01 20000000 returned -22 21:54:57 executing program 2: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x4580, 0x0) [ 595.053930][T11888] Bluetooth: hci4: command 0x0406 tx timeout 21:54:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(r0, 0x40e, 0x0) 21:54:57 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x7b, &(0x7f0000000300), &(0x7f0000000340)=0x8) 21:54:57 executing program 2: r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x2, r0, 0x0, 0x0) 21:54:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x70, 0x90}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:getty_var_run_t:s0\x00'}}}, {{@ip={@loopback, @private, 0x0, 0x0, 'bridge_slave_1\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 21:54:57 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, &(0x7f0000000340)) [ 595.647280][T14097] binder: 14094:14097 unknown command 0 [ 595.653302][T14097] binder: 14094:14097 ioctl c0306201 20000000 returned -22 21:54:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x6000}, 0x0) 21:54:58 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0xd00, 0xc0460020, 0x0}) 21:54:58 executing program 3: r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0xc, 0x0, &(0x7f0000009880)) 21:54:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) read$qrtrtun(r0, 0x0, 0x0) 21:54:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x41, &(0x7f0000000140)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:getty_var_run_t:s0\x00'}}}, {{@ip={@loopback, @private, 0x0, 0x0, 'bridge_slave_1\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 21:54:58 executing program 2: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0xfffffb38}, 0x8) [ 596.514890][T14131] binder: 14124:14131 unknown command 0 [ 596.520687][T14131] binder: 14124:14131 ioctl c0306201 20000000 returned -22 [ 596.615898][T14133] binder: 14124:14133 unknown command 0 [ 596.621863][T14133] binder: 14124:14133 ioctl c0306201 20000000 returned -22 21:54:58 executing program 4: syz_mount_image$ocfs2(&(0x7f00000001c0)='ocfs2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)='%\x00') 21:54:58 executing program 3: r0 = socket(0x11, 0xa, 0x0) recvmsg$can_raw(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40) 21:54:59 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @remote, 0x4}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000000)=@assoc_value={r2}, &(0x7f0000000040)=0x8) 21:54:59 executing program 5: sendto$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 21:54:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0xe00, 0xc0460020, 0x0}) 21:54:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x0, 0x12, 0x101}, 0x14}}, 0x0) [ 597.259344][T14146] binder: 14145:14146 unknown command 0 [ 597.265312][T14146] binder: 14145:14146 ioctl c0306201 20000000 returned -22 [ 597.348006][T14146] binder: 14145:14146 unknown command 0 [ 597.354170][T14146] binder: 14145:14146 ioctl c0306201 20000000 returned -22 21:55:00 executing program 1: r0 = socket(0x22, 0x2, 0x2) recvmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10141) 21:55:00 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x9, 0x0, &(0x7f0000000040)) 21:55:00 executing program 4: r0 = socket(0x2b, 0x1, 0x1) bind$xdp(r0, &(0x7f0000000000)={0x2}, 0x10) 21:55:00 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x1100, 0xc0460020, 0x0}) 21:55:00 executing program 5: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x541b, 0x0) [ 597.857999][T14156] binder: 14155:14156 unknown command 0 [ 597.863924][T14156] binder: 14155:14156 ioctl c0306201 20000000 returned -22 [ 597.960008][T14161] binder: 14155:14161 unknown command 0 [ 597.965979][T14161] binder: 14155:14161 ioctl c0306201 20000000 returned -22 21:55:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8903, 0x0) 21:55:00 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x35, &(0x7f0000000000), 0x8) 21:55:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x0) 21:55:00 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x1200, 0xc0460020, 0x0}) 21:55:00 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @empty}]}, &(0x7f0000000280)=0x10) [ 598.570934][T14178] binder: 14172:14178 unknown command 0 [ 598.576756][T14178] binder: 14172:14178 ioctl c0306201 20000000 returned -22 21:55:00 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0xc2604111, &(0x7f0000000300)) [ 598.644679][T14179] binder: 14172:14179 unknown command 0 [ 598.650506][T14179] binder: 14172:14179 ioctl c0306201 20000000 returned -22 21:55:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x0, @private}, @l2tp={0x2, 0x0, @remote}, @ipx={0x4, 0x0, 0x0, "6c44e2f704cc"}, 0xf4}) semget(0x1, 0x0, 0x0) 21:55:01 executing program 1: r0 = socket$inet(0x2, 0x840000000003, 0x2) r1 = dup2(r0, r0) write$proc_mixer(r1, 0x0, 0x0) 21:55:01 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x30, &(0x7f0000000000)={0x0, 0x10, [], [@generic={0x0, 0x84, "da76ad640a41c0920e8a13170d1433c9d2be549728a8f2dd790a8257fe4897ba8b63fb1ab5c183cf8c3dd33799917e8371fbcce2bce8f984e01da4a046d496bf4df4816deeacc6dc4e9705f0645bac41dcd533b9d757a44dfa2f40460b1ff40b65279ed65419a82a5c0d8c91f0b11019f44deb99b3a0ffb93eec89c32a6d6f1c6f6a0a7f"}]}, 0x90) 21:55:01 executing program 5: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x0, @private=0x2}, @l2tp={0x2, 0x0, @remote}, @ipx={0x2, 0x0, 0x0, "6c44e2f704cc"}}) 21:55:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x2500, 0xc0460020, 0x0}) 21:55:01 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x6, 0x21, 0x0, &(0x7f0000000040)) 21:55:01 executing program 3: timer_create(0x8, 0x0, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) [ 599.350857][T14195] binder: 14189:14195 unknown command 0 [ 599.356636][T14195] binder: 14189:14195 ioctl c0306201 20000000 returned -22 [ 599.436781][T14200] binder: 14189:14200 unknown command 0 [ 599.442638][T14200] binder: 14189:14200 ioctl c0306201 20000000 returned -22 21:55:01 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x13, &(0x7f0000000000), 0x8) 21:55:01 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5411, &(0x7f0000000180)) 21:55:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x541b, &(0x7f0000000180)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}}) 21:55:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x5c00, 0xc0460020, 0x0}) 21:55:01 executing program 5: open(&(0x7f0000000000)='.\x00', 0x90000, 0x0) [ 599.968595][T14210] binder: 14205:14210 unknown command 0 [ 599.974637][T14210] binder: 14205:14210 ioctl c0306201 20000000 returned -22 [ 600.081146][T14213] binder: 14205:14213 unknown command 0 [ 600.086931][T14213] binder: 14205:14213 ioctl c0306201 20000000 returned -22 21:55:02 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 21:55:03 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x5, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000280)={0x0, 0x0, 0x0, {0xe, @vbi}}) 21:55:03 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = getpgid(0x0) wait4(r1, 0x0, 0x0, 0x0) 21:55:03 executing program 2: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x901, 0x0) write$dsp(r0, 0x0, 0x4a) 21:55:03 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x17, &(0x7f0000000000)={0x0, 0x1, [], [@generic={0x0, 0x6, "da76ad640a41"}]}, 0x10) 21:55:03 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0xfeffff, 0xc0460020, 0x0}) 21:55:03 executing program 3: r0 = socket(0xa, 0x1, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x40006162, 0x0, 0xffffffffffffff81) [ 601.080713][T14230] binder: 14224:14230 unknown command 0 [ 601.086450][T14230] binder: 14224:14230 ioctl c0306201 20000000 returned -22 [ 601.204284][T14231] binder: 14224:14231 unknown command 0 [ 601.210031][T14231] binder: 14224:14231 ioctl c0306201 20000000 returned -22 21:55:03 executing program 3: r0 = socket(0x2b, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x1d, &(0x7f0000000040)={&(0x7f0000002000/0x3000)=nil, 0x3000}, &(0x7f0000000100)=0x14) 21:55:03 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x405c5503, &(0x7f0000000000)={0x0, {0x0, 0x6}}) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_ABS_SETUP(r0, 0x5501, 0x0) 21:55:03 executing program 5: syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x0, 0x0) select(0x40, &(0x7f00000004c0)={0x8}, 0x0, &(0x7f0000000540)={0x20}, 0x0) 21:55:03 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x1000000, 0xc0460020, 0x0}) 21:55:04 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1c, 0x0, &(0x7f0000000040)=0x300) [ 601.664253][T14239] binder: 14236:14239 unknown command 0 [ 601.670054][T14239] binder: 14236:14239 ioctl c0306201 20000000 returned -22 [ 601.701813][T14240] input:  as /devices/virtual/input/input13 [ 601.769846][T14242] binder: 14236:14242 unknown command 0 [ 601.776277][T14242] binder: 14236:14242 ioctl c0306201 20000000 returned -22 21:55:04 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x806c4120, &(0x7f0000000300)) 21:55:04 executing program 1: shmat(0x0, &(0x7f0000000000/0x1000)=nil, 0x5000) syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x0) 21:55:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010"], 0x14}}, 0x0) 21:55:04 executing program 4: r0 = socket(0x2, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x541b, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x0}) 21:55:04 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x2000000, 0xc0460020, 0x0}) 21:55:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x4, 0x4) 21:55:04 executing program 3: r0 = socket(0xa, 0x5, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x0, 0x0, 0xc0fe}, 0x1c, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) [ 602.664058][T14269] binder: 14264:14269 unknown command 0 [ 602.669850][T14269] binder: 14264:14269 ioctl c0306201 20000000 returned -22 21:55:05 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'team_slave_1\x00'}}, 0x1e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x40047452, 0x0) 21:55:05 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x84, 0x7d, 0x0, 0x0) 21:55:05 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x30, &(0x7f0000000000)={0x0, 0x10, [], [@generic={0x0, 0x83, "da76ad640a41c0920e8a13170d1433c9d2be549728a8f2dd790a8257fe4897ba8b63fb1ab5c183cf8c3dd33799917e8371fbcce2bce8f984e01da4a046d496bf4df4816deeacc6dc4e9705f0645bac41dcd533b9d757a44dfa2f40460b1ff40b65279ed65419a82a5c0d8c91f0b11019f44deb99b3a0ffb93eec89c32a6d6f1c6f6a0a"}]}, 0x90) 21:55:05 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x0, 0x0}) 21:55:05 executing program 4: r0 = socket$isdn(0x22, 0x3, 0x0) ioctl$IMHOLD_L1(r0, 0x8982, 0x0) 21:55:05 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmsg$can_raw(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) 21:55:06 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x2, 0x0, &(0x7f0000000040)) 21:55:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x3000000, 0xc0460020, 0x0}) 21:55:06 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0xc0189436, &(0x7f0000000300)) 21:55:06 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x400454ca, &(0x7f0000000400)={"7f38f904de228b81360ed7b78b748958"}) 21:55:06 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x772, 0x5) 21:55:06 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendto$packet(r0, 0x0, 0x4, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) [ 604.223528][T14302] binder: 14294:14302 unknown command 0 [ 604.229322][T14302] binder: 14294:14302 ioctl c0306201 20000000 returned -22 [ 604.340320][T14303] binder: 14294:14303 unknown command 0 [ 604.346166][T14303] binder: 14294:14303 ioctl c0306201 20000000 returned -22 21:55:06 executing program 4: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_mtu=0x531100}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:55:06 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x3, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4afd0190"}, 0x0, 0x0, @userptr}) 21:55:06 executing program 3: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0x23, 0x0, 0xff00) 21:55:06 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0x5452, &(0x7f0000000280)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "df5074d0"}, 0x0, 0x0, @planes=0x0}) 21:55:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x4000000, 0xc0460020, 0x0}) 21:55:07 executing program 4: unshare(0x4000400) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) [ 605.076250][T14316] binder: 14315:14316 unknown command 0 [ 605.082087][T14316] binder: 14315:14316 ioctl c0306201 20000000 returned -22 21:55:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 21:55:07 executing program 3: prctl$PR_SET_MM_MAP_SIZE(0x2f, 0x4, 0x0) 21:55:07 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x12, 0x8b, 0x8, 0x9, 0x1}, 0x40) 21:55:07 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x405c5503, &(0x7f0000000000)={0x0, {0x0, 0x6}}) ioctl$UI_ABS_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x405c5503) 21:55:07 executing program 4: r0 = socket(0xa, 0x5, 0x0) sendmsg$can_raw(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x0) [ 605.544704][T14326] input:  as /devices/virtual/input/input15 [ 605.607737][T14334] input:  as /devices/virtual/input/input16 21:55:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x2, 0x0, 0x0) 21:55:08 executing program 3: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe4e, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61301926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a210da2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559"}, 0x28) 21:55:08 executing program 4: r0 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8905, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) 21:55:08 executing program 5: keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x57c199e7a390d674) [ 605.889310][T14316] binder: 14315:14316 unknown command 0 [ 605.895246][T14316] binder: 14315:14316 ioctl c0306201 20000000 returned -22 21:55:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x5000000, 0xc0460020, 0x0}) 21:55:08 executing program 2: sendmsg$unix(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)="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", 0xfc}], 0x1, 0x0, 0x80}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x890b, &(0x7f0000000080)) 21:55:08 executing program 5: connect$pptp(0xffffffffffffffff, 0x0, 0x0) [ 606.448713][T14353] binder: 14351:14353 unknown command 0 [ 606.454665][T14353] binder: 14351:14353 ioctl c0306201 20000000 returned -22 21:55:09 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x9, &(0x7f0000000240)={0x0, r0}, 0x10) 21:55:09 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x18, &(0x7f0000000000)={0x0, 0x1, [], [@generic={0x0, 0x6, "da76ad640a41"}]}, 0x10) 21:55:09 executing program 2: r0 = io_uring_setup(0x2, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x80000, 0x0, 0x11, r0, 0x0) select(0x40, &(0x7f0000000340), 0x0, 0x0, 0x0) 21:55:09 executing program 5: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={r2}, &(0x7f0000000100)=0x8) 21:55:09 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0xb, r1, r1, 0x0, 0x0) [ 607.230832][T14353] binder: 14351:14353 unknown command 0 [ 607.236535][T14353] binder: 14351:14353 ioctl c0306201 20000000 returned -22 21:55:09 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x3c, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'bond0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4, 0x3, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, 'cbq\x00'}]}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_INDEX, @ETHTOOL_A_BITSET_BIT_INDEX]}]}, @ETHTOOL_A_BITSET_VALUE={0x0, 0x4, "1d7571b4a40d45bd664c3166dd9d81475b21aec94f13b8f60813c2e34bb78286f9cee968607daf8c835d7ac36dad46807f34d8eb412903dafa3e67ae97d4af13373e70b62adc90362a6fc428af14890e1161"}]}]}, 0x3c}}, 0x0) 21:55:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000150a03"], 0x38}}, 0x0) 21:55:09 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000008c0)={0x0, 0x364}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000500)={0x0, @in={0x2, 0x4e22, @multicast2}, @generic={0x0, "bbd6112d91f2dbc43ca3026b66fc"}, @nfc={0x27, 0x0, 0x0, 0x3}, 0x3ff, 0x0, 0x0, 0x0, 0x23ff, &(0x7f0000000440)='veth0_to_team\x00', 0xdfbb, 0x6}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'gre0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'ip6erspan0\x00', r2}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x8}, 0x2, &(0x7f0000000080)={0x0}}, 0x0) 21:55:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x6000000, 0xc0460020, 0x0}) 21:55:10 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5411, &(0x7f0000000180)) [ 607.707679][T14386] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 607.730861][T14387] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 607.783527][T14386] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 607.873854][T14391] binder: 14389:14391 unknown command 0 [ 607.879656][T14391] binder: 14389:14391 ioctl c0306201 20000000 returned -22 21:55:10 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x7c, 0x0, &(0x7f0000000040)) 21:55:10 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) [ 607.975272][T14392] binder: 14389:14392 unknown command 0 [ 607.981280][T14392] binder: 14389:14392 ioctl c0306201 20000000 returned -22 21:55:10 executing program 1: r0 = socket(0x2b, 0x1, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14}, 0x14}}, 0x2404c080) 21:55:10 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x89b1, &(0x7f0000000040)={'ip6_vti0\x00'}) 21:55:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x7000000, 0xc0460020, 0x0}) 21:55:10 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$qrtrtun(r0, 0x0, 0x0) 21:55:10 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 21:55:10 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0xf0) [ 608.755449][T14408] binder: 14407:14408 unknown command 0 [ 608.761276][T14408] binder: 14407:14408 ioctl c0306201 20000000 returned -22 21:55:11 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x405c5503, &(0x7f0000000000)={0x0, {0x0, 0x6}}) ioctl$UI_ABS_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x40045568) 21:55:11 executing program 5: r0 = socket(0x2, 0x3, 0x3a) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xf0ff7f}}, 0x0) 21:55:11 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000180), 0x4) r0 = socket$inet(0x2, 0x3, 0x20) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 21:55:11 executing program 2: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x0, 0x0) ioctl$EVIOCGSND(r0, 0xc0045878, 0x0) [ 609.251452][T14420] input:  as /devices/virtual/input/input17 [ 609.281864][T14425] input:  as /devices/virtual/input/input18 21:55:11 executing program 4: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x14, r0, 0x1, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 21:55:11 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0xc0045004, &(0x7f0000000300)) getresuid(&(0x7f0000000000), &(0x7f0000000040), 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000640)={&(0x7f0000000140)="ca7ef5b7e631fc2268044011dc318919b005ad0d54117a4f6161280d178a5e5d567d4d981468407a41dcc4f944b0f66a58ba004041cbc9801a982817edc16013", &(0x7f0000000200)=""/219, &(0x7f0000000300)="f056e63884d4709f378c51f6d0f046b102c39cc29abad4a98cf05848200140ce77548f8c4957877efd454cd5ad8d57c8fd08c955e51f73aaa85f6567740c14bac4b716e17094c974922593dffc78dd9f1061493c89680d0f4905f1548129cbc068c4e8288f40e17b8b5e376d762c51abe168510e5e0bb71d1be3ec009aad314a3de4826f59231fff0e659b996ed44bcc19572cc496e18c83e349957f7bb4519df15428d91119adb257f93b063b7c025d64ef23924eaf0524fdefdc58dede81dfa61edaba670fc1de5a3f1ddb6e", &(0x7f0000000400)="9a4e288c087ea2dc6fad9c968722f692d12d4fe5b6", 0x10000}, 0x38) [ 609.526624][T14435] binder: 14407:14435 unknown command 0 [ 609.532590][T14435] binder: 14407:14435 ioctl c0306201 20000000 returned -22 21:55:12 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='comm\x00') 21:55:12 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001200)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x5452, &(0x7f0000001240)={{0x8}}) 21:55:12 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x6, 0x12, 0x0, &(0x7f0000000040)) 21:55:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x8000000, 0xc0460020, 0x0}) 21:55:12 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x49, 0x0, 0x0) [ 610.599105][T14482] binder: 14476:14482 unknown command 0 [ 610.605081][T14482] binder: 14476:14482 ioctl c0306201 20000000 returned -22 [ 610.715868][T14486] binder: 14476:14486 unknown command 0 [ 610.721875][T14486] binder: 14476:14486 ioctl c0306201 20000000 returned -22 21:55:13 executing program 5: r0 = socket(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x88, 0x2, 0x0, 0x0) 21:55:13 executing program 4: r0 = syz_init_net_socket$ax25(0x6, 0x5, 0x0) sendto$ax25(r0, 0x0, 0x0, 0x2000c000, 0x0, 0x0) 21:55:13 executing program 2: add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r0 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$set_timeout(0x3, r0, 0x0) 21:55:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x9000000, 0xc0460020, 0x0}) 21:55:13 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0xb, 0x0, &(0x7f0000000040)) 21:55:13 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0xc0045004, 0x0) getresuid(0x0, 0x0, 0x0) 21:55:13 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @empty}}) [ 611.577714][T14521] binder: 14515:14521 unknown command 0 [ 611.584064][T14521] binder: 14515:14521 ioctl c0306201 20000000 returned -22 [ 611.656888][T14522] binder: 14515:14522 unknown command 0 [ 611.663077][T14522] binder: 14515:14522 ioctl c0306201 20000000 returned -22 21:55:14 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x72, 0x0, &(0x7f0000000040)) 21:55:14 executing program 3: r0 = socket(0x2c, 0x3, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x11b, 0x3, 0x0, 0x0) 21:55:14 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x680, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', 0x532f00}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020, 0x0, 0x0}, 0x2020) syz_genetlink_get_family_id$net_dm(&(0x7f0000000140)='NET_DM\x00') write$FUSE_INIT(r2, &(0x7f00000000c0)={0x50, 0x0, r3, {0x7, 0x1f, 0xe73, 0x480010, 0xffff, 0x8001, 0x7fffffff, 0x7ff}}, 0x50) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x5452, &(0x7f0000000400)={"7f38f904de228b81360ed7b78b748958"}) 21:55:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0xa000000, 0xc0460020, 0x0}) 21:55:14 executing program 4: r0 = socket(0x11, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={0x0}}, 0x0) [ 612.564697][T14552] binder: 14546:14552 unknown command 0 [ 612.571168][T14552] binder: 14546:14552 ioctl c0306201 20000000 returned -22 21:55:14 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040}) 21:55:15 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x1e, &(0x7f0000000000), 0x8) 21:55:15 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0xc, 0x0, &(0x7f0000000040)) 21:55:15 executing program 2: iopl(0x3) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0xffaf) [ 613.335616][T14552] binder: 14546:14552 unknown command 0 [ 613.341963][T14552] binder: 14546:14552 ioctl c0306201 20000000 returned -22 21:55:15 executing program 4: mount$fuse(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x20000, 0x0) 21:55:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0xb000000, 0xc0460020, 0x0}) 21:55:15 executing program 3: r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0xf, 0x0, &(0x7f0000009880)) [ 613.844279][T14594] binder: 14592:14594 unknown command 0 [ 613.850477][T14594] binder: 14592:14594 ioctl c0306201 20000000 returned -22 21:55:16 executing program 1: r0 = socket$isdn(0x22, 0x3, 0x0) ioctl$IMHOLD_L1(r0, 0xc0045878, 0x0) 21:55:16 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105511, &(0x7f00000000c0)={{0x2, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 21:55:16 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x1b, &(0x7f0000000000)={0x0, 0x1, [], [@generic={0x0, 0x7, "da76ad640a41c0"}]}, 0x18) 21:55:16 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x4b, 0x0, 0x0) 21:55:16 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x14, &(0x7f0000000240)={0x0}, 0x10) 21:55:16 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xdf, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f00000000c0)={0x0, 0x0, 0x0}) 21:55:16 executing program 2: setreuid(0x0, 0xee00) keyctl$get_persistent(0x16, 0xee01, 0xfffffffffffffffb) 21:55:16 executing program 5: bpf$MAP_CREATE(0x2, &(0x7f0000000100), 0x40) 21:55:16 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1a, 0x0, &(0x7f0000000040)) [ 614.663982][T14594] binder: 14592:14594 unknown command 0 [ 614.670209][T14594] binder: 14592:14594 ioctl c0306201 20000000 returned -22 21:55:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0xc000000, 0xc0460020, 0x0}) 21:55:17 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r0, 0x0, &(0x7f0000000240)=0x55) 21:55:17 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x181901, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x80044d5c, 0x0) [ 615.208455][T14619] binder: 14618:14619 unknown command 0 [ 615.214879][T14619] binder: 14618:14619 ioctl c0306201 20000000 returned -22 [ 615.284417][T14622] binder: 14618:14622 unknown command 0 [ 615.290775][T14622] binder: 14618:14622 ioctl c0306201 20000000 returned -22 21:55:17 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x6, 0x15, 0x0, &(0x7f0000000040)) 21:55:17 executing program 5: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x84, 0x7c, 0x0, 0x0) 21:55:17 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x14, 0x0, &(0x7f0000000340)) 21:55:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0xd000000, 0xc0460020, 0x0}) 21:55:17 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/meminfo\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000000), 0x8) read$dsp(r0, &(0x7f0000000200)=""/15, 0xf) 21:55:18 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000740)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8918, &(0x7f0000000040)={@remote, 0x0, r2}) [ 615.820790][T14634] binder: 14631:14634 unknown command 0 [ 615.826701][T14634] binder: 14631:14634 ioctl c0306201 20000000 returned -22 21:55:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xd, &(0x7f0000000000)=0x4, 0x4) 21:55:18 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x6, 0x1a, 0x0, &(0x7f0000000040)) 21:55:18 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x8) 21:55:18 executing program 4: r0 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8913, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) 21:55:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x31, &(0x7f0000000140)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:getty_var_run_t:s0\x00'}}}, {{@ip={@loopback, @private, 0x0, 0x0, 'bridge_slave_1\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 21:55:18 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0xc0189436, &(0x7f0000005780)={'ip6tnl0\x00', 0x0}) [ 616.568969][T14634] binder: 14631:14634 unknown command 0 [ 616.575472][T14634] binder: 14631:14634 ioctl c0306201 20000000 returned -22 21:55:19 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8942, &(0x7f0000000040)={'ip6_vti0\x00'}) 21:55:19 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000080)={0x0, [[0x1], [0xff], [0x82]], [], [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) 21:55:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0xe000000, 0xc0460020, 0x0}) 21:55:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 21:55:19 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x4, &(0x7f0000000000), 0x8) 21:55:19 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89a1, &(0x7f0000000380)={'sit0\x00', 0x0}) [ 617.327082][T14668] binder: 14660:14668 unknown command 0 [ 617.332983][T14668] binder: 14660:14668 ioctl c0306201 20000000 returned -22 [ 617.400807][T14671] binder: 14660:14671 unknown command 0 [ 617.406649][T14671] binder: 14660:14671 ioctl c0306201 20000000 returned -22 21:55:19 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @remote, 0x4}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x71, &(0x7f0000000000)=@assoc_value={r2}, &(0x7f0000000040)=0x8) 21:55:19 executing program 3: r0 = socket$inet(0x2, 0x840000000003, 0x7) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) 21:55:19 executing program 2: openat$tun(0xffffffffffffff9c, 0x0, 0x45e080, 0x0) 21:55:19 executing program 5: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x0, @private}, @l2tp={0x2, 0x0, @remote}, @ipx={0x2, 0x0, 0x0, "6c44e2f704cc"}}) 21:55:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x10000000, 0xc0460020, 0x0}) 21:55:20 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x23, &(0x7f0000000000)={0x0, 0x13, [], [@generic={0x0, 0x98, "da76ad640a41c0920e8a13170d1433c9d2be549728a8f2dd790a8257fe4897ba8b63fb1ab5c183cf8c3dd33799917e8371fbcce2bce8f984e01da4a046d496bf4df4816deeacc6dc4e9705f0645bac41dcd533b9d757a44dfa2f40460b1ff40b65279ed65419a82a5c0d8c91f0b11019f44deb99b3a0ffb93eec89c32a6d6f1c6f6a0a7f6b0635513431655cf5632a3467322a3e4d4a16a6"}]}, 0xa8) [ 618.071003][T14684] binder: 14681:14684 unknown command 0 [ 618.076886][T14684] binder: 14681:14684 ioctl c0306201 20000000 returned -22 21:55:20 executing program 1: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) 21:55:20 executing program 2: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000280)=0x80, 0x4) 21:55:20 executing program 5: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x3, 0x0, @private}, @l2tp={0x2, 0x0, @remote}, @ipx={0x4, 0x0, 0x0, "6c44e2f704cc"}}) 21:55:20 executing program 3: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_mtu=0x531100}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) [ 618.856043][T14684] binder: 14681:14684 unknown command 0 [ 618.862276][T14684] binder: 14681:14684 ioctl c0306201 20000000 returned -22 21:55:21 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x8000001, 0x48202) write$FUSE_INTERRUPT(r0, 0x0, 0x0) 21:55:21 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x83, 0x0, &(0x7f0000000340)) 21:55:21 executing program 5: r0 = syz_init_net_socket$ax25(0x6, 0x5, 0x0) ioctl$sock_SIOCADDRT(r0, 0x541b, &(0x7f0000001500)={0x300, @qipcrtr, @vsock={0x28, 0x0, 0x0, @hyper}, @can}) 21:55:21 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000041c0)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3000c05, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:55:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x11000000, 0xc0460020, 0x0}) 21:55:21 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x21, &(0x7f0000000300), &(0x7f0000000340)=0x8) 21:55:21 executing program 5: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x0, @private}, @l2tp={0x2, 0x0, @remote}, @ipx={0x4, 0x0, 0x6, "6c44e2f704cc"}}) 21:55:21 executing program 4: r0 = socket(0x2b, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000380)=ANY=[@ANYRESOCT]}) [ 619.477583][T14714] binder: 14713:14714 unknown command 0 [ 619.483934][T14714] binder: 14713:14714 ioctl c0306201 20000000 returned -22 21:55:22 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x1328}}, 0x0) 21:55:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x7c, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x0, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x7c}}, 0x0) 21:55:22 executing program 5: socketpair(0x21, 0x0, 0x2, &(0x7f0000000040)) 21:55:22 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x18, &(0x7f0000000300), &(0x7f0000000340)=0x8) 21:55:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x891e, &(0x7f0000000100)={'wg1\x00'}) [ 620.277303][T14714] binder: 14713:14714 unknown command 0 [ 620.283159][T14714] binder: 14713:14714 ioctl c0306201 20000000 returned -22 [ 620.371709][T14732] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 21:55:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x12000000, 0xc0460020, 0x0}) 21:55:22 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x8}, 0x2000000c, &(0x7f0000000080)={0x0}}, 0x3) 21:55:22 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x1eb4c41f03122f7f) 21:55:22 executing program 4: r0 = socket(0x11, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 21:55:22 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x0, 0x0) r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x6, r1) ioctl$SNDCTL_DSP_SPEED(r0, 0x80045002, &(0x7f0000000000)) [ 620.675378][T11888] Bluetooth: hci5: command 0x0406 tx timeout [ 620.807110][T14738] binder: 14736:14738 unknown command 0 [ 620.813081][T14738] binder: 14736:14738 ioctl c0306201 20000000 returned -22 [ 620.899478][T14740] binder: 14736:14740 unknown command 0 [ 620.905240][T14740] binder: 14736:14740 ioctl c0306201 20000000 returned -22 21:55:23 executing program 3: socket(0x1, 0x3, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8936, &(0x7f0000000080)={'wg1\x00', @ifru_addrs=@nfc={0x27, 0x1}}) ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_map={0x4, 0x8, 0x3, 0xfa, 0x81, 0x4}}) 21:55:23 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x25000000, 0xc0460020, 0x0}) [ 621.517579][T14754] binder: 14751:14754 unknown command 0 [ 621.523623][T14754] binder: 14751:14754 ioctl c0306201 20000000 returned -22 [ 621.578201][T14757] binder: 14751:14757 unknown command 0 [ 621.584067][T14757] binder: 14751:14757 ioctl c0306201 20000000 returned -22 21:55:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89b0, &(0x7f0000005780)={'ip6tnl0\x00', &(0x7f0000005700)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private1}}) 21:55:24 executing program 4: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 21:55:24 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x4148, 0x0) 21:55:24 executing program 2: clock_getres(0xdee23a5c81616fbc, 0x0) 21:55:24 executing program 3: ioperm(0x0, 0x7, 0xffff) waitid(0x0, 0x0, 0x0, 0x0, 0x0) 21:55:24 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x5c000000, 0xc0460020, 0x0}) [ 622.126283][T14771] binder: 14765:14771 unknown command 0 [ 622.132292][T14771] binder: 14765:14771 ioctl c0306201 20000000 returned -22 21:55:24 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x541b, 0x0) [ 622.208229][T14771] binder: 14765:14771 unknown command 0 [ 622.214151][T14771] binder: 14765:14771 ioctl c0306201 20000000 returned -22 21:55:24 executing program 3: r0 = io_uring_setup(0x41a, &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x0, 0x4088013, r0, 0x8000000) 21:55:24 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000980)='/dev/cachefiles\x00', 0x42042, 0x0) write$FUSE_DIRENT(r0, &(0x7f00000009c0)={0x10}, 0x10) 21:55:24 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, 0x0, &(0x7f0000000080)) 21:55:24 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0xfdfdffff, 0xc0460020, 0x0}) 21:55:25 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044104, &(0x7f0000000300)) [ 622.825864][T14790] binder: 14789:14790 unknown command 0 [ 622.831815][T14790] binder: 14789:14790 ioctl c0306201 20000000 returned -22 [ 622.913122][T14791] binder: 14789:14791 unknown command 0 [ 622.919207][T14791] binder: 14789:14791 ioctl c0306201 20000000 returned -22 21:55:25 executing program 1: r0 = socket(0x11, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x2022, 0x0, 0x0) 21:55:25 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00'}, 0x45c) ioctl$UI_ABS_SETUP(r0, 0x5501, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x40045565, 0x0) 21:55:25 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, 0x0, 0x0, 0x0, 0x0, "4d93e1ff9ffbee1cefb220479de377d7fc8bd585e38a9b6b1b301189c36374197f3f0ffada5e9fcada220fcb5fa70412338491f136b82777e4ac0656269c02b3c637515621cc870efc988088a9f5193d"}, 0xd7) 21:55:25 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0xfffffdfd, 0xc0460020, 0x0}) 21:55:25 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x24}}, 0x0) 21:55:25 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x48, 0x0, 0x0) [ 623.732299][T14804] input: syz0 as /devices/virtual/input/input19 [ 623.771521][T14806] binder: 14801:14806 unknown command 0 [ 623.777199][T14806] binder: 14801:14806 ioctl c0306201 20000000 returned -22 [ 623.856373][T14811] input: syz0 as /devices/virtual/input/input20 [ 623.920807][T14812] binder: 14801:14812 unknown command 0 [ 623.926507][T14812] binder: 14801:14812 ioctl c0306201 20000000 returned -22 21:55:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x28, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 21:55:26 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x8}, 0x2000000c, &(0x7f0000000080)={0x0, 0x2}}, 0x9600) 21:55:26 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001200)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505330, &(0x7f0000001240)={{0x8}}) 21:55:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xae60, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2}) 21:55:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0xfffffe00, 0xc0460020, 0x0}) [ 624.565764][T14830] binder: 14827:14830 unknown command 0 [ 624.571751][T14830] binder: 14827:14830 ioctl c0306201 20000000 returned -22 21:55:26 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x2) read$FUSE(r0, 0x0, 0x0) write$FUSE_ATTR(r0, &(0x7f00000000c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x10000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01, 0xee00}}}, 0x78) [ 624.685380][T14835] binder: 14827:14835 unknown command 0 [ 624.691239][T14835] binder: 14827:14835 ioctl c0306201 20000000 returned -22 21:55:27 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3c, &(0x7f0000000000), 0x8) 21:55:27 executing program 2: mount$fuse(0x7fffffffefff, 0x0, 0x0, 0x0, 0x0) 21:55:27 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x7fffdf003000, 0x0, 0x11, r0, 0x0) 21:55:27 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x101020) read$FUSE(r0, 0x0, 0x0) 21:55:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0xfeffff00000000, 0xc0460020, 0x0}) 21:55:27 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x2) read$FUSE(r0, 0x0, 0x0) write$FUSE_ATTR(r0, &(0x7f00000000c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x10000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01, 0xee00}}}, 0x78) [ 625.368193][T14859] binder: 14853:14859 unknown command 0 [ 625.374394][T14859] binder: 14853:14859 