)=""/101, 0x65}, {&(0x7f0000000480)=""/126, 0x7e}, {&(0x7f0000000140)=""/7, 0x7}, {&(0x7f0000000500)=""/143, 0x8f}, {&(0x7f0000002800)=""/34, 0x22}, {&(0x7f00000005c0)=""/131, 0x83}, {&(0x7f0000000280)=""/9, 0x9}, {&(0x7f0000000680)=""/140, 0x8c}, {&(0x7f0000000740)=""/99, 0x63}], 0xa, &(0x7f0000000880)=""/25, 0x19}}, {{&(0x7f00000008c0)=@generic, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/95, 0x5f}, {&(0x7f00000009c0)=""/157, 0x9d}, {&(0x7f0000000b40)=""/6, 0x6}, {&(0x7f0000000b80)=""/192, 0xc0}, {&(0x7f0000000c40)=""/145, 0x91}], 0x5}, 0x4}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)=""/225, 0xe1}, {&(0x7f0000000e80)=""/131, 0x83}], 0x2}, 0x4ac}, {{&(0x7f0000000f80)=@alg, 0x80, &(0x7f0000001040)=[{&(0x7f0000001000)=""/20, 0x14}], 0x1, &(0x7f0000001080)=""/152, 0x98}, 0xb3}, {{&(0x7f0000001140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001480)=[{&(0x7f00000011c0)=""/94, 0x5e}, {&(0x7f0000001240)=""/170, 0xaa}, {&(0x7f0000001300)=""/87, 0x57}, {&(0x7f0000001380)=""/219, 0xdb}], 0x4, &(0x7f00000014c0)=""/252, 0xfc}}, {{&(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001640)=""/137, 0x89}, {&(0x7f0000001700)=""/198, 0xc6}, {&(0x7f0000000400)=""/49, 0x31}], 0x3, &(0x7f0000001880)=""/159, 0x9f}}, {{&(0x7f0000001940)=@alg, 0x80, &(0x7f0000001b00)=[{&(0x7f00000019c0)=""/125, 0x7d}, {&(0x7f0000001a40)=""/103, 0x67}, {&(0x7f0000001ac0)=""/41, 0x29}], 0x3, &(0x7f0000001dc0)=""/108, 0x6c}, 0x8}, {{&(0x7f0000001bc0)=@tipc, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001c40)=""/121, 0x79}, {&(0x7f0000001cc0)=""/198, 0xc6}, {&(0x7f0000002840)=""/80, 0x50}, {&(0x7f0000001e40)=""/72, 0x48}], 0x4, &(0x7f0000001f00)=""/218, 0xda}, 0x100}, {{&(0x7f0000002000)=@tipc, 0x80, &(0x7f00000022c0)=[{0x0}, {&(0x7f0000002100)=""/164, 0xa4}, {&(0x7f00000021c0)=""/45, 0x2d}, {&(0x7f0000002200)=""/168, 0xa8}], 0x4, &(0x7f0000002300)=""/29, 0x1d}, 0x3f}], 0x9, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000236fc8), 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$P9_RGETLOCK(r3, &(0x7f0000000a80)={0x24, 0x37, 0x1, {0x1, 0x80, 0x640, r0, 0x6, 'cgroup'}}, 0x24) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000002340)=ANY=[@ANYBLOB="05000000000000000000000000000000000000000000000000000000000000000000000000009a09979500000073771303f5b8a8f2c6b730b7585126fe0000000000000000000000000000000000f40000000400000000000000000000000000000000000000000000f1ffffffffff0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/208]) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @local}], 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 00:32:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() getpeername$llc(0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000140)=0x10) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180), 0x10, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB], 0x48}}, 0x4000c40) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x400100, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg$inet(r4, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1b1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000c80)=[{&(0x7f00000001c0)="072a9b84", 0x4}, {&(0x7f0000000600)="d0c0561909a8460cd66e7ec1d756f75406ee155e6d7ee5ea4cc92a7b473061518d4051edd7c20392f15964228e77af198f6d", 0x32}, {&(0x7f0000000780)}, {&(0x7f0000000880)="bf33fa46e47bbf440978349f3e8fdf8bab088bd5b4b6e99c13a10eb2975e002bc202808d4b7abb3d97160bf315a34692f7d836f992449958b889225753830df0d9a87068c5421e0e1a357c24d5e4a17555fc56de20dcd8121d22f3d8594fe4a408c2a4dc3e86eeb5c99aec69d707e3b13cff2fa4aff9793e71bd1fd8bfed6bc454a0bf3feec17a23abdc019f645d3116d1c11fcfbe576c1b36df7b65e0c0242053f271d5b0e2e9eceafcf51f069ae4ece45924f0eb", 0xb5}, {&(0x7f0000000a80)}, {&(0x7f0000000b80)="3452616c7690a1162bf4035b6262e89c6c1b24cfe0658c1c82fe703487675b1d30d38d481915652284f49597ca87879f62b8db9b91567c35ab7a20291ab8a22f3354ccdaa5499a6c832d2fde9e519cc635c4210070e6257e30d688717e84e6da45d0a6d0cbce3f09b12aee8bb4f043aa2b9ea79bde6adba5201e66ae6dc909a7e3fa6c0832283ad0b284d63e2e81b3376d960ed4f8b437a4cf696d6dd10dc53f7dbcecd4db0072dac153d2ca76672d5dd18c5d294e9c989136ffc027524d6fc1c7cdaebac854e50063ab19d8a9bc4d8b9ace37a836e2af64f5d61288441db3d8f2ff8444f2880274cae1dd7195efd3", 0xef}], 0x6, 0x3) socket$inet(0x2, 0x0, 0x10) fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) [ 228.955283] audit: type=1804 audit(1590107522.822:46): pid=9329 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir207641660/syzkaller.NN2tbs/38/bus" dev="sda1" ino=15854 res=1 [ 228.999441] audit: type=1804 audit(1590107522.922:47): pid=9329 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir207641660/syzkaller.NN2tbs/38/bus" dev="sda1" ino=15854 res=1 00:32:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x80000001}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x0) lseek(r5, 0x4200, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) dup(0xffffffffffffffff) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000000c0)=0x1, 0x4) open_by_handle_at(0xffffffffffffffff, &(0x7f00000019c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYRES64=r6], 0x0) sendfile(r5, r7, 0x0, 0x8400fffffffb) 00:32:03 executing program 4: r0 = gettid() clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000780)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86\x06\x00\xf1/V\x8c\xecR\xb2\x1b\x99vS\xa6K&u\x9dX\xcc\r\x12\x01\x00\x00\x80\x00\x00\x00\x00E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\xaf\xfdj\x83nj\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c\xdc\xa8\xd30HX\xe9\t\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89m3\x1d\x1c@\x8eu\x85\xce\xaf\xa6\x96\xa2\x13\x1f-\b\xcf1J\xd9\x13Q\x94R/\xdf\x1e\x9e\xe57\xda{\xe1D+\xf35\xcbH\xe6\x0f\xe0]\xef\x8b\xcdk\xfe\xf6\xcc+rp\xd5\b~\xf6\xa2\x87\xed<\xc2bO\x88\x03n% \x00\x00\x00\x00\x99\xdd\x80\x03\xec@\x9f\x8elx\b\xf1\xb4^X\x99\xbb\xa0\xf5Bx\xa9cT\f\x99\xbf\xb5\xebj.t\xa2\xaeM\x9c\x14_\x19\xe1\xe0H\x16\xedi:\x00\x00\x00\x00\x00\x00\x00\x00\xca\x97\xba\xf2\x1b\xeb\xa5h\xeb\xb0\xc0xe\xa3\x12\xcb\xe7\xd8\xa2nBP\xaf(\xb0\x8a\xdb\xa2`\xf1\x84\x05\x8cK\x8b\x93\xe9\x9f\xf6\xfd\xb49|\xb1\x1bF\toBx\xd6\xad\xfdF\xee8\xca\x95|\xe2\x84\x11\x1c\x81M\a\x04\xd6\xd1\xed4\xc8\x82\xf2C\xf61\x93X8\x99M\xf1B\xac\xd7\xc7\x1d\x8f\xb2\x80\xf4\x1a\n\xe5\x8e\x80x^k\xfc\n\xd9?g\xa2\x7f!\xdf,\x7f\xa2\xa43\xd3h\xfd\xe7\x1b\x148\x191M\xf4O\xd1%\xa55\x9f[CBF\x00T\xf0\xdf\xe1\xfdK2(cy\x18K\xef\xfe\xeb\xdf\xc9cX\xf4\xf9\x91._\x9b%\x1a[\xa9ql\x19\xf1\x9bYF\x1e\x90\'\xe5\xd2\x19\f&{\xdb\xdd\xef\xc4j\xf4@\x8bc\xec(\xb7\xdb\x85\xa3v&;\xaf\xd9\xed$\x9f\x1b0\xad|\xb7&\xbb\xcd\xae\x85\x1c\x865\xb7\xd4_r\xf1\x11\b\xcd\xba\xc3\xc3XzZ\xe5\xa3\xdb\x98\xf5h\xbf\xc7J\xe8Z\xfdO\xd5Q\xd8\xd5\xa3\xff\xb3\x10\x98\x1f\xb2\x84\xbdX', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000280)='./file0\x00', 0x1, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000300)) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/13], 0x0, 0x0, 0x0}) r4 = dup3(0xffffffffffffffff, r3, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r4, 0x80045700, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 00:32:03 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x44a80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3089}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd3, &(0x7f0000000000), 0x3c) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@dstaddrv6={0x20, 0x84, 0x8, @private2={0xfc, 0x2, [], 0x1}}], 0x20}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={r3, @in6={{0xa, 0x4e20, 0xfff, @empty, 0x10001}}, 0x5, 0x910, 0x5, 0x9, 0x3ff}, &(0x7f0000000000)=0x98) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000180)={r4, 0x200}, 0x8) chdir(&(0x7f0000000540)='./file0\x00') r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000001b00)="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", 0x1000) [ 229.481346] audit: type=1804 audit(1590107523.412:48): pid=9378 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir207641660/syzkaller.NN2tbs/39/bus" dev="sda1" ino=15866 res=1 00:32:03 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, [0x0, 0x3, 0xb939, 0x8, 0x80000000, 0x8, 0x7fff, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x8, 0x0, 0xfff]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000380)={0x0, 0x800002, 0x9, 0x288, 0xb, 0x2, 0x8, 0x5, {0x0, @in={{0x2, 0x4e23, @loopback}}, 0x5, 0x2, 0x8, 0x4, 0xef}}, &(0x7f0000000240)=0xb0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r4, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r1, r5, 0x0, 0x10000000000443) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x3fb, 0x400, 0x70bd28, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) [ 229.743220] binder_alloc: 9390: binder_alloc_buf, no vma 00:32:03 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0xffbf, 0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000100)=0x1, 0x4) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x2, 0x8003, 0x80400001, 0x9}, 0x14) shutdown(r0, 0x1) dup(r0) socket$nl_route(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7) socket$packet(0x11, 0x0, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x15) pipe2$9p(&(0x7f0000000040), 0x80000) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4}, @IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x30}}, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180)={0x27, 0x0, 0x2, 0x3, 0x2, 0x80, "6f2c25b39a66e9da5ab1d596d88815c673efec869190eb31b6c8ac47a23fd4f8e83ec0e4f7c143b490c257557dc85039debe2ed183fe4c2be97a7cf36b8953", 0x3}, 0x60) 00:32:03 executing program 5: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xc9, &(0x7f0000000080)={0x0, 0xffffffffffffff7c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2f0000001800030007fffd946fa283bc8020000000040005031d8568130009000122000016ccbb24e0710b42fa3ccc", 0x2f}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f00000000c0)=0xfa, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140), 0xcc, 0x0) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x19, 0xe4, &(0x7f0000000180)="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"}) 00:32:04 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/dlm-control\x00', 0x80000, 0x0) io_submit(0x0, 0x5, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x401, 0xffffffffffffffff, &(0x7f00000000c0)="60bf7b0de4b2f448a49ad17bf40639644ac04e508e152eb8c1a924fead94097d225369916a3b86b567ababff7296b879380936691c417b000df3c59d496fb0cb098442530614612d9ca9e46321eafd1e12008c8f8a3ba77ec0e79932e29056c187e62a66c12c8d72eb7295d681873b37154c99f67067c5b203dcdfef016a07064ddd01302a8f7f7a233002803e435e2082823df99b786d432a5dedc3db3202fe6f29bf259e74d77eb32107453319795010d670651d8f577fab4111fc2eaeb3", 0xbf, 0x9, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0xc2, 0xffffffffffffffff, &(0x7f0000000200)="577e7faf65b427d65c887de47f673cdd8fead5d851f8f761e65d2f50e6a0251e05f8001aabac1ab3601769fe37c5e9c1a80daffa2a1df734849587c4d5a5b21f884b8320307f7b26c49c20b2be1096149edc474ac5f3007b39dda7b9c2af1c6a3ec07b9bc3876e261f40f2594f9f6348913eb7e613734e37c07de360ba4a7763e75a644dfc157ceebffcb7c8f7afc7c6405caf6274ffd8535c19623f786e032ac3c8ba8071037feccca6cc91411c3d0759c5d24dd51e3c6594b792f016dc74b7dee394b2d2cf4a61dedeeba63636d06a7bb705f5529e16c3b6f5cdf5cc72523f", 0xe0, 0x4, 0x0, 0x3}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x7, 0xffffffffffffffff, &(0x7f0000000340)="03aefe5dfbd3d2250c67ad61e7cc16b0d62acb95ba157c49c465316ada", 0x1d, 0x0, 0x0, 0x7}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x6, 0xeb, r0, &(0x7f0000000440)="1765a730a7945c65ca074d66651936774ce88dbf0925a55821348d2c20c1242dfdc686dca53fd485c80477448e7bb141f9e31226bf4de9630771de50cb0fac9d10e36ad04bf1ef72e45562175f0fb2c509f0e43f4d7c7ca96b08617b791261e430d6c258d52f4cbbbe98c77bd087a27bf71dd197176c161d4ea3d14d13eb0ea5cbd96f4c775aa78a6bb7fcd4b5b44f74fbd46b2854d203ea96cc20235f634a4992dbbbcd38a3f7c283bf5219933a3827a66fb10d19b448f9d81632f49cd484e8242a18716961eed1256e24df", 0xcc, 0xb91, 0x0, 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x5, 0xfffc, r3, &(0x7f0000000540)="5edb5297a2cc38be7742216c7b56469e50026038dad12b3024dd2a3e4686188a1cb35c4b30193dee93b94e100b8ec82830782b3d4b085a8b858ff17d685960f0", 0x40, 0x400, 0x0, 0x1, r4}]) syz_open_procfs(0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r5, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffa) 00:32:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000b07, 0x11001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xac, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x202, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001780)=""/4084, 0xff4}], 0x1) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="764b018031aa53a59c085b523955a1be551393f0050365df813a6ee76a04bb513d0644a613468bd6648ef616a2b8aa3bcc715e86c9ab62"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT, @ANYBLOB="110700000000000000000600000008000300d8d46153c7bb1d2f0f5ad682431b486de41922493840195ac553122e330daf481e7ba3ccbb5d52d9de2479ea9cb464ab37ce0eb59a75bd7e62ac92216ddc06de7e086b9012f7d8e8879aa2b40e80433135cfb137d51d25f08abc04d12ae05998d8e3a270bd0cb5fe6ee89fc83bc02f7d0501c8115bae3ff6f0060d0d513fb9be603bd3e37d79ce479b4ed06224a7f59e452439d7a89f5d61625828a58693daeb571510b3904fd8ae4717a2be8804ac75fbb3c7e96c6a2e0cacf0a9089ac5213d067e", @ANYRES32=r5, @ANYBLOB="690396e9e0ce2c23f6fd040cb8c99d4ad8c959db565d6356399d57407c3d5337aa4af6f7d89d3fea5b31a59f3ad6650d5d6fe9b4961dc4195884450160e464ddbc901e341a5cf4c14640c27a"], 0x1c}}, 0x4004004) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf2503035a04f7fe0900ffffffffffff0000080034009cf4000016ff2a000100009645003500020000000500380001000000050033000200000005002a000100000008002b00ff07000005003700010007c8709c19fe8e66a36331176b44b85f3a06d13190b6843cad803a576e3708be806eb263a0"], 0x68}, 0x1, 0x0, 0x0, 0x8000045}, 0x20000000) open(0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x4, 0x1) [ 230.084854] audit: type=1800 audit(1590107524.022:49): pid=9422 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="bus" dev="sda1" ino=15874 res=0 [ 230.177794] audit: type=1804 audit(1590107524.102:50): pid=9425 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir207641660/syzkaller.NN2tbs/39/bus" dev="sda1" ino=15866 res=1 00:32:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x4400, 0x90) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000000}, 0x84) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000001400)=[@increfs_done={0x40106308, 0xfffffffffffffffe}], 0x49, 0x0, &(0x7f0000001440)="1660b150068eee852e5e80ba3ea1502a1fbe747159b11037d3b20d0249d051f07bb7d41b7900cea9720ed596c9c1edc773d26a4ae5984253f06b19e242d409e88e6a7a453ca3e4e5a1"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x0, 0x0, 0x6, 0x9, 0x0, 0x41c0, 0x82801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xde51, 0x5}, 0x0, 0x200000000000000, 0x5, 0x0, 0x1000000000000, 0x385702c7}, 0x0, 0xffffffffffffffff, r4, 0x1b) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) keyctl$get_keyring_id(0x0, 0x0, 0x0) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000001380)="3d59d2e12ba013ca8cabb907ba64b7a2768b927ea394664ce297f70fb29edb5e795dd6ffc22a3ad90d656b526e5bd35491634608430cf51cf3553e922cbd9065d707192b6b8a36fc29dcc44e861dea909a3a87ef73d4b64eb46bc81c90bb304776b4536cff734904c2bafb7e8be4ccf9f33cb2fd572af4") r5 = socket$inet(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000380)="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", 0x1000, 0x4000000, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) [ 230.297892] binder_alloc: 9432: binder_alloc_buf, no vma 00:32:04 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040), 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ftruncate(r3, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={r1, @in={{0x2, 0x0, @remote}}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x7, 0x7, 0x8200, 0x3, 0x0, 0x2, 0x9, 0x0, r1}, &(0x7f0000000100)=0x20) listen(0xffffffffffffffff, 0x4) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x4000000000000d0, 0x0) [ 230.379884] binder_alloc: 9432: binder_alloc_buf, no vma 00:32:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x30, r4, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xfc}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000003) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 00:32:04 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000200)='./file0\x00', 0x4fa4, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02580d9fbd98c052429c7dd485840eed0d2cd48b07431e32a6b66f834505d9d1aaa0f1e64a9bc2516cbe0bf3f41d7965b2d501fed8640550d09b9aaf9dbce0ee9d8ed05f3d95af551f5f6e9de6503bababd84fb31c5fbf9334ca5f7cf16d660b3c978806d2a44a82ea7c5fa738dfb9fb1b6130ab669e139274157724c76ce0e30581f76ffc15752c16981c23a9fb0698d2b0c11cc3154b65abeba136adbcb69198091ad5a1e270416b618ebb89f326e0b68cbb53cde4db9679fd03e3da0d1377e02d9ef8a8754044903fb2e6cbb06425a150bff7e50b3cfd02ee9d081e7fec0c1fb12a5d9e91b0125fd41eaa147fd9bab7131410418f52c2cfb8b5d19740d832e35e6573d94169d1217df516b201063925de70cdc0484c425d0a20183060e2b302b25b816de3a79e720073f49d00131e44ffaf2aad7083e64f1f8e5e45e5c8cac59303ef5dcaba2c2abbb6669ce67d68d4788f4f732db113e51622ec8ee29dbd26788c8a2802c7df93c6255f252ccdec03bbacd39b0dd6c0d9301d9ae313dc3ae63fd4ca93"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$KVM_PPC_GET_SMMU_INFO(r3, 0x8250aea6, &(0x7f0000000100)=""/90) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000080)) r4 = open(&(0x7f0000000680)='./bus\x00', 0x141042, 0x0) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141142, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000300)=ANY=[], 0xc6) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendfile(r5, r5, &(0x7f0000000000), 0x8080fffffffe) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000040)="96", 0x1}], 0x1) 00:32:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x57) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0x0, r2) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa74ff569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0x395, r3) keyctl$get_keyring_id(0x0, r3, 0xb27) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x3a}}, r1}}, 0x48) 00:32:04 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') openat(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000000b00)=""/126, 0x7e}, {0x0}], 0x3}, 0x3}], 0x1, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x4080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xa677f21e331b4de7, @perf_config_ext={0x3, 0x2}, 0x48063, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) sched_yield() socket$key(0xf, 0x3, 0x2) add_key(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x28600, 0x0) socketpair(0x15, 0x5, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000000)=0x17f) [ 230.639760] binder: 9446:9448 ioctl 8250aea6 20000100 returned -22 [ 230.658828] ucma_write: process 164 (syz-executor.1) changed security contexts after opening file descriptor, this is not allowed. [ 230.686456] attempt to access beyond end of device [ 230.713281] loop4: rw=2049, want=40, limit=39 00:32:04 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) [ 230.751932] Buffer I/O error on dev loop4, logical block 39, lost async page write 00:32:04 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) dup(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[], 0x2e7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x3, 0x0, 0x4, 0x0, 0x0, 0x2f7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4d086, 0x0, 0x80, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f0000000180)='GPL\x00', 0x800, 0x80, &(0x7f00000001c0)={0x2, 0x81, 0x2, 0x100}) ioctl$int_in(r1, 0x5452, &(0x7f0000000200)) sendfile(r0, r0, &(0x7f0000000480), 0xa198) [ 230.813502] binder: 9446:9468 ioctl 80345631 20000080 returned -22 [ 230.837127] attempt to access beyond end of device [ 230.945031] loop4: rw=2049, want=40, limit=39 00:32:04 executing program 1: sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)}, 0x0) socket$inet(0x10, 0x2, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) socket$netlink(0x10, 0x3, 0x15) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r5 = dup2(r1, r4) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x2}) [ 231.021887] kauditd_printk_skb: 1 callbacks suppressed [ 231.021894] audit: type=1800 audit(1590107524.953:52): pid=9476 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="bus" dev="sda1" ino=15874 res=0 00:32:05 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x9) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r4, 0x201, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, [], 0x1}}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xa6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x14) [ 231.072510] Buffer I/O error on dev loop4, logical block 39, lost async page write [ 231.111125] attempt to access beyond end of device 00:32:05 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x41, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000100)={0x3e89, {{0xa, 0x4e21, 0x1, @private0={0xfc, 0x0, [], 0x1}, 0x1}}}, 0x88) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 231.133685] loop4: rw=2049, want=41, limit=39 [ 231.144629] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 231.156973] audit: type=1800 audit(1590107524.963:53): pid=9480 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=15846 res=0 [ 231.182556] Buffer I/O error on dev loop4, logical block 40, lost async page write [ 231.192330] binder_alloc: 9483: binder_alloc_buf, no vma 00:32:05 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r4, 0xd, 0x1, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x9, 0x3, 0x3e0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x310, 0xffffffff, 0xffffffff, 0x310, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x7, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x200, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@dev, @ipv4={[], [], @dev}, @mcast2, @ipv4, @loopback, @private0, @private0, @private2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, @mcast2, @rand_addr=' \x01\x00', @private2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, @remote]}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) r6 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) writev(r6, &(0x7f0000000400)=[{&(0x7f0000000480)="a977", 0x2}], 0x1) [ 231.248875] binder: 9483:9487 ioctl 89f1 20000180 returned -22 [ 231.262034] binder_alloc: 9483: binder_alloc_buf, no vma 00:32:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x300, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x1ff, 0x3}, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x92, 0x840) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x4, 0xffff}, 0x3818, 0x0, 0x10000000, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'vxcan1\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'vxcan1\x00', 0xfd}) openat$ppp(0xffffffffffffff9c, 0x0, 0x20000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') 00:32:05 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x41, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000100)={0x3e89, {{0xa, 0x4e21, 0x1, @private0={0xfc, 0x0, [], 0x1}, 0x1}}}, 0x88) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 231.413273] minix_free_inode: bit 1 already cleared 00:32:05 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000180)=""/83) sendto$inet(r6, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r6, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 00:32:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x1) recvmmsg(r1, &(0x7f000000a3c0)=[{{&(0x7f0000000340)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/138, 0x8a}, {&(0x7f00000004c0)=""/77, 0x4d}], 0x2, &(0x7f0000000200)=""/36, 0x24}, 0x5}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000540)=""/126, 0x7e}, {&(0x7f00000005c0)=""/49, 0x31}, {&(0x7f0000000700)=""/199, 0xc7}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/244, 0xf4}, {&(0x7f0000001900)=""/43, 0x2b}], 0x7, &(0x7f00000019c0)=""/4096, 0x1000}, 0x678}, {{0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f00000029c0)=""/254, 0xfe}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/130, 0x82}, {&(0x7f0000003b80)=""/200, 0xc8}, {&(0x7f0000003c80)=""/46, 0x2e}], 0x5, &(0x7f0000003d40)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000005ec0)=[{&(0x7f0000004d40)=""/19, 0x13}, {&(0x7f0000004d80)=""/23, 0x17}, {&(0x7f0000004dc0)=""/4096, 0x1000}, {&(0x7f0000005dc0)=""/38, 0x26}, {&(0x7f0000005e00)=""/25, 0x19}, {&(0x7f0000005e40)=""/119, 0x77}], 0x6, &(0x7f0000005f40)=""/221, 0xdd}}, {{&(0x7f0000006040)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000008340)=[{&(0x7f00000060c0)=""/4096, 0x1000}, {&(0x7f00000070c0)=""/237, 0xed}, {&(0x7f00000071c0)=""/113, 0x71}, {&(0x7f0000007240)=""/100, 0x64}, {&(0x7f00000072c0)}, {&(0x7f0000007300)=""/10, 0xa}, {&(0x7f0000007340)=""/4096, 0x1000}], 0x7, &(0x7f00000083c0)=""/69, 0x45}, 0x3}, {{&(0x7f0000008440), 0x80, &(0x7f0000008640)=[{&(0x7f00000084c0)=""/137, 0x89}, {&(0x7f0000008580)=""/184, 0xb8}], 0x2}, 0x9}, {{&(0x7f0000008680)=@tipc=@id, 0x80, &(0x7f0000008800)=[{&(0x7f0000008700)=""/142, 0x8e}, {&(0x7f00000087c0)=""/11, 0xb}], 0x2, &(0x7f0000008840)=""/192, 0xc0}, 0x1f}, {{0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008900)=""/17, 0x11}, {&(0x7f0000008940)=""/161, 0xa1}, {&(0x7f0000008a00)=""/47, 0x2f}, {&(0x7f0000008a40)=""/109, 0x6d}, {&(0x7f0000008ac0)=""/185, 0xb9}, {&(0x7f0000008b80)=""/114, 0x72}, {&(0x7f0000008c00)=""/1, 0x1}, {&(0x7f0000008c40)=""/70, 0x46}], 0x8, &(0x7f0000008d40)=""/102, 0x66}, 0x9}, {{&(0x7f0000008dc0)=@tipc, 0x80, &(0x7f000000a080)=[{&(0x7f0000008e40)=""/209, 0xd1}, {&(0x7f0000008f40)=""/19, 0x13}, {&(0x7f0000008f80)=""/4096, 0x1000}, {&(0x7f0000009f80)=""/107, 0x6b}, {&(0x7f000000a000)=""/113, 0x71}], 0x5}, 0x1}, {{&(0x7f000000a100)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f000000a340)=[{&(0x7f000000a180)=""/8, 0x8}, {&(0x7f000000a1c0)=""/161, 0xa1}, {&(0x7f000000a280)=""/127, 0x7f}, {&(0x7f000000a300)=""/18, 0x12}], 0x4, &(0x7f000000a380)=""/35, 0x23}, 0x7fff}], 0xa, 0x40002020, &(0x7f000000a640)={0x77359400}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000a680)=ANY=[@ANYBLOB="38000000240007050000014007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00f70000ff0100686673630000800008000200130000000000310235819f62b1bd3e1600f80c65be705d4bee70723108904932db2f2cd3feefab4325141f32db3c4f2e5083b72b2584439d216b69deea9bebc1969599d8662dfb2cc9cd"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8}]}}]}, 0x3c}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000002e000102000000000000000700000000", @ANYRES32=r6], 0x24}}, 0x0) 00:32:05 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) socket(0x11, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x240c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000000140)=""/69, 0x45}], 0x23}}], 0x1, 0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000006c0), &(0x7f0000000700)=0x4) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x2cb, 0x400000000000) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000000090101000000000000000001000003080003400000000008000640000000010700034000000004"], 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000100)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000d0030000000100000000000000020000e8020000e8020000e8020000040000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e657464657673696d30000000000000626174616476300000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000c0000001000000000000000000000000000000000000000000000000400052415445455354000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000100000000000000000000005dbd0000000000000000000000400052415445455354000000000000000000000000000000000000000000000073797a3000000000000000000400000d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000c000e80000000000000000000000000000000000000000000000000028004d41524b000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = open(0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYRES16=r3, @ANYBLOB="000127bd7000fcdbdf250f010000f8010e8004000100e1000300b9c4c7b47143ccfab4780f18ff5fb6e640076d00c2f107142046fd7b986cf348795c98d56968bd64c3679566e588da8956706382b572419ba196828a793d3e306ecb0d45e691d76e07328631d14b34872fa9ec6be64890f04036e885b4eb0cfd8dd456ab92f801e87a521e44352ad344b979676156e8279cf533dde31ab70c5ff7f05e2e2f43c56ef058fb57d883e3478709f08c3102e55d6759459f3a4c8b5f62fda278099f02a031f762f73d443e5669b69ba3443bb518d439c2a62a2b56e420c9b6dd89dcd684010f60d477a39592b270cb06ad66fc2fde72030ea10000005c0002004227152ceaa7e6aa9702ffba306078ee402b4f729affdbb47766a794bc6f815fc22d68fa491e1c54d09594257be4ced66712a14794f8e936f79d8997bb121ec63ec559a71230973d6e9b51ee8e576b8b5eb1de1730da4b4cab00020008a8c6f1f57800d21c447be0c06d09a282bef182e05a4d6ad07d5b69ed1d4df533dfc8f75efbf769755689e22f6c6d9cdc94f1ac109bd0117cecaa6ec1156b3510b1de1b229be00e171191f00ff9"], 0x2}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000002140)=ANY=[@ANYBLOB="a4190000", @ANYRES16=r3, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x1}, 0x10) 00:32:05 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) read$dsp(r2, &(0x7f0000000240)=""/237, 0xed) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, &(0x7f0000000000), 0x4) mknod(&(0x7f0000000180)='./file0\x00', 0x4, 0x3) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, &(0x7f000000a000)) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c8", 0x93, 0x1}], 0x0, 0x0) 00:32:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$IMGETCOUNT(r4, 0x80044943, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 00:32:05 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 231.732934] nla_parse: 1 callbacks suppressed [ 231.732941] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 231.766360] binder: 9524:9530 ioctl c00caee0 20000140 returned -22 [ 231.770900] arp_tables: arptables: counters copy to user failed while replacing table [ 231.784389] binder_alloc: 9522: binder_alloc_buf, no vma 00:32:05 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) accept$inet(r1, 0x0, &(0x7f0000000000)) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x34f, &(0x7f0000000440)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A'}, 0xffffffffffffffc0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) [ 231.885401] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 231.942881] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 231.964320] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 231.980587] binder: 9524:9558 ioctl c00caee0 20000140 returned -22 00:32:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f00000000c0)={0x80000001}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r8, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x70, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x900}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x40, 0x2, [@TCA_CGROUP_ACT={0x3c, 0x1, [@m_xt={0x38, 0x0, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x4}}}]}]}}]}, 0x70}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x29, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x900}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x88a8}, 0x0) [ 231.981003] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 232.008274] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 232.046844] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 232.086179] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 00:32:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10801, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000040)='\x00') r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x58060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 232.109522] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 00:32:06 executing program 5: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x21141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r7, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x95}, 0x20004000) setreuid(r2, r4) r8 = dup(r0) ioctl$SIOCSIFHWADDR(r8, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @random="01003a1e2410"}) [ 232.160684] binder_alloc: 9561: binder_alloc_buf, no vma [ 232.185582] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 232.252616] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended 00:32:06 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_S390_UCAS_MAP(r3, 0x4018ae50, &(0x7f0000000000)={0x97bf, 0x17, 0x1}) socket$isdn(0x22, 0x3, 0x3) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x2, 0x3, 0x4b0, 0x0, 0x0, 0x0, 0x2f0, 0x0, 0x418, 0x418, 0x418, 0x418, 0x418, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x180000, 0x2d0, 0x2f0, 0x0, {}, [@common=@unspec=@cluster={{0x30, 'cluster\x00'}}, @common=@unspec=@bpf0={{0x230, 'bpf\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@unspec=@connlabel={{0x28, 'connlabel\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x510) [ 232.296493] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 232.329514] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 00:32:06 executing program 1: lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba0000000000000000000000004ff7cf4b56390e3c2a485865464c2dc132c981d6f0831d9d2477a032ca0de934cab722c256553b6aa175fe2d9b965a56d61906a2ca6bc719bf4956774b20d4f4772ad8784dc096f829b2dddde6ee35afb9bc9ebfa44e614c28c14b46c35062588ffe7c57e10e1b17155f61e745691e88033be26d0083dc14c95090d24f30711470fa5d9f9d39436142d42d3d8edf6ebff3f5ff1399405edcd0f75e9fe24a555c969d1afb85afa5bd5d3da01edc36", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000"], 0x28}}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010001, &(0x7f0000000400)) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) pipe(0x0) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, 0x0, 0x0) 00:32:06 executing program 5: bind(0xffffffffffffffff, &(0x7f0000000040)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffe92, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x1}}, 0x4004805) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000040)=0x9) recvmmsg(r0, &(0x7f0000007f00)=[{{&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/48, 0x30}, {&(0x7f0000000400)=""/69, 0x45}, {&(0x7f0000000480)=""/212, 0xd4}, {&(0x7f0000000580)}], 0x4, &(0x7f0000000600)=""/182, 0xb6}, 0x4}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/212, 0xd4}], 0x1, &(0x7f0000001d40)=""/71, 0x47}, 0xffff}, {{&(0x7f0000000840)=@ax25={{0x3, @default}, [@default, @null, @netrom, @bcast, @bcast, @null, @remote, @default]}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000003c0)=""/53, 0x35}, {&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/238, 0xee}, {&(0x7f0000000a80)=""/222, 0xde}], 0x4}, 0x8}, {{&(0x7f0000000bc0)=@nfc, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000c40)=""/4096, 0x1000}], 0x1, &(0x7f0000001c80)=""/180, 0xb4}}, {{&(0x7f00000081c0)=@ax25={{0x3, @default}, [@netrom, @null, @default, @rose, @remote, @default, @netrom, @rose]}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002dc0)=""/37, 0x25}], 0x1, &(0x7f0000002e40)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000003e40)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000006140)=[{&(0x7f0000003ec0)=""/4096, 0x1000}, {&(0x7f0000004ec0)=""/147, 0x93}, {&(0x7f0000004f80)=""/4096, 0x1000}, {0x0}, {&(0x7f0000006080)=""/24, 0x18}, {&(0x7f00000060c0)=""/74, 0x4a}], 0x6, &(0x7f00000061c0)=""/56, 0x38}, 0x1}, {{&(0x7f0000006200)=@x25, 0x80, &(0x7f0000006380), 0x0, &(0x7f00000063c0)=""/12, 0xc}, 0x6ad}, {{0x0, 0x0, &(0x7f0000007740)=[{&(0x7f0000006400)=""/83, 0x53}, {&(0x7f0000006480)=""/141, 0x8d}, {&(0x7f0000006540)=""/26, 0x1a}, {&(0x7f0000006580)=""/87, 0x57}, {&(0x7f0000006600)=""/4096, 0x1000}, {&(0x7f0000007600)=""/96, 0x60}, {&(0x7f0000007680)=""/145, 0x91}], 0x7, &(0x7f00000077c0)=""/112, 0x70}, 0x1e0}, {{&(0x7f0000007840)=@generic, 0x80, &(0x7f0000000580)=[{&(0x7f00000078c0)=""/178, 0xb2}, {&(0x7f0000007980)=""/52, 0x34}, {&(0x7f0000006280)=""/246, 0xf6}, {&(0x7f0000008240)=""/195, 0xc3}], 0x4}, 0x4dd7}, {{&(0x7f0000007a00)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000007e40)=[{&(0x7f0000007a80)=""/8, 0x8}, {&(0x7f0000007ac0)=""/40, 0x28}, {&(0x7f0000007b00)=""/252, 0xfc}, {&(0x7f0000007c00)=""/134, 0x86}, {&(0x7f0000007cc0)=""/73, 0x49}, {&(0x7f0000007d40)=""/225, 0xe1}], 0x6, &(0x7f0000007ec0)}, 0xfff}], 0xa, 0x40000040, &(0x7f0000008180)={0x77359400}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getegid() statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/218) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x0, 0x0) openat$cgroup(r1, 0x0, 0x200002, 0x0) setxattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000004c0)=@known='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x8001}, 0x0, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xf17) unshare(0x40040400) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x77) [ 232.409025] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 232.434624] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 00:32:06 executing program 4: ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000280)={'veth0_to_bridge\x00', {0x2, 0x4e20, @local}}) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8000000000006, 0x0) write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[], 0xfffffd2d) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x4, 0x3, 0x0, 0x0, 0x20}, 0x0) mkdir(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0xc800, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000240)) unlink(&(0x7f0000000040)='./file0\x00') [ 232.461445] xt_cluster: cannot load conntrack support for proto=2 [ 232.474296] EXT4-fs: failed to create workqueue [ 232.489107] EXT4-fs (loop2): mount failed 00:32:06 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x30d001, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r2, &(0x7f0000000600)='4', 0x1) r5 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUMINPUT(r5, 0xc050561a, &(0x7f0000000140)={0x1, "40b0c15037310c2a6ec985ab7f9bacd39e72e74071a083f18b54f96b2f79bddb", 0x3, 0xffff, 0x4, 0x8b708, 0x20, 0x8}) [ 232.538578] xt_cluster: cannot load conntrack support for proto=2 [ 232.575240] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 00:32:06 executing program 0: mlockall(0x1) mremap(&(0x7f00009e4000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) creat(0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0x8) signalfd4(0xffffffffffffffff, &(0x7f0000000380)={[0x45]}, 0x8, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x0, 0xfcae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xff7fffffffffffff, r2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x3, 0x0, 0xfffb, 0x0, 0x400000000}, 0x20) syz_open_procfs(0x0, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 00:32:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539302000000000000000000", @ANYRES32=r3, @ANYBLOB="ddffffff03ffffff140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28}]}]}]}, 0x50}}, 0x0) [ 232.792938] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 232.825335] IPVS: ftp: loaded support on port[0] = 21 [ 232.830943] audit: type=1800 audit(1590107526.763:54): pid=9638 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=15874 res=0 [ 232.843091] binder_alloc: 9561: binder_alloc_buf, no vma [ 232.991732] device bridge1 entered promiscuous mode [ 233.026523] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 233.076826] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 00:32:07 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000000ff000000003d9d43580c6458254e", @ANYRES32=0x0, @ANYBLOB="03000000000000001800128008000100736974000c00028008000100", @ANYRES32=r2, @ANYBLOB], 0x38}}, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@int=0x80000001, 0x4) 00:32:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) statx(r2, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x10, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x7) r5 = socket(0x2, 0x3, 0x100000001) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000100)=0x2, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendto(r5, &(0x7f0000000000)="0400", 0xfde6, 0x0, 0x0, 0x0) 00:32:07 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x10000005, 0x3ff, 0x3, 0xe078}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c6c6f6f73652c64666c746769643d5f272c4a71999c1ef8a0032e9e27d134fdcca82c100d1e1e2583dabe07390433ee844281d3921238f9d6b0e3fe86fae53880a18697db35418b6593f86a5dc45b339a008f55592c5408e4db98", @ANYRESHEX=r4, @ANYBLOB=',\x00']) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000180)="cecdad70901e63df51cd70b5ef8071a7026025fb0cc800db151e18ff71e94bfa47018c0fa8cea1c41e889476a86b0d858f45cf0988a7b359142d7e5562960ffe71df65913c5f89c968ef60c202753e49b83229d5f99edacbe7ddacd48bf56f4c19f6b83f16ec6891364d217f572d09fe3b597587e76a81fa49193dd1f8d959e2828a49f576709a6a7422990e249f6a24070dfdc304b23f4160819b4813aac6536eeb1d479c99f48a9d3295d0db0db0ae76b37c096be238f41e0470a88201436b06ba485ccb3a74de08e2187276", 0xcd}, {&(0x7f00000002c0)="255c0822ba11dd187f1de988d03dc2ee1dce20bf7d2c405af5b8c3b58e6b04c715e65669e0128315ab4fc72ab89aa3526153d463cbb0440dbeb06e4c4f873c1a9bfdd7c57e3f7ceb1016e4a8957ac70834911c5b0287912c6e05", 0x5a}, {&(0x7f0000000340)="c326aff8bdc783348e0dbba9d677ad2c9ea0e7cd3590b316ffc706573d0173b9ab82381b832715e8138de4728855552f600ed439", 0x34}, {&(0x7f0000000380)="3d771dcf786cc4a93cfc47f81a76c4671fd11332eb7196bc8052f095154d6bb459ef8975ddcaba8dfaf22034b70de4c0ab1ce2667aa7fb2036739eac7f0e60524ec6775df47759e7b7b51ffac6ed8726a1a95a143752e160494f2367fd4978c83cc4231191689230ab3d9698f7e36dce7d68ed7c3287e6696559bf80136c96385d2060687f936f43d945b8ba07975250e6844d2672b3723ef3c6b249079fa68fe30126b91ca3329d08", 0xa9}, {&(0x7f0000000440)="8dadc13d1cecfec1c57e419ef06b3a081ebec9a4535dc077fc1d3a09f30f7a8ac4470cef1b5861f39e24f7327d539c835a6d29e768c1a2f72b3dc77df427e4f54b65e465735c4f05b199dbad26d5785105c8f3b7334bf2dfb2e23e44d6a00710345f6ac0723d5232ed916c359287f78ff9a6866d36c19532bb7fe83e288dd880dae457f45c0d489ea25b201c240af092131c9e202034e54a56da6afd9675bc56dfa9e359f028915f3aa04be4dc270138f07f2c9e120a3a906258d1388d534d5fc172d15f33bdbe6d2bce398a09041f182240d9e43e18", 0xd6}, {&(0x7f0000000540)="cc960b08d07ec78d112f9bea9d62c1ea1adc82ed9f9927a625deefeadb0feb5807844d4ca47429fd83a912721bf644bd8c4cb59f4c036290d60a8d7790ca06a4def0b8cb21c55f6426e184b630753f95e5a50a47b5fe9858e4068a1b5cb356ac62da859e821ab16ab0d60af9ebd64d46f3677f17977945491fc8b015b76a0db620e62b3462f0144edd8d72f7b03702f5978bd4bf9da83ca150ba6c480369c1", 0x9f}, {&(0x7f0000000600)="a0f8b936f04cc12abbfc447c3f08332c14ddc874a6b66b986df32313a0dba4cedac8a7420b153a318733ad1957d3ab30995ea449f6c5935221d00ef80accfe4988e1231f1bafb4e74c6f253c2502f815528b7ee863ac2c262a4fbc339b38e65c337d2a38d72506008401207e4d099beccd7ea77dfed5ed647e6162fa5639440293380d995f142e4b7f9944f0463d3a67", 0x90}], 0x7, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, r4}}}], 0x20, 0x10000000}], 0x1, 0x20048040) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r6 = dup(r5) sendfile(r5, r6, 0x0, 0x80006) [ 233.204185] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9654 comm=syz-executor.3 [ 233.282166] binder_alloc: 9653: binder_alloc_buf, no vma [ 233.323516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9658 comm=syz-executor.3 00:32:07 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x207c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x2202, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) creat(&(0x7f0000000000)='./bus\x00', 0xc) fallocate(r2, 0x10, 0x8003, 0x8020001) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4, 0x8028}) creat(&(0x7f0000000380)='./file0\x00', 0x0) [ 233.469565] binder_alloc: 9628: binder_alloc_buf, no vma 00:32:07 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xfffffffc, 0xd8, 0xfffffffffffffffd, 0x9, 0x0, 0x3f}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01bd70320a000025010000010800ff01", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x400c005}, 0x5) open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000140)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000140)={0xffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) 00:32:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r7 = dup2(r6, r5) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r7, 0x80045300, &(0x7f0000000040)) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) [ 233.783047] binder: 9628:9664 unknown command 0 [ 233.787742] binder: 9628:9664 ioctl c0306201 20000280 returned -22 00:32:07 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x10a0}}, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008014}, 0x40040) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r5, r4) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) fcntl$setstatus(r5, 0x4, 0x5000) [ 233.852621] EXT4-fs error (device sda1): mb_free_blocks:1464: group 14, inode 15844: block 458792:freeing already freed block (bit 40); block bitmap corrupt. [ 233.867270] EXT4-fs error (device sda1): ext4_mb_generate_buddy:754: group 14, block bitmap and bg descriptor inconsistent: 32728 vs 32729 free clusters [ 233.881202] EXT4-fs (sda1): pa ffff88804a4f8ca8: logic 32768, phys. 458752, len 2048 [ 233.889157] EXT4-fs error (device sda1): ext4_mb_release_inode_pa:3891: group 14, free 2008, pa_free 2007 00:32:07 executing program 0: mlockall(0x1) mremap(&(0x7f00009e4000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) creat(0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0x8) signalfd4(0xffffffffffffffff, &(0x7f0000000380)={[0x45]}, 0x8, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x0, 0xfcae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xff7fffffffffffff, r2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x3, 0x0, 0xfffb, 0x0, 0x400000000}, 0x20) syz_open_procfs(0x0, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 00:32:08 executing program 1: mlockall(0x1) mremap(&(0x7f00009e4000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) creat(0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0x8) signalfd4(0xffffffffffffffff, &(0x7f0000000380)={[0x45]}, 0x8, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x0, 0xfcae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xff7fffffffffffff, r2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x3, 0x0, 0xfffb, 0x0, 0x400000000}, 0x20) syz_open_procfs(0x0, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) [ 234.001381] binder_alloc: 9653: binder_alloc_buf, no vma [ 234.013335] binder_alloc: 9698: binder_alloc_buf, no vma [ 234.039291] binder: BINDER_SET_CONTEXT_MGR already set [ 234.075944] binder: 9698:9706 ioctl 40046207 0 returned -16 [ 234.162887] EXT4-fs error (device sda1): mb_free_blocks:1464: group 5, inode 15844: block 194600:freeing already freed block (bit 30760); block bitmap corrupt. [ 234.177474] EXT4-fs error (device sda1): ext4_mb_generate_buddy:754: group 5, block bitmap and bg descriptor inconsistent: 20088 vs 20089 free clusters [ 234.191315] EXT4-fs (sda1): pa ffff888085554dc0: logic 32768, phys. 194560, len 2048 [ 234.199299] EXT4-fs error (device sda1): ext4_mb_release_inode_pa:3891: group 5, free 2008, pa_free 2007 00:32:08 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) io_destroy(r1) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x4040000) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa74ff569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0xc0, 0xfffffffffffffffa) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x100000001) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000080)) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) r5 = getuid() mount$9p_xen(&(0x7f0000000080)='syz\x00', &(0x7f00000000c0)='./file0/bus/file0\x00', &(0x7f0000000140)='9p\x00', 0x8008, &(0x7f00000009c0)={'trans=xen,', {[{@access_uid={'access'}}, {@noextend='noextend'}, {@privport='privport'}, {@dfltgid={'dfltgid'}}, {@cache_mmap='cache=mmap'}, {@dfltuid={'dfltuid'}}], [{@smackfsroot={'smackfsroot', 0x3d, '}posix_acl_access[system+'}}, {@fsname={'fsname', 0x3d, '\xddcgroup$\x17'}}, {@fowner_lt={'fowner<', r5}}, {@smackfsroot={'smackfsroot', 0x3d, '\xd0'}}, {@uid_eq={'uid'}}, {@subj_type={'subj_type', 0x3d, '-$@@&selinuxvmnet1((proclo'}}, {@smackfsdef={'smackfsdef', 0x3d, ',]]cgroup'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'cgroup@bdev'}}, {@hash='hash'}, {@smackfsdef={'smackfsdef', 0x3d, '/^&vmnet0@5systemcgroup'}}]}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) syz_mount_image$tmpfs(&(0x7f0000000180)='tmpfs\x00', &(0x7f00000001c0)='./file0\x00', 0x53, 0x2, &(0x7f0000000280)=[{&(0x7f00000003c0)="0ac9b74a9ebfdd97b21566cbbbab388a6f3084916bba986843b722d178671584a779eb75bff45aa4eee7629b540a78d768db410a933b21c897e981395cced5a8b87179bacb4e9bdffaf974a161de023c2fcd7d0bb077c32413093551c940cc92466debc7f29df09501666d070ab330dc826b94fc75358065cbc6ae65bd24eab8d8cecdf6a227107a1bcc30974942bd43847eeceabeda0ba3ed6646c28c289c4d151ae1be6fa7f0db08157c899e6c140e5585bc75c360e9b54d1f60ddfdf76eb0", 0xc0, 0x6}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='huge=advise=4,huge=within_size=cgroup.controllers\x00,rootcontext=root,euid=', @ANYRESDEC=r5, @ANYBLOB="1aad50e5bff2775f438e3acafb502c9739af9b", @ANYRESDEC=r6, @ANYBLOB="2c6d61736b3d5ebdcc595f524541442c66736d616769633d307830304c303030303030303030303030322c00"]) [ 234.446002] tmpfs: Bad value 'advise=4' for mount option 'huge' 00:32:08 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'em1', 0x20, 0xdfc}, 0x2d, 0xfffffffffffffffd) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r0, &(0x7f0000000000)="fd", 0x1) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xd, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0563040012c17331e55c4af858a255395c8ac45dae010bc8f1341fb794ef7280dd6b6ddbcbc9933af670c581c1dbde755999c9fb5d6c753b521aa0ff03000000000000a1879231f8d4f6facd10e54882badf0b5e08fd425766ef049600409c34343670e28ba394bfdb6f307e72240e3dcebd4e04eb8d6f2c003f4a47048d61fa6df8ce21"], 0x0, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0005000baa9efbdbdf2503000000"], 0x11}, 0x1, 0x0, 0x0, 0x40008c0}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x84, r5, 0x408, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc0, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x0, 0x1, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x0, 0x1, 0xfffffff9}, @TIPC_NLA_NET_NODEID_W1={0x0, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x20004800) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9, 0x20011, r6, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 234.613015] encrypted_key: insufficient parameters specified 00:32:08 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x824b0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9aca8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 00:32:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000abe000), 0x4}, 0x10020, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x41480, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x36, r1}) dup2(r0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000001c0)={@ipv4={[], [], @loopback}}, 0x14) sendto$inet6(0xffffffffffffffff, 0x0, 0x324, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c831f3b21461f2f6995aeb75c16c8aff00000100080000000000000000000000000103d9010b52bbf67c9488a10ba635e00e28d91a536074a60705b92277c8106e18ea80193611664f40134d965cd1d43506228fcea8eeb42a6eee30c2d9ca8076728aa55348afba07cf9542986f974f0d0653aa21f802b102c02597f71441e3d93a6c3393195502f0acea432d2855b6e017e6706a5c48a954554a8332c982f2a073818f0cc01458fcb9ad297dae57f8ec689d9b0d014b2a8e796ced687ea6b02acb5b031443e4ca9f12e00", @ANYRES32, @ANYRESHEX], 0x3c}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x20, 0xff, 0x7, 0x52, 0x0, 0x1c9cdc7, 0x800, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x44000, 0x5, 0xca, 0x2, 0x5, 0x0, 0x3}, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3cf6818ab900050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=0x0, @ANYBLOB="03dbb48d51de73e9955b51ded3473ccaf8471247b59d2172c0271ee596af3b4f208561436f975c7b757577ed444c2644300150f055f9b465a28815b4d4aacdf50b1e34f48595ed81f9000e2eb1e134c6a60cc438c1d705f737a0dde2aca6ce18e614a492c0bb70cfe31cac116dff2be968c3029b5b1a32cb72216436331572dd949135930cc5ed5201c614e07a27ea07acd1370b7b82a6a705749ff1aa5d535585efd2897a11afae7ae16ebd7e5478f54c73bad277616aeceb90f2c9febc54f7bdd87f9550ebe1b80f9fff8c6a"], 0x3c}}, 0x0) [ 234.797043] binder_alloc: 9707: binder_alloc_buf, no vma [ 234.802881] binder_alloc: 9698: binder_alloc_buf, no vma [ 234.812842] binder: BINDER_SET_CONTEXT_MGR already set [ 234.821085] binder: 9698:9701 ioctl 40046207 0 returned -16 00:32:08 executing program 4: r0 = creat(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) syz_open_procfs(r1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x102aa100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r4, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='bpf\x00', 0x400, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x2}}], [{@subj_user={'subj_user'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@obj_type={'obj_type'}}]}) write$FUSE_NOTIFY_INVAL_INODE(r2, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) 00:32:08 executing program 5: ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100) mkdirat(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x75, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x80000000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23}, 0x1c) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x15}, 0x40084) r2 = syz_open_dev$midi(0x0, 0x957, 0x80000) listen(r1, 0x200000000002) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000100)=0x4) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) prctl$PR_SET_FP_MODE(0x2d, 0x3) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000140)='\x00', 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) [ 234.945881] binder_alloc: 9712: binder_alloc_buf, no vma [ 235.013561] audit: type=1400 audit(1590107528.943:55): avc: denied { sys_admin } for pid=9756 comm="syz-executor.4" capability=21 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=cap_userns permissive=1 00:32:09 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x101, 0x1c203) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000004c0)={0x0, 0x2, 0x4, 0x800, 0x0, {0x77359400}, {0x4, 0x8, 0x0, 0x3, 0x97, 0x0, "55b1f93a"}, 0x8001, 0x1, @fd, 0x0, 0x0, r0}) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x2, 0x109c00) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000200)={0x0, 0x100000000098f907, 0x0, [0x100000000000000]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRESHEX=r4], 0x58}}, 0x20008c00) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0xa4, r4, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:insmod_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x10}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000041}, 0x8805) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000002c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x3}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000005c0)}, 0x4004010) 00:32:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000300)={0x40000000, 0x0, [], {0x0, @reserved}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000000ddf7ffffffffffff00", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x280, 0x0) ioctl$SIOCRSGCAUSE(r10, 0x89e0, &(0x7f00000002c0)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000140001040000000000000000021f0000", @ANYRES32=r9, @ANYBLOB="08000200a0"], 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x411, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x6841}}, 0x20}}, 0x0) 00:32:09 executing program 4: creat(&(0x7f0000000000)='./file1\x00', 0x1a1) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) fsetxattr(r2, &(0x7f0000000100)=@random={'btrfs.', '\xff\x00\x00\x00\x00@\x01\x00\x00\x00\xcb\x95'}, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='rpc_pipefs\x00', 0x0, 0x0) 00:32:09 executing program 0: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x49db, 0x12) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8020000) sync_file_range(r0, 0x6, 0x9, 0x4) semget$private(0x0, 0x2, 0x40) semtimedop(0x0, &(0x7f0000000000)=[{}], 0x1c5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b6300004438b5601e6b2ec08477e24c9c8c9ee154e82a3f5c5fb0c74adab95bb4d4b0dfe41ac5ba400913aaedb3d3e0b13e22e233ba71d50b4bf5980b919c2e706d1a59f5eb996f00427d3be6beaab28e859a4965aee377bc24456f2eeb3ee6b8644cc54e4920adc9"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="056304400032af04541199bbc60000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, [0x0, 0x3, 0xb939, 0x8, 0x80000000, 0x8, 0x7fff, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x8, 0x0, 0xfff]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000040)={r5, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r5, 0x8}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000080)=r5, 0x4) [ 235.433896] IPv6: ADDRCONF(NETDEV_UP): veth3: link is not ready 00:32:09 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x9, 0x22000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) r9 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) setsockopt$inet_group_source_req(r7, 0x0, 0x2f, &(0x7f0000000240)={0x7, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}}, {{0x2, 0x4e21, @remote}}}, 0x108) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffff14994e87e7cc67b217ef4f8b96de0b4fffff8368eb58687591000000000000000806"], 0x32) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000140)={[0x10000, 0x1000, 0x4, 0xd000], 0x887, 0x40, 0x400}) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r4], 0xfffffffffffffd94) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x1, 0x2) [ 235.607367] binder: 9781:9785 ioctl c0306201 200000c0 returned -14 00:32:09 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f00000000c0)="25bca274769e620a2734fa0095e0612687ecb86a548802a902ee0000230000004e2f98b579090000000000000006e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}, {&(0x7f0000000140)="99516f39c36a4ea2bc969377603f9b807b325dfa1f14e8f2985282cf1453110f551be19a2ebb0a56af494b920d0d71b6bcbd3c55e87d02c38f96c902ca324cffe6f0d16f3c6a25a648fe9938b94708b47a89d274a08e5f4857575492ab4751d34e3b6c77aa8d3b2387533df6187b431a1436d2088c72b5fce395e9cd8e8002570321a52d87f2714007a5c7109555569e61aa735712a96cef9b56994d6b06c05ba41b4700d794f4b76166826fb1540076cde0e69d735919259af052f2eff71acde901638978cde5ae9f029fc611e290b7ddfbcc11f91691d4d16ba3e5825250483915ed75e4a8f2975027bc628e4f9b03538e", 0xf2, 0x5}, {&(0x7f0000000240)="a1a01f9c78b5fc07749176caca2461a0580936067d8b1295058dad92906b11452fff7e93f574cfde0d9c534ac7fd643ba046976fc6e9f4de78bdd15f0b2a0dcf7f907ab9ef53bc484e254c117d4c70a2a552dc7ef4327de10fd18ffa91f57b69332bcfdd1b879af3a2e9ce019a6f8e51a9a83bc694871d00267606a809ed1ae6ee02eace4959bd709ebd9b69ee7ef1ee2850c3e0f975fdba2ad2bf9b73ce11413dfe46e3c079b0c73782428bd74558a76f9bebb77b19c7f74b15112048d433", 0xbf, 0x200}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6a01000000000000008d302c00"]) [ 235.710269] binder: 9771:9772 ioctl 8912 0 returned -22 00:32:09 executing program 1: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000300)={0x0, 0x0, 0x8}) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000340)={r0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000000000000b0000000014001462726f6164636173742d6c696e6b00000c59aaed27f0f75151892ecdf113fd1b4f84cb00783115dc77b13d52d2f9a9cd3bd36b2d56321442251b9238dae6e182816a7d851004c00c664ef5002e3a7a3ae75aae09f7913a7ef00fc36a75933b6c8dad1f71d946de5271073a5484a2624670ef4d5dffa0d219c997460886095b4339654d2bfa552039"], 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x170, r4, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6d3d}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2f180000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa1}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xfffffff8, @loopback, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) mount(&(0x7f0000000040)=@md0='/dev/md0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='f2fs\x00', 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x5c3, 0x0) 00:32:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x0, 0x0, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="5ab6a6620eae1b1ac5a9f7da8c315dff030002000000e1754000475176fb3bd4c75d0bf7053f54dc5aa0c00700869d5c4482dc485f462f", @ANYBLOB="230000000000000014758b284b84a034ebcefe0c432517a5c7ba412254cf64a65befd21f101aeef1206c9b6940aaa6cc3f729e3cc4b68056d986639f9bbe84acfddd095bb3a334af7d28433e0a47a54c770922ed6db1c7d2c4026c3af3b084fdc79b02bf919e00000000"], 0x2}}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x4}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x40000080806, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @local}], 0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) [ 235.833526] EXT4-fs (loop4): Unrecognized mount option "j" or missing value [ 235.862352] f2fs_msg: 1 callbacks suppressed [ 235.862359] F2FS-fs (md0): Unable to read 1th superblock 00:32:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800bbeceb8fbfa57f00001000050700"/27, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705004f2df75ca2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=@newtfilter={0x50, 0x2c, 0xf27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x20, 0x2, [@TCA_FLOW_ACT={0x1c, 0x9, 0x0, 0x1, [@m_vlan={0x18, 0x1, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) [ 235.911485] F2FS-fs (md0): Unable to read 2th superblock 00:32:09 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) socket(0x27, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x240c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000000140)=""/69, 0x45}], 0x23}}], 0x1, 0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000006c0), &(0x7f0000000700)=0x4) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x2cb, 0x400000000000) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFCTH_QUEUE_NUM={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000740)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000d0030000000100000000000000020000e8020000e8020000e8020000040000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e657464657673696d30000000000000626174616476300000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000c0000001000000000000000000000000000000000000000000000000400052415445455354000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000001000000000000000000f8151d9d0000000000000000000000400052415445455354000000000000000000000000000000000000000000000073797a3000000000000000000400000d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000461bb9666985095c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000c000e80000000000000000000000000000000000000000000000000028004d41524b000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80000000000000000000000000000000000000000000000000028000000000000000000000000000000000000000000000000000000b039b38eeb822be623141d5b9c755dd7154f5dce1c9c10179019175412f403e81c11389d00d03b622c36023e0c27e6d3c4d4fd2f059b4b642bc5ae80b8fba657c0502d09d3e185cd7aa8"], 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = open(0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYRES16=r3, @ANYBLOB="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"], 0x2}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000002140)=ANY=[@ANYBLOB="a4190000", @ANYRES16=r3, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x1}, 0x10) [ 235.986315] F2FS-fs (md0): Unable to read 1th superblock [ 236.029048] F2FS-fs (md0): Unable to read 2th superblock 00:32:10 executing program 0: socket(0x0, 0x3, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000001600)=ANY=[], 0x1028) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000314af00031400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) r0 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x20, 0x40000) getpeername$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x20) 00:32:10 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x100010, r0, 0xcd143000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x0, 0x0, &(0x7f0000000f00)=0x58) 00:32:10 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r4, 0x0) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000080)="fbfd133fd9b08bb01505eaa8961b7d79e862449f8d52f12be306d3afe0ed86299fdcfa8a4f4dc23e0d03d494f2b39a10c483b6abf86884d650016ed50b028972d51fcc6b4b4ac4d70023d24e7018fd3dac07a690e536b57b", 0x58, 0x6}, {&(0x7f0000000300)="e3f8ce7b77e6ccce504894fa4833b212fdaa8b0e789c03cd519d08e2ea8d07e1d378bc8fd8a3dd38e2c0a4c2b2609c6431810ff83fff157aadf4a6186bb20e88b82a1af52cf85bed8b990f2ac1191610db76b88deb75f33a9aac23d0ea209daffc024632084f680263c2bf9e5c6b5b8625c819dc200d039f66dc6262b57f0c50ff60fc2a1bc7742c5930dea6b8746c2808e7e7104289f06a18d60d0abc06cabbe0965812b018782c4b005e76d8a5e17c24c8ac5114b6a690724d885e04cd300bd06cd75a5f6d775454b45bd4b9", 0xcd, 0x226a}, {&(0x7f0000000240)="8e4f061a6568c31e3df647d507f3327d724b34a9616c5b2945d4636e676e9fd99d948761b66d2fba9d5c48805b8cedaa46f20972bd7cb572d619ff4b068a7bd15cfeda25655979e1", 0x48, 0x5}, {&(0x7f00000004c0)="106aa4e7d0e04ec9a7276be88278cc8256f6b320afecc02f1cf5ac3aff4cfb48649ff9062465db54b4db95a90f27aada6abf1b93a0203c834a3baa53d3158668962368adbe3f7971475737c8dbba254f8e78696bc98b76524a8910966335de7da25d014651e0a66e35a0c241f69f18829efe19cc5275cab6aa264f", 0x7b, 0xfffffffffffff34b}, {&(0x7f0000000540)="15ae3a56cb4ed32c770fc4415c20a74b0c8eb37d85a49f407d4a7b66624d0b87bee3c4797a8547cb69217bab09fb903a3c9e5641e1db9c4e4ae8ac43f0a01e4acaaf0c0b48e504aa18f7320454302329", 0x50, 0xffff}, {&(0x7f0000000400)="fa4feea27f2ff8d1eba9a200a0e70dae7d188e4dc5b852aa", 0x18, 0x8}], 0x840, &(0x7f0000000680)={[{@noquota='noquota'}], [{@uid_eq={'uid', 0x3d, r4}}, {@seclabel='seclabel'}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@subj_user={'subj_user', 0x3d, 'gtp\x00'}}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8, 0x2, r0}}}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 00:32:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchdir(r0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r4, &(0x7f0000000100)=ANY=[], 0x49f) r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r5, 0x9) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) 00:32:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f00000003c0)={0x0, 'ip6gre0\x00', {}, 0xf664}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) r8 = accept$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f0000000280)=0x10) accept4(r8, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000340)=0x80, 0x800) 00:32:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000540)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e44fb1c752533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c4dd2a443fd40c9f01d98aee8db6757f52db626adc38d78f4e562bf327cb42b67", 0xb4) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(r2, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000002c0)={0x3, 0x4b, "86064f309f3a0ceeaa444ad75156840cad797cd5cfaf511f00b74610908d5f84b4dbb88ab6d42a980b1fc2c1197fba05ff6dc15f164e8f8af0c08634b4479249e7199b2a7c9036745dd39d"}) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) [ 236.373539] ldm_validate_privheads(): Disk read failed. [ 236.381761] loop0: p2 < > [ 236.392129] loop0: partition table partially beyond EOD, truncated [ 236.428682] loop0: p2 size 2 extends beyond EOD, truncated [ 236.482461] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 970769) [ 236.482497] FAT-fs (loop4): Filesystem has been set read-only [ 236.482598] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 970769) [ 236.493668] binder_alloc: 9848: binder_alloc_buf, no vma [ 236.526882] binder: 9848:9859 ioctl 8983 200003c0 returned -22 00:32:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x1}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000019c0)={0x8, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000680d8b6e00", 0x1000}}, 0x1006) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x8000000}) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) 00:32:10 executing program 1: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000300)={0x0, 0x0, 0x8}) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000340)={r0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000000000000b0000000014001462726f6164636173742d6c696e6b00000c59aaed27f0f75151892ecdf113fd1b4f84cb00783115dc77b13d52d2f9a9cd3bd36b2d56321442251b9238dae6e182816a7d851004c00c664ef5002e3a7a3ae75aae09f7913a7ef00fc36a75933b6c8dad1f71d946de5271073a5484a2624670ef4d5dffa0d219c997460886095b4339654d2bfa552039"], 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x170, r4, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6d3d}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2f180000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa1}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xfffffff8, @loopback, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) mount(&(0x7f0000000040)=@md0='/dev/md0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='f2fs\x00', 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x5c3, 0x0) 00:32:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x15000000000000, 0x485, 0x6, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x101800, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2ac1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x80) [ 236.626777] F2FS-fs (md0): Unable to read 1th superblock [ 236.626857] F2FS-fs (md0): Unable to read 2th superblock [ 236.626967] F2FS-fs (md0): Unable to read 1th superblock [ 236.627002] F2FS-fs (md0): Unable to read 2th superblock 00:32:10 executing program 1: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000300)={0x0, 0x0, 0x8}) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000340)={r0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000000000000b0000000014001462726f6164636173742d6c696e6b00000c59aaed27f0f75151892ecdf113fd1b4f84cb00783115dc77b13d52d2f9a9cd3bd36b2d56321442251b9238dae6e182816a7d851004c00c664ef5002e3a7a3ae75aae09f7913a7ef00fc36a75933b6c8dad1f71d946de5271073a5484a2624670ef4d5dffa0d219c997460886095b4339654d2bfa552039"], 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x170, r4, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6d3d}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2f180000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa1}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xfffffff8, @loopback, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) mount(&(0x7f0000000040)=@md0='/dev/md0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='f2fs\x00', 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x5c3, 0x0) 00:32:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000200)=0x8) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3) recvmmsg(r1, &(0x7f00000045c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e20, @multicast2}], 0x10) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0xc007e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0xd42) [ 236.833862] audit: type=1804 audit(1590107530.773:56): pid=9889 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir337602322/syzkaller.xYcqVh/31/bus" dev="sda1" ino=15868 res=1 [ 237.054187] F2FS-fs (md0): Unable to read 1th superblock [ 237.054261] F2FS-fs (md0): Unable to read 2th superblock [ 237.084667] binder_alloc: 9884: binder_alloc_buf, no vma [ 237.204950] binder_alloc: 9848: binder_alloc_buf, no vma [ 237.206295] binder: 9848:9907 ioctl 8983 200003c0 returned -22 [ 237.227265] nla_parse: 3 callbacks suppressed [ 237.227272] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:32:11 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) keyctl$session_to_parent(0x12) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="61c3"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, 0x0) fsync(0xffffffffffffffff) [ 237.507957] audit: type=1804 audit(1590107531.433:57): pid=9915 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir337602322/syzkaller.xYcqVh/31/bus" dev="sda1" ino=15868 res=1 00:32:11 executing program 4: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1530c2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x4000000000010046) [ 237.508027] audit: type=1804 audit(1590107531.433:58): pid=9915 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir337602322/syzkaller.xYcqVh/31/bus" dev="sda1" ino=15868 res=1 00:32:11 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x7) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x220103, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xff) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c444, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x37}, 0x8000000200004d1e, 0x800007c, 0x0, 0x0, 0x100000001, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x3, @null}, [@default, @rose, @rose, @bcast, @default, @null, @rose, @default]}, &(0x7f00000001c0)=0x48, 0x40800) connect(r1, &(0x7f0000000380)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80) syz_mount_image$btrfs(&(0x7f0000000480)='btrfs\x00', &(0x7f00000004c0)='./file0\x00', 0x20, 0x0, 0x0, 0x8000, 0x0) 00:32:11 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x36488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x201400, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000301010300000000000000000c00000008000740000000061c001080080001400000000208000240000000060800024000000003080015400000000408000340000000061c000f800800024000000008080002400000000308000140000016542c000f80080003400000000408000340000002000800034000000002080003400000040108000140000000015400068014000500ff0100000000000000000000000000013c000380060002004e200000060002004f210000060002004e220000060002004e200000060001004e200000060001004e200000060002004e240000"], 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/adsp1\x00', 0x119400, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000400)=0x5) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @local, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xfffffffffffffe98) [ 237.572784] binder: BINDER_SET_CONTEXT_MGR already set [ 237.572797] binder: 9884:9893 ioctl 40046207 0 returned -16 00:32:11 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) dup(0xffffffffffffffff) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000000180)={{0x37, 0x5d}, 0x1, 0x99b, 0x7, {0x1, 0x7}, 0x2, 0x9}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000080)={0x3, 'bond_slave_0\x00', {0xfffffffd}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={[], 0x1b}}]}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x60}}, 0x0) 00:32:11 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x7) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x220103, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xff) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c444, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x37}, 0x8000000200004d1e, 0x800007c, 0x0, 0x0, 0x100000001, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x3, @null}, [@default, @rose, @rose, @bcast, @default, @null, @rose, @default]}, &(0x7f00000001c0)=0x48, 0x40800) connect(r1, &(0x7f0000000380)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80) syz_mount_image$btrfs(&(0x7f0000000480)='btrfs\x00', &(0x7f00000004c0)='./file0\x00', 0x20, 0x0, 0x0, 0x8000, 0x0) [ 238.167507] binder_alloc: 9947: binder_alloc_buf, no vma [ 238.168222] binder: 9947:9953 ioctl 8982 20000080 returned -22 00:32:12 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, [0x0, 0x3, 0xb939, 0x8, 0x80000000, 0x8, 0x7fff, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x8, 0x0, 0xfff]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0xa}, &(0x7f0000000040)=0x8) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x5ed2c1, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000140)='./file0\x00') ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 00:32:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x2, 0x0, 0x8, 0x0, 0x6, 0x80000000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast1, @in6=@private1, 0x4e20, 0x0, 0x4e23, 0x0, 0x2, 0x189922fe5d6823e9, 0xa0, 0x6c}, {0x400, 0x4, 0x2, 0x0, 0x4, 0x0, 0x9}, {0x3, 0x7, 0xa, 0x5}, 0x48, 0x6e6bb2, 0x2, 0x1, 0x6}, {{@in=@loopback, 0x4d3, 0x3c}, 0xa, @in6=@private0={0xfc, 0x0, [], 0x1}, 0x3500, 0x0, 0x0, 0xfc, 0x8, 0x0, 0x7}}, 0xe8) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x100000000000}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f00000005c0)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x125000, &(0x7f0000000600)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532322c76657273696f6e3d3970323030302e4c2c756e616d653d76666174002c64656275673d3078000000003030303030303030303038302c02006465766d61702c63616368657461673d76666174002c76657273696f6e3d39701fc91d4f00f4b5cb34fd261f5b323030302c63616368657461673d76666174002c6d73697a653d3078303030303030303030303030303030392c6f626a5f726f6c653d76666174002c6d6561737572652c00"]) fchdir(r4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000500)={0x3f}, 0x4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4801, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) 00:32:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000200)=0x8) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3) recvmmsg(r1, &(0x7f00000045c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e20, @multicast2}], 0x10) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0xc007e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0xd42) 00:32:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x6}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x82) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000002e00)) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) 00:32:12 executing program 3: perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000300)=ANY=[@ANYBLOB="485f999a30913d61793b49cbffe4a6f377f1fdc62ca88264cebf2f6698ba128eae60"]) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f00000002c0)={0x7, 0x48}) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x210, 0xe8, 0xe8, 0xe8, 0x0, 0xe8, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@empty, @multicast1, 0x0, 0x0, 'vlan1\x00', 'vlan0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) [ 239.110912] binder: 9947:10001 ioctl 8982 20000080 returned -22 [ 239.121596] audit: type=1804 audit(1590107532.844:59): pid=9997 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir337602322/syzkaller.xYcqVh/34/bus" dev="sda1" ino=15896 res=1 00:32:13 executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) syncfs(r1) syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo/4\x00') r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x43e0a2, 0x0) creat(&(0x7f0000000040)='./bus/file0\x00', 0x191) sendfile(r2, r0, 0x0, 0x6) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="3f5579bdb0f29e0f353ec12adaf495674e4a601d79941f881e5025b206db40ef988efc96058167b8eb30eae4215085f17c42ef78d52feb4581c43590ce9483759dcf5b6fdb375006977a4ed808954d0ad790efbe9e4b119ef611a0b6302506"], 0x0, 0x0, 0x0}) ioctl$VIDIOC_QUERYMENU(r6, 0xc02c5625, &(0x7f0000000080)={0xe2a3, 0xc0b0, @value=0x712e}) fcntl$setlease(r3, 0x400, 0x1) [ 239.541695] audit: type=1804 audit(1590107533.394:60): pid=10007 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir337602322/syzkaller.xYcqVh/34/bus" dev="sda1" ino=15896 res=1 00:32:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x5, 0x5, 0x7, 0x9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1ff, 0x4, 0x100000001, 0x0, r0}, 0x21) 00:32:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x3, 0x5) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'bond0\x00'}) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) dup2(r5, r6) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000040)) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x9, 0x3, 0x85, 0x5, 0x9c3, 0x0, 0x68d5, 0xfb38, 0x7, 0x7f]) 00:32:13 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000000011905000000000000000000000000240001001400010008000100ac1414aa08000200e00000000c0002000500010000000000240002000c000200050001000000000014000100080001000000000008000200000000000800070000000000100005"], 0x1}}, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x2000, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000003, 0x40010, r3, 0x48d1d000) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) sendto$rxrpc(r6, &(0x7f00000002c0)="814311f96ec2c78cf3806fa68ec55b037c7a3ff45f191f558516f037a3502cb2e51e50efa581304390cbf960deeb58df100bcc1acc6969f1740bd9c5bf50299a25739dae52fb21d2fc042774e578989ec2c758b2685dc535358a979565ab66a1bb61706857b2d86c7772916e35643c069d2674fd1d0018c578d43ac53914399cf14b7c02958fb15628946b17956ba3c7b23288b195a0995d74b50401a24c2bfed1ea2d1b48792541b2dc67fb4ae031b221286c2f293a5f9650b86e15a117678611e1541e06424b303d88a08b86c64850f9002b27d9ee91392da4e5fbed79f2a992874f1fbc", 0xe5, 0x40050, 0x0, 0x0) dup(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 00:32:13 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, 0x0) recvmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}, 0x4}, {{&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000340)=""/195, 0xc3}, {&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000000900)=""/4096, 0x1000}], 0x3, &(0x7f0000000280)=""/60, 0x3c}, 0x8}], 0x2, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r2, &(0x7f0000000040)="649b5359a6a2c5a419cd2da3e0845dc2bdc1276f221e3033eb9470c3e2153138df81ab2892a3530c98da9a11a970b1ee73fb3b9fc868f4b0", 0x38) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x4080) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) sched_yield() clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x2c600, 0x0) socketpair(0x15, 0x5, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000000)=0x17f) 00:32:13 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x4000000000000f4, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8927, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x18) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79) sendmmsg(r0, &(0x7f0000007e00), 0x4000000000000f4, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) connect(r1, &(0x7f0000000080)=@x25={0x9, @null=' \x00'}, 0x80) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={r4, @in={{0x2, 0x4e24, @local}}, [0x0, 0x3, 0xb939, 0x2, 0x80000000, 0xabb, 0x7fff, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x8, 0x0, 0xfff]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000040)={r4, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r4, 0x8}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000500)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) 00:32:13 executing program 2: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003980)=[{{&(0x7f0000000300)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "6beabdde3b53986f0e752a1f9114ec57f3c0d6787143efff65947f380f0f7a8dc72816d98e3e938b002d6e141a2880028692afb20ae25e7b93e35cdc8c23a4"}, 0x93, 0x0}}, {{&(0x7f0000000200)=@in6={0xa, 0x0, 0x9, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x7f}}}, 0x80, 0x0}}], 0x2, 0x0) fallocate(0xffffffffffffffff, 0x3, 0x8, 0x7fffffff) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002000e00000006000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="8b70eb1eec84f3030aef190244bc982b2b136a1235fb9d74643381a419b785aebf6e6be58ef66bec74d033881549a0861751"], 0x58}}, 0x0) keyctl$unlink(0x9, 0x0, 0x0) [ 239.854694] binder: 10020:10033 unknown command -1116121793 [ 239.880625] binder: 10020:10033 ioctl c0306201 20000280 returned -22 [ 239.899333] binder_alloc: 10030: binder_alloc_buf, no vma [ 239.904428] binder: 10020:10041 ioctl c02c5625 20000080 returned -22 00:32:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x1}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x7fffffffff, 0x0, 0x6}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x8000000}) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r9 = dup(0xffffffffffffffff) open_by_handle_at(r9, &(0x7f0000000580)=ANY=[@ANYBLOB="78fdffff6205000650ac3d99c7fe0200000000465fd421f4e97b5e6af0736698b00c72bce933ebf6430c98c6b6332493d610bf512d4cbf955f8de59053cc6f6125c3af48130f4e64ff000000c07cd7840accd8156d000021ecb8466ef82eebacff3d6c1717f2e1335986d60d7b97f3cda1fd8f7f732e12bec8066dce2ebe7d15182785445bdaefa987752a669cc647192aad07b0bba0e96a5663c5685424d66ce1f58941e19725cf2d5fd304f89c6395bde54e92d2dd3df2e38446a7ad2eba9cbb8da6751c717c6d7b896531a707b3ec7157e39665965088b8590758c089cf6470234dd16cd589e9507acdede525e753d9d5fc3e89687790a2b4d4c071d1a1d9af61e5938f09ed3a6ee422062579e0cb8d35dbdddfa5972b5f00"/295], 0x12da00) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) [ 240.332831] audit: type=1804 audit(1590107534.274:61): pid=10059 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir616832583/syzkaller.xqcjYn/56/bus" dev="sda1" ino=15889 res=1 [ 240.521755] binder: BINDER_SET_CONTEXT_MGR already set [ 240.533584] binder: 10020:10033 ioctl 40046207 0 returned -16 [ 240.567373] binder: 10020:10041 unknown command -1116121793 [ 240.573323] binder: 10020:10041 ioctl c0306201 20000280 returned -22 [ 240.573622] binder: 10020:10044 ioctl c02c5625 20000080 returned -22 00:32:14 executing program 3: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x1f, 0x0, 0x5, 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f00000000c0)={0x4, 0x1}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0xbc}, 0x8) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x20420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000007000000000000404005"], 0x0, 0x0, 0x0}) getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000240)=0x200, &(0x7f0000000300)=0x4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, &(0x7f000000a000)) 00:32:14 executing program 4: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000100)={[{@fat=@errors_remount='errors=remount-ro'}], [{@subj_type={'subj_type', 0x3d, ',security(\xectrustedwlan0^cgroup\xdf]md5sumeth1'}}, {@context={'context', 0x3d, 'system_u'}}, {@smackfsdef={'smackfsdef', 0x3d, 'errors=remount-ro'}}]}) 00:32:14 executing program 0: socket(0x0, 0x6, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x14, r1, 0x1}, 0x14}}, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x42, 0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYBLOB="510452d33181424844c736720d31002b357b56b8677c4bd91f31408bd052aff836320d516c1f8be78361073ede9f12c488fc6438c1cd3097b505d00505fce6c5d822e8", @ANYRES32, @ANYRESHEX, @ANYBLOB="9de318f7c4aaf51dee819db3c4a2a4a59d016807cff504d5701da08e180b9d796cd8ebe3d9e4650ed87c6df8b900d40d2ceb83e93bd903c7a27c5b339b", @ANYRES64], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f00000001c0)={0x9d0000, 0x9, 0x80000001, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x9909dd, 0x3, [], @value64=0x8}}) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0xc0, r1, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdfb2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffe01}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2f2e}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000084}, 0x804) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000314af00031400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 00:32:14 executing program 2: preadv(0xffffffffffffffff, &(0x7f00000027c0)=[{&(0x7f0000000400)=""/4108, 0x100c}], 0x1, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(0xffffffffffffffff, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f0000000040)=0x8000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/rt_cache\x00') preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) [ 240.865477] FAT-fs (loop4): Unrecognized mount option "subj_type=" or missing value 00:32:14 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0xb0c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x79b3}, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, "2a4317eb1e9f1af7afdb784ea030149058520e5a5941f045ec89d19b960a49e5b126556bc98a16e5e6950f396fec49c6c379c521b26346fdd10f755c91f619e6432ddc55b007510c590922951910a3d39d55c08ecd2367a44377f6bc855ae0004dd56323c16345d26b154c71b73bb8cd01e0613616f9dc3c8006b6a113593823c0ff8b2ed12c8944e5b9915f9db83b0e6c83d8fd1ddcde8794a9b000db6753231fe5ad2f4bcfa0c00b9c7a43447a96abc43975aacdf045ec0ebb1c9fbbb7004e0c13ca3b4e0a0970cd73d729c79c05f373b387620f33c1a34561f0bf0da10a3f94488b989a56d5"}, 0xe8) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000300)='.