ioctl c0306201 20000000 returned -22 21:55:27 executing program 2: syz_mount_image$f2fs(&(0x7f0000000200)='f2fs\x00', 0x0, 0x101, 0x4, &(0x7f0000000880)=[{&(0x7f0000000400), 0x0, 0x4}, {0x0, 0x0, 0x7fff}, {0x0, 0x0, 0x9}, {&(0x7f0000000280)="1d2cc4ffba0ffe951f6ff73952a89e0636d3005fc02f01b1d128892e78e0c1621ccdee42dc6ca270f168c0abbf36aad1c6", 0x31, 0x3ff}], 0x0, &(0x7f0000000940)={[{@grpjquota={'grpjquota', 0x3d, '/'}}, {@nobarrier='nobarrier'}, {@test_dummy_encryption='test_dummy_encryption'}, {@fsync_mode_strict='fsync_mode=strict'}, {@alloc_mode_reuse='alloc_mode=reuse'}, {@discard='discard'}], [{@subj_user={'subj_user', 0x3d, '#@:/\\)'}}, {@dont_hash='dont_hash'}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@permit_directio='permit_directio'}, {@context={'context', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, 'batadv\x00'}}]}) [ 625.458699][T14861] binder: 14853:14861 unknown command 0 [ 625.464390][T14861] binder: 14853:14861 ioctl c0306201 20000000 returned -22 21:55:27 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x6, 0x1e, 0x0, &(0x7f0000000040)) 21:55:27 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000780)='fuse\x00', &(0x7f00000007c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000004180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0]) 21:55:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x100000000000000, 0xc0460020, 0x0}) 21:55:28 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x42, 0x0, 0x0) 21:55:28 executing program 2: r0 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8922, &(0x7f0000000100)={'veth0_to_hsr\x00', &(0x7f0000000500)=ANY=[]}) 21:55:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8980, &(0x7f0000005780)={'ip6tnl0\x00', 0x0}) 21:55:28 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpv3={0xa, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x2e) [ 626.609070][T14881] veth0_to_hsr: mtu greater than device maximum 21:55:28 executing program 5: prctl$PR_CAP_AMBIENT(0x8, 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x0) [ 626.664372][T14882] binder: 14876:14882 unknown command 0 [ 626.671011][T14882] binder: 14876:14882 ioctl c0306201 20000000 returned -22 [ 626.757351][T14884] binder: 14876:14884 unknown command 0 [ 626.763386][T14884] binder: 14876:14884 ioctl c0306201 20000000 returned -22 21:55:29 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x49, &(0x7f0000000000)={0x0, 0x1, [], [@generic={0x0, 0x6, "da76ad640a41"}]}, 0x10) 21:55:29 executing program 3: r0 = syz_init_net_socket$ax25(0x6, 0x5, 0x0) ioctl$sock_SIOCADDRT(r0, 0x5411, 0x0) 21:55:29 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x200000000000000, 0xc0460020, 0x0}) 21:55:29 executing program 5: r0 = socket(0x23, 0x2, 0x0) getsockname$l2tp6(r0, 0x0, &(0x7f0000000480)) 21:55:29 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) [ 627.285872][T14896] binder: 14894:14896 unknown command 0 [ 627.291892][T14896] binder: 14894:14896 ioctl c0306201 20000000 returned -22 21:55:29 executing program 3: r0 = socket(0x25, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x2c}}, 0x0) 21:55:29 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x7c, &(0x7f0000000300), &(0x7f0000000340)=0x8) 21:55:30 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0xe, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4afd0190"}, 0x0, 0x0, @userptr}) 21:55:30 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x6, 0x1c, 0x0, &(0x7f0000000040)) [ 628.068332][T14896] binder: 14894:14896 unknown command 0 [ 628.074177][T14896] binder: 14894:14896 ioctl c0306201 20000000 returned -22 21:55:30 executing program 1: setreuid(0x0, 0xee00) socket$phonet_pipe(0x23, 0x5, 0x2) 21:55:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(r0, 0x3, 0x0) 21:55:30 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00', 0xe00}}) 21:55:30 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x300000000000000, 0xc0460020, 0x0}) 21:55:30 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x6b) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) 21:55:30 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af03, 0x0) [ 628.865263][T14919] binder: 14916:14919 unknown command 0 [ 628.871429][T14919] binder: 14916:14919 ioctl c0306201 20000000 returned -22 [ 628.987472][T14920] binder: 14916:14920 unknown command 0 [ 628.993384][T14920] binder: 14916:14920 ioctl c0306201 20000000 returned -22 21:55:31 executing program 2: iopl(0x3) getresgid(&(0x7f0000000140), &(0x7f0000000280), &(0x7f00000002c0)) 21:55:31 executing program 3: r0 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8929, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) 21:55:31 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001200)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505331, &(0x7f0000001240)) 21:55:31 executing program 5: clock_settime(0x69ae8221a81e9d67, &(0x7f0000000040)={0x0, 0x3938700}) 21:55:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x400000000000000, 0xc0460020, 0x0}) [ 629.594598][T14942] binder: 14939:14942 unknown command 0 [ 629.600737][T14942] binder: 14939:14942 ioctl c0306201 20000000 returned -22 21:55:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/exec\x00') write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0) 21:55:32 executing program 1: bpf$MAP_CREATE(0x10, &(0x7f0000000040)={0x0, 0x10}, 0x2c) 21:55:32 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x4161, 0x0) 21:55:32 executing program 2: r0 = socket(0xa, 0x1, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81) 21:55:32 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000013000b"], 0x38}}, 0x0) 21:55:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000140)="3b6f13643b081f0189b54de2172fc3dc9923bafd", 0x14) [ 630.198195][T14954] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:55:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1d, &(0x7f0000000000), 0x4) 21:55:32 executing program 4: r0 = socket(0x2b, 0x1, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) [ 630.386757][T14942] binder: 14939:14942 unknown command 0 [ 630.392937][T14942] binder: 14939:14942 ioctl c0306201 20000000 returned -22 21:55:32 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8927, &(0x7f0000005780)={'ip6tnl0\x00', 0x0}) 21:55:32 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', 0x531004}) 21:55:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x500000000000000, 0xc0460020, 0x0}) 21:55:33 executing program 2: bpf$BPF_LSM_PROG_LOAD(0x2, &(0x7f0000000040)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:55:33 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x5501, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 630.986628][T14968] binder: 14967:14968 unknown command 0 [ 630.992570][T14968] binder: 14967:14968 ioctl c0306201 20000000 returned -22 [ 631.076887][T14969] binder: 14967:14969 unknown command 0 [ 631.082773][T14969] binder: 14967:14969 ioctl c0306201 20000000 returned -22 21:55:33 executing program 1: syz_mount_image$f2fs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f0000000940)) 21:55:33 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={0x0}}, 0x0) 21:55:33 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8921, &(0x7f0000000040)={'ip6_vti0\x00'}) 21:55:33 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x560000, &(0x7f0000000000)='.\x00', 0x0, 0x1e497, 0x0) 21:55:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x600000000000000, 0xc0460020, 0x0}) 21:55:33 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) [ 631.706796][T14989] binder: 14983:14989 unknown command 0 [ 631.712834][T14989] binder: 14983:14989 ioctl c0306201 20000000 returned -22 [ 631.799066][T14992] binder: 14983:14992 unknown command 0 [ 631.804851][T14992] binder: 14983:14992 ioctl c0306201 20000000 returned -22 21:55:34 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$llc(r0, &(0x7f0000000000)=""/78, 0x4e, 0x0, 0x0, 0x0) 21:55:34 executing program 5: r0 = socket(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0xa, 0x5}, 0xc, &(0x7f0000000080)={0x0, 0xfffffff7}}, 0x0) 21:55:34 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x16, 0x0, &(0x7f0000000040)) 21:55:34 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc008551a, &(0x7f00000000c0)={{0x2, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 21:55:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x700000000000000, 0xc0460020, 0x0}) 21:55:34 executing program 2: getresgid(&(0x7f0000000140), 0x0, 0x0) [ 632.423753][T15004] binder: 15001:15004 unknown command 0 [ 632.429807][T15004] binder: 15001:15004 ioctl c0306201 20000000 returned -22 21:55:35 executing program 1: keyctl$restrict_keyring(0x11, 0xfffffffffffffffb, 0x0, 0x0) 21:55:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) 21:55:35 executing program 3: r0 = socket(0x2b, 0x1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x6, 0xd, 0x0, 0x0) 21:55:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local}}}}) 21:55:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) [ 633.246314][T15016] binder: 15001:15016 unknown command 0 [ 633.252305][T15016] binder: 15001:15016 ioctl c0306201 20000000 returned -22 21:55:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x800000000000000, 0xc0460020, 0x0}) 21:55:35 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0xc0001, 0x0) write$vga_arbiter(r0, 0x0, 0x0) 21:55:35 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x4004556d, 0x0) 21:55:35 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x84, 0xd, 0x0, 0x0) 21:55:35 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x18, r0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) [ 633.775363][T15030] binder: 15029:15030 unknown command 0 [ 633.781349][T15030] binder: 15029:15030 ioctl c0306201 20000000 returned -22 21:55:36 executing program 2: r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x6, 0x0, &(0x7f0000009880)) 21:55:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x14, 0x14, 0x1}, 0x14}}, 0x0) [ 634.592587][T15030] binder: 15029:15030 unknown command 0 [ 634.598608][T15030] binder: 15029:15030 ioctl c0306201 20000000 returned -22 21:55:37 executing program 1: prctl$PR_SET_MM_MAP_SIZE(0x39, 0x531000, 0x0) 21:55:37 executing program 4: r0 = socket(0x2b, 0x1, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x2404c080) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000) 21:55:37 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x1b, 0x0, 0x0) 21:55:37 executing program 3: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 21:55:37 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18030000000000000000000000000000850000002c4193982e4338f48c2b99e0ea9f88d32e1b7b420000009500"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 21:55:37 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x900000000000000, 0xc0460020, 0x0}) [ 635.018929][T15059] binder: 15052:15059 unknown command 0 [ 635.024717][T15059] binder: 15052:15059 ioctl c0306201 20000000 returned -22 [ 635.111807][T15059] binder: 15052:15059 unknown command 0 [ 635.117698][T15059] binder: 15052:15059 ioctl c0306201 20000000 returned -22 21:55:37 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x1, r2, 0x1, 0x0, 0x6, @random="75130da8c5d7"}, 0x14) 21:55:37 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x541b, &(0x7f0000000100)={'wg1\x00'}) 21:55:37 executing program 2: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0x2a, 0x0, 0x0) 21:55:37 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$xdp(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1e}, 0x10, 0x0}, 0x0) 21:55:37 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0xa00000000000000, 0xc0460020, 0x0}) 21:55:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000100), 0x4) [ 635.738286][T15072] binder: 15071:15072 unknown command 0 [ 635.743962][T15072] binder: 15071:15072 ioctl c0306201 20000000 returned -22 [ 635.853660][T15074] binder: 15071:15074 unknown command 0 [ 635.859557][T15074] binder: 15071:15074 ioctl c0306201 20000000 returned -22 21:55:38 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0xa0c65affb2de1ac3}) 21:55:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x8, 0x6, 0x801}, 0x14}}, 0x0) 21:55:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}) 21:55:38 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x4, 0x0, 0x0) 21:55:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0xb00000000000000, 0xc0460020, 0x0}) 21:55:38 executing program 5: socket$kcm(0x11, 0x2, 0x300) socket$pppoe(0x18, 0x1, 0x0) pselect6(0x40, &(0x7f0000000040)={0x1f}, 0x0, 0x0, 0x0, 0x0) [ 636.364499][T15091] binder: 15084:15091 unknown command 0 [ 636.370535][T15091] binder: 15084:15091 ioctl c0306201 20000000 returned -22 21:55:38 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @dev, 0x1}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={r1}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000380)={r2}, &(0x7f0000000440)=0x8) 21:55:38 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x8864, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 21:55:38 executing program 5: r0 = socket$inet(0x2, 0x3, 0x20) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 21:55:38 executing program 3: unshare(0x4000400) r0 = socket(0x10, 0x2, 0x0) sendto$isdn(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:55:39 executing program 4: r0 = socket(0x2b, 0x1, 0x1) getsockname$l2tp6(r0, 0x0, &(0x7f0000000480)) 21:55:39 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x6b) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xffffffffffffffe4, &(0x7f00000001c0)={0x0}}, 0x0) [ 637.141907][T15091] binder: 15084:15091 unknown command 0 [ 637.147833][T15091] binder: 15084:15091 ioctl c0306201 20000000 returned -22 21:55:39 executing program 1: r0 = socket(0x15, 0x5, 0x0) bind$llc(r0, 0x0, 0x0) 21:55:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x2}, 0x0) 21:55:39 executing program 4: r0 = socket$isdn(0x22, 0x3, 0x0) ioctl$IMHOLD_L1(r0, 0x4020940d, 0x0) 21:55:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0xc00000000000000, 0xc0460020, 0x0}) 21:55:39 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x24, 0x1, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x1081, r0}, 0x38) 21:55:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x3, 0x4) [ 637.872981][T15122] binder: 15118:15122 unknown command 0 [ 637.878961][T15122] binder: 15118:15122 ioctl c0306201 20000000 returned -22 21:55:40 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x19, &(0x7f0000000000), 0x8) 21:55:40 executing program 5: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x0, @private}, @l2tp={0x2, 0x0, @remote}, @ipx={0x2, 0x0, 0x0, "6c44e2f704cc"}, 0x5}) 21:55:40 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f0000000040)=@random={'trusted.', '\x00'}, 0x0, 0x0) 21:55:40 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f40)={&(0x7f0000000040)={0x2, 0x3}, 0x2000004c, &(0x7f0000002f00)={0x0}}, 0x6000000) 21:55:40 executing program 5: r0 = socket(0xa, 0x5, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 638.652002][T15122] binder: 15118:15122 unknown command 0 [ 638.658226][T15122] binder: 15118:15122 ioctl c0306201 20000000 returned -22 21:55:40 executing program 4: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r0, 0x0, 0x0) 21:55:41 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @dev, 0x1}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x10, &(0x7f0000000300)={r1}, &(0x7f0000000340)=0x8) 21:55:41 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0xd00000000000000, 0xc0460020, 0x0}) 21:55:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x100, 0x1efd6, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5452, &(0x7f0000000040)={r2}) 21:55:41 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x19, 0x0, &(0x7f0000000040)) 21:55:41 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8970, &(0x7f0000005780)={'ip6tnl0\x00', 0x0}) 21:55:41 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000300)={&(0x7f0000000200)={0xa}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) [ 639.506360][T15150] binder: 15147:15150 unknown command 0 [ 639.512148][T15150] binder: 15147:15150 ioctl c0306201 20000000 returned -22 [ 639.602850][T15154] binder: 15147:15154 unknown command 0 [ 639.608872][T15154] binder: 15147:15154 ioctl c0306201 20000000 returned -22 21:55:41 executing program 2: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0x2a, 0x0, 0xff00) 21:55:42 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000040)) 21:55:42 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x0, 0x0) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x7fffdf000000, 0x0, 0x12, r0, 0x0) 21:55:42 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x30, &(0x7f0000000000)={0x0, 0x10, [], [@generic={0x0, 0x7f, "da76ad640a41c0920e8a13170d1433c9d2be549728a8f2dd790a8257fe4897ba8b63fb1ab5c183cf8c3dd33799917e8371fbcce2bce8f984e01da4a046d496bf4df4816deeacc6dc4e9705f0645bac41dcd533b9d757a44dfa2f40460b1ff40b65279ed65419a82a5c0d8c91f0b11019f44deb99b3a0ffb93eec89c32a6d6f"}]}, 0x90) 21:55:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0xe00000000000000, 0xc0460020, 0x0}) [ 640.195862][T15166] binder: 15164:15166 unknown command 0 [ 640.201901][T15166] binder: 15164:15166 ioctl c0306201 20000000 returned -22 21:55:42 executing program 3: get_thread_area(&(0x7f0000000000)={0x2, 0x1000, 0x1000, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1}) r0 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x0, @private}, @l2tp={0x2, 0x0, @multicast1}, @ipx={0x2, 0x0, 0x0, "6c44e2f704cc"}, 0x3ff}) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x7ff, 0x80800) [ 640.322846][T15168] binder: 15164:15168 unknown command 0 [ 640.329002][T15168] binder: 15164:15168 ioctl c0306201 20000000 returned -22 [ 640.706000][T15176] sctp: [Deprecated]: syz-executor.1 (pid 15176) Use of struct sctp_assoc_value in delayed_ack socket option. [ 640.706000][T15176] Use struct sctp_sack_info instead 21:55:43 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x6b) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0x0, 0x0) 21:55:43 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f40)={&(0x7f0000000040)={0x2, 0x3}, 0x2000004c, &(0x7f0000002f00)={0x0}}, 0x0) 21:55:43 executing program 4: r0 = syz_io_uring_setup(0x7463, &(0x7f0000000180)={0x0, 0xde9f}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) io_uring_enter(r0, 0x21df, 0x0, 0x0, 0x0, 0x0) 21:55:43 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 21:55:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x1000000000000000, 0xc0460020, 0x0}) 21:55:43 executing program 3: openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f00000023c0)={0x10, 0xfffffffffffffffe, r1}, 0x10) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 641.783137][T15189] binder: 15184:15189 unknown command 0 [ 641.789133][T15189] binder: 15184:15189 ioctl c0306201 20000000 returned -22 [ 641.909141][T15194] binder: 15184:15194 unknown command 0 [ 641.914923][T15194] binder: 15184:15194 ioctl c0306201 20000000 returned -22 21:55:44 executing program 5: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8936, 0x0) 21:55:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(r0, 0x5, &(0x7f00000000c0)={0x0, 0x3}) 21:55:44 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x35, 0x0, 0x0) 21:55:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/127, 0x7f}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e005d8) shutdown(r0, 0x0) shutdown(r3, 0x0) 21:55:44 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x1100000000000000, 0xc0460020, 0x0}) [ 642.538195][T15216] binder: 15209:15216 unknown command 0 [ 642.544017][T15216] binder: 15209:15216 ioctl c0306201 20000000 returned -22 [ 642.622259][T15218] binder: 15209:15218 unknown command 0 [ 642.628231][T15218] binder: 15209:15218 ioctl c0306201 20000000 returned -22 21:55:44 executing program 5: unshare(0x4000400) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) 21:55:45 executing program 1: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) waitid(0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 21:55:45 executing program 4: r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x6, r0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00') 21:55:45 executing program 2: syz_open_dev$video4linux(&(0x7f0000000740)='/dev/v4l-subdev#\x00', 0x11a40000000, 0x4200) 21:55:45 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x1200000000000000, 0xc0460020, 0x0}) 21:55:45 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, 0x1412, 0xc2bb2fd14df3080f, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x55}]}, 0x18}}, 0x0) 21:55:45 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0x400448c9, &(0x7f0000000280)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "df5074d0"}, 0x0, 0x0, @planes=0x0}) [ 643.586107][T15237] binder: 15233:15237 unknown command 0 [ 643.592068][T15237] binder: 15233:15237 ioctl c0306201 20000000 returned -22 21:55:45 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x17, &(0x7f0000000000), 0x8) [ 643.712067][T15242] binder: 15233:15242 unknown command 0 [ 643.717907][T15242] binder: 15233:15242 ioctl c0306201 20000000 returned -22 21:55:46 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x13, &(0x7f0000000000)={0x0, 0x1, [], [@generic={0x0, 0x6, "da76ad640a41"}]}, 0x10) 21:55:46 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x40049409, &(0x7f0000005780)={'ip6tnl0\x00', 0x0}) 21:55:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x2500000000000000, 0xc0460020, 0x0}) 21:55:46 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x42, &(0x7f0000000000), 0x4) 21:55:46 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x18, 0x0, &(0x7f0000000140)) [ 644.513139][T15254] binder: 15252:15254 unknown command 0 [ 644.519254][T15254] binder: 15252:15254 ioctl c0306201 20000000 returned -22 21:55:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f40)={&(0x7f0000000040)={0x2, 0x3}, 0x2000004c, &(0x7f0000002f00)={0x0, 0xe000}}, 0x0) 21:55:47 executing program 4: syz_mount_image$cifs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000dc0)='./file0\x00', 0x200, 0x0) 21:55:47 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x0, @dev, 'virt_wifi0\x00'}}, 0x2000001e) 21:55:47 executing program 2: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x84, 0xa, 0x0, 0x0) 21:55:47 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x8, 0x0, &(0x7f0000000340)) [ 645.285803][T15254] binder: 15252:15254 unknown command 0 [ 645.291896][T15254] binder: 15252:15254 ioctl c0306201 20000000 returned -22 21:55:47 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x5c00000000000000, 0xc0460020, 0x0}) 21:55:48 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f40)={&(0x7f0000000040)={0x2, 0x3}, 0x2000004c, &(0x7f0000002f00)={0x0}}, 0xe000) 21:55:48 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x0, 0x41) write$fb(r0, 0x0, 0xf0ffffff7f0000) 21:55:48 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0) 21:55:48 executing program 2: r0 = socket(0x10, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x10e, 0x3, 0x0, 0x0) [ 646.013184][T15274] binder: 15273:15274 unknown command 0 [ 646.019073][T15274] binder: 15273:15274 ioctl c0306201 20000000 returned -22 21:55:48 executing program 4: r0 = socket(0x18, 0x0, 0x2) getpeername$llc(r0, 0x0, &(0x7f00000000c0)) 21:55:48 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000980)='/dev/cachefiles\x00', 0x42042, 0x0) write$FUSE_DIRENT(r0, 0x0, 0x0) [ 646.801573][T15274] binder: 15273:15274 unknown command 0 [ 646.807654][T15274] binder: 15273:15274 ioctl c0306201 20000000 returned -22 21:55:49 executing program 1: socket$kcm(0x2b, 0x1, 0x0) 21:55:49 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x70, 0x0, &(0x7f0000000040)) 21:55:49 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001200)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0bc5310, &(0x7f0000001240)={{0x8}}) 21:55:49 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @dev, 0x1}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={r1}, &(0x7f0000000340)=0x8) 21:55:49 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x23, 0xc5d, 0xc}, 0x40) bpf$MAP_DELETE_BATCH(0x18, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 21:55:49 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0xfdfdffff00000000, 0xc0460020, 0x0}) [ 647.341939][T15302] binder: 15294:15302 unknown command 0 [ 647.348053][T15302] binder: 15294:15302 ioctl c0306201 20000000 returned -22 21:55:49 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'bond_slave_1\x00'}) 21:55:49 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002880)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100000000000040000007"], 0x14}}, 0x0) 21:55:49 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x11, 0x19, 0x0, 0x0) 21:55:50 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x1b, &(0x7f0000000300), &(0x7f0000000340)=0x8) [ 648.102540][T15302] binder: 15294:15302 unknown command 0 [ 648.108375][T15302] binder: 15294:15302 ioctl c0306201 20000000 returned -22 21:55:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x9}, 0x0) 21:55:50 executing program 3: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0x0, 0x0) 21:55:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8901, 0x0) 21:55:50 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x84, 0x6b, 0x0, 0x0) 21:55:50 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460025, 0x0}) [ 649.186571][T15328] binder: 15320:15328 unknown command 0 [ 649.192367][T15328] binder: 15320:15328 ioctl c0306201 20000000 returned -22 21:55:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8982, &(0x7f0000000040)={'veth1_vlan\x00', @ifru_mtu}) [ 649.256599][T15329] binder: 15320:15329 unknown command 0 [ 649.262384][T15329] binder: 15320:15329 ioctl c0306201 20000000 returned -22 21:55:51 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x89f4, 0x0) 21:55:51 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0xc, &(0x7f0000000000), 0x4) 21:55:51 executing program 2: r0 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5411, &(0x7f0000000180)) 21:55:51 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460029, 0x0}) 21:55:52 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x43, &(0x7f0000000000)={0x0, 0x1, [], [@generic={0x0, 0x6, "da76ad640a41"}]}, 0x10) 21:55:52 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x405c5503, &(0x7f0000000000)={0x0, {0x0, 0x6}}) ioctl$UI_ABS_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x4004556b) 21:55:52 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x9, 0x0}) [ 649.920470][T15342] binder: 15341:15342 unknown command 0 [ 649.926678][T15342] binder: 15341:15342 ioctl c0306201 20000000 returned -22 21:55:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x1, 0x9, 0x5}, 0x14}}, 0x0) [ 649.988009][T15342] binder: 15341:15342 unknown command 0 [ 649.993866][T15342] binder: 15341:15342 ioctl c0306201 20000000 returned -22 [ 650.317837][T15348] input:  as /devices/virtual/input/input22 [ 650.382774][T15356] input:  as /devices/virtual/input/input23 21:55:53 executing program 1: socket(0x0, 0x3, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x405c5503, &(0x7f0000000000)={0x4, {0x0, 0x6, 0x66f, 0xfffffffc, 0x2, 0x505}}) ioctl$UI_ABS_SETUP(r0, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000080)) 21:55:53 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) socket$caif_seqpacket(0x25, 0x5, 0x3) r2 = dup2(r1, r0) r3 = fcntl$dupfd(r0, 0x406, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r5, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x100, 0x70bd29, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x10, 0xc0460020, 0x0}) 21:55:53 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x405c5503, &(0x7f0000000000)={0x0, {0x0, 0x6}}) ioctl$UI_ABS_SETUP(r0, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000080)) 21:55:53 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x19, &(0x7f0000000000)={0x0, 0x1, [], [@generic={0x0, 0x6, "da76ad640a41"}]}, 0x10) 21:55:53 executing program 4: prctl$PR_SET_MM_MAP_SIZE(0x3a, 0x531000, 0x0) 21:55:53 executing program 2: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, 0x0, 0x0) [ 651.230491][T15371] input:  as /devices/virtual/input/input24 [ 651.261325][T15374] binder: 15368:15374 unknown command 0 [ 651.267337][T15374] binder: 15368:15374 ioctl c0306201 20000000 returned -22 [ 651.309890][T15375] input:  as /devices/virtual/input/input25 21:55:53 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00') read$char_usb(r0, &(0x7f0000000140)=""/139, 0x8b) 21:55:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x5, 0x8, 0x101}, 0x14}}, 0x0) 21:55:53 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x82, 0x0, 0x0) 21:55:54 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 21:55:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, 0x0, 0x8, 0x5}, 0x14}}, 0x0) [ 652.051494][T15374] binder: 15368:15374 unknown command 0 [ 652.057409][T15374] binder: 15368:15374 ioctl c0306201 20000000 returned -22 21:55:54 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x541b, &(0x7f0000000300)) [ 652.509931][T15397] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2048 sclass=netlink_tcpdiag_socket pid=15397 comm=syz-executor.3 [ 652.719108][T15403] input:  as /devices/virtual/input/input26 [ 652.804078][T15409] input:  as /devices/virtual/input/input27 21:55:55 executing program 1: bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 21:55:55 executing program 2: r0 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8906, 0x0) 21:55:55 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000140)='}\xb1\x00') r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:55:55 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010801"], 0x14}}, 0x0) 21:55:55 executing program 4: r0 = socket(0x25, 0x5, 0x0) recvmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x141) 21:55:55 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x5, 0x0, 0x4) [ 653.111596][T15424] binder: 15419:15424 unknown command 0 [ 653.117653][T15424] binder: 15419:15424 ioctl c0306201 20000000 returned -22 [ 653.180779][T15425] binder: 15419:15425 unknown command 0 [ 653.186667][T15425] binder: 15419:15425 ioctl c0306201 20000000 returned -22 21:55:55 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0xc0844123, &(0x7f0000000300)=0x81) 21:55:55 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="03"], 0x38}}, 0x0) 21:55:55 executing program 5: r0 = socket(0x23, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x541b, &(0x7f0000000040)) 21:55:55 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x73, 0x0, &(0x7f0000000340)) 21:55:55 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f00000001c0)=@v2={0x2, @adiantum, 0x0, [], "4128eb0d5503558d0afa72bf22bee336"}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) [ 653.595260][T15432] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 21:55:56 executing program 5: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) semctl$GETPID(0x0, 0x0, 0xb, 0x0) [ 653.942926][T15438] binder: 15437:15438 unknown command 0 [ 653.949280][T15438] binder: 15437:15438 ioctl c0306201 20000000 returned -22 [ 654.033933][T15439] binder: 15437:15439 unknown command 0 [ 654.039821][T15439] binder: 15437:15439 ioctl c0306201 20000000 returned -22 21:55:56 executing program 1: sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x0) 21:55:56 executing program 2: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/raw/rawctl\x00', 0x0, 0x0) 21:55:56 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8982, &(0x7f0000000100)={'wg1\x00'}) 21:55:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000038c0)=ANY=[@ANYBLOB="34140000bfb077"], 0x1434}}, 0x0) 21:55:56 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x3, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r3 = openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x20080, 0x44, 0x1}, 0x18) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f00000004c0)=[@dead_binder_done], 0x0, 0x4000, 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f00000001c0)={r2, 0x3, 0x6, 0x2}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r4, 0x4010ae74, &(0x7f0000000200)={0xfffff908, 0x95b2, 0x200}) r5 = dup2(r2, r0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:55:56 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8940, 0x0) [ 654.637540][T15449] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=45247 sclass=netlink_tcpdiag_socket pid=15449 comm=syz-executor.3 21:55:57 executing program 3: r0 = socket(0x1d, 0x3, 0x1) recvmsg(r0, &(0x7f0000002a80)={0x0, 0x0, 0x0}, 0x40) 21:55:57 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x3, 0x0, &(0x7f0000000040)) 21:55:57 executing program 4: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 21:55:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000000)=""/168, &(0x7f00000000c0)=0xa8) 21:55:57 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="14010000140005b30000450000000000028419c7b1"], 0x114}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x48, r4, 0x1, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0x34}]}, 0x48}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x154, r4, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x78}]}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb51}]}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x30}, 0xfffffff7}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2c, @mcast1, 0x40}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}}}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x400c0}, 0x404c080) r5 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) getsockopt$ax25_int(r5, 0x101, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0x4) [ 655.273016][T15468] binder: 15463:15468 unknown command 0 [ 655.279026][T15468] binder: 15463:15468 ioctl c0306201 20000000 returned -22 [ 655.345508][T15468] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 655.382508][T15468] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=45 sclass=netlink_tcpdiag_socket pid=15468 comm=syz-executor.0 21:55:57 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x73, 0x0, &(0x7f0000000040)) [ 655.457169][T15474] binder: 15463:15474 unknown command 0 [ 655.463001][T15474] binder: 15463:15474 ioctl c0306201 20000000 returned -22 [ 655.519299][T15476] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 655.547692][T15468] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=45 sclass=netlink_tcpdiag_socket pid=15468 comm=syz-executor.0 21:55:58 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) read$proc_mixer(r1, &(0x7f00000000c0)=""/117, 0x75) 21:55:58 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 21:55:58 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0xc, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x2}]}}]}, 0x38}}, 0x0) 21:55:58 executing program 4: r0 = socket(0x2, 0x3, 0x3a) sendmmsg$unix(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=@abs, 0x6e, 0x0}], 0x1, 0x0) 21:55:58 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) r2 = dup3(r1, r1, 0x80000) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4}, 0x50) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, r4, {0x7}}, 0x18) r5 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000002bb23b426a7f2cd2bb087bbc1b58512b391e252ba04693e5e56eec7346b3813e9fc5000c0dfd692c1cdb6ff1e960c0a1cbe1cd5e48ea9bbc0573e339e98ae3abd33dfa8fe13d313bfee0f67617f8e419fe14fc32c64621339abf62b24ef8940d3b2d409925615c830e6ade4acaddcd"], 0x0, 0xc0460020, 0x0}) 21:55:58 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0xb, 0x6, 0x209e20, 0x2, 0x1}, 0x2c) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x3, &(0x7f00000010c0)={r0, &(0x7f0000000000), 0x0}, 0x20) [ 656.026219][T15487] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! [ 656.055790][T15488] binder: 15484:15488 unknown command 0 [ 656.061740][T15488] binder: 15484:15488 ioctl c0306201 20000000 returned -22 [ 656.116200][T15493] binder: 15484:15493 unknown command 721420288 [ 656.122577][T15493] binder: 15484:15493 ioctl c0306201 20000500 returned -22 21:55:58 executing program 4: r0 = socket(0x11, 0xa, 0x0) getsockname$l2tp6(r0, 0x0, &(0x7f0000000480)) [ 656.195180][T15493] binder: 15484:15493 unknown command 0 [ 656.200998][T15493] binder: 15484:15493 ioctl c0306201 20000000 returned -22 [ 656.221883][T15495] binder: 15484:15495 unknown command 721420288 [ 656.228621][T15495] binder: 15484:15495 ioctl c0306201 20000500 returned -22 21:55:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x9effffff}, 0x0) 21:55:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x2, &(0x7f0000000140)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:getty_var_run_t:s0\x00'}}}, {{@ip={@loopback, @private, 0x0, 0x0, 'bridge_slave_1\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 21:55:58 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0xc0460020, 0x0}) 21:55:58 executing program 5: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x84, 0x77, 0x0, 0x0) 21:55:58 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed}, 0xa) [ 656.781842][T15505] binder: 15503:15505 unknown command 0 [ 656.788259][T15505] binder: 15503:15505 ioctl c0306201 20000000 returned -22 [ 656.856512][T15508] binder: 15503:15508 unknown command 0 [ 656.862342][T15508] binder: 15503:15508 ioctl c0306201 20000000 returned -22 21:55:59 executing program 1: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x4, 0x0, &(0x7f0000009880)) 21:55:59 executing program 2: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000002440)='/dev/audio1\x00', 0x80081, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0xc0189436, &(0x7f0000002480)) 21:55:59 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8981, 0x0) 21:55:59 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8981, 0x0) 21:55:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) prctl$PR_SET_FPEXC(0xc, 0x100000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="044ae13feec28c1620eaafb6a8ab5acbf24fb255e3315d1127998a4915a5d506dd83009c8335e5fa7d8f1c1ad8bd473988ac248da14da7c5fe6ef8d73a7eeacb974649b3f61d033b2ba3f33e998731fe7c9bb8f82cf9b722e9c76b2da373098a919c84a28e9d9b80ec55c3c84b514e3d6885434ea2125aee900cc19adf792c60e4ed00387314f29041caec00a5b5ebff2b9d3698fe811df630fe640247c9d6af6881e0d32fc68db50582cca221b64cd51df414ff752d5a6737861ea0f4c31147176dec391c5c382214e0f2dc07e6d13680f5febfa1f54ef2992148f74b0e52edd8856026fe8058aea7ef1ad074217d962257dbed512b3558552ffd44dce9ec26ebb2255005ca497c42c02665f9f1c0d98fec92c16167b30debbfa86692ab27e6a2"], 