\x00', 0xfe) r5 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="4a8f26af554252c600a5913f75"], 0x1) sendfile(r5, r5, &(0x7f0000000200), 0xa198) [ 240.965530] binder: BINDER_SET_CONTEXT_MGR already set 00:32:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x3, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="2123cb3baa3c7bf4d592b0420d2e022dcc2db076b107fd8e2a2f67371ee8f8af5632d22abd7933c231fa5bc8ec006d05daa184218f70c90f11cb813f654704699c53de56e96da490", 0x48}], 0x2}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 00:32:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x48280) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x5) fcntl$setstatus(r1, 0x4, 0x6100) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, 0x0, 0x11) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000180)=ANY=[], 0x87ffffc) [ 240.994751] audit: type=1804 audit(1590107534.934:62): pid=10057 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir616832583/syzkaller.xqcjYn/56/bus" dev="sda1" ino=15889 res=1 [ 240.996271] binder: 10085:10089 unknown command 1717991472 [ 241.027354] FAT-fs (loop4): Unrecognized mount option "subj_type=" or missing value [ 241.046858] binder: 10090:10095 ioctl 40046207 0 returned -16 [ 241.058104] binder: 10085:10104 ioctl c0205649 200001c0 returned -22 [ 241.102739] audit: type=1804 audit(1590107534.954:63): pid=10058 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir616832583/syzkaller.xqcjYn/56/bus" dev="sda1" ino=15889 res=1 00:32:15 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x3}], 0x5ae, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x4c80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xa677f21e331b4de7, @perf_config_ext={0x3, 0x2}, 0x48063, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$key(0xf, 0x3, 0x2) add_key(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x28600, 0x0) socketpair(0x8f9a4dafcc353d0b, 0x5, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x17f) [ 241.257337] binder: 10085:10089 ioctl c0306201 20000200 returned -22 [ 241.445927] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 241.514254] EXT4-fs (loop3): bad geometry: block count 580964351930795064 exceeds size of device (66048 blocks) [ 241.595868] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 00:32:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x101) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup3(r3, r4, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4400ae8f, &(0x7f0000000080)={0x7}) dup2(r6, r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r8, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@loose='loose'}, {@dfltgid={'dfltgid', 0x3d, r12}}]}}) keyctl$chown(0x4, 0x0, r8, r12) [ 241.652930] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 241.720211] loop0: p2 < > 00:32:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x1000, 0x9, 0xfffffffffffffffd}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/233, 0xe9}}, {{&(0x7f0000000d80)=@generic, 0x80, &(0x7f0000001240)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/212, 0xd4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/57, 0x39}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000180)=[{&(0x7f0000000500)}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x14, 0x2, 0x6, 0x4000000000001f7, 0xfffffffffffffffa, 0x8, 0x0, 0x3ff}, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x8, 0x1, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x1000, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r4 = open(&(0x7f0000000040)='./file0\x00', 0x40c2, 0x194) fchdir(0xffffffffffffffff) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) write(r4, &(0x7f0000000600)="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", 0xe00) sendfile(r4, r5, 0x0, 0x12000) socket(0x0, 0x0, 0x0) 00:32:15 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) open(&(0x7f00000001c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x600100, 0x14) chdir(&(0x7f0000000300)='./file0\x00') r0 = socket$unix(0x1, 0x2, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file0\x00') r1 = getpgrp(0xffffffffffffffff) ptrace$getregs(0xc, r1, 0x3, &(0x7f0000000040)=""/1) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x802) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x1, 0x0, &(0x7f00000002c0)=ANY=[], 0x20, 0x0, 0x0}) r5 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) setsockopt$inet_dccp_int(r5, 0x21, 0x11, &(0x7f0000000200)=0x5, 0x4) 00:32:15 executing program 1: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000200)=0xe88, 0x4) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275730f096f7f6b6405213d2e2f19919e61489a1156182d709489c1070d24b305000066696c653142dc000045726469723d2e2f66696c6534"]) utime(&(0x7f0000000140)='./bus/file0\x00', 0x0) mknod$loop(&(0x7f0000000080)='./bus/file0\x00', 0x0, 0x0) [ 241.864172] audit: type=1800 audit(1590107535.094:64): pid=10112 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="bus" dev="sda1" ino=15891 res=0 [ 241.884135] audit: type=1800 audit(1590107535.104:65): pid=10112 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="bus" dev="sda1" ino=15891 res=0 00:32:15 executing program 0: getpid() sched_setscheduler(0x0, 0x3, &(0x7f0000000380)) capget(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c9, 0x10101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat(0xffffffffffffffff, 0x0, 0x40, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r0, r2, 0x0, 0x102000004) 00:32:15 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00000000c0)={0x7f499eb2ae778c31}) epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0x7fffffff, &(0x7f0000000180), 0x8) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r5, r4) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) r7 = dup3(r6, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r7, &(0x7f00000001c0)={0x0, 0x3f00}) [ 242.007307] binder: BINDER_SET_CONTEXT_MGR already set [ 242.007342] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 242.065521] binder: 10148:10151 ioctl 40046207 0 returned -16 [ 242.079996] audit: type=1400 audit(1590107536.014:66): avc: denied { block_suspend } for pid=10159 comm="syz-executor.3" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 00:32:16 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x1) fallocate(r0, 0x3, 0x0, 0x8020003) syz_genetlink_get_family_id$smc(0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x1) lseek(r0, 0x0, 0x3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) [ 242.132478] binder: BINDER_SET_CONTEXT_MGR already set [ 242.137970] binder: 10148:10161 ioctl 40046207 0 returned -16 00:32:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x161, &(0x7f0000003340)={0x0, 0x3938700}) sched_setattr(0x0, 0x0, 0x0) getpriority(0x2, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000003380), &(0x7f00000033c0)=0x4) mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c00)={&(0x7f0000002980)=ANY=[@ANYBLOB="f8000000150004002bbd7000000000000007050001001a000000d90001008b0c3e866109689d6981a19f019303dce4994a93cc570775425c077f32eafe82c39e9fbbcf2490fd821ac031b42bd1e394c3f7319fffffffff0000000017803f92984abd8943451ca8a1382f5bf122d860a2f5da0499b60863b50389afc240a287467df7ff880cec2be2c89640b1cf2cd23db944f0e68dd4d4e882e3dfeb43cd3386cae987cddb09bfd8a64fd7a4f213e4efc7d533e097cb65e783d8206c0346c735c0b783a92c1a67c533e8451fe517774b3ef908e0b4bee8db00d45875a9b123b5eb10ba4c468f63f3484b050f06c387aca29f84f3174497"], 0xf8}, 0x1, 0x0, 0x0, 0x48010}, 0x40040) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000340)) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"/415]) rmdir(&(0x7f00000000c0)='./bus/file0\x00') ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x4000, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f00000006c0)={0x1, "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"}) 00:32:16 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) r1 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xed4e, 0x9}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc) close(r0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x8, @empty}, 0x1c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r4, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0xa0080}, 0xc, &(0x7f0000000140)=[{&(0x7f0000000080)={0x2c, 0x1e, 0x400, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x14, 0x52, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0xd, 0x0, 0x0, @ipv4=@multicast2}]}, 0x2c}, {&(0x7f00000000c0)={0x18, 0x2e, 0x100, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x8, 0x11, 0x0, 0x0, @uid=r4}]}, 0x18}], 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="187500"/16, @ANYRES32=r1, @ANYRES32=r0], 0x18, 0x84}, 0x4000) r5 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x208200) sendfile(r0, r5, 0x0, 0x8000fffffffe) 00:32:16 executing program 3: ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2000000000000}, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x400000, 0x0) perf_event_open(&(0x7f0000000600)={0x3, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7f, 0x4f3e7b1c60d5bf02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x100, 0x0, 0x7, 0x1, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, r0, 0x8) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) waitid(0x0, r1, &(0x7f0000000140), 0x1000000, &(0x7f00000003c0)) socket$inet6(0xa, 0x1, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) fchmod(0xffffffffffffffff, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r2, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9, 0x0, 0x0, @link_local}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x40003ad, 0x2000000) [ 242.214319] print_req_error: I/O error, dev loop0, sector 0 00:32:16 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, 0x140d, 0x400, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) connect$l2tp(r4, &(0x7f0000000040)={0x2, 0x0, @empty, 0x1}, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@msize={'msize'}}, {@version_u='version=9p2000.u'}]}}) 00:32:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000000)=ANY=[@ANYBLOB="1037be4b7179a840536fc29030d949bd1f3b47055ddb45ea4c"], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 242.477435] overlayfs: unrecognized mount option "loweídir=./b¼óiorkdir=./file1" or missing value [ 242.496756] binder_alloc: 10197: binder_alloc_buf, no vma [ 242.534022] 9pnet_virtio: no channels available for device 127.0.0.1 [ 242.544415] 9pnet: Insufficient options for proto=fd [ 242.552741] overlayfs: unrecognized mount option "loweídir=./b¼óiorkdir=./file1" or missing value 00:32:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000000)="0f22270fc76ca7baa00066ed66b91e0100000f320f20d8b135200000000f20d80f22d8f30fbcf80f3581d90c0066f2ba5f57160fc77c01", 0x37}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x10002, 0x2, 0x4000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={0x0, @ipx={0x4, 0x0, 0x0, "273b7da621ef"}, @sco={0x1f, @none}, @phonet, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='dummy0\x00'}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) accept4$nfc_llcp(r5, 0x0, &(0x7f0000000040), 0x80800) 00:32:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000002e00)) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r6, &(0x7f00000000c0), 0x0, 0x4, 0x0, 0x2}]) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000600)) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="78000000630500009b3f57e0641f92626eb187711925573d99c7fe46ea2b0fdc5fb003ce57abf581589a5f465fd4216af0736698b0ccffb28d0d3248c76e0000000c0ef90c70f85f72bcb2975ee933ebf6430c98c67d1f6027581a764f49d3332491d610fcd4442ba89cbf512d4cbf955f8de59053cc6f6125c3af48130f4e64e60000003467ca538f0376bc5c4a17e8291451319b0b2f2aed8e8f51b85e0d247bfdae22f898650cc492ec1d0cc3d1422c3c60541e0d7aa588916b1714fcefe47e1059f6ba4188f687bd4e5b73d3ff062bb51d94531dbd9d2f64314929d1211dec80207dbd0759ce2a3298ec7a3ba240d4c22cd9fbac2232a18eb3759639bb5106e662e33c01839a25efa5f1ad1efdc2f113ec2c8fed40c6391b87011565e648101b5c7227007a789182c34d"], 0x12da00) sendfile(r5, r9, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 00:32:16 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r2, r1) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000300001000000000000000000000000003c000100380001000c000100736b626564697400240002800800040000000000180002"], 0x1}}, 0x0) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe0, 0x0) 00:32:16 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x1) fallocate(r0, 0x3, 0x0, 0x8020003) syz_genetlink_get_family_id$smc(0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x1) lseek(r0, 0x0, 0x3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) [ 242.805214] print_req_error: I/O error, dev loop0, sector 0 [ 242.888205] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 242.993534] audit: type=1804 audit(1590107536.924:67): pid=10231 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir207641660/syzkaller.NN2tbs/60/bus" dev="sda1" ino=15902 res=1 00:32:17 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x1) fallocate(r0, 0x3, 0x0, 0x8020003) syz_genetlink_get_family_id$smc(0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x1) lseek(r0, 0x0, 0x3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 00:32:17 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000006, 0x12, r4, 0x0) ioctl(r0, 0x80044100, &(0x7f0000000040)) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video1\x00', 0x2, 0x0) 00:32:17 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000380)) sched_getscheduler(r2) r3 = socket(0x10, 0x803, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r6, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[0x0, 0x2], [], @local}}]}, 0x40}}, 0x0) [ 243.243347] binder_alloc: 10197: binder_alloc_buf, no vma [ 243.249604] audit: type=1804 audit(1590107536.924:68): pid=10231 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir207641660/syzkaller.NN2tbs/60/bus" dev="sda1" ino=15902 res=1 00:32:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='cpuacct.stat\x00', 0x0, 0x0) write$P9_RMKNOD(r3, &(0x7f0000000040)={0x14, 0x13, 0x2, {0x8, 0x0, 0x5}}, 0x14) write$binfmt_elf64(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1b5b070700340000000000000000000000000000000000006d10000000000000400000000000000000000000000000000000000000003800bcf800000000000000000000000000000000000000000000ff7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef2909f8f72a79989dd8efd31bc9862a5a238fbd5e940e752fe212cd90f0d2495940d598492b539c17c3dca3798d117e580e8e87a04ff4dd7528dbb97c6862dc4a57199242d76c678728ed516f3292dea1a5253b7011f49967c50fa496a9915ac178ca4eac60d1318e2262557d2f7a339db64a855a7c0daa7cb4da208621cd17a936a7c53921247f0ccc2fce98695bc1e0e7f2a29f7f04f813e7acb4c108a15bc463b8cc73516596ac2813e495b8ea8d6d8ce6f4945628d6e03c6acb0cb13af7af910d6b2707d45d06e105dd9cf66f729e1c803876cd37d79c78e4"], 0x278) [ 243.359515] binder_alloc: 10239: binder_alloc_buf, no vma [ 243.396877] binder: 10239:10251 ioctl af02 0 returned -22 00:32:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0, 0x0, [], 0x0, r3}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) readv(0xffffffffffffffff, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000308) r5 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x5, 0x115200) fsetxattr$trusted_overlay_opaque(r5, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x0) write$evdev(r4, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 00:32:17 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = mq_open(&(0x7f00000003c0)='!-vboxnet1system@\x00', 0x40, 0xd0, &(0x7f0000000400)={0x1, 0xff, 0x200, 0x20a88}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x440000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x90, r2, 0x100, 0x70bd29, 0x25dfdc00, {}, [@TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000055}, 0x40400c4) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f0000000000)={0x0, 0xffe, 0x7b0}) r5 = socket$inet(0x10, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000140)={0x0, 0x8, 0x3, 0x1000, 0x8b, 0x4, 0x7, 0xffffffffffff8000, 0x40, 0x81, 0xfffffffc, 0x5}) sendmsg(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="240000002000070700fffd946f6105000200000afe0208020001080008000d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 00:32:17 executing program 4: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x10000, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41c1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000040), 0x9}}, 0x0, 0xffffffffffffffff, r0, 0xa) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) sendmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x0) [ 243.491761] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 243.523476] binder_alloc: 10259: binder_alloc_buf, no vma [ 243.573214] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 00:32:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x7a00, 0x3d}, [@ldst={0x5, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe29}, 0x48) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x111400, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000080)={0x3, 0x0, 0x20, 0x0, 0x7f}) 00:32:17 executing program 2: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40065, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}], [{@obj_user={'obj_user', 0x3d, 'tmpfs\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x38, 0x62, 0x63, 0x66, 0x32, 0x61, 0x65], 0x2d, [0x33, 0x36, 0x31, 0x30], 0x2d, [0x66, 0x33, 0x34, 0x37], 0x2d, [0x63, 0x35, 0x37, 0x35], 0x2d, [0x33, 0x0, 0x65, 0x63, 0x39, 0x66, 0x65, 0x38]}}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r0}}]}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[], 0x30, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) write$6lowpan_control(r3, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:10 0', 0x1b) [ 243.732480] binder: 10279:10281 unknown command 0 [ 243.738640] binder: 10279:10281 ioctl c0306201 20000200 returned -22 00:32:17 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(r2, 0x400, 0x3) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000000000000000000000000db9f70b720816dcf8d42e8000000000000a576bb56e3901a8bfdfa5dc6f714758f545fe62f42d68a7fcfa3b938474748f961b746f4d303c43a7064d37aac8e5c0e94ac", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046304401474d870799535499526c053c5e5e011089536e4dbad7dbf85edadb2160500b314fa009f25329523282f20c085a12ad8dd83e151164691d5e7743060673ee900"], 0x0, 0x0, 0x0}) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000000)=0x7, 0x4) ftruncate(r4, 0x208200) bind(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8000fffffffe) 00:32:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="056304407683ac372b558a182f881fea47eaa80570b4f66eb91665a50542d3a194be55caad393d62d7493f0e05f06ebf94172b44ef445540175113486d6d000000000000000000"], 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="650f01df0f9ad166b8007000000f23c00f21f86635020007000f23f80fc7980900baf80c66b83695bc8066efbafc0cb82e1aefc00ef31f0065dd14660f6f8f00000fc75b61d9d0", 0x47}], 0x1, 0x42, &(0x7f0000000140), 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1) pipe(0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:32:17 executing program 1: syz_mount_image$ext4(&(0x7f0000001300)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="21bca274769e620a2d34fa0095e0612687ecb86a548802a90200000500000000000000b579a782c270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable'}}]}) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) sendmsg$nfc_llcp(r2, &(0x7f0000000640)={&(0x7f0000000140)={0x27, 0x0, 0x2, 0x3, 0x16, 0x1f, "25600e4f69468ca288243b41936afc9cba8d915a2ce4d309352597eff07778f70a4ecfadacff817543eaf0e85a7d6a465d2392a0883b75ba3f89bb24553381", 0x3c}, 0x60, &(0x7f00000005c0)=[{&(0x7f00000001c0)="a45916080c9462d2b550370771652f181aada35ad719f712c3f0fd5b43d8d90e1a0cfd85f728d5652cd9fb94abf068ae819889909e2063b5b00320847ecf17a4b5a980b5c2c5ba181ab2c0bd2c9af720fb0a97ebaaca2a85a1b28cebb72fcbdb34890141e24a7a463b3cf5ef848394fa3621c187c3311bff760173800bb5189f407597d94fd6f0aa0460fc435a79984cdb5c2c6e36c68f36677b724edc7cbe7c92", 0xa1}, {&(0x7f0000000280)="9e7aca1794e97ec752bd3289f874e0fc6029c1183e2c2b4f08aa30902d11340fb6e9214f1cf8c3738cdd21f8c8154747ccf2cb464d5437d67ead2cf09b9de4a8a3a48232ec3401b2c99121099a1196728b51d2c0b1c8fb2acda4285b49d1f66c7ab2d3e5626075ae745716d084707a8a85b0ada562075042ddf2fb93138b6d56eb6570b6dc5db9bd9696e2c411eb598704ef363e4c8890454b8b2fe583ec6bb9f6fe09b87993d76e030bdfe2db8fb70d78e26f4afb775291c8bba64aae568dd03017511c16ec83fd19ab4a5e18b02d541560d30a04", 0xd5}, {&(0x7f0000000380)="2090a1979fcaf7ac4d4c22e17cd23f1f177ab356bca6ed6897bcd701cb771a3d8c891ee51b423f66a6056c8fcc402a6ac0f622350971e9964517a1cc4ae9b61f51d5f94c980a27dcb79e9229b8797fd4de475b4ba6198a4ff6c986dd032ef640f0293d1b5a08956b76448b66193bda488eb7b536fec3cbe0a7e36ccb9dd89d9660498b92a5a5d466d077a8d00a6377a42d235bd8fca2a605739f12e135cba60250fc7b511118db77263f3e3e008feb244c131893820303e54ef5b43f64885d3a32d981d2ad6b69c4ce6212c9dfd5c305ff8b14ea09d81fec1cfadbb15f953e59fb52ad833bf298c3a2dab4249b337ec4f7", 0xf1}, {&(0x7f0000000480)="f851b165ea2729150c1348c7d6f2b9646b1636257cebc6ffe4ffbabae2893f2230285b96ccb001d2e59c56beef2e1f69003c5cb02d52d4f1b38b3546d783aa1af0b22dea30d18a0d42592ce2998bd257bf0ab2cce0c05ddc0840d83ba2e6cf306e5991eb0ed39d082b2cf98b8af7e69bc03ef2d925e7748b3d007251b9897518778677cc31067bf3e28b89b7c44c3347d12e986a5b72fb01b51c9fef5392d2840785a23590928fe6fd36b2804f5db489ea31b25dee95ef2fd9f83e32e071f544", 0xc0}, {&(0x7f0000000540)="a769f1858b9337656ad27903b33166aba68ad127a074653b26cc54e31ce443ddf515a023c391daff90aa27e75ebcff44999fefdf3d11d544b3b0122232f3b67c1d744f80162bec755cb7f38be74b65a79cca5bde0573c6d0de5db8b7cb50c4", 0x5f}], 0x5, &(0x7f00000000c0)={0x28, 0x3a, 0x5, "6ec20e9ce15294d6697b66bc0b59cace11"}, 0x28, 0x81}, 0x90) [ 243.897810] EXT4-fs (loop1): Invalid log block size: 83886082 [ 243.940464] binder: 10293:10302 unknown command 411718955 [ 243.949532] binder: 10293:10302 ioctl c0306201 20000280 returned -22 [ 243.966640] binder: 10293:10302 ioctl 4020ae46 7fe4d7b97510 returned -22 [ 243.997468] binder: 10293:10302 ioctl 4020ae46 7fe4d7b97510 returned -22 [ 244.019692] binder: 10293:10302 ioctl 4020ae46 7fe4d7b97510 returned -22 [ 244.029839] binder: 10293:10302 ioctl 4020ae46 7fe4d7b97510 returned -22 [ 244.040968] binder: 10293:10302 ioctl 4020ae46 7fe4d7b97510 returned -22 [ 244.049620] binder: 10293:10302 ioctl 4020ae46 7fe4d7b97510 returned -22 [ 244.057069] binder: 10293:10302 ioctl 4020ae46 7fe4d7b97510 returned -22 [ 244.064238] binder: 10293:10302 ioctl 4020ae46 7fe4d7b97510 returned -22 [ 244.072221] binder: 10293:10302 ioctl 4020ae46 7fe4d7b97510 returned -22 [ 244.079433] binder: 10293:10302 ioctl 4020ae46 7fe4d7b97510 returned -22 [ 244.092247] binder_alloc: 10239: binder_alloc_buf, no vma 00:32:18 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000180)=@v2={0x2000000, [{0x6, 0xfffeffff}, {0x4, 0x10001}]}, 0x14, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x10132) close(0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0xc, 0x2, {0x0, 0x26f}}}]}, 0x3c}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) sendmmsg(0xffffffffffffffff, &(0x7f0000001540), 0x24c, 0x0) [ 244.102720] binder: 10239:10244 ioctl af02 0 returned -22 [ 244.122823] binder: 10293:10302 ioctl 4020ae46 7fe4d7b97510 returned -22 [ 244.131301] binder: 10293:10302 ioctl 4020ae46 7fe4d7b97510 returned -22 [ 244.145402] binder: 10293:10302 ioctl 4020ae46 7fe4d7b97510 returned -22 [ 244.161258] binder: 10293:10302 ioctl 4020ae46 7fe4d7b97510 returned -22 [ 244.172320] binder: 10293:10302 ioctl 4020ae46 7fe4d7b97510 returned -22 [ 244.179627] binder: 10293:10302 ioctl 4020ae46 7fe4d7b97510 returned -22 [ 244.186902] binder: 10293:10302 ioctl 4020ae46 7fe4d7b97510 returned -22 [ 244.196982] binder: 10293:10302 ioctl 4020ae46 7fe4d7b97510 returned -22 [ 244.204242] binder: 10293:10302 ioctl 4020ae46 7fe4d7b97510 returned -22 [ 244.211541] binder: 10293:10302 ioctl 4020ae46 7fe4d7b97510 returned -22 [ 244.224273] binder: 10293:10302 ioctl 4020ae46 7fe4d7b97510 returned -22 [ 244.237156] binder: 10293:10302 ioctl 4020ae46 7fe4d7b97510 returned -22 [ 244.248771] binder: 10293:10302 ioctl 4020ae46 7fe4d7b97510 returned -22 00:32:18 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f00000001c0)={'caif0\x00', {0x7, 0x4e20, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd600000ac0800290020010000000000000000000000000000ff020000000000000000000000000001"], 0x3a) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r8 = dup2(r7, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$SNDRV_PCM_IOCTL_DROP(r8, 0x4143, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x180ff, 0x0) [ 244.256005] binder: 10293:10302 ioctl 4020ae46 7fe4d7b97510 returned -22 [ 244.263572] binder: 10293:10302 ioctl 4020ae46 7fe4d7b97530 returned -22 00:32:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) fallocate(r2, 0x0, 0x6, 0x2000002) fallocate(r0, 0x10, 0x200, 0x110003) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x15000000, r1}) 00:32:18 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000001c0)) r3 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r3, &(0x7f000000a840)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c, &(0x7f0000002a80)=[{&(0x7f0000002880)='*', 0x1}], 0x1}}], 0x1, 0x20000040) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) statx(r6, &(0x7f0000000000)='./file0\x00', 0x6000, 0x2, &(0x7f0000000200)) 00:32:18 executing program 2: socket$kcm(0x10, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x1}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000005e40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/121, 0x79}], 0x1, &(0x7f00000019c0)=""/182, 0xb6}, 0xd9d9}, {{&(0x7f0000001d80)=@ipx, 0x80, &(0x7f0000002040)=[{&(0x7f0000001e00)=""/133, 0x85}, {&(0x7f0000001ec0)=""/238, 0xee}, {&(0x7f0000001fc0)=""/108, 0x6c}], 0x3, &(0x7f0000002080)=""/40, 0x28}, 0x80}, {{&(0x7f00000020c0)=@un=@abs, 0x80, &(0x7f00000002c0)=[{&(0x7f0000002140)=""/183, 0xb7}], 0x1}, 0x1}, {{&(0x7f0000002240)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000003e40)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000002380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000002740), 0x0, &(0x7f00000027c0)=""/94, 0x5e}, 0x8}, {{&(0x7f0000002840)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000028c0)=""/207, 0xcf}], 0x1, &(0x7f0000002a00)=""/69, 0x45}, 0xd31}, {{&(0x7f0000002a80)=@alg, 0x80, &(0x7f0000000300)=[{&(0x7f0000002b00)=""/65, 0x41}, {&(0x7f0000002b80)=""/55, 0x37}], 0x2, &(0x7f0000002c00)}}, {{&(0x7f0000002c40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, 0x0}, 0x7}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0xffffffff, 0x3, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x8000000}) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendfile(r5, r9, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) 00:32:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x428f}, 0x0, 0xfffffffffffffff9, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f00009ae000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x2}) fcntl$setstatus(r0, 0x4, 0x46000) keyctl$chown(0x4, 0x0, 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f00000001c0)=""/119) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100)=@assoc_value, 0x0) io_setup(0x2349, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1ac9cfcf6ba134590063400701"], 0x0, 0x0, 0x0}) write$P9_RUNLINKAT(r4, &(0x7f0000000080)={0x7, 0x4d, 0x2}, 0x7) 00:32:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000140), 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000002e00)={0x0, 0x1, 0x0, 0x8000000}) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000600)) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB='x'], 0x12da00) sendfile(r5, r9, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) [ 244.662599] syz-executor.0 (10324) used greatest stack depth: 22048 bytes left [ 244.679576] binder: BINDER_SET_CONTEXT_MGR already set [ 244.686539] binder: 10293:10294 ioctl 40046207 0 returned -16 [ 244.712138] binder: 10293:10302 unknown command 411718955 [ 244.717716] binder: 10293:10302 ioctl c0306201 20000280 returned -22 [ 244.725757] binder: 10293:10304 ioctl 4020ae46 7fe4d7b76510 returned -22 [ 244.733962] binder: 10293:10304 ioctl 4020ae46 7fe4d7b76510 returned -22 [ 244.745633] EXT4-fs (loop1): Invalid log block size: 83886082 [ 244.751553] binder: 10293:10304 ioctl 4020ae46 7fe4d7b76510 returned -22 [ 244.751567] binder: 10293:10304 ioctl 4020ae46 7fe4d7b76510 returned -22 [ 244.751580] binder: 10293:10304 ioctl 4020ae46 7fe4d7b76510 returned -22 [ 244.751592] binder: 10293:10304 ioctl 4020ae46 7fe4d7b76510 returned -22 [ 244.751605] binder: 10293:10304 ioctl 4020ae46 7fe4d7b76510 returned -22 [ 244.751617] binder: 10293:10304 ioctl 4020ae46 7fe4d7b76510 returned -22 [ 244.751628] binder: 10293:10304 ioctl 4020ae46 7fe4d7b76510 returned -22 [ 244.751638] binder: 10293:10304 ioctl 4020ae46 7fe4d7b76510 returned -22 [ 244.751648] binder: 10293:10304 ioctl 4020ae46 7fe4d7b76510 returned -22 [ 244.751658] binder: 10293:10304 ioctl 4020ae46 7fe4d7b76510 returned -22 [ 244.751669] binder: 10293:10304 ioctl 4020ae46 7fe4d7b76510 returned -22 [ 244.751680] binder: 10293:10304 ioctl 4020ae46 7fe4d7b76510 returned -22 [ 244.751691] binder: 10293:10304 ioctl 4020ae46 7fe4d7b76510 returned -22 [ 244.751701] binder: 10293:10304 ioctl 4020ae46 7fe4d7b76510 returned -22 [ 244.751712] binder: 10293:10304 ioctl 4020ae46 7fe4d7b76510 returned -22 [ 244.751723] binder: 10293:10304 ioctl 4020ae46 7fe4d7b76510 returned -22 00:32:18 executing program 4: mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) symlink(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='./file0/f.le.\x00') mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000380)="f3799a1915855f01a6f568f1997df834bd54f5edc1715dc3e74096a125080a47204003f16c04e296a7e12b5b4d4a0e981687f264d31398ff474d547ab2802cba3473abb143c1c82e7140d1038deab45d96ff9dc936c00326d55b5bb8a13b8c54b7516c351ef5f8a6d55f273944781632a7e76432da52c02035f04bdebd8456a7e4d120fd63cfdf72795049b0b30925907693306d96ff68fef24d7164cad00f70fba25876c6ec263fa5ae971ed12b", 0xae}, {&(0x7f0000000480)="06424b96f18e84fe60f4f505cdeab211d7040eaacfc668a2e4dbc820a36978a8774837e55dd28f55f22c24a24b5d8209dcf3fa638279775dba8f188926487e8838622804405e565422d5ea7589f0b4898072c8cb692360a9466525feded34e", 0x5f}, {&(0x7f0000000500)="c7b95b0a038f205e67709e7368e4f841026cad1fcc24c5ff6677c605c91855a30cee806ff7624a7707306acde3ad535960913a43a59507d94619e0eaf6a5e07ec65ca5c246d7856071e7367cf6ff5059af78de99644461d90a771dac01687b0ff4d5d85b84177e536a8c59eceea2207d997c70798174fad52bf0c6198c8bc07f9dbde9bd8c2490d50263c804262f9bc6c691be2e89bf77ef9b3da854f1c212e8ea4bae6056a00cec8061b6aa0f", 0xad}], 0x4}, 0x1) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) open(&(0x7f0000000000)='./file0/f.le.\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/f.le.\x00', &(0x7f0000000200), 0x800) [ 244.751734] binder: 10293:10304 ioctl 4020ae46 7fe4d7b76510 returned -22 [ 244.751745] binder: 10293:10304 ioctl 4020ae46 7fe4d7b76510 returned -22 [ 244.751756] binder: 10293:10304 ioctl 4020ae46 7fe4d7b76510 returned -22 [ 244.751766] binder: 10293:10304 ioctl 4020ae46 7fe4d7b76510 returned -22 [ 244.765865] binder: 10332:10350 unknown command -808466150 00:32:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/xfrm_stat\x00') ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x10000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000380)=@srh={0xff, 0x2, 0x4, 0x1, 0x3, 0x20, 0x9, [@local]}, 0x18) mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE', @ANYRESDEC=0x0, @ANYBLOB="3c7e06000000", @ANYBLOB="fb11063e4ea342aea68a96fde84002583dfedad86f915bb7ec1ed19e9548340df549aee7823db8bbc4de82fc3f45ea6b3cf1c54ddf6a8e2e6259d322bc485f7d0a91c7aaa95ba27480a9267472f25ed0392f5c1d8d4f4cfdc4d6ebf5589fc66d80f42187af0277fc47538af79cc57912fb9c6f57e788c1b9aaae6cbe712e26097f2cb40600e40162", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f0000000340)) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 244.909813] overlayfs: filesystem on './file0' not supported as upperdir [ 244.913613] binder: 10332:10350 ioctl c0306201 20000280 returned -22 [ 244.978714] audit: type=1804 audit(1590107538.914:69): pid=10359 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir410609288/syzkaller.J5NZfn/57/bus" dev="sda1" ino=15899 res=1 00:32:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x300, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x167, 0x0, @perf_config_ext={0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000240)={0x7ff, 0x4, 0x0, 0xbc, 0x7, 0x6, 0xe, "69859bf878640014fa0446f941dc2218e7bde028", "28e00e1591cecd26929a52065e4d088bbd103d23"}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x8000000000000000, 0x400200) write$snddsp(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024008f9be3f5965c9bacbc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f", 0x4c}], 0x1}, 0xc000) recvmmsg(r4, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) [ 245.223469] audit: type=1804 audit(1590107538.914:70): pid=10360 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir337602322/syzkaller.xYcqVh/42/bus" dev="sda1" ino=15911 res=1 [ 245.650601] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 245.650931] binder: 10332:10354 unknown command -808466150 [ 245.659366] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 245.686485] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 245.691511] 9pnet: p9_fd_create_tcp (10368): problem connecting socket to 127.0.0.1 [ 245.695544] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 245.723439] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 245.727346] binder: 10332:10354 ioctl c0306201 20000280 returned -22 [ 245.744922] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 245.758571] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 245.782194] audit: type=1804 audit(1590107539.654:71): pid=10379 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir337602322/syzkaller.xYcqVh/42/bus" dev="sda1" ino=15911 res=1 00:32:19 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000280)) r5 = memfd_create(&(0x7f0000000240)='&^\xc5', 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r5) r6 = openat$md(0xffffffffffffff9c, &(0x7f0000001500)='/dev/md0\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) sendfile(r0, r1, 0x0, 0x4000000000010046) 00:32:19 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="03630000"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000080)={r8, 0x1}) ioctl$DRM_IOCTL_SWITCH_CTX(r7, 0x40086424, &(0x7f0000000040)={r8}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @empty, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 245.948581] audit: type=1804 audit(1590107539.664:72): pid=10379 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir337602322/syzkaller.xYcqVh/42/bus" dev="sda1" ino=15911 res=1 [ 245.987602] 9pnet: p9_fd_create_tcp (10385): problem connecting socket to 127.0.0.1 00:32:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f00000001c0)='./file1\x00', 0x33, 0x2, &(0x7f0000000280)=[{&(0x7f0000000e00)="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", 0x1000, 0x1000}, {&(0x7f0000000200)="92a5ec5b457bd1c16a0558039856faddbf68ae18be312e1623d8537898d2d23f9f747120c37898268192e0dc5f3d7b8c030a8ba2f221afc43d9f42155e342824a88727f09e880d6f721d069d56ddf923994c023ef24d86a6a8fe4f5736e26a22bc4d858f9ade0f426aa858fec6209cf3b46c74529a9d03b0", 0x78, 0x3}], 0x44, &(0x7f0000000380)='syz0\x00') ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100561c", @ANYRES32=0x0, @ANYBLOB="100000000000000020000ee2268ffb0e22910a5d6274a1db9bf1205659b1a7dcaac7f0116c6a0cb3"], 0x9, 0x2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs, &(0x7f0000000040)=0x6e) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) keyctl$join(0x1, 0x0) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x200000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4) [ 245.997461] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 00:32:20 executing program 0: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) dup3(r0, r2, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x0, @loopback}], 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) modify_ldt$read(0x0, &(0x7f0000000000)=""/119, 0x77) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r7 = dup2(r6, r5) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="056304400000000000634040016174bf8ed2c6438b2972309f91cdbb4278f9bf1838396fb637a628a4e6a1079ac8bf7a0ff22b10cab2e7a947df1336b4ab487473d4812fcc92c9a658c5c73b3eb810464912ac856bcabb37a83e481a085406f9490611a291131f2fcd41c0ea281073f91bb23c439b154d86595de51a4ac458e215980ca11efe8d2a5cd1b23bfa3383c1d300742b5034d3f4219befb94e6de5a5859dc51332143226d69495b636b6ed5bd8be982a9b36f8db1c31af6c5286132aca987e18eef8447c8ac763b142070440d1c054e26d70d5cca40f"], 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000140)=0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100), 0x8) sendto$inet(r1, &(0x7f0000000080)="b7", 0x100f4, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) 00:32:20 executing program 1: r0 = syz_open_dev$usbmon(0x0, 0x1, 0x48000) recvfrom$inet(r0, 0x0, 0x202, 0x0, 0x0, 0x10000007c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x84080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f00000001c0)='./file0/file0\x00', 0x0) fstat(0xffffffffffffffff, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x536d9511, 0x1820a, 0xd3d851e8b9dd0f65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x9}, 0x36121, 0x0, 0xfffffffd, 0x0, 0x100001, 0x1f, 0x8}, 0x0, 0x10, 0xffffffffffffffff, 0x2) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xffffffffffffff98) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000006ffc), 0x4) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = getpid() sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB="c50000c0", @ANYRES16=0x0, @ANYBLOB="00082abd7000fddbdf25250080f2080001007063690011000900020000003af3b3ae61bcd215820b66ae30303a31", @ANYRES32=r2, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c0003000000080001007063690200ff3030303a30303831302e300000000008008b004773db7ec2b528fe130c6f4f12fc5249e4e233f716aa38b28b5a7602ba3f25a74ee09e5ed4dc6bef9bcb379e148184f25f4389a11cef5babd7a160ef8ed5813e42476b87a59edfd94786c2a7ded7957d4dc31f19702d702be77559089588ae456999944ea6909b00b0f2b8d1e83a2a5024454155cf81310f67a3c685f851e218024f2f42dbee0e63ee3a40fca46f64d989ce8a698fea15b3c0f34d28e1aa0d47eab806a56fcc8c", @ANYBLOB="9cbe1f968edb197835cd5571c0f9fd31735d91cee40bd10ee8793cf527251e9b6cda89f6330f75c9788d5e8d82204466062c260bb07d8577b446845641071064627826dd733c527933ceafc37c6f9341de40114daa3dec80d9d1e2409fe76338d3ff9e91d9255ff6bd334859a0c1066721a5ad12bd9f965afb50abfec79df92e31c3037790987411085594cf17ca57249f4225f3f5cbe315ed09d4a7f557e5599de1a8e1bbaab9ba1f8eacb75943dc4106e9cff7923de92adbf3a4f703b62833f5f8155f98a922", @ANYRES16, @ANYRES32=r3, @ANYBLOB="e0e2680ba16cf85e039306e85c2d05b1534cdc15ed48f7820d96ff3a5365e2a35f2f013713be4c0d8a8deff2e0e0a5f3bd3f4de706f729f27e0ed5818cab954fa285eeca4afe1e82cc1fb213b140487df3510e110139202980d24f4b4edfd8607dfdf2a547bbac7275268159dbbdf0c516cd3434d77f036eb41455f7522641e464856d1f793d6f70af8a965b9d38dd33093af09461919b99e494300fed0949524afcb771e4c953a24269aef014c7dc4545eb6965f235e0bef2ac075fa8e3f9119767b0d62576e494be31995080915a17a4719999f2fc0ca200ad60cae66001627e5cd27ea0231447e6db0ced1cd87386589e783254d10c71f4334791489305aa0ee4e7dc246c79bab976e0c728ee2cac989e5558"], 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0xd066711cc22749dd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000400)="bc35312fb6780c085305926d7293ae381726ec1c2611ca1d6cdd9b1155a5f31232ea6b425e00d37f718c653c0376346ba60f37e62797727227db14360a2d90071d5fa8edfe67c8e4e83441e02acc3f2d822b272010324f4d62ac635bbbf252ae0563ce52df6e871905560ad7d3a73010298605a736d2f8c031664090f3", 0x7d) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000240)={@any, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={[0xb, 0x14, 0x114], 0x2, 0x400, 0x1ff, 0x40000, 0x7}) 00:32:20 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kexec_load(0x400, 0xfffffffffffffd02, 0x0, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x6e5c) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x4000000000, 0x2, &(0x7f0000002280)=[{&(0x7f0000000100)="800000003804000019000300e60100006c00fec9000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000000140)="fcba5820c3ef1b77e8a23dd18b16961616356dd7fdeb89769b12def3b6cfd1ab4505524f78c1aa2bf4de120e650f04d278edd8006ad9f89c8b6d8ed96e63d878ff15074525d84e21090fcf500adea45e5683baf409b890f14dec72b7819a765b1f523b740006fa097ad63376050c8f865b5ffbd88b998d1665f951439c15e32429223f310ee8e4d1652b156fd2a1b1c7deec970e41e7a4", 0x97, 0x6}], 0x4801, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 00:32:20 executing program 0: setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0x2710}}, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) fanotify_mark(r4, 0x22, 0x20, 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') clone(0x20986500, 0x0, 0x0, 0x0, &(0x7f0000000040)="d353ff072d68b2e4dc14aa5f7e25908384") [ 246.247907] print_req_error: I/O error, dev loop2, sector 0 00:32:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="63c800800000000000000000000000008be1b6350b96dd1596bb6d01972f61de8b24dae50a7f280502ca63f285e475460cf2c26472245f79033d6b6ca6ebdbeb"], 0x0, 0x0, 0x0}) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000700)={0x53, 0x2, 0x8d, 0x5, @scatter={0x3, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000800)=""/208, 0xd0}, {&(0x7f00000003c0)=""/80, 0x50}, {&(0x7f0000000440)=""/244, 0xf4}]}, &(0x7f00000002c0)="9ecaf1b31550cce2aa9ce426234dd6f2b8e8cf3a3870b39595d89d1a7c97373e104ce02a6960ba2c18297d2a4ff8329d0885ba68834ec99914ac5aaa70c0257d939366b5bbeadbec16a46ce3a589fab6a75afbad61eadbac8c4bedc5c437a2f483c45d61d9398be381c9581b7be3914f3487b93e927ae3045e8604ec7853e600b9c1ecfe9723c3b7679a7e8ecb", &(0x7f0000000600)=""/169, 0x19b4, 0x10001, 0xffffffff, &(0x7f00000006c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000007c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$SG_GET_PACK_ID(r5, 0x227c, &(0x7f0000000000)) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) getsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000100), &(0x7f0000000180)=0x4) 00:32:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x3000, 0xc3564aaba24c3974}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000240)="646e66b9f20200000f320f9d60050ffd71c60f01c40f009d3490baa00066b800d0524d66ef260f01d1f30fb85c050fc72a", 0x31}], 0x1, 0x7a, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0463c540"], 0x0, 0x0, 0x0}) r4 = dup2(r3, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0964806ca5280100334c18c85b202ccd9dec7fe8d30fecbbade8de3f4c2906007d19b2ed86c85fb3492523074db1cfa3661ad195210d646ad3b725538d0ae95148884b3b5aaf07b6f256895274761ece8bf02045"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f0000000040)={{0x2, 0x0, @identifier="4733083f8130813216f502638b869f2e"}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfe, 0x0, 0x0, 0x40, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 246.453499] binder_alloc: 10422: binder_alloc_buf, no vma [ 246.484776] binder_alloc: 10425: binder_alloc_buf, no vma [ 246.515687] binder: 10425:10433 ioctl 227c 20000000 returned -22 00:32:20 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c77634bf36a00", @ANYRESHEX=r1, @ANYBLOB=',aname=rfdno,\x00']) [ 246.584195] overlayfs: filesystem on './file0' not supported as upperdir [ 246.625757] 9pnet: Insufficient options for proto=fd 00:32:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002f40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002480)={0xa0c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x3ad}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x2cf}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xffff8000}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x75}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x22c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x9e6d}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x3, 0xfe, 0x40, 0x1}, {0x2, 0x3, 0x4, 0x3}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0xa0c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) geteuid() ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000100)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @ipv4={[], [], @loopback}}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x8031, r4, 0xbd958000) [ 246.674984] 9pnet: Insufficient options for proto=fd 00:32:20 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair(0x8, 0x1, 0x27e, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000100)=0x4) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)) 00:32:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_snmp6\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6gre0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r8, 0x0) r9 = geteuid() sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@ipv6_delroute={0x40, 0x19, 0x5, 0x70bd2d, 0x25dfdbfd, {0xa, 0x80, 0x80, 0x6, 0xfe, 0x4, 0xc8, 0xb, 0x300}, [@RTA_MULTIPATH={0xc, 0x9, {0xfe01, 0x20, 0x4, r6}}, @RTA_UID={0x8, 0x19, r8}, @RTA_UID={0x8, 0x19, r9}, @RTA_EXPIRES={0x8, 0x17, 0x1}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000002000000000004000000bf880c390e3c70c89704989f004749001c00000000", @ANYRES32=r4, @ANYBLOB="00000000000010001c001a8018000a8014000700fe"], 0x3c}}, 0x0) [ 246.757345] binder: 10457:10459 unknown command 0 [ 246.777768] binder: 10457:10459 ioctl c0306201 20000200 returned -22 [ 246.793623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=10463 comm=syz-executor.3 [ 246.811211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=10465 comm=syz-executor.3 [ 246.837362] binder: BINDER_SET_CONTEXT_MGR already set [ 246.849573] binder: 10457:10469 ioctl 40046207 0 returned -16 00:32:20 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0500bd32"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f00000000c0)={0x20, 0x4}) exit_group(0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6c6f7765726469723d2e2ff9f8732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c6530"]) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) [ 247.016416] binder: BINDER_SET_CONTEXT_MGR already set [ 247.088206] binder: 10457:10473 ioctl 40046207 0 returned -16 00:32:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8, 0x1be}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x90f) recvmmsg(r1, &(0x7f0000004840)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000540)=""/173, 0xad}, {&(0x7f0000003580)=""/12, 0xc}, {&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/249, 0xf9}, {&(0x7f0000001700)=""/71, 0x47}, {&(0x7f0000000380)=""/17, 0x11}, {&(0x7f0000001780)=""/197, 0xc5}, {&(0x7f0000001f00)=""/75, 0x4b}, {&(0x7f0000004a00)=""/230, 0xe6}], 0xa}, 0x80000000}, {{&(0x7f0000001a80)=@ipx, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001b00)=""/154, 0x9a}, {&(0x7f0000001bc0)=""/120, 0x78}, {&(0x7f0000001c40)=""/49, 0x31}, {&(0x7f0000001c80)=""/155, 0x9b}], 0x4, &(0x7f0000001d80)=""/213, 0xd5}, 0xfffff695}, {{&(0x7f0000001e80)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000004980)=""/106, 0x6a}], 0x1, &(0x7f00000018c0)=""/73, 0x49}, 0x5}, {{&(0x7f0000002100)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000002180)=""/208, 0xd0}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000003280)=""/154, 0x9a}], 0x3}, 0x80000000}, {{&(0x7f0000003340)=@tipc, 0x80, &(0x7f00000047c0)=[{&(0x7f00000033c0)=""/213, 0xd5}, {&(0x7f00000034c0)=""/156, 0x9c}, {&(0x7f0000001880)=""/11, 0xb}, {&(0x7f00000035c0)=""/238, 0xee}, {&(0x7f00000036c0)}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/136, 0x88}], 0x7}, 0x7}], 0x5, 0x12042, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x10000070, 0x40000, 0x3, 0x0, 0xfffffffffffffffc, 0xfff}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x481, 0x4, @perf_config_ext={0xfffd}, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000140)={0x4, @remote}) 00:32:21 executing program 0: socket$inet(0x2, 0x80000, 0x0) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f0000000000)) [ 247.168848] binder: 10486:10486 unknown command 851247109 [ 247.202198] binder: 10486:10486 ioctl c0306201 200000c0 returned -22 [ 247.216090] binder_alloc: 10486: binder_alloc_buf, no vma [ 247.227004] binder: 10486:10486 ioctl 40101283 200000c0 returned -22 [ 247.243681] binder_alloc: 10425: binder_alloc_buf, no vma [ 247.250312] overlayfs: failed to resolve './ùøs': -2 [ 247.252618] binder: 10425:10427 ioctl 227c 20000000 returned -22 00:32:21 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x220000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x19) ioctl$TIOCVHANGUP(r0, 0x5437, 0x68000000) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x204000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000140)={0x8, 0xfffffffa, 0x6, 0x6, 0x4}) fstatfs(r2, &(0x7f00000000c0)=""/65) 00:32:21 executing program 4: socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x38, 0x0, 0x0, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}]}, 0x38}}, 0x804) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) write$FUSE_INTERRUPT(r3, &(0x7f00000001c0)={0x10, 0x0, 0x8}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000180)) syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000314af00031400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) [ 247.288746] binder: 10478:10502 unknown command 851247109 [ 247.325301] binder: 10478:10481 ioctl 40101283 200000c0 returned -22 [ 247.326133] binder: 10478:10502 ioctl c0306201 200000c0 returned -22 [ 247.412418] binder_alloc: 10489: binder_alloc_buf, no vma [ 247.432081] XFS (loop0): Invalid superblock magic number [ 247.442618] binder: 10489:10518 ioctl 80045626 20000000 returned -22 [ 247.447315] binder_alloc: 10511: binder_alloc_buf, no vma 00:32:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x4, 0x4, 0x6, 0x8, 0x0, 0x0, 0x7f, 0x8001}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="080001007063690011000200303030303a30303a31302e1f0000000008008c00000000000e0001016e657464657673696d0000000f0002006e657424cb0000696d30000008008b0077d0ac35d7ac64dc9f7814da55686dd025b204226312a8058b1666c15a2cc4d78cf2925562f6ab5c12280288f47a960ff05a118f5c89403bd9f6797bead71b76b7e11c7dceaace04c093db40b589325a4a00000000516b8b8bbae6040000009234d8b4d432cac233be4530f35fe8e41b7e1408c8b67e6b798afc0f38f4aa9bd7c7213fcc707cd7577883bbd11ae7cd295ed80a956ed17895000000000000", @ANYRES32=0x0, @ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x24004010) write(r2, &(0x7f0000000680)="ff5b93baf4715971ba778a4091bf32a5307d1aad95db841680c544d506ab1c3405176a92ebe5ce0025e269e33dba850c0edff31990e83f65d40e8aec1f8801132a4088456b3f9166215a20ce4113818fe8668752a06696602189d19eb27eeb7c7a8fe69d0e65a052a93b5c4cf71bc11c4bc0bc7fbc5637850e7cf553dc9683e2a77d09196b818171d8e2b85add4e45494bc588edfedd7bd8045fa963bdd79c6885fb32e67153a5050367a53907b55917d7f298c40364e253", 0xffffffe1) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ec82880195de03f7bf18", 0xa}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x1}, 0x0) r3 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r3, &(0x7f00000004c0)="3161d417452c8f6d46edb3b1077f2abaa85e3489c66107ab7d9aeb42aa515f23c9150bfd105fa1be4e0415cb2c2d4a1cdff5ab24d3676cc093ea0ffa364b7ec5a99d58d2267958d4c532", 0x4a) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) sendfile(r3, r3, &(0x7f0000000200), 0xff8) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000180)='Z\x00') [ 247.468424] binder: 10511:10523 ioctl 2288 20000180 returned -22 [ 247.561442] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 247.577407] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 247.586567] binder: 10457:10459 unknown command 0 [ 247.587666] loop4: p2 < > [ 247.595179] binder: 10457:10459 ioctl c0306201 20000200 returned -22 [ 247.595493] binder: BINDER_SET_CONTEXT_MGR already set [ 247.609669] binder: BINDER_SET_CONTEXT_MGR already set [ 247.615862] binder: 10457:10480 ioctl 40046207 0 returned -16 [ 247.622168] binder: 10457:10473 ioctl 40046207 0 returned -16 00:32:21 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='vboxnet1nodev\'ppp1*\x00') connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0xa, &(0x7f00000021c0)=""/4117, &(0x7f0000001140)=0x105d) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYRES16], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000001c0), 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000180)=0xc4fd) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xa, 0x4000000032, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100), 0x106, 0x9}}, 0x20) 00:32:21 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x0, 0xe36f}, 0x0, 0x7fffffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000404002, 0x0) socket(0x0, 0x2, 0x4) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={[], [], @private}}}, 0x24) socket$kcm(0x10, 0x2, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) shutdown(0xffffffffffffffff, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) fcntl$setpipe(r2, 0x407, 0xfffffffffffffffc) openat$full(0xffffffffffffff9c, 0x0, 0x480402, 0x0) pipe2(0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x104000000000000, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="6826a46444d94a7bb240999ea83356bfb3c3094fa72bf96b058d5a402295a569f9b519a2820e9fb8a8504190300396887d8b1b35d77a3fcc8af8d61aa432f99dbc9c8b7e2258b8af3d70b4314ff4c22354e5304e11ffb95be90642d8aa0480040c5d3ed779e596950c0ef68e000000000000"], 0x228) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x104000000000000, 0x2, &(0x7f0000000e00)=ANY=[], 0x228) mmap(&(0x7f000015b000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180)=0x2, 0x1) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000080)='fuse\x00', 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB="2c726f6f746d6f64653d303030303017fb303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 00:32:21 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000050000a2e59291000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140007"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, [0x0, 0x3, 0xb939, 0x8, 0x80000000, 0x8, 0x7fff, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x8, 0x0, 0xfff]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000040)={r5, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r5, 0x8}, &(0x7f0000000140)=0x8) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={r8, @in6={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, [0x0, 0x3, 0xb939, 0x8, 0x80000000, 0x8, 0x7fff, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x8, 0x0, 0xfff]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000040)={r8, 0x8}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r8, @in6={{0xa, 0x4e21, 0x402, @dev={0xfe, 0x80, [], 0x47}, 0xfffffffd}}, 0x616, 0x9}, 0x90) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 247.784600] binder: 10537:10547 unknown command 65535 [ 247.789834] binder: 10537:10547 ioctl c0306201 20000200 returned -22 00:32:21 executing program 1: syz_open_procfs(0x0, &(0x7f0000000480)='loginuid\x00') prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@private1={0xfc, 0x1, [], 0x21}, @in=@multicast1, 0x0, 0x0, 0x4e20, 0x521e, 0x2, 0xf0, 0x0, 0x16}, {0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x5bb47622}, {0x8, 0x9, 0x10001}, 0x2101, 0x0, 0x1, 0x0, 0x3, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0x33}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3502, 0x1, 0x0, 0x0, 0x0, 0x6, 0x10000}}, 0xe8) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0xffffff6c}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c001}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r2, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f0000000400)) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000300)="55fc9404ec42") ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @local, 0x0, 0x0, 0xfffe, 0x0, 0x1000000000000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 247.855217] binder: 10537:10551 unknown command 1074029061 [ 247.871148] binder: 10537:10551 ioctl c0306201 20000280 returned -22 [ 247.879500] binder: 10537:10551 ioctl 40087602 20000180 returned -22 00:32:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xffffffffffffffda, 0x7}, 0x18) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002740)=@newlink={0x98, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4b000}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}, @IFLA_GRE_ENCAP_LIMIT={0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x1000}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}, @IFLA_PHYS_PORT_ID={0xb, 0x22, "b63fe6e5b308eb"}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xb923}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x98}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text64={0x40, &(0x7f00000002c0)="420f01cb400f019f9f558e30660f3a14f1bf0f01c2fbb9770b0000b800700000ba000000000f303e2e65360f01c80f017844660fc7b1080000000f01c9", 0x3d}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce], 0x107004}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4001fe) 00:32:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$EVIOCGABS20(r6, 0x80184560, &(0x7f0000000140)=""/116) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000080)={[], 0x0, 0x2592c7}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) [ 248.187725] binder_alloc: 10511: binder_alloc_buf, no vma [ 248.193509] binder: 10511:10590 ioctl 2288 20000180 returned -22 [ 248.220909] binder_alloc: 10580: binder_alloc_buf, no vma [ 248.226936] binder: 10580:10592 ioctl 80184560 20000140 returned -22 [ 248.246360] *** Guest State *** [ 248.263137] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 248.286081] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 00:32:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xffffffffffffffda, 0x7}, 0x18) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002740)=@newlink={0x98, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4b000}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}, @IFLA_GRE_ENCAP_LIMIT={0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x1000}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}, @IFLA_PHYS_PORT_ID={0xb, 0x22, "b63fe6e5b308eb"}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xb923}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x98}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text64={0x40, &(0x7f00000002c0)="420f01cb400f019f9f558e30660f3a14f1bf0f01c2fbb9770b0000b800700000ba000000000f303e2e65360f01c80f017844660fc7b1080000000f01c9", 0x3d}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce], 0x107004}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4001fe) 00:32:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80208, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x4203, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000480)={0x7fff, 0x53, 0x0, 'queue1\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) dup(0xffffffffffffffff) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x9, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x204005, &(0x7f00000000c0)={[{@nfs_export_on='nfs_export=on'}], [{@fsmagic={'fsmagic', 0x3d, 0xed}}]}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='./file1\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') [ 248.295818] CR3 = 0x00000000fffbc000 [ 248.310406] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 248.330100] RFLAGS=0x002592c7 DR7 = 0x0000000000000400 00:32:22 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_opts(r0, 0x0, 0xd, 0x0, &(0x7f0000000040)) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000940)=ANY=[@ANYRES32, @ANYRESHEX=r2, @ANYRESOCT, @ANYRES64], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) r5 = syz_open_dev$mouse(&(0x7f0000000880)='/dev/input/mouse#\x00', 0xffffffffffffffff, 0x4c001) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, &(0x7f00000008c0)={0x66, 0x0, 0x6}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000980)=[@dead_binder_done], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) write$P9_RWSTAT(r4, &(0x7f0000000080)={0x7, 0x7f, 0x1}, 0x7) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="c8050000250000032dbd7000fcdbdf2500000000", @ANYRES32=r7, @ANYBLOB="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"], 0x5c8}, 0x1, 0x0, 0x0, 0x800}, 0x1) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x122) [ 248.353603] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 248.384564] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 248.421571] binder: 10600:10601 unknown command -1 [ 248.437682] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 248.449325] binder: 10600:10601 ioctl c0306201 20000200 returned -22 [ 248.462161] overlayfs: unrecognized mount option "nfs_export=on" or missing value [ 248.470618] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 248.478726] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 248.492681] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 248.503726] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 00:32:22 executing program 1: mknod$loop(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000080)={[], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}) [ 248.516777] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 248.537459] overlayfs: unrecognized mount option "nfs_export=on" or missing value [ 248.537806] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 248.561265] overlayfs: filesystem on './file0' not supported as upperdir [ 248.576786] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 248.587029] binder: 10537:10547 unknown command 65535 [ 248.597983] binder: 10537:10547 ioctl c0306201 20000200 returned -22 [ 248.601130] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev bpf, type bpf) errno=-22 [ 248.613461] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 00:32:22 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000100), 0x8) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0/file0'}, 0x1915) [ 248.618510] binder: 10537:10614 unknown command 1074029061 [ 248.636783] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 248.640728] binder: 10537:10614 ioctl c0306201 20000280 returned -22 [ 248.649932] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 248.651497] binder: 10537:10547 ioctl 40087602 20000180 returned -22 [ 248.661801] Interruptibility = 00000000 ActivityState = 00000000 00:32:22 executing program 5: ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0x1, 0xf606]}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000240)) r1 = getpid() socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x1) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000040)) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) dup3(r3, r4, 0x0) dup2(r2, r5) 00:32:22 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="6400000010000555000000010271ffaf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032"], 0x64}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r4, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000376d7acdca9eca4040218c1b8e666ac6f770bfc849828de73cc153df95951a806cea45dbfee63dbbde3f948493d1a14e20d96dd009426de8ee6dd8d7e50ebefb4772"], 0x0, 0x0, 0x0}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8983, &(0x7f0000000000)={0x8, 'batadv0\x00', {'geneve1\x00'}, 0x3}) r7 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x1) [ 248.677452] binder_alloc: 10612: binder_alloc_buf, no vma [ 248.696606] binder: 10612:10618 ioctl c01064b5 20000100 returned -22 [ 248.715778] *** Host State *** 00:32:22 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4150d, 0xd400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0x7e8, 0x3, 0x80}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) setxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@md5={0x1, "bb51db5090dca337e1af7456fd2bf9e8"}, 0x11, 0x1) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000002a25000025090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000001080000000000000100008000"/192]) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 248.732143] RIP = 0xffffffff811642af RSP = 0xffff888043faf9d0 [ 248.745109] binder: BINDER_SET_CONTEXT_MGR already set [ 248.753321] binder: 10620:10623 ioctl 40046207 0 returned -16 [ 248.755393] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 00:32:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b203000000004f707f6debceabb54c744f336b09004d76ad2b49faf40c732f8c4526e44b008d32282d0f56d4d3e960a24bdafa91d17f6fd686d4cccaca"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000b940)=ANY=[@ANYBLOB="d0b200002800270d00"/20, @ANYRES32, @ANYBLOB="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"], 0xb2d0}}, 0x20004000) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}}, 0x0) 00:32:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x200, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb29c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a24eff9}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1dd2512d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45cf25cb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x328f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x110b2df2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xab4d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaafe}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x64, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x208f7f49}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c777fa8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41ec62bf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55839ce1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x68d71767}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x104, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b11d836}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x38ca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39f83ab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x169f88ee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd212}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4204a4dd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39ce39bf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x672d1be7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x66f8}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5988186d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd61b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1eb6e11b}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a74}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13799a4b}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x81d3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb277}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb7aaac1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20940350}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x328d66eb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b3aad4d}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xba7b}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55ffce27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17d14574}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4210}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc97}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a0c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x610e3771}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9413}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x8015}, 0x800) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="66b8f4008ed8b9de0a00000f32b83e0000000f23c00f21f83501000a000f23f8b8000001000f23d80f21f835400000c00f23f80f01ca0fc7bd00800000b9ae0a0000b800000000ba008000000f3065c04826000f350f35", 0x57}], 0x1, 0x28, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 248.790265] FSBase=00007fcc9edc9700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 248.813696] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 248.832580] CR0=0000000080050033 CR3=000000009b9ca000 CR4=00000000001426e0 00:32:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getpid() r1 = gettid() timer_create(0x3, 0x0, &(0x7f00000000c0)) migrate_pages(r1, 0x4cc, &(0x7f00000001c0)=0x1, &(0x7f0000000240)=0xe934) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f0000000000)=0x1) r5 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) [ 248.865379] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 248.874650] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 248.907031] *** Control State *** [ 248.915479] PinBased=0000003f CPUBased=b6a1edfa SecondaryExec=000000e3 [ 248.933757] EntryControls=0000d1ff ExitControls=002fefff [ 248.939503] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 248.960759] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 248.984031] binder: 10580:10653 ioctl 80184560 20000140 returned -22 [ 248.988897] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 249.004659] binder_alloc: 10641: binder_alloc_buf, no vma [ 249.015526] reason=80000021 qualification=0000000000000000 [ 249.026852] binder: 10641:10665 ioctl 89e0 20000000 returned -22 [ 249.054337] IDTVectoring: info=00000000 errcode=00000000 [ 249.083698] TSC Offset = 0xffffff77acec590d [ 249.101007] TPR Threshold = 0x00 [ 249.109050] EPT pointer = 0x000000008c29b01e [ 249.132556] Virtual processor ID = 0x0001 00:32:23 executing program 0: syz_mount_image$btrfs(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x6, &(0x7f0000000680)=[{0x0}, {&(0x7f00000004c0)="54c0d309a96371b1f6bdaa8e4e7cb1ee73238c4f513ae064c8775e92e5cbbd3837dadb6d518ec59f81baeda8ed852eaeb4ea843290ae721b80fb1677d4c53c3fc3883ece0875ad652cdbaf9ebc3c1dec23ec776b666cfbe8ae9c4c1793bb349e1c853d907c22e32f989600889427262c3c76d8b63f7b8ba5e128a261a3dacdc312edf9879bf34e92a073c167d31d2dbc3b75a4a61516adaa0a664c9e0525e68cf6e5a00558ea8eadbc732cea5ee14a12522acf8b9cdce95e6e184d25955b7532eace062bdd73d42a4d842221c28c9e8ff98da7fa3db3a3de", 0xd8}, {0x0, 0x0, 0x9e4b}, {0x0, 0x0, 0x8}, {&(0x7f0000001300)="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", 0xf02, 0x9}, {&(0x7f00000051c0)="cac7c831cf82737c5c04f6cb2eabfca0adf27e1e02780879b1accb73f8eb570e9c4099a95a67cf92c4806e691ae8290cee613ea6348ab3011a8213bffc7ccdbff17edd29942dda6e9b1510bfac4664160920440f965ec19f3919f259912f8ed9b96dc149c923a8c9f86ecbe4d4077d22295da3f578cf4ee2091ff8aa088f4679c3094c73d1a08d954ee4da5b8672228652a5ca63916a7984aec17a2be2b9ff5450947df868d833ba1e59480d94fadaeaf4b699b3a341f26421656fdcdc95512a77550b03fdc791fe105ef51fcf5c5b630eca332c24a4e0a433314baeb9702d85f81727e43a995bc9e2d5e059ba17938460bc0596f059226367993926c3f1ec1e87ded5f8f97749f2a04375175a4a08101cd2b807d199e33e12e61becac75467d584771bde835bf48765bf43de3ed676486dbd3668b9fec93f3546cb01ebd477a342c49c9fa1dd61095874be95516560d79dfe8c604e4e6d16c33ea14dd31d06997acdc1af08a6091fc69a4ec165b69670beb53c87f9035a303941d58ae775dc1dc9bddbf9f93e710ba2a3af39432fb5d94e3ca3e50f8d28aa55b2eff92da764d7f26cf23befd8bc977f95289840ef95c9d81dcf3e0e9c4c4f360261891337be239acce6ce6fb454a00472da68b782c2d64aed6d521eb75cfa40c672f7984595b565b629c79e8eeccd91848bc7be902825eda8b66b9abb7bff11d7e6018e7a3dbb208ad8a933150fcbb674add4806407f48e13e8508e4779d6c6c23b4a05c31f00d67f0ca3849dc875c8b3f9778293a989c3aa96bdbe1536c4805fb99554298a8744a8c6f19a4488c8e8acccf4fe7226956d4f333e14116ee281964530f8b8c21d44210b748786143d662fe18c0dad27e5b16cbdf92f904113ec7dc9cd76e6906a7a494ae2f4f23f92372fd3841d7844b221b41124953950193cee9376f62f1ecdb720c5f6c2a676d9fb51bdb46f6f17f6ec43665827f9dc4e26a52e3b913e8b3ca5ecba51688b3bd32be44fa200f55a440dda1473c35de4f6af9f13635d2f2f036b121a875ae80c3b47f67eda29c0aab0120bff307f36c9c8e54442b767a3d5217dbd2f43fec65d519392b125bf2d298924cbc50cc869672612b4326739930b8d553e53b4c99e387fc628bf310fbc040ba4094146e19ee0fb8a73af807a5af32afc41fe40436aa3542295eb6b1e8c6f9657ae07cc93c07af26c7b18fc13b06a9472ccdecab2b34b7329d30bf9e189ca8f38c49e2502cb67429f24fab8e06582ac5cdd3b31552427a6d3205bf893fd2f0e27a0b204d1ce2164d90221cf68951b8786ce43c3020632a89deb73f4dc56f6bccc338114452fcd3a189caf80c1760892c4ade27f0e210992e8656683e227bf39e1e274b354c2cb6524f17f3717dd031401e9c41da23469879a5ed8668312f86d301ef71a04838251ee37ef9c819ea8ad2d1447df092bce496e0dec8396fd7dbd4f4cfb3de03b059363f52bd45d6d40b4460b8a24c11d197b98ed2cf9f9fc79566ac280726c2698794639205776957169c1cdd0dfc5de6c8280064b5e20a280d0d3b2ad98fbcf59b53c089769e55c47901130474ae1938c31771a5f99602bb4e8b85b1d5d122c8a1245552d11bd008a910e356822c2db313ff688ac7d5c89ef4656f38ae9568be8a7f69cc5b0222e8473b6eea24c496a970a11a60720318f2a88d6ba0c67d470f8c43ee32c7cbdae643addc7a8089a595d2369fa18ad3df96bc9ff7297121f4f44f610a232ed7a828239833cc579a59455029508759cbf5c8f34c8130e6956f25d96763dc5ce8591e0af9e0605b9c08b6d8db39bec5f0b999584e0937c6fd8d579e4ee8c497dc2123a23a9f99e53c91c0e2187b3972cc9a7b15e9e6a7f5d72b613b91abc407a19190fe4787549eb6a7851d06fb5134a2811558365b0fe40169fa741c6c2bda301f5c40e9e03069c5f5920ed57ed2e46870ed57c5bd64d1fa448b99ee5b981893c7ba90a270c1fe6eb4aac403b04863ccdc11c3eaa4f8c59c1a3d6bba3961926d84fa4db884533de43f9d00b3de207d44c81b4dc11cebb360cc45cf3852a922ad0ac23ad45a584bf1b1fe412974add1df6783dad0f6bfcbad401abec5864b2f902b095b8973ab3ec3636e618166caad6eaa990a9ea3531a747c6f93e04c6c7de21dae415f30be6006f89aaeb81ea22a2258c5eace31f2a5ae98dc5762a532cbdd5043c5a32d3027a80e268525a55102ba5714c2c062eacf31684813322f6eabf09dcbbb34852782191dc3dae07e312d39d11863ff36f8f5e7efcca30085f5194e8c0be7297ad9ff77bd4d9054fb35644a07fb3134b8930e6d764ec94e283b18ba3d7c32b77e60b0e3cbdc4527c02a37b85b5d203cca77e8c0d73c3e2895b5c0cc24f2ade0c7b2f42282e3656c1fef439c95910889e35de3f9dadbf1c03d54bed309421d60c69099cc988f5d40dd4c402468584ec0852f296dba5323967c45c9a1e81194bd2679ebf9605319274f4e20f72f1f6ecbc12140a782ededca4ec2cccf57f1d47988c718b01dec10ad41be7096d5c53cacfff63ca71585de9ceae66e04089b72c649b27b4b436b13f7042f05aa730ce3bdcc9e511c9c5d879048d428abe37aacf58cb9852877b87163ba8939a1b890183d656cbcf23ef72a3dbdda1a8757db1144609295fd9dc7a7ddbf4be5d3e7e55af16041d68dce5c9c78189311856eaa35d1cd9dd0a02e596644889a08b3365365185f7337db44076df0ecc8cbc94859a4a891692d8f45f5433979ca5741e27c2909efacb35e1df600d197f91f63f9d57be8b94d23d88ce9b1709321bd2fc06007dbc4978bde58327eb8d8f6e007dff9fabf81839ede177f56d3dfdf12a5b2abfb38b6ec150636cc0e5389e2bba4f27dd8f31ffe06804583a1cceacc0695eba4b3f1643b28e4f6ec256357636b7b590f9996044ae8eea657af524abcc5d588e26c6986145fbb650230994234c031b4cf9556680b62b58afedfee5af542d345ed184f48a72d01980b99bdd0386b564ffaef48fbc673b58cedaf49e0e7fc724c41a9433605402ddaf5294d108a283516ad88872188e9e5b3548141c91b4d699a306a97bc9dcf39e9418b96b3338ba57ff187eb40e18d559f1ee8eb2219019ce1ac58daa186501c5ce9f6c92e9219e44dcaa6a4e3ef2371abad4afb07fc44275e2a09337cc8ba99275537d9acacdcfbacf218863b757a57bb9d5a3fe210af3b65ff36c5376a43761b56a7ec89a0ac3698608bc3ebaa0f97e99c382d42cd7e5036fa06bb5102f8e15b3643df20a99f0fd708057982fe07c174532d02af9887d4d3a7d01ec62eb7a241caee2b98135daee61ca093e2710ec00f7e2980e7622bef50239a5778a9b3e5a378c92db027c599c51967a01761574beea9b9db7c40ce411c8ba6ee3f376e893b6a8a9a2f4eec050ebe08f2f5b2508398eeed2d7c15349b42f96a552673a486423be4ca15f2c730e44725f75141c647f25ba4451fecd44435972eec58fdd3cc4cca5ca5c63ca05978f3f1b96c3684ede404c6b514146600c9a7bb06e5ba7cf2ce4726638e1882b2d194fcd7d14c68e9f38e9abf74b45f124e120b77f97351bf5f288d4607aed9f89409a7c72e65fa896b5e9020b6e0e28eb3c16a7b6f9f082c8de96ed02662317725b1e2bf0874db85ca0ca7d700ded96070dfe4ca110edd60f3f30b06f98f9f66cece6752a2650dcf21979dce0aabb8105ae254567ff777458c1dd2b362a2061e6c2816ba557f29f8684444b4f9b7bdb03e780bcbdc3f464d37130c113ee7bb2851b522ab38272514e0eabdd456f52474e87a288e07556db586c9872f613c46e96ad850d36189282e84212a3fc058c60c1efc966e9e7e425f528b19747d8b43243e25df2ab2cbb260b9fb133d8dc3afed9a223627bfac635ee30e51d63f3c4a7cae512fdd8fcf9f30465089f07edc821ce23c2bb874a085522a7e244df3ff59de04d6fd4b5986c9f1dd4713b060094bbba5ede3494d7e8256726227bfb3d0c42f5859664d6b9310b4d9d8e575cc6b898fa22fe45f87c30e03da02e65383ddd98552886520408b6598fd4d32ee16a8ca046604939ebce6db2826c884266eb6e15070e5a640018e8f61e1c54a1581e0f33d1972e467bc4e60852eac24655d99c794b944f18dcae401bba06516bca9c6bc8fd021d4e9daf0c967dfce1556e7b3a40b90890d0a0015157d34b0496f928d2b970c052fc97c146ecca74d4edb6686f18b26859daecff6c931080b6695b54ccc5fb0e4131f622054eecb4495438b79c8beaba3152cd90f30fc4cd03cceec74d88c7619a655503355e16c2a1a9ee2450c666308347cf93be777adcfc3443ac8438f7533c255482d5315bb3aeddaed0162c3ae96a6507fd16c665b39173bd319d08dd713604c07e885defc003b738e4e1d5b239e06b6abf0ac019174e25a07e3f028975dff5f93914ac5c08b943a9cf0a05f0e0ecbc203b66f4786b6e93a0750459512da6115df0aba1d4a4f957177b25819eefc32eddc98d32b91d683244336f937749d0f029ba744f5aeac6b0f4b492d8a5e3773764ee7c0ebfe7c9c2001a0c3feede5e08d02785aa29a0663ab1299ac98c022bf8548a60cd610eb01489223363003315179ee16430144141ca57d71741d15d2904c46883534d88818ec39b0edb139d3321d8147c5b6c5d4ff9e0a335d4264c7ed08df7961d9039669dbf7a9512b62fa76d2fb3c9a3a03c74441cf7dec82b4555d7521fb8d0c11cf777b9d9deefde5e5be65fde3305075ad1057781d967fdf06f0ef1ba619cb2f86f0b950106b00974f567b563042d780b5c2b55961c2f4fe95a959e65c83280dd43bf543e7ab464cf2571941850de1a9ad759d0acc7f9dee7928cda8f0bf94f52fc561dc0042fa48d35bb9b0eb9bae2d772907021dbc4bbfd9bd4f8e01404143e19a82b8164e948ef2d52f5d2a0fe6b482a30ad7e3f134e39325e11b91d93c67e51be48c06d6c50ba58a7cd3a92b3b8235515fe159b8f074f4be1b5defd1e4675bd0c56b3a01443feabc6a3c10ef1403eedf009fddbb7d3a47de323397c4fa660f44922b36cb694894906a1c4d4509275271d061e83477b000a846c9c46da245695cfa8d9cdd9c66c775c09675e95950a71202f4665b9aa0fb1298752edf7d20b17bfccb50aa0d99865c4122708885f64924d3ff5c76cf08cbcb50b73ea8f0a744f9fc7d9df03727c1ebf18739723e62fbae29f6a5ab5adcf242d7eaaeec691ac0e948b6db5957b14ec52fb52dcfbb9530a353b0fa5b66994f8906aa5dec2c23efd230ebf24553a9bf3851e1d9c601cdd71b367259765ca25ab4d9e6cc71969c9dbdaa5b1c78040f45a905ecd6ae248cfd569397e41fc4c13d926714a7d4bd1106599596da912c8e83f75ac2a2e47f91d36a1c0f98c45f7bb2610a51fcfbee91a00fe0a063dba9631ad4e1ab8e3a5f00cabb562bd8cf8b8c0719d810282356f5289a04f3981937a9017a965c0dc6b2b7620fda6b02baf36ff713bb48ccaac2e269934cb3e217946ed21894df3ae5a552204f863029930fd4868e3bbb844a8c1c60251b7c5188d9c97e9ec68c5178abb7eb85c9796a1fa58d85360ced1445840dda764cc6e5a291409a5840ba1bfe61162a1861664d5b395da23ee0d6cff9fe4185eaf3631bfaf3b5f0cbe037ed356de2e5a52c92ade643e953181fae6401d3d509cc5e1e1e9fc24efa73f55ff4ae1a44113ac876daba667d371252f5ab6ba454515e3393d9df68981cf74352b05602353a0e5cb2522650064cd35d2c535151e2be3561e3b07135abe6c39297bf3d88fcf07284caa1441caf475c019dda301783ed813c64a68b46877c5eac898e2c671dd8852df12e0d87277a146c47f9dd2c6150cc38e0aeb0c16933296e6052db4c044b2ca4344cb496b27bbdfb93dba364f0aa89018d71de8e308604b1c939d972c5678bfaf4be1514e613665706866d0245cc82d66e962b20dd6bb2217f438c5233cd6e99981e129227e3b2115af4bfbae460505f54ef486659e950d9", 0x10b1}], 0x150002, &(0x7f0000000180)=ANY=[]) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x1000f3) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg1\x00'}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000012c0)={0x2, 0x0, @rand_addr=0x40}, 0x10, 0x0}}], 0x1, 0x804) ftruncate(r0, 0x8200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x8}, 0x8000, 0xdf, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[], 0x30}, 0x1, 0x6c}, 0x0) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0xffffffffffffffff, &(0x7f0000000380)='./bus\x00', 0x7) getresuid(&(0x7f0000004180), 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000000)={0x1}) 00:32:23 executing program 3: prlimit64(0x0, 0x4, &(0x7f0000000280)={0x9, 0x5}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1c, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000940000)={0x3, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9, 0x9}, 0xc0, 0x0, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x3, 0xfb) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f00000001c0)) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'bond_slave_1\x00', 0x800000000008a03}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0xf8, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xe) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 00:32:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x208, 0xb0, 0xb0, 0x0, 0xb0, 0xb0, 0x170, 0x1a8, 0x1a8, 0x170, 0x1a8, 0x3, 0x0, {[{{@ip={@broadcast, @empty}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3b4272585404f97920335dabc5b3abeb5f79f5865c671cba15e125d11e4e"}}, {{@uncond, 0x0, 0xa0, 0xc0, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}, {0x0, 0xa0}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0xf6) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x408c84, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000020000000800020000000000080001", @ANYRES32, @ANYBLOB="614952d1a33dfe04eb03ef7646ceeb3f25c6e628467aff407618d5caad3366e2102e7e0b5ec2a37fa157ee4bea49334609feb302710f98d084e62929cb757f2eaf9624c7f5853202a6d4cc03ac409658cb5dd1f8c29bc86761891057580070f601e62adc22fa24ed26546100ced9c4950e35e2a99a707f6b2c441a8c0981ddc3a1a84cd431aed1969d35a77bdf2235895717ecbc93c2c4d075e5c1232c1f3e913c2ad8f2808463d7506b6bbaacaeaa609eaade1a6c37a55b36928fdc4230b0650521ee98db52cdf3e74b17e659185936e5dec51ac7bc58"], 