0x0, 0xc0460020, 0x0}) 21:55:59 executing program 4: bpf$MAP_CREATE(0x14, 0x0, 0x0) [ 657.448200][T15522] binder: 15519:15522 unknown command 0 [ 657.453884][T15522] binder: 15519:15522 ioctl c0306201 20000000 returned -22 [ 657.500278][T15522] binder: 15519:15522 unknown command 1071729156 [ 657.506869][T15522] binder: 15519:15522 ioctl c0306201 20000500 returned -22 [ 657.551787][T15526] binder: 15519:15526 unknown command 0 [ 657.557630][T15526] binder: 15519:15526 ioctl c0306201 20000000 returned -22 [ 657.573519][T15526] binder: 15519:15526 unknown command 1071729156 [ 657.580238][T15526] binder: 15519:15526 ioctl c0306201 20000500 returned -22 21:55:59 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$inet(r0, &(0x7f0000005440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 21:56:00 executing program 4: setuid(0xee00) r0 = socket(0x10, 0x803, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40404208}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0) 21:56:00 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x0, 0x0) r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x6, r1) ioctl$SNDCTL_DSP_SPEED(r0, 0x80045006, &(0x7f0000000000)) 21:56:00 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) recvmmsg(r2, &(0x7f00000009c0)=[{{&(0x7f0000000140)=@nl, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/250, 0xfa}], 0x1, &(0x7f00000002c0)=""/196, 0xc4}, 0x5}, {{&(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000440)}, {&(0x7f0000000540)=""/250, 0xfa}, {&(0x7f0000000640)=""/126, 0x7e}, {&(0x7f00000006c0)=""/135, 0x87}], 0x4, &(0x7f0000000780)=""/82, 0x52}, 0x1f}, {{&(0x7f0000000800)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000880)=""/190, 0xbe}], 0x1, &(0x7f0000000980)=""/25, 0x19}}], 0x3, 0x12026, &(0x7f0000000a40)={0x77359400}) r4 = getpid() sched_setaffinity(r4, 0x1, &(0x7f0000000040)=0x5) wait4(r4, &(0x7f0000000440), 0x20000000, &(0x7f0000000b00)) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:00 executing program 2: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000005a80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000500)=@isdn, 0x80, 0x0}}], 0x2, 0x60080c0) 21:56:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7, 0x0, 0xff}]}) [ 658.268865][T15538] binder: 15536:15538 unknown command 0 [ 658.274711][T15538] binder: 15536:15538 ioctl c0306201 20000000 returned -22 [ 658.349327][T15540] binder: 15536:15540 unknown command 0 [ 658.354998][T15540] binder: 15536:15540 ioctl c0306201 20000000 returned -22 21:56:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r0, 0x0, 0xcc) 21:56:01 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x890b, 0x0) 21:56:01 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x1, 0x0) read$rfkill(r0, 0x0, 0x0) 21:56:01 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 21:56:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f00000005c0)={0x18}, 0x18) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8903, &(0x7f0000000000)) 21:56:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0400000000000000"], 0x0, 0xc0460020, 0x0}) [ 658.976554][T15564] binder: 15559:15564 unknown command 0 [ 658.982358][T15564] binder: 15559:15564 ioctl c0306201 20000000 returned -22 [ 659.042607][T15567] binder: 15559:15567 unknown command 4 [ 659.048686][T15567] binder: 15559:15567 ioctl c0306201 20000500 returned -22 21:56:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @rand_addr=0x64010100}}) 21:56:01 executing program 2: r0 = socket$inet(0x2, 0x5, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpin6={0xa, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x17) [ 659.144051][T15564] binder: 15559:15564 unknown command 0 [ 659.150247][T15564] binder: 15559:15564 ioctl c0306201 20000000 returned -22 21:56:01 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8970, &(0x7f0000000040)={'ip6_vti0\x00'}) 21:56:01 executing program 4: r0 = socket(0x22, 0x2, 0x2) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={0x0}}, 0x0) 21:56:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) r3 = openat$autofs(0xffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x2, 0x0) getpeername$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) 21:56:01 executing program 2: r0 = socket(0x2, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8934, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x0}) [ 659.704514][T15578] binder: 15577:15578 unknown command 0 [ 659.710421][T15578] binder: 15577:15578 ioctl c0306201 20000000 returned -22 [ 659.776734][T15578] binder: 15577:15578 ioctl 5 0 returned -22 [ 659.802757][T15578] binder: 15577:15578 unknown command 0 [ 659.805910][T15580] binder: 15577:15580 ioctl 5 0 returned -22 [ 659.808736][T15578] binder: 15577:15578 ioctl c0306201 20000000 returned -22 21:56:02 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x2b, 0x0, 0x0) 21:56:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x1, 0x7, 0x201}, 0x14}}, 0x0) 21:56:02 executing program 3: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0), 0x10) 21:56:02 executing program 4: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_mtu=0x531100}) clone3(&(0x7f0000001600)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 21:56:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x401870cc, &(0x7f0000004300)=ANY=[@ANYBLOB="114002"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x0, 0x0, {0x3}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r3, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x4010) ioctl$SNDCTL_TMR_METRONOME(r1, 0x40045407) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r5 = dup2(r4, r0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:02 executing program 2: bpf$MAP_CREATE(0x1c, &(0x7f0000000040)={0x0, 0x0, 0x1100}, 0x2c) 21:56:02 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x28, &(0x7f0000000000), 0x4) 21:56:02 executing program 3: bpf$BPF_MAP_GET_NEXT_ID(0x14, 0x0, 0x0) 21:56:02 executing program 2: r0 = socket$isdn(0x22, 0x3, 0x0) ioctl$IMHOLD_L1(r0, 0x8901, 0x0) 21:56:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x63d8, 0x4000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0xc) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:02 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) [ 660.873429][T15609] binder: 15606:15609 unknown command 0 [ 660.879440][T15609] binder: 15606:15609 ioctl c0306201 20000000 returned -22 [ 660.953113][T15611] binder: 15606:15611 unknown command 0 [ 660.959095][T15611] binder: 15606:15611 ioctl c0306201 20000000 returned -22 21:56:03 executing program 2: r0 = socket(0x2, 0x3, 0x3a) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x1) 21:56:03 executing program 1: prctl$PR_SET_MM_MAP_SIZE(0x59616d61, 0x531000, 0x0) 21:56:03 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000004ac0)={&(0x7f0000001200), 0xc, &(0x7f0000004a80)={0x0}}, 0x0) 21:56:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000140), 0x4) 21:56:03 executing program 4: prctl$PR_CAP_AMBIENT(0x59616d61, 0xffffffffffffffff, 0x0) 21:56:03 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f00000000c0)={0x0, 0x8}) r2 = dup2(r1, r0) fsetxattr$security_ima(r0, &(0x7f0000000340)='security.ima\x00', &(0x7f0000000380)=@v1={0x2, "94717e4af65a928ec265c64d90f3"}, 0xf, 0x4) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="8c00000002090108000000000000000007000002080005400000001d5400020006000340000400002c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000221400018008000100ffdfffff08000200ffffffff06000340000300000c0004800800014000000009080005400000000f0800064000000001"], 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) openat$vim2m(0xffffff9c, &(0x7f00000002c0)='/dev/vim2m\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:03 executing program 2: syz_open_dev$vcsn(0x0, 0x0, 0x0) [ 661.717438][T15629] binder: 15622:15629 unknown command 0 [ 661.723112][T15629] binder: 15622:15629 ioctl c0306201 20000000 returned -22 21:56:04 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x8}, 0x2000000c, &(0x7f0000000080)={0x0}}, 0xbb8) [ 661.776080][T15630] binder: 15622:15630 ioctl 4010942a 200000c0 returned -22 [ 661.796887][T15630] binder: BINDER_SET_CONTEXT_MGR already set [ 661.803056][T15630] binder: 15622:15630 ioctl 4018620d 20000000 returned -16 21:56:04 executing program 3: r0 = getpgid(0x0) r1 = getpgid(0x0) kcmp(r0, r1, 0x7, 0xffffffffffffffff, 0xffffffffffffffff) 21:56:04 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r0, &(0x7f0000000100)="d7a68edfedb801e1f322db9beed1918fa4a7a4caad8c86cac3601786ee5be96e4737c9f540c9376c0cfb4e0ff2f1b1a4be2f627a43a56af59af3767d035683c245bdea4fb7661e84e07805505cd5c9c8a0db43d99e6436dda3186dd7be68590a49fe1966e9dbf4d21a0188451a867c61a1fb76a4713df0ba55d50638adfe68559d94f6", 0x83, 0x801, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0xcc) [ 661.859037][T15631] binder: 15622:15631 unknown command 0 [ 661.864841][T15631] binder: 15622:15631 ioctl c0306201 20000000 returned -22 [ 661.888474][T15629] binder: 15622:15629 ioctl 4010942a 200000c0 returned -22 21:56:04 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89e0, 0x0) 21:56:04 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f00000000c0)=0x5, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xfffffffffffffe2e, 0xc0460020, 0x0}) 21:56:04 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4(r0, 0x0, 0x0, 0x0) [ 662.532178][T15645] binder: 15644:15645 unknown command 0 [ 662.538123][T15645] binder: 15644:15645 ioctl c0306201 20000000 returned -22 21:56:05 executing program 1: setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0) 21:56:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, 0x0) 21:56:05 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0xc0189436, 0x0) 21:56:05 executing program 2: r0 = socket(0x11, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000280)={&(0x7f00000002c0), 0xc, &(0x7f0000000240)={0x0}}, 0x0) 21:56:05 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x7d, 0x0, &(0x7f0000000340)) 21:56:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}}, 0x0) 21:56:05 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000140)={0x0, &(0x7f0000000a40)=""/4096, 0x1000}) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xf8246) 21:56:05 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x18, 0x0, &(0x7f0000000040)) 21:56:05 executing program 3: r0 = socket(0x2, 0x3, 0x5) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) [ 663.309231][T15647] binder: 15644:15647 unknown command 0 [ 663.314907][T15647] binder: 15644:15647 ioctl c0306201 20000000 returned -22 21:56:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$full(0xffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x200, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r3, 0x501, 0x0, 0x0, {0x0}}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020026bd7000ffdbdf25030000003800018008000300ac1e000114000400fc02000000000000000000000000000008000300ac14143008000300e000005b060005004e23000008000300030000000800020000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40041}, 0x80) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x517dc8e8c2cbef1b, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4000, 0x0}) r5 = dup2(r4, r0) r6 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x401870cc, &(0x7f0000004300)=ANY=[@ANYBLOB="002bbc54cb00000000000000"]) ioctl$TCSETS(r6, 0x5402, &(0x7f00000000c0)={0xfffff800, 0xa76, 0x10001, 0x8001, 0x7, "51158959a6743bb04a57c422c42ff36b6e9ee0"}) exit(0x5) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="fe62ee3fe50000007cdd557bb018a06d8484f66550f025e548a54fbfb895c23c8d152e3f6d941fa22ba4d1751f807b244a79b25e2fc53b337d10616d52e08cd8cffab7a81a4dfb2eac27c786b0dbcf89851a887afca99f932a08bff244232d539d1ff196d422cb95096605c20be8dafc12f1f8ccd09c9ce9fa125a153e67c9242f2d25b74a2900bd67ee4d21e638c8b11d8250b54ca087ba1fc55bc00a2909af135d140a01d73e5bbf096b3956c6ad07de40"], 0x0, 0xc0460020, 0x0}) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000100)) 21:56:06 executing program 5: r0 = socket(0xa, 0x5, 0x0) accept4$inet(r0, 0x0, 0x0, 0x0) 21:56:06 executing program 4: syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) r0 = socket(0x1, 0x5, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x541b, &(0x7f0000000040)) [ 664.041808][T15672] binder: 15671:15672 unknown command -1026822373 [ 664.048544][T15672] binder: 15671:15672 ioctl c0306201 20000000 returned -22 [ 664.156329][T15675] binder: 15671:15675 unknown command 1072587518 [ 664.162793][T15675] binder: 15671:15675 ioctl c0306201 20000500 returned -22 21:56:06 executing program 1: r0 = socket(0xa, 0x5, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 21:56:06 executing program 3: r0 = socket(0x10, 0x2, 0x0) accept4$llc(r0, 0x0, 0x0, 0x0) 21:56:06 executing program 2: r0 = socket(0x11, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) 21:56:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000000)=0xffffffff, 0x4) 21:56:06 executing program 4: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x8929, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) 21:56:06 executing program 2: socketpair(0x0, 0x5b07863eebbef737, 0x0, 0x0) 21:56:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0xf281a1341e8b273, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 21:56:07 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x11, 0x19, 0x0, 0x300) [ 664.820755][T15677] binder: 15671:15677 unknown command 1072587518 [ 664.827490][T15677] binder: 15671:15677 ioctl c0306201 20000500 returned -22 21:56:07 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x6, 0x5, 0x0, &(0x7f0000000040)) 21:56:07 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x7) r3 = openat$binder_debug(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000140)={0x22, 0x3, 0x0, {0x4, 0x1, 0x0, ')'}}, 0x22) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x200400c0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000100)=[@enter_looper], 0x0, 0xc0460020, 0x0}) 21:56:07 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000140)={0xf, 0x8}, 0x10) 21:56:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000003c0)={0x2, 'dummy0\x00'}) [ 665.382233][T15703] binder: 15702:15703 unknown command 0 [ 665.388367][T15703] binder: 15702:15703 ioctl c0306201 20000000 returned -22 [ 665.463249][T15703] binder: 15702:15703 unknown command 0 [ 665.469398][T15703] binder: 15702:15703 ioctl c0306201 20000000 returned -22 21:56:08 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) 21:56:08 executing program 3: syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaabebb86dd600000000000000000916624cdb9148e00f73c0210920000000000000000bbfe800000008a0c8140bb0a"], 0x0) 21:56:08 executing program 4: ioperm(0x0, 0x7, 0xffff) getrusage(0x0, &(0x7f0000000140)) 21:56:08 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x15, 0x5, 0x83) 21:56:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:08 executing program 2: r0 = socket(0x10, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x10e, 0xb, 0x0, 0x0) [ 666.236885][T15725] binder: 15720:15725 unknown command 0 [ 666.242652][T15725] binder: 15720:15725 ioctl c0306201 20000000 returned -22 [ 666.301694][T15725] binder: 15720:15725 unknown command 0 [ 666.307639][T15725] binder: 15720:15725 ioctl c0306201 20000000 returned -22 21:56:08 executing program 5: r0 = socket(0x2a, 0x2, 0x0) getsockname$l2tp6(r0, 0x0, &(0x7f0000000480)) 21:56:08 executing program 3: r0 = socket$isdn(0x22, 0x3, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, 0x0, 0x0) 21:56:08 executing program 4: socketpair(0x2, 0x2, 0x1, &(0x7f0000000000)) 21:56:08 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x8, 0xe0}, 0x2000000c, &(0x7f0000000080)={0x0}}, 0x0) 21:56:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000180)={0x2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0xd, 0x1, {{0x20, 0x4, 0x4}, 0x9d}}, 0x18) r2 = openat$capi20(0xffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x10082, 0x0) r3 = dup2(r1, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:09 executing program 5: r0 = socket(0x11, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000001a00)={&(0x7f00000004c0)=@nfc={0x27, 0x1}, 0x80, 0x0}, 0x0) 21:56:09 executing program 1: r0 = syz_init_net_socket$ax25(0x6, 0x5, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:56:09 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) 21:56:09 executing program 2: r0 = syz_init_net_socket$ax25(0x6, 0x5, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890c, 0x0) [ 667.480575][T15746] binder: 15741:15746 unknown command 0 [ 667.486521][T15746] binder: 15741:15746 ioctl c0306201 20000000 returned -22 21:56:09 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x9, 0x4) 21:56:09 executing program 5: r0 = socket(0x18, 0x0, 0x0) getsockname$l2tp6(r0, 0x0, &(0x7f0000000480)) [ 667.621648][T15749] binder: 15741:15749 unknown command 0 [ 667.627602][T15749] binder: 15741:15749 ioctl c0306201 20000000 returned -22 21:56:09 executing program 2: r0 = socket(0xa, 0x5, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x43, 0x0, 0x0) 21:56:10 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, &(0x7f0000000040)=0x81000000) 21:56:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="bd5e291b891a1045"], 0x0, 0xc0460020, 0x0}) 21:56:10 executing program 5: r0 = socket(0x15, 0x5, 0x0) bind$vsock_stream(r0, 0x0, 0x0) 21:56:10 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000000c0), 0x8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040), 0x8) 21:56:10 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000), 0x8) 21:56:10 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002280)={0x2020}, 0x2020) [ 668.310215][T15761] binder: 15759:15761 unknown command 0 [ 668.316319][T15761] binder: 15759:15761 ioctl c0306201 20000000 returned -22 [ 668.346443][T15761] binder: 15759:15761 unknown command 455696061 [ 668.352821][T15761] binder: 15759:15761 ioctl c0306201 20000500 returned -22 [ 668.440823][T15761] binder: 15759:15761 unknown command 0 [ 668.446733][T15761] binder: 15759:15761 ioctl c0306201 20000000 returned -22 21:56:11 executing program 1: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) select(0x40, &(0x7f0000000080)={0x1}, &(0x7f00000000c0)={0x6}, &(0x7f0000000100)={0x9}, 0x0) 21:56:11 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f00000023c0)={0x10, 0x0, r1}, 0x10) 21:56:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="046304400000000062b4fee7d917e3f1e6224a63ce3a782f6e053f00ea3afa17fc2dc32338bbd93a11386b76d1516efc8b8d60fc079905135325438ab2a70b139148cab17b649cb72fb971d997503a813297f83eb45f68de8553cf69c4169c92e07f18e5c55884f7f4c6c512"], 0x0, 0xc0460020, 0x0}) 21:56:11 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x16, 0x0, &(0x7f0000000340)) 21:56:11 executing program 3: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x47, 0x0, 0x0, 0x0, 0x0, "356d1b"}}) 21:56:11 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044104, 0x0) [ 669.124164][T15781] binder: 15776:15781 unknown command 0 [ 669.130288][T15781] binder: 15776:15781 ioctl c0306201 20000000 returned -22 [ 669.202160][T15784] binder: 15776:15784 unknown command 0 [ 669.208236][T15784] binder: 15776:15784 ioctl c0306201 20000000 returned -22 21:56:11 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8981, &(0x7f0000000040)={'ip6_vti0\x00'}) 21:56:11 executing program 3: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x18, r0, 0x1, 0x0, 0x0, {0x3}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x0) 21:56:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x21, &(0x7f0000000140)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:getty_var_run_t:s0\x00'}}}, {{@ip={@loopback, @private, 0x0, 0x0, 'bridge_slave_1\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 21:56:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) r3 = syz_open_dev$hidraw(&(0x7f00000000c0)='/dev/hidraw#\x00', 0x6, 0x40000) ioctl$HIDIOCGRDESC(r3, 0x90044802, &(0x7f0000000540)={0x68c, "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"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:11 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1}) 21:56:12 executing program 5: socketpair(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$xdp(r0, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) [ 669.908253][T15793] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 669.987191][T15796] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 670.028987][T15797] binder: 15794:15797 unknown command 0 [ 670.034728][T15797] binder: 15794:15797 ioctl c0306201 20000000 returned -22 [ 670.098813][T15797] binder: 15794:15797 unknown command 0 [ 670.104683][T15797] binder: 15794:15797 ioctl c0306201 20000000 returned -22 21:56:12 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000740)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x14c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x7fff, 0x0, 0x18}}]}}]}, 0x14c}}, 0x0) 21:56:12 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f00000001c0)={0x80000000}) 21:56:12 executing program 3: r0 = socket(0x2b, 0x1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x6, 0xd, 0x0, 0x3) 21:56:12 executing program 4: unshare(0x4000400) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 21:56:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x21) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=[@enter_looper], 0x0, 0x4000, 0x0}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:12 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x6, 0x22, 0x0, &(0x7f0000000040)) 21:56:13 executing program 4: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x0, 0x3}, 0x10) 21:56:13 executing program 3: r0 = socket(0xa, 0x2, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, 0x0, 0x0) 21:56:13 executing program 5: r0 = socket(0x2, 0x5, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x2e, &(0x7f0000000040), 0x4) 21:56:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:13 executing program 2: socketpair(0x1e, 0x2, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) clone3(&(0x7f0000000240)={0x21000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'sit0\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={[], [], @multicast2}, @dev={0xfe, 0x80, [], 0x10}}}) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000040)=0x5, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', r2}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', r3, 0x4, 0x6, 0x1, 0x7, 0x4d, @loopback, @dev={0xfe, 0x80, [], 0x3b}, 0x10, 0x40, 0x10000, 0x5}}) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x409dd1b, 0x2) write$FUSE_ATTR(r4, &(0x7f00000000c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01, 0xee00}}}, 0x78) [ 671.532234][T15830] binder: 15827:15830 unknown command 0 [ 671.538258][T15830] binder: 15827:15830 ioctl c0306201 20000000 returned -22 [ 671.585373][T15833] binder: 15827:15833 ioctl 80045643 2 returned -22 [ 671.680803][T15833] binder: 15827:15833 unknown command 0 [ 671.687324][T15833] binder: 15827:15833 ioctl c0306201 20000000 returned -22 [ 671.707942][T15840] binder: 15827:15840 ioctl 80045643 2 returned -22 21:56:14 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 21:56:14 executing program 1: r0 = socket(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x11, 0xa, 0x0, &(0x7f0000009880)) 21:56:14 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) 21:56:14 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0xd2, 0x0, 0x0) 21:56:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 21:56:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r4, 0xa5a27f2e7ede6595, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0x34, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}]}, 0x58}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000008}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb4, r4, 0x10, 0x70bd27, 0x25dfdbfe, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x1f}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xffffb942}, {0x6, 0x11, 0x92c7}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x7}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 21:56:14 executing program 5: r0 = socket(0x29, 0x5, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) [ 672.331195][T15852] binder: 15848:15852 unknown command 0 [ 672.337367][T15852] binder: 15848:15852 ioctl c0306201 20000000 returned -22 [ 672.415535][T15856] binder: 15848:15856 unknown command 0 [ 672.421292][T15856] binder: 15848:15856 ioctl c0306201 20000000 returned -22 21:56:14 executing program 2: r0 = socket(0x2, 0x3, 0x5) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, 0x0, 0x0) 21:56:14 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f00000000c0)={{0x2, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 21:56:14 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x8}, 0x2000000c, &(0x7f0000000080)={0x0}}, 0x74) 21:56:14 executing program 0: bind$rds(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001840), &(0x7f0000001880)=0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = fsmount(r4, 0x1, 0x40) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000001700)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x60, 0x3, 0x1, 0x801, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_PROTOINFO={0x44, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x40, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x3}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xe}, @CTA_PROTOINFO_DCCP_ROLE={0x5}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x1}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x1}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x9}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc010}, 0x45) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmmsg(r2, &(0x7f0000005a00)=[{{&(0x7f0000000080)=@ll={0x11, 0x0, r6}, 0x67, 0x0}}, {{&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @multicast, 'veth0_vlan\x00'}}, 0x80, 0x0}}], 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x200414}, 0xc, &(0x7f00000015c0)={&(0x7f0000001740)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fcdbdf254500000008000100040000000c009900223e00000400000008000300", @ANYRES32=r6, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="b9cb2f096cd0b3525ef65b848e680000000000002050389144faec1996055a382ecac23d67fcecd3256a6aa919415318dd528482eb074f8ee6e91f2f9b44ee77ee44ce89aa82f3e922aef6793124f40bc3160fc008c6315c9a8f97305eb312977bb4de3e0128f4c3368e842ebe561088e48a81d763d11c6c67fd5a3d2d3d95dbda1edadb7dd25c687445ed8bd9c2ca22701f16cb79479fe96072ead2ae670aa8"], 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4040014) r7 = dup2(r1, r0) vmsplice(r1, &(0x7f0000000480)=[{&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000000140)="081ef61b0a3fd7b6aaaca5586477096d008d2423b2c0948788aaf92f3b1f6d5724acaecc3d16decbc47db0ed9c01c2dc7cbfa5a330dd1123eb8b5d509951ce2459c718b3ae8b61a5fdbe412c742a4d1efdfc33f0c0e97fab3b28f988505f978a39e04ba9df8d3406a63c6d71c8bb5629cc11a2a57ab0b6ca78bc28b5aa24f54ba970a9", 0x83}, {&(0x7f0000000200)="6e444d5490d6cd8f79279e7dea9e9ec714eac9b4fd87472159678e3ca2df9c1fae42d64da9c2cef2e49be2526542fa1a21c697383c3ce5d14f397b203c9148aed09fe48d5f85716f5b058015afd7bc75dbdd40738639df1744b98358ceaa4213effcd65e970a018a45b17ece9f25266a7a0f1be4a040d107ce0a2a012fe5e08a438481e411cf359a744baffb0fd8c387298d662abc0e9cedfbfd069c84ebdb734e83381721f88da4fe0236ab5e75302e7687e912f558f66a5728890528ae705440e88dcd434caec8c864ebd24ad86f2b195ee432518b487d86ba437163dfac8575bd6c2839", 0xe5}, {&(0x7f0000000300)="ecba6bcd3032950db908139bdccd2f375afa556ea738dae6de5f897081a602fd3563e81e016868ed5eab25ef4c4c60895264c15b4204b1edcddd25fdcdc0711466901f0694e774a1870872a4a1ef99232e58a71480f6e99e3735e69e903997bb526e3b0beec5ee058a89a56ca72b503c", 0x70}, {&(0x7f0000000380)="aaf4677896406739057588a2e57e1b8ef32764191cf25686d114792e06ede87c726087b018738c79ace258059f2521b7ea4f9157b6d5127ef5c1b1397f9001a74a39f9a0fb2e43036bb7fd03ec5d54a8a8480f002f1bb4fa8c91721d8459f64df4c9d565151ad50ac52676a91c421559e3d6069d9c117ed988625d025a4bd082e1ee551747e2c40b898bb60352ea8647689516a0400cfd686658748e93c710661a9a6e4873d87d85c38979cff214d6bafb12d716ec0acaeae6c01af8d0218f2a01d2b0f3ca935b69671bc176ada75061f54b02ee309809061f851e1f099fa0716aaf7475a8a72e44df16", 0xea}], 0x5, 0x2) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:15 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0xc0884123, &(0x7f0000000300)) 21:56:15 executing program 3: r0 = socket(0x2c, 0x3, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 672.951436][T15869] binder: 15866:15869 unknown command 0 [ 672.957491][T15869] binder: 15866:15869 ioctl c0306201 20000000 returned -22 [ 673.058643][T15870] binder: 15866:15870 unknown command 0 [ 673.064384][T15870] binder: 15866:15870 ioctl c0306201 20000000 returned -22 21:56:15 executing program 1: mmap$fb(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x2a132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x1, 0x11, r0, 0x0) 21:56:15 executing program 2: r0 = socket$inet(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000040)) 21:56:15 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000000180)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x91, 0x7, 0x5, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) 21:56:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x100, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x75c, [0x0, 0x20000540, 0x20000a24, 0x20000a54], 0x0, &(0x7f00000001c0), &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x9, 0x1, 0x892f, 'nr0\x00', 'bridge_slave_0\x00', 'lo\x00', 'veth1_to_bridge\x00', @remote, [0x0, 0xff, 0xff, 0xff, 0xff], @empty, [0xff, 0xff, 0xff, 0xff, 0xff], 0x10a, 0x1ea, 0x22e, [@ip6={{'ip6\x00', 0x0, 0x4c}, {{@remote, @private2, [0xff000000, 0xff000000, 0xffffffff, 0xffffffff], [0xff, 0xffffffff, 0x0, 0xffffffff], 0x4, 0x3a, 0x0, 0x0, 0x4e20, 0x4e23, 0x4e21, 0x4e20}}}, @m802_3={{'802_3\x00', 0x0, 0x8}, {{0x8e, 0xcaa6, 0x2, 0x4}}}], [@common=@NFLOG={'NFLOG\x00', 0x4c, {{0x67, 0x5, 0x7c0, 0x0, 0x0, "780d48977cc67638dc2c5a0278b6f575f20a35f88aea9a82fdc62aec4e287db0a0d015a71fc0fbfbc353cf30cdca325ed1f7d7fcfe8662d095f42aaea2f1c29b"}}}, @common=@NFLOG={'NFLOG\x00', 0x4c, {{0x0, 0x3f, 0x7, 0x0, 0x0, "4dd900dda168454aef617e42e0dac866988b5f98170aecd9e88ecbfe1301bacf6e51cbbf4e810c1a9c761070a10f9b1cea01a764e00abe4be44b2f4dc9e92f24"}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x1f, 0x1, {0x2}}}}}, {0x5, 0x2, 0x80f3, 'veth1_to_batadv\x00', 'batadv_slave_1\x00', 'netdevsim0\x00', 'ipvlan1\x00', @broadcast, [0x0, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x0, 0xff, 0x80, 0xff], 0x10a, 0x25e, 0x286, [@stp={{'stp\x00', 0x0, 0x48}, {{0x7f, {0x0, 0x6, 0x6, @random="c718a355f913", [0xff, 0xff, 0xff, 0x0, 0xff], 0x1f, 0x92, 0x1, 0x9, @empty, [0xff, 0x0, 0xff, 0x0, 0xff], 0x4e22, 0x4e21, 0x3, 0xfffb, 0x3f, 0x5, 0x3, 0x9000, 0x7, 0x3}, 0x440, 0x84}}}, @realm={{'realm\x00', 0x0, 0xc}, {{0x10000, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x20, 'system_u:object_r:run_init_exec_t:s0\x00'}}}, @common=@AUDIT={'AUDIT\x00', 0x4, {{0x2}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x4, {{0x98a}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x9, 0x2, 0x8bd, 'vlan0\x00', 'nr0\x00', 'syzkaller1\x00', 'veth1_to_team\x00', @empty, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @empty, [0x0, 0xff, 0xff, 0x0, 0xff], 0x6e, 0xbe, 0xe6, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x4, {{0x5}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x2}}}], @common=@STANDARD={'\x00', 0x4, {0xfffffffffffffffe}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{0x9, 0xa, 0x8137, 'veth1_virt_wifi\x00', 'ip6gre0\x00', 'ipvlan1\x00', 'veth1_to_hsr\x00', @local, [0x0, 0xff, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0xff, 0xd769548ee3914588, 0xff], 0xb6, 0xb6, 0x102, [@helper={{'helper\x00', 0x0, 0x24}, {{0x1, 'RAS\x00'}}}], [], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x1, {0xfffffff9}}}}}]}]}, 0x7ac) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x1, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}, @exit_looper], 0x0, 0x4000, 0x0}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) ioctl$TCFLSH(r3, 0x540b, 0x0) 21:56:15 executing program 5: r0 = syz_init_net_socket$ax25(0x6, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0x0, 0x0, 0x0) 21:56:15 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x17, r0, 0x0, r1, 0x0) [ 673.787662][T15887] binder: 15883:15887 unknown command 1 [ 673.793333][T15887] binder: 15883:15887 ioctl c0306201 20000000 returned -22 [ 673.845786][T15894] binder: 15883:15894 ioctl 540b 0 returned -22 [ 673.869165][T15887] binder: 15883:15887 unknown command 1 [ 673.875089][T15887] binder: 15883:15887 ioctl c0306201 20000000 returned -22 [ 673.896227][T15895] binder: 15883:15895 ioctl 540b 0 returned -22 21:56:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0x8400ae8e, 0x0) 21:56:16 executing program 5: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x84, 0x19, 0x0, 0x0) 21:56:16 executing program 2: prctl$PR_SET_MM_MAP_SIZE(0x2f, 0x2, 0x0) 21:56:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001680)={&(0x7f0000001640)='@-\x00'}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x22, 0x0, &(0x7f0000001780)=[@enter_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x9, 0x2, 0x4}}, &(0x7f0000000300)}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/227, 0x0, 0x2, 0x30}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/4096, 0x0, 0x2, 0xd}, @fda={0x66646185, 0x3, 0x0, 0x3c}}, &(0x7f00000004c0)={0x0, 0x0, 0xfffffffffffffec1}}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)={@ptr={0x70742a85, 0x0, &(0x7f0000001540)=""/231, 0x0, 0x0, 0x10}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000001740)}, 0x40}], 0x7, 0x4000, 0x0}) ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f00000000c0)) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800) r3 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x0, @planes=0x0}) r4 = openat$vnet(0xffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = dup2(r4, r5) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0463044100000000"], 0x0, 0xc0460020, 0x0}) 21:56:16 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x12, 0x0, 0x0) 21:56:16 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) [ 674.577438][T15912] binder: 15908:15912 ioctl c0306201 20000240 returned -14 [ 674.641782][T15913] binder: 15908:15913 ioctl c0306201 20000240 returned -14 [ 674.885205][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! 