0x24}}, 0x0) connect$packet(r4, &(0x7f0000000180)={0x11, 0x1b, r5, 0x1, 0x20, 0x6, @broadcast}, 0x14) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="feffffff"], 0x0, 0x0, 0x0}) r6 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$SNDCTL_DSP_GETTRIGGER(r6, 0x80045010, &(0x7f0000000040)) sendmmsg(r1, &(0x7f0000007fc0), 0x400000000000030, 0x0) [ 249.179733] binder: 10600:10601 unknown command -1 [ 249.186369] binder: 10600:10601 ioctl c0306201 20000200 returned -22 00:32:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000), 0x4}, 0x9cc46edb4bdacb55, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, 0x0, 0x551c00, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000001c0)={@ipv4={[], [], @loopback}}, 0x14) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_int(r2, 0x29, 0x0, &(0x7f0000000200), &(0x7f0000000280)) r4 = socket$inet(0x11, 0x3, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x60400d0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f0000000180)={{0x4eeae72f2ef3d882, 0x0, @identifier="029272e4e893cce830d37b008768f2ae"}}) openat$zero(0xffffffffffffff9c, 0x0, 0x620001, 0x0) r5 = socket$unix(0x1, 0x0, 0x0) bind$packet(r3, &(0x7f0000000240)={0x11, 0x19, r1, 0x1, 0x7, 0x6, @random="2e3c51fedfde"}, 0x14) sendto$unix(r5, 0x0, 0x0, 0x4000811, 0x0, 0xffffffffffffff4c) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r6, &(0x7f0000000600)="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", 0xe00) sendfile(r6, r7, 0x0, 0x12000) [ 249.276815] ip_tables: iptables: counters copy to user failed while replacing table [ 249.321062] binder: 10683:10688 unknown command -2 [ 249.332939] binder: 10683:10688 ioctl c0306201 20000200 returned -22 [ 249.341106] audit: type=1800 audit(1590107543.265:73): pid=10690 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=15939 res=0 [ 249.375770] binder: 10683:10698 ioctl 80045010 20000040 returned -22 00:32:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000100)={0x2d, 0x6, 0x0, {0x2, 0x5, 0x4, 0x0, 'GPL\x00'}}, 0x2d) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) [ 249.428216] audit: type=1804 audit(1590107543.315:74): pid=10690 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir862177018/syzkaller.jPGRTp/71/file0" dev="sda1" ino=15939 res=1 [ 249.431400] print_req_error: I/O error, dev loop0, sector 0 00:32:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000240)={0x3ff, 0x2000000000089}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xf8b195b3b4ddac8a, 0x100) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="4fa01791", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={r6, @in6={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, [0x0, 0x3, 0xb939, 0x8, 0x80000000, 0x8, 0x7fff, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x8, 0x0, 0xfff]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000040)={r6, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r6, 0x8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r6, 0x40}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000180)={r7, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008108040f80ecdb4cb92e0a480e0026000000e8bd6efb250314000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) [ 249.639375] binder: 10683:10698 unknown command -2 [ 249.661271] binder: 10683:10698 ioctl c0306201 20000200 returned -22 [ 249.673716] binder: 10683:10713 ioctl 80045010 20000040 returned -22 [ 249.698023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.705079] device batadv_slave_0 entered promiscuous mode [ 249.739061] binder_alloc: 10641: binder_alloc_buf, no vma [ 249.749413] binder: 10641:10720 ioctl 89e0 20000000 returned -22 00:32:23 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) io_submit(0x0, 0x0, &(0x7f00000006c0)) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000440)=0x1, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010020, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x3}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@empty, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) socket$inet6(0xa, 0x3, 0x0) 00:32:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETLINK(r0, 0x400454cd, 0x324) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'rose0\x00', 0x600}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) 00:32:23 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getgid() recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, [], @bt={0x8000, 0x8, 0x5, 0xfffffff9, 0xfffffffffffffffc, 0x80, 0x4, 0xb}}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r4, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/3\x00') r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r6, 0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f0000000340)) preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) 00:32:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getpid() r1 = gettid() timer_create(0x3, 0x0, &(0x7f00000000c0)) migrate_pages(r1, 0x4cc, &(0x7f00000001c0)=0x1, &(0x7f0000000240)=0xe934) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f0000000000)=0x1) r5 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 00:32:23 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x700, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002407008009004b30973d34730100626f6e6400000000000500"/44], 0x44}}, 0x0) 00:32:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x800000000cc}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x0, 0x2, 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x4}, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x4, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x400, 0x7, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x10) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0xb43, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x8000, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}], 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) [ 250.036470] nla_parse: 65 callbacks suppressed [ 250.036476] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 250.056708] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 250.093107] binder_alloc: 10739: binder_alloc_buf, no vma [ 250.102844] binder_alloc: 10737: binder_alloc_buf, no vma [ 250.130430] binder: 10737:10761 ioctl c0905664 200001c0 returned -22 [ 250.137750] binder: 10739:10759 ioctl 89e0 20000000 returned -22 00:32:24 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setrlimit(0xc, &(0x7f0000000100)={0xfbffffffffffffff, 0x10001}) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwrite64(r2, &(0x7f0000000000)="5ad3", 0x2, 0xfffffffefff) 00:32:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x4004814) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001c0000082dbd7000fcdbdf2502000000", @ANYRES32=0x0, @ANYBLOB="0200"], 0x24}, 0x1, 0xc00000000000000}, 0x40) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x64, &(0x7f0000000080)={&(0x7f00000003c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x1a}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x30, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf6}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x811) 00:32:24 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000100)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) socket$netlink(0x10, 0x3, 0x6) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x2, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000540)={0x0, 0x0, 0x9, 0x0, [], [{0x1d71, 0x7, 0x2, 0x7, 0x776, 0xffffffff}, {0xfffffb0e, 0x700, 0x6, 0x867e, 0x1c0, 0x1}], [[], [], [], [], [], [], [], [], []]}) ioctl$KVM_NMI(r5, 0xae9a) r6 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f00000001c0)=@v2={0x2000000, [{0x8, 0x8}, {0x1, 0x9}]}, 0x14, 0x0) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0x0, r6) keyctl$set_timeout(0xf, r6, 0x0) 00:32:24 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020028bd7000fedbdf250600000008e0000002150001002f70726f632f706172746974696fe0698345ca24313902000700000006000b00290000022af1bb10b72d48f99a7f02340150181170d405b5fe7700bddcbe5734ee9c1660cd11afa4d06a07611251e3efb9c9d66635a5ffbb075940d3bad9b1b1793f00fc02fea34712bc478326a3a54f02dac7dd9fe4d4a4bb012d47c760cb897510552717c2c58ab55dffbc23000000"], 0x44}}, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000080), 0xfe28, 0xfffffffffffffffb) [ 250.283898] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 250.343362] Invalid option length (63299) for dns_resolver key [ 250.352638] batman_adv: batadv0: Adding interface: ipvlan2 00:32:24 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x15}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0463044000deb53ae01aa727b7af529521d62ba9b4ab3edef46396fc73f59488f1c8da2b265ff0d8fb5af27c0f92ec19d1139145f8bda7bac2d5577c36a5d7b1be37133e326e877f50226fa2f9ec221318f7cfcadc8b84af1781488e86e30e56a3f47cf3fa2c3d935da2690200e3ea103edbb80d4c9c28f831e9aded2e3d3aa5c33a7881c290485f732d7746641c412ac28b7a22f0a42c3819c2264679f1b2c517262e86e3df47d457b5ab63b36e574f77faaf6e317a7aadf0e07db3e39237b80a39e637fca0"], 0x0, 0x0, 0x0}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="84a088635d6b5aec0500f8b1d83af6d881a2757c14a79cee13a4fa58bb7fceb6da6f2ab8c2b75791ef46e5a253ce0362a76c1b9d28cd4d4d819c"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000440)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0}) connect$ax25(r2, &(0x7f0000000240)={{0x3, @null, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x200400, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='[d::],0::6:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x20410, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00f61188b02f9320b0a56eb6e464e36ea3625d483d35e1000000000000001400008009000100626f6e640000"], 0x34}}, 0x0) [ 250.373002] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.395759] Invalid option length (63299) for dns_resolver key [ 250.405474] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.0'. [ 250.418540] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active 00:32:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000180)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000100)={@void, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @dev={[], 0x1a}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @random="3218f2ee1961", @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x34) write$binfmt_elf64(r2, &(0x7f0000000ec0)=ANY=[], 0x471) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000480), 0xa198) 00:32:24 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, &(0x7f0000000100)={"7f3f147e3535ddab18df07257532d08fb6e8d9ecd59195d7f7fc35a05025cc424ad01513b45dad4ae84a492786a793d127d7937fce31ae1d64f6c6e5bac5fb9ca30d536625b3d97ad9d05af2a14fc1ef3c2ddabf865a054012a8ee622f5c99b6d67134116d495dd735ef6d1b5b1062e3e46164b35b722c405f5753898cd874252419e633569e2aab5223f524d3a76285f05a95aafb9dcb8021838431b2a1de6981da0b16fe9270baf1aad9df00820f116f6867df32b24c2bf4a18eb7002afaa9ff1e5cd00d79af931a0b43c03fb72e1273b56904bf955419a7b241870fbbf386f55c47e2d2c0cd988bf26e8f8b10b07757294a5c5781fb81a5bb67aa3b7e7921645d7452a5f3a2ce6ce137d359d0dc9f26aefe746bacd3e204aa6fbe7248be2fbd388ad13ddc4146e4a7b4cef067aa51e534e47350da7ea3ffd1a1e43a71625e75d5d015969afdb5729bdedd013891d7102209a8b6361c84200b6313717f2d1dc03d4fcf557378c95756f532d9d146ada012d48e20fa6376f8f1fb537d78b4b69d2e9c9b1b479ec485586d1ed714d1825615a4f6d79bd2d1f11d1a5a9fb1678422028b3603446ddb0c471728a3313e4518c2203a91e6535457c5fa2df4f1e0826f3922275a102c1d2c4a62461269f8d2a176d91ec1c03104037b88758bb71278beb43a3188445776736f459efd7511517e1623f8c6b9a2965874f9c05956c524559d802d195533cc159dab620065f935bcb5e841cab4ff8eb86560e252d5a884abd18e4522f9ac9cce0118899d9e05bfec85e491541f8d233bf9065fed8f9c2027349924505a2f9fd699f1983159173ae1a3e9f12b4602300220d15b659bfa101725a03fde94e135642730d845420ee4059a292560eb4b70c68df64557a613917db52588ebce444bc0411881fa1049db8e31ae6accc96402ba4c3e27e3d3b0758faa7bc9a9b116aba24c10bba961a0a4b1fcc2129109847f84faa946843ce714b64dd38e84efbe8844c5e1563e56d5c4e4d4ec7d9987508b757fd3ee1e878f1deb88a92fbcec6c8327f8a05c1dee3c03d3535f36cf54c478f9f8a1f83fdbdf932c892c228a377393413253fa436968358cbd7cb2df6681286ea455ab8dfb0ef9531885f5bb79471a9afb25a09981e81c3915d64ddb7712534f0f8927459025fa1c3368b65222b71816a98992709d06f44a7291f1a54cdcd55b3e432d16aa7a7c9755f58ee4ce146f1139f32a2b413a21bf15990bebb177e6dfd3e5a3210472cc1c906c6601a2312f187a5be6ac02f7f9c5622975636971441d622653f25c6ebeb15e464404ca7fd69d992a406075aac19799533200c63636b6055f823bd77e61e101cc178609d2dcd67a2d8218cbe987268bdbf488e765b6793f185ecef20d73f3806f07c4374bd6e4e29eab03ef09e632907e81cb8ebe5da14252400d84725f"}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8982, &(0x7f00000008c0)) [ 250.437071] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 250.475016] audit: type=1800 audit(1590107544.405:75): pid=10807 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=15901 res=0 [ 250.503055] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 250.511329] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 00:32:24 executing program 4: socket$kcm(0x10, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) [ 250.524344] binder: BINDER_SET_CONTEXT_MGR already set [ 250.533703] binder: 10808:10809 ioctl 40046207 0 returned -16 [ 250.602687] binder: BINDER_SET_CONTEXT_MGR already set [ 250.628456] binder: 10808:10825 ioctl 40046207 0 returned -16 [ 250.657510] binder: 10808:10830 ioctl 8400ae8e 20000100 returned -22 [ 250.674141] audit: type=1400 audit(1590107544.605:76): avc: denied { ioctl } for pid=10808 comm="syz-executor.3" path="socket:[36235]" dev="sockfs" ino=36235 ioctlcmd=0x8982 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=sock_file permissive=1 [ 250.755155] minix_free_inode: bit 1 already cleared [ 250.777288] audit: type=1804 audit(1590107544.705:77): pid=10833 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir862177018/syzkaller.jPGRTp/74/bus" dev="sda1" ino=15881 res=1 [ 250.889442] binder: BINDER_SET_CONTEXT_MGR already set [ 250.899832] binder: 10737:10772 ioctl 40046207 0 returned -16 00:32:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RREADDIR(r3, &(0x7f0000000100)={0x87, 0x29, 0x1, {0x2, [{{0x4, 0x3, 0x4}, 0x8, 0x6, 0x7, './file0'}, {{0x80, 0x3, 0x3}, 0x8, 0x0, 0x7, './file0'}, {{0x80, 0x0, 0x3}, 0x0, 0x3, 0x7, './file0'}, {{0x4, 0x3, 0x8}, 0x1f, 0x6, 0x7, './file0'}]}}, 0x87) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x14}, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 00:32:24 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r4, r3) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) r5 = dup2(r4, r0) setns(r5, 0x52020000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) accept4$alg(r2, 0x0, 0x0, 0x80000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000240)="25bca274769e620a2734fa0095e0612687ecb86a548802a941000000000000004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_dev={'journal_dev'}}]}) 00:32:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e22, @local}}, 0x80000001, 0x3, 0x4, 0x0, 0xf43e}, &(0x7f00000003c0)=0x98) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$VIDIOC_S_EDID(r5, 0xc0285629, &(0x7f00000001c0)={0x0, 0x2, 0x4, [], &(0x7f0000000180)=0x9}) getsockopt$inet_dccp_buf(r2, 0x21, 0xc0, &(0x7f00000000c0)=""/101, &(0x7f0000000080)=0xffffff79) prctl$PR_SET_CHILD_SUBREAPER(0x35, 0x1) [ 251.100234] EXT4-fs (loop2): Invalid log block size: 65 [ 251.223531] binder: BINDER_SET_CONTEXT_MGR already set [ 251.298194] binder: BINDER_SET_CONTEXT_MGR already set [ 251.345569] binder: 10808:10825 ioctl 40046207 0 returned -16 [ 251.360832] binder_alloc: 10848: binder_alloc_buf, no vma [ 251.382852] binder: 10808:10830 ioctl c0306201 20000280 returned -14 [ 251.383420] binder: 10808:10863 ioctl 8400ae8e 20000100 returned -22 00:32:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000003000000000000000040"], 0x0, 0x0, 0x0}) dup2(r2, r1) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="630000410579894c41965c1622e07a0197b55a63cbcb7bd8f0942f73e226d814a7e246cc2a0673eed763186db6445b2988e0305ec25f387e9aef17f7cc1044b2641d11a6ad470142923114fd6d3cd5247a346af6bb8d9c3fdbd150b6abe33a7defd9c26055948f04c1b5bd82"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) fcntl$setownex(r2, 0xf, &(0x7f0000000080)={0x0, r7}) writev(r0, &(0x7f0000001600)=[{&(0x7f00000016c0)="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", 0x4b3}], 0x1) [ 251.404057] binder: 10840:10844 ioctl 40046207 0 returned -16 00:32:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000180)='wlan1posix_acl_access\x00') r6 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b6300488a00c7afec003f3037747e2200ea850fd20ddf5a6cdea90a5c3f0e21d6644d0e167cc1154b962ef8326186ab7f6513a3c1d4866653b7e75a7b1a8b3c0ccbb4b322cac754c5ad194d72317e63f126406ddd7387140424440e9b78da718fdafdf533b8a15f58a00602b8ecfb5ce1f5c387e074101a2300cdf518f79e6a36fd9a0ef15f2e9b5e661e8ba9816430b72336e816f669f6"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505331, &(0x7f0000000100)={{0x4, 0xfe}, {0x1f, 0x60}, 0x9, 0x5, 0x7f}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$bfs(&(0x7f0000000240)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000400)="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", 0x200}, {&(0x7f00000000c0)="934253bde6", 0x5, 0x7}], 0x8840, 0x0) 00:32:25 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$KVM_GET_API_VERSION(r5, 0xae00, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYRESHEX=r2], 0x0) [ 251.453469] binder: 10865:10867 unknown command 196608 [ 251.458987] binder: 10865:10867 ioctl c0306201 20000200 returned -22 [ 251.508360] binder: 10865:10873 unknown command 1090519139 [ 251.529506] binder: 10865:10873 ioctl c0306201 200000c0 returned -22 [ 251.544581] binder_alloc: 10865: binder_alloc_buf, no vma [ 251.551672] binder: BINDER_SET_CONTEXT_MGR already set [ 251.557889] binder: 10865:10867 ioctl 40046207 0 returned -16 [ 251.565789] binder: BINDER_SET_CONTEXT_MGR already set [ 251.565800] binder: 10875:10879 ioctl 40046207 0 returned -16 [ 251.579560] binder: 10875:10879 unknown command 1207984907 [ 251.579571] binder: 10875:10879 ioctl c0306201 200000c0 returned -22 00:32:25 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000001d0000240012800b000100627269646765"], 0x50}}, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x464, 0x200, 0x70bd25, 0x25dfdbfb, "f1e399b1fa1690b1bd0a591385c0db72a4f86dafd1270f", ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8080005}, 0x40040) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) [ 251.580045] binder: BINDER_SET_CONTEXT_MGR already set [ 251.580054] binder: 10875:10879 ioctl 40046207 0 returned -16 [ 251.598560] BFS-fs: bfs_fill_super(): Cannot allocate 4816926 bytes 00:32:25 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0xa732}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x201) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff8368eb58687591000000811500000806000108400604"], 0x32) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 251.651475] binder: 10865:10873 unknown command 1090519139 [ 251.657259] binder: 10865:10873 ioctl c0306201 200000c0 returned -22 [ 251.667737] binder_alloc: 10874: binder_alloc_buf, no vma [ 251.693773] binder: 10874:10884 ioctl ae00 0 returned -22 [ 251.696786] binder: BINDER_SET_CONTEXT_MGR already set [ 251.707645] binder: BINDER_SET_CONTEXT_MGR already set [ 251.714093] binder: 10865:10867 ioctl 40046207 0 returned -16 [ 251.715204] binder: 10874:10884 ioctl 40046207 0 returned -16 00:32:25 executing program 0: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x8084, 0x8, 0x0, 0x4}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r4, 0x107, 0x1, &(0x7f0000000540), 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x1, 0x5, 0x0, 0x73, 0x6804, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x1, @perf_bp={&(0x7f0000000000), 0xf}, 0x4402, 0x0, 0x40f1, 0x7, 0x2, 0x5, 0x1f}, r0, 0x4, 0xffffffffffffffff, 0x2) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r7 = dup2(r6, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b6300fe4768be26e9bebb06d969ce1e71487f61dde805652af1772baf56"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$VIDIOC_DECODER_CMD(r7, 0xc0485660, &(0x7f0000000180)={0x2, 0x1, @start={0xffffffff, 0x1}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) dup3(r2, r3, 0x0) dup2(r1, r5) [ 251.748902] binder_alloc: 10874: binder_alloc_buf, no vma [ 251.783225] binder_alloc: 10892: binder_alloc_buf, no vma 00:32:25 executing program 5: prlimit64(0x0, 0x7, &(0x7f0000000280)={0xfffffffffffffff8, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x1}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x8000000}) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r5, r9, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x5) [ 251.887336] binder: 10848:10855 unknown command -1 [ 251.900509] binder: BINDER_SET_CONTEXT_MGR already set [ 251.909426] binder: 10848:10855 ioctl c0306201 20000280 returned -22 [ 251.918708] binder: 10848:10849 ioctl 40046207 0 returned -16 00:32:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e22, @local}}, 0x80000001, 0x3, 0x4, 0x0, 0xf43e}, &(0x7f00000003c0)=0x98) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$VIDIOC_S_EDID(r5, 0xc0285629, &(0x7f00000001c0)={0x0, 0x2, 0x4, [], &(0x7f0000000180)=0x9}) getsockopt$inet_dccp_buf(r2, 0x21, 0xc0, &(0x7f00000000c0)=""/101, &(0x7f0000000080)=0xffffff79) prctl$PR_SET_CHILD_SUBREAPER(0x35, 0x1) 00:32:26 executing program 3: syz_read_part_table(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e21, 0x8, @mcast2, 0x1}}, 0x1ff, 0x7}, 0x90) socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x10}, 0x0) 00:32:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000100)=0xf7fffffc, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @private1}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) r5 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IP_VS_SO_GET_INFO(r5, 0x0, 0x481, &(0x7f0000000200), &(0x7f0000000240)=0xc) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x1, 0x0, &(0x7f0000000340)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$VIDIOC_SUBDEV_G_EDID(r6, 0xc0285628, &(0x7f0000000300)={0x0, 0x6, 0x8001, [], &(0x7f0000000280)=0x4}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) [ 252.113185] audit: type=1804 audit(1590107546.045:78): pid=10931 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir616832583/syzkaller.xqcjYn/72/bus" dev="sda1" ino=15947 res=1 [ 252.147168] binder: 10928:10939 unknown command -1 00:32:26 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x280, 0x150, 0x150, 0x0, 0x0, 0x360, 0x238, 0x238, 0x360, 0x238, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'dummy0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x10001, 0x7}}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) [ 252.182896] binder: 10928:10939 ioctl c0306201 20000280 returned -22 [ 252.187211] binder: BINDER_SET_CONTEXT_MGR already set [ 252.187222] binder: 10928:10939 ioctl 40046207 0 returned -16 [ 252.258609] binder: BINDER_SET_CONTEXT_MGR already set 00:32:26 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x20008014, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x6) setreuid(0x0, r2) r3 = gettid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=r3) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:32:26 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r3, 0x0, 0x30009, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$VIDIOC_G_FBUF(r6, 0x8030560a, &(0x7f0000000000)={0x20, 0xa, &(0x7f00000001c0)="ad94bd5cfc46753616e3dba228b6d3fac2bb3afb7ea304a7e333a43fb70516f781b1222ecb4f2d3554325f2b712b860f4e0423bfc3896d0aff43e0172d34664f90ec51bdc78f5c807bb5d0024ded0992dbb7e54ae08961fba29d07a331ff10a2bb30b5695a11247506ca001ce4fe03396ed9c12f902a112d99f105a9b4799f27d89389d92649d1d5a5c3dd4b082c05e9d2362554ce2b29928a3a9ad15ee40ce893991c0589c8cf3d3f0a6e21d70ce8d1aebac4833100b489a72978d4004f0d90806996eafd26b52b839a12b3df641f2458", {0x1, 0xffffffff, 0x6f63576956501153, 0x8, 0x80000001, 0x6, 0x9, 0x10000}}) [ 252.258622] binder: 10928:10946 ioctl 40046207 0 returned -16 [ 252.259993] binder: 10928:10946 ioctl c0285629 200001c0 returned -22 [ 252.340607] binder: 10874:10884 ioctl ae00 0 returned -22 [ 252.340673] binder: BINDER_SET_CONTEXT_MGR already set [ 252.340682] binder: 10874:10880 ioctl 40046207 0 returned -16 00:32:26 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000001d0000240012800b000100627269646765"], 0x50}}, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x464, 0x200, 0x70bd25, 0x25dfdbfb, "f1e399b1fa1690b1bd0a591385c0db72a4f86dafd1270f", ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8080005}, 0x40040) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) [ 252.340735] binder_alloc: 10874: binder_alloc_buf, no vma [ 252.669186] binder_alloc: 10959: binder_alloc_buf, no vma [ 252.680965] binder_alloc: 10965: binder_alloc_buf, no vma [ 252.700468] binder: 10959:10969 ioctl 8030560a 20000000 returned -22 [ 252.782641] audit: type=1804 audit(1590107546.715:79): pid=10927 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir616832583/syzkaller.xqcjYn/72/bus" dev="sda1" ino=15947 res=1 [ 252.850275] audit: type=1804 audit(1590107546.715:80): pid=10927 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir616832583/syzkaller.xqcjYn/72/bus" dev="sda1" ino=15947 res=1 00:32:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e22, @local}}, 0x80000001, 0x3, 0x4, 0x0, 0xf43e}, &(0x7f00000003c0)=0x98) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$VIDIOC_S_EDID(r5, 0xc0285629, &(0x7f00000001c0)={0x0, 0x2, 0x4, [], &(0x7f0000000180)=0x9}) getsockopt$inet_dccp_buf(r2, 0x21, 0xc0, &(0x7f00000000c0)=""/101, &(0x7f0000000080)=0xffffff79) prctl$PR_SET_CHILD_SUBREAPER(0x35, 0x1) [ 252.886056] audit: type=1804 audit(1590107546.745:81): pid=10927 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir616832583/syzkaller.xqcjYn/72/bus" dev="sda1" ino=15947 res=1 00:32:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xfffffff5, 0x5, 0x0, 0xfffffffffffffffe, 0x6, 0x4}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000100)={0x0, 'netdevsim0\x00', 0x2}, 0x18) fcntl$setpipe(r2, 0x407, 0x800000000000000) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x8) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x2c, 0x200}, 0x10000, 0x3, 0x1, 0x3, 0x7fffffff, 0xe2c, 0x1c0}, 0x0, 0xf, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r5 = memfd_create(&(0x7f00000003c0)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xfbmZ\x84~\x9e\xf6\xb7\xc0\x8ac\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vn\xe0\x8d\x8a\xf2g\xeb\xa2q\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xab\xecoB\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4{\xdd~\xe5\xbf\xc0]l\xf7\x00'/151, 0x0) pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x3, 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000003) [ 253.003099] binder: 10977:10980 unknown command -1 [ 253.008072] binder: 10977:10980 ioctl c0306201 20000280 returned -22 [ 253.032155] binder: BINDER_SET_CONTEXT_MGR already set [ 253.037480] binder: 10977:10980 ioctl 40046207 0 returned -16 [ 253.122724] binder: BINDER_SET_CONTEXT_MGR already set [ 253.133509] binder: 10977:10990 ioctl 40046207 0 returned -16 00:32:27 executing program 3: syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@norecovery='norecovery'}]}) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001340)={r5}) setsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000001380), 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000000)) [ 253.172007] binder: 10977:10990 ioctl c0285629 200001c0 returned -22 00:32:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x0, 0x5, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="ac2a7682f645c0a3a4dbd7d70194fd1d90e6c05ccaf7ede0428904f00e2f878378b8e955bb8f4c912d29a292efccf9948fcb8c69b040dea2244a3146fdb2f2be008cbc15fb676eca388e721af5d28698d9e7000095e39a983a77f77d1d94e0250fe6324e26bb00362f71ff5daafc57db"], 0x2}, 0x1, 0x0, 0x0, 0x24000054}, 0x0) vmsplice(r2, &(0x7f0000000100)=[{&(0x7f0000000200)="bee899c5c06d128291988dbbd89d17aeabf6796a542822e1bf215bd344d6704050e0b5e893ee1b851671260000000000000000000000000010ea2aa3c6bc22c074", 0x41}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x40000080806, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @local}], 0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) [ 253.264636] gfs2: not a GFS2 filesystem [ 253.276963] binder: BINDER_SET_CONTEXT_MGR already set [ 253.284777] binder: 10998:11000 ioctl 40046207 0 returned -16 [ 253.304738] binder: BINDER_SET_CONTEXT_MGR already set [ 253.316980] binder: 10998:11000 ioctl 40046207 0 returned -16 00:32:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05639ba11163224001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, [0x0, 0x3, 0xb939, 0x8, 0x80000000, 0x8, 0x7fff, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x8, 0x0, 0xfff]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000040)={r5, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r5, 0x8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={r5, @in6={{0xa, 0x4e21, 0x7fffffff, @remote, 0x5}}, 0x4, 0x1, 0xfff, 0x10001, 0x0, 0x3}, &(0x7f0000000000)=0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0x7, 0xffff, 0x8204, 0x20, 0xb, 0x6, 0x3, 0x1, r6}, 0x20) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0xfb) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000100)={'bond0\x00'}) [ 253.403572] binder: BINDER_SET_CONTEXT_MGR already set [ 253.409038] binder: 10998:11007 ioctl 40046207 0 returned -16 [ 253.448519] binder: 10998:11007 ioctl 8040ae9f 20000000 returned -22 00:32:27 executing program 4: sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000800)={0x4c, 0x13, 0x200, 0x70bd2c, 0x25dfdbfe, {0x2, 0x1, 0x2, 0x5, {0x4e21, 0x4e23, [0x10001, 0x5674, 0x307c, 0xffffffff], [0x4, 0x9, 0x1000, 0x7fffffff], 0x0, [0x9, 0x4]}, 0x2, 0x7fffffff}}, 0x4c}, 0x1, 0x0, 0x0, 0x44}, 0x40840) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x200, 0x0) ftruncate(r0, 0x48280) syz_mount_image$xfs(0x0, &(0x7f0000000100)='./bus\x00', 0x100000000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000240)='Y`I', 0x3, 0x5}, {&(0x7f0000000580)="b31ef615acc84712720a80d486e284ec858c28bbc30ad8317ad6dec33553fd5f3427215438b53b4d84d57fd850e463372f9de5927d33b60f27f9cdd765f32b4682597aa176084dccd169300ecb1e6ddcf12b981d9fbc966cb88386be4b070dfef4c4bf0695a8bbcd495db398e8731da1b75328d5a511940a35f13e", 0x7b, 0x3ff}, {&(0x7f0000000640)="e771fa4ad8b282a136aa6abb30edfde1d6b1fd7272c1276758942b86d2467128556155f3994bbcc93ecdc235d25c5ee91b05acbb037f934715d44a689586bf4968baf3533c512ca69174fbc0f481b63b822865a5e4903eb5a0b73a947c1355924176b7e0fd6537673f256792f6dc7267b378c1f25353753496805501cd9a8c9fe220783f5d6b30adfb4ce012b3c7053f5e8e2c4dca04c51d", 0x98, 0x9}, {&(0x7f0000000700)="07605596eb32e24c3d23643a09ce4ae0f537d6cd1de70dda056ce228bb11c9a5a2ba9400ca6382aa9aec480088dca30b9b702efd9872654ef4725c385a5879d8dd65cde841c87a617f7d61e5e28b22653ed99428aaaa2b07d367a6c76451c6fabb2f225f7441637f8702deb8439472766dc3f181f9b788254f9d61718fdf514d4ff64f2e9ff0dd608da9b25c58834361e8b5af7d11364449f31caae5373558c8fe80872ce250e1699fc621927188d32f040a8941ddbb78499b896c984177e1ba617b3d22d404b1167c102c9a20760f", 0xcf, 0x6f}], 0x22080, &(0x7f00000009c0)=ANY=[@ANYBLOB="64615d0c736d61636b66726f6f743d210c4174dbfa9b11c462a86e124e6062b6c01d4524ed7b55dc7292d41de2fe79721ac34fda48a628d3e924bcfc29f175485025ba55a42137e30381e9207fa2e6767865b123ccbfb34c66c93ade302589d952d3acb56c0247880ac89268435eb1b6208a850c32ca78e0", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973255f747970653d696d617369672c73db31c16d61636b66736861743d2c666f776e65723ec448b4fc81455c22925881a4f19f28f53225ebbfd5c67a56870b50", @ANYRESDEC, @ANYBLOB="2c6f6265844bf8560000006600"/24]) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000040)={0x2, 0x6}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f00000003c0)={0x0, 0x5, 0x8000, [], &(0x7f00000001c0)=0x1}) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000002c0)={0x3, @sliced={0x0, [0x1, 0x8, 0x3, 0x1, 0x0, 0x0, 0x7, 0xae, 0x9, 0x81, 0xbe, 0x0, 0x3ff, 0x2, 0x0, 0xffff, 0x4, 0x0, 0x3, 0x0, 0xbac3, 0x18, 0x0, 0x0, 0x8001, 0x0, 0x8, 0x0, 0x0, 0x8, 0x40, 0x4, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x9, 0x59d6, 0x0, 0xf2f, 0x0, 0x0, 0x0, 0x0, 0x7], 0x5}}) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fdatasync(0xffffffffffffffff) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)={0x100000, 0xffffffffffffffff, 0x9}) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 253.548042] binder: 11013:11020 unknown command -1583652091 [ 253.570580] binder: 11013:11020 ioctl c0306201 20000280 returned -22 [ 253.617781] audit: type=1804 audit(1590107547.545:82): pid=11021 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir862177018/syzkaller.jPGRTp/77/bus" dev="sda1" ino=15958 res=1 00:32:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e22, @local}}, 0x80000001, 0x3, 0x4, 0x0, 0xf43e}, &(0x7f00000003c0)=0x98) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$VIDIOC_S_EDID(r5, 0xc0285629, &(0x7f00000001c0)={0x0, 0x2, 0x4, [], &(0x7f0000000180)=0x9}) getsockopt$inet_dccp_buf(r2, 0x21, 0xc0, &(0x7f00000000c0)=""/101, &(0x7f0000000080)=0xffffff79) prctl$PR_SET_CHILD_SUBREAPER(0x35, 0x1) [ 253.910410] binder: 11031:11038 unknown command -1 [ 253.941915] binder: 11031:11038 ioctl c0306201 20000280 returned -22 [ 253.969081] binder: BINDER_SET_CONTEXT_MGR already set 00:32:27 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, [0x0, 0x3, 0xb939, 0x8, 0x80000000, 0x8, 0x7fff, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x8, 0x0, 0xfff]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x800, 0x367, 0x8007, 0x10000, 0x2, 0x8, 0x400, 0x20000}, 0x20) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) sendto(r3, &(0x7f0000000180)="000ef1e10eccc1bcaf5710616a2891a5884e3f7944b8985717c96539a1e72242f4512eb65cfda12a919d46dffad9b936565e54f778747fc499823f8db5926f845799ac498d0311cb9d6d3f2f6c287f67d57fbc6592eecaebb878", 0x5a, 0x40041, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) [ 253.998946] binder: 11031:11041 ioctl 40046207 0 returned -16 [ 254.099167] binder: BINDER_SET_CONTEXT_MGR already set [ 254.106845] binder: 10998:11007 ioctl 40046207 0 returned -16 [ 254.128549] binder: BINDER_SET_CONTEXT_MGR already set [ 254.134818] binder: 10998:11000 ioctl 40046207 0 returned -16 [ 254.146302] binder_alloc: 11046: binder_alloc_buf, no vma 00:32:28 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000081, 0x4540, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0x1f00000000000}}, 0x0, 0xffffffffffffbfff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x10000, 0x40, &(0x7f0000ff0000/0x10000)=nil) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) mknod$loop(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000000), &(0x7f00000000c0)=0x4) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, 0x0, 0x4) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x110000, 0x0) r0 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$IPC_RMID(r0, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) [ 254.170666] binder: BINDER_SET_CONTEXT_MGR already set [ 254.176167] binder: 10998:11007 ioctl 40046207 0 returned -16 00:32:28 executing program 2: ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000100)={0x6, 'veth0_vlan\x00', {0x2}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x4031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000000)={0x0, 0x10}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000280)={0x0, &(0x7f0000000200)=""/75}) fcntl$setstatus(r1, 0x4, 0x400) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x3, 0x8, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) clock_gettime(0x0, &(0x7f0000000180)) sendto$l2tp(0xffffffffffffffff, &(0x7f00000002c0)="5b92ad6de113b3b45895608dd9654e3ea17de48ab81e0b650264a73ddc51ca22a5e020ea9806d758d434ed4cb7dbc663390749ffe494e8d644ccbc8e2d8c4878f50e6f49bf63015a3c043342db41e8400ab8869832879aeba6398024a9e2532197944c8a689babb7fd9bcede6721d5a12039c2a4ad0a28f661a2edf5a4d990351c2cb36c70aedd8e9cc5c49388141a56cffcb9306c493807fba7c32aa9d30e684f603ad16f7701cdfe557426f05ee0e5908dfbd6c8f12de4d6a7d0fab6", 0xbd, 0xc4, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, 0x10) 00:32:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r6, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000002800efac00"/20, @ANYRES32=r6, @ANYBLOB="0009000001006367726f7570000034000200320101002c0000000b0001006374696e666f0000040002801500060032d2052774c58a7b578a5b590dd505511904a700"/76], 0x64}}, 0x0) [ 254.256443] binder: BINDER_SET_CONTEXT_MGR already set [ 254.264206] binder: 10998:11000 ioctl 40046207 0 returned -16 [ 254.309282] mmap: syz-executor.2 (11067) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. [ 254.323203] binder: BINDER_SET_CONTEXT_MGR already set [ 254.328686] binder: 11013:11020 ioctl 40046207 0 returned -16 [ 254.332930] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 00:32:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x5, 0xdd1c, 0x8f46, 0x31, 0x3f}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r4, r3) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) fgetxattr(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="7381a9cbdde2da8b216600"], &(0x7f0000000080)=""/116, 0x74) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2ad0808, 0x0) [ 254.368705] binder: 11013:11022 unknown command -1583652091 [ 254.375142] binder: 11013:11022 ioctl c0306201 20000280 returned -22 [ 254.453625] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 00:32:28 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x2) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x2005000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x4, 0xfc, 0x0, 0x0, 0x509, 0x8a114, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x22008, 0x5, 0x4000000, 0x0, 0x7, 0x3, 0x800}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x20000000, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0xd800, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x505002, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000300)='./file0/file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file0/file0/file0\x00') mount$overlay(0x0, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000240)='overlay\x00', 0x1800004, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, &(0x7f0000000b00)={0x0, &(0x7f0000000ac0)=[&(0x7f0000000400)="6fff8dda9e419018c2f59d6e8f4b1754f3f1ff0d0971856dae9d0a103637cea2a2a9cadfccc929fd990997dda6a08fb13d551fa79bd34850ecb71dc86588390689b5b8431ab6fb2b8aec9c94f43e8930b8f7a2be5ef6e173c644850dea8eac3487ab5805113794a76a3b7606d7ec1cb84ce24b8058", &(0x7f0000000640)="b42301c1021467a4b8671d0d898683dcb95294814f5a5052e12136f96a2664ab7aee6a092e548a8ad095a6af943790c4392774875310cf72eb003ee3b39abe103ab559e4d39b8de914cfb5186569a793cf1c16be03201800cbb04af12c169f23d433a467e5d2a24f30dbc5367ef36792d2ee4000cd4c4b1bf9a56df17a83a73b093f0b2cc13ff4b7e7bf1d575ebb21af6546c865258535d86e1da5cd03f80a28cdec3c0fda004f0cf12df143870bcf85a111ca4d770468679969f0dbc00ddf18c915d8eb627501d0753dcc7461349d1b8fd2c224cbfbaeab0481fa4c7e78f30706ce93a6f32b195591c7c86f53", &(0x7f0000000580)="c51edc06d688ccbc92e3b0a2bfc289f7752a5dd1f5322101221d15cb28ff6a94f5a42a9fdff0d38b4e5c1583c2c449295cf38f6804c39863b0165fcd28ccbc7b64074632a0a6590b1de0d1062c3f956e1f3e8291807e171542f6", &(0x7f0000000740)="a3ee6d74032efb101282c1c42b2c4a4cbedd5e76aecb587c8affd1486cdf4f5f76dc0bcc74945f879f8baccbe04ee7d21f04bbbd59f5f1bd166201e63c7b08c36297d446f6d34abd27cb32cad21c92989bab9709ab4bd05e96bb3d0e982904baade9387fa13b0defa8ae571e52f94a7138d6c2869ed97f15e07b8fffd897489ca8e067dd87f5fe2b243676a4ac5538a8374a7c818b29a81aa1711eaa915c998d0e90b6fca33d23f10b7f0d4691d4d1e0d9d809f7d02e123da52a6f665cc27d6be9bf23000d0804", &(0x7f0000000840)="5f5742c4b09e7150564c136c902719f65c41079f3039bdefd416f98784a68df4505b53d4bdc4094082c0e91430c14cdae1b776e5e33ec1e6ffa995445a7e9c3663f78d76164de190a39076c4311078b73a28e139b6d0cf9a96b00a2f1bb3cddce0f37e654976c32256f9377ec2b4122a5b41728fe31e62e33de332e148028d884d01251f2fa38172d1899fdba6e64a10e00280eb81fc3f2e7ab31f694ff0769686ed588a561b5ad0be6c230820df92f7df33e389773dd9caa9b0c79ea7cc60fc74346cca12cc43e3e9a7e8b3b63d1fdb1e36c103b4f4cae7b0c349f14f2e4f7adf3c50", &(0x7f0000000940)="98375ea339b317234017713a37d55bddb05e7a1ac21ea517a60dc3d95638838a4a018938d9f96b797355599d24b626e53b8ce0290f37388cd5c4fade3c531da82dc5f5a3a99f7bafc0e3851823c328281e6306a09cefebb98e096dc56718a5a5c7b85c2a07673a8c9f9e59800d589f15b7758547ba15a321e30406963e64fc7a1af9f78a3f7334de4c318cf6524c8d16323f", &(0x7f0000000480)="691e690e1d483b1378bc23b3d1037b66c361c719a2ca44bf96e7d292eee7d5b89aecb9680bd40c2fca373fd99da4287f78e6d9ef48def3cca8e9cdf7659d3300", &(0x7f0000000a00)="6b3ec3bf82ca5b9641948803a6b95cbd2e61e2b0af758d74631829e07a3370de0952a6f152549b4f9f61f05b0f1a4fe5ea8d887865551a0d7cd0b6ffde46a3c0d29835c333814693b373e519f341338692350c9c719ed52c6bb2de102ed7248fb0eaf905f35c5f5e30b80e6b53b752dafdf46f8c3ad6e12c39e4c299e1cc90872fcd2a16edf5a40201275bd6cfaf2d90e3fe6fca88e5838e65ebb96a320bd9bf70fff69b45bef710660ec298b44a3cbc1840460d356e9eba69ef0ff112c41ac1"]}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000280)=0x911, &(0x7f00000004c0)=0x4) syz_genetlink_get_family_id$nbd(0x0) mount$bpf(0x20000000, &(0x7f0000000200)='./file0/file0/file0\x00', 0x0, 0x5890, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000600)) socketpair(0x33, 0x80805, 0x7fff, &(0x7f0000000340)={0x0, 0x0}) pivot_root(&(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000540)='./file0/file0/file0\x00') sendto$x25(r2, &(0x7f0000000400), 0x0, 0x40, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x3) keyctl$session_to_parent(0x12) 00:32:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1c, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BLKROGET(r3, 0x125e, &(0x7f00000001c0)) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x3, 0xfb) ioctl$TUNSETCARRIER(r3, 0x400454e2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'bond0\x00', 0x800000000008a03}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0xf8, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xe) 00:32:28 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b630100"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) write$P9_RSTATu(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="6d0000007d010000004d000104000000800003000000070000000000000000002040080000000600000000f8ffffff00000000001200656d315c73656c696e757824adaeeaa5649c99766d6e657431030075736572040047504c000b00776c616e", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r7], 0x6d) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x5, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) 00:32:28 executing program 1: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x3, 0x1, 0xfffb, 0x40, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000240)=0x202, 0x4000000000dc) r2 = dup2(r0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000003800)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000037c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800a9f6c7197b083edc580000982d0313", @ANYBLOB="96275a7ec6ea2d84c2e0c7f2cb8104db8aa8ec49d569ffdf47e82f9fdfd4bd1565657dd464c857e45b1929c31f205d3f97dde39773f1188bbf25602799d3b8b6ba", @ANYBLOB="08202bbd7000fedbf033f6141295b7bed58c3993a230c7d94f3fb624d7250400d00b082c6fd00d6c460b43ab660000140002e8756972745f77ff666930"], 0x3}, 0x1, 0x0, 0x0, 0x801}, 0x4004800) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="e42f01000000f2f457990000006a816da5ff010000", @ANYRES16, @ANYBLOB="20002dbd7000fddbdf2504000000140002007465616d5f736c6176655f300000000014000200776730000000000000000000000000000900010073797a300000000005000400010000001400020073797a6b616c6c657230000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x24000804}, 0x2000c015) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022cbd7000fedbdf25040000000900010073797a32000000000900030073797a30000000000900010073797a32000000000900010073797a3200000000"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40090) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0), 0x0, 0x20c49a, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xc0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40c180, 0x0) [ 254.653125] overlayfs: missing 'lowerdir' [ 254.747394] binder_alloc: 11090: binder_alloc_buf, no vma 00:32:28 executing program 2: ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000100)={0x6, 'veth0_vlan\x00', {0x2}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x4031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000000)={0x0, 0x10}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000280)={0x0, &(0x7f0000000200)=""/75}) fcntl$setstatus(r1, 0x4, 0x400) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x3, 0x8, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) clock_gettime(0x0, &(0x7f0000000180)) sendto$l2tp(0xffffffffffffffff, &(0x7f00000002c0)="5b92ad6de113b3b45895608dd9654e3ea17de48ab81e0b650264a73ddc51ca22a5e020ea9806d758d434ed4cb7dbc663390749ffe494e8d644ccbc8e2d8c4878f50e6f49bf63015a3c043342db41e8400ab8869832879aeba6398024a9e2532197944c8a689babb7fd9bcede6721d5a12039c2a4ad0a28f661a2edf5a4d990351c2cb36c70aedd8e9cc5c49388141a56cffcb9306c493807fba7c32aa9d30e684f603ad16f7701cdfe557426f05ee0e5908dfbd6c8f12de4d6a7d0fab6", 0xbd, 0xc4, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, 0x10) [ 254.792236] 8021q: adding VLAN 0 to HW filter on device bond0 00:32:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x24a4e000) 00:32:28 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, [0x0, 0x3, 0xb939, 0x8, 0x80000000, 0x8, 0x7fff, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x8, 0x0, 0xfff]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x800, 0x367, 0x8007, 0x10000, 0x2, 0x8, 0x400, 0x20000}, 0x20) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) sendto(r3, &(0x7f0000000180)="000ef1e10eccc1bcaf5710616a2891a5884e3f7944b8985717c96539a1e72242f4512eb65cfda12a919d46dffad9b936565e54f778747fc499823f8db5926f845799ac498d0311cb9d6d3f2f6c287f67d57fbc6592eecaebb878", 0x5a, 0x40041, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) [ 254.879602] binder_alloc: 11046: binder_alloc_buf, no vma [ 254.919424] overlayfs: missing 'lowerdir' 00:32:28 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', '\\.