21:56:17 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x84, 0x72, 0x0, 0x0) 21:56:17 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$proc_mixer(r0, &(0x7f00000000c0)=""/117, 0x75) 21:56:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000440)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000600010e4e230000050002"], 0x24}}, 0x0) 21:56:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x86dd}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8}]}]}, 0x3c}}, 0x0) 21:56:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000140)={0xffffffff, 0x0, [], {0x0, @reserved}}) 21:56:17 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x4122, 0x0) [ 675.330339][T15932] binder: 15925:15932 unknown command 0 [ 675.336230][T15932] binder: 15925:15932 ioctl c0306201 20000000 returned -22 [ 675.404108][T15933] binder: 15925:15933 unknown command 0 [ 675.410044][T15933] binder: 15925:15933 ioctl c0306201 20000000 returned -22 21:56:17 executing program 3: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x13, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'bond0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4, 0x3, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, 'cbq\x00'}]}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_INDEX, @ETHTOOL_A_BITSET_BIT_INDEX]}]}, @ETHTOOL_A_BITSET_VALUE={0x0, 0x4, "1d7571b4a40d45bd664c3166dd9d81475b21aec94f13b8f60813c2e34bb78286f9cee968607daf8c835d7ac36dad46807f34d8eb412903dafa3e67ae97d4af13373e70b62adc90362a6fc428af14890e1161"}]}]}, 0x3c}}, 0x0) 21:56:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 21:56:17 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x8906, 0x0) 21:56:17 executing program 2: syz_mount_image$f2fs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000080)="f9", 0x1, 0xffffffffffff7fff}], 0x0, 0x0) 21:56:17 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x12, 0xbd, [0x9, 0x8000, 0xff01, 0x401, 0x1, 0xfac8, 0x6]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40c0) r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000240)="fc985712cf98023357445e9f6a709dfb7d3d78393887460d53be76946a07a500173254c5a70b8d61c8218255c83da8b2d3318513fb4deb2625d0e0323260052042030cea7c9a784a1cf9fac4d53fcadd9c95277d454a124d682fe680541f3ecedc6b43995ba3f3e891bd31fad97706f5f4be471efb5f89a9e8db8563290ceea949", 0x81) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r3 = dup2(r2, r1) syz_mount_image$btrfs(&(0x7f0000000300)='btrfs\x00', &(0x7f0000000340)='./file0\x00', 0x1ff, 0x2, &(0x7f0000000480)=[{&(0x7f0000000380)="1958971f9e9cbb7d638458d47c4fbc79eb8bcb79d2b04d83c344cbe902b747288c6f0656cccb1d3820e0c8d3c689169b401fc984bb32a853a77ca2aaa74f", 0x3e, 0x5}, {&(0x7f00000003c0)="44b69a1620c7590b713e3b19afb136fcbf7dfb4def1a2345d84bee806f0164caf1375c4f4ec97bde1c7bbffc3e622370bf5ed46421cd498bc6844dc7c0dd7b127a2465efa14757a279607e5a3f930c68476ac96222ff75700ee9a8426ebc734c4dc4cc0ea63c21734d8cddb254d39b7c2d61da6403409142df7d48d5b95ed49e030af401c259111f5b7afb7a790bec540dac78b337e02db2c3f70122ab352105577cedca14761bd28bb92391", 0xac, 0x3}], 0x0, &(0x7f0000000540)={[{@thread_pool={'thread_pool', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x4}}, {@nospace_cache='nospace_cache'}, {@nodatacow='nodatacow'}, {@subvolid={'subvolid', 0x3d, 0x84}}, {@ssd_spread='ssd_spread'}, {@ssd='ssd'}, {@max_inline={'max_inline', 0x3d, [0x35]}}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@appraise='appraise'}]}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0xc0460020, 0x0}) 21:56:18 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x91, 0x7, 0x2, 0x1}, 0x40) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) [ 675.960976][T15944] binder: 15943:15944 unknown command 0 [ 675.966919][T15944] binder: 15943:15944 ioctl c0306201 20000000 returned -22 [ 675.999872][T15944] binder: 15943:15944 unknown command 0 [ 676.005799][T15944] binder: 15943:15944 ioctl c0306201 20000500 returned -22 [ 676.048193][T15946] binder: 15943:15946 unknown command 0 [ 676.054035][T15946] binder: 15943:15946 ioctl c0306201 20000000 returned -22 21:56:18 executing program 1: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) 21:56:18 executing program 3: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x8}, 0x0) 21:56:18 executing program 5: epoll_create1(0x4434f1067cd9c981) 21:56:18 executing program 2: r0 = socket(0x10, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x10e, 0x4, 0x0, 0x0) 21:56:18 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) modify_ldt$write2(0x11, &(0x7f00000000c0)={0xfff, 0x60000800, 0x2000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xfffffdef}}, 0x0) 21:56:18 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r0, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4008000) 21:56:18 executing program 3: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x84, 0x7b, 0x0, 0x0) [ 676.736497][T15964] binder: 15962:15964 unknown command 0 [ 676.742285][T15964] binder: 15962:15964 ioctl c0306201 20000000 returned -22 21:56:19 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x7d, 0x0, &(0x7f0000000040)) [ 676.835322][T15964] binder: 15962:15964 unknown command 0 [ 676.841165][T15964] binder: 15962:15964 ioctl c0306201 20000000 returned -22 21:56:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x401870cc, &(0x7f0000004300)) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40046432, &(0x7f00000000c0)=0x9) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) r4 = openat(r2, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x42) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000001c0)) 21:56:19 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) connect$pptp(r0, 0x0, 0x0) 21:56:19 executing program 5: r0 = socket(0xa, 0x5, 0x0) getpeername$qrtr(r0, 0x0, 0x0) [ 677.456234][T15977] binder: 15976:15977 unknown command 0 [ 677.461898][T15977] binder: 15976:15977 ioctl c0306201 20000000 returned -22 21:56:20 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5452, &(0x7f0000000180)) 21:56:20 executing program 4: r0 = socket(0x25, 0x5, 0x0) connect$can_j1939(r0, 0x0, 0x0) 21:56:20 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) io_uring_setup(0x62c4, &(0x7f0000000100)={0x0, 0x0, 0x4}) 21:56:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x401870cc, &(0x7f0000004300)) ioctl$SOUND_MIXER_INFO(r3, 0x805c4d65, &(0x7f0000000240)) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000140)="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") 21:56:20 executing program 3: r0 = socket(0x2, 0x3, 0x4) getsockname$l2tp6(r0, 0x0, &(0x7f0000000480)=0x34) 21:56:20 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$nfc_llcp(r0, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, "c612c77e95334d8677ea712378c4e38bbdf70860670f3e25002cbbca657c2a7286636a5cffa24ab5d87f6a57802084e55c03c47fd6345a774502e90c22e97c"}, 0xf) [ 678.033355][T15997] binder: 15989:15997 unknown command 0 [ 678.039340][T15997] binder: 15989:15997 ioctl c0306201 20000000 returned -22 [ 678.099246][T15999] binder: 15989:15999 ioctl 41009432 20000140 returned -22 [ 678.150672][T15997] binder: 15989:15997 unknown command 0 [ 678.156636][T15997] binder: 15989:15997 ioctl c0306201 20000000 returned -22 21:56:20 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8ef, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, 0x0) 21:56:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth1_to_team\x00'}) 21:56:20 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x84, 0x65, 0x0, 0x0) 21:56:20 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee00) 21:56:20 executing program 0: ioctl$SOUND_MIXER_READ_RECMASK(0xffffffffffffffff, 0x80044dfd, &(0x7f0000000280)) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f0000000380)={r0, 0x9, 0xabc, 0x80000001}) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f00000003c0)=0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="14010000140005b30000450000000000028419c7b1"], 0x114}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r3], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x44080) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000200), &(0x7f0000000340)=0x4) r4 = dup2(r2, r0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r4, 0x40096100, &(0x7f00000002c0)) 21:56:21 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) shmctl$IPC_RMID(0x0, 0x0) [ 678.816975][T16011] binder: 16009:16011 ioctl c01cf509 20000380 returned -22 [ 678.889482][T16011] binder: 16009:16011 unknown command 0 [ 678.895569][T16011] binder: 16009:16011 ioctl c0306201 20000000 returned -22 [ 678.938371][T16011] binder: 16009:16011 ioctl 40096100 200002c0 returned -22 [ 678.979919][T16012] binder: 16009:16012 ioctl c01cf509 20000380 returned -22 [ 679.011924][T16012] binder: 16009:16012 unknown command 0 [ 679.018149][T16012] binder: 16009:16012 ioctl c0306201 20000000 returned -22 21:56:21 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000200)={0x42}, 0x10) 21:56:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x5501, 0x0) 21:56:21 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) 21:56:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x40) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x401870cc, &(0x7f0000004300)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdbe, 0xdbc, 0xffff41d5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140)={r3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r4 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x13, 0x0, 0x0) 21:56:21 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x0, 0x2c}, 0x8) [ 679.441405][T16022] binder: 16019:16022 unknown command 0 [ 679.447353][T16022] binder: 16019:16022 ioctl c0306201 20000000 returned -22 [ 679.526987][T16026] binder: 16019:16026 unknown command 0 [ 679.533058][T16026] binder: 16019:16026 ioctl c0306201 20000000 returned -22 21:56:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0xf281a1341e8b273, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) 21:56:22 executing program 2: request_key(0x0, 0x0, 0x0, 0xfffffffffffffff9) 21:56:22 executing program 3: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}}, 0x0) 21:56:22 executing program 5: r0 = socket$isdn(0x22, 0x3, 0x0) bind$isdn(r0, 0x0, 0x0) 21:56:22 executing program 4: r0 = getpgrp(0x0) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x4}, 0x0) 21:56:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000cb00)={0x0, 0x0, &(0x7f000000cac0)={&(0x7f000000c800)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@private2}, @in=@empty}}, 0xf0}}, 0x0) 21:56:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x357, 0x4) 21:56:23 executing program 5: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x84, 0x14, 0x0, 0x0) 21:56:23 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000000c0), 0x8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040), 0x8) 21:56:23 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r3) statx(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x6000, 0x800, &(0x7f0000000240)) stat(&(0x7f0000000340)='\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r6) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r8) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000005c0)={{}, {0x1, 0x6}, [], {0x4, 0x4}, [{0x8, 0x7, r3}, {}, {0x8, 0x4, r4}, {0x8, 0x2}, {0x8, 0x5}, {0x8, 0x6}, {0x8, 0x6}], {0x10, 0x1}, {0x20, 0xc}}, 0x5c, 0x1) r9 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r10 = dup2(r9, r0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="046d51457c254798986304400000ffff000000002500040000000000005bf8911481ff027f0f2c9a7a4f158d486616b4572f734955cca4e4c589a9ed062ff16e90203f60e92e1f201f2c76474ca355073a66000000000000000000"], 0x0, 0xc0460020, 0x0}) 21:56:23 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8980, &(0x7f0000000040)={'ip6_vti0\x00'}) 21:56:23 executing program 3: mmap$fb(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 681.033791][T16054] binder: 16051:16054 unknown command 0 [ 681.040050][T16054] binder: 16051:16054 ioctl c0306201 20000000 returned -22 [ 681.104844][T16054] binder: 16051:16054 unknown command 1162964228 [ 681.111457][T16054] binder: 16051:16054 ioctl c0306201 20000500 returned -22 21:56:23 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0xc1004110, &(0x7f0000000300)) 21:56:23 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000080)={0x0, [[0x1], [0xff], [0x82]], [], [], [], 0x1}) 21:56:23 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x3, 0x1}) 21:56:23 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x21, 0x0, 0x0) 21:56:23 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(r0, 0x409, &(0x7f00000000c0)) [ 681.808331][T16073] binder: 16070:16073 unknown command 0 [ 681.814280][T16073] binder: 16070:16073 ioctl c0306201 20000000 returned -22 [ 681.883216][T16073] binder: 16070:16073 unknown command 0 [ 681.889153][T16073] binder: 16070:16073 ioctl c0306201 20000000 returned -22 21:56:24 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xd31, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r4, r3, 0x0, 0x100000001) 21:56:24 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x26) 21:56:24 executing program 4: r0 = socket$kcm(0x11, 0x2, 0x300) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 21:56:24 executing program 3: r0 = socket(0x2b, 0x1, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) 21:56:24 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$SNDCTL_TMR_START(r2, 0x5402) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="04630440800000000bc97542e9dae9c4804211de19a5ee49ab063194de89f466e6120d56"], 0x0, 0xc0460020, 0x0}) 21:56:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x7, 0x6, 0x101}, 0x14}}, 0x0) [ 682.415012][T16082] binder: 16081:16082 unknown command 0 [ 682.420683][T16082] binder: 16081:16082 ioctl c0306201 20000000 returned -22 [ 682.475478][T16086] binder: 16081:16086 ioctl 5402 0 returned -22 [ 682.496547][T16082] binder: 16081:16082 unknown command 0 [ 682.498057][T16086] binder: 16081:16086 ioctl 5402 0 returned -22 [ 682.502432][T16082] binder: 16081:16082 ioctl c0306201 20000000 returned -22 21:56:25 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0xf000}, 0x0) 21:56:25 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x6, 0x0, 0x0, {}, {}, {0x3f00}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9dbb4768b21aeea4"}}, 0x48}}, 0x0) 21:56:25 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, &(0x7f0000000180)="411eef0346b2210a2b275b45ac3a288f0e0d6eba10b7557b03f001299b7ac0fec92724b51fc31aeb555f041e8c9bdc0fd6046d23d7e663d7") ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) openat$dsp1(0xffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x40001, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000140)={'bridge_slave_1\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x43}}}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:25 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x6, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9dbb4768b21aeea4"}}, 0x48}}, 0x0) 21:56:25 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00'}) r2 = socket(0xa, 0x1, 0x0) close(r2) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x2d}, 0xe97b}}}, &(0x7f0000000100)=0x90) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000000)={0x0, 0x5}, 0x8) [ 683.159589][T16103] binder: 16098:16103 unknown command 0 [ 683.165598][T16103] binder: 16098:16103 ioctl c0306201 20000000 returned -22 21:56:25 executing program 4: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) [ 683.549383][T16103] binder: 16098:16103 unknown command 0 [ 683.555258][T16103] binder: 16098:16103 ioctl c0306201 20000000 returned -22 [ 683.861156][T16105] infiniband syz1: set active [ 683.866184][T16105] infiniband syz1: added vlan1 [ 683.889943][ T29] audit: type=1804 audit(1599170186.157:22): pid=16116 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir057725981/syzkaller.BneUSA/180/cgroup.controllers" dev="sda1" ino=16373 res=1 [ 683.961394][T16105] infiniband syz1: Couldn't open port 1 [ 684.026575][T16105] RDS/IB: syz1: added [ 684.030709][T16105] smc: adding ib device syz1 with port count 1 [ 684.037325][T16105] smc: ib device syz1 port 1 has pnetid 21:56:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') preadv(0xffffffffffffffff, &(0x7f0000001a00)=[{&(0x7f0000000440)=""/174, 0xae}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1000000000000277, 0x400000000000, 0x0) 21:56:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001acd0000000000000000000000a20000000000a1fffffff0000000000000a0000000900010073797a300000000020000000020aa904ffffdd00000000000a0000000900010073797a30"], 0x68}}, 0x0) 21:56:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0463043fba726f4000000000"], 0x0, 0xc0460020, 0x0}) 21:56:26 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 21:56:26 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) [ 684.478540][T16132] binder: 16128:16132 unknown command 0 [ 684.487050][T16132] binder: 16128:16132 ioctl c0306201 20000000 returned -22 [ 684.668122][T16132] binder: 16128:16132 ioctl 806c4120 20000140 returned -22 [ 684.701346][T16132] binder: 16128:16132 unknown command 1057252100 [ 684.708008][T16132] binder: 16128:16132 ioctl c0306201 20000500 returned -22 21:56:27 executing program 4: mknod(&(0x7f0000000040)='./file0\x00', 0x103e, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) acct(&(0x7f00000000c0)='./file0\x00') timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYRES16=r1, @ANYBLOB="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"], 0x178}}, 0x40040) getpeername$netlink(r0, 0x0, &(0x7f0000000180)) unlink(&(0x7f0000000140)='./file0\x00') r2 = gettid() tkill(r2, 0x1000000000016) [ 684.831986][T16132] binder: 16128:16132 ioctl 806c4120 20000140 returned -22 [ 684.850070][T16138] binder: 16128:16138 unknown command 1057252100 [ 684.856944][T16138] binder: 16128:16138 ioctl c0306201 20000500 returned -22 [ 685.173144][T16140] Process accounting resumed [ 685.364777][T16140] Process accounting resumed 21:56:30 executing program 3: 21:56:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000001400)="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", 0x5ab) 21:56:30 executing program 0: ioctl$TUNGETFILTER(0xffffffffffffffff, 0x800854db, &(0x7f0000000140)=""/245) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000540)={{r0}, "e7f01214cbc7998c2ec85b52fde8c1e45e7bb86b583670c2a387f5997098e1a827c97c0302e885d2fcea5c48580bc1cd5c557e85df35d25876be5d4e5662f9757c50011d878927fd9c20a7c2bb7e96c8647ec84b1746cae2f82de47d97c32a2fd52e032a15548e3648ec9fbabdfa9cfdb6d5177b58100d33097a48adf98e8a044556496be418cab7c6f6125ba1a437247d1ef1f2a3905c136734ecd17508b70a48f79ff4592150fdeaf7f933ca6e0fa5f0e29480f41a6037ace69a7aeb111c64baeafe8ef6a1cac0bc3c4ad905644ffd12b3a627b5fc7d7d6737e609806453b5dc34124c1315d43356f1d37e259eb39da1ae027c343cb33bbc3434f03b24dea3e822dc989876f1bd623ffebc66dd36665177f56ec904b89ebfe2ae50558f3b720484d6f3082805021aae506adc5973ca6da7b7c6ae091919a886dfc32e6a1917a76e9a2e89d059f7fdfe17119047d1d52fbd61adc55dccfc42df3185dc61b5af700db2c327acf126a17524c1862fef41a968790f280c5c2c34f5e58fc8dc66ffb0dff0c3c78e68383faf71f46aac9fd00cce22a78bd40f28087d6c22e3e03d338acbea29ab050afe294eb76a8b6c4891018038bee35d68021ef522208e0f1a49cd80f0a2efaf2a188c28e98a7b15ad9724b8b325b3abc08ddba791a9dd23f1eada228aab95d8d363e13fa023f1e7bad7e3567b90e56d2904a56c3501ac6b1f87d9e06875eba80e9ccb042190c22b965b1ad4540d8eec821876a3e770154e0521e598dd3532598e36f53ffcd1a171ad5eb693d9bbb9eb074ea1cfb60d3c745e75a95d05e1876a3e8eaff1b1a7606850e61ed044b3aa29e941de796f3d432096b9c541d22c745ee9fbc59e312f6e9d46132a29780bfa986e95ae960e945968d7160a266b7cf7adde5817913e3d9a8aaac2542e65cff899e6def79dfdc75663211c210deba930b2d1ac48b03f28a07aa9a2b15217016f75e7022c0ecb4e2eb59b1ebf04ab4e127294b0efbeb0e01b2b0cd11fe4fb49b2fce23392d5d6e3180519f2ed6e24983d7d638683ed03324e14476e09cb152e3bf2ec3b98ce10162ca8f202ce824ad4b2356b14fb9e9fff70bc100f696d615d8f4bdfbb82657e0da2df8f514618634aae58ad3e54c17cecd5644c18d58bc09232afd7f66ddb487d35f4268992c9dfecd08e1f5d3f754edbabf011ff24acda3a1d3ba6fbc3e3e2edcc3e0b3909fb69dd299ce74b81dc35d61a7986e830bbb09b312cfda9dd74ee87bea9104b98001d8133ff9b8943fe01eaeecc3344bdc2ec1a8511c787def7546da8b4a25130ef5cee9f5191e3dc0fae8e0e283850da82bbb106fdaf148b79361c89562a1aaf63163fae619c887750cf527d1df745863914d35b6e9fc9a6d44d79bc812abdb10fa8c2d71a3522e303c9408fb8d625c10f15af6c4da56b03f010e7138c48d239f4f5c13345f0158a4f389c83743af38307402e311b378a091ebf2e0e8b06de905a0f500cba636ce36ceffa225076b40afa3e16f66fe688e5e66a5a10c64f263a5f37556b0613b8350eff3965efcb09e00d5ac459fa92c5ca7477fb47ca77eae08d21c5e22cd77100e474a519629a260d5e08f7caacb45dee684d4a251f9b6c800ef1e2f5bf63f3e9da458ff86b07c7de71bbd66c3b4d3d58fa0b3e5e4c42dca2c3a37485c49f76798f9eb5d5f99bc02175a307188993705d4c4cf1aea5e1fe92adaf2f0ff0f874b2bda8a4bacf695443286e10d71cf64a1f85e528ba5533016bf1b50c8139c6b65ae411e80366437fec17dfa05cbef82dbfe1ca1fa3b0d5f733adb845613ef9ee1c4318b162bd2ef92550f665361a481c23569e66521e92f9f82e5653a0c5cb2648bafeda591a5d25c38ca3c14defeef641ba4f08003b4264222e927c9359f66a76e919b96e583558f2508d72475741ab8746252ce257f19a8b2ae20cfac50e8e636a73e7b758dae15742eab111c2e75ad77ff11784a8b3e03e70a9b75077ea091e6b5523af713870f741a12392ccb6d1ce31577a831ef59a90be5d8c658c998db2a6d6b62f704c66897cfdc1af2cc0635a5b7d6af3e132a4bb8a53cca4ffd4144d9223676b358d11b94248e05c0c9ad5e8a144664eca1a015560a9a20f72a63a482070d3f5ed9af1c3570c3b1d49c1a4adaf51ba9da5b8746f49067ff2eea2d53c6e6fd948dc01af7aee5ebf42115285675260a1078cd7dd5d3b90a4c6d3a3bf6df2a81c83496319320c02b1c23f8e72fb9633bb5c84d80e356b4f7bdc8211d2fa0bfadec0d660047337ddffc939c5fa5a87d02c46b62a6e4de711c0b7386dcbfbbfe2a8a01c4b75a2cc591428324f18ad23998273bd376a3c6793f76c752ecbc6c7791367fb5dbddb7d86a0263700d0f089c565eafe9872d02f960c29a585ecdfce6bbc694f28d5a8eb83b786f75164012aa11e81a75a2df4ab42e0ed879ec147cf0096cd8d074003c4821d79595dc37d9add488706a10e20aa243d9fbfff83af2d313dd25692f973113716dd5daffe35545fce2037ca3cb467cb9100bcc03a344c6427b33866d9ea12501e08855eff22895f1e7f29db935d291d6daf3b85054310f71a7171e11b06cb4b67c1bd1dc245531b6271b74acf0ae81984eb88f6e9570d7f37229f04c426140cac39d5b0d1b3c52b9e8f96ce93b12c7d3f3dc327e23e723832ea74b04fbf434d48dbff559021992634c7331643a3f920f9daf45998d2acfef29dd0e3faf7df29e0e65b6c708516cf7a4eaa5f7feb6df91af91da177b9094334bd1f578ac35da1de646b510c3205fa4d145beab4008bf87d7d9486b5cf751159775b88b26fde5c54a2d5e2754038e6853f816e46b0ad7bd39563627c2ed2be8cbabf76994fc1ceb70a5691ceb507a8b55cc8f022b7d19d9ca277ea62a50b0b8e3e6c9e53b9b2287bbec11f1a95b2b75808e5dd22643ddff41edc9aab9245f0cb530c3b94d6a5097a7a4a106ea6887745e58c73367baf6e5bda67f766e3b52610500ba80e27172436cdac2da499a8c71cddda14740d2c93fe9adbabec3f229f737a904648810febc05090498e349e1340bec1520d8b4fe7131b7ebfc283c9b5a97d2b4c4950a6abe2396966542f06675a7775df1866465b0563f82d677b80f49051afaed3b7c96dc353bf17fbfe8a3689ebe88ea472d41e5916d2364dcc15ad9b6a5fd18c81599f20afccad33d868f78416aec5c51a02d6c9cad1a0a83cba4c4d809c3e49c3374da20a95335305f438a88a523246c8e6cef75c9042719d20c31204849e990d3a882494f3dbec8c462a8c35999992fefc9216025c8267ea954884e50f25e0e7e75a584d7c9f17466f8e78d1f51a5b3ffbe3a93a7acdc09cd7c5499b7785e647b3c54cb989652cbb428446471a485c76f2a825f38de762f0fdcf7b5443b3fe865e4b9b83f9dacd769f401e9d5524a3729f7c9bfbd6958c9e2bb985b19fdd58d9d7b7a9d0394105169f2c2760c8fa5732692a966b3052bd61ae3d89fa7c39052c72f294db13cae02ca61e84261f435fff3508aa867aa1556d36bc20fe9c384ee7bf1dfa596b6358e6f24975cf80a37585a153791408657fdfd75b9455faa9bda443e2bd24364126bf0c349bf7e01c2ab7bd5147bfab0ced5d4929f6c8e2ddf5a46ac43263ae9d7576976ed76def389e2406b805b91aa8aa629ea0a1e7be4c08715b5034ece4d1c2a0d01a87055356d68d62bbf0bcb0f8cee904fb4937488f6a1c0db2eeffcb4883c7448d21128c9a3db7e54f67c3a3ec0b38c6d1c3b3e66d020f9f6d67e613a87c14a756d8603266183b65526a781da56c13676a942ad9eafb487b1af7e50b443b1415709e1125d6590847339110c8a024bb3db07c3209d7216e569ff84398d4ec6628cb1b630ef04632c0708d6f86ff0903cc1a99156c68c56eebf5583ad009d6f481767be250a9c39ecfd33979182ee7229c9cc7a01bc9f31b31838de37b5c94854731d20a34120f03004946b6519ebda7b39c864ba5b3d4f32480a506d7a60a7794d314de568650cac3c3db0599fb698a2433d8373f7cb9f8c42667d2664e81125a23b64fad83660b47241b068c8d0e7dec1e9b24449d1a0eda05c685ef04fec322ac869c6a8e5750ea050f7e423ce6a38a5691a5b025a878400ae35b9f9078516252065d4c786bfea1b570c3687a92125d2b3be886124d0096bea0e61835ebdca2df3b8a45352af62c245471b3cbe113da5f0c15970c1e0ccd93ec1b76f55b673f84f7967b664d14177b93862afbc4ea36a31f5f170c76a47d5cf4864a5476a844eab7ef3910da64eb86f02fd05ca801ad06281bc0a8839a5578a472ba1e45864ec3fc8f9b73fb5d46c7eebd3638be43c3d02b4e433a3f81f69424598032cb64c538c3a58e05b309fccf071fa82d144134b5d1b116a46e0fe8bd1c4768f1e25cd4990258dab4025a4c3e3a7038e62e586def78b0f86a28a9ee05495248b34c1ab288167b416e54d76022c57292dd6147ec187569796033c1151d68bd1bb7b37d1162c481de4f4aae3046c3fe034af217f10339c5a955e9c74fd6a154952b1a632de5318f3e5da0b0bb867a51dfe61ef0d8eb178319b05238a81a2420ba369226a0fb7198afd5c4035c35578f07812d21380337de047d75ec827e62a62fa7106b400e0452c53047dcf7e8d4122cb767dd12d91591d93459567ee26bfc740c71be724b184ef219b1cacee7886c13dfd98236cbf60566bce252fd3f0b8791229fe60edf34393e896cfff28304ab598935977e5f4d300e53739efe540ad7297e2195b8b097215ada433ee2213635764f147ef89b3a1d22cecf33deda21b5cccd6b758940f9acc3086d28f334bb9af0055a00b738d3bc2f1562795705289c189d55f51a01f6cbefc92af685f02302b88541d7b1e99a03fd97470fd498192a4d855d4d3aa853e7480f6131eb6adc2ee2a3a80782c80a752d586c7bb5820b6a56ddaa409c5e87811271003d3db899665ca0d91d7d32a122be574e050d4090f62080d38f743f608456707b16a1f242ca21c1b96d977cf78b641230de9a98ceec47179309bd4e635bc6042b857bd3541fc7551f4b1d7e61b05a10257e5eba02ff616e4618062e62726bb4d1face90c53682560cd58a2e3e4c46b52eea5be60a4effcf327a81364e8640e9b85f24ef84da34d180cf9ce1cb57cadd7598b68793f053bbd66242f52bd5911d2b16fbcd9757ee8a102f46b58e3ce7028a64bd188d3bcdbb6920387ade61c1e21f5e485f25d1c92ddf89aaebb20d705ed913b4a2378bf49ae11671b34274b8fff2944d0f0852107bddcb3cb2594c5171b94f3634bd24e22ebe5a9098444be48130cc9d7bf49e47b825965812c701e14633155ba675b51e0f1eeb8041b47f7109057f4bd13e94401297c593ae0509da3f37cbec4347d7f53c25e653c90c35e905c3ec6414eaaed365076bf5d4d27c0b183cd4a09ff30e565a7bc0478f1710851e1381b4b54a0a808e907f1c3e0c66efe1a053793036f4dd93c14ce48f80037c8e9125d230f8370566ac455397c828bb993f374290ebf8e6a68ff31bb42fbe717ba843803ff3a6cf2d3d0d2e39fb9292737028550654297a8d711f0f7aeecdc653027ce8c1c3e6c50352e88085abecb435811eb353364e50ebc29739420d0de7b39cbc34ead7addb0819dab1abd164428832d06e6fc5d51f7cf1670b355f1d54bf99ad83f1cfad2a3d2e75936355736047fb87d2c6170d3c9cad3f984fddb7ca0c3db8067ea92e3b60e7cfd41b45b117b818da1765fb8b199e60"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r3 = openat$bsg(0xffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x1c9202, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}, @enter_looper, @dead_binder_done], 0x0, 0x4000, 0x0}) r4 = dup2(r2, r0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:30 executing program 2: 21:56:30 executing program 4: 21:56:30 executing program 1: 21:56:31 executing program 4: 21:56:31 executing program 2: 21:56:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = openat$procfs(0xffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000300)=0x1b, 0x4) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f00000000c0)=[0xee00, 0x0]) r7 = gettid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000240)={{0x2, 0xffffffffffffffff, r5, r4, r6, 0x100, 0x9}, 0x0, 0x0, 0x4, 0x4, 0x401, 0x7, 0xffff345c, 0x3, 0x3, 0x6, r7}) 21:56:31 executing program 3: 21:56:31 executing program 4: 21:56:31 executing program 2: 21:56:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000140)='./file0\x00', 0x1000, 0x9, &(0x7f0000001700)=[{&(0x7f0000000180)="30ab371c9a72461fde2356c5102d9c68935e67f071c516567fa643e7f897e13a1b26582b4b5c4e16a41ff15a3d0a9dc91c765983178ffdb1094d66e920b70b07f7699c85c732e6bfd38aa757f3ee545839f8d440f3a824babe221ef4620ec6f8", 0x60, 0x224}, {&(0x7f0000000200)="b02002ef2460cd1bf93aa76823df6e5370f300d9ed7d2219b1b3c4869ca20e36e485", 0x22, 0x4}, {&(0x7f0000000240)="22d51104ebd999d041a84ff1a55604653e6633fea769bbbf59fea5060ec9c7393d898deba9e218aebc478cbfe4a695628248f79a48e7b7e66eef0f1a6a41d3478bcf5043c3141a0f8e5b2a1529623cd06ce7f7", 0x53, 0x9}, {&(0x7f00000002c0)="2f1411afc3d513a8c30b5393a0cc92376eab59a6bf9995ca6f13d6f296f434f2304141d250bab20b68399a225a0c1888f7f29fbb7cdeec9b5d7a4bd79d59971d47e7ccfcb35f9b39584402b26053dc32ebe5a6e2f72705547bd286e3dabcd5aff6d787f85f74d2e4e486a658800d9827a0189287af8c379567096bb646f5e50c6f4b63a6f0ad4f9449484469d9282fca302a84489df014805980dcf8486ad5ee8bf38bddf487984812a0d713306cadf8b70e8ed7842db0620e9f5a6c530841c0e8da6f4cfbcee2944b210afce347f9604e543686c1bb22ef60f6bfcd03d9f269b1171302ac55de44abce063f29fea26846c6b26b9b9c23a6b5", 0xf9, 0x800}, {&(0x7f00000003c0)="ae9accd0875e7524afa4cfae6de6ac7d1b035c3552783391a24d9a9d4fd08c84c29feafa2a4031b67643304f0f71cab0c7a5ce9e087940ea2ed780beff274badea1d8f9badf98733e7e07dab91c58967b8875b2c65361043a14e05a41bb75e5497113ec60586b7fd40241178c29c635607332f7b0f452b0465", 0x79, 0x80000001}, {&(0x7f0000000540)="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", 0x1000, 0x8}, {&(0x7f0000001540)="d29f5778060b79bbe901ed070a4a7c3ea2142e84fa26965b37ef508dc682294221b5d03ea786d4295b84891fcb1f1e84c27c796e82c7623506460789d5295480c09a6db3fdf39869f7bcf78e7ab83f63ba8cd9073c14f9030db9554e54709967e6fc613e0878a1d226adf7393795e743bd21317656bf28d9c6203332c1336cfd0add37992c60e75d2357c1dc34a3a1dcabfc0708024a74b952ddd863edb989e1ec62c915197f32bc9f653087be538ff4a1288811", 0xb4, 0x8}, {&(0x7f0000001600)="50a70b47ff5cb01166416fb83dd794a508115f301ab6fc2d737ec925073d4ff19fe979a4531bf2a098bee45929b69f9822d86a7675dcd86d1274c6f19b9575fa705a0815f3d883e22a15736ad8073d3f9e281fd3fbce56a1b480a913e380f5011d1ee7d87893c7e5c5d9903becbf81c40d10acb096d88ce53d20e40a45cd35a01096b898619f981f58b02f3912dba7ba77327127f8dfb022ac887a1e45fbf1748154d4371d6e0dfae006cf71e91658257088c67705a38dbd48444b5209ecaf7bdb8ef8c994186dd157f1d364a7eb7d822ab32a8569a27e61ef1740a0d36f6e387ab407225dee73f48e8c226f3f915646af", 0xf1, 0xfffe0000}, {&(0x7f0000000440)="85a7781abb4bf80d87809c3f0b22eabe829d039787ba629e17e9eefbbee3324ae3a4b564f5b8addce6bdf11624c60fe87aec80ccd85aded68fbd930433cd5c387a50cd95718828bcdd20ec", 0x4b, 0x10001}], 0x1024071, &(0x7f0000001780)={[{@map_off='map=off'}, {@map_off='map=off'}], [{@seclabel='seclabel'}, {@obj_user={'obj_user', 0x3d, '/dev/binder#\x00'}}, {@dont_appraise='dont_appraise'}, {@fowner_eq={'fowner', 0x3d, r2}}, {@obj_role={'obj_role', 0x3d, ','}}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r4 = dup2(r3, r0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) [ 689.431216][T16169] binder: 16168:16169 unknown command 0 [ 689.431274][T16169] binder: 16168:16169 ioctl c0306201 20000000 returned -22 [ 689.480596][T16170] binder: 16168:16170 unknown command 0 [ 689.480649][T16170] binder: 16168:16170 ioctl c0306201 20000000 returned -22 21:56:32 executing program 5: 21:56:32 executing program 1: [ 690.496053][T16180] binder: BINDER_SET_CONTEXT_MGR bad uid 255 != 0 [ 690.502791][T16180] binder: 16175:16180 ioctl 4018620d 20000000 returned -1 [ 690.553722][T16181] binder: 16175:16181 unknown command 0 [ 690.559572][T16181] binder: 16175:16181 ioctl c0306201 20000000 returned -22 21:56:32 executing program 3: [ 690.646516][T16180] binder: 16175:16180 unknown command 0 [ 690.652411][T16180] binder: 16175:16180 ioctl c0306201 20000000 returned -22 21:56:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0xc, &(0x7f0000000140)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:getty_var_run_t:s0\x00'}}}, {{@ip={@loopback, @private, 0x0, 0x0, 'bridge_slave_1\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 21:56:33 executing program 4: 21:56:33 executing program 5: 21:56:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f0000000240)='./file0\x00', 0xe7a, 0x5, &(0x7f0000000440)=[{&(0x7f0000000640)="ada3c6db08851a3c555ce8e44a47e665a6acc4e186efafe5e5d19f7517e59efe0200000000000000e3378c67be23b4397e958159cae38aeef801e128650f6e6f3f93ea290f6def61d1571cd38f254da0f57742d3ff32c9046059b172933805", 0x5f, 0x7}, {&(0x7f0000000300)="03044188a4ba43094966ee3e04273664c115e294cbb29339c2b24b0c0e8ebcc596e8e4f5a5b87693529e54a6a1ba1723be5911f69625d4b3e4b5e04acacdac49feab30580b8c14f117564796", 0x4c, 0x3f}, {&(0x7f0000000380)="f1dfa2ca87f79881473d79bdbd3b4f4c207ed3633cf2306b2eedb7ee0d32278318d6e2f8e59edc2adf1778fac7b8e596c846e009ac72434cd5115545e01e377325fe3a3dc657b2b50222d5a6", 0x4c, 0x5}, {&(0x7f0000000400)="70157dafe111201d68d73553d98309e3d6fa493c9b1555215fa1f20978fd48221f7bb0e1442cbe526bf35d77d033808204f05773b98c1324f7a1e700", 0x3c}, {&(0x7f0000000540)="adbf13aaa936d1c3e5df9ef1a2a927eb0d3548fc1341ff98c73370aafcfc372eaf992a3b874fa18f8127de5de6544ef7cbd858a7af066b9e0cc57220ece8cc0326b3107f1b279c91dbf124650ff904161805fa5b2f6962546ae41cc65ee7f5d253741acde29b9a79aad9d016edc880c75b35768f890c9c655aa086f2f3aae19b47f2580e03f6d6ce8c9a959c3c7fa573af14808a76ad667a54464a10ba0cc2c48426a48c971310a33c35802eff64d88cfeaa11ee009a97c55897b405686ca81db5830e6784ecd9449549696f076ae21e870097ef128e4c4074500fa016060d780f45556169a21fbefe22d4186e354bcb974183cf", 0xf4, 0x5}], 0x100080, 0x0) r2 = dup2(r1, r0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x88800) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)={0x58, 0x1, 0x9, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1f}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8001}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xd5f6}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xffffffff}}]}, 0x58}}, 0x4000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) r4 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x0, @planes=0x0}) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000480)={0x8, 0x80}) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f00000000c0)={0x6, 0x0, 0x9}) 21:56:33 executing program 3: 21:56:33 executing program 5: 21:56:33 executing program 2: 21:56:33 executing program 4: 21:56:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000600)="f7f3223cf4f854199da5325c585ccbe4ed83b836c1a6474914dc55e72206297bb3c7218a9169a85ea0bdc9e1587a0500000000570000422cb49673160161b1cd3923dd4a7150829eaa9452c99926022b8753a18a748c569f435fb3bae96efb74b50ec900002f5e8e198a061dd6a5e3f7b3190637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf60d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba0fc65c6992986f7049fde4081e8f0004", 0xc0, r2) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000540)="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", 0x1000, r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f00000004c0)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x4000, 0x0}) r3 = dup2(r1, r0) bind$bt_sco(r3, &(0x7f00000000c0)={0x1f, @none}, 0x8) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:33 executing program 3: 21:56:34 executing program 1: 21:56:34 executing program 5: 21:56:34 executing program 2: 21:56:34 executing program 4: 21:56:34 executing program 3: 21:56:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="14010000140005b30000450000f70000007b19c7b1"], 0x114}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="110700000000000000000a00000d07000300", @ANYRES32=0x0, @ANYBLOB="829af65db6988c6dc909413835867ef49f94b95580697be8eb2664b5c483a1bc9adbac7d4ea329d0fc20fd429f052caa5f9410ddb483952752c2b9d0a12140cdb73c7113a66bc61f"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r2, 0x400, 0x3, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xd7e}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff7968}]}, 0x4c}}, 0x40) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) [ 692.342475][T16207] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=16207 comm=syz-executor.0 [ 692.418992][T16208] binder: 16205:16208 unknown command 0 [ 692.424881][T16208] binder: 16205:16208 ioctl c0306201 20000000 returned -22 [ 692.530416][T16207] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=16207 comm=syz-executor.0 21:56:34 executing program 2: 21:56:34 executing program 4: 21:56:34 executing program 5: 21:56:34 executing program 3: 21:56:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1}) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000cee5ef401259f7ea3ecd6d98c424f0c9d73a016e4516d854669ecb551b0c32e186c9c478d85390ad13986c94480c261fd57c9ebcd1472675d2f11efacbdc5f4e1bb0ec52535db26ad7a1993b99b4ba6b6edadf37d9c25a6bfe84779f3efcbb42bf0a07f45ea54d81c5eb69bf91113c283d"], 0x0, 0xc0460020, 0x0}) 21:56:35 executing program 5: [ 693.184506][T16217] binder: 16216:16217 unknown command 0 [ 693.190246][T16217] binder: 16216:16217 ioctl c0306201 20000000 returned -22 [ 693.242883][T16218] binder: 16216:16218 unknown command 0 [ 693.248828][T16218] binder: 16216:16218 ioctl c0306201 20000000 returned -22 21:56:35 executing program 1: 21:56:35 executing program 2: 21:56:35 executing program 3: 21:56:35 executing program 4: 21:56:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04630440000000005095825e812d8469d118f99fcbbfeacea498b2bb7be184da67434bf16fdbc393ba0d95617349da19a776f9d8b4deb29f4be4f18af7648c3b6bb0a1f7751096fcdc0a9c9b3b3b49dbb927475f69645ee502f2d08abe17da5a1569b131f59f690d306447f6d77c50ebe2596ef7cdf005002364c4d72887bb38195e6cfb2d53a26d929cbff2b0e9e4cc482914bd01cc0f25c9c9dd6cdca586a940f9f386643b4cc526"], 0x0, 0xc0460020, 0x0}) 21:56:35 executing program 5: [ 693.758149][T16228] binder: 16225:16228 unknown command 0 [ 693.764209][T16228] binder: 16225:16228 ioctl c0306201 20000000 returned -22 [ 693.816929][T16228] binder: 16225:16228 unknown command 0 [ 693.822584][T16228] binder: 16225:16228 ioctl c0306201 20000000 returned -22 21:56:36 executing program 2: 21:56:36 executing program 3: 21:56:36 executing program 5: 21:56:36 executing program 4: 21:56:36 executing program 0: r0 = openat$vcs(0xffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x5a0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xff, 0xf58, 0x40, @loopback, @mcast1, 0x7800, 0x8000, 0xd, 0x2e41}}) r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r4 = accept4$phonet_pipe(r0, &(0x7f0000002000), &(0x7f0000002040)=0x10, 0x80000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f00000020c0)={0x4, [0x0, 0x0, 0x0, 0x0]}) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r5}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_WRITE(r3, &(0x7f0000000200)={0x18, 0x0, 0x0, {0xfffffffd}}, 0x18) r6 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:36 executing program 2: [ 694.492867][T16236] binder: 16235:16236 unknown command 0 [ 694.498958][T16236] binder: 16235:16236 ioctl c0306201 20000000 returned -22 [ 694.600903][T16236] binder: 16235:16236 unknown command 0 [ 694.606813][T16236] binder: 16235:16236 ioctl c0306201 20000000 returned -22 21:56:37 executing program 1: 21:56:37 executing program 3: 21:56:37 executing program 4: 21:56:37 executing program 5: 21:56:37 executing program 2: 21:56:37 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) r3 = openat$dlm_monitor(0xffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x400000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r5, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) r6 = signalfd4(r4, &(0x7f0000000280)={[0x9, 0x2b]}, 0x8, 0xc00) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'eth\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x84) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x400, 0x70bd23, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004004}, 0x2400d054) 21:56:37 executing program 2: 21:56:37 executing program 3: [ 695.235511][T16248] binder: 16247:16248 unknown command 0 [ 695.241375][T16248] binder: 16247:16248 ioctl c0306201 20000000 returned -22 21:56:37 executing program 5: [ 695.360799][T16249] binder: 16247:16249 unknown command 0 [ 695.370730][T16249] binder: 16247:16249 ioctl c0306201 20000000 returned -22 21:56:37 executing program 4: 21:56:37 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$autofs(0xffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xc040, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff518d}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:38 executing program 5: [ 696.026992][T16258] binder: 16257:16258 unknown command 0 [ 696.032866][T16258] binder: 16257:16258 ioctl c0306201 20000000 returned -22 [ 696.091495][T16260] binder: 16257:16260 unknown command 0 [ 696.097554][T16260] binder: 16257:16260 ioctl c0306201 20000000 returned -22 21:56:38 executing program 1: 21:56:38 executing program 2: 21:56:38 executing program 3: 21:56:38 executing program 4: 21:56:38 executing program 5: 21:56:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) syslog(0x1, &(0x7f0000000240)=""/143, 0x8f) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="ea62044000ec0000"], 0x0, 0xc0460020, 0x0}) r3 = openat$hwrng(0xffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x307000, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xa6}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x3ebd}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x584}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4004090) [ 696.596109][T16268] binder: 16267:16268 unknown command 0 [ 696.601947][T16268] binder: 16267:16268 ioctl c0306201 20000000 returned -22 [ 696.668935][T16270] binder: 16267:16270 unknown command 1074029290 [ 696.675731][T16270] binder: 16267:16270 ioctl c0306201 20000500 returned -22 21:56:39 executing program 4: 21:56:39 executing program 5: 21:56:39 executing program 2: [ 696.798298][T16270] binder: 16267:16270 unknown command 0 [ 696.804457][T16270] binder: 16267:16270 ioctl c0306201 20000000 returned -22 21:56:39 executing program 3: [ 696.849780][T16268] binder: 16267:16268 unknown command 1074029290 [ 696.856400][T16268] binder: 16267:16268 ioctl c0306201 20000500 returned -22 21:56:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x200, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000000c0)) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_pts(r1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x0, './file0/file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0xc}], 0xc}}], 0x2, 