\"vboxnet1]+vboxnet0%\x00'}, 0x0, 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000001c0)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x2) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x48, 0x1406, 0x4, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x40) 00:32:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c8]}) setresuid(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0561ff01"], 0x0, 0x0, 0x0}) write$fb(0xffffffffffffffff, &(0x7f00000001c0)="3dceb8927069506d5108007b6999effe5e01ff371d3bf18304a18b792570d6d4d99cb3de2ed98dbfae61378b2b26aed4390a9f165af808e3e463acf8f01ea9f02ab0e47fd5213617fa200046a0423584580b2735764b040f137e563f04598170a6299ff7af2353788fd7", 0x6a) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESOCT, @ANYBLOB, @ANYRES32=0x0], 0x44, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) pipe(&(0x7f00000000c0)) 00:32:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) chdir(&(0x7f0000000300)='./file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='ln/erdyr=.:file0']) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 255.076645] binder_alloc: 11113: binder_alloc_buf, no vma [ 255.134330] binder_alloc: 11117: binder_alloc_buf, no vma 00:32:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}], 0x3}}], 0x1, 0x20, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x515300, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = socket$inet(0x2, 0x1, 0x5) setsockopt$inet_tcp_int(r5, 0x6, 0x0, &(0x7f00000000c0)=0x2000000000000074, 0x25d) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x200, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 00:32:29 executing program 0: ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x74, 0x8c1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) fcntl$getflags(0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:32:29 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r3, 0x0, 0xc478, 0x101) write$P9_RCREATE(r3, &(0x7f0000000080)={0x18}, 0x18) fallocate(r3, 0x0, 0x0, 0x4005ef3) fallocate(r3, 0x3, 0x0, 0x110800a) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$VIDIOC_LOG_STATUS(r6, 0x5646, 0x0) write$P9_RCREATE(r2, &(0x7f0000000080)={0x18}, 0x18) fallocate(r2, 0x0, 0x0, 0x4005ef3) 00:32:29 executing program 0: syz_mount_image$nfs(&(0x7f0000000240)='nfs\x00', &(0x7f0000000280)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x0, &(0x7f0000001900)='udp\x00') 00:32:29 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b630100"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) write$P9_RSTATu(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="6d0000007d010000004d000104000000800003000000070000000000000000002040080000000600000000f8ffffff00000000001200656d315c73656c696e757824adaeeaa5649c99766d6e657431030075736572040047504c000b00776c616e", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r7], 0x6d) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x5, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) 00:32:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x80000, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000140)) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x900, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000300)={0x5, 0x0, [{0x2, 0x6, 0x6, 0x3f, 0x9, 0x2, 0xd85d}, {0x0, 0x8, 0x4, 0x4, 0x1, 0x6, 0x7}, {0x0, 0x80000000, 0x5, 0x3710, 0x1000, 0x8000, 0x80000001}, {0x0, 0x8, 0x2, 0x2, 0x5, 0x3f, 0xdb4e}, {0xd, 0x6, 0x5, 0x6, 0x3, 0x9, 0x1}]}) pipe(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f) 00:32:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0xa, 0x44080) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xd490010}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"/531, @ANYRESOCT=r2, @ANYRESHEX=r3], 0x3}, 0x1, 0x0, 0x0, 0x4c051}, 0x1) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x44, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000200", @ANYRES16=r2, @ANYBLOB="10002bbd7000fcdbdf2504d8e9862af94814001c0003"], 0x1c}, 0x1, 0x0, 0x0, 0x20049045}, 0x8000) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000427bd7006fedbdf2504000000080004000500000008000500020000001400038008000500ffffffff05000800000000000800060009000000080004007b070000"], 0x48}, 0x1, 0x0, 0x0, 0x200408c0}, 0x80) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000425bd7000fedbdf250700000008000500020000002c000180080005000100000008000b00736970000c00070002000000240000000a0006006c626c6372000000c6066c33efca618d8314c0c25bc81839c1d7a7e0a2983af2033e682062f0e1abde9b585e66ffbac1ac34cfbcd3d04771d711ad82f87bfe87f862da6e68322bcb525cbf71f4b1b3a4d61542044aa98e758701c71dbaefb95405791ba425f8985fdbdd073e01f69808"], 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x1) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)={0xec, r2, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd104}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x8}}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7fff}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840), 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd4, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4004005}, 0x44890) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000001800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000000280)={0x1508, 0x1, 0x5, 0x101, 0x0, 0x0, {0xd}, [{{0x254, 0x1, {{0x3, 0x6}, 0xf9, 0x8, 0x8, 0x188, 0x7, 'syz1\x00', "a1537a00d46009809597ccd9b0c6674960feb5f389a9b9e4bda20255dea14a28", "dda688b53295828f352c41a275776dae2b3f5d1ec2094712c654c339e364177e", [{0xfffb, 0x3f, {0x3, 0x6}}, {0x7, 0x3, {0x2, 0x8001}}, {0x100, 0x9fe, {0x3, 0x48}}, {0x6, 0x800, {0x1, 0xfffffffd}}, {0x2, 0x6, {0x1, 0x71}}, {0x0, 0xffff, {0x2, 0x1}}, {0x922f, 0x7f, {0x2, 0x1}}, {0x6, 0x1, {0x0, 0xfff}}, {0x0, 0x3, {0x3, 0x76}}, {0x4, 0x9, {0x2, 0x5}}, {0x9, 0x80, {0xef63dd69ac24290, 0x1ff}}, {0x2, 0x2, {0x1, 0x1}}, {0x0, 0x4, {0x0, 0xffffff13}}, {0x4, 0x8, {0x1, 0x9}}, {0x6, 0x7, {0x0, 0x8}}, {0x2da, 0x958, {0x1, 0x20}}, {0x20, 0x81, {0x3, 0x100}}, {0x6, 0x400, {0x3, 0x7}}, {0x3f, 0x2, {0x2, 0x6}}, {0x8e32, 0x7, {0x1, 0x4}}, {0x1ff, 0x9, {0x1, 0x8}}, {0x1, 0x48d, {0x2, 0xffffffff}}, {0x6, 0x4, {0x1, 0x7}}, {0x7, 0x80, {0x2, 0x7}}, {0x80, 0x1, {0x2, 0x101}}, {0x1, 0x1, {0x3, 0xd}}, {0x9, 0x7f, {0x0, 0x7}}, {0x0, 0x99de, {0x3, 0x970}}, {0x9ff, 0x2, {0x0, 0x6}}, {0x8, 0x1, {0x3, 0x9}}, {0xfff7, 0x8, {0x0, 0x10001}}, {0x8, 0x2, {0x3, 0x4}}, {0xb7, 0x7, {0x2, 0x101}}, {0x4, 0x81, {0x1, 0x2}}, {0xffc0, 0x4, {0x3, 0x6c8649c0}}, {0x8001, 0x3, {0x1, 0x36}}, {0x1000, 0x1}, {0x1f, 0xff, {0x1, 0x6}}, {0x3, 0x7, {0x1}}, {0x8, 0x1, {0x3, 0xb7ef}}]}}}, {{0x254, 0x1, {{0x3, 0x4}, 0x9, 0x3, 0x4, 0x17e, 0x12, 'syz1\x00', "184f140d4ef4f4d241945b8d4db01bf47fe4e2010434974d482d4044984d0445", "e189fc6aab9ca455f7025d6479d03c5085bcd1697221061991aee09efa06bfcf", [{0x7, 0x82, {0x0, 0xffffffff}}, {0x4b5d, 0x200, {0x2, 0x4}}, {0x2, 0x5, {0x3, 0xff}}, {0x6, 0x1, {0x1, 0x284a4688}}, {0x2, 0x5, {0x0, 0x10000}}, {0x4ed, 0x3, {0x1, 0x80000000}}, {0x1, 0x40, {0x0, 0x8}}, {0x4, 0x20, {0x0, 0xfffffff7}}, {0xe26, 0xb9, {0x0, 0x3f}}, {0x8000, 0x9, {0x3, 0x8}}, {0x3, 0x1, {0x0, 0x1b36}}, {0xfff8, 0x9, {0x0, 0x4}}, {0x20, 0xfe01, {0x1, 0x100}}, {0x26, 0x7f, {0x2, 0x2}}, {0x4, 0x3, {0x3, 0x9}}, {0x4, 0x0, {0x3, 0x4}}, {0x1, 0x1, {0x2, 0x100}}, {0x3d, 0xea8, {0x0, 0x8}}, {0x2, 0x5, {0x0, 0x80000001}}, {0x81, 0x1, {0x3, 0x10001}}, {0x4, 0x0, {0x1, 0x6}}, {0x101, 0x7, {0x3, 0x20}}, {0xd9, 0x9, {0x0, 0x794}}, {0x1000, 0x0, {0x3, 0x1}}, {0x0, 0x5b, {0x0, 0x1}}, {0xffe0, 0xfeff, {0x1, 0xffffff89}}, {0x1, 0x1f, {0x0, 0x3da}}, {0x7, 0x45c, {0x3}}, {0x0, 0x1f, {0x3, 0x4}}, {0x2e, 0x0, {0x2, 0x6a6}}, {0xf4a6, 0x0, {0x1, 0x293cf41e}}, {0x2, 0x7ff, {0x0, 0x2}}, {0x8, 0x401, {0x2, 0x34}}, {0x200, 0x3, {0x0, 0x4}}, {0x80, 0x3ff, {0x0, 0x1f6}}, {0x8, 0x6, {0x1, 0x5}}, {0x8, 0xba0f, {0x1}}, {0x401, 0xd7, {0x0, 0x3ff}}, {0x6f79, 0xbb, {0x0, 0x8}}, {0x3, 0x3, {0x1, 0x1ff}}]}}}, {{0x254, 0x1, {{0x3, 0xffff}, 0x1, 0x3, 0x100, 0xfffd, 0x1c, 'syz0\x00', "b12db798440ef45ececd713e13c83d9f40c4440da7aab829170c0386b134182c", "9b359deb514f63c9fd0a10565c617d980cd6194abf51bd4926a70d84ed170006", [{0xfffb, 0x3, {0x0, 0xffffff22}}, {0x615, 0x800, {0x2, 0x7}}, {0x6, 0x1, {0x1, 0x241}}, {0xacc8, 0x0, {0x0, 0x4}}, {0x7ff, 0x7fff, {0x1, 0xfff}}, {0x1, 0x0, {0x1, 0xfffffffd}}, {0x7, 0x4, {0x3, 0x8}}, {0x4, 0x7fff, {0x0, 0x2}}, {0x800, 0x800, {0x1}}, {0x1, 0xd91a, {0x1, 0x347}}, {0xce, 0x80, {0x6, 0x401}}, {0x71, 0x6, {0x2, 0xca6}}, {0x0, 0x0, {0x3, 0xdbcce0c}}, {0x8, 0xd0, {0x3, 0x8000}}, {0x7431, 0x7, {0x3, 0x3f}}, {0x1, 0x3, {0x0, 0x4}}, {0x2, 0x9, {0x1, 0x8001}}, {0x8000, 0x4, {0x1, 0x4fb9debc}}, {0x0, 0x8, {0x1, 0x1000}}, {0x0, 0x100, {0x1, 0x200}}, {0x5, 0x0, {0x2, 0x1000}}, {0x9, 0x1000, {0x2, 0x7}}, {0x5, 0x2, {0xf2e95ebd5e93b4d9, 0xff}}, {0x3, 0x8001, {0x2, 0xa54}}, {0x4, 0xda5d, {0x1, 0x3ff}}, {0x5, 0x2b, {0x1, 0x6}}, {0x3, 0x4, {0x0, 0x5}}, {0x8, 0x200, {0x2, 0x4}}, {0x2, 0x6, {0x1}}, {0x400, 0x4, {0x3}}, {0x1, 0x4, {0x0, 0x101}}, {0xfff, 0x1, {0x0, 0x1}}, {0x6, 0x40, {0x2, 0x8}}, {0x3, 0x2, {0x2, 0x9}}, {0x2, 0x9, {0x0, 0x1}}, {0x9, 0x4af, {0x0, 0x35be}}, {0x46, 0x43c, {0x1, 0x7}}, {0x7ff, 0x4, {0x3, 0xcf}}, {0x2, 0x1, {0x0, 0x3ff}}, {0x4, 0xfffc, {0x1, 0x4}}]}}}, {{0x254, 0x1, {{0x1, 0x7fffffff}, 0x0, 0x2, 0x54, 0x2, 0x1f, 'syz0\x00', "e29b19dc0ea6190b1534cdc1b91440f9777b99fb431f2159d252de4e07322e03", "028f4cb47756e8244a086228d7c861ce033e314389827b8d26bbf00fdeec7e1d", [{0x3ff, 0x3, {0x2, 0xd6be}}, {0xff, 0x7fff, {0x3, 0x7fff}}, {0x800, 0x7, {0x2, 0xffffff93}}, {0x3, 0x5, {0x1, 0x7}}, {0x7ff, 0x1, {0x3, 0xf47}}, {0x40, 0x1, {0x3, 0x3}}, {0x800, 0x3, {0x0, 0x9}}, {0x100, 0x4, {0x3, 0x3ff}}, {0x8001, 0x357, {0x0, 0x6}}, {0x0, 0x2, {0x2, 0x3ff}}, {0x8000, 0xf9, {0x3, 0x4}}, {0x4, 0x0, {0x0, 0x5}}, {0xff, 0x3c24, {0x2, 0x6138b6b}}, {0x4d, 0x4, {0x2, 0x1}}, {0x2, 0x9, {0x1, 0x200}}, {0x5, 0x9, {0x3, 0x7}}, {0x2, 0x479d, {0x3, 0x401}}, {0x2, 0x7, {0x0, 0x4}}, {0x3ff, 0xb3b, {0x0, 0x2}}, {0x0, 0x5d, {0x0, 0x3}}, {0x4, 0x7, {0x3, 0x1}}, {0x40, 0x0, {0x0, 0x5}}, {0x20, 0x1, {0x1, 0x1}}, {0x5, 0x1f, {0x2, 0xe1e}}, {0x1000, 0x8, {0x2, 0x401}}, {0x5, 0xa55, {0x3, 0xfae}}, {0x7380, 0x6, {0x0, 0x3}}, {0x8000, 0x6, {0x3, 0x6}}, {0xb72c, 0x800, {0x3, 0x914}}, {0x9, 0x2, {0x0, 0x1}}, {0x8, 0x88, {0x1, 0xc8d}}, {0x1, 0x200, {0x0, 0x9}}, {0x6, 0x7fff, {0x1, 0x7}}, {0xb6, 0x4, {0x2, 0x1f}}, {0x6, 0x4, {0x1, 0x8}}, {0x74c, 0x7f, {0x2, 0x1f}}, {0x1, 0x7f47, {0x1, 0x10000}}, {0x7, 0x3, {0x3, 0xe4e}}, {0x7, 0x8, {0x1, 0x9}}, {0x1, 0x7f, {0x0, 0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x1f}, 0x7f, 0x4c, 0xe000, 0x6, 0x19, 'syz1\x00', "dcacc3a6d982ac2a53a532a57e35b0051352ce37d45ea4f292a1fc5f4686ae26", "491fdc0d81baf0789cb3d34c127fd644b9f9b3e61238bbf78dbc18a3067e457a", [{0x200, 0x2959, {0x2, 0x2}}, {0xffff, 0x7, {0x2, 0x2}}, {0x3ff, 0x95, {0x3, 0x6}}, {0x7c8a, 0x1, {0x1, 0xffffffff}}, {0x1ff, 0x3, {0x1, 0x3}}, {0x1f, 0x2, {0x1, 0x78a6}}, {0x9, 0xfff, {0x1, 0x7007800}}, {0x2, 0x9e, {0x2, 0x1}}, {0x7, 0x7, {0x1, 0x8001}}, {0x0, 0x20, {0x1, 0x100}}, {0x9, 0x3, {0x1, 0x70000000}}, {0x4, 0x8, {0x2, 0xfff}}, {0x8001, 0x1, {0x0, 0x7f}}, {0x4, 0xc4, {0x3, 0x1000}}, {0x8, 0x0, {0x3, 0x9}}, {0xff, 0x3ff, {0x0, 0x3ff}}, {0x9, 0x1f, {0x1, 0x2}}, {0x100, 0x0, {0x0, 0xdf15}}, {0x0, 0x8, {0x1, 0xffff}}, {0x8, 0x0, {0x2, 0x8}}, {0x3, 0x8000, {0x2, 0x7fff}}, {0x6, 0x0, {0x1}}, {0x0, 0x9, {0x2, 0x8}}, {0x7, 0x2, {0x0, 0xffffffff}}, {0x9, 0x1, {0x1, 0x10001}}, {0xef7, 0x1, {0x0, 0xcf0d}}, {0xf0e1, 0x1, {0x0, 0x5}}, {0x1, 0xf5d0, {0x2, 0x5}}, {0xde, 0xfff, {0x0, 0x2}}, {0x40, 0x2, {0x3, 0x400}}, {0x5, 0x5, {0x1, 0x5}}, {0x7, 0x7, {0x0, 0x4}}, {0x1, 0x24d4, {0x1, 0x7f}}, {0x7, 0x87, {0x1, 0x8}}, {0xff, 0x6d31, {0x2, 0x5}}, {0x8, 0xb22, {0x2, 0x3}}, {0x1, 0x7, {0x0, 0xfff}}, {0x3f, 0x1, {0x2}}, {0x400, 0xd0cd, {0x3, 0x9}}, {0x9, 0x4, {0x3, 0x5}}]}}}, {{0x254, 0x1, {{0x1, 0x1}, 0x8, 0x4, 0x6, 0x880, 0x18, 'syz0\x00', "c46e24d38cbc9402a8941b3ef61ffa26f558b311b35290fe5119794fcd8bb015", "ed4fed9e8a6b2d512b460b03badd78004aeba1ee5090f09363e7f9a781005499", [{0x100, 0x6, {0x0, 0x99}}, {0x0, 0x4, {0x3}}, {0x1000, 0x0, {0x1, 0x800}}, {0x3, 0x9, {0x0, 0x3efe}}, {0x8, 0xd2, {0x1, 0x2}}, {0x702, 0x200, {0x2, 0xb0}}, {0x4, 0x1000, {0x3, 0x3}}, {0xea1c, 0x0, {0x2, 0x9}}, {0xf20, 0x22, {0x1, 0x7}}, {0x8, 0x3, {0x1, 0x8}}, {0x4, 0xde5, {0x1, 0x7}}, {0x6, 0xfff, {0x0, 0x6e}}, {0x0, 0x53, {0x0, 0x1}}, {0x6, 0x0, {0x3, 0x800}}, {0x4, 0x3, {0x3, 0x100}}, {0x5, 0x8, {0x2, 0x80000000}}, {0x0, 0x7fff, {0x3, 0x1ff}}, {0x0, 0xf156, {0x2, 0x1}}, {0x2, 0x8b, {0x1, 0x60ba}}, {0x0, 0x4, {0x0, 0x7fffffff}}, {0x1000, 0x9, {0x1, 0x7}}, {0xda9, 0x5, {0x0, 0x6}}, {0x3ff, 0x8000, {0x3, 0x2}}, {0x3, 0x7ff, {0x0, 0x9}}, {0x1800, 0xfe01, {0x3, 0x7}}, {0x2f, 0x101, {0x0, 0x8001}}, {0x8, 0x5, {0x1, 0x8}}, {0x6, 0x0, {0x0, 0x80000001}}, {0x0, 0x2, {0x1, 0x80000001}}, {0x0, 0x9, {0x3, 0x3}}, {0x4, 0x400, {0x0, 0x1}}, {0x0, 0x8000, {0x2, 0x6}}, {0x5, 0x7, {0x0, 0x5}}, {0x2, 0xff, {0x2, 0x2}}, {0x4, 0x97bd, {0x3, 0x3}}, {0xfff9, 0x1131, {0x3}}, {0x3ff, 0xff6e, {0x1, 0x7}}, {0x5a, 0x9, {0x2, 0x5676e6f9}}, {0x4, 0x4, {0x2, 0x80}}, {0x3, 0x2, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0x20, 0x80, 0x3, 0x0, 0x10, 'syz1\x00', "877faa0391c8fecd3111a7ece919b06fffe2523b916054839b637682cfbdb4ea", "ca8161636baea2277ed732248e63436e0cee02b4668c00327504be0401d22b52", [{0x3ff, 0x3ff, {0x0, 0x5}}, {0x2, 0x19, {0x2, 0x5}}, {0x8001, 0x2, {0x3, 0x1}}, {0x3, 0x8001, {0x0, 0xffff}}, {0x9, 0x100}, {0xab70, 0x7fff, {0x3, 0xffff}}, {0x1000, 0xff, {0x0, 0x4}}, {0x5, 0x3, {0x1, 0x3f}}, {0x3ff, 0x6e2, {0x0, 0x8}}, {0x8000, 0x1, {0x2, 0x10001}}, {0x5, 0x5, {0x1, 0x8}}, {0x6, 0xf3d1, {0x2, 0x1}}, {0x9, 0xffff, {0x0, 0x7e3}}, {0xffff, 0x3, {0x3, 0x7}}, {0x100, 0x7fff, {0x2, 0xffff7fff}}, {0x0, 0x8, {0x3, 0xffff913b}}, {0x81, 0x1}, {0x6, 0xd793, {0x1, 0x4}}, {0x1, 0x9, {0xb64383ab60bac805, 0x400}}, {0x59, 0x7, {0x1, 0x1}}, {0x101, 0x0, {0x2, 0x2}}, {0x101, 0x2, {0x1, 0x3}}, {0x7ff, 0x5f6, {0x3, 0x1}}, {0x4, 0x401, {0x2, 0x1}}, {0x7, 0x2, {0x2, 0x3a}}, {0x3, 0x1, {0x0, 0x2}}, {0x4, 0x7fff, {0x3, 0x9}}, {0x4, 0xfffc, {0x2, 0x10001}}, {0x1, 0x6, {0x0, 0x800}}, {0x0, 0x6, {0x0, 0x6}}, {0x1, 0x20, {0x3, 0x96d}}, {0x100, 0x5, {0x1, 0x93d}}, {0x503d, 0x7, {0x1, 0xfffffffe}}, {0x9, 0x81, {0x1, 0x4}}, {0x8, 0x100, {0x1, 0x10001}}, {0x0, 0x8, {0x2, 0x4}}, {0xffff, 0x2, {0x0, 0x9}}, {0x1, 0x2, {0x3, 0xfffff800}}, {0x1ff, 0x6, {0x2, 0x7f}}, {0x5, 0x80, {0x1, 0x14}}]}}}, {{0x254, 0x1, {{0x1, 0x6aa0}, 0x2, 0x3f, 0x1f, 0x7, 0xa, 'syz1\x00', "e73f9c7e14c8c6a735841a14c32ba3b7f552666b6da887dff9f224539b5b45f2", "21d67287968b064014bd94015a2fce5fe0244d47badabdeb028896552f9007e3", [{0x400, 0x6, {0x3, 0x6}}, {0xfff9, 0x7, {0x0, 0xffffffff}}, {0x3ff, 0x101, {0x1, 0x3}}, {0xdd7, 0x6, {0x0, 0x100}}, {0xff, 0x3ff, {0x2, 0x80000000}}, {0x8, 0xf0, {0x2, 0x2}}, {0x7f, 0x6, {0x3, 0x8}}, {0x8, 0x1d, {0x2, 0x6}}, {0x100, 0x3ff, {0x2, 0x7}}, {0x100, 0x80ff, {0x0, 0x2}}, {0x7ea1, 0x200, {0x2, 0x20}}, {0x81, 0x9, {0x1, 0x28}}, {0x6, 0xffff, {0x0, 0x3fa}}, {0x5, 0x2, {0x1, 0x9}}, {0x0, 0x9a16, {0x3, 0x20}}, {0x7ff, 0x8, {0x1, 0x2}}, {0x7, 0x5ab, {0x1, 0x8}}, {0x2, 0xc1, {0x2, 0x80000000}}, {0x2, 0x40, {0x1, 0x5}}, {0x80, 0x6, {0x0, 0xffffffff}}, {0x4, 0x100, {0x0, 0x4}}, {0x0, 0x8, {0x3, 0xf8}}, {0x20, 0x6d8, {0x0, 0xfffffc01}}, {0x5, 0x1, {0x3, 0x1ff}}, {0x6, 0xb7e, {0x0, 0x80000001}}, {0x1, 0x400, {0x1, 0x9}}, {0x0, 0x9, {0x3, 0x7fffffff}}, {0xe, 0x80, {0x3, 0xfffffff9}}, {0x9, 0x401, {0x2, 0x6}}, {0x3, 0x7, {0x1, 0x8}}, {0x7, 0x7, {0x3, 0x2}}, {0x1, 0x6, {0x1, 0x7}}, {0x7ff, 0xaaff, {0x1, 0x1}}, {0x2, 0x2, {0x2, 0x1}}, {0x101, 0x6, {0x0, 0x5}}, {0x6a, 0xd0, {0x0, 0x7fff}}, {0x7fff, 0x100, {0x2, 0x10000}}, {0x200, 0x5, {0x3, 0x30000000}}, {0x1a5b, 0x7, {0x1, 0x1ff}}, {0x8, 0x4, {0x3, 0x2}}]}}}, {{0x254, 0x1, {{0x3, 0x1000}, 0x7f, 0x1, 0x1, 0x86a, 0x22, 'syz0\x00', "3b03f2bf59b7d363328e6383036d41538e5cb5cb827ab905807b073240067c7e", "9ffa617d9eefd429205c3b93edfc740a88c79057da0d0b0453b997ae5a6df7c5", [{0x6, 0x9a12, {0x1, 0x3a39f6f7}}, {0x6, 0x100, {0x3, 0xfffffe01}}, {0x81, 0x1, {0x3, 0x48}}, {0x0, 0x8, {0x0, 0x7}}, {0x8788, 0x3ff, {0x1, 0x73}}, {0xcd, 0x40, {0x2, 0x6}}, {0x1cc9, 0x7, {0x0, 0x7fff}}, {0x2e0, 0x6, {0x1, 0x6f4}}, {0x2, 0x1, {0x3, 0x2}}, {0x6, 0x9, {0x0, 0xe0000000}}, {0x7ff, 0x2, {0x3, 0x4}}, {0x7ff, 0x7fff, {0x3, 0xb5}}, {0x490, 0x7, {0x1, 0x15b}}, {0x6, 0x7, {0x1, 0x3}}, {0x9, 0x0, {0x1, 0x101}}, {0x9, 0x201, {0x1, 0x23e6}}, {0x1, 0x3ff, {0x3, 0x2}}, {0x9, 0x1, {0x0, 0x25e}}, {0x40, 0x3, {0x1, 0x9}}, {0x1, 0x200, {0x3, 0x80000000}}, {0x6, 0x1a5f, {0x1, 0x80000000}}, {0x4, 0x49, {0x3, 0x6}}, {0x8, 0x338a, {0x2, 0xddcf}}, {0x1, 0xfffa, {0x0, 0x4370}}, {0x0, 0x8, {0x1, 0xc54}}, {0x9, 0x7fff, {0x0, 0x9fa}}, {0x2, 0x6, {0x3, 0x9}}, {0x1, 0x3, {0x2, 0xff}}, {0xde4a, 0x4, {0x2, 0xffffff10}}, {0x5, 0x4c, {0x3, 0xfffffffd}}, {0x0, 0x3ff, {0x3, 0x4}}, {0x7, 0x9, {0x1, 0x29}}, {0x9, 0x5, {0x3, 0x8}}, {0x401, 0x0, {0x2, 0x81}}, {0xae0d, 0xfff8, {0x0, 0x7fff}}, {0x40, 0x9, {0x0, 0x40000000}}, {0x5, 0x7, {0x1, 0xbd4}}, {0x436f, 0x7, {0x2, 0x80000000}}, {0xffc0, 0x80, {0x0, 0x7}}, {0x4dbc, 0x60, {0x3, 0x9}}]}}}]}, 0x1508}, 0x1, 0x0, 0x0, 0x8c}, 0x10004090) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r4, 0x0, 0x800000080004103) getsockopt$inet6_tcp_int(r4, 0x6, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) mount(0x0, 0x0, &(0x7f00005f7ffa)='hfs\x00', 0x0, 0x0) mremap(&(0x7f0000331000/0x3000)=nil, 0x4cb000, 0x600000, 0x3, &(0x7f00007fc000/0x600000)=nil) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1412, 0x800, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24044094}, 0x20004850) [ 255.716810] binder_alloc: 11166: binder_alloc_buf, no vma 00:32:29 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) ptrace$peeksig(0x4209, r0, &(0x7f00000001c0)={0x3f, 0x0, 0x3}, &(0x7f0000000200)=[{}, {}, {}]) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$UHID_DESTROY(r4, &(0x7f0000000040), 0x4) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000140), 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f00000003c0)={'dummy0\x00', {0x2, 0x4e23, @rand_addr=0x64010101}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_getsetattr(r4, &(0x7f00000000c0)={0x2, 0x9, 0xfffffffffffffc00, 0x80}, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000080)=ANY=[@ANYBLOB="5daa59"], 0x1}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 255.855803] binder: BINDER_SET_CONTEXT_MGR already set 00:32:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f000000c0c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000780)=""/4096, 0x1000}, {0x0}, {&(0x7f00000003c0)=""/166, 0xa6}], 0x4}, 0x400}, {{&(0x7f0000000580)=@nl, 0x80, 0x0, 0x0, &(0x7f00000019c0)=""/174, 0xae}, 0x2}, {{&(0x7f0000008180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x80, 0x0}}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000003c0)) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f00000000c0)=0x4) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) fcntl$setpipe(r4, 0x407, 0x9) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042dd2695e5616c396030800000006001d00070000000000000010000000000000000000002197f80156c7e8f58e83a3516ef3075a69a32b89a13806162ed1aa987edec59497581ee9c0ff14133ea21857985dbaf9dd5fc72cbd37cb9b78b591ec43d06246269cf444ce5cf0ee9f00"/121], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4001) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) geteuid() r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 00:32:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendmsg$sock(r0, &(0x7f0000000480)={&(0x7f0000000140)=@rc={0x1f, @fixed={[], 0x11}, 0x3}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000340)="28fc5809ab424864d837db816eff526a882d35370dce9077b2c9d4ecabb18b8922c7d406f19f5858438051af41f974862115a3a8cf70a2a647f63a575634254c8def0db8e47b3d225b550169f0d10f8ddab9bde193f24265a86a51aa018131", 0x5f}], 0x1, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x7f}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffe00}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0xf0bf}}], 0xa8}, 0x2000889c) sendto$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0xff02) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000100000000"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f00000005c0)=0x5399) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000000c0)="0204", 0x2) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000020}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000000606050000000000df0000000a000000050001000700000005000100070000000900030073797a30000000007e45b5d48c10c008000000000000005a64a7da83c6c3f684f013142a7822439488ab38fa0f5a644789ec8968da7a6d3d5d98bf91747b714ee3a84200b4e660c96514583cf565b71aeff3f7ce313a35d4fb33c31e9711bf73"], 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x4081) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000180)={&(0x7f0000000000)={0x28, r3, 0x23f, 0x0, 0x0, {{}, {0x0, 0x410c}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000020}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="65001ead000000020011", @ANYRES16=r3, @ANYBLOB="000327bd7000fedbdf250100000000000000014100000020001700000005000000006574683a76657468305f766972745f7769666900"], 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffccf, 0x1f4, 0x0, 0xffffffffffffff37) [ 255.855815] binder: 11117:11125 ioctl 40046207 0 returned -16 [ 255.913750] binder: 11117:11183 unknown command 536871168 [ 255.914135] binder: 11117:11183 ioctl c0306201 20000280 returned -22 00:32:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000004580)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0cfdff", 0x14, 0x6, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2]}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400002, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x11) 00:32:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0xa, 0x44080) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xd490010}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"/531, @ANYRESOCT=r2, @ANYRESHEX=r3], 0x3}, 0x1, 0x0, 0x0, 0x4c051}, 0x1) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x44, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000200", @ANYRES16=r2, @ANYBLOB="10002bbd7000fcdbdf2504d8e9862af94814001c0003"], 0x1c}, 0x1, 0x0, 0x0, 0x20049045}, 0x8000) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000427bd7006fedbdf2504000000080004000500000008000500020000001400038008000500ffffffff05000800000000000800060009000000080004007b070000"], 0x48}, 0x1, 0x0, 0x0, 0x200408c0}, 0x80) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000425bd7000fedbdf250700000008000500020000002c000180080005000100000008000b00736970000c00070002000000240000000a0006006c626c6372000000c6066c33efca618d8314c0c25bc81839c1d7a7e0a2983af2033e682062f0e1abde9b585e66ffbac1ac34cfbcd3d04771d711ad82f87bfe87f862da6e68322bcb525cbf71f4b1b3a4d61542044aa98e758701c71dbaefb95405791ba425f8985fdbdd073e01f69808"], 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x1) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)={0xec, r2, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd104}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x8}}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7fff}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840), 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd4, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @private=0xa010100}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4004005}, 0x44890) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000001800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000000280)={0x1508, 0x1, 0x5, 0x101, 0x0, 0x0, {0xd}, [{{0x254, 0x1, {{0x3, 0x6}, 0xf9, 0x8, 0x8, 0x188, 0x7, 'syz1\x00', "a1537a00d46009809597ccd9b0c6674960feb5f389a9b9e4bda20255dea14a28", "dda688b53295828f352c41a275776dae2b3f5d1ec2094712c654c339e364177e", [{0xfffb, 0x3f, {0x3, 0x6}}, {0x7, 0x3, {0x2, 0x8001}}, {0x100, 0x9fe, {0x3, 0x48}}, {0x6, 0x800, {0x1, 0xfffffffd}}, {0x2, 0x6, {0x1, 0x71}}, {0x0, 0xffff, {0x2, 0x1}}, {0x922f, 0x7f, {0x2, 0x1}}, {0x6, 0x1, {0x0, 0xfff}}, {0x0, 0x3, {0x3, 0x76}}, {0x4, 0x9, {0x2, 0x5}}, {0x9, 0x80, {0xef63dd69ac24290, 0x1ff}}, {0x2, 0x2, {0x1, 0x1}}, {0x0, 0x4, {0x0, 0xffffff13}}, {0x4, 0x8, {0x1, 0x9}}, {0x6, 0x7, {0x0, 0x8}}, {0x2da, 0x958, {0x1, 0x20}}, {0x20, 0x81, {0x3, 0x100}}, {0x6, 0x400, {0x3, 0x7}}, {0x3f, 0x2, {0x2, 0x6}}, {0x8e32, 0x7, {0x1, 0x4}}, {0x1ff, 0x9, {0x1, 0x8}}, {0x1, 0x48d, {0x2, 0xffffffff}}, {0x6, 0x4, {0x1, 0x7}}, {0x7, 0x80, {0x2, 0x7}}, {0x80, 0x1, {0x2, 0x101}}, {0x1, 0x1, {0x3, 0xd}}, {0x9, 0x7f, {0x0, 0x7}}, {0x0, 0x99de, {0x3, 0x970}}, {0x9ff, 0x2, {0x0, 0x6}}, {0x8, 0x1, {0x3, 0x9}}, {0xfff7, 0x8, {0x0, 0x10001}}, {0x8, 0x2, {0x3, 0x4}}, {0xb7, 0x7, {0x2, 0x101}}, {0x4, 0x81, {0x1, 0x2}}, {0xffc0, 0x4, {0x3, 0x6c8649c0}}, {0x8001, 0x3, {0x1, 0x36}}, {0x1000, 0x1}, {0x1f, 0xff, {0x1, 0x6}}, {0x3, 0x7, {0x1}}, {0x8, 0x1, {0x3, 0xb7ef}}]}}}, {{0x254, 0x1, {{0x3, 0x4}, 0x9, 0x3, 0x4, 0x17e, 0x12, 'syz1\x00', "184f140d4ef4f4d241945b8d4db01bf47fe4e2010434974d482d4044984d0445", "e189fc6aab9ca455f7025d6479d03c5085bcd1697221061991aee09efa06bfcf", [{0x7, 0x82, {0x0, 0xffffffff}}, {0x4b5d, 0x200, {0x2, 0x4}}, {0x2, 0x5, {0x3, 0xff}}, {0x6, 0x1, {0x1, 0x284a4688}}, {0x2, 0x5, {0x0, 0x10000}}, {0x4ed, 0x3, {0x1, 0x80000000}}, {0x1, 0x40, {0x0, 0x8}}, {0x4, 0x20, {0x0, 0xfffffff7}}, {0xe26, 0xb9, {0x0, 0x3f}}, {0x8000, 0x9, {0x3, 0x8}}, {0x3, 0x1, {0x0, 0x1b36}}, {0xfff8, 0x9, {0x0, 0x4}}, {0x20, 0xfe01, {0x1, 0x100}}, {0x26, 0x7f, {0x2, 0x2}}, {0x4, 0x3, {0x3, 0x9}}, {0x4, 0x0, {0x3, 0x4}}, {0x1, 0x1, {0x2, 0x100}}, {0x3d, 0xea8, {0x0, 0x8}}, {0x2, 0x5, {0x0, 0x80000001}}, {0x81, 0x1, {0x3, 0x10001}}, {0x4, 0x0, {0x1, 0x6}}, {0x101, 0x7, {0x3, 0x20}}, {0xd9, 0x9, {0x0, 0x794}}, {0x1000, 0x0, {0x3, 0x1}}, {0x0, 0x5b, {0x0, 0x1}}, {0xffe0, 0xfeff, {0x1, 0xffffff89}}, {0x1, 0x1f, {0x0, 0x3da}}, {0x7, 0x45c, {0x3}}, {0x0, 0x1f, {0x3, 0x4}}, {0x2e, 0x0, {0x2, 0x6a6}}, {0xf4a6, 0x0, {0x1, 0x293cf41e}}, {0x2, 0x7ff, {0x0, 0x2}}, {0x8, 0x401, {0x2, 0x34}}, {0x200, 0x3, {0x0, 0x4}}, {0x80, 0x3ff, {0x0, 0x1f6}}, {0x8, 0x6, {0x1, 0x5}}, {0x8, 0xba0f, {0x1}}, {0x401, 0xd7, {0x0, 0x3ff}}, {0x6f79, 0xbb, {0x0, 0x8}}, {0x3, 0x3, {0x1, 0x1ff}}]}}}, {{0x254, 0x1, {{0x3, 0xffff}, 0x1, 0x3, 0x100, 0xfffd, 0x1c, 'syz0\x00', "b12db798440ef45ececd713e13c83d9f40c4440da7aab829170c0386b134182c", "9b359deb514f63c9fd0a10565c617d980cd6194abf51bd4926a70d84ed170006", [{0xfffb, 0x3, {0x0, 0xffffff22}}, {0x615, 0x800, {0x2, 0x7}}, {0x6, 0x1, {0x1, 0x241}}, {0xacc8, 0x0, {0x0, 0x4}}, {0x7ff, 0x7fff, {0x1, 0xfff}}, {0x1, 0x0, {0x1, 0xfffffffd}}, {0x7, 0x4, {0x3, 0x8}}, {0x4, 0x7fff, {0x0, 0x2}}, {0x800, 0x800, {0x1}}, {0x1, 0xd91a, {0x1, 0x347}}, {0xce, 0x80, {0x6, 0x401}}, {0x71, 0x6, {0x2, 0xca6}}, {0x0, 0x0, {0x3, 0xdbcce0c}}, {0x8, 0xd0, {0x3, 0x8000}}, {0x7431, 0x7, {0x3, 0x3f}}, {0x1, 0x3, {0x0, 0x4}}, {0x2, 0x9, {0x1, 0x8001}}, {0x8000, 0x4, {0x1, 0x4fb9debc}}, {0x0, 0x8, {0x1, 0x1000}}, {0x0, 0x100, {0x1, 0x200}}, {0x5, 0x0, {0x2, 0x1000}}, {0x9, 0x1000, {0x2, 0x7}}, {0x5, 0x2, {0xf2e95ebd5e93b4d9, 0xff}}, {0x3, 0x8001, {0x2, 0xa54}}, {0x4, 0xda5d, {0x1, 0x3ff}}, {0x5, 0x2b, {0x1, 0x6}}, {0x3, 0x4, {0x0, 0x5}}, {0x8, 0x200, {0x2, 0x4}}, {0x2, 0x6, {0x1}}, {0x400, 0x4, {0x3}}, {0x1, 0x4, {0x0, 0x101}}, {0xfff, 0x1, {0x0, 0x1}}, {0x6, 0x40, {0x2, 0x8}}, {0x3, 0x2, {0x2, 0x9}}, {0x2, 0x9, {0x0, 0x1}}, {0x9, 0x4af, {0x0, 0x35be}}, {0x46, 0x43c, {0x1, 0x7}}, {0x7ff, 0x4, {0x3, 0xcf}}, {0x2, 0x1, {0x0, 0x3ff}}, {0x4, 0xfffc, {0x1, 0x4}}]}}}, {{0x254, 0x1, {{0x1, 0x7fffffff}, 0x0, 0x2, 0x54, 0x2, 0x1f, 'syz0\x00', "e29b19dc0ea6190b1534cdc1b91440f9777b99fb431f2159d252de4e07322e03", "028f4cb47756e8244a086228d7c861ce033e314389827b8d26bbf00fdeec7e1d", [{0x3ff, 0x3, {0x2, 0xd6be}}, {0xff, 0x7fff, {0x3, 0x7fff}}, {0x800, 0x7, {0x2, 0xffffff93}}, {0x3, 0x5, {0x1, 0x7}}, {0x7ff, 0x1, {0x3, 0xf47}}, {0x40, 0x1, {0x3, 0x3}}, {0x800, 0x3, {0x0, 0x9}}, {0x100, 0x4, {0x3, 0x3ff}}, {0x8001, 0x357, {0x0, 0x6}}, {0x0, 0x2, {0x2, 0x3ff}}, {0x8000, 0xf9, {0x3, 0x4}}, {0x4, 0x0, {0x0, 0x5}}, {0xff, 0x3c24, {0x2, 0x6138b6b}}, {0x4d, 0x4, {0x2, 0x1}}, {0x2, 0x9, {0x1, 0x200}}, {0x5, 0x9, {0x3, 0x7}}, {0x2, 0x479d, {0x3, 0x401}}, {0x2, 0x7, {0x0, 0x4}}, {0x3ff, 0xb3b, {0x0, 0x2}}, {0x0, 0x5d, {0x0, 0x3}}, {0x4, 0x7, {0x3, 0x1}}, {0x40, 0x0, {0x0, 0x5}}, {0x20, 0x1, {0x1, 0x1}}, {0x5, 0x1f, {0x2, 0xe1e}}, {0x1000, 0x8, {0x2, 0x401}}, {0x5, 0xa55, {0x3, 0xfae}}, {0x7380, 0x6, {0x0, 0x3}}, {0x8000, 0x6, {0x3, 0x6}}, {0xb72c, 0x800, {0x3, 0x914}}, {0x9, 0x2, {0x0, 0x1}}, {0x8, 0x88, {0x1, 0xc8d}}, {0x1, 0x200, {0x0, 0x9}}, {0x6, 0x7fff, {0x1, 0x7}}, {0xb6, 0x4, {0x2, 0x1f}}, {0x6, 0x4, {0x1, 0x8}}, {0x74c, 0x7f, {0x2, 0x1f}}, {0x1, 0x7f47, {0x1, 0x10000}}, {0x7, 0x3, {0x3, 0xe4e}}, {0x7, 0x8, {0x1, 0x9}}, {0x1, 0x7f, {0x0, 0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x1f}, 0x7f, 0x4c, 0xe000, 0x6, 0x19, 'syz1\x00', "dcacc3a6d982ac2a53a532a57e35b0051352ce37d45ea4f292a1fc5f4686ae26", "491fdc0d81baf0789cb3d34c127fd644b9f9b3e61238bbf78dbc18a3067e457a", [{0x200, 0x2959, {0x2, 0x2}}, {0xffff, 0x7, {0x2, 0x2}}, {0x3ff, 0x95, {0x3, 0x6}}, {0x7c8a, 0x1, {0x1, 0xffffffff}}, {0x1ff, 0x3, {0x1, 0x3}}, {0x1f, 0x2, {0x1, 0x78a6}}, {0x9, 0xfff, {0x1, 0x7007800}}, {0x2, 0x9e, {0x2, 0x1}}, {0x7, 0x7, {0x1, 0x8001}}, {0x0, 0x20, {0x1, 0x100}}, {0x9, 0x3, {0x1, 0x70000000}}, {0x4, 0x8, {0x2, 0xfff}}, {0x8001, 0x1, {0x0, 0x7f}}, {0x4, 0xc4, {0x3, 0x1000}}, {0x8, 0x0, {0x3, 0x9}}, {0xff, 0x3ff, {0x0, 0x3ff}}, {0x9, 0x1f, {0x1, 0x2}}, {0x100, 0x0, {0x0, 0xdf15}}, {0x0, 0x8, {0x1, 0xffff}}, {0x8, 0x0, {0x2, 0x8}}, {0x3, 0x8000, {0x2, 0x7fff}}, {0x6, 0x0, {0x1}}, {0x0, 0x9, {0x2, 0x8}}, {0x7, 0x2, {0x0, 0xffffffff}}, {0x9, 0x1, {0x1, 0x10001}}, {0xef7, 0x1, {0x0, 0xcf0d}}, {0xf0e1, 0x1, {0x0, 0x5}}, {0x1, 0xf5d0, {0x2, 0x5}}, {0xde, 0xfff, {0x0, 0x2}}, {0x40, 0x2, {0x3, 0x400}}, {0x5, 0x5, {0x1, 0x5}}, {0x7, 0x7, {0x0, 0x4}}, {0x1, 0x24d4, {0x1, 0x7f}}, {0x7, 0x87, {0x1, 0x8}}, {0xff, 0x6d31, {0x2, 0x5}}, {0x8, 0xb22, {0x2, 0x3}}, {0x1, 0x7, {0x0, 0xfff}}, {0x3f, 0x1, {0x2}}, {0x400, 0xd0cd, {0x3, 0x9}}, {0x9, 0x4, {0x3, 0x5}}]}}}, {{0x254, 0x1, {{0x1, 0x1}, 0x8, 0x4, 0x6, 0x880, 0x18, 'syz0\x00', "c46e24d38cbc9402a8941b3ef61ffa26f558b311b35290fe5119794fcd8bb015", "ed4fed9e8a6b2d512b460b03badd78004aeba1ee5090f09363e7f9a781005499", [{0x100, 0x6, {0x0, 0x99}}, {0x0, 0x4, {0x3}}, {0x1000, 0x0, {0x1, 0x800}}, {0x3, 0x9, {0x0, 0x3efe}}, {0x8, 0xd2, {0x1, 0x2}}, {0x702, 0x200, {0x2, 0xb0}}, {0x4, 0x1000, {0x3, 0x3}}, {0xea1c, 0x0, {0x2, 0x9}}, {0xf20, 0x22, {0x1, 0x7}}, {0x8, 0x3, {0x1, 0x8}}, {0x4, 0xde5, {0x1, 0x7}}, {0x6, 0xfff, {0x0, 0x6e}}, {0x0, 0x53, {0x0, 0x1}}, {0x6, 0x0, {0x3, 0x800}}, {0x4, 0x3, {0x3, 0x100}}, {0x5, 0x8, {0x2, 0x80000000}}, {0x0, 0x7fff, {0x3, 0x1ff}}, {0x0, 0xf156, {0x2, 0x1}}, {0x2, 0x8b, {0x1, 0x60ba}}, {0x0, 0x4, {0x0, 0x7fffffff}}, {0x1000, 0x9, {0x1, 0x7}}, {0xda9, 0x5, {0x0, 0x6}}, {0x3ff, 0x8000, {0x3, 0x2}}, {0x3, 0x7ff, {0x0, 0x9}}, {0x1800, 0xfe01, {0x3, 0x7}}, {0x2f, 0x101, {0x0, 0x8001}}, {0x8, 0x5, {0x1, 0x8}}, {0x6, 0x0, {0x0, 0x80000001}}, {0x0, 0x2, {0x1, 0x80000001}}, {0x0, 0x9, {0x3, 0x3}}, {0x4, 0x400, {0x0, 0x1}}, {0x0, 0x8000, {0x2, 0x6}}, {0x5, 0x7, {0x0, 0x5}}, {0x2, 0xff, {0x2, 0x2}}, {0x4, 0x97bd, {0x3, 0x3}}, {0xfff9, 0x1131, {0x3}}, {0x3ff, 0xff6e, {0x1, 0x7}}, {0x5a, 0x9, {0x2, 0x5676e6f9}}, {0x4, 0x4, {0x2, 0x80}}, {0x3, 0x2, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0x20, 0x80, 0x3, 0x0, 0x10, 'syz1\x00', "877faa0391c8fecd3111a7ece919b06fffe2523b916054839b637682cfbdb4ea", "ca8161636baea2277ed732248e63436e0cee02b4668c00327504be0401d22b52", [{0x3ff, 0x3ff, {0x0, 0x5}}, {0x2, 0x19, {0x2, 0x5}}, {0x8001, 0x2, {0x3, 0x1}}, {0x3, 0x8001, {0x0, 0xffff}}, {0x9, 0x100}, {0xab70, 0x7fff, {0x3, 0xffff}}, {0x1000, 0xff, {0x0, 0x4}}, {0x5, 0x3, {0x1, 0x3f}}, {0x3ff, 0x6e2, {0x0, 0x8}}, {0x8000, 0x1, {0x2, 0x10001}}, {0x5, 0x5, {0x1, 0x8}}, {0x6, 0xf3d1, {0x2, 0x1}}, {0x9, 0xffff, {0x0, 0x7e3}}, {0xffff, 0x3, {0x3, 0x7}}, {0x100, 0x7fff, {0x2, 0xffff7fff}}, {0x0, 0x8, {0x3, 0xffff913b}}, {0x81, 0x1}, {0x6, 0xd793, {0x1, 0x4}}, {0x1, 0x9, {0xb64383ab60bac805, 0x400}}, {0x59, 0x7, {0x1, 0x1}}, {0x101, 0x0, {0x2, 0x2}}, {0x101, 0x2, {0x1, 0x3}}, {0x7ff, 0x5f6, {0x3, 0x1}}, {0x4, 0x401, {0x2, 0x1}}, {0x7, 0x2, {0x2, 0x3a}}, {0x3, 0x1, {0x0, 0x2}}, {0x4, 0x7fff, {0x3, 0x9}}, {0x4, 0xfffc, {0x2, 0x10001}}, {0x1, 0x6, {0x0, 0x800}}, {0x0, 0x6, {0x0, 0x6}}, {0x1, 0x20, {0x3, 0x96d}}, {0x100, 0x5, {0x1, 0x93d}}, {0x503d, 0x7, {0x1, 0xfffffffe}}, {0x9, 0x81, {0x1, 0x4}}, {0x8, 0x100, {0x1, 0x10001}}, {0x0, 0x8, {0x2, 0x4}}, {0xffff, 0x2, {0x0, 0x9}}, {0x1, 0x2, {0x3, 0xfffff800}}, {0x1ff, 0x6, {0x2, 0x7f}}, {0x5, 0x80, {0x1, 0x14}}]}}}, {{0x254, 0x1, {{0x1, 0x6aa0}, 0x2, 0x3f, 0x1f, 0x7, 0xa, 'syz1\x00', "e73f9c7e14c8c6a735841a14c32ba3b7f552666b6da887dff9f224539b5b45f2", "21d67287968b064014bd94015a2fce5fe0244d47badabdeb028896552f9007e3", [{0x400, 0x6, {0x3, 0x6}}, {0xfff9, 0x7, {0x0, 0xffffffff}}, {0x3ff, 0x101, {0x1, 0x3}}, {0xdd7, 0x6, {0x0, 0x100}}, {0xff, 0x3ff, {0x2, 0x80000000}}, {0x8, 0xf0, {0x2, 0x2}}, {0x7f, 0x6, {0x3, 0x8}}, {0x8, 0x1d, {0x2, 0x6}}, {0x100, 0x3ff, {0x2, 0x7}}, {0x100, 0x80ff, {0x0, 0x2}}, {0x7ea1, 0x200, {0x2, 0x20}}, {0x81, 0x9, {0x1, 0x28}}, {0x6, 0xffff, {0x0, 0x3fa}}, {0x5, 0x2, {0x1, 0x9}}, {0x0, 0x9a16, {0x3, 0x20}}, {0x7ff, 0x8, {0x1, 0x2}}, {0x7, 0x5ab, {0x1, 0x8}}, {0x2, 0xc1, {0x2, 0x80000000}}, {0x2, 0x40, {0x1, 0x5}}, {0x80, 0x6, {0x0, 0xffffffff}}, {0x4, 0x100, {0x0, 0x4}}, {0x0, 0x8, {0x3, 0xf8}}, {0x20, 0x6d8, {0x0, 0xfffffc01}}, {0x5, 0x1, {0x3, 0x1ff}}, {0x6, 0xb7e, {0x0, 0x80000001}}, {0x1, 0x400, {0x1, 0x9}}, {0x0, 0x9, {0x3, 0x7fffffff}}, {0xe, 0x80, {0x3, 0xfffffff9}}, {0x9, 0x401, {0x2, 0x6}}, {0x3, 0x7, {0x1, 0x8}}, {0x7, 0x7, {0x3, 0x2}}, {0x1, 0x6, {0x1, 0x7}}, {0x7ff, 0xaaff, {0x1, 0x1}}, {0x2, 0x2, {0x2, 0x1}}, {0x101, 0x6, {0x0, 0x5}}, {0x6a, 0xd0, {0x0, 0x7fff}}, {0x7fff, 0x100, {0x2, 0x10000}}, {0x200, 0x5, {0x3, 0x30000000}}, {0x1a5b, 0x7, {0x1, 0x1ff}}, {0x8, 0x4, {0x3, 0x2}}]}}}, {{0x254, 0x1, {{0x3, 0x1000}, 0x7f, 0x1, 0x1, 0x86a, 0x22, 'syz0\x00', "3b03f2bf59b7d363328e6383036d41538e5cb5cb827ab905807b073240067c7e", "9ffa617d9eefd429205c3b93edfc740a88c79057da0d0b0453b997ae5a6df7c5", [{0x6, 0x9a12, {0x1, 0x3a39f6f7}}, {0x6, 0x100, {0x3, 0xfffffe01}}, {0x81, 0x1, {0x3, 0x48}}, {0x0, 0x8, {0x0, 0x7}}, {0x8788, 0x3ff, {0x1, 0x73}}, {0xcd, 0x40, {0x2, 0x6}}, {0x1cc9, 0x7, {0x0, 0x7fff}}, {0x2e0, 0x6, {0x1, 0x6f4}}, {0x2, 0x1, {0x3, 0x2}}, {0x6, 0x9, {0x0, 0xe0000000}}, {0x7ff, 0x2, {0x3, 0x4}}, {0x7ff, 0x7fff, {0x3, 0xb5}}, {0x490, 0x7, {0x1, 0x15b}}, {0x6, 0x7, {0x1, 0x3}}, {0x9, 0x0, {0x1, 0x101}}, {0x9, 0x201, {0x1, 0x23e6}}, {0x1, 0x3ff, {0x3, 0x2}}, {0x9, 0x1, {0x0, 0x25e}}, {0x40, 0x3, {0x1, 0x9}}, {0x1, 0x200, {0x3, 0x80000000}}, {0x6, 0x1a5f, {0x1, 0x80000000}}, {0x4, 0x49, {0x3, 0x6}}, {0x8, 0x338a, {0x2, 0xddcf}}, {0x1, 0xfffa, {0x0, 0x4370}}, {0x0, 0x8, {0x1, 0xc54}}, {0x9, 0x7fff, {0x0, 0x9fa}}, {0x2, 0x6, {0x3, 0x9}}, {0x1, 0x3, {0x2, 0xff}}, {0xde4a, 0x4, {0x2, 0xffffff10}}, {0x5, 0x4c, {0x3, 0xfffffffd}}, {0x0, 0x3ff, {0x3, 0x4}}, {0x7, 0x9, {0x1, 0x29}}, {0x9, 0x5, {0x3, 0x8}}, {0x401, 0x0, {0x2, 0x81}}, {0xae0d, 0xfff8, {0x0, 0x7fff}}, {0x40, 0x9, {0x0, 0x40000000}}, {0x5, 0x7, {0x1, 0xbd4}}, {0x436f, 0x7, {0x2, 0x80000000}}, {0xffc0, 0x80, {0x0, 0x7}}, {0x4dbc, 0x60, {0x3, 0x9}}]}}}]}, 0x1508}, 0x1, 0x0, 0x0, 0x8c}, 0x10004090) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r4, 0x0, 0x800000080004103) getsockopt$inet6_tcp_int(r4, 0x6, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) mount(0x0, 0x0, &(0x7f00005f7ffa)='hfs\x00', 0x0, 0x0) mremap(&(0x7f0000331000/0x3000)=nil, 0x4cb000, 0x600000, 0x3, &(0x7f00007fc000/0x600000)=nil) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1412, 0x800, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24044094}, 0x20004850) 00:32:30 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x3cd) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10) write(r0, &(0x7f00000000c0)="7c6f1605159505f230fcfdf5e768d6ae00e414aa6597c581d83d50723e8ad1e42a48055b185cdb5f565f156384e19ead", 0x30) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0461044860f15066687cf6b9", @ANYRESDEC, @ANYRESOCT], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7911dd4aef742ab77975c4e5569a1f61"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0xd, 0x0, &(0x7f0000000040)=ANY=[], 0x10, 0x0, 0x0}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) getsockopt$packet_int(r3, 0x107, 0x13, &(0x7f0000000000), &(0x7f0000000180)=0x4) [ 256.263463] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 256.320938] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 00:32:30 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x6}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={0x0, 0xce, 0xce7a}, 0xfffffffffffffcf2) [ 256.368999] binder: 11208:11209 unknown command 1208246532 00:32:30 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4285}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) pipe(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./file1\x00', 0x0, 0x5090, 0x0) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f0000000300)='.', 0x0, 0x5010, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000040), &(0x7f0000000100)=0x4) ioctl(r2, 0xc0000000, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) [ 256.462814] binder: 11208:11209 ioctl c0306201 20000200 returned -22 [ 256.499915] binder: BINDER_SET_CONTEXT_MGR already set [ 256.539531] binder: 11208:11212 ioctl 40046207 0 returned -16 00:32:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000140)='veth1_vlan\x00') mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x3, 0x70, 0xc0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, @perf_config_ext={0x80000000000102, 0x3}, 0x0, 0x3, 0x0, 0x4, 0x0, 0x40000001, 0x8}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) keyctl$join(0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x3) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0x42, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYRESDEC], 0x40}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000010) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r8 = openat$vsock(0xffffffffffffff9c, 0x0, 0x50800, 0x0) ioctl$KVM_SET_TSC_KHZ(r8, 0xaea2, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x34) read$alg(r7, &(0x7f0000000040)=""/93, 0x5d) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000240)={{0x2, 0x4e22, @remote}, {0x1, @broadcast}, 0x4, {0x2, 0x4e24, @local}, 'macvtap0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @local}, 0x14) getsockname(r5, &(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000540)=0x80) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) shmget(0x1, 0x11000, 0x40, &(0x7f0000fec000/0x11000)=nil) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r10, @ANYBLOB="040000000000138155065c86bea9548171c1f6d1a4a8f508c8339d409559c76463020ba8e36eb71ffe7bc2be446a2ddaa8249433d6b962533a7e663d3b152a100debb727c57e615d8d0e32d00ef6df5550f091ec0a6c928e8f3a40eea3df808012e6fff16e793330f84d61c5797094e67da1fb9c787ff4e9f24f0cb8f3435eacab5b18ad52bc97157db7a7c22f429958f285e1188341baebbbd94f1566b87ec6492d0b0aefe3bc0e766e2b23ea91a40bd87b958d3add1c816607b630817de305e88faa64cde8f3d249e689ea06f8750716222e4454a7ae"], 0x20}}, 0x0) [ 256.551870] binder: 11208:11212 unknown command 1208246532 [ 256.551882] binder: 11208:11212 ioctl c0306201 20000200 returned -22 [ 256.559372] binder: 11208:11212 unknown command 1256001913 00:32:30 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x5, 0xffff0001, 0x1, 0x4}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)) sched_setattr(r1, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x6, 0x7, 0x0, 0xaac, 0x0, 0x2, 0x20}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x0, 0x7, 0x40, 0x9, 0x0, 0x3, 0x410, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x20, 0xc6f70e78938b0eb5, @perf_bp={&(0x7f00000000c0), 0x7}, 0x9100, 0xb4c, 0x3, 0x7, 0x1, 0x2, 0x6}, r2, 0x5, 0xffffffffffffffff, 0x8) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x12, r3, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x6) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000200)=0x4) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x3a) close(0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) [ 256.559385] binder: 11208:11212 ioctl c0306201 200000c0 returned -22 [ 256.560460] binder: BINDER_SET_CONTEXT_MGR already set [ 256.560470] binder: 11208:11212 ioctl 40046207 0 returned -16 [ 256.748841] device veth0_macvtap left promiscuous mode 00:32:30 executing program 0: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000002940)=""/235, 0xeb}, {&(0x7f0000000580)=""/97, 0x61}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000002700)=""/197, 0xc5}], 0x1}}], 0x2, 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r4 = accept$nfc_llcp(r3, &(0x7f00000000c0), &(0x7f00000001c0)=0x60) accept$nfc_llcp(r4, 0x0, &(0x7f0000000280)) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, 0x0}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB='@\x00\x00\x00&\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000000000ef9515cb73b4000000009e0004000a0004000a0004000a000400020095c9c247083504000a0004000a0004000a00"], 0x40}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 00:32:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0xd2, "7b5d1bf1807a7000eef72ba6ff25e018a8dee3af6355aeee54d92dd6a0dbcae12afe4725d26a2c95a7698bff496efd8aad2056d7f7a9cd0d7f6aae11ba83148877a796893e1434e846288204a6bcb1d1c74790d643c42f150001de76991eee347b09029960a5f1c60de0c6bbcadc3a554254d8a89524a86d99c496ca6d7985475df300b8e292b2640db8478bd3456f602932c94028c86bc30ade54a708d3c14f706bb353586bd81c1bb60ae6e425289f0d8710ff98810ec7f4bb1c067d5f02fb7734e32f5007b4c2a66da43c6e5058d1c2e4"}, &(0x7f00000001c0)=0xf6) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback}, 0x1c) [ 256.851152] IPVS: ftp: loaded support on port[0] = 21 00:32:31 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0xfffffffffffffc00, 0x7fffffff}) preadv(0xffffffffffffffff, &(0x7f00000027c0)=[{&(0x7f0000000400)=""/4108, 0x100c}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000000c0)={0x0, 0x47, &(0x7f0000000000)="38a0f334f6d0d9807aca4e9dee3cecf6a5813eecb5d19595af44cab61507ca432def5c62410f2557cfe126506ac94e27487daf7e35f5ab087adf7d58115065aaca0aa9245e1a0e"}) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x101a00, 0x0) 00:32:31 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000580)={0x0, 0x2, 0x1, 0x0, 0x3}) syz_mount_image$xfs(0x0, &(0x7f0000000100)='./bus\x00', 0x100000000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000240)="5960497dce3c", 0x6, 0x5}, {&(0x7f00000003c0)="29aabbc68e8f24df84417c28a4b6cb9c183bc143b48900d85d2ad22dd63e0475a67d3aabb38ad6b44ac1b5bd594110ff703fa9433d3beab20e593064b76798b38d5d37853f", 0x45, 0xd9}, {&(0x7f0000000580), 0x0, 0x3ff}, {&(0x7f0000000700)="07605596eb32e24c3d23643a09ce4ae0f537d6cd1de70dda056ce228bb11c9a5a2ba9400ca6382aa9aec480088dca30b9b702efd9872654ef4725c385a", 0x3d, 0x6f}], 0x22080, &(0x7f0000000800)=ANY=[@ANYBLOB='dax,smackfsroot=!,uid', @ANYRESDEC=0x0, @ANYBLOB=',appraise_type=imasig,smackfshat=,fowner>', @ANYRESDEC, @ANYBLOB=',obext=user_u,\x00\x00\x00\x00\x00f\x00\x00\x00\x00\x00\x00\x00\x00\x00']) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x11011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x2000000000000200, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000002c0)={0x3, @pix={0x5, 0x2, 0x38414762, 0x8, 0x3, 0xed1f, 0x3, 0x7fff, 0x1, 0x3, 0x3, 0x4}}) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x20302, 0x0) fdatasync(r4) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x100000, r4, 0x9}) [ 257.075529] binder_alloc: 11240: binder_alloc_buf, no vma 00:32:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f00000000c0)={[0xd000, 0x4000, 0x0, 0x3001]}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4040, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) getsockname$unix(r5, &(0x7f0000000140)=@abs, &(0x7f0000000000)=0x6e) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xc00}], 0xe, 0x0) 00:32:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f00000004c0)=0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[0x0]) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x5160300}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x80000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x40}}, 0x0) [ 257.177976] binder_alloc: 11257: binder_alloc_buf, no vma [ 257.204766] binder: 11257:11265 ioctl 4b3a 1 returned -22 00:32:31 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="ff070000"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) sendmsg$can_raw(r4, &(0x7f0000000180)={&(0x7f0000000000), 0x10, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{0x3, 0x0, 0x1}, 0x34, 0x2, 0x0, 0x0, "a760933aff3a30778248bca50f182edfb4d71dec09d46f56f10f73c4658b3b1f9070f3c10c33de3c3971d28be86b567312313fa8c977d469f6e57abedcf47fb6"}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0xbc1d57c6df44821) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) [ 257.264745] kauditd_printk_skb: 5 callbacks suppressed [ 257.264754] audit: type=1804 audit(1590107551.196:88): pid=11267 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir862177018/syzkaller.jPGRTp/83/bus" dev="sda1" ino=15888 res=1 [ 257.349924] binder: 11276:11279 unknown command 2047 [ 257.359945] audit: type=1804 audit(1590107551.276:89): pid=11267 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir862177018/syzkaller.jPGRTp/83/bus" dev="sda1" ino=15888 res=1 [ 257.378727] binder: 11276:11279 ioctl c0306201 20000200 returned -22 [ 257.432994] audit: type=1804 audit(1590107551.276:90): pid=11267 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir862177018/syzkaller.jPGRTp/83/bus" dev="sda1" ino=15888 res=1 00:32:31 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r2], 0x0, 0x0, 0x0}) r4 = dup2(r3, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="07630000358d9e76f140d077"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x1, 0x0, 0x4, 0x11, 0xe0, &(0x7f0000000340)}) futimesat(r4, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{0x77359400}, {r5, r6/1000+10000}}) r7 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280), 0x1033b) fdatasync(r7) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0xe, r7, 0x0, 0x0, 0x12}) geteuid() 00:32:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r4, r3) r5 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRESHEX=r5, @ANYRES64=r4, @ANYRESHEX=r2, @ANYBLOB='\r\x00?\x00\x00\x00\x00\x00\x00'], 0x3c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) [ 257.551256] audit: type=1804 audit(1590107551.286:91): pid=11267 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir862177018/syzkaller.jPGRTp/83/bus" dev="sda1" ino=15888 res=1 [ 257.618349] audit: type=1804 audit(1590107551.336:92): pid=11284 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir862177018/syzkaller.jPGRTp/83/bus" dev="sda1" ino=15888 res=1 [ 257.624248] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 00:32:31 executing program 2: mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) fstat(0xffffffffffffffff, &(0x7f0000000300)) r0 = getuid() mount$9p_xen(&(0x7f0000000080)='syz\x00', &(0x7f0000000140)='./file0/bus/file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=xen,access=', @ANYRES64=r0, @ANYBLOB=',noextend,privport,dfltgid=', @ANYRESOCT, @ANYBLOB=',cache=mmap,dfltuid=', @ANYBLOB="2c736d61636b6673726f6f743d7d706e7369785f61636c5f6163636573735b73797374656d2b2c66736e616d653ddd6367726f757024172c", @ANYRES64, @ANYBLOB="2c736d61636b6673726f6f743dd02c736d61636b6673666c6f6f723d7d2c7375626a5f747d70653d2d2440402673656c696e7578766d6e657431282870726f636c6f2c736d61636b66736465663d2c5d5d6367726f75704191ef278f2c736d61636b66737472616e736d7574653d6367726f757040626465762c686173682c736d61636b66736465663d2f5e26766d6e657430403573797374656d6367726f75702c00"]) perf_event_open(&(0x7f000001d000)={0x1, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r1 = syz_open_procfs(0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c) acct(0x0) mknodat(r1, &(0x7f0000000000)='./file0/bus\x00', 0xc000, 0x9) syz_genetlink_get_family_id$nl80211(0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write(r2, &(0x7f00000001c0)='s', 0xffcf) creat(&(0x7f0000000100)='./file0/bus\x00', 0x0) [ 257.643224] audit: type=1804 audit(1590107551.346:93): pid=11290 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir862177018/syzkaller.jPGRTp/83/bus" dev="sda1" ino=15888 res=1 [ 257.737037] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 00:32:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x54) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000140)=0x2) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001940)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5], 0x20}}, 0x0) 00:32:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002240)=[{{&(0x7f0000000300)=@ax25={{0x3, @rose}, [@null, @netrom, @default, @null, @remote, @bcast, @netrom, @bcast]}, 0x80, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x0, 0x0}, 0x10) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000}, 0x0, 0x0, 0xfffffffd, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4008080) ioctl$RTC_PIE_OFF(r5, 0x7006) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @local, @ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810296}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 00:32:31 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x2, 0xd22}, 0x10000, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0], 0x2c) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x6}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) chdir(0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x1000001bd) 00:32:31 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x7a, 0x1000, 0x9, 0x200}}) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r8, @ANYRESOCT, @ANYBLOB="aa0a5aa62349ed3808f3b62a7ffabc81527afe88b061748d4ef889b7bacff79949e5a7e02235ada4cf0939bd96caa797e8abd68e4dbb3ad27d75942572f8d767cbbefe905edaf83b980af3d39171128c316b4808ba72bf38a6e5957df7313a41e1be232d0d2930060d30bec480113d1a37e747c6fd1ab68de1a474e0f9a1fb166c83574cca16b32f9e36d90f24ca4df1ea8ca0b086fbde394d5562cdf3ec25320d3c06df2c2f6b098824ee65aeba19bcddec512cc07872059c79a490c009725a31872abbcb72", @ANYRESOCT, @ANYRESDEC, @ANYRES64=r5], 0x174}}, 0x4000800) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 257.896805] binder_alloc: 11257: binder_alloc_buf, no vma [ 257.903231] binder: 11257:11338 ioctl 4b3a 1 returned -22 [ 257.936396] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 00:32:31 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="740804001000c6a9480104004fec590a4b", @ANYRES32, @ANYBLOB="0040000000000020540012801100010062726964676500000000766500008c3cc52e0782e040bd8736a25b9e279301828d57eeaefab57baf2bcc5e91e6429dbb3f5828e143ace6c84f7b58b075cb78dfe6f8581e50ee7c7f0afe1c8d26a439365975ae713b6ae5e1e6a7a5beec317842e841ca6525bd2896e3f7e8f0d559277c61364f07dbdbab1353aaeda623152818a8504139197d0989f48f404c698f6bad3f96a3a052665173f88f1cea836983ed537a57f994d94518206b5ef9465d9154e971cc0548a0"], 0x74}, 0x1, 0x88a8ffff}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 00:32:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = getegid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)=[{&(0x7f0000001780)={0x12b8, 0x2d, 0x20, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x8, 0x68, 0x0, 0x0, @uid=0xee01}, @generic="3429c7272ca2c0b0cd8889e222752922085bc1c53273cc1c246ef00e7a22e6b8c11a6d57bf550b08e26d7171b535dce8bcf7f156903a8118f05a21e1f190ea7bcee2c60a0ecd8b27bdb0b5d075dd0b183ceff53fac3f6e0c83d8bba2d6c0bfd129ee0d224a389311b633272c7d5f9a395e9b56f25dc075b9", @nested={0x1226, 0x3, 0x0, 0x1, [@generic="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", @generic="b745d5d1ee439a422d409825f78f8b4ba67029501abd3d530269808ed63ac8beb269f71762f8b270f5748bc2d979b0ad83846138568904c485156ab469b4e2603a26fcbea5e3be23502452d9f1acb33e02a005e963237049a749dbc43dbb342b54bc96203e552d5e46a9f42be21d1d5299ed69b85a52da3160477210b73018eedec2f959d9d3ee81fcfa822ddc2583bc742f633a3d0bc4b9317abc9bb432d74ee1dd00db0d882d54fed5a42d9ae132645f87ffd089262729553ff51a", @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@empty}, @generic="0b38a813ad65499f02fb98be0864eb22670b3a62b0c2b98898fd74742990fdf4a12a38b802b42e1d89de53cab7ff44dd88d2e674924b84a87243aa37372dff9e0af08ea5d1", @generic="d233c1646cba81b2c19b4ba315c22d4a6ea3319eac8dfc462493", @generic="60b2c29ce617844cd0bf5260c43cef65d6ff1b1301a80a12c87bc9fadbd50dbf20b9a4388b055b6fd69c3591607fb271a372d3f5e9b51233acd2e88bfb364c433c29da5c55dd0ebb27b479f9a04ea1935ea4137c05b4c74b0a952f03ebd444e32433ed5effa88063e738a500e83e4ce2daa7445609e6888414e933d722b609119e71bd9bc615b9258095df96e70a98efaff933c63ed547172594f7c19ec3b7b7ec3c8e65a1cf3f2f5738b8c5b195a7685c93697de8f3", @generic="217ba8d4545e0c8d0679c683d4dce6b6005302e91cfa32563cd1566ab1a42468c7f09c01a4c53acea7", @typed={0x14, 0x7c, 0x0, 0x0, @ipv6=@loopback}]}]}, 0x12b8}, {&(0x7f00000002c0)={0xfc, 0x12, 0x4, 0x70bd28, 0x25dfdbfe, "", [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x9}, @typed={0x4, 0x87}, @generic="ae6353e765cc9d816665288138d0a8028c60af26f75336a00ae69ba63d642d64a634dc4b52c969d094a164277c25b0daeae8a9d7011b1f7cb4bf77903d12d1028908f110ae24fb595594ece40288443545fe188dfe52c24dc1d01e5e2bde4d2a4ff49f1ce26f09e4079db23230d574514901d36427864757cf56ade5a061bd1091c02a10619c516c0c7dbc7439e1f8e2a6685722af62af1edc5cf8ca89b254391a1534cdc559780a809733b861701ccabb7d63faabaaa6bed020026c87d034d5039fd7730a0aa203486d12b25647f700a593801367d4712a02cba854e59f46"]}, 0xfc}, {&(0x7f00000003c0)={0xc4, 0x10, 0x800, 0x70bd2b, 0x25dfdbfe, "", [@generic="8e6cf78f90a49720b566ab2a3307f51458f2f9d8c93586a9ca3958021827c3ccdce56b2fd6cf53589500c49d500a2e53081b8e1768d1c262d616398fe70229636c8a86da05fbaa800c2de7f87eba52654ad2f1bb2e407d150a93d1f68b264c63b4fae7a718f3024311866e1faa5c1995782289532a50f4f9f12a319880975381d269d2f55d7ed919eed152edfe5999bae444e1447e1f2ab8e1ff39a4b17da4b286c3d28aeabf610938e7c40710331b8192c3f3aa"]}, 0xc4}, {&(0x7f00000004c0)={0xf0, 0x1b, 0x10, 0x70bd2b, 0x25dfdbff, "", [@nested={0xd5, 0x88, 0x0, 0x1, [@typed={0x57, 0x21, 0x0, 0x0, @binary="940e116806eafd9b4b7e747ca843acd47bdb436a2a7d0cc65a04c5374fe321c0b7d7fc450c4d958884d6b23b3c7ac83a9fd2a93199c6678eb2a4e13c3eb0b4e577ef994cef6fe1e2994bc3645a7d85d9b98803"}, @generic="a50041951ae1a4df93bd772b20784eea56b51c03107673b82e7a79d9fe36c3e5fc046d73112980550e15a64ab38bf9371e0c5e1c0bb78648573feb557ab19155ba509a7ec3dcc9bd3075a2be62c1bfd2fda8147831ac53ba9e347ff5386b8612658f96ab8be6ceea368fce4eb33b55ce91", @typed={0x8, 0x31, 0x0, 0x0, @pid}]}, @typed={0x8, 0x26, 0x0, 0x0, @fd}]}, 0xf0}, {&(0x7f0000000b00)={0x360, 0x22, 0x4, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x91, 0x83, 0x0, 0x1, [@generic="4a29dd86901e85746d7b81b26f35b9d385c242601a9e2944658b52b35bf4e02c96df25d144c7b341bb180e4df6ad1386e23c87e4c1e242a3d54898b1eaac5794efbd07ab7ae97f4a530cc0cec3c597e63c1acc42128d0cfc3317dad25aa7733d07d764c4de2f96a7972811e7e122dfe7ee610d0747e2690f9b", @typed={0x14, 0x4e, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, @typed={0x8, 0x84, 0x0, 0x0, @u32=0x4}, @generic="f4da72990c78a194e08d6f329e76fe537461b033e7aa07baac14ee6673e1cb4164ff19aa69d6291db8abd41412602dc3766ad109d7add365795102251234481657a54cba21253ae889f11168f3db48c6a8982cef201e1c05eafa1b81aa1526d7dac4571b0d690a5b2cab4133bc3af01d7b6cc74fc97ed72b0a0b8b7b62adb39063c141e632249bc801383c95da3cd2834114e7fd5a9e523d033045595814902dbf98aa96b41ed97cdf2a18470a44d82fbe32ca12830b151d04f2835ec1c150f7e13d8a938efa8f2ddde7da6daa4e0c4e9d5319070ba86b8099880a09775219", @typed={0x8, 0x4a, 0x0, 0x0, @fd}, @nested={0x1ca, 0x39, 0x0, 0x1, [@typed={0x4, 0x68}, @typed={0x8, 0x7f, 0x0, 0x0, @u32=0x1}, @generic="64f834700079e3f257456e64726f39414de10764ea7e809760f9cc7184eddd6e62d75ae4fda5e4d7a0df53ec0cce83ab52ed88801d639573a88b892e3a36cad66d45d60ac9ff129f7f96d4996aadd94d3697abde33ea5da6a40b7b30", @typed={0x11, 0x55, 0x0, 0x0, @str='/dev/binder#\x00'}, @generic="2d7364606440d0d5007e01912bf1952fcb98b36208580c692b58422f7c5faf3186deeba21709fbc690a63baf5f54b351a481cc702a36", @typed={0xe4, 0x7, 0x0, 0x0, @binary="7a1cf5f5d987209e21734010009a26ea3be191cc32bb6c0fbdec7afe80669ff022e258e853f22dbb245ebf661201fdfe9a5cf278ddb8ba8cbaadb6748fba74b01386be5c36c37b26039e88f56f3ffd288653bb542e69ace31df036491cbb1269e1228c009f0ca90b8b56f6d39958d3edcf5b2755bc9faf638f23570c8124360a846f7698e289772d696b03f4cdaf04867af25ff18e7a3ac1e162548cd16c9b6aa075756e23fec13d3c5329afbfb3ea9b210a8e2ead7dae68594641df0db79f6fa089a273ac2d6f5f5382473105352af2dfaae4bd0f992c80281b1fb8d3bbe436"}, @generic="c7566d9c28568e37c987179aad901f86cf7a8dd3810fc3078e96baaabb46f137d3e8987f3997a8a5640dcea1fbd86ce5"]}]}, 0x360}, {&(0x7f0000000240)={0x18, 0x33, 0x300, 0x70bd25, 0x25dfdbfb, "", [@nested={0x4, 0x5e}, @nested={0x4, 0x1e}]}, 0x18}, {&(0x7f0000000600)={0x1f4, 0x27, 0x4, 0x70bd2c, 0x25dfdbfc, "", [@typed={0x8, 0x91, 0x0, 0x0, @fd}, @generic="b10007c7ba3f9738083d643c54b7f99b5b575358aaa655650e3dc74dc1426d154d93ccbbdc877030777da00bb7239e691bb86a88fa1e019b45c8a81839f2b44553782981c799393de2fed534b986538e8752526f463ed3624bfe88658edd85e448337a934b899a742fbad3c0026c6bb4e5be3eb90b5047691e6660b9ee71183bfad737f7786b9f1d1fc6f39ef70de534e2ce1ffd6997d63168590d2c43827eff92eae857035b10b9f6cf11bba32a", @nested={0xa0, 0x28, 0x0, 0x1, [@typed={0x14, 0x7f, 0x0, 0x0, @ipv6=@mcast2}, @generic="4f3fc7b28594ccf6da0fe32248e932b879d3c7503339c41652785e3690e3c18a5628e3b5f0f52f8cf57d8384ca77c734aac5d43a8df5640b53972883021c494a592ff629e3de928daa0c35705c3e8b36669ad69032d47b52df7fee17ab82c1578973554587e309d3ab4e37da936bc88693fc876d", @typed={0x14, 0x79, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @typed={0x5, 0x2b, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x39}, @generic="ffb4c49f8a5ad12a472559bea19e910cc7d7c8596a9274ec088cbe73ecec36b9b8a1b060466e708de0b9c49d4ae424e8caf3a067f7f8d322ffc4dec68b2f969518fe4c8711e0e827b912fb8f60d988cbb27e551f269ff36db1cd21a6ac395a0175ab077187f57b210ffb43f4616798dd5de8bf004a2e393003a9b0defbb5cfcef1"]}, 0x1f4}], 0x7, &(0x7f0000000e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r2, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r2, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}, @rights={{0x18, 0x1, 0x1, [r0, r2]}}], 0xb0, 0x40000}, 0x44041) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$SNDCTL_DSP_SETDUPLEX(r4, 0x5016, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) sendmmsg(r5, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18) [ 258.134915] binder: BINDER_SET_CONTEXT_MGR already set [ 258.146031] binder: 11368:11376 ioctl 40046207 0 returned -16 00:32:32 executing program 5: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) sendmsg$sock(r2, &(0x7f0000000740)={&(0x7f0000000200)=@phonet={0x23, 0x1f, 0x6a}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000380)="6217bd609241df8f013f80cc2c935ebcccab070b7db38ecb7a85ca5d0c435204bcb38a2efee726743bc18729d0eeca548e1bc94827cc1046ab66688e35df6130ff0c079af7145c4de3c8be974eaf55e517a0cdf0969dd9d27b960d9c35e6847eb2c384fd16bc2664f5adb67274c688b124", 0x71}, {&(0x7f0000000440)="b148eda2a9a86b97056dd07131f48b49d59619612264df56b13149d2448ccd8509d75bc5cf6ae52fd6b7363b49184a57eb558bd21aa6fe7ab959740eaf8f0523177e92792d937d9a9903584eedd8f49bb71fa10395f5d4c924d4f2514b753ec9f5b726a223389d93a5ff114993", 0x6d}, {&(0x7f0000000080)="de09ee1c1f0f83bc97f7c2498cf69250", 0x10}, {&(0x7f00000004c0)="6b4f3cd713203b806bd6df519c89beb2d458c980d7c89fce169b82db430490a8f81cba67544593df0dc594edcc69b235d691687aa2a9316d7fc5c4ebd6e5b508db4c7596f9064c9e97079a028bf4dd7043ff3851f8ab11789ead217e809eae35d20560f717f6993951fdfb148f30b440188d033057a0eaab97be", 0x7a}, {&(0x7f0000000140)="af58295af8eee92c1df6faf38a926dbb64f2cd33a742a841b21005f36f9271800ad1a4bb016034e692c2a140cb1303c04378293025fded49537d715378", 0x3d}, {&(0x7f0000000580)="815481eeb797b2283de2e84d3fdd9e86c1ddc7ab6a6fea6934ede4ead371e8df70dfd4f484c7be7cab94daca4de618c83dfaa909d9d8db073dbae560b44e2e9d6da60812c01a5fc357b94b96138301b243d9f62b43d6fd2aa487f6a00cd32fecdcafc3dd59ea7702cdfd248174ff86a95d49b479329ea3e1ee5a10ad92378cc93274ba87ac2f89ee05fb09023ad86531e3813f51797b425c496034fc747fe3a53c47f780954677047ad882dab56b8211", 0xb0}, {&(0x7f0000000300)}], 0x7, &(0x7f00000006c0)=[@txtime={{0x18}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x48}, 0x4) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000001c0)='./file0\x00') chdir(&(0x7f0000000540)='./bus\x00') symlink(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)='./file0/file0\x00') [ 258.240936] device bond1 entered promiscuous mode [ 258.261724] device bridge2 entered promiscuous mode [ 258.281707] bond1: Enslaving bridge2 as an active interface with an up link [ 258.304124] binder_alloc: 11399: binder_alloc_buf, no vma [ 258.315233] bond1 (unregistering): Releasing backup interface bridge2 [ 258.353178] bond1 (unregistering): Released all slaves [ 258.425835] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 258.467058] device bond1 entered promiscuous mode [ 258.475006] bond1 (unregistering): Released all slaves 00:32:32 executing program 1: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2a000400) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$afs(0x0, &(0x7f0000000500)='./file0\x00', 0x101, 0x3, &(0x7f00000017c0)=[{&(0x7f0000000540)="5d9c30cbc28b809be7b7ffca8cd3cbf57fcbba2298629d666fb6d0f6afe1f5a0c46e3a96e8aeec083cf369d9c41d177b295aa2b76cf04ce6b5f83fd1a61f3a0f6401f2827a4732b20ea32e8f898891971308752363d254ff545d93a7bad711f8deba54992f4cb4760ba676f0dd9d34c3c95167b0032fb534129fc92cda57f8127c35b04b04b382c5e6c39e84c94c2eb79cca505ee293f2d9ebf4d99838e2ff32d174c62b4194c2c245a191e011f0f5fa9a0a01bcdefff5faae3fb85f3e94c8e02a223f269d2aa7a02c97fab5faadcb07b76e84d993e20234b9a7bd1cc8c5363eb715dc1c8fc5c538efe550fcc4544740811ede59cab5bd816e31067b04b364542a4508c41714c9a9733ea6c579323a077c7c74b8cb39276da65c2213d34ea300e8d7b33c42a5559c54c24bab75c85dd4f9728e1fbcadf30cadff2163c3b52c718b4ba7f272760d7d9647d4ea97d0cdab495fd425616e08c38dc1f69a885fa931b010f083cd028fdb649862f556166e8e2599829e14c11b2aa46ce4b22251257d5aabb0ecb9b10448159aecc5472fe202b54bdf230a0218bbdacdb45007aca05fcd67d10fcbb8ab1e86ef31694a399a633bb63b578b13eda1981b19d24b822217cf792816bddfee38772e6d4cc2c76c0ea9a7ae6deb0538ee4a3bd6ab548ca6f5099d73d152977c2e1bfc24645da4e0c6f11a474ae5d273a9b3caa059d5b30ea8c280cc9115bec74f0ca390b8000ca0dad9ef746f688e91d5fe2b9252fff11a9864412670a7b8bad8bc66232ff754fa7a640c974f1a5f9296196651fe1e06c02168fb8d813526abc4d462f4d4d79b38ee1e696bcaa66846ca6bdb8a3762047d2a487a2b96b0e20aef7a8d8c826e545529fc6a3289e56a69fe91348e11d74cb732fc5f306b4c01ca571d0e45a8d039cd4fd8fd621cdd0597ba41556b93e5823f4704a8ce596b3cb5275e095c3dd89843b368428a35e220b8007c1a96ec415c32791e8f506ba4408af9480f0cf6707f46eb69362a2c46721301d7405a47a3bbd9e8435af2b3216ecb1eb2e8c09ff7834342bf59fc566445716723f4945d465dd7b23ab84589dea895b84a44abb149cbada8b3c33cab900bb8758fc402ce4cc9eccbfc1916119a0f2ebd6cf9e08cffcbf8d206e81bba53aaed737f7983ecf52e92b19041282715df98827c6a6216526547413f47545737f2a81af5dbdef8873cf06234262e83de7012ba0911a1036a9d0cfaa7bc32f6cfd750b04c9da05fd112543e00afa7752e3b07bdc1dce003da3520b1a48b7fed183f0e78573e72085dfcab599a7fefd493ea832e0116400363b22d89a6d8ce30c8740043e855a4e49d82c9f3c459c6573871fb1d98de10ed03afea5712a12d652dc06b2e652cc12f4795fda0961a23e3dd4bbb299bc406a27786bd8f34237efdb6392aa6eb6638c74b98e210aa9169c70f1063f857545edf96e1c112687610d19dcc4a2dd46417f7346ce27c22dbdafa8a7e432fa4fc11c595b8d89673aa860217d2fd79f943a43518a6c0016f7aba6d52cfd80870a4dde090d6f483ccd78b0ef989894c4d1cc437c9610e09c10cd96a15fe41b4bd8593de052716c952a8969612704510e59b63a1f48535703bce2cdaaf89b00d1770cd98b3cb8cb84a98ffc2d4c1d1202312dafe0a9a5689ad320db413c404e2da4c1249a495ebc9c20649963ddab5ef0a8c4da308e1dd7503d16e7e13d2637ad074d81239f3acc65ef6e2abc1a1708d5127f0e839bbe1e7b6430c7a66f718883daad5916815e5d59ef83600e97506fd7e0757eb24b6cdc238037dea3a6b6089b048a411608f4c4b5234c74be7c710df13ed419f3bc95adfa1b9e2b51227c5923ce05b87777b574bb24c08206c9d7f1a70fe43b4806fa01cf0665ea770e3f0af61b9e29cb85ce97f5b6cd01eb2c336fbfd0401243d67882f3c12616ab68f42d490f9ce0e02760ac1cdfeb76975ce74d079c054dfa7f1f312e269b930a5412eb209c528636ced573b59568880849cfd2f869a5cc2c6457d1cf973bf14a26c444d8b86282d6452dc96d1028a44a6bcdffabdb8449a8694f81ff0f08a28074f94be00ab8fb84014db843236c83e566483b01870d4a9248d31ac76066b10e7c85f316a322bca1d5a6c8673353025ba747070c7afb3338e146e7f558dcdcaeb6da40713be0aba9e523f749b0633455e3aaf48de542d42932a8310a4198bffbde3e4a9be23db444e26206d80cf1e0f757d562abffe0fa21d741cee65d62fe56b28c61bde76a1bb3b3effd4406f6314e09b8adc169a812e349b6c9311c433df2f16bc8d505be49806fe79f1a54ce3fe3600bd1638a8f0037ae5f32c9da7f841e8b9fe18cd8a86e997808866bd696bd102a3ba27f5aefb41092ceec7b513c4db4f5ca56dd3647aec99bac94af48581b99d2cb8916a4fbef28e725c9ea2aa6da043e7719c7f50974ac29c5e4ac786869c994c60795a644d843d768517535e1078c706719a20e6088775b0467b4476c840d2b8e983434430366574e31ab880ea44e9bf574bbcd9f957c879dd30869f240aa4a05cae936161139b7bc743450a854718c2b57fbdb66666353ff1e20686c44da12d7036d1ae0c14ff300ed7b18d4a85078e0593d5959078b7024abae69cd7185b712645223662c671090137d7bd599e8041243a24baabe1be80e6bfc7d80f1ba73ff5cf7b92fa1f6160dd1baa8701f626fb93f9f7932f677ed131a678a5c765df68d36e17103f0659389c79cd1b11dcb4f2531be1d84ab39df2ac49338632769f8658a272d489b85421e9065c55ef3848df00498a385dc1699833299d5a14e26eb8b8ea5dd3303f3bb5ae41b381b62cddc7ff693f83c8b97194b1de6edbde9415c435f8357ca9cfcdf2cd40ee038b6bad1606750a6c729489410ab51c43c59001c9b9140301737fecc199cd2110c82b5a385f5d5a2319a2277700f9790d48dbab9b72cef0915f8bf366ec68e87297ac15015edb68fd782a6e6cb7810de1b205fa77fecd4289c81f8c26829f48b467c285ff7939032df00018b17d9c3e0b03b8d92f89028e51fc3f0c41908bd853d8ccff8ce9b3f356d6494682ce5eebc99677737c2553f806364cdc9bc0977ca78b338ea683b2e4b8cc7a45580cdce8312ff1773ece69b663077e4e0a85be0d6766618d5b13a9fd566c8fb6ce128f524053253905f639f17b3cd8a75cc4d0d1969cfc9c6cd08575e3bdc7bfc41c6baa1f52b8cf97eff5173ac4d1e65f5c67f232b72ef1ba31095cb0694289973dc1c570bd299766a870c4c85e0106e5e0ad6089e30978726539659b4b361b4a0b6053a8ad6178bab2bac1a7a85618ac8e53588a8610e11c3692b4f919d43c3ae130deb0b36964ff84a21f9933dd9e52867002f7269cc451c2baa63be090986a56083e6cbf0c63e2ae0d9a65408c7ce0f4c2a6c3521b7a8eae46b8f5b7327efd2397119da079fa70c3bb62ff6bd67a54597feb364e9e05790ffae8887fee4e2655a63353c0e6a5b4eba5e8467f3d83478fe49a42cfb0339b79f3246145c5ff35ca4d961d830ea1832a8f3bf876cef094eabd1754367a20cdffedcd21e2baaad8023d7699fb7b646fdae896b4ea16ff5c3de987bbfb07ab22b3d1ce62ee62c492a98fed24a956b44a5ca3dee568bd63739d9917b5a9050997b032a9228ac79a3a0f7d07746c51c2315cc30c95da86ebca8bbfe20ad48b287824f13d896119ebca8afd2f371e9bd417146b0e5dc8e6c7097ad034691b60806b748e0e922dbc1fa908a3b3c88827657d66c6bb1abacd523237781906971945c23f0831b30868047cd96ed0ef9efeb6ec5d9ed81880ab986b650b0aa949b67a584b2bb8db29d94231d567619d3b481503465183b0a80c14d0c69d5b9b1646e61fedefd3d94797ef01e3cdf09dfaa9dfbc9e074421a0510790c0a3a06eea829a8a361ee51242bc50bef3d586aecbaaf64620f8f4046dbf556a6f7fe401cc8a22e722bfa1622e2f6e0c38251bb7ad7346798b6934d5e13c6d4a51b7f7548536b2c8f35afa4b751f8c7603f0d96bdae20bffd1a1aee5fa31245f0be013a47008be93b6d1a6ca5d9a4b083636df34c2a322186d3b2c025b477947327d2fe7650f550621711b78a0527e04cb3f41f292b3c628db39576d9334a2ff56682c96d20099cbb6cb610650d6175e938b20c76810d4f77d01b0d90a201493d032f856ff801aec7f1198f1edbce5799b44bcbd13aeb5fffa6bc5ecb8c82cc9a2d85e8739ff9ad7beed8d644141766bd9", 0xbcf, 0x3}, {0x0, 0x0, 0x401}, {0x0}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="666f000000000000006963742c64796e2c636f6e746578743d757365725f752c7065006d69745f646971e86374696f2c000d652a9cfa181c21bfdb6ee4d6b015c4ca442d5bbf4d29959dc645ef1ff866c7b001dc6655a96dba22e681a5ebfca8ec499160"]) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x557e1b66f3da8d9a}, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000001900), 0x0, 0x40840, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f00000002c0)) r3 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) pipe2(&(0x7f0000000080), 0x800) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)='0', 0x1}], 0x1) 00:32:32 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x40, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r1) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r7 = dup2(r6, r5) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b63050067c20c76e2ee763a39ba89708c2fe714bc7692bd5c5135bd146e4c63c6eec37ea0ad61634afccf0005fee07a22c823389d8e75309dec074e81cd6da532cfacf1441cba8505cf2dda6272a0e55c1bf06d6597811931057cc79a4cefa31afdd861ca245a8496a8c30d39b06919d70410223f9520e426b57082c8c518a076c039a736b66575ac6fce7ce74e3dc3456987418225dcb85539eae038d193581acaed6f7175495a5cfe7d7d29db"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b807016", @ANYRESDEC, @ANYRES32=r7, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000140)='\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f0000000000)=0x1f, 0x4) 00:32:32 executing program 4: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x66}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2a000400) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$afs(0x0, &(0x7f0000000500)='./file0\x00', 0x3, 0x9, &(0x7f0000002a00)=[{&(0x7f00000002c0)="c19f05482387099cb2f24379af45ddb9706a92c00e", 0x15, 0x4417}, {&(0x7f00000005c0)="2e562b604cc5be733363368253dd4e3cbc482b09f65b9d78fa593f67938a24e59bba6383e81ffd3cf9fd7a8495ba52d40bc413b93e45fb3476f74139244c7b69b9a9db997e1a4682d3bb634a5056b45ce8ef1d242e7d7a4afa2343276778838d5dead513cc54d8499415795be28942915bedda8d87f8e11f6c6c03f9444f0bac25baf4a2696eeda83ae00ce2c013242cc4517facedf408a3868ea3077d417dc27d6fd12c221f7615a8ccfb3a8756e5050000000000000000", 0xb8, 0x101}, {&(0x7f0000000680)="ec0164ac980c4fba3706bba727a5da08b2781597576a6c28b7759a401be1ece405b85dd6f100ee9d137e35d897cdf0e8194d8701a621b955cde834f6b467bdd4d0d4f25eae77af669d0d289d89ef4377dd67f2e413b92d91168eb9f3ffd78bed5956ef0f9ada2dd2b02b39a6f50fa4efaaced6455394564c29e4b505bf740e01e20269a97e152dd15153285ebe00e711cc7a0bdab43a7b8d13f3876c03c421f48bf4f39ed5c5fcf6eef8961d5e", 0xad, 0x80000001}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000002b40)="c45dd48c11af39ba7d7f71f551c47f2c04da2c7dc606f3a3a657d4d73cace57efb977ebb93fc975e68cc1c5d4e2677b4bb09cad1095e2fb182a8bbb96257a75731e94e73c50ce79ebbb26716e4996f6ec100aa60b4090fc3329999a42c8f37591664d40c757d6ac1eb9177f6d8c8794834e28212dca4a1180ef0746a04913bc74bc5bee33f8aad1362dfdf51843601111d100884b8d9a0e681f36ef387aa74840885c5fa145020a9d1b088a4cd1dace5199f2f9b826af386d8d426583072a07c941563769b12119c8666aad643c08862d0ddfc2233617a481d116ae734df6a1629fc2e93be4bd2c7a486d410c044ae584a4bbe", 0xf3, 0x9d}, {&(0x7f0000001880)="fb9a4292366233ba0fdfa98051e0ffe50b54a3ed8f8a29e36b20bab781127f2c7a82aaa23bdfeae2b8e63c5fc63549d33fc2359d89597282fc3faaa98c5a5b9a78142294cf28", 0x46, 0x100}, {&(0x7f00000004c0)="052e6ee02fe92f38fefa1c58acc7b65b1abca54ae24940db7bc13e33652da4850a6a9a43e6f431c2f324121d5f42256193c38945", 0x34, 0x5}, {&(0x7f0000001900)="78032718ef3d4c777f8e2013db9f8f7f6f868e25a18cee939858385e430443f6bec29329f24c2c94d4d87244c9fd474081ecb883aed275594dee058feacd381ba24925c9039d21ac672e2f5549905bfdb9337146ac8583e5f82e35c2e6846dedcc1cb55d660bd3b604abdc6ffb243794c8ff20c0a9c6c16d6e5ffdce8f440186852ce3785704a84130e9611675d97b845bd9e744c16f7b5964c69e32f858692535777a81f02afa02334c6f26b11da2c67c5d41cea80f5498560e64c852c0a9b97b5ebd0ce2e43f44", 0xc8, 0x1}, {&(0x7f0000002c40)="a3605cf585c1cf62a58dbebc4aad34d7d62b38acacde3cd24fbd75bea282b5e2dabc017bc2b74f183e7e73ec56efbb71852b5e83b0b93a3d004a4fe65435f279faabe2d25194f4ceb0786e86a0ab771e2a39f63b86255e015a59e3bef80d52b9f05c2cce1fdc64eeeb3d47503f7bb2026d7e3079879aeea281d087a1c672da34b03a9933082f5c73b3f4ed38891a08101b12509831bb84f6163e3e469f5e0ed44d102351edb6473a0c30a1691075583e9aafa96576e36d5287ff2d6a12aff50c5d0109d1877649bdc5ffc48c11ec8c21e13f911a043003bb34a39a542bb9e36e5289e568250a65185c499eb97068748d20e316df695302f0a15a2322c0c751002c953753de7f82d6df51e1c76462cb532e835f4200da65bdf230b6a1276a67ec58e8ab65262e88de0d2ea8587688bf15a80f06d5bb85ececa297f0f6e9969a65fde087f8fbc4dbcf0d28c51a4f6951c7d449e0e800c07523b7dfb16d81bd0324e5e19410f82c70414a9a345f803640b7e695e13738ba1f4be21c003a755198124493dfc33d10df2f27961b5e648feadd5cc929d77f7faeeb94c7cf8dc8088a8f9f40b4dd86c454dd2e7481428a951cd1677702707d828b1fac50fa9fb150f744f61d5d7bdad0305b5816e9fba32e513e322704a7f233de78ec1a4855e80ea5bf9228ec179de92931f1f78a1ec219850024b0eff13bdb0e10f5cb44c3f1043173ade18ddca0d7c162ee70ea6723474d7ee3a5ec3bfc1faf6c38f5c7bb43e9bda43a7344cfbd5a3e2b5b24280f0a4c9fdf67d9d8d6602962d54e33dfc5fa3c041c5777b8152953dcfb516ae9b19fa311f82209c36c383f6dcb7d197d483c2246f427313f66aacf221ab0769bfb1ab694d9501e8d41ee34febffec058d6e136181a74e810a4ee88d25ec95609572a31c21d3da216907d784de07a777d6f935609e4893e9b7b6b734d5f63034d70384026b4c8957c3a02e4c6af361233794fdd4f0d2d9345224de170765cf4a1391a635264c32797e415c972b22cdfb8b06d7d630279cc5b0cd74fa7926cda52d170f01fc0d2e3c01dd322df3f702f3d297cd0eed2104701dda783161a41963555384942cb23564603bf0d2948611bdafd171854ab7fed7773b246dd746bfd82d8a7cf0b9fe4cc8e49ffc11672cfc91c71c1eef6c577446e6cedf57854c8eebbf2684c42fee0c541bf1eeced502e6eca25ff6d5622682c447d55748caa78f1a33e8d5a5da2ebbb164d1d5fe1e2aa07767578867440400f8d144b6717c26682a2edc2fb83b46f77130ceea618cf5fa04bc12a7bbdcc29db7574f5b94cf3edc496bffec59b115558475a083f92ccd8e41ede2e6a279c3be097053e1470cf2e3b640c965da57466722511496b71b3b08f9435a20ecb7ddd6c2c53935d2e178bb27697f7a3ead5f4f5f89a49473d1c40575bbfcca2a3da8c863a3c593c671bdafa7fbe0186c046e128000eb3f171c7be99a1554913b87e5f33a2c26b3b35e6a5308e39e981d121d3f069815f4a177e2b685786d2849569a791beca8eb4526ae74c8f9dc8d0e32b3228f3076959143b6e4eefdfa2583d7dd9eed6368a62b0df545fe277068d4af6f92a8e33ee40dcb0f1c66f87e47a9659c19b274f43e41a24cb68acb0e8bd55319a7e3be8387476220f066109c69ad1e4ddd14c613fce6c130b64bca238e391e62006d6c6dfdf6aec96ffbdb9c9c132d351c224c5748688cfef1fd845106ed0d16b5dfb487bda108b85c315b42a249e94a9653224d1a24252e9c9aa091eb3b3b906afcaf6a99db459484ed0b4390d33674d42d57312c7b6d0734a3ce4fe671e0f4ed9e59d3fa7ada05b01af48537dc1c32ba7d73620e76bc0a50da7cee98f360560d0aaffb70c754f49f89451608166e7ea46a3956118fb84fb8e6bd0522e906db94f232ba5e185c25b060d628188eeb74e12676336a782910b5c210027a335e500ef0917cdbfb8e828972a06ce4d9009042373ef4ec83df3c84571ee755bee49a09f0f934cc5bdc1f4d708917c760655f2b0f10adeb1c93f10cbf9ca560898b2a91f906a4e2d1e9a82d58abc108f05fa1364832c3a6c89e3dd393e4a1327631d8e68104124566832d6659451cb84ae10e1f87146b0929d760d28b0d7b0aed90e0bbd7120cbea71a1f2358ad585db7fdd957b24c0aff690a11dde0dce79d51f88c0949dddb3a4948fb591286b4e250359f0e6df24b2b076dbdcc00e45a6f8f2283651b921a2919b1c5039434addb40d13728d233e5ce5240102c08f8cf44b565bdce3e1eddd9f343bdc564e3773f6081df3f38b7c680dfc60bcdbc40ee941cfcfdf4e201b55a76f412aadb26b14df229419a3b2745302a65d19b7d11488a06f64fa6ea5d23a6647685c1fcc44720bc596db5e6a9e479f30a40e8475d06160a2397ee5b85b64f2ec378e00aa9b22938672a07f561bcdfe0c72fa654d90495a86fe24a197726c171c7ba94cc122c5aa8025b8b6b753253e7b349b83167d0e21b5488e1ce1aabb26b4ad7d6f3277728192b6df581fb1ee37fd7d06afd8c3b916c29fe36b41049f19e227a0da98d790aba9714be45912633b7483ae8dd639d91ff76fb7eb2e5afec23bfc9ef274386a448d9c8d68768bc4e4e485e5fb4362fd916e13c33c83cddc103e6c4fd274c99a27b3a39db156f3b49370a885183b4c9f910557f6d891cb2415ad58626c23188caa05fb77b7854103c168144ed27c9bfa4be48365c3a26981c952ef56ad083195ee885aab9d0406eb35ea42f7c8f01f7203787ee5fe8a107fcd628bab1be7f6584f17f14be648ef02e684f894af01d23f57798762a99723db85e7350a256b1cdeda648b229791e63baa0ae4c01b3b367eb3f321c5c8490418e3006f0ba31492f41576a8f97f26bf5b8466c578763988800b333cd570c36dde0cd27f52906be853be11d60467987c7029fdc060de25abfef3c938d95b257e68cc6e4ae943dfa2bd872fd8682832deed9c3949244fc924e743529959fe8941753586d7ba70d0c93d7d6e038ee8fd32c46db25c4b5da1ed9fbab074383b8f09984823253aae848a72a3eaf53dd6fc437c9af08a1870b2ca117ed23b4d30d827d39eddb84e921c5a50075f56108902ff4fa5ca54b0e53afc7deb49643d8c8be1a52071c69946ff63157b206b72707bf21d7c2e1f67702ad038281ff63f6c019e977227afa6461a15b162ec922b141deb2681e300ecdb39f3bc4d3f5ff9c76acc4c821267048d5fad424449ce7f2f6691a349880ef4807476f2964ef48db2db8bb248bbf4c623125b1c077dd4bc2c8c916beb7fcce4a021b443d9bd35779cd905938ca4a60d2201ea567f1982ee91ae4bbce30009ceffc0edc373d0bdf549d3ed05a249b6b856c63ca67afa32f178af777873b28c86923489df001d526fd0ec9d4ca7945236e3343199482bfc59924df3450ccbd1b311e75da96a12a1e16b30fb05b7968f7c8da91c0e9e1a60a4c3bc9c0cb723c2b392f419ebbe1a23939357de108e11192724afd524318fe716947f3f7515c8f7dfd5929ff51bd21744033c9f08cbd4908b8b88b67b3d2397adc5ad045fff87768122e1156196e55156cd7e9fb4787139aef40dcee245a7eafcfdcd550237c40a2ff4acd2b1bac22fcd0a40e65e05d5332adb76cdc60a889adad6a1dd7136404fa4c7f552b2958edf7d544f6716522189f150bcff8fa864e0cd098214af9e7165c24859809e49a0de4a3895c72fbd530cade392b4033a1bc93d1c092f716b68c22df1df4647dab6d0a2b5e68e844bf3051df17b8748f0d621b9084c5cc64967f5315c8f3324638004587e10b5c0b357b51592b3a4e5d9437bca144a1e973e01bade45b290606138745e2d0431d2928edd33845b32975ac2a90b91c61b4bc2ea5c76c8114e8fd5a6c822a69e1887983a03a563600542df1110ed4146b83af855ed003d559a344e7970c886ec80a33cb8d5099d7d321dc0edf6db58cdcd447fcd211fe8f18bba2ba9e57788df737573fd5e502e58c24dd125349f49fc5d628c243ca454abaff5e600c806dc74385099e5e796bfdca7b49f27b9f49b3f76e9fa530d652a44794dce075ea738d6cf96c20575f222f59bc4e818200eb0ca3911b7cb478c2159854b512ea87b18a7bb772d602ee53f4cfb4dc5af73fc2f46517a0417d8a53ea6bf6006264ebe920de0e96bf074173347e5b33de56e9506cacd99c0bc26b5d5807717b59738c59e024fc1e1f5b911a582590b5a932aed0ea57da5851f1470670d3b33b4ac3279f82e12c2df152140abf9ab96bad1ff5b6f9ae325536aee148cc10a6f5581f37c1e3d4b70d088d17baa5963384fae1d348423f938c6ff6c68feb769f038e381893237dd5b5698f545cebd16bc4913c079f7c754893e6add33e3ce4ddd20e86a37dbe80429371dafc72d0a27ec197dae8db4e1d337d710670977d43d3d9af17d87723bf4ee5b33010272f926bef5b9045b748ed8065bcd34699ff4a6558617e52a4e96283ee6ebf52303ee208fd3ec097f1cf618f2b87d04f5db91ff90dca52dc74c975da49b8d0928623e3567c5e6f45841a7bc7e5ad0b3bd70b3e52f541c2fa72bcef98bedcd6a09478a83b1337ed454cecd74bb29a323abf0ecca34c22a36dfd39c29c9988a3c06ecee562c09d6653ac654f45c2ad4477dcfdf1e0e17bf297e6c255a967c087f80c831a6e3b3d04c07c63dd48a718b66172e3abac471c40c4a38b6f58bc6a432f0c3304ec3b3e1ee12504d82a046b20fbd571d4deb62123566170f4eedc341104194e9102dee30d6ab7e9423fd7e251eec1cc73f75658946347a34840ff0ad190586a9f2fe2b90ccd5553f7f73bc7d53eaf4fdb35268da308c3be8044c04b91d63c16141787bbbb72f27acf9b56322904acfb2e406909bf2e5f35547b2d89f13c3d282469fb7969ac807c28057f7a9f3346ddb8b046f238d2d2e103d7f83cfc3d5b20c77ce47742adf7164dfb15635598c63cdd5d5e0dcfaedfb8a45a11c578863f8eb3a90e33527652525172de070307bacac4f5d535894f847a63d604d9fec7ac4b4925bf3855530483abf1a53a2be54003f495b7aeb96ea0a16feb6802b9d0c9a874614589bb11af0b65b7babdb159afefe630370e55be740631062b568f2bab603b407bd616da501fb34a258b1569c029e5966aee1adf4e8c904f38650a0c84680008f2383bdca58736c4b0f5c1518bcef9a2ae1ac19fe0c329bd50cb2c222a80abafd6528542753907143b7e2ed01310f3e6261e5f393172cd530d312e9bd54f69ffd843f29a6c7c78d1ec340a98b980fc0e090341d0c03fbb1dc8bf9ac652d939a81bd737f02bb0717994cb83963c95961fee52d9f79769aa3c69c4c585d7a835da9c1e95b17e3147dfe1f204c64f4f87b163510fd73fc82c9b3bbea9992b9e213154447b1d59f04259831005c5d2eaae3e678232d80ff42c5ace7bdab06df83f17cda4f3f64b87ed22759a3d68df864bb083f8e7a85b7197ff306e7e10188542a6dd9d620213b35c03b37fde6c29ad512cbc6e7e0d9ca5b91b1abd7321ecea8820c37fbe97431bd54757fed68ce020145715430cef6814dff33ef414cd9480bb34e0cd0be6a4c8fd3e2881b6f1a3ff5f61d0f9b8f6c36a27d3584c72382eb423c2d93379171273a2a5455f1ff0685946b0487cb74a3db4bd77dccdd4530358a0eeb705d0a724c836f6d59dee3a163e1e6025bedffbaeabf541c526a1bfbc40bd1ddba9d5cc7256f5006e82c9627105f8aed45b4cf4f6c2bc7559e32e41ee63b9733acd0d904357dd9c15dae1f066e45e60f402c793b2b2eb0a4f6b9468685248f874596cc164896e6d9e2f50120d0b4ef978a5b16a5e8597b1f1b008bac1ede4b2bb014534b5b020bff406b4d0a036d33c3ad3074f4fba02319d2eaeb1eaf5c0e2d6e5a9616f9498a9547bd7c2ea71b2767cadcdd00e65964ba09144d9a08c6a4f6b8d430e7fe76cf61a1589f69cba45e58fb1b793988a590683a9fc492315e1abcb4ec20506cfc3f0fcb46fbc7f5492aaf3bd9f02273", 0x10b2, 0x3}], 0x2000000, &(0x7f0000000540)=ANY=[@ANYBLOB="666c6f636b3d7374726963742c64796e2c352b0800237a0c8dd7b18ef445d0e977b5ebd261f21523714c5c11c68e9113d1960fad7900006561737572652c646566636f6e746578743d757365725f9d3529610b"]) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x557e1b66f3da8d9a}, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000ea"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000002b00)=ANY=[@ANYBLOB="05630440000000000063404001606436638eadd8b27dc66ece68c879950ddb2377ab762c3006511b1728138976e553692c325e1704fdf7cde6f38a3073d4a11c"], 0x0, 0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) utimensat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={{r2, r3/1000+10000}}, 0x0) sendto$inet(r1, &(0x7f00000003c0)="66986ca8ff555b7ac1baa7471412cea965e4bd6eef3400cf4b38dee7dacb9ff8d5e3aec3db3dcadc82e51094ed371cf4dacb155a82cf7443a37c5e99184c6a527e2d1b6e5bbcd2b0bc6e8e4b3222e570361ea0bb37dc954c5bf6a5e80fe30fc965aef63f94ad4c4a09d173ee09e88fe0020e74283a726b5bdeba223f070358ae1cdf372f0a043a5e54b100a1b6083acf50c947c67ff8a72d68f1614bb985dc91c2c2595f3dfc13bb4d25bda37584f0addad9d20bf8f3a37d8feb09c53e7b719c6c8e95aa345495c27486a00ab4", 0xcd, 0x40801, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000180)='0', 0x1}], 0x1) 00:32:32 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x7a, 0x1000, 0x9, 0x200}}) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r8, @ANYRESOCT, @ANYBLOB="aa0a5aa62349ed3808f3b62a7ffabc81527afe88b061748d4ef889b7bacff79949e5a7e02235ada4cf0939bd96caa797e8abd68e4dbb3ad27d75942572f8d767cbbefe905edaf83b980af3d39171128c316b4808ba72bf38a6e5957df7313a41e1be232d0d2930060d30bec480113d1a37e747c6fd1ab68de1a474e0f9a1fb166c83574cca16b32f9e36d90f24ca4df1ea8ca0b086fbde394d5562cdf3ec25320d3c06df2c2f6b098824ee65aeba19bcddec512cc07872059c79a490c009725a31872abbcb72", @ANYRESOCT, @ANYRESDEC, @ANYRES64=r5], 0x174}}, 0x4000800) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 00:32:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) syz_mount_image$vfat(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x1c80, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0463f940"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000061404001"], 0x0, 0x0, 0x0}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="ff000000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={r6, @in6={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, [0x0, 0x3, 0xb939, 0x8, 0x80000000, 0x8, 0x7fff, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x8, 0x0, 0xfff]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000040)={r6, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r6, 0x8}, &(0x7f0000000140)=0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0x2, 0x7, 0x810e, 0x5, 0xe8, 0xb10, 0x5, 0x1}, &(0x7f00000000c0)=0x20) [ 258.841046] binder: BINDER_SET_CONTEXT_MGR already set [ 258.846539] binder: 11368:11528 ioctl 40046207 0 returned -16 [ 258.890942] binder: BINDER_SET_CONTEXT_MGR already set [ 258.896707] binder: 11368:11407 ioctl 40046207 0 returned -16 [ 258.904804] binder: 11368:11528 ioctl 5016 0 returned -22 [ 258.917354] binder: 11529:11532 unknown command 353035 [ 258.944620] binder: 11529:11532 ioctl c0306201 200000c0 returned -22 [ 258.967811] binder: 11529:11545 unknown command 376471563 00:32:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b', @ANYRES32=0x0, @ANYBLOB="10000000000000002000"], 0x9, 0x2) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630420000000000075404001"], 0x0, 0x0, 0x0}) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000000c0)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1db], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) dup2(0xffffffffffffffff, 0xffffffffffffffff) mknod(&(0x7f0000000040)='./file0/f.le.