0x0) connect$pppl2tp(r1, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @private=0xa010101}, 0x1, 0x4, 0x2, 0x4}}, 0x2e) fsetxattr$security_evm(r5, &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000300)=@v2={0x5, 0x1, 0x10, 0x1ff, 0x26, "c4f365bdb88d47ecc29504135902fbe89a9af5d25701962815524421f60a3b22a4210bea106d"}, 0x2f, 0x0) r6 = dup(r4) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmmsg(r3, &(0x7f0000005a00)=[{{&(0x7f0000000080)=@ll={0x11, 0x0, r7}, 0x67, 0x0}}, {{&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @multicast, 'veth0_vlan\x00'}}, 0x80, 0x0}}], 0x2, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0xd, r7, 0x13}, 0x10) r8 = dup2(r2, r0) ioctl$KVM_GET_TSC_KHZ(r8, 0xaea3) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="84cb3ba4125c8b52e52ebae1c8c4f868389c7a8215f85ed6daefc22636fdef814e326b4b56a048cb59ed51e80023b4bdd145441929891d62e012ac97a9f5f0faed60cc7c75f6d0dd52973705bf0c0c6296018a64892ad005d45138f558c01b656e3f96eea704cf1e0ec0bed2ac7d65219f4f66eac37e2f58b94fb747ca9daf5306ab963472da20b47356dacf27fd1afabcf10007473634830ff6fd37b810615e1dc36a88b5634b502cbd0e859c02fb9e68e6105b8e41cdd0aa764c00"/199], 0x0, 0xc0460020, 0x0}) 21:56:39 executing program 5: [ 697.420108][T16278] binder: 16276:16278 unknown command 0 [ 697.426531][T16278] binder: 16276:16278 ioctl c0306201 20000000 returned -22 [ 697.478562][T16280] binder: 16276:16280 ioctl 8004f50c 200000c0 returned -22 [ 697.520406][T16278] binder: 16276:16278 ioctl aea3 0 returned -22 [ 697.561446][T16278] binder: 16276:16278 unknown command -1539585148 [ 697.568413][T16278] binder: 16276:16278 ioctl c0306201 20000500 returned -22 [ 697.637512][T16280] binder: 16276:16280 ioctl 8004f50c 200000c0 returned -22 [ 697.678095][T16280] binder: 16276:16280 ioctl aea3 0 returned -22 21:56:40 executing program 1: 21:56:40 executing program 2: 21:56:40 executing program 4: 21:56:40 executing program 5: 21:56:40 executing program 3: 21:56:40 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x1d, r2}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) [ 698.001377][T16289] binder: 16285:16289 unknown command 0 [ 698.007514][T16289] binder: 16285:16289 ioctl c0306201 20000000 returned -22 [ 698.102206][T16289] binder: 16285:16289 unknown command 0 [ 698.108123][T16289] binder: 16285:16289 ioctl c0306201 20000000 returned -22 21:56:40 executing program 5: 21:56:40 executing program 4: 21:56:40 executing program 2: 21:56:40 executing program 3: 21:56:40 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x401870cc, &(0x7f0000004300)) r4 = openat$vcsa(0xffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0xa0000, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000180)=0x8000, 0x4) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc04c5609, &(0x7f0000000100)={0xe0, 0x1, 0x4, 0x1, 0x40, {0x0, 0xea60}, {0x4, 0x0, 0x20, 0x3f, 0x0, 0x2, "a39f7e6d"}, 0x2, 0x2, @fd=r3, 0x81, 0x0, r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="046304400000000031e3c7c93bb669ad44184d1f0200001b0f301ade25cf4be3a1fab5aa753606cac0b0c300000000000000054917947a45916254c26923ed2866d85d0e074efafea2bb4f23fae4fb741e85b20a947e5d000000003409f10ea7e095bdb46175dcb1e83ad623d041c8e5e9cdbbaccb7295f4c697a67948f323d52aae1fb05e87d304d0330ff1d1f214fe2eb9d2c4bd00"/175], 0x0, 0xc0460020, 0x0}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) 21:56:41 executing program 4: [ 698.962005][T16300] binder: 16297:16300 unknown command 0 [ 698.967905][T16300] binder: 16297:16300 ioctl c0306201 20000000 returned -22 [ 699.031027][T16301] binder: 16297:16301 ioctl c04c5609 20000100 returned -22 [ 699.078396][T16300] binder: 16297:16300 ioctl f503 0 returned -22 [ 699.110198][T16301] binder: 16297:16301 unknown command 0 [ 699.116256][T16301] binder: 16297:16301 ioctl c0306201 20000000 returned -22 [ 699.141369][T16300] binder: 16297:16300 ioctl c04c5609 20000100 returned -22 21:56:41 executing program 1: 21:56:41 executing program 5: 21:56:41 executing program 2: 21:56:41 executing program 3: 21:56:41 executing program 4: 21:56:41 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x401870cc, &(0x7f0000004300)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffe65, 0x0, &(0x7f0000000140)=[@increfs_done], 0x3, 0x4000, 0x0}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:41 executing program 2: 21:56:42 executing program 3: 21:56:42 executing program 4: 21:56:42 executing program 5: 21:56:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r1 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="046304f3000000c2e763f0c008040081f6634c1da9ff4b61f57af7a003a3696888a301a4e9a245bd4a07e38c3f44664093eaae064e8b9d2f6bbcffbec8e4115843a0db9ae38a1d64c55cb62e2cc713c871"], 0x0, 0xc0460020, 0x0}) r2 = syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000140)='./file0\x00', 0x3, 0x6, &(0x7f0000001640)=[{&(0x7f0000000200)="51ad00bf0174fe5c45f8301a905ad1636d1f494c6d800079291b6424477e37576735f349daef7cf1315f1f24d5e96d422788d7bed42956db0b21c47d070d720cf7e7", 0x42, 0x4}, {&(0x7f0000000280)="b5b0b449e2a5918b526e25c485399716486635bab4e5a2c98a3c0507d43821e6c891270829867e560850ccf136309b521574c7", 0x33, 0x2}, {&(0x7f00000002c0)="eeb740c8fc49c2a2e57e858992829f853b8aef9982ae456bb661c459343a308f8e1e92cb95af455070d512458a1a60e54bc044211c9a72b206cffe17de6200cfff6c6b34e04b5a9339a88ab22902e384a882e8cad14ca23eba3a2f85de9c9c47df761a1fd5434b709ddfecc373db461f173f3601de1fe4dd491ca0f2924f3a57c10ad38f1fb006038be4cee32b234dac865bb9a1034262dc89d01ce65b2057de0a226f3198216690512126d04a76748aeb", 0xb1, 0x3}, {&(0x7f0000000380)="94d82325510d6e4505290ca5770f7a5863263e3788faa4166b6fb80952476cd406998d5154e5868a10ddb492f6d123f2d1e0853c384b4b6f97c53af9279d7122e4d273e1a4b3a34ba1c36280619aefe42ed91464f180d0a84cd95a586369df855b7e15b77ea7b8047247f0b0841760e24bd75de23bd42fece6fe92ecd3847d15dda290129112854202a73b70f4cf249139630e7e20adaa37d928ab7070b9e8cf9f89b0b81f0767a56c0c72a9d380aa23341d864d2fdee7fe3d5a6ebb2379adb4f840e091ac162004691e22c3412385247034caa7411eed6ac27d0a915704c25f472bbf69", 0xe4, 0x7}, {&(0x7f0000000540)="562b4ef20ae223e03d6f54b501eb6bb5c8fc778d8dcec950690c573d3a8ce401ccb691ffb2dda9ed20f012affe66db661fda44181c808935fa6417df6e154f4a778664616bf1be742fd2f790de2ebc1136483a4f18dda46e3e954986422c2b87bd95f8cd40b6092c8a6220ca193e8b835e6cec3b4b205cd8bb7654908a0e8c191994cf3e23a642d016ddc8f78087c6cd7d969c00bd00abc61034f4ba37b4d39c15a41d07280f699a62523439d7d7c30943ecaa4648ea108c5e98ef1af0a7b9335bce4d2513423abe8ca32f", 0xcb, 0x3}, {&(0x7f0000000640)="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", 0x1000, 0x7}], 0x840010, &(0x7f0000000480)={[], [{@subj_user={'subj_user', 0x3d, ','}}, {@subj_user={'subj_user', 0x3d, '/dev/binder#\x00'}}, {@seclabel='seclabel'}]}) ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f00000016c0)={0x0, 0x1, 0xfffffffffffffffe, 0x2}) r3 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x401870cc, &(0x7f0000004300)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffc0, 0x3, 0x2, 0x200, 0x5, 0x9, 0xd9a, 0x4, 0x1], 0x9, 0x800}) 21:56:42 executing program 2: 21:56:42 executing program 1: 21:56:42 executing program 4: 21:56:42 executing program 3: 21:56:42 executing program 5: 21:56:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x1000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:42 executing program 2: [ 700.871798][T16330] binder: 16328:16330 unknown command 0 [ 700.877811][T16330] binder: 16328:16330 ioctl c0306201 20000000 returned -22 21:56:43 executing program 2: 21:56:43 executing program 5: 21:56:43 executing program 4: [ 700.990068][T16331] binder: 16328:16331 unknown command 0 [ 700.995951][T16331] binder: 16328:16331 ioctl c0306201 20000000 returned -22 21:56:43 executing program 3: 21:56:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r3, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x0, './file0/file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0xc}], 0xc}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:43 executing program 5: [ 701.555351][T16339] binder: 16338:16339 unknown command 0 [ 701.561213][T16339] binder: 16338:16339 ioctl c0306201 20000000 returned -22 [ 701.649285][T16340] binder: 16338:16340 unknown command 0 [ 701.655415][T16340] binder: 16338:16340 ioctl c0306201 20000000 returned -22 21:56:44 executing program 1: 21:56:44 executing program 4: 21:56:44 executing program 2: 21:56:44 executing program 3: 21:56:44 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:44 executing program 5: [ 702.237211][T16351] binder: 16348:16351 unknown command 0 [ 702.243224][T16351] binder: 16348:16351 ioctl c0306201 20000000 returned -22 [ 702.298863][T16351] binder: 16348:16351 unknown command 0 [ 702.304761][T16351] binder: 16348:16351 ioctl c0306201 20000000 returned -22 21:56:44 executing program 4: 21:56:44 executing program 5: 21:56:44 executing program 3: 21:56:44 executing program 2: 21:56:44 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x48, 0xb}, 0x18) ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:45 executing program 3: [ 702.930668][T16359] binder: 16358:16359 unknown command 0 [ 702.936542][T16359] binder: 16358:16359 ioctl c0306201 20000000 returned -22 [ 703.000561][T16359] binder: 16358:16359 unknown command 0 [ 703.006663][T16359] binder: 16358:16359 ioctl c0306201 20000000 returned -22 21:56:45 executing program 1: 21:56:45 executing program 4: 21:56:45 executing program 5: 21:56:45 executing program 2: 21:56:45 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f00000000c0)) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:45 executing program 3: [ 703.481346][T16370] binder: 16366:16370 unknown command 0 [ 703.487127][T16370] binder: 16366:16370 ioctl c0306201 20000000 returned -22 [ 703.602274][T16370] binder: 16366:16370 unknown command 0 [ 703.608196][T16370] binder: 16366:16370 ioctl c0306201 20000000 returned -22 21:56:45 executing program 2: 21:56:46 executing program 4: 21:56:46 executing program 5: 21:56:46 executing program 3: 21:56:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x401870cc, &(0x7f0000004300)) r4 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x0, @planes=0x0}) ioctl$int_out(r4, 0x5460, &(0x7f00000001c0)) ioctl$VIDIOC_QBUF(r2, 0xc04c560f, &(0x7f0000000140)={0x2557681d, 0x2, 0x4, 0x1, 0x401, {0x0, 0xea60}, {0x2, 0x0, 0xf1, 0x80, 0x5a, 0x7, "8673e947"}, 0x2, 0x1, @planes=&(0x7f00000000c0)={0x3, 0x1, @mem_offset=0x4, 0x9}, 0x8c, 0x0, r3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="963f00288b27b392"], 0x0, 0xc0460020, 0x0}) 21:56:46 executing program 2: [ 704.262997][T16379] binder: 16378:16379 unknown command 0 [ 704.268749][T16379] binder: 16378:16379 ioctl c0306201 20000000 returned -22 [ 704.341418][T16381] binder: 16378:16381 ioctl c04c560f 20000140 returned -22 [ 704.387295][T16379] binder: 16378:16379 unknown command 671104918 [ 704.393849][T16379] binder: 16378:16379 ioctl c0306201 20000500 returned -22 [ 704.421169][T16379] binder: 16378:16379 unknown command 0 [ 704.427069][T16379] binder: 16378:16379 ioctl c0306201 20000000 returned -22 [ 704.448105][T16383] binder: 16378:16383 ioctl c04c560f 20000140 returned -22 21:56:46 executing program 1: 21:56:46 executing program 3: 21:56:46 executing program 5: 21:56:46 executing program 4: 21:56:46 executing program 2: 21:56:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$ashmem(0xffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x116200, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) [ 704.858541][T16391] binder: 16386:16391 unknown command 0 [ 704.864421][T16391] binder: 16386:16391 ioctl c0306201 20000000 returned -22 [ 704.916460][T16393] binder: 16386:16393 unknown command 0 [ 704.922297][T16393] binder: 16386:16393 ioctl c0306201 20000000 returned -22 21:56:47 executing program 2: 21:56:47 executing program 5: 21:56:47 executing program 4: 21:56:47 executing program 3: 21:56:47 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x401870cc, &(0x7f0000004300)=ANY=[@ANYBLOB='\x00'/12]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x6c, 0x0, &(0x7f0000000240)=[@register_looper, @acquire={0x40046305, 0x2}, @acquire={0x40046305, 0x3}, @acquire_done={0x40106309, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@weak_binder={0x77622a85, 0x1001}, @flat=@binder={0x73622a85, 0x110b}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/126, 0x7e, 0x0, 0x1e}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}], 0x2, 0x0, &(0x7f00000002c0)="e534"}) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r3 = dup2(r2, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:47 executing program 2: [ 705.548617][T16400] binder: 16398:16400 unknown command 0 [ 705.554456][T16400] binder: 16398:16400 ioctl c0306201 20000000 returned -22 21:56:48 executing program 1: 21:56:48 executing program 5: 21:56:48 executing program 4: 21:56:48 executing program 3: 21:56:48 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/consoles\x00', 0x0, 0x0) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000540)={[0x80000000, 0x8001, 0x0, 0x4, 0x4, 0x1, 0x9, 0x2, 0x0, 0x101, 0x6, 0x8, 0x4, 0x10000, 0x3cbf, 0x9, 0x0, 0x40, 0xffff0000, 0x9, 0xdbd, 0x1835, 0xce, 0x4, 0x3, 0x5d, 0x9, 0x4, 0xca5, 0x6, 0xffffab86, 0x67, 0x1ff, 0x4926, 0x8, 0x7, 0x1, 0x6, 0x1, 0x1, 0x1, 0xffff, 0x8, 0x10000, 0x10001, 0x9, 0x4ac, 0xb9, 0xc3, 0x1ff, 0x4, 0xffff, 0x5, 0x7fffffff, 0x7, 0x1, 0x10001, 0x5, 0x7f, 0x7, 0x4, 0x6, 0x1, 0x3f, 0x0, 0xe7cc, 0x7f, 0x7ff, 0x3, 0x7ff, 0x9, 0x0, 0xffff, 0x40, 0x89ea, 0x250c, 0x92, 0xffff, 0xc76, 0x8, 0x6, 0x800, 0x4, 0x3ff, 0x6, 0xfff, 0x1, 0x0, 0x0, 0x7fffffff, 0x9, 0x5, 0x3f, 0x7f, 0x5, 0x5, 0x8000, 0x5, 0xf21, 0xfffffff7, 0x7, 0x8, 0x0, 0xfff, 0x7fff, 0x80000001, 0x2, 0x2, 0xad, 0x4, 0x4455, 0x401, 0x80000001, 0x9, 0x8, 0xffffff5a, 0x80000000, 0x4, 0x2, 0x8, 0xae000, 0x9, 0x8, 0x2b2, 0x10000000, 0x2, 0x10001, 0x1, 0x5, 0x3, 0x6, 0x1, 0xb4, 0x9, 0x3, 0x81, 0x368, 0x8, 0x2, 0xb3, 0x1, 0x1f, 0xffffffff, 0x9, 0x1, 0x0, 0x81, 0xd3de, 0x9, 0x3ff, 0x9, 0x4, 0x3, 0x8, 0x8001, 0x7, 0x0, 0x8001, 0x3f, 0x1f, 0x80000000, 0x81, 0x4, 0x100, 0x9, 0x200, 0x9, 0x3, 0x2, 0x10001, 0xffffffff, 0x6, 0x1, 0x4, 0x6, 0x3, 0x1, 0x5, 0x2, 0x3, 0x5, 0x0, 0xdab9, 0x3, 0x8, 0x7fffffff, 0x8000, 0x2, 0x9, 0x3, 0xfffffffc, 0x8, 0x7, 0x1f, 0x1000, 0x4e, 0x1, 0x137, 0x7, 0x0, 0x8, 0x7, 0x7e, 0x8, 0x800, 0x9, 0x20, 0x0, 0x1, 0xca, 0x400, 0x6, 0x2, 0x0, 0x100, 0x0, 0x2, 0x2, 0x1, 0x5, 0x9, 0x1, 0xfff, 0x1f, 0x1, 0x5, 0x2, 0x7fffffff, 0x7fffffff, 0x5, 0x7, 0x6, 0x7, 0x7, 0x5, 0x9, 0x0, 0x8, 0x1ff, 0x7, 0x3, 0x5, 0x1ff, 0x1, 0x7, 0x7, 0x5, 0x0, 0x6, 0x100, 0x3, 0xdb, 0x401, 0xfe000000, 0xff, 0x4, 0xc6, 0x3, 0xfffffffd, 0x80, 0x2, 0x200, 0x6, 0x200, 0x9, 0x8001, 0xfffff6b9, 0xfffffff8, 0x1ff, 0x2, 0x6, 0x0, 0x401, 0x0, 0x5, 0x10000, 0x1f, 0x1000, 0x7, 0x9ea, 0x3, 0x2, 0x1ff, 0x5, 0x6, 0x9, 0x28ab2653, 0x60, 0x80000001, 0x2, 0x8, 0x42, 0x3, 0x6, 0xffff, 0x9, 0x400, 0x1, 0x8000000, 0xfffff001, 0x7, 0xd1e, 0x3, 0x2, 0x7, 0x3, 0x1, 0x1, 0xfffffff9, 0x7, 0x5, 0x3, 0x8, 0xf7, 0x9, 0x800, 0x1, 0xffff60ca, 0x9, 0x6, 0x101, 0x1000, 0x40, 0x7, 0x1, 0x488, 0x8, 0x7, 0x4, 0x9, 0x6, 0x1, 0x9, 0x100, 0xad, 0x7, 0x701ab072, 0x2, 0x0, 0x5, 0x1, 0x400, 0x4, 0x0, 0x945, 0x80000001, 0x1ff, 0x6, 0x79c1, 0x1, 0x6, 0x30000000, 0x6, 0x0, 0x2, 0x53f, 0x6, 0x923, 0x9, 0x80000001, 0x2, 0x8, 0x6, 0x8, 0xcb30, 0x7, 0x1, 0x4, 0x6, 0xb3b, 0x1f, 0x55c, 0x7, 0x1, 0x0, 0x7, 0x3, 0x6, 0x80000000, 0x9, 0x5, 0x5, 0x200, 0x9, 0x7, 0x3, 0x1, 0x9, 0x6, 0x80000001, 0xff, 0x400, 0x7fffffff, 0xffff, 0xdd0b, 0x4, 0x2, 0x9c5, 0x5, 0x8, 0x7fff, 0xcf, 0x6, 0x3d31, 0x5, 0x7, 0x4bd, 0x7fffffff, 0x5, 0x2, 0x7, 0x8, 0x5, 0xff, 0x4, 0x9, 0x779b, 0x81, 0x5, 0x3ff, 0xfffffffc, 0xff, 0x6, 0x7f, 0x7fffffff, 0x8, 0x99, 0x8000, 0xa92a, 0x8, 0x7fffffff, 0x3ff, 0x0, 0x8, 0x3, 0x8001, 0x6edb, 0x9, 0x4, 0x101, 0x9a3a, 0x4, 0xffff0000, 0x3, 0x81, 0x2, 0x7, 0x3, 0x4b, 0x4, 0x200, 0x20d9, 0x100, 0x1, 0x2652, 0x2, 0x7, 0x6, 0xb6e, 0x100, 0x9, 0x1000, 0x81, 0x9, 0xdc31, 0x401, 0x81, 0x10001, 0x7, 0x9, 0xb5, 0xbded, 0x800, 0x100, 0xfffffff8, 0x8, 0x3ff, 0x80000001, 0x2, 0xb0ca772, 0x9, 0xfffffffc, 0x81, 0x6, 0x40, 0x8, 0x7, 0x10800, 0xffffffff, 0x5, 0xcd, 0x5, 0x20, 0x9, 0x3f5c, 0x7ff, 0x4, 0x6, 0x80000000, 0x10001, 0x10001, 0x0, 0x8, 0x7, 0xe53, 0x7fff, 0x3, 0xffff, 0x5, 0x8, 0xe00, 0x39d5, 0x8001, 0x5, 0x4, 0xfffff550, 0x0, 0x6, 0x7, 0x3, 0x80000001, 0x6, 0x5, 0x80000001, 0x9, 0x9, 0x9, 0x5, 0x5, 0x2, 0xe46, 0x8df5, 0x9, 0x2, 0x400, 0x10001, 0x0, 0x1, 0x7, 0x2, 0x5, 0x1, 0x184d, 0x8001, 0x9, 0x200, 0x1000, 0x1, 0x351, 0x800, 0x4, 0x5, 0x8, 0x80, 0xfffffffc, 0x0, 0x8c, 0x1, 0x18b0000, 0x0, 0x68, 0x7fff, 0x5, 0x866298a6, 0x1000000, 0x5, 0x10001, 0xe2, 0x8, 0x6, 0x4a5f1b18, 0x7f, 0xfff, 0xfffffff8, 0x1, 0x6, 0xe9bc, 0x2f7, 0x71d887c8, 0x7fffffff, 0x9, 0xe39d, 0x9, 0x54a, 0x7, 0x3ff, 0xff, 0x8, 0x6b6, 0xc28b, 0x0, 0xfff, 0xe0b6, 0x9, 0x41a491af, 0x794, 0x3, 0x5, 0x3, 0x4, 0xc0, 0x3, 0x2, 0x6, 0x80000001, 0x1ff, 0x8, 0x134, 0x20, 0x0, 0x6ac3, 0x3ff, 0x2, 0x9, 0x7ff, 0x6, 0x0, 0x9, 0x8, 0x80000001, 0x7ff, 0xffffffff, 0x1, 0xffff0001, 0x5, 0x7, 0xe13, 0x8, 0x6, 0x100, 0x2, 0x800, 0x0, 0x4, 0x4de, 0x8, 0xe5e, 0x7ff, 0x5, 0x0, 0xc1f, 0x7, 0x3, 0x8, 0x52a39046, 0x7, 0x4, 0x100, 0x2, 0x7, 0x6, 0x5, 0x2b15c681, 0xd6f0, 0x1, 0x8, 0x5, 0x7, 0x111, 0x1, 0x34, 0xff4c, 0x4d, 0x10000, 0x100, 0x8001, 0x844c, 0x0, 0x2, 0x80, 0x0, 0x5, 0x2, 0x112041e4, 0x6, 0x23b, 0xe6, 0x6, 0xe43e, 0x8, 0x400, 0x8f, 0x8f, 0xb39ac98d, 0x5, 0x1, 0x4, 0x0, 0x6, 0x100, 0x3, 0x6, 0x0, 0x9, 0x1, 0x2d4, 0x1, 0x2, 0x5, 0x1f, 0x8, 0x7fff, 0x8, 0xac3d, 0x3, 0x7, 0x1ff, 0x4, 0xffff, 0x9, 0x4, 0x1ff, 0x9, 0x80000000, 0x2400000, 0x7fffffff, 0x8b, 0x6, 0x4, 0x4c3, 0x6, 0x7, 0x5, 0x7, 0x7, 0x1000000, 0x9, 0xbd2d, 0x91c1, 0x800, 0x20, 0x8, 0x97, 0x3f, 0x1, 0x1ff, 0x4, 0x0, 0x0, 0x81a, 0x23da, 0x4, 0x4, 0x9, 0x5, 0x4, 0x3, 0xb4e, 0x3ff, 0x7, 0x6, 0x3f, 0x8000, 0x110, 0x80000001, 0x5, 0x7fff, 0xa9b, 0x80000000, 0xfffffe00, 0x8, 0x9, 0x7, 0x35e, 0x1000, 0xffffffff, 0x8, 0x7fffffff, 0x0, 0x9, 0x7fffffff, 0x1000, 0x5, 0x8, 0x96200, 0x43f, 0x41, 0x4, 0x7, 0x5, 0x1, 0x0, 0xaa4, 0x10000, 0x1f, 0x9, 0x2, 0x9, 0x6, 0x9, 0x40, 0x5, 0x4, 0x7d6, 0x1c, 0x2, 0xfffffffb, 0x0, 0x7, 0x3, 0xa0da, 0x5, 0x7ff, 0x3, 0x6, 0xb5, 0x5, 0x73, 0xffff, 0x5, 0x1, 0x0, 0x2, 0x401, 0x80000000, 0x1, 0x7, 0x9, 0x4f1b, 0x7, 0x45400, 0x0, 0x1, 0x4, 0xd75, 0x2, 0x4, 0x1, 0xfffffe01, 0x5, 0x7fff, 0x46f3, 0x9, 0x8, 0x9, 0x7, 0x9, 0x9, 0x1000, 0x6d9, 0x5, 0x0, 0x3, 0x0, 0x100, 0x1, 0x3, 0xfffff20b, 0x9, 0x3, 0x0, 0x1, 0x101, 0x40, 0x8, 0x9, 0x0, 0x4a, 0x2, 0x4, 0x6, 0xffffffff, 0x0, 0x1, 0x0, 0x8, 0x5fc9, 0x3, 0x4d, 0x6, 0x8001, 0x4, 0x4, 0x1, 0x3, 0xf26, 0x8001, 0x1, 0x3, 0x0, 0x2, 0x7, 0x0, 0xffff, 0xdd, 0x7, 0x3, 0x9, 0x4, 0x7, 0x2, 0x40, 0x7, 0x400, 0x101, 0x3, 0x0, 0x1, 0x0, 0x3, 0x0, 0x3, 0x7fff, 0x5, 0x6, 0x322, 0xd6, 0x4, 0x8, 0x3, 0x3, 0x4, 0x0, 0x3, 0x800, 0x5, 0x2, 0x1, 0xffffffff, 0x5, 0x9, 0xb442, 0x4, 0x3f, 0x2, 0xffff, 0xb3a, 0x1, 0x8, 0x0, 0x5, 0x80, 0x81, 0xe28, 0xfffffff7, 0x9e0, 0x3, 0x400f, 0x8001, 0x1ff, 0x672f, 0x5, 0xfffffffd, 0x7, 0x9ffc, 0x80000000, 0x80, 0x80000000, 0x0, 0x2001, 0x1590, 0x7, 0x8, 0x12f, 0x7, 0x20, 0x9, 0x7, 0x5, 0x37, 0xa0, 0x81, 0x4, 0x3ff, 0x3, 0x0, 0x8, 0x5, 0xfffff800, 0x7fffffff, 0xf1, 0x10000, 0xfff, 0x5, 0x8, 0x9, 0x20, 0x1000, 0x7f, 0x401, 0x0, 0x100, 0xb1, 0x5, 0x81, 0x10000, 0x1c, 0x0, 0x6d84, 0x3, 0x401, 0x2000, 0x0, 0x3, 0x7, 0x6, 0x10001, 0x1f, 0x800, 0x1000, 0xa7, 0x7, 0x9, 0x7, 0x7ff, 0x3, 0x8, 0x492d2dd0, 0x5, 0x0, 0x0, 0x1, 0x2, 0x980, 0x2, 0x400, 0x9, 0x1000, 0x0, 0x3f, 0xff0000, 0x1, 0x8001, 0x800]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) r3 = dup2(r2, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:48 executing program 2: [ 706.214579][T16410] binder: 16407:16410 unknown command 0 [ 706.220367][T16410] binder: 16407:16410 ioctl c0306201 20000000 returned -22 21:56:48 executing program 2: [ 706.309428][T16410] binder: 16407:16410 unknown command 0 [ 706.315472][T16410] binder: 16407:16410 ioctl c0306201 20000000 returned -22 21:56:48 executing program 4: 21:56:48 executing program 5: 21:56:48 executing program 3: 21:56:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="14010000140005b30000450000000000028419c7b1"], 0x114}], 0x1}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, 0x2, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFCTH_TUPLE={0x54, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={[], [], @private=0xa010100}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}]}, 0x78}}, 0x20000000) r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:49 executing program 5: [ 706.943152][T16420] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2306 sclass=netlink_tcpdiag_socket pid=16420 comm=syz-executor.0 [ 707.007468][T16421] binder: 16419:16421 unknown command 0 [ 707.013608][T16421] binder: 16419:16421 ioctl c0306201 20000000 returned -22 [ 707.038178][T16420] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2306 sclass=netlink_tcpdiag_socket pid=16420 comm=syz-executor.0 [ 707.067372][T16421] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2306 sclass=netlink_tcpdiag_socket pid=16421 comm=syz-executor.0 21:56:49 executing program 1: 21:56:49 executing program 4: 21:56:49 executing program 3: 21:56:49 executing program 2: 21:56:49 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:49 executing program 5: [ 707.591743][T16434] binder: 16432:16434 unknown command 0 [ 707.597659][T16434] binder: 16432:16434 ioctl c0306201 20000000 returned -22 [ 707.668229][T16435] binder: 16432:16435 unknown command 0 [ 707.674231][T16435] binder: 16432:16435 ioctl c0306201 20000000 returned -22 21:56:50 executing program 2: 21:56:50 executing program 3: 21:56:50 executing program 5: 21:56:50 executing program 4: 21:56:50 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="d8125e7200000000"], 0x0, 0xc0460020, 0x0}) 21:56:50 executing program 5: [ 708.257318][T16443] binder: 16442:16443 unknown command 0 [ 708.263338][T16443] binder: 16442:16443 ioctl c0306201 20000000 returned -22 [ 708.321521][T16443] binder: 16442:16443 unknown command 1918767832 [ 708.328691][T16443] binder: 16442:16443 ioctl c0306201 20000500 returned -22 21:56:50 executing program 1: 21:56:50 executing program 2: 21:56:50 executing program 3: 21:56:50 executing program 4: 21:56:50 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0xc0460020, 0x0}) r3 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x0, @planes=0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x401870cc, &(0x7f0000004300)=ANY=[@ANYBLOB='\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00']) io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x92, r3, &(0x7f00000000c0)="80", 0x1, 0x8001, 0x0, 0x2, r4}, &(0x7f0000000140)) 21:56:50 executing program 5: [ 708.803348][T16452] binder: 16449:16452 unknown command 0 [ 708.809207][T16452] binder: 16449:16452 ioctl c0306201 20000000 returned -22 [ 708.861448][T16453] binder: 16449:16453 unknown command 0 [ 708.867626][T16453] binder: 16449:16453 ioctl c0306201 20000500 returned -22 21:56:51 executing program 4: 21:56:51 executing program 3: [ 708.955369][T16452] binder: 16449:16452 unknown command 0 [ 708.956641][T16453] binder: 16449:16453 unknown command 0 [ 708.961187][T16452] binder: 16449:16452 ioctl c0306201 20000000 returned -22 [ 708.975087][T16453] binder: 16449:16453 ioctl c0306201 20000500 returned -22 21:56:51 executing program 2: 21:56:51 executing program 5: 21:56:51 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x160, 0x160, 0xffffffff, 0xffffffff, 0x1f4, 0x1f4, 0x1f4, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@ip={@multicast1, @rand_addr=0x64010100, 0xff, 0xffffff00, 'veth1_virt_wifi\x00', 'veth0_macvtap\x00', {0xff}, {}, 0x0, 0x2, 0x2a}, 0x0, 0x70, 0x94}, @REJECT={0x24, 'REJECT\x00'}}, {{@ip={@rand_addr=0x64010101, @loopback, 0xffffff00, 0xff000000, 'vxcan1\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0x6c, 0x1}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @random="9d3c270a7a89", 0x1, 0x4, [0x8, 0x5, 0x7, 0x16, 0x3a, 0x20, 0x17, 0x27, 0x33, 0xa, 0x22, 0x21, 0x3e, 0x2d, 0x3e, 0x38], 0x2, 0xa1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x94}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x8}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x2e4) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:51 executing program 4: [ 709.704504][T16465] binder: 16462:16465 unknown command 0 [ 709.710267][T16465] binder: 16462:16465 ioctl c0306201 20000000 returned -22 [ 709.777294][T16468] binder: 16462:16468 unknown command 0 [ 709.783203][T16468] binder: 16462:16468 ioctl c0306201 20000000 returned -22 21:56:52 executing program 1: 21:56:52 executing program 2: 21:56:52 executing program 3: 21:56:52 executing program 5: 21:56:52 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup2(r0, r2) r4 = openat$pfkey(0xffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x42000, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) r5 = openat$cachefiles(0xffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x80800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0xacd, @private2={0xfc, 0x2, [], 0x1}, 0x1}, @in6={0xa, 0x4e21, 0xfffffc00, @local, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, @in6={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x325}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e21, 0x0, @empty, 0x4}, @in6={0xa, 0x4e24, 0x4, @private1={0xfc, 0x1, [], 0x1}, 0x87dc}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @empty}], 0xdc) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:52 executing program 4: [ 710.096092][T16474] binder: 16472:16474 unknown command 0 [ 710.102225][T16474] binder: 16472:16474 ioctl c0306201 20000000 returned -22 [ 710.180159][T16475] binder: 16472:16475 unknown command 0 [ 710.186278][T16475] binder: 16472:16475 ioctl c0306201 20000000 returned -22 21:56:52 executing program 2: 21:56:52 executing program 5: 21:56:52 executing program 3: 21:56:52 executing program 4: 21:56:52 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x1, 0x400c630e, 0x0, 0x0, 0x9, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:53 executing program 3: 21:56:53 executing program 1: 21:56:53 executing program 4: 21:56:53 executing program 5: 21:56:53 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = openat$uinput(0xffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) close(r2) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:53 executing program 2: 21:56:53 executing program 3: [ 711.821356][T16497] binder: 16493:16497 unknown command 0 [ 711.827583][T16497] binder: 16493:16497 ioctl c0306201 20000000 returned -22 [ 711.890484][T16498] binder: 16493:16498 unknown command 0 [ 711.896541][T16498] binder: 16493:16498 ioctl c0306201 20000000 returned -22 21:56:54 executing program 3: 21:56:54 executing program 4: 21:56:54 executing program 2: 21:56:54 executing program 5: 21:56:54 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) r1 = semget$private(0x0, 0x0, 0x30) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000001c0)) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0xee01, 0xee00, 0xee00, 0xee00, 0x2a, 0xff20}, 0x40d, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffe}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r3 = dup2(r2, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) openat$sequencer2(0xffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0x0, 0x0, 0x6, 0x0, 0x80000001}, 0x9, 0x6}) 21:56:54 executing program 3: [ 712.478235][T16506] binder: 16503:16506 ioctl 80489439 200001c0 returned -22 [ 712.524526][T16506] binder: 16503:16506 unknown command 0 [ 712.530224][T16506] binder: 16503:16506 ioctl c0306201 20000000 returned -22 [ 712.578848][T16507] binder: 16503:16507 ioctl c0405405 20000180 returned -22 [ 712.620826][T16507] binder: 16503:16507 ioctl 80489439 200001c0 returned -22 [ 712.650630][T16507] binder: 16503:16507 unknown command 0 [ 712.656454][T16507] binder: 16503:16507 ioctl c0306201 20000000 returned -22 [ 712.706409][T16507] binder: 16503:16507 ioctl c0405405 20000180 returned -22 21:56:55 executing program 1: 21:56:55 executing program 4: 21:56:55 executing program 2: 21:56:55 executing program 5: 21:56:55 executing program 3: 21:56:55 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x802) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) [ 713.169958][T16517] binder: 16516:16517 unknown command 0 [ 713.176006][T16517] binder: 16516:16517 ioctl c0306201 20000000 returned -22 21:56:55 executing program 5: 21:56:55 executing program 3: 21:56:55 executing program 2: [ 713.300147][T16520] binder: 16516:16520 unknown command 0 [ 713.306274][T16520] binder: 16516:16520 ioctl c0306201 20000000 returned -22 21:56:55 executing program 4: 21:56:55 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x401870cc, &(0x7f0000004300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\ti\x00\x00\x00\x00\x00\x00']) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000003c0)={0x73622a85, 0x1100, 0xfffffffffffffffd}) r2 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, &(0x7f0000000300)={"9bbb1324e8c227368925d1bacc605410b24f0372d22bb6acae86de91feca", 0x3cb7, 0x2, 0x1, 0x91, 0x9, 0x6, 0xfffffff8, 0x0, [0xdfe0, 0x80000000, 0x3, 0x9, 0x80000001, 0x2, 0x69, 0x7, 0xfff, 0x4, 0x9a, 0x7dcdbda3, 0x0, 0x9, 0x3, 0x10000, 0x8b, 0x712, 0x3]}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x401870cc, &(0x7f0000004300)) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f00000002c0)) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0186415, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x1ff, 0x0, 0xc}) r4 = openat$vcs(0xffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x2) r5 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r6 = dup2(r5, r0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000180)={0x2, {{0xa, 0x4e23, 0x5ef, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {{0xa, 0x4e20, 0x7, @private1, 0x3}}}, 0x104) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:55 executing program 5: [ 713.996667][T16528] binder: 16525:16528 unknown command 0 [ 714.002790][T16528] binder: 16525:16528 ioctl c0306201 20000000 returned -22 [ 714.031023][T16528] binder: 16525:16528 unknown command 0 [ 714.036825][T16528] binder: 16525:16528 ioctl c0306201 20000000 returned -22 21:56:56 executing program 1: 21:56:56 executing program 2: 21:56:56 executing program 4: 21:56:56 executing program 3: 21:56:56 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = signalfd(r0, &(0x7f00000000c0)={[0x5, 0x7fff]}, 0x8) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000000414000425bd7008e600"/24], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:56 executing program 5: [ 714.570486][T16539] binder: 16536:16539 unknown command 0 [ 714.576467][T16539] binder: 16536:16539 ioctl c0306201 20000000 returned -22 21:56:56 executing program 2: 21:56:56 executing program 4: 21:56:57 executing program 3: [ 714.680495][T16539] binder: 16536:16539 unknown command 0 [ 714.686632][T16539] binder: 16536:16539 ioctl c0306201 20000000 returned -22 21:56:57 executing program 5: 21:56:57 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x6000) r5 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x0, @planes=0x0}) r6 = dup2(r2, r5) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:56:57 executing program 4: [ 715.232781][T16548] binder: 16547:16548 unknown command 0 [ 715.238578][T16548] binder: 16547:16548 ioctl c0306201 20000000 returned -22 [ 715.307334][T16549] binder: 16547:16549 unknown command 0 [ 715.313303][T16549] binder: 16547:16549 ioctl c0306201 20000000 returned -22 21:56:57 executing program 1: 21:56:57 executing program 5: 21:56:57 executing program 2: 21:56:57 executing program 3: 21:56:57 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) openat$zero(0xffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0e39dede484b00760900000000"], 0x0, 0xc0460020, 0x0}) 21:56:57 executing program 4: [ 715.829304][T16560] binder: 16559:16560 unknown command 0 [ 715.835277][T16560] binder: 16559:16560 ioctl c0306201 20000000 returned -22 [ 715.885071][T16561] binder: 16559:16561 unknown command -555861746 [ 715.891940][T16561] binder: 16559:16561 ioctl c0306201 20000500 returned -22 [ 715.923869][T16561] binder: 16559:16561 unknown command 0 21:56:58 executing program 4: [ 715.929736][T16561] binder: 16559:16561 ioctl c0306201 20000000 returned -22 [ 715.973250][T16561] binder: 16559:16561 unknown command -555861746 [ 715.979852][T16561] binder: 16559:16561 ioctl c0306201 20000500 returned -22 21:56:58 executing program 5: 21:56:58 executing program 2: 21:56:58 executing program 3: 21:56:58 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000140)=0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x401870cc, &(0x7f0000004300)) accept4$netrom(r1, 0x0, &(0x7f00000000c0), 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10a}) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r3 = dup2(r2, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1062cdddbe4efda6"], 0x0, 0xc0460020, 0x0}) 21:56:58 executing program 4: [ 716.621033][T16568] binder: 16566:16568 unknown command 0 [ 716.627435][T16568] binder: 16566:16568 ioctl c0306201 20000000 returned -22 [ 716.679414][T16569] binder: 16566:16569 unknown command -573742576 [ 716.686103][T16569] binder: 16566:16569 ioctl c0306201 20000500 returned -22 [ 716.772892][T16568] binder: 16566:16568 unknown command 0 [ 716.778634][T16568] binder: 16566:16568 ioctl c0306201 20000000 returned -22 21:56:59 executing program 1: 21:56:59 executing program 5: 21:56:59 executing program 3: 21:56:59 executing program 2: 21:56:59 executing program 4: 21:56:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) read$dsp(r3, &(0x7f00000001c0)=""/14, 0x200001ce) ioctl$SNDCTL_DSP_RESET(r3, 0x5000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) [ 717.220653][T16578] binder: 16573:16578 unknown command 0 [ 717.226580][T16578] binder: 16573:16578 ioctl c0306201 20000000 returned -22 21:56:59 executing program 2: 21:56:59 executing program 5: 21:56:59 executing program 3: 21:56:59 executing program 4: 21:57:00 executing program 5: 21:57:00 executing program 3: [ 717.971115][T16578] binder: 16573:16578 unknown command 0 [ 717.977181][T16578] binder: 16573:16578 ioctl c0306201 20000000 returned -22 21:57:00 executing program 1: 21:57:00 executing program 2: 21:57:00 executing program 4: 21:57:00 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_mount_image$iso9660(&(0x7f0000000280)='iso9660\x00', &(0x7f00000002c0)='./file0\x00', 0x47e2, 0x5, &(0x7f0000000480)=[{&(0x7f0000000300), 0x0, 0x9}, {&(0x7f0000000340)="c475bebf1306ea764bce3cca0de123a35e28649afc0f901c3db0970a204eed99aeb3c34e1e2f1f8b67f3a2194eecdda49ec299e90e19e86659f85760e296495251220d914a581ed397aa8fd400de748341d486be1b49ebcc2af65bcdfd999ffcd04144a95e678deba1e4b6049d88bdbb53cc875743195d906d01d6d9a1643be591c19c797d3675e39facd086642fd214767da7575352607aa49d73eadf0cf30f822a2519ff61c6881375c3c0545baaa5f18d147ba98ab0679ed389949f6a0af145045d36a1fba296b0b77d37b2d09bb1ad42114975fc2a2ab12c130ba36e4e98d08c460cfd8daf", 0xe7, 0x1ff}, {&(0x7f0000000540)="0e5970c8b2ced656383b4c6e76fa9000161b681436421248ebe4a7be90eb8dce59f4974096c8976669b808c82ad440c151d0888f4e10bdcd52be6c2efbaa11099e1cde3d14701048fddc3246e0e1c7f7905113c86123465228a19152ad825db7981b09a78350ff9033e782bf3fcf0f9e7d2331b405ce4685270d2f6aa970de70c784286e1e18dd408ad70d874bd746967a9cefd567349f731528a06fa59f77826ddf65", 0xa3, 0x10001}, {&(0x7f0000000440)="c5f65d81ab5805dfe716a0520b5e4bcc447bbf83e61cd01ca8e1af06eff6a6ec512a02caca46efeedece19d3f8dc02605a236997593cc93c32c1b445", 0x3c, 0x4}, {&(0x7f0000000600)="ad427db437dd99bc81204ec5bb9fd679e66cc56b35cb1b2cfdb01ebb1fe8749f41c3256e87471ff09025581dff22d706bfb36e72183966dd731c3d6bd5f36782bc077b90da1d1cdd88630ccad37b6eccdadb679909ee8d55e7a0e6b823884d371e409495002e5f9d8905a8bc42931a9593ad967b914f20c134b1e961877d446a212c56da1cad6ec64a5f6fb190a062736dc7e1be2dc495eb8435be184fb8960a8c248bd3469e3ea344342cf05c73287ce4591485fdee509bf86b6c898305eef1c8a57b70afd3a97c8670d804881a39799e5631", 0xd3, 0x33}], 0x2000000, &(0x7f0000000700)={[{@mode={'mode'}}, {@overriderock='overriderockperm'}, {@hide='hide'}], [{@fowner_lt={'fowner<', 0xee00}}, {@subj_role={'subj_role', 0x3d, '{-'}}, {@subj_role={'subj_role', 0x3d, '(#/&P-^.'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/binder#\x00'}}]}) r5 = openat$cgroup_freezer_state(r2, &(0x7f00000007c0)='freezer.state\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc04c565d, &(0x7f0000000800)={0x9c2, 0x3, 0x4, 0x100, 0x81, {}, {0x5, 0xc, 0x8, 0x0, 0x5, 0x9, "48cf04b5"}, 0x70fb, 0x3, @userptr=0x4, 0x12889ea1, 0x0, r2}) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$unix(r2, &(0x7f00000008c0)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000000c0), 0x0, &(0x7f0000000880)=[@cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, 0x0, r3}}}, @rights={{0x20, 0x1, 0x1, [r4, r0, r5, r6, r7]}}], 0x38}, 0x80) 21:57:00 executing program 5: 21:57:00 executing program 3: [ 718.707552][T16598] binder: 16594:16598 unknown command 0 [ 718.713574][T16598] binder: 16594:16598 ioctl c0306201 20000000 returned -22 21:57:01 executing program 3: [ 718.768610][T16598] binder: 16594:16598 ioctl c04c565d 20000800 returned -22 21:57:01 executing program 4: 21:57:01 executing program 5: [ 718.859483][T16598] binder: 16594:16598 unknown command 0 [ 718.869571][T16598] binder: 16594:16598 ioctl c0306201 20000000 returned -22 21:57:01 executing program 2: 21:57:01 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000040), 0x0, 0x4000, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:57:01 executing program 3: [ 719.373380][T16607] binder: 16606:16607 unknown command 68 [ 719.379214][T16607] binder: 16606:16607 ioctl c0306201 20000040 returned -22 21:57:02 executing program 1: 21:57:02 executing program 4: 21:57:02 executing program 2: 21:57:02 executing program 5: 21:57:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:57:02 executing program 3: 21:57:02 executing program 4: 21:57:02 executing program 5: 21:57:02 executing program 0: fcntl$getown(0xffffffffffffffff, 0x9) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000200)='/dev/ocfs2_control\x00', 0x4000, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x5}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r3 = dup2(r2, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:57:02 executing program 2: 21:57:02 executing program 3: [ 720.636157][T16627] binder: 16623:16627 unknown command 0 [ 720.642291][T16627] binder: 16623:16627 ioctl c0306201 20000000 returned -22 21:57:03 executing program 3: [ 720.711585][T16628] binder: 16623:16628 unknown command 0 [ 720.717382][T16628] binder: 16623:16628 ioctl c0306201 20000000 returned -22 21:57:03 executing program 1: 21:57:03 executing program 2: 21:57:03 executing program 4: 21:57:03 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000540)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:57:03 executing program 5: 21:57:03 executing program 3: [ 721.360897][T16637] binder: 16636:16637 ioctl 84009422 20000540 returned -22 [ 721.399989][T16637] binder: 16636:16637 unknown command 0 [ 721.405923][T16637] binder: 16636:16637 ioctl c0306201 20000000 returned -22 21:57:03 executing program 2: [ 721.505173][T16640] binder: 16636:16640 ioctl 84009422 20000540 returned -22 [ 721.528837][T16641] binder: 16636:16641 unknown command 0 [ 721.534985][T16641] binder: 16636:16641 ioctl c0306201 20000000 returned -22 21:57:03 executing program 5: 21:57:03 executing program 4: 21:57:03 executing program 3: 21:57:04 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = openat$dlm_control(0xffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x8600, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000540)={0x0, 0x33}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:57:04 executing program 5: [ 722.265541][T16650] binder: 16648:16650 unknown command 0 [ 722.271342][T16650] binder: 16648:16650 ioctl c0306201 20000000 returned -22 [ 722.304712][T16650] binder: 16648:16650 unknown command 0 [ 722.310394][T16650] binder: 16648:16650 ioctl c0306201 20000000 returned -22 21:57:04 executing program 1: 21:57:04 executing program 2: 21:57:04 executing program 4: 21:57:04 executing program 3: 21:57:04 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x0, @planes=0x0}) r3 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x0, @planes=0x0}) r4 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x0, @planes=0x0}) r5 = openat$dsp(0xffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2002, 0x0) r6 = dup2(r0, r5) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc01cf509, &(0x7f0000000180)={r6, 0x9, 0x8, 0x1}) ioctl$SNAPSHOT_UNFREEZE(r7, 0x3302) openat$vcsa(0xffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x68281, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/file0\x00', 0x440000, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x401870cc, &(0x7f0000004300)) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0xc0460020, 0x0}) 21:57:04 executing program 5: [ 722.757409][T16660] binder: 16655:16660 unknown command 0 [ 722.763403][T16660] binder: 16655:16660 ioctl c0306201 20000000 returned -22 21:57:05 executing program 4: 21:57:05 executing program 2: [ 722.896290][T16661] binder: 16655:16661 ioctl c01cf509 20000180 returned -22 21:57:05 executing program 5: 21:57:05 executing program 3: [ 723.000451][T16661] binder: 16655:16661 ioctl c01cf509 20000180 returned -22 21:57:05 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="771d6c6dc56ad54ba3f27ca1ad922e"], 0x9) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x400002, 0x0) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4) openat$autofs(0xffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x400, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000380)={0xf00, 0x40, 0x30, 0x240, 0x9, 0x1, 0x0, 0x0, {0x4, 0x1ff}, {0x10000, 0x2}, {0x100, 0xce0}, {0x7f, 0x6}, 0x2, 0x1, 0x7ff, 0xff, 0x0, 0x2, 0x7fff, 0x85f, 0x6, 0x7, 0x100, 0x20, 0x6, 0x200, 0x3, 0xb}) r3 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc0585604, &(0x7f00000001c0)={0x4, 0x0, 0x4, 0x2, 0x6, {}, {0x2, 0x0, 0x0, 0x3, 0x0, 0x80}, 0x1, 0x0, @planes=0x0, 0x6}) r4 = signalfd4(r3, &(0x7f0000000140)={[0x7fffffff, 0xfff]}, 0x8, 0x80000) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x0, 0xc0460020, 0x0}) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f00000002c0)={0x7, [0x8, 0x100], 0x9}, 0x10) 21:57:05 executing program 4: [ 723.598553][T16670] binder: 16669:16670 unknown command 0 [ 723.604987][T16670] binder: 16669:16670 ioctl c0306201 20000000 returned -22 [ 723.666638][T16672] binder: 16669:16672 unknown command -1 [ 723.672521][T16672] binder: 16669:16672 ioctl c0306201 20000500 returned -22 [ 723.709841][T16670] binder: 16669:16670 unknown command 0 [ 723.715749][T16670] binder: 16669:16670 ioctl c0306201 20000000 returned -22 [ 723.753480][T16674] binder: 16669:16674 unknown command -1 [ 723.759234][T16674] binder: 16669:16674 ioctl c0306201 20000500 returned -22 21:57:06 executing program 1: 21:57:06 executing program 5: 21:57:06 executing program 2: 21:57:06 executing program 3: 21:57:06 executing program 4: 21:57:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = openat$dlm_control(0xffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x100, 0x0) write$cgroup_int(r2, &(0x7f0000000140)=0x800, 0x12) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) [ 724.158984][T16682] binder: 16678:16682 unknown command 0 [ 724.165206][T16682] binder: 16678:16682 ioctl c0306201 20000000 returned -22 21:57:06 executing program 4: 21:57:06 executing program 3: 21:57:06 executing program 5: [ 724.269265][T16682] binder: 16678:16682 unknown command 0 [ 724.275486][T16682] binder: 16678:16682 ioctl c0306201 20000000 returned -22 21:57:06 executing program 2: 21:57:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000080), &(0x7f0000000140)=0x4) r2 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r3 = dup2(r2, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:57:07 executing program 4: [ 724.900789][T16692] binder: 16691:16692 unknown command 0 [ 724.906685][T16692] binder: 16691:16692 ioctl c0306201 20000000 returned -22 21:57:07 executing program 1: 21:57:07 executing program 5: 21:57:07 executing program 3: 21:57:07 executing program 2: 21:57:07 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) dup2(r1, r0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0xfff, 0x2a8703) sendmsg$nl_route(r2, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)=@bridge_delvlan={0x24, 0x71, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xc}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r3 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x0, @planes=0x0}) r4 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x0, @planes=0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0xa0, 0x0, &(0x7f0000000540)=[@clear_death={0x400c630f, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x9, 0x1, 0x26}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}}, &(0x7f0000000180)={0x0, 0x18, 0x34}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/175, 0xaf, 0x0, 0x29}, @ptr={0x70742a85, 0x1, &(0x7f0000000300)=""/70, 0x46, 0x0, 0x1c}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000400)={0x0, 0x28, 0x50}}, 0x40}], 0x0, 0xc0460020, 0x0}) 21:57:07 executing program 4: [ 725.389262][T16703] binder: 16699:16703 unknown command 0 [ 725.395676][T16703] binder: 16699:16703 ioctl c0306201 20000000 returned -22 [ 725.507248][T16704] binder: 16699:16704 unknown command 0 [ 725.513442][T16704] binder: 16699:16704 ioctl c0306201 20000000 returned -22 21:57:07 executing program 2: 21:57:07 executing program 4: 21:57:07 executing program 3: 21:57:07 executing program 5: 21:57:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0463ffff00000000414bd1dab5bdd2e3cbb17b7f642cfbe76a4484a5187bc0c134435bf6dcd7018d510d9c3b0c7b22578b0a9c227a1e200117c8c05056456097b7f1a2fb4b9afafba7e6b680ab04495933c66cf59b38830d9a0068726b381e3ac404012bb5290f3eb116550ec4b00e234c2d7c8436d0849e148d497493eded666bf0bb41921111c06bcded67cf00"], 0x0, 0xc0460020, 0x0}) 21:57:08 executing program 4: [ 726.179317][T16712] binder: 16711:16712 unknown command 0 [ 726.185555][T16712] binder: 16711:16712 ioctl c0306201 20000000 returned -22 [ 726.213187][T16712] binder: 16711:16712 unknown command -40188 [ 726.219290][T16712] binder: 16711:16712 ioctl c0306201 20000500 returned -22 [ 726.272920][T16712] binder: 16711:16712 unknown command 0 [ 726.278589][T16712] binder: 16711:16712 ioctl c0306201 20000000 returned -22 21:57:08 executing program 1: 21:57:08 executing program 3: 21:57:08 executing program 4: 21:57:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="04634000000000"], 0x0, 0xc0460020, 0x0}) 21:57:08 executing program 5: 21:57:08 executing program 2: [ 726.800261][T16722] binder: 16721:16722 unknown command 0 [ 726.806179][T16722] binder: 16721:16722 ioctl c0306201 20000000 returned -22 [ 726.860190][T16723] binder: 16721:16723 unknown command 4219652 [ 726.866737][T16723] binder: 16721:16723 ioctl c0306201 20000500 returned -22 21:57:09 executing program 2: 21:57:09 executing program 3: 21:57:09 executing program 4: 21:57:09 executing program 5: 21:57:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f00000001c0)={0x3, r1}) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) eventfd2(0x5, 0x801) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0xfffffffffffffffe}) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x7fffffff, 0x2, 0x1655079384318032}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) connect$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0xffffffff}, 0x10) r3 = dup2(r2, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:57:09 executing program 4: [ 727.574176][T16730] binder: 16729:16730 ioctl 4008af21 200001c0 returned -22 [ 727.615715][T16730] binder: 16729:16730 unknown command 0 [ 727.621822][T16730] binder: 16729:16730 ioctl c0306201 20000000 returned -22 [ 727.662777][T16731] binder: 16729:16731 ioctl 4008af21 200001c0 returned -22 [ 727.716343][T16731] binder: 16729:16731 unknown command 0 [ 727.722134][T16731] binder: 16729:16731 ioctl c0306201 20000000 returned -22 21:57:10 executing program 1: 21:57:10 executing program 3: 21:57:10 executing program 2: 21:57:10 executing program 5: 21:57:10 executing program 4: 21:57:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r2 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x0, @planes=0x0}) ioctl$FICLONE(r1, 0x40049409, r2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = openat$ocfs2_control(0xffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x40, 0x0) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2b4cbd79b2194e51}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)={0x1a0, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xfff, @private2={0xfc, 0x2, [], 0x1}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4399}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x79359634}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40}, 0x10000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r5 = dup2(r3, r0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) [ 728.054572][T16740] binder: 16735:16740 unknown command 0 [ 728.060254][T16740] binder: 16735:16740 ioctl c0306201 20000000 returned -22 [ 728.122670][T16740] binder: 16735:16740 unknown command 0 [ 728.128526][T16740] binder: 16735:16740 ioctl c0306201 20000000 returned -22 21:57:10 executing program 4: 21:57:10 executing program 5: 21:57:10 executing program 3: 21:57:10 executing program 2: 21:57:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:57:10 executing program 5: [ 728.786616][T16748] binder: 16747:16748 unknown command 0 [ 728.792515][T16748] binder: 16747:16748 ioctl c0306201 20000000 returned -22 [ 728.867339][T16750] binder: 16747:16750 unknown command 0 [ 728.873389][T16750] binder: 16747:16750 ioctl c0306201 20000000 returned -22 21:57:11 executing program 1: 21:57:11 executing program 4: 21:57:11 executing program 3: 21:57:11 executing program 2: 21:57:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f00000000c0)=ANY=[@ANYBLOB="0900000000000000000000000000000000000000000000004abacd9b59e10d8a0000000000000000"]) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) 21:57:11 executing program 5: 21:57:11 executing program 4: 21:57:11 executing program 3: [ 729.900959][T16763] binder: 16760:16763 unknown command 0 [ 729.906649][T16763] binder: 16760:16763 ioctl c0306201 20000000 returned -22 21:57:12 executing program 3: [ 729.962710][T16764] binder: 16760:16764 unknown command 0 [ 729.968597][T16764] binder: 16760:16764 ioctl c0306201 20000000 returned -22 21:57:12 executing program 2: 21:57:12 executing program 5: 21:57:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) r2 = dup2(r1, r0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x9, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x1, 0x8, 0x3, 0x6, 0x40, 0x4}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x0, 0x0, 0xa, 0x8, 0x6, 0x1}, @generic={0x5, 0x4, 0x0, 0x200, 0x22}, @jmp={0x5, 0x0, 0xb, 0x1, 0x2, 0x30, 0x1}, @ldst={0x0, 0x3, 0x3, 0xb, 0x3, 0xfffffffffffffff8, 0xffffffffffffffff}, @exit], &(0x7f00000000c0)='GPL\x00', 0x20, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xb, 0x200, 0x7ff}, 0x10, 0xffffffffffffffff}, 0x74) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0xc0460020, 0x0}) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000002c0)={0x0, 0x17d6}, 0x8) [ 730.396912][T16771] binder: 16769:16771 unknown command 0 [ 730.402915][T16771] binder: 16769:16771 ioctl c0306201 20000000 returned -22 [ 730.455875][T16771] binder: 16769:16771 unknown command 0 [ 730.461706][T16771] binder: 16769:16771 ioctl c0306201 20000000 returned -22 21:57:13 executing program 1: 21:57:13 executing program 4: 21:57:13 executing program 3: 21:57:13 executing program 2: 21:57:13 executing program 0: 21:57:13 executing program 5: 21:57:13 executing program 4: 21:57:13 executing program 3: 21:57:13 executing program 0: 21:57:13 executing program 2: 21:57:13 executing program 5: 21:57:13 executing program 0: 21:57:14 executing program 1: 21:57:14 executing program 4: 21:57:14 executing program 2: 21:57:14 executing program 3: 21:57:14 executing program 5: 21:57:14 executing program 0: 21:57:14 executing program 5: 21:57:14 executing program 4: 21:57:14 executing program 3: 21:57:14 executing program 2: 21:57:14 executing program 0: 21:57:15 executing program 5: 21:57:15 executing program 1: 21:57:15 executing program 4: 21:57:15 executing program 3: 21:57:15 executing program 0: 21:57:15 executing program 2: 21:57:15 executing program 5: 21:57:15 executing program 0: 21:57:15 executing program 4: 21:57:15 executing program 2: 21:57:15 executing program 3: 21:57:16 executing program 4: 21:57:16 executing program 5: 21:57:16 executing program 1: 21:57:16 executing program 0: 21:57:16 executing program 2: 21:57:16 executing program 3: 21:57:16 executing program 5: 21:57:16 executing program 4: 21:57:16 executing program 3: 21:57:17 executing program 0: 21:57:17 executing program 4: 21:57:17 executing program 2: 21:57:17 executing program 5: 21:57:17 executing program 0: 21:57:17 executing program 1: 21:57:17 executing program 2: 21:57:17 executing program 5: 21:57:17 executing program 4: 21:57:17 executing program 3: 21:57:17 executing program 0: 21:57:18 executing program 4: 21:57:18 executing program 0: 21:57:18 executing program 2: 21:57:18 executing program 3: 21:57:18 executing program 5: 21:57:18 executing program 4: 21:57:19 executing program 1: 21:57:19 executing program 5: 21:57:19 executing program 2: 21:57:19 executing program 0: 21:57:19 executing program 3: 21:57:19 executing program 4: 21:57:19 executing program 2: 21:57:19 executing program 0: 21:57:19 executing program 4: 21:57:19 executing program 3: 21:57:19 executing program 5: 21:57:19 executing program 0: 21:57:20 executing program 1: 21:57:20 executing program 2: 21:57:20 executing program 3: 21:57:20 executing program 5: 21:57:20 executing program 4: 21:57:20 executing program 0: 21:57:20 executing program 5: 21:57:20 executing program 3: 21:57:20 executing program 4: 21:57:20 executing program 0: 21:57:20 executing program 2: 21:57:21 executing program 3: 21:57:21 executing program 1: 21:57:21 executing program 2: 21:57:21 executing program 4: 21:57:21 executing program 0: 21:57:21 executing program 5: 21:57:21 executing program 3: 21:57:21 executing program 0: 21:57:21 executing program 4: 21:57:21 executing program 5: 21:57:21 executing program 2: 21:57:22 executing program 3: 21:57:22 executing program 2: 21:57:22 executing program 1: 21:57:22 executing program 5: 21:57:22 executing program 0: 21:57:22 executing program 4: 21:57:22 executing program 3: 21:57:22 executing program 2: 21:57:23 executing program 4: 21:57:23 executing program 2: 21:57:23 executing program 5: 21:57:23 executing program 0: 21:57:23 executing program 3: 21:57:23 executing program 3: 21:57:23 executing program 1: 21:57:23 executing program 2: 21:57:23 executing program 0: 21:57:23 executing program 4: 21:57:23 executing program 5: 21:57:23 executing program 3: 21:57:24 executing program 4: 21:57:24 executing program 0: 21:57:24 executing program 5: 21:57:24 executing program 2: 21:57:24 executing program 3: 21:57:24 executing program 2: 21:57:25 executing program 1: 21:57:25 executing program 4: 21:57:25 executing program 0: 21:57:25 executing program 5: 21:57:25 executing program 3: 21:57:25 executing program 2: 21:57:25 executing program 5: 21:57:25 executing program 3: 21:57:25 executing program 4: 21:57:25 executing program 0: 21:57:25 executing program 2: 21:57:25 executing program 5: 21:57:26 executing program 1: 21:57:26 executing program 3: 21:57:26 executing program 4: 21:57:26 executing program 0: 21:57:26 executing program 2: 21:57:26 executing program 5: 21:57:26 executing program 3: 21:57:26 executing program 5: 21:57:26 executing program 2: 21:57:26 executing program 4: 21:57:26 executing program 0: 21:57:27 executing program 3: 21:57:27 executing program 1: 21:57:27 executing program 5: 21:57:27 executing program 4: 21:57:27 executing program 0: 21:57:27 executing program 2: 21:57:27 executing program 3: 21:57:28 executing program 5: 21:57:28 executing program 0: 21:57:28 executing program 2: 21:57:28 executing program 3: 21:57:28 executing program 4: 21:57:28 executing program 0: 21:57:29 executing program 1: 21:57:29 executing program 5: 21:57:29 executing program 3: 21:57:29 executing program 4: 21:57:29 executing program 2: 21:57:29 executing program 0: 21:57:29 executing program 5: 21:57:29 executing program 2: 21:57:29 executing program 3: 21:57:29 executing program 4: 21:57:29 executing program 0: 21:57:29 executing program 5: 21:57:30 executing program 1: 21:57:30 executing program 3: 21:57:30 executing program 2: 21:57:30 executing program 4: 21:57:30 executing program 0: 21:57:30 executing program 5: 21:57:31 executing program 4: 21:57:31 executing program 5: 21:57:31 executing program 3: 21:57:31 executing program 2: 21:57:31 executing program 0: 21:57:31 executing program 2: 21:57:31 executing program 1: 21:57:31 executing program 3: 21:57:31 executing program 5: 21:57:31 executing program 4: 21:57:31 executing program 0: 21:57:31 executing program 2: 21:57:32 executing program 0: 21:57:32 executing program 5: 21:57:32 executing program 4: 21:57:32 executing program 3: 21:57:32 executing program 2: 21:57:32 executing program 0: 21:57:33 executing program 1: 21:57:33 executing program 3: 21:57:33 executing program 2: 21:57:33 executing program 5: 21:57:33 executing program 4: 21:57:33 executing program 0: 21:57:33 executing program 2: 21:57:33 executing program 5: 21:57:33 executing program 3: 21:57:33 executing program 4: 21:57:33 executing program 0: 21:57:33 executing program 2: 21:57:34 executing program 1: 21:57:34 executing program 5: 21:57:34 executing program 4: 21:57:34 executing program 3: 21:57:34 executing program 0: 21:57:34 executing program 2: 21:57:34 executing program 0: 21:57:34 executing program 5: 21:57:34 executing program 3: 21:57:34 executing program 4: 21:57:34 executing program 2: 21:57:35 executing program 0: 21:57:35 executing program 1: 21:57:35 executing program 4: 21:57:35 executing program 3: 21:57:35 executing program 5: 21:57:35 executing program 0: 21:57:35 executing program 2: 21:57:35 executing program 4: 21:57:35 executing program 3: 21:57:35 executing program 2: 21:57:36 executing program 0: 21:57:36 executing program 5: 21:57:36 executing program 4: 21:57:36 executing program 1: 21:57:36 executing program 2: 21:57:36 executing program 3: 21:57:36 executing program 0: 21:57:36 executing program 5: 21:57:36 executing program 4: 21:57:37 executing program 0: 21:57:37 executing program 3: 21:57:37 executing program 4: 21:57:37 executing program 2: 21:57:37 executing program 5: 21:57:37 executing program 0: 21:57:38 executing program 1: 21:57:38 executing program 3: 21:57:38 executing program 5: 21:57:38 executing program 2: 21:57:38 executing program 4: 21:57:38 executing program 0: 21:57:38 executing program 3: 21:57:38 executing program 5: 21:57:38 executing program 4: 21:57:38 executing program 2: 21:57:38 executing program 0: 21:57:38 executing program 3: 21:57:39 executing program 1: 21:57:39 executing program 5: 21:57:39 executing program 2: 21:57:39 executing program 4: 21:57:39 executing program 0: 21:57:39 executing program 3: 21:57:39 executing program 2: 21:57:39 executing program 5: 21:57:39 executing program 4: 21:57:39 executing program 3: 21:57:39 executing program 0: 21:57:40 executing program 2: 21:57:40 executing program 1: 21:57:40 executing program 4: 21:57:40 executing program 0: 21:57:40 executing program 5: 21:57:40 executing program 3: 21:57:40 executing program 2: 21:57:40 executing program 4: 21:57:41 executing program 3: 21:57:41 executing program 0: 21:57:41 executing program 5: 21:57:41 executing program 2: 21:57:41 executing program 3: 21:57:41 executing program 1: 21:57:41 executing program 2: 21:57:41 executing program 0: 21:57:41 executing program 4: 21:57:41 executing program 5: 21:57:41 executing program 3: 21:57:42 executing program 2: 21:57:42 executing program 4: 21:57:42 executing program 0: 21:57:42 executing program 5: 21:57:42 executing program 3: 21:57:42 executing program 2: 21:57:43 executing program 1: 21:57:43 executing program 0: 21:57:43 executing program 4: 21:57:43 executing program 3: 21:57:43 executing program 5: 21:57:43 executing program 2: 21:57:43 executing program 5: 21:57:43 executing program 3: 21:57:43 executing program 2: 21:57:43 executing program 4: 21:57:43 executing program 0: 21:57:43 executing program 5: 21:57:44 executing program 1: 21:57:44 executing program 2: 21:57:44 executing program 3: 21:57:44 executing program 0: 21:57:44 executing program 4: 21:57:44 executing program 5: 21:57:44 executing program 5: 21:57:44 executing program 2: 21:57:44 executing program 3: 21:57:44 executing program 0: 21:57:44 executing program 4: 21:57:45 executing program 3: 21:57:45 executing program 1: 21:57:45 executing program 0: 21:57:45 executing program 5: 21:57:45 executing program 2: 21:57:45 executing program 4: 21:57:45 executing program 3: 21:57:45 executing program 2: 21:57:45 executing program 5: 21:57:45 executing program 4: 21:57:45 executing program 0: 21:57:45 executing program 3: 21:57:46 executing program 5: 21:57:46 executing program 1: 21:57:46 executing program 0: 21:57:46 executing program 2: 21:57:46 executing program 4: 21:57:46 executing program 3: 21:57:46 executing program 5: 21:57:46 executing program 3: 21:57:46 executing program 0: 21:57:46 executing program 2: 21:57:47 executing program 5: 21:57:47 executing program 4: 21:57:47 executing program 2: 21:57:47 executing program 1: 21:57:47 executing program 0: 21:57:47 executing program 3: 21:57:47 executing program 5: 21:57:47 executing program 4: 21:57:47 executing program 2: 21:57:48 executing program 5: 21:57:48 executing program 0: 21:57:48 executing program 2: 21:57:48 executing program 3: 21:57:48 executing program 4: 21:57:48 executing program 0: 21:57:49 executing program 1: 21:57:49 executing program 5: 21:57:49 executing program 3: 21:57:49 executing program 4: 21:57:49 executing program 2: 21:57:49 executing program 0: 21:57:49 executing program 2: 21:57:49 executing program 5: 21:57:49 executing program 3: 21:57:49 executing program 4: 21:57:50 executing program 0: 21:57:50 executing program 2: 21:57:50 executing program 1: 21:57:50 executing program 5: 21:57:50 executing program 3: 21:57:50 executing program 4: 21:57:50 executing program 0: 21:57:50 executing program 2: 21:57:51 executing program 3: 21:57:51 executing program 5: 21:57:51 executing program 2: 21:57:51 executing program 4: 21:57:51 executing program 0: 21:57:51 executing program 5: 21:57:51 executing program 1: 21:57:51 executing program 3: 21:57:51 executing program 4: 21:57:51 executing program 0: 21:57:51 executing program 2: 21:57:51 executing program 5: 21:57:52 executing program 3: 21:57:52 executing program 4: 21:57:52 executing program 2: 21:57:52 executing program 0: 21:57:52 executing program 5: 21:57:52 executing program 3: 21:57:52 executing program 1: 21:57:52 executing program 4: 21:57:52 executing program 5: 21:57:52 executing program 0: 21:57:52 executing program 2: 21:57:53 executing program 3: 21:57:53 executing program 5: 21:57:53 executing program 0: 21:57:53 executing program 2: 21:57:53 executing program 4: 21:57:53 executing program 3: 21:57:53 executing program 5: 21:57:54 executing program 1: 21:57:54 executing program 2: 21:57:54 executing program 0: 21:57:54 executing program 3: 21:57:54 executing program 4: 21:57:54 executing program 5: 21:57:54 executing program 4: 21:57:54 executing program 2: 21:57:54 executing program 5: 21:57:54 executing program 0: 21:57:54 executing program 3: 21:57:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="1107000000bd002000000700000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 21:57:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000a000000180004801300010062726f6164636173742d6c696e6b8e"], 0x2c}}, 0x0) 21:57:55 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nvram\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x7040, 0x0) 21:57:55 executing program 4: r0 = socket(0x15, 0x5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x114, 0x1d, 0x4abffc, 0x4) 21:57:55 executing program 0: r0 = socket(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x10d, 0x11, 0x0, &(0x7f0000000040)=0x300) 21:57:55 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000000)) 21:57:55 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000480)='/dev/radio#\x00', 0x2, 0x2) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/54, 0x2a9}, {&(0x7f0000000040)=""/182, 0xb6}], 0x2) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) 21:57:55 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r1}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_mount_image$ntfs(0x0, &(0x7f0000000140)='./file0/../file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x7f}, 0x2}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x3) 21:57:55 executing program 0: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x161042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) 21:57:55 executing program 5: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000540)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) 21:57:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000080)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x191affd, 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000140)='\x00\x00\xed\xff\x00\xb7\x9d\x00\x00\x00', 0x0) 21:57:56 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:57:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r2 = socket(0x400000000000010, 0x0, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000", 0xd) setsockopt$inet_mreqn(r1, 0x0, 0x30, &(0x7f0000000100)={@loopback, @empty}, 0x200001a8) 21:57:57 executing program 0: r0 = syz_open_dev$amidi(&(0x7f00000007c0)='/dev/amidi#\x00', 0x20, 0x2) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001800)='[', 0x1}], 0x1) 21:57:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read(r0, &(0x7f0000000140)=""/213, 0xd5) 21:57:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) 21:57:57 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='H', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000640)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000640)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={'sha1-avx\x00'}}) 21:57:57 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:57:57 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:57:57 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r1, &(0x7f000000d200)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000003c0)="d0a1037ea771ccd5b4bcc2c11da967dc28fd671b9a148c113001726bb150ec49", 0x20}, {&(0x7f0000000200)="d2", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001680)}], 0x1, &(0x7f000000da80)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @local}}}}], 0x28}}], 0x2, 0x0) 21:57:57 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0xfffc, 0x0, 0x3e}}) syz_open_pts(0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x14, 0x0, 0x0, 0x2, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x1006}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) openat$vcsa(0xffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/ip6_flowlabel\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x400}}) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r3, 0x0, &(0x7f0000000080)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x1000}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7f, 0x3, 0x0, 0x0, r3}) 21:57:57 executing program 0: r0 = io_uring_setup(0x192b, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x2, 0x960000, 0x4000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchown(r1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x3, 0x0, 0x0) [ 775.359392][T17324] could not allocate digest TFM handle sha1-avx [ 775.430675][T17332] could not allocate digest TFM handle sha1-avx 21:57:57 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0) 21:57:58 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:57:58 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup2(r1, r0) setsockopt$inet_tcp_int(r2, 0x6, 0xb, &(0x7f0000000000)=0x3, 0x4) connect$bt_sco(r2, &(0x7f0000000080)={0x1f, @fixed}, 0x8) 21:57:58 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x50, 0x1, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 21:57:58 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendto$inet(r0, &(0x7f0000000100)="f6", 0xffffffe7, 0xc000, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 21:57:58 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x12, r0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r0, &(0x7f0000002740)="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", 0xfff) sendmsg$inet6(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)='|', 0x1}], 0x1}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ab8000/0x3000)=nil, 0x3000}, &(0x7f0000000040)=0x10) 21:57:58 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f0000001980)=[{{&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @private}}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000040)='x', 0x1}], 0x1}}], 0x1, 0x400c07c) 21:57:58 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xffd4) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 776.657204][T17375] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 21:57:59 executing program 0: r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x84, 0x7, 0x0, &(0x7f0000000140)) 21:57:59 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, 0x0, 0x37cb1133) socket$inet(0x2, 0x3, 0x33) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 21:57:59 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x5000000000016) ptrace(0x10, r0) 21:57:59 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xffd4) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:57:59 executing program 0: 21:57:59 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xffd4) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:00 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a87587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 21:58:00 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x6) 21:58:00 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b7020000000000f6bfa30000000000000703000000feffff7a0af0ff836c6c0571a4f0ff00000000b7060000080000ff1e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000009e17890efaee5eab7ff8a8cdc21ce784909b849d5550ad855dab54f0877a6dd4dd74142bd87e17e60ecd36a056cdb61d69f2ffcaa10350e11cb97c8adf1bc9a0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0d8ca56b50f0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fba87b81d1106fb028997b2a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4f0400000000000000b91c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231b6d753a7be428ba953fd4aece69311687f4122073a236c3ad198e3f3a532efa04137d4524847d2638da3261c8162bb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3c, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 21:58:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x19}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) 21:58:00 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:00 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, 0x0, 0xff99) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x800, 0x0) splice(r0, 0x0, r3, 0x0, 0x1000000005047, 0x0) 21:58:00 executing program 0: 21:58:00 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 778.766305][ T29] audit: type=1804 audit(1599170281.003:23): pid=17418 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir057725981/syzkaller.BneUSA/249/cgroup.controllers" dev="sda1" ino=16370 res=1 [ 778.899844][ T29] audit: type=1804 audit(1599170281.173:24): pid=17418 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir057725981/syzkaller.BneUSA/249/cgroup.controllers" dev="sda1" ino=16370 res=1 21:58:02 executing program 2: 21:58:02 executing program 0: 21:58:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:02 executing program 5: 21:58:02 executing program 1: 21:58:02 executing program 4: 21:58:02 executing program 4: 21:58:02 executing program 5: 21:58:02 executing program 0: 21:58:02 executing program 2: 21:58:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:03 executing program 4: 21:58:03 executing program 5: 21:58:03 executing program 0: 21:58:03 executing program 2: 21:58:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:04 executing program 1: 21:58:04 executing program 4: 21:58:04 executing program 0: 21:58:04 executing program 5: 21:58:04 executing program 2: 21:58:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:04 executing program 0: 21:58:04 executing program 4: 21:58:04 executing program 5: 21:58:04 executing program 2: 21:58:04 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:04 executing program 4: 21:58:05 executing program 1: 21:58:05 executing program 5: 21:58:05 executing program 2: 21:58:05 executing program 0: 21:58:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:05 executing program 4: 21:58:05 executing program 5: 21:58:05 executing program 0: 21:58:05 executing program 2: 21:58:05 executing program 4: 21:58:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:06 executing program 5: 21:58:06 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x3}) 21:58:06 executing program 2: 21:58:06 executing program 4: 21:58:06 executing program 0: mount$9p_tcp(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000440)={'trans=tcp,', {'port'}, 0x2c, {[{@privport='privport'}]}}) 21:58:06 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0x400000000000006f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in=@empty, {@in=@broadcast, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x2}}}, 0x128}}, 0x0) 21:58:07 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3000009, 0x10032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x35, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) 21:58:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @loopback}]}}]}, 0x3c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0xe6397c2680) 21:58:07 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0x400000000000006f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:07 executing program 0: ioperm(0x0, 0x400, 0x5) open_tree(0xffffffffffffff9c, 0x0, 0x8080) 21:58:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c5610067f0200ff00000ec00000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000080001000c0c10000300000005000000", 0x58}], 0x1) [ 785.085092][T17503] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 785.227571][T17513] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:58:07 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001ec0)='ns/cgroup\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) 21:58:08 executing program 1: io_setup(0x1, &(0x7f0000000100)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r0, 0x2, &(0x7f0000000a40)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x0]) 21:58:08 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 21:58:08 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0x400000000000006f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:08 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 21:58:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x28}}, 0x0) 21:58:08 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000280)=':\xfd7\xd7a*\xe0\xf78\x0e\xaf\x8f\x8eY\x9eF\xd1\xda\x1b\n,_` \xf70\x1aQ\xc5\x85l\f6\xe1Z\xa9\xedD\xce\xf2o\x1f@\xf80\x8c0\xa0{\xe1\xa9\xaa\x01J\xe7\x12\x1a\xcd7li,7\xe0\xfe\xf8\x93G\x83\xda\xcd\x83\xc1b\x84A\xd9go@\xc1\xba\xbbY=\xd8\x99TE\xe1n\xde\x98\x9a\xdd\x8cQ\x1d\xcd\xab\x82O\x8d\xc8\xa8yu\xcb\xdd\x03o`i\x90P#^\x8b;\xf4\xa9#\x93\xabD\xe9\x02\xecX\xf5\xa3\xc0\x1b\xf49G\xfc\x84\x92c\x80\xf2\xf4\x1d\xf1\xfeP\x8d\x99\xa3CK\xbaj\x98U\r3m\x1f%\xff\x94\xc2\xf7\xc1x\xa4&\xc8\x15\x93\xca\x81S/0\x17k\x98\x81\xe7\xb7\xd5eh\r\x8e\x82\x81\xb0\xe4\x02\xf4\xae\xc7\x86y\xf1Oj\xd4f!\xa2\xb7-\xa2\x96\x03\x14\x9a\x81\xb0K\x9e\xd1Y3\x99.X=\x0f\xa8r\xaa\vxxvx\x9e\xaf7\xe8\r\xf6\x82\xb6@F\xc9\xd1\x8e\xe2e\xbd\xb1Uz\xeb\xbf\xeb\"\xfd\x87\x15\xdcQ\xa1\x984\x8f\xfc\x94\xf7\x0e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xeb\x930\xf2\xe0\xa7\t\b.\x90I\x8b\xd0\xd11\x93\xa7A?9\xc5\xb6\x97\xfa\a^\xaa\xac\xfc\xd7fd\xad\xdc\xc2\x1fD\xe5lP\xb5\at\xf6\x13\xf8_v\xd4\xd3\x9d\x9a\x15\x7f\x9b\x03+\x1b\x9en\x8e\x87\x93\x97o\xd2\x9a\xaa1\x95-\x8f\xcb\xed\xd4\xbe\xa2\x85\xdf\x9d\xfcx-\x02`$w\xef\xdb\xff\x84~|\xafP\"r\x82m\f\xe9\xc8\xa2T^3+X\x00?5Y\x05\xc0?