\x00', 0x80, 0xa6b) socket(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0xb0}, 0x1, 0x0, 0x0, 0x54}, 0x0) [ 258.990775] binder: 11536:11539 unknown command 1090085636 [ 259.001100] binder: 11529:11545 ioctl c0306201 200000c0 returned -22 [ 259.010959] binder: 11536:11539 ioctl c0306201 20000200 returned -22 [ 259.023474] binder: BINDER_SET_CONTEXT_MGR already set [ 259.041850] binder: 11536:11554 unknown command 1077960960 [ 259.055589] binder_alloc: 11399: binder_alloc_buf, no vma [ 259.065104] binder: 11529:11550 ioctl 40046207 0 returned -16 [ 259.065422] binder_alloc: 11529: binder_alloc_buf, no vma [ 259.119314] binder: 11536:11554 ioctl c0306201 20000280 returned -22 [ 259.136912] binder: 11529:11532 unknown command 353035 [ 259.149395] binder: 11529:11545 unknown command 376471563 00:32:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xfffffffffffffeb4}], 0xb3e, 0x0, 0x0, 0xfffffe41) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000280)={0x34, 0x0, &(0x7f0000000200)}) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), &(0x7f0000000080), 0x0}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) perf_event_open(&(0x7f0000003700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r4, 0x29, 0x14, &(0x7f0000000380)=""/163, &(0x7f00000001c0)=0xa3) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 259.168747] binder: BINDER_SET_CONTEXT_MGR already set [ 259.184660] overlayfs: unrecognized mount option "lower~ÿ‹Ð•vÙÙr=.:file0" or missing value [ 259.200210] binder: 11529:11532 ioctl c0306201 200000c0 returned -22 [ 259.207351] binder: 11529:11545 ioctl c0306201 200000c0 returned -22 [ 259.214964] binder: 11529:11550 ioctl 40046207 0 returned -16 00:32:33 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10) r3 = semget$private(0x0, 0x2, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000003c0)=""/100) semctl$IPC_RMID(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$sock_inet6_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000180)) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xfffffffffffffe98) 00:32:33 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x18041) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'dummy0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@setlink={0x34, 0x13, 0x32b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffffffa}}]}]}]}, 0x34}}, 0x0) pread64(r1, &(0x7f0000000080)=""/75, 0x4b, 0x7) 00:32:33 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffaaaa0086dd60a4f20800103a00fe80989f96da2a1e00000000040000f9824c6d0000bbff02000000000000000000000000000186009078000000000000"], 0x0) [ 259.275855] overlayfs: unrecognized mount option "lower~ÿ‹Ð•vÙÙr=.:file0" or missing value [ 259.335036] binder: 11536:11554 unknown command 1077960960 [ 259.342145] binder: 11536:11554 ioctl c0306201 20000280 returned -22 00:32:33 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x600400, 0x0) recvmsg$can_raw(r0, &(0x7f00000016c0)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000340)=""/211, 0xd3}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000100)=""/104, 0x68}, {&(0x7f0000000440)=""/93, 0x5d}, {&(0x7f00000001c0)}, {&(0x7f00000004c0)=""/93, 0x5d}], 0x6, &(0x7f0000001600)=""/131, 0x83}, 0x10000) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x885800, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x1104025, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030303030302c646566636f6e746578743d73797374656d5f552c646566636f6e746578743d73746166665f752c000cd75b6712f78d0a1291121c2ed3024308f010f07e3219ca6e35d30d07972681912ce99fc87316dbe66781004ec5da7abe48d677a4db1d1a2fdf785f84f6e0877144ea9c437540765ea8667cffb8998922eb44d144e81083ac99488fcb2e6bf616558a1120bfb14c8be832276ab3decd77dde9f5a2fbb85f20"]) [ 259.436184] binder_alloc: 11572: binder_alloc_buf, no vma [ 259.464978] binder: 11572:11590 ioctl 5411 20000180 returned -22 00:32:33 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x31, 0xffffffffffffffff, 0xa69ac000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000380)) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\vc\x00\x00'], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="05630439e5065c000063404001373671b9b352068377"], 0x0, 0x0, 0x0}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000001200)={0x2, 0x3f}, 0x2) sched_rr_get_interval(r2, &(0x7f0000000140)) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) pipe(0x0) write$UHID_INPUT(r1, &(0x7f00000001c0)={0x8, {"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", 0x1000}}, 0x1006) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x10000000002) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'security.', 'em0\x00'}, &(0x7f0000000080)=""/176, 0xb0) 00:32:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000000080)=""/65) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="68000000100005070000f9bbc7e4b627ef40354a", @ANYRES32=0x0, @ANYBLOB="251002fffff000103400120009000100766c616e000000002400020006000100040000000c00020000000000000800000c000200090000000a0000000a0005000f0000000000000008000a0079bc40db1e5c170aad"], 0x68}}, 0x0) 00:32:33 executing program 1: perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10548, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3}, 0x0, 0x10, 0xffffffffffffffff, 0x9) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0ba5e7b6092c9dcd7426c253830fbedc527006b9b2b653aa3c2063fe00"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000180)={&(0x7f0000000000)={0x28, r2, 0x23f, 0x0, 0x0, {{}, {0x0, 0x410c}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x56, r2, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80d}, 0x20000895) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="1709000000000000000001000000050007000000000015d802c5ec6da3c093f023bf3b97773d003a11a81a4ec2063d8e66b9e0658a93d86b507662b1dfa541f7ff21017af0220add2a3e520743328a7f1023efaf3345ddedf4a6393c5449e21d16bab79f8a3a28a0cd142dee4448ad2dfa21b59caab69356dd78193336a3907a0a8fc9bf5b711c20197c7ee718fde2ebe53d7fac3d2ad1fe16fe86470efd352fd1"], 0x1c}}, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x16, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') [ 259.585066] SELinux: duplicate or incompatible mount options 00:32:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f00000000c0)={0x0, 0x8, 0x2, 0x0, 0x1, [{}]}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r7}, 0x8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000180)={0x0, 'team0\x00', {0x3}}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000000)={r7, 0x9}, &(0x7f0000000040)=0x8) r8 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) r9 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={r7, @in={{0x2, 0x4e24, @loopback}}, 0x40, 0x1a34}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000100)={r10, 0xf307}, &(0x7f0000000140)=0x8) ioctl$TIOCGPTLCK(r0, 0x80045439, 0x0) [ 259.660460] binder_alloc: 11594: binder_alloc_buf, no vma [ 259.684345] overlayfs: filesystem on './file0' not supported as upperdir [ 259.695389] binder: 11594:11606 ioctl 80404506 20000080 returned -22 00:32:33 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f00000001c0)="0f01ca0f23a665660f38f8ad0c20d9fc0f350f013abaa100b009ee66640f225e66b9cf0b00000f3264360f783e2600", 0x2f}], 0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563044000000000006340406f"], 0x0, 0x0, 0x0}) mmap$usbmon(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x1000000, 0x10, 0xffffffffffffffff, 0x4) fcntl$getownex(r3, 0x10, &(0x7f0000000100)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:32:33 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x3) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000600)=ANY=[@ANYBLOB="030000000000000000000000000000010400000000000000f6ffffff3b0000000100000000000000000000000000f2ffff0700000a000000ffd6d8"]) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0xee90, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)={@private2}, &(0x7f0000000100)=0x14) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:32:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x200000000000000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001fc0)=[{{&(0x7f00000002c0)=@pppoe, 0x80, &(0x7f0000000100)=[{&(0x7f0000000340)=""/241, 0xf1}, {&(0x7f0000000440)=""/151, 0x97}, {&(0x7f0000000500)=""/112, 0x70}, {&(0x7f0000000580)=""/192, 0xc0}], 0x4, &(0x7f0000000640)=""/136, 0x88}, 0x3}, {{&(0x7f0000000940)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000009c0)=""/203, 0xcb}], 0x1, &(0x7f0000000ac0)=""/107, 0x6b}, 0x6}, {{&(0x7f0000000b40)=@phonet, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000bc0)=""/215, 0xd7}, {&(0x7f0000000240)=""/16, 0x10}, {&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/72, 0x48}], 0x4, &(0x7f0000000e40)=""/12, 0xc}, 0x40}, {{&(0x7f0000000e80)=@l2, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000f00)=""/4096, 0x1000}], 0x1, &(0x7f0000001f40)=""/85, 0x55}, 0x9}], 0x4, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) fsync(r2) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xfb6efbd67107b001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200000008a105d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x3c) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) syz_read_part_table(0x4000000000000, 0x2, &(0x7f0000000180)=[{&(0x7f0000000380), 0x0, 0xffffffff7fffffff}, {&(0x7f00000000c0)="19b893d503dc6efddc58ad9ee50e03937c4e9f3f4fa50e95769f4925f17ba034c7fd1a897b2620eea15b2c72d07a4c4a0999277a7feaaefc4d2b39224e527b", 0x3f, 0x2}]) creat(&(0x7f0000000000)='./file0\x00', 0x112) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200036150, 0x820007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 00:32:34 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000600)) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x80, &(0x7f0000000000)=[{&(0x7f0000000640)=""/148, 0x94}], 0x1, &(0x7f00000001c0)=""/4, 0x4, 0x7301}, 0x3f9c) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000540)="a814c2bd62", 0x5}, {&(0x7f0000000340)="2da90bbf9c9da9370e2f8d588fc54f172c6fcdc621a2e2a39c7f7e22a6bfa464d8d1d1c1c79768f305a31076ecb6ddc294de16fbcee344498c609c8fd1ef1f3acaa0766a62271f0143413a77ff", 0x4d}, {0x0}, {0x0}], 0x4}, 0x0) socket$kcm(0x29, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x11) syz_mount_image$iso9660(&(0x7f0000000300)='iso9660\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{@map_off='map=off'}]}) [ 260.225667] binder: BINDER_SET_CONTEXT_MGR already set [ 260.271993] binder: 11572:11590 ioctl 5411 20000180 returned -22 [ 260.273751] binder: 11572:11639 ioctl 40046207 0 returned -16 00:32:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000200)={0x41, 0x0, 0x1, 0x91, 0x2f, 0x6, &(0x7f0000000000)="19b7fe3aef0803535f1063c45f41874dcf9df6149a479d55adf320d98dcae274c00e25be65437f22803f7767fa532a"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="66b8808b5ecb0f23d80f21f86635800000b00f23f80f01c5260f380020bad004ed660fc775030f01c465f20f2db79b3ce42236f3aeb8fd000f00d8", 0x3b}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000100)={0xa8001}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 260.366790] binder: 11594:11606 ioctl 80404506 20000080 returned -22 00:32:34 executing program 4: mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/bus\x00', 0x0, 0x101) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c) chown(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2020200}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x48e0cb43393d5ed4}, 0x44084) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./file0/bus\x00', 0xc000, 0x9) syz_genetlink_get_family_id$nl80211(0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) write(r0, &(0x7f00000001c0)='s', 0xffcf) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000002c0)={0x200, 0x3, 0x4, 0x40000000, 0x80000001, {}, {0x0, 0xc, 0x7f, 0x8, 0x0, 0x1, "6c3ca764"}, 0xeb, 0x4, @planes=&(0x7f00000000c0)={0x0, 0x5, @userptr=0xfffffffffffffff8, 0x8}, 0x8, 0x0, 0xffffffffffffffff}) write$UHID_CREATE(r2, &(0x7f0000000440)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000340)=""/202, 0xca, 0x88, 0x78, 0x3, 0x1, 0x101}}, 0x120) [ 260.575268] binder_alloc: 11659: binder_alloc_buf, no vma [ 260.610505] binder: 11659:11674 ioctl c0185500 20000200 returned -22 [ 260.636645] ISOFS: Unable to identify CD-ROM format. 00:32:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x2, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') r3 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000200)={0x4, &(0x7f0000000140)=[{}, {}, {}, {}]}) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000008c0), 0x0, 0x0, 0xc}, 0x3}], 0x1, 0x40000002, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x83, 0xffffffffefffffff, 0x4, 0x3}, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x40) socket$key(0xf, 0x3, 0x2) add_key(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)) 00:32:34 executing program 2: prlimit64(0x0, 0x7, &(0x7f0000000280)={0x4000020000007, 0x81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x1, 0x12, 0x10000, 0x3, 0xfffffffffffffffd, 0x5, 0xe9ab, 0x8, 0xfffffffd}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x0) sync() 00:32:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000a40)=ANY=[], 0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$cgroup_subtree(r2, &(0x7f0000001580)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)}, 0x40) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0xb) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r0, 0xffffffffffffffff) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x4e3a0000) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[], 0x5) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000005c0)=0x400000000) 00:32:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x2c) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) r0 = syz_open_dev$audion(0x0, 0x0, 0x200002) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000140)={0x0, 0xb, 0xb, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]) fcntl$getflags(0xffffffffffffffff, 0x1) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$ax25(r0, &(0x7f00000000c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}, 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='cgroup\x00') r2 = syz_open_procfs(0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='cgroup\x00') sendfile(r2, r3, 0x0, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x100000000) 00:32:35 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x5) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b630000c7bab31e56bf6073"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000240)={{0xfc00, 0x9, 0xf8b0, 0x6}, 'syz0\x00', 0x1}) 00:32:35 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x692140) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f0000000240)) [ 261.307838] binder: 11659:11717 ioctl c0185500 20000200 returned -22 00:32:36 executing program 4: mkdir(0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630400"/13], 0x0, 0x0, 0x0}) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) mount$bpf(0x20000000, &(0x7f00000003c0)='./file1\x00', 0x0, 0x3805000, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x80000) mount$bpf(0x20000000, 0x0, 0x0, 0x5890, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 00:32:36 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00$\x00\a\a\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d000000030300000000000000"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0xd, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:32:36 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r4, r3) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x0, 0x9, 0x7}) 00:32:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0563044000000000006340400120986bea0aa1f1d2529c84bd247fc6bfdaed0ceb42a3af3b647871b6cbae41e5ad889284a477ae799e8d2d0c3e16d065cf14403bb0a7f7d397fd2531eeaa79f8d41faae1bd3afd4dc8093e7a3d65358636b3d90cfb7cc78ad4415e26c7b96c"], 0x0, 0x0, 0x0}) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000280)={0x0, 0x2, @start={0x600}}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSTAT(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="570000007d02000000500004000100000001000000000100000000000000000004317e5e000002000000ff07e6b50000a0071d482c5b6b657972696e6700000a002f6465762f70746d78000a002f6465762f70746d7800074107b509fd8a6266a38f7029d32cc9a911842a878eb973b1ff39c0dc300c5449c713250fef7b11c4c268dba9cb28cda846fa5e03ee213fa3f037ded0200d8e43b64bbe1d03675ff46ee665d69065"], 0x57) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x28000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000000340)="d7cfdf562b1240add314859c01ea03fe57a8642acbf501409e8ccdb92ac1b75fa5f4d6ea7284e9e7660888267bd5cc2c8afb7ae6a495c7915643d5c2096e51ebb1d661624aa044319c1bf0e0b40b532d8d9ef408713dba5adace66943b5d7ab9b39ea0e42f890737a6037b1d80f87f0e769b32b30c34805e07ba712ff67955ddc9f619eed1ba280046d73f7915b7feecc9138b3eef46e29ecab3d111cc43da", 0x9f}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="0bdd88a75443848248c5cdea130e464cc6f63a6765f1547606a137e13173880926a7514f0aeb64abc5b3986fec166f6446887f416f22cc0c5892ac32726129b55d09cd049fec14f89fafb2da1fc01c35982d", 0x52}], 0x3, 0x2) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, &(0x7f0000000140)=0xfffffffa) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) r6 = socket$packet(0x11, 0x2, 0x300) r7 = fcntl$dupfd(r4, 0x0, r6) r8 = dup2(r7, r3) dup2(r0, r3) ioctl$TCFLSH(r8, 0x8924, 0x743000) 00:32:36 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301}) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1000}) 00:32:36 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8, 0xfffffffffffffff7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_FPEMU(0xa, 0x2) preadv(0xffffffffffffffff, &(0x7f00000027c0)=[{&(0x7f0000000400)=""/4108, 0x100c}], 0x1, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x1, 0x6, 0x801, 0x0, 0x0, {0xaea58f20d3dbbadf, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4100}, 0x20000000) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='stack\x00') preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000100)=""/94, 0x5e}, {&(0x7f0000000180)=""/204, 0xcc}], 0x3, 0x0) [ 262.390218] QAT: Invalid ioctl [ 262.405447] mkiss: ax0: crc mode is auto. [ 262.423394] binder: BINDER_SET_CONTEXT_MGR already set [ 262.441471] binder_alloc: 11889: binder_alloc_buf, no vma [ 262.457543] binder_alloc: 11883: binder_alloc_buf, no vma [ 262.459133] binder: 11881:11905 ioctl 40046207 0 returned -16 [ 262.474494] binder: 11883:11902 ioctl 400454ca 20000040 returned -22 [ 262.494385] binder: 11881:11905 ioctl c0185879 20000000 returned -22 00:32:36 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x202000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000100)={'netpci0\x00', 0x7f, 0x47}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000080)={0x2, 'ip6_vti0\x00', {0xcf0b}, 0x8}) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104e5b9c67e1a7444ca0000000095f96488ae621f9121a3777b137855bda621beb3a5bc7189c60bb4c3f9494daba92f", @ANYRES32, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b146588c1b6a238e3c4ad8aaf50c71a900efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83dd7770e5485b3580e6c37cdf78ebabc56f554ff14196fa347774c415acdeb046e3cf8a5afb70f638ef519604604bdd8af70dd52c2"], 0x34}}, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a38be6ce3195ba39947ed664a97a6691275ce4df84e0153f8e84b712cf2cc092f60a7"], 0x25) 00:32:36 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00$\x00\a\a\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d000000030300000000000000"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0xd, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 262.755974] binder: BINDER_SET_CONTEXT_MGR already set [ 262.756056] binder: 11881:11911 ioctl c0185879 20000000 returned -22 [ 262.763108] binder: 11881:11892 ioctl 40046207 0 returned -16 00:32:36 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffdfffffffffffc, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000040)={{0x0, 0x0, @descriptor="eb636bffbb14035a"}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) [ 262.807936] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:32:36 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00$\x00\a\a\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d000000030300000000000000"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0xd, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 262.885652] mkiss: ax0: crc mode is auto. [ 262.890967] QAT: Invalid ioctl [ 262.942217] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:32:37 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x20000}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, &(0x7f0000000340), 0x80000) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000000900)=""/4096) ptrace(0x11, r0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x37f06f1240f76124, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x6, 0x1c24000}, 0x0, 0x53, 0x0, 0x1, 0x0, 0x4}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x40783, 0x0) io_submit(0x0, 0x0, &(0x7f00000006c0)) io_submit(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0x81e6c000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000440)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x10000, 0xfffffffffffffffe}, 0x1, 0x0, 0x80000000000001}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x900000, 0x3, 0x1, 0x1, 0x0, 0x0, 0x2}}, 0xe8) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) socket$inet6(0xa, 0x803, 0x10002) 00:32:37 executing program 4: lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/vmallocinfo\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x29) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) open(&(0x7f0000000080)='./file1\x00', 0x143042, 0x0) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r5, 0x0, 0x8100000, 0x0) splice(r1, 0x0, r4, 0x0, 0x8, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000000)=0xf7f) lseek(r0, 0x6c, 0x0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r7, r6) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) dup(r7) 00:32:37 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000400)="eb3c906d6b66732e6661748c5d04010002000270fff8bef27ab6718913622fad8578946279e799d417a5c82078630091811cc6a57484e4661c8ff858bd9b090000004525c9be6ec4bbbce8ca1960086883b6350e33d9ce646486a08aeb636ba235c0ea24183099229c38da1a20b55d872515f2eba0401117adbf05a92e1e30fd1cc4cec4739381647c455e3c9ca2ae27bbf752bb549cd5497986ceb54a25ae62eed7b03e81d3db877c743ee8abe0abfcbec44216e570faadde830d2970b2dd00640ea4a20647c1983a0f9c56f4b3545932716af46c7d7024130a32ae2f5b15e9d38fcc10ee2f69cd217da7674729c9251477a519b134", 0xf6, 0xfffffffffffffffc}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="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", 0x1c8) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000eeff"], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000002c0)={0xa0, 0x19, 0x2, {0x2080, {0x1, 0x4, 0x2000000001}, 0x50, 0x0, 0x0, 0x9, 0x5, 0x3f, 0x7, 0x1, 0xff, 0x80000000, 0xfffffffffffffffb, 0x5, 0x3, 0x0, 0x0, 0xa0c, 0x3, 0xe3}}, 0xa0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x101042, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r5 = semget$private(0x0, 0x7, 0x40) semctl$SEM_STAT(r5, 0x4, 0x12, &(0x7f0000000180)=""/103) write$binfmt_elf32(r4, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffa7) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000100)=0x3) [ 263.161638] FAT-fs (loop2): bogus number of reserved sectors [ 263.167977] FAT-fs (loop2): Can't find a valid FAT filesystem [ 263.184791] binder_alloc: 11889: binder_alloc_buf, no vma [ 263.283604] ================================================================== [ 263.290763] binder: 11960:11976 unknown command -1179648 [ 263.291757] BUG: KASAN: out-of-bounds in unwind_next_frame+0x1424/0x1700 [ 263.291770] Read of size 8 at addr ffff88803fd9fd78 by task syz-executor.0/11973 [ 263.291774] [ 263.291785] CPU: 0 PID: 11973 Comm: syz-executor.0 Not tainted 4.14.181-syzkaller #0 [ 263.291791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.291798] Call Trace: [ 263.297775] binder: 11960:11976 ioctl c0306201 200000c0 returned -22 [ 263.304558] dump_stack+0x1b2/0x283 [ 263.304577] ? unwind_next_frame+0x1424/0x1700 [ 263.304620] print_address_description.cold+0x54/0x1dc [ 263.304632] ? unwind_next_frame+0x1424/0x1700 [ 263.304641] kasan_report.cold+0xa9/0x2b9 [ 263.304653] unwind_next_frame+0x1424/0x1700 [ 263.316517] binder_alloc: 11960: binder_alloc_buf, no vma [ 263.322241] ? retint_kernel+0x1b/0x2d [ 263.322257] ? deref_stack_reg+0xc0/0xc0 00:32:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000380)="418629f9dd7269963fc56c7cb5ac5c201fccbeabe2ef4a2d0b05ec0b6830f816da21fbfd0b5e604b3d5cc57620bd69833ee7e374272e83a857cfeaaf9cceaef08eaa3e0879d7255f44b7cedc47eac3c7543cbd85016ba72e3d8c40b55df6ef2cb383cda11ea544291e8a23a28ff7122b7834b8bf089513aee8a48edb85d748251fcef086440b101f5b03e72f39370240549a695031cd1cca69b83ea4b81564bdfb5cab46b4c362100550fa1e745256f29871d2660710762a33bef3c8ff7b04a99057562ae031f2ee5f865b05ec67d5f49b37abad24b56629942f6a4a907f9c4e47a870d0124caea3a240958bc7b7a540a80776a547", 0xf5}, {&(0x7f0000000100)="fc2aec19f23140f34f9b50", 0xffffffffffffff56}], 0x2, 0x4) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x1}, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x2c0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) [ 263.322274] __save_stack_trace+0x6b/0xd0 [ 263.322287] ? retint_kernel+0x1b/0x2d [ 263.322297] save_stack_trace_tsk+0x34/0x40 [ 263.322388] proc_pid_stack+0x164/0x240 [ 263.322412] ? lock_trace+0xc0/0xc0 [ 263.404066] ? lock_release+0x441/0x7f0 [ 263.408238] proc_single_show+0xe7/0x150 [ 263.412382] seq_read+0x4d2/0x1130 [ 263.416317] ? seq_lseek+0x3d0/0x3d0 [ 263.420135] ? security_file_permission+0x82/0x1e0 [ 263.425348] ? rw_verify_area+0xe1/0x290 [ 263.429474] do_iter_read+0x3e3/0x5a0 [ 263.433323] vfs_readv+0xd3/0x130 [ 263.437015] ? compat_rw_copy_check_uvector+0x320/0x320 [ 263.442514] ? __might_fault+0x104/0x1b0 [ 263.446749] ? __fget+0x1ff/0x360 [ 263.450228] ? lock_acquire+0x170/0x3f0 [ 263.454307] ? lock_downgrade+0x6e0/0x6e0 [ 263.459471] ? __fget+0x226/0x360 [ 263.463562] do_preadv+0x161/0x200 [ 263.467636] ? do_readv+0x2c0/0x2c0 [ 263.471957] ? SyS_clock_settime+0x1a0/0x1a0 [ 263.476668] ? do_syscall_64+0x4c/0x640 [ 263.480742] ? SyS_writev+0x30/0x30 [ 263.484389] do_syscall_64+0x1d5/0x640 [ 263.488495] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 263.493688] RIP: 0033:0x45ca29 [ 263.496977] RSP: 002b:00007fcc9ed86c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 263.504884] RAX: ffffffffffffffda RBX: 00000000004fa6c0 RCX: 000000000045ca29 [ 263.512785] RDX: 0000000000000003 RSI: 0000000020000280 RDI: 0000000000000005 [ 263.520465] RBP: 000000000078c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 263.528045] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 263.535957] R13: 0000000000000862 R14: 00000000004cb43c R15: 00007fcc9ed876d4 [ 263.545996] [ 263.548525] The buggy address belongs to the page: [ 263.555662] page:ffffea0000ff67c0 count:0 mapcount:0 mapping: (null) index:0x0 [ 263.565485] flags: 0xfffe0000000000() [ 263.569789] raw: 00fffe0000000000 0000000000000000 0000000000000000 00000000ffffffff [ 263.579856] raw: 0000000000000000 0000000100000001 0000000000000000 0000000000000000 [ 263.589189] page dumped because: kasan: bad access detected [ 263.595386] [ 263.597127] Memory state around the buggy address: [ 263.602445] ffff88803fd9fc80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 263.610381] ffff88803fd9fd00: 00 00 00 00 f1 f1 f1 f1 00 00 f3 f3 00 00 00 00 [ 263.620356] >ffff88803fd9fd80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 263.629971] ^ [ 263.633548] ffff88803fd9fe00: f1 f1 f1 f1 00 f2 f2 f2 00 f2 f2 f2 00 00 f3 f3 [ 263.642114] ffff88803fd9fe80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 263.650809] ================================================================== [ 263.658837] Disabling lock debugging due to kernel taint [ 263.665642] Kernel panic - not syncing: panic_on_warn set ... [ 263.665642] [ 263.674102] CPU: 0 PID: 11973 Comm: syz-executor.0 Tainted: G B 4.14.181-syzkaller #0 00:32:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="bebc37573417944e7c2e03cd77c119789d8a3bd37ed060d2a27a9d8658601124aef9306601e9d9e910d8702b49885eeae2e2c79adbe7b9c69d191179dc90710a5b961ab56918e740d6484bcc8e02dfd85165c2055ee6ca47380c123f6afa4b64b1be4e4530cbcdd80b7a3b36edea7dee952aad83d71412f2ce0562d75ce8e78e07b7919375b738dad3cdadfa4453796749d043dc488dcd8b990b0a2e25d5cccfea2a80991321a4c85faa66693bd9e4532012ce66cd46f6dd811dda1e3bc40b8cfebc9012ad3324ac9a6e40c874e166536b0d9789053ef029fe5312a3fd1d05478810b025a1828aa8f97e8a05cde70c0b0b6d29fafdc0906e311584acb30f7f148809fd56e0455fb63c99715ea6b5bb10df741e63e6be60dd7bfd7a2d423f1761a84d33af84ec9f51f9414dd14f7a7825222faaf0741d4726b74659d3181772373eac23473ac228859a0ab8f1b6814637dc7f88b9015058a87a0aa1ce52f174b940aeed39b842fe52813d1dff1493379e14b2d188cfb19ce141faaf361e08c41afed6aeb68694725e4a7da9444d94ddf8a0a90066024447ab1d3ac4a4d2159047391ee9d1edb2516d40fbc9276957804563ea7f1acc92854b12bb8ba24cda6f11335ea7b88491883820e637afcf7df7bcec4611b4a532123533b59fd6e6758b02265d51c4b6e9f35a079fe93d73889910e606f5499f6b0e2c69f0ad2d5330254e9fc01e1cf6078e499208a44a7f9dec43b1d19ad62b11bf0dddf8c08b02ae24b771f30bf280903e9df9b97627f30e81e085f7ce8f0e540500eeaf2af13b945ff792fb0f7330c13e5d399305d19254881ad5dee59232c1c54e7d068fddfac69105f314d6bcd1959fd5d67dd7198f6b6912447b816b091815a1cd1fc4765f25b8e6974419d272a99badb9b226f8bf7cf3a7fdc670899d3f5a0f785cf686d5bf9f388ebb5f697fea841ef3690652a6b2ede1adfc2347b8b7f9897a523a3422b5bb3203b22fafe5996b91c64df2788dc9c9053ce0e27fcc9683563e82bd9497b70cfe747eda866bde0ce503e1afe32960ddd5d26a39995284758d6512ce0e124057833a67a0096a43336ed6cf5ae906378346606e27eb63ede50f666c27e00f8a2aea0042e348094fbd597b1ec1356d680290c4097c103070ba3df10c5c7445f8550af1361d701199fcfe7f79b4f7d947a06b64bbf60d33c0306f73bd3fb9e012681023d234c5d8927702e8ef643693b6d670791177bd7b31731bd351aa1a59a7cd1160772b0558a96a0ee21af013f0d84bda1542358ef0bad052f313853e0f32b43153200daa4bc5c4f51a314ead071cf67bb8177560bad893ff28953758441b6b2d909a35db8ab60a7bc798524ec75a53d0e5d43aff61827aad8b7584118152e3c7dbea9668133ff5ced4e8c70b2974afaca774e5dccbb3892a20c78682f8b9a716f3bc3c264ba3f1b5882f3a38669385ba6db9816c9cf08f462a6272a6c37649b6a40826ab7ceb2605f69e1bf65d0747163111f6897a1c85f10f1bf4a8aaf96b29ed15cd32fa24cac2ddda49d0fcde093c10e77fbcdc20c565ef2da60828ff953f2b82d7ed15c20ac2781708bf56cc551ae1bea960d7979f55fba87b67e5b76e48648503f84db9cf6dd44a799e28da8852082f06395a5da958be0d0c2ba74fcfddd525b565502f1709e5f9e51893974c890f39b2406c111442fba90f48739821e9908fd446f55aae6a7c00aec7c4ad2dafa911053ff49f57d79a8b0eb1747f40eb15ffa7aca8fc303460b16d448e74fae08d4b7434a86d4f6e2acb6e9ccac8ad3e6706de64c750d17d93261a2c34e69b55131604f4de452c6c08c2635dee21c6896c9d696706088155941ddb006f8d7b85978787f34200426488b433b3ad6906bb950b986267870289d2bffe1e0887ce3d9326af20b66fb230d4ace95c11536243a3b1f1ea00108f9c354a16ad3fab45f6ae536d3bdafad2712e9ff7184a80b7555cc506b2b094f01b73bcdee9cfe7483352e196346907f7c07931bebf967ee4798825a018d3565c29d27205e57347ba3498cb33e926809e8ac625b2c52afca8705c44ff8bd3e413fc3260dfa2ff4a099bfb074c4f77697581bb271a076e92bf8e26d4175ee95eae3af28a9ffe8abf59562d4a8d9766794e2347e6f07d7642a64d019bf6c0f96c6269a0787976b8c1446555dc66983d5a4ffa13cb7f5e47a0142cef49f28eabe8c1f3045a112bb841f2ac5ea79ccaea80b60dcb182e5c52535556702eef9a3338ce164d4fbf5c285d15ad307ae86315f1b122505841f7d8b09ec2facf4dfbc3a8253b5f0fe44fef960ecffd251e8ddb8f56b9ffa8f1da238961eafed5feea260000c8104a96541f9197e867534e81cf36850036676588e23a1035482014905934c9d49bc302bb9e9fbaf56008e27c3899bc4c56797a2de50887e6b770b848ac304317a1cfe408928016892e06a5d62272390fa5aec7c45a6e936d20ff009a0946d64acc35c542e2f6e4c7bd2c0e71bc93b76c47feb6474e5a9d2f7be3b0ddc67e82341d2cfe8314c2ccb587b4dc63d10eaf5e13afc1ed0fd9abd4f52a225cf2ebc5cbfac192440c754fbd3df589e72e03c05b7f120c85aaf82c07ab055345c61ab416bf385dbcd14c34e2a2e562970882a6f8e2bceb8a24d59c7db40edfafb3e66f44496b8575de7405b2d9fec42b40ef142efec36cd271b6207b6c668d24965de5ead6daa861679e0ff97185c841ea6865887c43fe44be254d2cf300b5b608d1bf58bf35866e10b178a35cf740cbff0c649e80851f130e00e35ea751f3e28dc835f1966d26bad82aff363925ab93437ea172b699e72e8949d6734f35b8556b138dadcc839797aca2a1e64fb63369a20007507b8af45cc0c66f6ded5d45e1c818bc89de4ce4298f098e35fbaeccd65e6508495acff22980bc3229fa863faf48e50be1bef352c0371874a6dc41799ac6686d80f214c900d6cb03769255537246dc3db2e61e119745044f5a52389dbabe153efcfcb0b6d3ff779a367e99a55b046aec47715b32a34b693bf2591ba71c0a03e1820fc9cacd15f2a0f5fbcb8d6f1401e3198910ee241463627e22093178a44c6ab0030436fbb4bcf580276120fc79b97fb2d73b9f26a1d4d37da7db64caa8b9f30fb1002d5e1eaf737373a9f203732547c4ad65d40fa91dd0e084c5dfce72e481349988474a443a15fd0b380fd1934346b1bd4cee07c021313dc69eb6888bf113c414310c7ad2bcd7e90663468d9d6cd5a3137d4592fc7bbcd076cfda7d7a846512025979c93216f046a6b4f77807a17caa183fd885a99646612f9f5c612281f4b08f86b8ac2fcb8695a6dcdc82e19cb239b6b757abf7bb93c1a3a0c70f05fd4884b19c6560f1e233ca3d03156338404a5b29fb34cb96cc2c21ea5bfd776ab4c900f63249417df63d301c7c789a08cfcedb44a10dd74265afdeeb84b3bb73d45d632b9695991d416b0d84764ef89259632ae961c10747e99f986589f9287e20b2616fc3c6c4fc3e51888c868b18b117fe3c7b37760bd324614c7238d433f3885346871a3746c6ca983c4712e9762b57cf570f42e9afe954338783d479fa3af9ccc3f4bb90ac2c0e4e253e7b54bf594a49d2f99b9f1d2b4b5f33e1472e4699010a562833905493dfda63216ab26846b076fc80291452f4314c2a6b52473af7a9133343006e62ce7f0a9696e8f4c874af2ec034271e644ed0b1d54bda457e83e9ed2ec4ab1318726729811fe8828f28c18727d195c5f46980182e790ad974c9418aa52a1b24b487c9f527a8290b455d759688f348f3815af29d197296173e027650c0f00da2e4a246dc42343ef6f998b08743813d2ddb9d6c9bbe4621300d0dd15560da9f34c07fe21f1e310be5fe936b6723bda266122d3831aba433a3951b92990d0546048cfd731a5d18ffa8e935d6a1dd56763f4caa2848ba46788a8ec29608d25c463d9d6cded45ae8a3d0f3b3b9aca3ff94e23281ff8cf500a245fc784c5afbd226f9becd9fbed3ddd44aa26ce1c5b8bbfd433a7163bf5f280139244cc7e50f84c773588c0a2f58627a24db7d3d5bd17f32072e8300bdd0344d7080b9877343f241a1f02026b9b8399267e2ea588c01ab0a3e0f942e37a051fa66fd148dd48a804a5ff80b5ac6bfe27083e11545eca3e403a0ce4ace2a24c6058b2dc75226260eacf5224ce18743f54e19f8dbb5b0077848b999a036077fe2fb4efcf7e03538dfe79d1fbed137d8c15c84694d582c7e5b0e6bcb8cab04097a2e824fb25c6b5d5506e3e4086a694d281ccdac65e96eddaf131d46f2ad5105e1ccbb1bbd9239cd73ec105c8d1636cc3094701ce826c1f2331e4d85870b7639e4e2cb4e13651b1b66c558df71d288187c8bbaf7137689d6324931cce22eec300bb2083e2abf274dd3f34309040aa006711277657c1b1ff5526d765cacbf91b22cdc755ed44901508c10de333dd126fc4b890cc9cb035a6ddf915ecc3c805a9bff67d901e4f5aeb4353c5ed1ef6f92590b0362acae8a8a54b3959d542a588432112aaa7a8a297930a352656f4e5565c10dbbcdffddf6125a4d2c1043f2feb6d31e3acc9ce2c9e374b28c602b01cab72768658b77bd7e0706cea5dc069fd700b0e29ad04eabd8fd579a80c3f39482d3ac338574e0c548e45fa649873ed7a684dce43f5bd023b5aa5eeb52f8c08dceef8644d8c553cb45d6bb0aa1c7adc928d47ced61a17eed3d869b9268decd67a72aa844c9e05eba7a88d9bdcdd78517a27e2c4c2021d589ad848f1c37d52e40fc8c0430b49b3d15cc9d7ec4123fee314dc5e67ffba13afb85ee7c3b8f0be23b801a7a56fccf281880ed00e46f425f33c9c7269e9185851625ff2c93d94f2c6cfb54376f4a0945e2aaae69b27877d034afcebb5a4427af74949a0e1c26ed295e59b0e7ad350528b8e5faf862ab81e8700c25990e7d3b8687513a059cee1d316aacb7f066851db7f46eca8f7ef09cf55a386b0921cf62a005920888512e9de8606696e320667ce594987be25a3b4e0ec1bfa799b1beb23b32eb6ef30b9b6bd41f5fea792afd383785d3bc22a6a4ec99f6954ed18193d4bd34007eb6a3a7c0867f000195d972cbefd71abce2aafd346b786bb0a4d7c71992bb25d8dedfa1b2e0f081f0a7481acd86bff78b34a23a7dc7db92026dd1ebcf59d04e99106ad46ecc04681af67bef188960bd77229a881492eeb2bafe5c224be28e339b54c53c4fb432bbe244b2598899fc9ffc3276c5a6325a582b60e9788933040af7815df6817cdbd4b640cdd2a9a4cb9389ec7b93839ae9f00cddc42294da71b935870841debeba960871221b47068ae1be1996fbbb59b1c447b7573f8601aca223ffccddc18b64ec92760c847b112a8fe7bb1dee83c740e598a70dcae0060f0dc81f34c0aa9d632680b4547fbe8f314546bc1f1cdf5dd2d63208b4f7991a0069486eae07cfed63aebcb7370d0a923b3c074d5b7fae5f5d7fb0e430a9c077c8d47156626df0c9ee4c18e4294ba7dedb9f847e2767df8987745dd4e7a4eaf03b695676879bfa0b96cb184645963f9a9ea70aa3b1328237f5d8e508571d6e06c7e7590a8b79567c39195bffc83c81055d170c59219dc26756b1e72e64d32e1247812e18694bf4e62fe65d5c1485b59effa289bc939ce4b2c9a0bb353b6f0ca529b90fc47b8776be1b036a63da934bac5a5fb91af74ba1128882bda602a8a05e2c890e52f2e627275406fcb701608469ab5a0cd57743aef63a33a7edba3433efa5c49d03e20b17e221f1cc45", 0x1000}], 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000200)={[], 0x3000, 0x5, 0x0, 0x0, 0xfc, 0x0, 0x3000, [], 0xa7}) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000001440)={0xff, {{0xa, 0x4e22, 0x7, @mcast2, 0x4}}, 0x0, 0x4, [{{0xa, 0x4e23, 0x2, @local, 0x66}}, {{0xa, 0x4e24, 0x5, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7}}, {{0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa20e}}, {{0xa, 0x4e23, 0x0, @private0, 0x2}}]}, 0x290) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, 0x0) [ 263.683838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.695072] Call Trace: [ 263.698441] dump_stack+0x1b2/0x283 [ 263.704372] panic+0x1f9/0x42d [ 263.708821] ? add_taint.cold+0x16/0x16 [ 263.715454] ? unwind_next_frame+0x1424/0x1700 [ 263.720915] kasan_end_report+0x43/0x49 [ 263.725965] kasan_report.cold+0x12f/0x2b9 [ 263.731681] unwind_next_frame+0x1424/0x1700 [ 263.738294] ? retint_kernel+0x1b/0x2d [ 263.743065] ? deref_stack_reg+0xc0/0xc0 [ 263.748280] __save_stack_trace+0x6b/0xd0 [ 263.752883] ? retint_kernel+0x1b/0x2d [ 263.759003] save_stack_trace_tsk+0x34/0x40 [ 263.764515] proc_pid_stack+0x164/0x240 [ 263.769786] ? lock_trace+0xc0/0xc0 [ 263.774195] ? lock_release+0x441/0x7f0 [ 263.778992] proc_single_show+0xe7/0x150 [ 263.783921] seq_read+0x4d2/0x1130 [ 263.787999] ? seq_lseek+0x3d0/0x3d0 [ 263.792989] ? security_file_permission+0x82/0x1e0 [ 263.800206] ? rw_verify_area+0xe1/0x290 [ 263.804909] do_iter_read+0x3e3/0x5a0 [ 263.810910] vfs_readv+0xd3/0x130 [ 263.815437] ? compat_rw_copy_check_uvector+0x320/0x320 [ 263.821689] ? __might_fault+0x104/0x1b0 [ 263.826350] ? __fget+0x1ff/0x360 [ 263.830951] ? lock_acquire+0x170/0x3f0 [ 263.835636] ? lock_downgrade+0x6e0/0x6e0 [ 263.839788] ? __fget+0x226/0x360 [ 263.843948] do_preadv+0x161/0x200 [ 263.848309] ? do_readv+0x2c0/0x2c0 [ 263.854945] ? SyS_clock_settime+0x1a0/0x1a0 [ 263.860576] ? do_syscall_64+0x4c/0x640 [ 263.865489] ? SyS_writev+0x30/0x30 [ 263.869470] do_syscall_64+0x1d5/0x640 [ 263.873831] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 263.879283] RIP: 0033:0x45ca29 [ 263.882639] RSP: 002b:00007fcc9ed86c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 263.891390] RAX: ffffffffffffffda RBX: 00000000004fa6c0 RCX: 000000000045ca29 [ 263.900615] RDX: 0000000000000003 RSI: 0000000020000280 RDI: 0000000000000005 [ 263.909466] RBP: 000000000078c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 263.916733] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 263.924082] R13: 0000000000000862 R14: 00000000004cb43c R15: 00007fcc9ed876d4 [ 263.933866] Kernel Offset: disabled [ 263.938589] Rebooting in 86400 seconds..