\xe7\xc2f\xf9\xf0\x8a\xa6_>\x99\xfb\x8c\x82\xd4\xfc\xaa\xcf\xdd\xf2\r\x8c\x14\xb5\xab\x8c\xe4\xe4\x86\xf3\xd4\x8b\xe7\xdb4\f\xcf^g\xf1`ay') [ 785.985311][T17529] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 786.063234][T17533] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 21:58:08 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) 21:58:08 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)={0x24, 0x6a, 0x901, 0x0, 0x0, "", [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}, 0x24}], 0x1}, 0x0) 21:58:08 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x114, 0x2, 0x0, 0x0) 21:58:09 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) [ 786.864322][T17542] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 21:58:09 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:10 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)="48000000140019", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000640)=ANY=[], 0xa) close(r2) socket$netlink(0x10, 0x3, 0x15) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 21:58:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000d940)={0x14, r1, 0x3fd, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 21:58:10 executing program 2: sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@timestamping={{0x14}}], 0x18}}], 0x1, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f00000001c0)="00ba", &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000340), &(0x7f0000000400)}, 0x20) bpf$MAP_UPDATE_ELEM(0x3, &(0x7f0000000040)={r0, &(0x7f00000001c0), 0x0}, 0x20) 21:58:10 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) 21:58:10 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:10 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8980, &(0x7f0000000500)={'wg2\x00'}) 21:58:10 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) 21:58:10 executing program 0: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mkdir(0x0, 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r2, 0x301, 0x0, 0x0, {0x6}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x2c}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) sendmsg$nl_route(r0, 0x0, 0x0) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)=@known='user.syz\x00', &(0x7f0000000300)=']%@@:\'\\\'+,$-\x00', 0xd, 0x3) 21:58:10 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x10010}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:10 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) 21:58:10 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:11 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) [ 789.831622][T17593] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 789.842631][T17593] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. 21:58:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xfff64cea7f3c0206, 0x0) getsockname$packet(r1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) 21:58:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x8001000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x2d8, 0x0, 0x0, 0x148, 0x0, 0x0, 0x240, 0x2a8, 0x2a8, 0x240, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast1, 0x0, 0x0, 'ipvlan0\x00', 'ip_vti0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x0, 0x3, 0x0, 0x0, 0x20000003, 0x7}}}, @common=@unspec=@devgroup={{0x38, 'devgroup\x00'}, {0x5}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@uncond, 0x0, 0xb8, 0x118, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) 21:58:12 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @local}, 0x10) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000017000)=0x9, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2}, 0x10) listen(r1, 0x0) 21:58:12 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) 21:58:12 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:12 executing program 2: syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000001600)=[{&(0x7f0000000140)="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", 0x1fe, 0x2}], 0x0, &(0x7f0000000100)) 21:58:12 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) [ 790.385934][T17606] XFS (loop2): Invalid superblock magic number 21:58:12 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}], {0x14, 0x11, 0x2}}, 0x44}}, 0x0) [ 790.534957][T17606] XFS (loop2): Invalid superblock magic number 21:58:12 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0xf1ca4447366d40a7}, 0x1c}}, 0x0) 21:58:13 executing program 2: perf_event_open(&(0x7f00000002c0)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000b40)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba00a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296dee360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b7259415f475a772b84977a6b05381dbe6259bc510f0f70c3e9", 0x78}, {&(0x7f0000003280)="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", 0x331}], 0x2) sendto$inet(r0, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in, @in6=@private1}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xe8) read(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="d80300004230ad84db849b7cb8b957eac4997fbdeac2f758f76dc844", @ANYBLOB="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"], 0x3d8}, 0x1, 0x0, 0x0, 0x4000}, 0x80000) 21:58:13 executing program 4: connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) 21:58:16 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0xc0481273, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, "a200ccf65496a736b4a4b7a55454ccc347da8edec3f23b1ae465ea59ccd1561300000000000080002c417eba915cb15de2544b36e6c069045ce2f66bdb8adaea", "4a3834033219f71a03df77165b25dec62bc63a384b98ac0400000000000000281e21a70e895e2883d85687a9c4986103317a96acf605f34e00", "364196e685e6ff8664270df40194db794138031ad2971ef575dac100"}) 21:58:16 executing program 0: ioperm(0x0, 0xc6, 0xa371) fsopen(0x0, 0x0) 21:58:16 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:16 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) read(r0, 0x0, 0x0) 21:58:16 executing program 4: connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) 21:58:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:16 executing program 4: connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) 21:58:16 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:16 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x12, r0, 0x0) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) 21:58:16 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000200)={0x3, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}}) 21:58:16 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x7, @dev={[], 0x34}, 'macvlan1\x00'}}, 0x1e) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) recvmmsg(r0, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 21:58:16 executing program 4: r0 = socket$inet(0x2b, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) 21:58:17 executing program 1: ioperm(0x0, 0x3fc, 0xa) rseq(0x0, 0xffffffffffffffe9, 0xffffffffffffffff, 0x0) 21:58:17 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:17 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000080)) 21:58:17 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x2) 21:58:17 executing program 4: r0 = socket$inet(0x2b, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) 21:58:17 executing program 2: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = socket$inet6(0xa, 0x3, 0x2) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x600, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/103, 0x67}], 0x1) [ 795.444212][ T29] audit: type=1804 audit(1599170297.714:25): pid=17698 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir775012810/syzkaller.dvGaGZ/493/bus" dev="sda1" ino=16379 res=1 [ 795.564994][ T29] audit: type=1804 audit(1599170297.784:26): pid=17705 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir775012810/syzkaller.dvGaGZ/493/bus" dev="sda1" ino=16379 res=1 21:58:17 executing program 4: r0 = socket$inet(0x2b, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) 21:58:18 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:18 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SIOCRSACCEPT(r0, 0xc0045103) 21:58:18 executing program 5: 21:58:18 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) 21:58:18 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) [ 796.553978][T17725] overlayfs: './file1' not a directory 21:58:19 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x0, 0x2}) 21:58:19 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x143, &(0x7f0000000140)="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"}}], 0x1c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 21:58:19 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:20 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r0, 0xc0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)}}, 0x10) 21:58:20 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:20 executing program 1: sendmsg$inet(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0xb, 0x6, 0x209e20, 0x2, 0x1}, 0x40) perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000000), &(0x7f0000000440)=""/130}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f00000000c0), &(0x7f0000000340)=""/203}, 0x20) 21:58:20 executing program 5: r0 = eventfd2(0x0, 0x3) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000d4a000)={0x10}) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000740)="77b2770dbfdb54f4", 0x8}], 0x1) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000300)={0x80000000000009}) r2 = socket$inet(0x2, 0x7, 0x4) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r4 = socket$inet(0x10, 0x5, 0x1) sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="24000000000107031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) clock_gettime(0x6, &(0x7f0000000080)) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x9, 0x2010, r2, 0xffffc000) open(&(0x7f0000000000)='.\x00', 0x8400, 0x0) personality(0x5000007) socket$inet6(0xa, 0xe, 0x3f) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f00000002c0)="295ee12b1f16bf120106f1") epoll_create1(0x80006) r5 = socket(0x1d, 0xfc76db216379f614, 0x1116) setsockopt$inet_udp_int(r5, 0x11, 0x6f, &(0x7f0000000100)=0x7, 0x4) pipe(&(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = mq_open(&(0x7f00005a1ffb)='e\xfb \xff\xff', 0x42, 0x0, &(0x7f0000000340)={0x0, 0x7, 0x6, 0x3}) ppoll(&(0x7f00000001c0)=[{r6, 0x8000}, {0xffffffffffffffff, 0x420}], 0x2, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240), 0x8) mq_timedsend(r6, &(0x7f00000e6000), 0x0, 0xe7, &(0x7f0000e0b000)) 21:58:20 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) 21:58:20 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:20 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) 21:58:21 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1f1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[&(0x7f0000000200)=',+^\x00', &(0x7f0000000880)='=\x92\xc6\x95\xec\x10B=\xed\xb1\x1a\xee\xca5*\xd9\xc8GDG\xe2]\x8d\x8b\x01L\xe3\v5\xe4\xbb@\xd3#\x05]RA\x99\xff\xb5S\xe6\x10n\xf0T\x7f\xd9R\xd4\xaa\xd5\x85\x13Nuv\x15Cn\x8br\xb7vv\xa3\xfe\xc7S?\xfc\x01=G\xe7\xaa']) 21:58:21 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) 21:58:21 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x4000000, 0x0) 21:58:22 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1f1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[&(0x7f0000000200)=',+^\x00', &(0x7f0000000880)='=\x92\xc6\x95\xec\x10B=\xed\xb1\x1a\xee\xca5*\xd9\xc8GDG\xe2]\x8d\x8b\x01L\xe3\v5\xe4\xbb@\xd3#\x05]RA\x99\xff\xb5S\xe6\x10n\xf0T\x7f\xd9R\xd4\xaa\xd5\x85\x13Nuv\x15Cn\x8br\xb7vv\xa3\xfe\xc7S?\xfc\x01=G\xe7\xaa']) 21:58:22 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) 21:58:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4, 0x2}]}]}, 0x20}}, 0x0) 21:58:22 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x82000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x3, 0x1, 0x0, 0xfffc, 0x400000000}, 0x20) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40400240}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x14, r3, 0x8, 0x70bd29, 0x25dfdbff}, 0x14}}, 0x240000d0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r3, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x40}, 0x1, 0x0, 0x0, 0x88c0}, 0x44) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000002c0)="0f090f017e020f30f30f090fc72e8f00baf80c66b85e67af8e66efbafc0cb8bb94ef66b87746bf570f23c80f21f86635000090000f23f8ba200066ed66b96308000066b870a9000066ba000000000f3066b9800000c00f326635004000000f30", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 21:58:22 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1f1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[&(0x7f0000000200)=',+^\x00', &(0x7f0000000880)='=\x92\xc6\x95\xec\x10B=\xed\xb1\x1a\xee\xca5*\xd9\xc8GDG\xe2]\x8d\x8b\x01L\xe3\v5\xe4\xbb@\xd3#\x05]RA\x99\xff\xb5S\xe6\x10n\xf0T\x7f\xd9R\xd4\xaa\xd5\x85\x13Nuv\x15Cn\x8br\xb7vv\xa3\xfe\xc7S?\xfc\x01=G\xe7\xaa']) 21:58:22 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) 21:58:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9) 21:58:22 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:22 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1f1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[&(0x7f0000000200)=',+^\x00', &(0x7f0000000880)='=\x92\xc6\x95\xec\x10B=\xed\xb1\x1a\xee\xca5*\xd9\xc8GDG\xe2]\x8d\x8b\x01L\xe3\v5\xe4\xbb@\xd3#\x05]RA\x99\xff\xb5S\xe6\x10n\xf0T\x7f\xd9R\xd4\xaa\xd5\x85\x13Nuv\x15Cn\x8br\xb7vv\xa3\xfe\xc7S?\xfc\x01=G\xe7\xaa']) 21:58:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x400}]}}}]}, 0x3c}}, 0x0) 21:58:22 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) 21:58:23 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:23 executing program 5: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x40247007, 0x0) 21:58:23 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1f1) close(r0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[&(0x7f0000000200)=',+^\x00', &(0x7f0000000880)='=\x92\xc6\x95\xec\x10B=\xed\xb1\x1a\xee\xca5*\xd9\xc8GDG\xe2]\x8d\x8b\x01L\xe3\v5\xe4\xbb@\xd3#\x05]RA\x99\xff\xb5S\xe6\x10n\xf0T\x7f\xd9R\xd4\xaa\xd5\x85\x13Nuv\x15Cn\x8br\xb7vv\xa3\xfe\xc7S?\xfc\x01=G\xe7\xaa']) 21:58:23 executing program 2: r0 = getpid() sched_setaffinity(r0, 0x1, &(0x7f0000000040)=0x5) r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000f00f88)) msgsnd(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="9c"], 0x1, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000580)={{0x0}}) 21:58:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x48, 0x0, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x48}}, 0x0) 21:58:24 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) 21:58:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)={0x11c, 0x19, 0x1, 0x0, 0x0, "", [@typed={0x102, 0x0, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x1e, 0x0, 0x0, @fd}]}, 0x11c}], 0x1}, 0x0) 21:58:24 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:24 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1f1) close(r0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[&(0x7f0000000200)=',+^\x00', &(0x7f0000000880)='=\x92\xc6\x95\xec\x10B=\xed\xb1\x1a\xee\xca5*\xd9\xc8GDG\xe2]\x8d\x8b\x01L\xe3\v5\xe4\xbb@\xd3#\x05]RA\x99\xff\xb5S\xe6\x10n\xf0T\x7f\xd9R\xd4\xaa\xd5\x85\x13Nuv\x15Cn\x8br\xb7vv\xa3\xfe\xc7S?\xfc\x01=G\xe7\xaa']) 21:58:24 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1f1) close(r0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[&(0x7f0000000200)=',+^\x00', &(0x7f0000000880)='=\x92\xc6\x95\xec\x10B=\xed\xb1\x1a\xee\xca5*\xd9\xc8GDG\xe2]\x8d\x8b\x01L\xe3\v5\xe4\xbb@\xd3#\x05]RA\x99\xff\xb5S\xe6\x10n\xf0T\x7f\xd9R\xd4\xaa\xd5\x85\x13Nuv\x15Cn\x8br\xb7vv\xa3\xfe\xc7S?\xfc\x01=G\xe7\xaa']) 21:58:24 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) 21:58:24 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0x101}, 0x13) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f0000000580), &(0x7f00000007c0)}, 0x20) 21:58:24 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:24 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:58:24 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) 21:58:25 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2b}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @local}, 0x0, 0x33}, 0x0, @in6=@loopback}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x8000000000001f4) [ 802.991068][T17866] EXT4-fs (loop2): bad s_min_extra_isize: 18839 [ 803.082658][T17870] EXT4-fs (loop2): bad s_min_extra_isize: 18839 21:58:25 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x3f) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 21:58:25 executing program 0: creat(&(0x7f0000000280)='./file0\x00', 0x1f1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[&(0x7f0000000200)=',+^\x00', &(0x7f0000000880)='=\x92\xc6\x95\xec\x10B=\xed\xb1\x1a\xee\xca5*\xd9\xc8GDG\xe2]\x8d\x8b\x01L\xe3\v5\xe4\xbb@\xd3#\x05]RA\x99\xff\xb5S\xe6\x10n\xf0T\x7f\xd9R\xd4\xaa\xd5\x85\x13Nuv\x15Cn\x8br\xb7vv\xa3\xfe\xc7S?\xfc\x01=G\xe7\xaa']) 21:58:25 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:25 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) 21:58:25 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:58:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x1d, 0x0, "2461758a5264d9a14fb62fe6bce0eeb5025264c73c839e09f5ff08cccc6e3ffd7477f28557a8556964d283b24c2a2bb1dcc5a8d735eec48df90a55e5c0b3a337860cfd677448d1258641934ef7302d02"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 21:58:25 executing program 0: creat(&(0x7f0000000280)='./file0\x00', 0x1f1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[&(0x7f0000000200)=',+^\x00', &(0x7f0000000880)='=\x92\xc6\x95\xec\x10B=\xed\xb1\x1a\xee\xca5*\xd9\xc8GDG\xe2]\x8d\x8b\x01L\xe3\v5\xe4\xbb@\xd3#\x05]RA\x99\xff\xb5S\xe6\x10n\xf0T\x7f\xd9R\xd4\xaa\xd5\x85\x13Nuv\x15Cn\x8br\xb7vv\xa3\xfe\xc7S?\xfc\x01=G\xe7\xaa']) [ 803.525050][T17883] EXT4-fs (loop2): bad s_min_extra_isize: 18839 21:58:25 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) 21:58:26 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:26 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) 21:58:26 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:58:26 executing program 0: creat(&(0x7f0000000280)='./file0\x00', 0x1f1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[&(0x7f0000000200)=',+^\x00', &(0x7f0000000880)='=\x92\xc6\x95\xec\x10B=\xed\xb1\x1a\xee\xca5*\xd9\xc8GDG\xe2]\x8d\x8b\x01L\xe3\v5\xe4\xbb@\xd3#\x05]RA\x99\xff\xb5S\xe6\x10n\xf0T\x7f\xd9R\xd4\xaa\xd5\x85\x13Nuv\x15Cn\x8br\xb7vv\xa3\xfe\xc7S?\xfc\x01=G\xe7\xaa']) [ 803.909812][T17894] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 803.952749][T17894] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 804.281255][T17903] EXT4-fs (loop2): bad s_min_extra_isize: 18839 21:58:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0, 0x26}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/kcm\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x7a7a, 0x0) 21:58:26 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0305616, &(0x7f0000000080)={0x0, 0x0, "1b01d3c0ab51790f3ff3d2d2eafdae69ca52cd0e15f04c424db988d6abef214b"}) 21:58:26 executing program 0: close(0xffffffffffffffff) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[&(0x7f0000000200)=',+^\x00', &(0x7f0000000880)='=\x92\xc6\x95\xec\x10B=\xed\xb1\x1a\xee\xca5*\xd9\xc8GDG\xe2]\x8d\x8b\x01L\xe3\v5\xe4\xbb@\xd3#\x05]RA\x99\xff\xb5S\xe6\x10n\xf0T\x7f\xd9R\xd4\xaa\xd5\x85\x13Nuv\x15Cn\x8br\xb7vv\xa3\xfe\xc7S?\xfc\x01=G\xe7\xaa']) 21:58:26 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0}, 0x50) 21:58:26 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:26 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:58:27 executing program 0: close(0xffffffffffffffff) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[&(0x7f0000000200)=',+^\x00', &(0x7f0000000880)='=\x92\xc6\x95\xec\x10B=\xed\xb1\x1a\xee\xca5*\xd9\xc8GDG\xe2]\x8d\x8b\x01L\xe3\v5\xe4\xbb@\xd3#\x05]RA\x99\xff\xb5S\xe6\x10n\xf0T\x7f\xd9R\xd4\xaa\xd5\x85\x13Nuv\x15Cn\x8br\xb7vv\xa3\xfe\xc7S?\xfc\x01=G\xe7\xaa']) 21:58:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x20, 0x26, 0x801}, 0x20}}, 0x0) [ 804.894321][T17923] EXT4-fs (loop2): bad s_min_extra_isize: 18839 21:58:27 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1b}}) 21:58:27 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:58:27 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:27 executing program 0: close(0xffffffffffffffff) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[&(0x7f0000000200)=',+^\x00', &(0x7f0000000880)='=\x92\xc6\x95\xec\x10B=\xed\xb1\x1a\xee\xca5*\xd9\xc8GDG\xe2]\x8d\x8b\x01L\xe3\v5\xe4\xbb@\xd3#\x05]RA\x99\xff\xb5S\xe6\x10n\xf0T\x7f\xd9R\xd4\xaa\xd5\x85\x13Nuv\x15Cn\x8br\xb7vv\xa3\xfe\xc7S?\xfc\x01=G\xe7\xaa']) [ 805.619189][T17940] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, and O_DIRECT support! [ 805.631649][T17940] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) 21:58:28 executing program 1: set_mempolicy(0x8002, &(0x7f0000000040)=0x35e, 0xb) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0xa, 0x0) 21:58:28 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c0b7ef5"}}) 21:58:28 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:28 executing program 0: r0 = creat(0x0, 0x1f1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[&(0x7f0000000200)=',+^\x00', &(0x7f0000000880)='=\x92\xc6\x95\xec\x10B=\xed\xb1\x1a\xee\xca5*\xd9\xc8GDG\xe2]\x8d\x8b\x01L\xe3\v5\xe4\xbb@\xd3#\x05]RA\x99\xff\xb5S\xe6\x10n\xf0T\x7f\xd9R\xd4\xaa\xd5\x85\x13Nuv\x15Cn\x8br\xb7vv\xa3\xfe\xc7S?\xfc\x01=G\xe7\xaa']) 21:58:28 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x6, &(0x7f00000013c0)={0x0, {{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 21:58:28 executing program 0: r0 = creat(0x0, 0x1f1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[&(0x7f0000000200)=',+^\x00', &(0x7f0000000880)='=\x92\xc6\x95\xec\x10B=\xed\xb1\x1a\xee\xca5*\xd9\xc8GDG\xe2]\x8d\x8b\x01L\xe3\v5\xe4\xbb@\xd3#\x05]RA\x99\xff\xb5S\xe6\x10n\xf0T\x7f\xd9R\xd4\xaa\xd5\x85\x13Nuv\x15Cn\x8br\xb7vv\xa3\xfe\xc7S?\xfc\x01=G\xe7\xaa']) 21:58:28 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:58:28 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f00000001c0)='./bus/file0\x00', 0x0) mount$overlay(0x400002, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,nfs_export=on']) lsetxattr$security_capability(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000180)='security.capability\x00', 0x0, 0x0, 0x0) lstat(&(0x7f0000000200)='./bus/file0\x00', &(0x7f0000000280)) 21:58:28 executing program 3: syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:28 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000080), 0x4) 21:58:28 executing program 0: r0 = creat(0x0, 0x1f1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[&(0x7f0000000200)=',+^\x00', &(0x7f0000000880)='=\x92\xc6\x95\xec\x10B=\xed\xb1\x1a\xee\xca5*\xd9\xc8GDG\xe2]\x8d\x8b\x01L\xe3\v5\xe4\xbb@\xd3#\x05]RA\x99\xff\xb5S\xe6\x10n\xf0T\x7f\xd9R\xd4\xaa\xd5\x85\x13Nuv\x15Cn\x8br\xb7vv\xa3\xfe\xc7S?\xfc\x01=G\xe7\xaa']) 21:58:28 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[&(0x7f0000000200)=',+^\x00', &(0x7f0000000880)='=\x92\xc6\x95\xec\x10B=\xed\xb1\x1a\xee\xca5*\xd9\xc8GDG\xe2]\x8d\x8b\x01L\xe3\v5\xe4\xbb@\xd3#\x05]RA\x99\xff\xb5S\xe6\x10n\xf0T\x7f\xd9R\xd4\xaa\xd5\x85\x13Nuv\x15Cn\x8br\xb7vv\xa3\xfe\xc7S?\xfc\x01=G\xe7\xaa']) [ 806.470892][T17960] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) 21:58:29 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8c}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 21:58:29 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[&(0x7f0000000200)=',+^\x00', &(0x7f0000000880)='=\x92\xc6\x95\xec\x10B=\xed\xb1\x1a\xee\xca5*\xd9\xc8GDG\xe2]\x8d\x8b\x01L\xe3\v5\xe4\xbb@\xd3#\x05]RA\x99\xff\xb5S\xe6\x10n\xf0T\x7f\xd9R\xd4\xaa\xd5\x85\x13Nuv\x15Cn\x8br\xb7vv\xa3\xfe\xc7S?\xfc\x01=G\xe7\xaa']) 21:58:29 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:58:29 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb6d, 0x0, @perf_config_ext={0x0, 0xa8}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f0000000080)=""/38, &(0x7f00000000c0)=0x26) r3 = socket(0x11, 0x800000003, 0x8) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ppoll(&(0x7f00000001c0)=[{r4, 0x40}, {r0}, {r1, 0x3000}], 0x3, &(0x7f0000000240)={r5, r6+60000000}, &(0x7f00000003c0)={[0xfffffffffffffff7]}, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000540)='nv\x00', 0x3) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f0000000180)=0x84) sendto$inet(r2, &(0x7f00000012c0)="0c268a347f1f6588b967480541ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bbecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x20000, 0x0) 21:58:29 executing program 3: syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:29 executing program 5: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "000001000000000008fc9dfc00000000000200f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000e10004003c5811039e15775027ecce66fd792bbf0e5bf5fd9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x1a1, &(0x7f0000000480)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = getpid() tkill(r1, 0x2f) 21:58:29 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[&(0x7f0000000200)=',+^\x00', &(0x7f0000000880)='=\x92\xc6\x95\xec\x10B=\xed\xb1\x1a\xee\xca5*\xd9\xc8GDG\xe2]\x8d\x8b\x01L\xe3\v5\xe4\xbb@\xd3#\x05]RA\x99\xff\xb5S\xe6\x10n\xf0T\x7f\xd9R\xd4\xaa\xd5\x85\x13Nuv\x15Cn\x8br\xb7vv\xa3\xfe\xc7S?\xfc\x01=G\xe7\xaa']) 21:58:29 executing program 5: unshare(0xa000480) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) [ 807.383329][T17989] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) 21:58:29 executing program 0: creat(&(0x7f0000000280)='./file0\x00', 0x1f1) close(0xffffffffffffffff) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[&(0x7f0000000200)=',+^\x00', &(0x7f0000000880)='=\x92\xc6\x95\xec\x10B=\xed\xb1\x1a\xee\xca5*\xd9\xc8GDG\xe2]\x8d\x8b\x01L\xe3\v5\xe4\xbb@\xd3#\x05]RA\x99\xff\xb5S\xe6\x10n\xf0T\x7f\xd9R\xd4\xaa\xd5\x85\x13Nuv\x15Cn\x8br\xb7vv\xa3\xfe\xc7S?\xfc\x01=G\xe7\xaa']) 21:58:29 executing program 3: syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x80045510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:58:30 executing program 2: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:58:30 executing program 0: creat(&(0x7f0000000280)='./file0\x00', 0x1f1) close(0xffffffffffffffff) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[&(0x7f0000000200)=',+^\x00', &(0x7f0000000880)='=\x92\xc6\x95\xec\x10B=\xed\xb1\x1a\xee\xca5*\xd9\xc8GDG\xe2]\x8d\x8b\x01L\xe3\v5\xe4\xbb@\xd3#\x05]RA\x99\xff\xb5S\xe6\x10n\xf0T\x7f\xd9R\xd4\xaa\xd5\x85\x13Nuv\x15Cn\x8br\xb7vv\xa3\xfe\xc7S?\xfc\x01=G\xe7\xaa']) [ 808.437841][T18017] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) 21:58:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x1c}}, 0x4040000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000100)=0x7f, 0x2) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[], 0x2d4}, 0x1, 0x0, 0x0, 0x5c49a02861071453}, 0x4000804) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x800000000000000) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x10000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @local, 0x0, 0x0, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 21:58:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x0, {0x0, 0x520c}}) 21:58:31 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 21:58:31 executing program 2: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:58:31 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) dup2(r0, r1) 21:58:31 executing program 0: creat(&(0x7f0000000280)='./file0\x00', 0x1f1) close(0xffffffffffffffff) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[&(0x7f0000000200)=',+^\x00', &(0x7f0000000880)='=\x92\xc6\x95\xec\x10B=\xed\xb1\x1a\xee\xca5*\xd9\xc8GDG\xe2]\x8d\x8b\x01L\xe3\v5\xe4\xbb@\xd3#\x05]RA\x99\xff\xb5S\xe6\x10n\xf0T\x7f\xd9R\xd4\xaa\xd5\x85\x13Nuv\x15Cn\x8br\xb7vv\xa3\xfe\xc7S?\xfc\x01=G\xe7\xaa']) 21:58:31 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1f1) close(r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[&(0x7f0000000200)=',+^\x00', &(0x7f0000000880)='=\x92\xc6\x95\xec\x10B=\xed\xb1\x1a\xee\xca5*\xd9\xc8GDG\xe2]\x8d\x8b\x01L\xe3\v5\xe4\xbb@\xd3#\x05]RA\x99\xff\xb5S\xe6\x10n\xf0T\x7f\xd9R\xd4\xaa\xd5\x85\x13Nuv\x15Cn\x8br\xb7vv\xa3\xfe\xc7S?\xfc\x01=G\xe7\xaa']) [ 809.148558][T18033] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) 21:58:31 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 21:58:31 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 21:58:31 executing program 2: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:58:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x90, 0x20, 0x1, 0x0, 0x0, "", [@nested={0x80, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="6963c554d48665ae3ee722cee5166b81202ea4a4e2715469a8b950ee0f72dceccaf07319aaff11c1aec1f5735aac23da43c154bc2e4ae665024b5d2d149ab78ff7467d972f4e544a1e467e3ea1a028a25ee3eb6bd0fdd3860fb0fb702edccaced032c90863531de0d5041cf0c8bad469"]}]}, 0x90}], 0x1}, 0x0) 21:58:32 executing program 5: unshare(0x20000400) pipe(&(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) sendfile(r1, r0, 0x0, 0x0) [ 809.846465][T18052] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) [ 809.918699][T18055] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.4'. 21:58:33 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000002c0)=0x7, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000380)=0x7, 0x4) 21:58:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xffd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 21:58:33 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1f1) close(r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[&(0x7f0000000200)=',+^\x00', &(0x7f0000000880)='=\x92\xc6\x95\xec\x10B=\xed\xb1\x1a\xee\xca5*\xd9\xc8GDG\xe2]\x8d\x8b\x01L\xe3\v5\xe4\xbb@\xd3#\x05]RA\x99\xff\xb5S\xe6\x10n\xf0T\x7f\xd9R\xd4\xaa\xd5\x85\x13Nuv\x15Cn\x8br\xb7vv\xa3\xfe\xc7S?\xfc\x01=G\xe7\xaa']) 21:58:33 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:58:33 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000080)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 21:58:33 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000180)) [ 810.954114][T18074] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) 21:58:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x50, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_DPORT={0x6}]}, 0x50}}, 0x0) 21:58:33 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:58:33 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x5) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 21:58:33 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1f1) close(r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[&(0x7f0000000200)=',+^\x00', &(0x7f0000000880)='=\x92\xc6\x95\xec\x10B=\xed\xb1\x1a\xee\xca5*\xd9\xc8GDG\xe2]\x8d\x8b\x01L\xe3\v5\xe4\xbb@\xd3#\x05]RA\x99\xff\xb5S\xe6\x10n\xf0T\x7f\xd9R\xd4\xaa\xd5\x85\x13Nuv\x15Cn\x8br\xb7vv\xa3\xfe\xc7S?\xfc\x01=G\xe7\xaa']) 21:58:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, 0x0, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x40}}, 0x0) [ 811.675026][T18096] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) [ 811.935460][T18104] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 21:58:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 21:58:34 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000011c0)={0x2020}, 0x2020) 21:58:34 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:58:34 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1f1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(0x0, 0x0, &(0x7f0000000800)=[&(0x7f0000000200)=',+^\x00', &(0x7f0000000880)='=\x92\xc6\x95\xec\x10B=\xed\xb1\x1a\xee\xca5*\xd9\xc8GDG\xe2]\x8d\x8b\x01L\xe3\v5\xe4\xbb@\xd3#\x05]RA\x99\xff\xb5S\xe6\x10n\xf0T\x7f\xd9R\xd4\xaa\xd5\x85\x13Nuv\x15Cn\x8br\xb7vv\xa3\xfe\xc7S?\xfc\x01=G\xe7\xaa']) 21:58:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000300)='vcan0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 21:58:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:34 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1f1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(0x0, 0x0, &(0x7f0000000800)=[&(0x7f0000000200)=',+^\x00', &(0x7f0000000880)='=\x92\xc6\x95\xec\x10B=\xed\xb1\x1a\xee\xca5*\xd9\xc8GDG\xe2]\x8d\x8b\x01L\xe3\v5\xe4\xbb@\xd3#\x05]RA\x99\xff\xb5S\xe6\x10n\xf0T\x7f\xd9R\xd4\xaa\xd5\x85\x13Nuv\x15Cn\x8br\xb7vv\xa3\xfe\xc7S?\xfc\x01=G\xe7\xaa']) [ 812.579199][T18125] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) 21:58:35 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1f1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(0x0, 0x0, &(0x7f0000000800)=[&(0x7f0000000200)=',+^\x00', &(0x7f0000000880)='=\x92\xc6\x95\xec\x10B=\xed\xb1\x1a\xee\xca5*\xd9\xc8GDG\xe2]\x8d\x8b\x01L\xe3\v5\xe4\xbb@\xd3#\x05]RA\x99\xff\xb5S\xe6\x10n\xf0T\x7f\xd9R\xd4\xaa\xd5\x85\x13Nuv\x15Cn\x8br\xb7vv\xa3\xfe\xc7S?\xfc\x01=G\xe7\xaa']) 21:58:35 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x20, r0, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0x9, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) 21:58:35 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:58:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) gettid() 21:58:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 813.193461][T18146] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 813.248372][T18151] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 813.331177][T18147] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) [ 813.416674][T18156] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 21:58:36 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsu\x00', 0x2, 0x0) write$cgroup_devices(r0, 0x0, 0x0) 21:58:36 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1f1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:58:36 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x3, [@struct={0x0, 0x6, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}]}, {0x0, [0x0]}}, 0x0, 0x6f}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:58:36 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:58:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:36 executing program 3: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 813.984149][T18177] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 813.989519][T18178] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) 21:58:36 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1f1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:58:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:36 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:58:36 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x400, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000280)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e34b0281"}, 0x0, 0x0, @planes=0x0}) 21:58:36 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1f1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:58:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 814.906790][T18211] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) 21:58:37 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000280), 0x8) 21:58:37 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000200)={r0, 0x1f, 0x0, 0x0, 0x0}, 0x20) 21:58:39 executing program 4: unshare(0x2a000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xc048ae65) 21:58:39 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1f1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[&(0x7f0000000200)=',+^\x00']) 21:58:39 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:58:39 executing program 3: r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='Z', 0x1, 0xffffffffffffffff) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x3}, &(0x7f0000000840)="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", 0x156, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000001400)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001500)={'rmd128-generic\x00'}}) 21:58:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:39 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/crypto\x00', 0x0, 0x0) pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x4000000000010044) 21:58:39 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1f1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[&(0x7f0000000200)=',+^\x00']) [ 817.135447][T18245] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) 21:58:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xffffa88f) 21:58:39 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:58:39 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1f1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[&(0x7f0000000200)=',+^\x00']) [ 817.608396][ T3748] Bluetooth: hci5: command 0x0405 tx timeout 21:58:40 executing program 4: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ftruncate(r1, 0x208200) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, 0x0) r2 = socket(0x0, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x54, 0x0, 0x100, 0x70bd2c, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x8080) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 21:58:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 818.022831][T18284] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) 21:58:40 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1f1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[&(0x7f0000000200)=',+^\x00', 0x0]) 21:58:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) unshare(0x400) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x8010aebb, &(0x7f0000000080)) 21:58:40 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) [ 818.566843][T18296] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 21:58:41 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1f1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[&(0x7f0000000200)=',+^\x00', 0x0]) 21:58:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3f}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1={0xff, 0x0}}}}], 0x28}, 0x0) 21:58:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:41 executing program 4: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ftruncate(r1, 0x208200) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, 0x0) r2 = socket(0x0, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x54, 0x0, 0x100, 0x70bd2c, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x8080) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 819.049841][T18315] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) 21:58:41 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xffffffffffff7aef}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000140)=0xfffffffa, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x3ea) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/194, 0xc2, 0x100) r2 = accept4(r0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) 21:58:41 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1f1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[&(0x7f0000000200)=',+^\x00', 0x0]) 21:58:41 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:58:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:41 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1f1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[&(0x7f0000000880)='=\x92\xc6\x95\xec\x10B=\xed\xb1\x1a\xee\xca5*\xd9\xc8GDG\xe2]\x8d\x8b\x01L\xe3\v5\xe4\xbb@\xd3#\x05]RA\x99\xff\xb5S\xe6\x10n\xf0T\x7f\xd9R\xd4\xaa\xd5\x85\x13Nuv\x15Cn\x8br\xb7vv\xa3\xfe\xc7S?\xfc\x01=G\xe7\xaa']) [ 819.685886][ T8723] Bluetooth: hci5: command 0x0405 tx timeout [ 820.045787][T18342] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) 21:58:42 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1f1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[&(0x7f0000000880)='=\x92\xc6\x95\xec\x10B=\xed\xb1\x1a\xee\xca5*\xd9\xc8GDG\xe2]\x8d\x8b\x01L\xe3\v5\xe4\xbb@\xd3#\x05]RA\x99\xff\xb5S\xe6\x10n\xf0T\x7f\xd9R\xd4\xaa\xd5\x85\x13Nuv\x15Cn\x8br\xb7vv\xa3\xfe\xc7S?\xfc\x01=G\xe7\xaa']) 21:58:42 executing program 4: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000d05bd98c13cc1709ab91e0b9e1e603f862b5173514"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) exit(0xf219ffff) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000080)) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYBLOB], 0xfffffd6d) r2 = socket(0x1e, 0x0, 0x0) sendmsg(r2, 0x0, 0x0) r3 = socket(0x1e, 0x0, 0x0) sendmsg(r3, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socket(0x1e, 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in, 0x0, 0x9, 0x5, 0x90, 0x8}, 0x9c) 21:58:42 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:58:42 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)=r2) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r0, &(0x7f0000002dc0), 0x1ad, 0x40) [ 820.975863][T18372] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) 21:58:43 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x80000000000004) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140), 0x8) close(r0) 21:58:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:43 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1f1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[&(0x7f0000000880)='=\x92\xc6\x95\xec\x10B=\xed\xb1\x1a\xee\xca5*\xd9\xc8GDG\xe2]\x8d\x8b\x01L\xe3\v5\xe4\xbb@\xd3#\x05]RA\x99\xff\xb5S\xe6\x10n\xf0T\x7f\xd9R\xd4\xaa\xd5\x85\x13Nuv\x15Cn\x8br\xb7vv\xa3\xfe\xc7S?\xfc\x01=G\xe7\xaa']) 21:58:43 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:58:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffdc0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x4a) recvfrom(r0, &(0x7f0000000100)=""/90, 0xffffffffffffff5e, 0x1010c, 0x0, 0x38) [ 821.720564][T18383] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 821.761719][T18384] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) 21:58:44 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x76, &(0x7f0000000080)={r2}, 0x8) 21:58:44 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1f1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[0x0, &(0x7f0000000880)='=\x92\xc6\x95\xec\x10B=\xed\xb1\x1a\xee\xca5*\xd9\xc8GDG\xe2]\x8d\x8b\x01L\xe3\v5\xe4\xbb@\xd3#\x05]RA\x99\xff\xb5S\xe6\x10n\xf0T\x7f\xd9R\xd4\xaa\xd5\x85\x13Nuv\x15Cn\x8br\xb7vv\xa3\xfe\xc7S?\xfc\x01=G\xe7\xaa']) 21:58:44 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:58:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:44 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1f1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[0x0, &(0x7f0000000880)='=\x92\xc6\x95\xec\x10B=\xed\xb1\x1a\xee\xca5*\xd9\xc8GDG\xe2]\x8d\x8b\x01L\xe3\v5\xe4\xbb@\xd3#\x05]RA\x99\xff\xb5S\xe6\x10n\xf0T\x7f\xd9R\xd4\xaa\xd5\x85\x13Nuv\x15Cn\x8br\xb7vv\xa3\xfe\xc7S?\xfc\x01=G\xe7\xaa']) 21:58:44 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1f1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000800)=[0x0, &(0x7f0000000880)='=\x92\xc6\x95\xec\x10B=\xed\xb1\x1a\xee\xca5*\xd9\xc8GDG\xe2]\x8d\x8b\x01L\xe3\v5\xe4\xbb@\xd3#\x05]RA\x99\xff\xb5S\xe6\x10n\xf0T\x7f\xd9R\xd4\xaa\xd5\x85\x13Nuv\x15Cn\x8br\xb7vv\xa3\xfe\xc7S?\xfc\x01=G\xe7\xaa']) [ 822.564108][T18404] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) [ 822.744910][T18415] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 21:58:45 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) [ 823.174518][T18426] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) 21:58:45 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[], 0x88) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) fgetxattr(r0, &(0x7f00000003c0)=@random={'trusted.', 'cgroup.controllers\x00'}, 0x0, 0x0) 21:58:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003fe9ffdfed190e020008160000100000ba1080080002007f196be0", 0x24) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x10, 0x0, 0x0) 21:58:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0xd4010000}], 0x1) open(0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r1, 0x0) 21:58:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 21:58:45 executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x101}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) socket(0x10, 0x3, 0x0) 21:58:45 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) [ 823.668530][T18443] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) 21:58:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 21:58:46 executing program 3: ioperm(0x0, 0x400, 0x5) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x67) 21:58:46 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r1, 0x8b8e0eb13081c495, 0x0, 0x0, {{}, {0x0, 0x4102}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) 21:58:46 executing program 0: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffe, 0x0, 0x0) open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[], 0x1) sendfile(r3, r1, 0x0, 0xffffff04) 21:58:46 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) [ 824.448090][ T29] audit: type=1800 audit(1599170326.725:27): pid=18462 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=15903 res=0 21:58:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 824.646276][ T29] audit: type=1804 audit(1599170326.795:28): pid=18468 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir458581860/syzkaller.CXihP5/597/file0" dev="sda1" ino=15903 res=1 [ 824.655953][T18469] EXT4-fs (loop2): invalid first ino: 0 [ 824.671879][ T29] audit: type=1804 audit(1599170326.855:29): pid=18468 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir458581860/syzkaller.CXihP5/597/file0" dev="sda1" ino=15903 res=1 [ 825.205863][ T29] audit: type=1804 audit(1599170327.475:30): pid=18482 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir458581860/syzkaller.CXihP5/597/file0" dev="sda1" ino=15903 res=1 [ 825.231287][ T29] audit: type=1804 audit(1599170327.485:31): pid=18482 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir458581860/syzkaller.CXihP5/597/file0" dev="sda1" ino=15903 res=1 21:58:47 executing program 1: shmat(0x0, &(0x7f0000001000/0x2000)=nil, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000002040)=""/4096) 21:58:47 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 21:58:47 executing program 4: ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000100)={0x0, 0x8, 0x7, 0x8, 0x6, "705e1c887bd10c0dff9e8cbfddc0127d440504", 0x7, 0x8}) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x4404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000040)=""/50) utimes(0x0, &(0x7f0000000180)={{0x0, 0xea60}}) write$9p(r0, &(0x7f0000001400)="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", 0x600) sendfile(r0, r1, 0x0, 0x1c542) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) 21:58:47 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:58:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:47 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_nanosleep(0x5, 0x0, 0x0, 0x0) [ 825.644070][ T29] audit: type=1804 audit(1599170327.915:32): pid=18497 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir211616640/syzkaller.faQGfI/490/file0" dev="sda1" ino=15895 res=1 [ 825.692303][T18499] EXT4-fs (loop2): invalid first ino: 0 21:58:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:48 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x10, 0x4, 0x4, 0x4}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='~'], 0x1}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000040)}, 0x10) 21:58:48 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000140), &(0x7f0000000080)=0x60) 21:58:48 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:58:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:48 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="a80000001300000000000000000000dab689467ef197922a644c8400"/56, @ANYBLOB="f81ffdeccc8e3bfa4160a8f9d15d1f3051fc180b7dbf6a42cf794a50a25f04fad11b17f68127f32d5af0704df1e048070166f53e1a3f1ccb46c536eb6513b4455dbd59b4867d63a9b3d48aff6dc4b63b5f82c95aebffa1624d155e1ff62b220f0d5ca5600a96280b3b5f1a3ac0"], 0xa8}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1) close(r2) r3 = socket$inet6(0xa, 0x3, 0x2c) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x4) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x37cb1133) splice(r0, 0x0, r2, 0x0, 0x19404, 0x200000000000000) [ 826.571680][ T29] audit: type=1800 audit(1599170328.845:33): pid=18502 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=15895 res=0 [ 826.759320][T18524] EXT4-fs (loop2): invalid first ino: 0 21:58:49 executing program 1: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, &(0x7f0000000180)=0xffffffffffffffff, 0x21) 21:58:49 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 21:58:49 executing program 4: setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000003c0)={0x0, 0x24b, 0x0, 0x7be, 0x3}, 0x14) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000000)) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) pipe(&(0x7f0000000200)) socket$unix(0x1, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'dummy0\x00'}}, 0x1e) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xd) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) pkey_alloc(0x0, 0x2) creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x6612, &(0x7f0000000900)=ANY=[@ANYBLOB="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"]) open(&(0x7f0000000140)='./file0\x00', 0x40, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00']) 21:58:49 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) mknod(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000aa80)="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", 0x2000, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006a40)="aa0656adc36093e75c978b1374761e109bded699ba70cf18604d2736357d3756871a8d21e9b0c38c391755649a622734e4f2a3e97a47ae1895bdddf072a91ec7ccc959b3a783e457aaa95240d5d41fbb740be7636761815da17069abaa649d9a31bb39c12df677bbf9decdc2d00562f98e069ca69c7751f570f453f0e4cd7b00fce9faa5a94bacaf181ee7e8b59d3becbc8b337cbbde5f4c8de814e03e7bba1b2f00c9ef01795e1f6b168388d095ed140b1069a25c57da82272ef3fd615817fdb3dd1611f19bcb5d28c5074d1dee5fcf4a10605f6b678fb1fe28a23f0657347b10b8bd8a9e5292e24150087d294ece2192381192f987b0b857ca1da6e2fe582e739568dd1f68690bdff830966a393aada8f2542bec15da298e29f777dfd65cb95f2ebcd353f20e6973a1be37baf0c2c77eeb7dd00952792719832112ba28ba058986ca207625d3573a97a5bc0f718e06d2c0485038928683e8e4283f5b2a181a89c5c7d9897d110bf60db31dca48c2226866224b4f2a9bd29ff694e4218caf39da0f4131d002c87f3340aed9462ab2b49fed7614d7c054ffb22127a658dcb7d05bc1bd578ecd086c170ad205a6edaac1a908a298d2e87ba6786abb7e04e02125730213c21284433a624dd2fd38f7268c9cecbd617c16b5ed7e5d8648a22ed18a2c1e98f4ecbe55979e5be261bb042c9926eb8229e3b4e5946bed1167369833f13b4b552f1a24850899b1a5abf19e17bb193d2e5997c215d2e41ddc820bd0d25d488d90445c6f8d60ddfa6f651763a84934d10f293e562aa7398a2d25b0270daaad572ee83d3517540f59179eb7a8ed68a0891141c01eee293b22e05ec66345390d286e0bb1cb79e31a73f79db57a3ab4f8605e8149589671591d43e99a019e4a3df5880bfc12b7d4e9f55b2f4649c1932b7df8bc787f1a5e3d1031208265f27f7ef9a01d98bb18fea90561fc7b78972bdc432424b90f2baadc80b67d6a4387db7de3cad08e49a37485452d8c8366d9b02c10a9b03a6379b42fb63db6cab3f72275969166ad28c5ce0b66463be6de1b8e155f9b53d24b0ae27fb23b20dc751f5c99f0db84a341d350abee75e2fc24ad3e02a4eeb286f4a7ad378daf0703099ccb982f4e1ff563203e97ec6afa706aa01d6da9ecfbaceb218c89803a76bc4cdeb902f25cad7bd1396bf7420756737f49a0e2bfea2770eeee6f1e2cfffa9c10d760fe096630a92a2acd216cb84b980111ee2c61535a218cf5070d12ebd67312349ae3b534b17358c209131755feda5dc91c35bac6915e753ad0580a071557004f4b19f69e6fe14cd655f6e2cd4192116bc440c64ad9af1e3f00e3d244bd26949221f1a31cada2ca1a21b7909d80c52c66ef429f2e19fa2a1c426b1a2a4e19339fb4bf6d4179b303e3adf5dd9084e17d68970febaa6827012877ef320d9e189dae764fd3b72a21dbb822ed52b7e20d8737c9643c89ad6c1ee84cbb676c7ac21e49204015670036ca2f09fa098ae7fe299538b75591cb35ab509e9c1e340d2842f5cc3b059dd8ba0183bfe86be1f57ae8e605a4851b3f616065a45908a93eeea67184eb38ee044cf5f78721c3d8f198b4cbf09d2c62fdf3bffc0eebfdeec41b6b5e597bbda6afcaaeecd2027d77033a1c5b696cf2de73089efffb94403c0526e707767464a303c776c94a2970a9bfbe4469efd42b375e8ed0751278d74194a4d84b79edaed2fca429015a73da6ffa3861488b814f246605383b743ffa7a38826376a3e5caab2b2cb2fe0637c64a7197dac6cb31b829baf8ce6220be26fe13ead3fce791b00942243f00d27d512f8817afc98aba74f771394c8595a2a3cf22259563b4ac2f0c17f710926d92e8f3f0e19cce7531e9c6a264af7f5fc038c0549bf64c0bce49bc3ef3fa795b05e35a1beb44d00b2cd7597024c5e30271238cbd6b9a447ff67f09be8135b11193ceeaa6629ce57329d9ea74f9f3a32e14d0cadbfa347f631fec4b586013fe94fa55f75f2ebb88cc0368b8529beb3b76523cf3334f19d55d5bc9a05a44420af73e9b96b0856f88ea355e8c13f2b6e5e776296a45cf95a567f83a5ce189b89e967e3122d996b5c677db4109f38899310e6c5fb1e30d6cfc2c41b50198bfc8424f8b94f954954c80ac5eab5c0aa0678257113fdba171e725e0c2cf280b07cf2359028c68912456983daddb89b9606440e3a4c20e561caad1ba2ed7219a3b546e3d264024954e8c84a554db4907411352fd88bd360c2380508de3726379a5475d743c50bda2d1038e5cf779b2e4401c72688e128272b99abb1fdee4017b4cdde7d15529059a45a263a9bc7f2c76dc69826c78ff48adc4acbd268991da213f29fd9e389fb8c905906c37b9b1b78003b1b29bb22f6320a12488c4d2a04173541eaa23e133326e1c351e79e2770802baa9e763ffe8d98557f6f473222463d809e93e06ab4e1b02fa9b8542945b384fa186c689946cf53e45f50f423481f1d4a2756c338be462ecff68d5681e20290937bfc4d68fc89a1f3c9dc2f41101af23806ab1acc7baff9ae6dbd6f90bfa2eb6db7ce19c3043200c696fcf85eb80d82ee262beb3be14bd46b76535530a523d27d277c8ad37a078a6f8c530696f000676b9401a8ac4d22ecee7ea4c82460c2d5c4708681b9b3b63a776ceeb1f0c00bbd72340eeefb9bd9b992282247594d6553ac8d1728a74244b2b2fa85710d9c89623866fd715556bf029499321ee104f333ed1be88bdd7f9f353bf519b3b8176efab7b7c0cb87e0c4b4e65712fb59b2c10653838211c476ef19d0960b514f8ec3589386cbb7a32ea8e3c223c691e4d0d995dccac1852d7762a153679ffa52fdfb39963a01ac1de8ccb24facec112aaedd48dbfddebbf6f7f17b205d4c63031be7a6d4c41b6027126791f8fc487f8539d14a2da665228d63100ce2f8b43ce3467dbb86e79135fcd531db6c230e6aac7f57460c813712b1370f8cab3b39177090beafdf014c6544230f40ef379728e15cb0aa6dd3c982bcaa074a0b50ccb0f516e18342b6b616aa703cc88fd0e0b99fb96ba1c3b632493b1c813b843f33d534cb570918f360e99cb99b999b8b34eaceb22cfd837d96c5fd28c7814aa9a20046173c8d8862e33c50e949bc5574dae92b4335a2fc7ede59bcb017f04e820910e999ca75c43200977454d0837406c0a7193256312f3bad9337a7b9753e8df63f2af272ed887ca4b50f28f3f30a6a3b1b856e660b64a163bcdf142ad6d48839294b3eb6028ac6a00cdf3a1ee34e8234ea9a73ac0351633a5b6ea4bacd0158338a91db7761d8b186cfd77f133fa69b5ced7296db77d3e3502a8ccc29263abd1721a2cb8c916d53546fd0f755cf733881cb097321522bcb4ea551ddc5030abb56d838fc5ef8b118ee85fe6c93a5b7b8c06d6097f24f4b10c0792aec80f36f7cd94f719d3c59d7efa17e2a76e0fcb1e794647a58add420858e346394340b25fe81dbdacf198881951643132015a5ffef71c67118ecf10e1ee4ace01713c1194426dba93700b7d70b6dc9e59669aa1870d9525e4efd7702eb6aa7e9c907837e0977de33a2a49e981cad02e9f6aa5e1e60acd7342e26600970f872249e5e2fe8242de322f4691db3357cebada3c9012de78382ec1c4519961cd86473be43ef7959e384796ddc4f8a1d2add8a07887ce0d7fa185b6b61542caa36b4473a1076a74685bfdb7dd061b1d59f7e13498e68d326de41c08014589f4c1f4b67c272761ccf9b94e6f119f616373b65c7c96fcdff432aec121a467c9f163b7be91e6986ae6be5a3b3ee537936ec56cd5e5cc7fd266de785bed8d348db1f0252a529f38c27fb0f04f539087cd57cfac25772e52332bd1773389b79876c4b17d2ed1a6a1106cc9076dd52ac3fb7b4259f1d1cdfa3a20a0db68514d8c47e195498d666d1fde95c460e1db548066a63d4f7517552a31eb2e436806090381c3ee2aa3ba187e507b070f2ee70abbec2fcad596b7e5ab3a4c30d49366897659c918f29abb5a4079327086d2cb692094b96a45cb94441c7f649f10cc6cf9f0b7b37a06275438cc70ad707151ade58f9c0c16f45dd3b2d1ad0e2521b2e4179451315826e824e1062e10c5029707682af1f3f58ee7576a5b10851ba361893046b5940929a0a7286612632cdbcb7997c2f3e15e602eb0c5e1021fb59584a8f66276c9716d399778302ba3d8f9a414b6a40ac3f7ed34a0af976b4b9b60888168b244814124ca02c85efde9995507f87943a905ad1163f80b011c9c73a010edfa1f740883d408b9e104f208b597f53b17eb0b41f978f1fc76383d57dc0c066cb99789bf898489b95708891909ecf05a9f921dd2271f5ca414777d48986e21bcb71b9cda7998d608f4f73f7db9eb68037107e710a5b74b0055fbc787c7956ac1a2d94f4a64e8e15b0d7cfc16e1834af7b6e3718284a8a592f91ab27a7ae4b43313e626ac94383d43b6b153efec5751f976f3c7a800120125b4f4e4a748f3c35c58028bbf793ccacc9662f0aebd62393e4e29e88842e2ca192ff6739104b292828eda8d964da3d3cfb730556b7bb34d62af117fcfc053a2d27d05629888f401a55a3f98cbb7ae6a5bc710646504ead09a20ca16b7389ea060fea7532f975b77ab5f42350dbc6ca3499175e8dbf7aedff6258e8d397558bad438b36ad08011848270a59cfb6623cb913438b7ed482b6096f487ee586baffcb70b8a345b903c75a7f31657cf4f56f1024525e4474f05434b7fb297de346a6aa4022f17df58223cb690b8e97c5a331eb91f33918ce8a971bf42097f8d99daff37853e672a5a4a8a54fa37a660ac2762be114a95b989a8cbbeef0015f1822bf023eef1fe84c480beda6fcfbde09b9acd5b662e26552d1bbf2c7cecbcf50544d10fe815c690be8acf322f05dd628e6a3603e59fa3e403565f78112be7a38aaa7686a1653e7a8d2d9764f60043d8f6a97784d8ac15279b20fc6acf4c328d5a9f05d5b6d7957f08667300e1d65f20e1d845c9c7100a800b63d40e6e5224946dea1c692a93959d717c57d5589b57ffa6aef03204635742ca24253b277a6894e99bc37a28a083534ed0adc8493809307c35b1c4150973ceb19835efeb9d1b05e1b34efd0462c257e760f33d6bf4ba1bb33c244ca8f437cd774e5e54a19bf9e2f44b3094f15d8b6d99ee162a57cbc909112294563f0f5871174aa52ae6180ace8008cc77368f922d27aa6582da8bdb8e895833e51a2e6eb76f2d842fe256e06297e79b23572db6eeeb98dd6206cc3720dde69fdf8be52ca71308818616a088610a33fc301d98191ec8b789735e37d77cdcc8ed2d38f5552bd2de260d58bea844ebf7ce2c78bd535e1b5f7c546c5b0cabca256c9c37a78553e241a5c129c95ea102abf275bf3aa10f339de563e9fbe9713741bad4997fff1150bede06e7d86b175248816d3767fce037cbca7f7bc0451f4253f68b8a8d06883e1e6bce935ff041cf1d96b06b69380b292843953120aad77184fcdf73ec3db906c65618ccf92d2f736d105cff13c5b7defcd0cef93d976006bfdd64cca94ad399f9850ab1462334b90edaa0e1746be9ae8df298403ee75a25710b119c1ad6e1336bf6e535716a0ff8f4fd3614320ec7daace314e8cbd33a96b5a0bb57e8ba9e985c581f6b855ad1fbdd1d251ef21086f29e5c7cbdbc0134896df20e7bb352a3c694767974732859a7ccecdc1e36791aab90b996dd159e43dfb953345a9e128179da8cf941285011f09c3455b1fd3744deb274d4c7062cec0b39afd814621fa5659315f68ed19e741cadc85b3ad7fa8c3fe822d5062ab161c0cacc591a4d8e980033369accae4da0bf4829ad63200d0eeeb21e4ca4f27fd11a14e65dc076ea446ffe37b2e856b418c28eed2773088aae365d9cafb423f8d4de63a015c057558fdc0338f84861d181fbc93a060550fd99a446c2ce42bb77a06a6ad2efa954421c81e37cde355b43c80d736e10735f72bd4227a961d9f08c1e4b1c40a62a4bff8615380085b0e2adc886c64a9118e256538dae87afea358f6bf48f345d34766427d197c84394c78b813d55e5289d0de0794d2c1750054f01b2b2dbb2060b8ceee8472fc09bedbd78362b7adcaa62118dfd1a563c92c678492ef78f7cbf3adda54b4c60388a7550673720086acc712e80e75cef06742e664d7a3d0ada00518f02cd6b66f67b93af6f9c598ff644176eaba9f77c88a3f5d85a18c52be46054e974ef50937448160394827d0c89a69862851de2546220add2c8eb5a7c6386a7721adb6c15638388203b4b1c5fd1d77dbc378d5ba683b3b88e8014d4f255c5930bd83bb80f15552d33fc46be011b3e59e2606c45c579aefee033b44c0953e1fdb11978849840755a0720008b5c7940b9f003de82e606f9c24842b388632b173b63b5ef4d12b939f50e69487ace2f15d1a06012b5c42f08817c22b0f34967824274ef14e543124cc26f5ffaa7b011c6391953c8942b44a966c0f70feccb3533931caf255a7275a818204a440c14b59ab24a6497e9a9dcf5477685f0a41217e57fc3d1477bd3687ae757c0f54729e6f937caa9ae5e24fcd39131f34e55acc351e329f024838376c9cc46e94ab5f980965e8c2d53a1c5673c4e42f0a0bb2ce59e09b708ebb0f74bf0f24c46e49922d89d5ea1ff59c48fea6aae3981fb15e9b9ec240b5537c092415062062e405cfe9fb8e5a01ac7eed75cba48ad05165ba55edbb44326cf6a7c776104b3f8f5433a31c7ea875f4fd62048f49852dbfe642b7239980e7fdfe1bbde4e5a94c93d7dc269316739fc5a360fe0fbf46dafd4b34cbed96a13bce1f531a26564c5442f246159dbe1b532313b8ea5eb3d4f8dab16e8563c1239a0680095b0f48b14897dd5365d4d16e9703cd4e12260dda78c3ed44071e9111672362eb1ec71bdd3f8c246893ab5f3603c1e7493246dcae80a73d1fa30f18525b3f1dd1fbfea9109671ec83256266270270a7bbf163c421575e1da31b9ba7403d779b3d94fdc8cb67911a825f956cc899f64dbb76c7a5740c784ee7423292c606f6abfba0b7d191dd6db8b0c2ed05ad0b54cb448353728bc1ef46b405ef4a25a906b5b621f72bedc2f8223e54bf63e3a610824cc9d2533cc9e5272a6c1d8390463cc643aa3d015d39ef85e3603eff6cf9bdb86656f96dddba89e2fd387fd3d4075b4694b640e2ff0b36dd5ce8a17bccb7f01a76edfa145977991397843568cfa2db6ca7b03fff25d50190790290f2c1517234e068e733ccdc811e1014d98b0ccd8bd4f8d1a186f47f0060c04564289712827fa5dba6eeee083eb0cad0b7d29e274216286dfe6dd29e2b123e2c16a0bd9ee481c22c826ab881953e9fe66e9431296817cf1672e5c8c5a81f58fcc6b05d89bc02390cf975311a71e24c00b78199dd11b38433153d217350faed56d5af4d60fcd8fbb8d9caf0c6b2b874e5e12fa4af539d02b12017d1207d4eeebd6bd80cfae3130c29e6eb5ae7ceaaf098354ae4625110070bd8f727ab138754a431f7a395d275b4ea4510996cfb4e1182228fb4b075c6dc7b5d19c0c1b049ccf8c6d9d5708638cc606acbc34070e1334aa3e5be29aea7e1fd0e4543e8dbdcc6a3f2ddeec4904d712709c52cd5cb5447ac9c11eacf4f9de2d55e807060b46d44a32b5d1ad260fcd30890e851e1ba352cadec15646531e599dc31e33330fa84c6688ec325c14b0b007721d366bd4f99a791fd3a3ac42efddcc16533b3406ef8a464b7cd3b34f6a629f5144d6e9cb2fc26779dd82780fc97210028d6a4bd4eda85f76fed856bc46ae5cb1fc3cdc8a0609dec7f380a7c7eded4fa61ea6172a335ede74c182225570f9e6675517f2f3e106a7a64ac05849610b7f9f2b242fc02510a85f4fde4dab00c86cea15cf39ffa0ac98747080e9a41ce166ccbe6fe0725ac110e97df8b198bca5a2fede8ebb008645fbc42ec82ec263c6ab39c489ebb62bf35f2ae978bcebbfb71b4503b1f39100638d42793242b8ae3e7be28570f0c6baeb486ac091ba877a5f4ec333c4b0a43b195b476ff64762905b313eb8ff388cf172dce29a8cd648fa8d393e09b6adc4482090bd15e76012df2cb307657a8684dc89c3884be9bacf90f66b4053210445e7f0d8dffc48ab719ef77db7c18cc6efd73318aa034eaba009272c7ef06dee36e09bb4dc9fe14d781fcc8e438f261f8eade9ca48d3cc6fefe30fb57551a7bf6a1331c4c8b7d418a4d1616014c4e27174e871d213ac235b186cf2da17f33dcc4de4e51c2079edb068e344fac0bd2d0549ad761af368468fb733d86f037bcbda0cf9a91f22e3c8edea68e8b8a37bf0968fee721cb845fd765ff2266519ee7205d6663477b3d9309eceec2f74abb77e622b064aa7acbdb28f6a13fde3cdec1c3fa5a7d30e70650c9816f442151f5f3fdfb5410ba5c9e5c7feaaee5661defaec06479f251d1b3d7c27c0c61a5d1d9347446b90b35fbd9c013064eaf19d4f5a33d63cc9575385a6f7deb3aebd4c5448592d4a1a32238db1a96fbb3ece808c3ce0a76a41a211d9004aa2cafaa7ea4bb2237d96834724a10ffbf5fd28263fab79fafa182927089eec7f0e5eccb02509b185aeaef55a7d419b6b23820670b3a5eaadada03650eaaf962432258b7cf468813e11b9f6435b1af9d0aaf61740f5f7fc99b70c538b3d0d740f0e7ca4827e8ea992f50d6ad81ee1a5061d5ee34e500eba6ee47895961867799d46d86a72c6903e1e322ae70f94c79226db9e96581a8a7af17d03d89fbf172ca657ac4c7ac9a23ccc8f9a66b8bc8c6816a455bc9640f3ae1b4066fa3ccfd492138962709a902568e6a3323bfe500694f968e678e25f61ce86d844ce1df6d9efdeb9dfa365d423bf4bf9912711c11416607f5912fc817f19f8fe6864757a9284f80cff16700d388b756c99dc1e84ab66d7929c5733e6f30260e8c5b7130439886f0ed529dc2ea425007ed7a2ecaf5487a74f9f5438f0792ab5cb969fcd397a8947ddc17a84287531b09d85d44ffaeefe41c53c4cb7fbe5d56f75f255aa20fbfb4648c9c3a583851d1b2865f51dd411dae3fff28c5af8cf3668fd093f2ea1d6b5bdaaefbf446314f02ce3cde968a9c48ad5b6b3ca4589b9cd0a6c171003300eb4438fbfe39118d7b7803b2a79f293275dbc5e8a85bb7d456d16d8884486daa05456010d3d743abce444ab2ed817f514d108737c88d5b47e976dbc0966b2b2293632c85415ed8d17e031b2df8f76cab38c7f48cddc8733c140fff0a16536812720af77739b271ce1bff9ad3f730a3f605a83a2fa56774f082492bc0cbff939c1288d9859b7b551793b47cb797917d1a03ab9d4f8c6c72c88d7fc3c482ff671554c655afd5da08d38d35800e5c9c25aeb23f9031b8ffa106455d91bde27e528fa38a00bbfe43703ad085206f839794b2ff7f14371f00251fd7f1834518cfebcc191e942cca2b163aa55e417f264bd6f3c42d840b16073ea4dc29ecd191dd4173fe9bdfa4130beae0bf7dfc4625a6c1d29de5e3aa7ffd98815716f8c8eb6b70007376b39030d044a27d86324436163677fa672b4e45b8d82f52bc8bc41c4f17e6eb218e0deef4e66f29dca98a318fb79455012d15ead2f7708095d358a7f4f8df75ae32c9448a62a6f8ecf9a565921c2ea3ec504330adb1bcafcff5fa87c43ded174e3e51394e69cb7eec7c4f70b1000cdbb9073103c171720ff148c99966ff0c17ff498785e9beaecd4d08e645af00a87b6cbbe6dfadf20a631d1c0645b4354dfe330f9198b9c339cd9c173f7fdab918fd1cb3d63f2ca2b060df118be0c3eb3d39f06c66d4d1ea777fefeefd63e3c534368e0899605932b8e5f207bb6bf9d37f9841f99bb3588e81bfe5f23a16817c21581aef947f92ba3837b6dd21a0c7a68196f2727fd4c835ea53099d482ac8bc9dbeb365dc55d06d48090d66d647202391d3d51617328bea273220e96a6a96eb6094368ccab24790834fd09e1a8a749092d88e0d1b4f0c5062e884488af7d1276ebb3b86db150c6eb98866758dfdc33c217403fd242a84598000fa72e38c07158b0dae7606ee948653424aad12ba9bd3a370083e489fdca2ff751b2f31c0f61227c40c7c27400915c2aebc471f39adb182b372d3f5a9516c0df9fdf11346e9ba4ae62862a4f91dba4582e96ce32f1376db91c6a25f4184344664dd86a91d5dddeed8c73fe8d3479a77e733b461eccb0929fa9c3dee73792ccfee65f0644781a895bf3873a29b546ec3df5193e4a869112fab68c6ede7efdd8acd681650b9358aa5f0ab39817009e81ddbd64eb6180684c5ac52d020077c0b02965a7c8d121e13f7bf57e02c2e7120c6411ef28b37ac1ae9fc63eaafc69d2840013c26b3c15c472e78cc287d18d78db789d15d33f667e1aad57ecbb7bb59bedc4fbaaaab94244b36889f5242ecf2a3bc3c9cce8f32a3ee00ac9bbc650bd4f3b02ffbd4eea2622038b49d1e292b975d23855873c736b9d587d606d5c0a1b2b01ebf9861bca155dc656f03b604935b1e1bcdfff888e774d6c18924799bf362d92931ff28dd942f205294a907a610c2f63447ad9720101c69e5de225ec5d281f657b4f02a0a00fd738486a6831d9c65838fed0a7c36188cdfa6c8beca1c6c6e9e2c6ff69113bf61720e4c6f3f060a8aa03e69def3f714a472b4965d121e536a71580dcad3b2a9ed3acb53b4ec40794a24f0f4ae05d886f59dbc39a8f39384acf2e0ac4349090cb3dd62f4ec085a3270d56ff6de5dc77b67ddee20eb4c0d455eb1e0b1172977fcb305906e3b5b21881891b7d9a680f1cbb7c61f1baeb694cec729e5dd25f739161e04824739566eac9c583390be066f5332f508c6b1b85d358bfa35b7ddd36b986e1880c35ce1eadd007c387525166f8fed7750796c37d088fceb1f1630d3848ffcffd4600f3b583079c62b73ef11e37977d2905ac2f19782b3b26b5f66ef582622442df25a49aedef85495140c0f53b7c27026f75aac2c7ef8637d8dde1db32fc2c7c5cf3b63c32a16b41105ccd9b027263d13d4eebe808a4ec1050bf0781154f2834b8bd645e565fde2688bb23cc08db307355781a36fb9a61a1356f5024d6a3f8b5ce4bd5b9ef7e370d2424027f1722dd388dbbbc9f04a000b92d81d2f170cf61dde995a7ccc172d6c9dc70fdd417e7188a1f33e6b629d931b38124633a30fefbf7576fbcad505ff8d6af4cfa12ee520f800f621d92cfbc4dc597fb771d7bbaa517dd4ef3ed124b33374170501d9d37a08edff9f149d448bdcbbe31fc0aa93cb240fffcbaf14d33ca927abe4c006287e0dac701c64372d2439f61748ddb445a9a0873d68fc1d2edfe737c3d32e1601fbba1a24c82aeb518f07042d85b8b0a98437ef3abd6f4f778d14317d8666f538069440fa48d75736034fe6103eaa6def5778c1bcdc94cf43808308b2a310882dbee8617dea9c28775c459758b5bc3dbdf1379debda9f3fc54d35f71dc32b2aca39d6540bbec9b7fd860fe0c8d353e752f42c2fe80ac1d47aea4e7561cc1443bb7fbaa43bab78d02688756a589ab2872eb93cdc66ef7ee4acc2841fd6182eca98adabf92e6a9f4f81f8e039b", 0x2000, &(0x7f000000efc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}}, 0x0, 0x0, 0x0, 0x0}) 21:58:49 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000006000100000008000400"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:58:49 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket(0x1e, 0x5, 0x0) listen(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) [ 827.346338][T18539] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) 21:58:49 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 21:58:50 executing program 3: r0 = socket(0xa, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x29, 0x35, 0x0, 0x960000) 21:58:50 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000006000100000008000400"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:58:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:50 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x10d, 0x6, &(0x7f0000000000)={@dev}, 0x20) 21:58:50 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 828.209778][T18563] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) 21:58:51 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c74396c8e34049fc564e0b9cc7553358380b3a1f59916ffc9bf0bdf81509f07fb2ea80e5cf8dcf819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6e39f403ff065f93072aae80677eeba68562eaeae2bcd87cef9000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x300, &(0x7f0000000040)="b90103600000f0c0fe9e0ff043051fffffe100004000632177fbac141415e0000001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) 21:58:51 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fb}, 0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="24000000120007031dfffd946f610500810000006700000400000000000000a20400ff7e", 0x24}], 0x1}, 0x0) 21:58:51 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000006000100000008000400"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:58:51 executing program 4: unshare(0x2000400) r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0x13, 0x0, 0x4) 21:58:51 executing program 0: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006a40)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x801}}}, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$KDSETLED(r2, 0x401870c8, 0x20000004) 21:58:51 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 828.952419][T18584] sd 0:0:1:0: PR command failed: 134217730 [ 828.959789][T18584] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 828.967115][T18584] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 829.093490][T18594] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) 21:58:51 executing program 3: set_mempolicy(0x1, &(0x7f0000000000)=0x8000000002, 0xe3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) pipe(&(0x7f0000000140)={0xffffffffffffffff}) dup2(r1, r0) 21:58:51 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:58:51 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000280), 0x0) socket$nl_audit(0x10, 0x3, 0x9) 21:58:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x1}) 21:58:51 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:58:52 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x40) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c00020000000d0005", 0x2b}], 0x1}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 829.919119][T18616] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) 21:58:52 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000400)={'ip6gre0\x00'}) 21:58:52 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:58:52 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 21:58:52 executing program 4: r0 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0xfffefffd, 0x9, 0x0, 0xff}}) 21:58:52 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) [ 830.756158][T18633] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) 21:58:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0xee00) r2 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, 0x0, 0x0) 21:58:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:53 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:58:53 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x6e, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 21:58:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x200}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200000a5d0300bfa300000000000014020000de1ad5017a03f0fffcffffff79a4f0ff00000000b7060000ffffff212e640500000000007502faff0700000a0404000001007d60b7030000001000006a0a00fe000000008500000026000000b70000000000004095000000000000001da5ad3548ebb63d18db6a1c7272faa9b1ce9f821c34767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c1dc908350000005ec1956bd8660bf36628dff1a15750ab7e780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8eb040c50287c37a7f4182dc2333b08c6e497687e10a4daea5dac0ceafdb9a2eeb02a1f5104d16ddb64963d84d91814cd5817e0b8f6fed786b781ab1faa35d391516e43c42a5e23ea6253d5df768d0cb30a5bb8c13d5b47975b4b13b9f35e4f41a62df9b4c03e53466dfc6b76c12aadd308fc0b0212c8d944f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75bb32935f542127a8a8438feecbb1c757f7169f006f3f5c9512e3254de4b3625962905ef911785c8cc0c4a11cb136d8a6084d676d8ef8aa6ecc2d32e3f4ee367e0a769c0a606636c9f4a4413c0f098f4fcc9661cc7f97e2ef5987b6e09a6a7cab79bffda311f65e7d9ebe3be70c4364333af9a9d91c3e41a8e2b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100000000743026004626fc253cd5676c848ee37c6fa986be97057a7a6f8abf225386000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0xa00000000000000, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=@v1={0x1000000, [{0x8}]}, 0xc, 0x3) r2 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000001400)="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", 0x600) sendfile(r2, r3, 0x0, 0x1c542) r4 = signalfd(r1, &(0x7f0000000100)={[0x2]}, 0x8) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000140)) 21:58:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 831.414297][T18647] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) [ 831.656335][T18652] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 831.670296][T18652] team0: Device ipvlan1 failed to register rx_handler [ 832.036500][ T29] audit: type=1804 audit(1599170334.316:34): pid=18660 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir211616640/syzkaller.faQGfI/498/file0" dev="sda1" ino=15924 res=1 [ 832.515427][T18668] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 832.529650][T18668] team0: Device ipvlan1 failed to register rx_handler [ 833.074531][ T29] audit: type=1800 audit(1599170335.346:35): pid=18662 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=15924 res=0 21:58:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8, 0x1, 'gre\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_TOS={0x5}]}}}]}, 0x40}}, 0x0) 21:58:55 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000006000100000008000400050006000100"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:58:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:55 executing program 4: socket$xdp(0x2c, 0x3, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) bind(r0, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80) r1 = socket$inet6(0xa, 0x3, 0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uhid\x00', 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vim2m\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1fd}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 21:58:55 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 833.395056][T18678] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) 21:58:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f00000004c0)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2d, &(0x7f00000004c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0x210, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x100fffffe, 0x7, 0x6, {@empty, {[0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x200, 0x0, 0x0, 0x1, 0x5, 0x0, 'team_slave_0\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x110}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @local, 0x0, 0xffffffff}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xd2, 0xf9}}}, {{@arp={@multicast1, @broadcast, 0xffffffff, 0x0, 0x0, 0xc, {@mac, {[0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x8, 0x0, 0x1fad, 0x3, 0x80, 'erspan0\x00', 'veth1_virt_wifi\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x7fff, 0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x430) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2002, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') lseek(0xffffffffffffffff, 0x0, 0x0) 21:58:55 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000006000100000008000400050006000100"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:58:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:56 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 834.198641][T18697] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) 21:58:56 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000006000100000008000400050006000100"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:58:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 835.347598][T18727] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) 21:58:57 executing program 1: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r0, 0x4) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r2, 0x1000) lseek(r2, 0x0, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) sendfile(r0, r1, 0x0, 0x8400fffffffa) 21:58:57 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:58:57 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000001c0), 0x4) listen(r2, 0xffffffffefffffff) 21:58:57 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000006c0)='O', 0x1}], 0x1}}], 0x40000000000013c, 0x0) 21:58:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000001c0)={0x0}) 21:58:57 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:58:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:58 executing program 3: syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000400)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000013c0)=""/4089, 0xff9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x218, 0x5000000, 0x0) 21:58:58 executing program 0: getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x5, 0x21, 0x400, 0x4}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x4, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r0, &(0x7f00000002c0), 0x0}, 0x20) 21:58:58 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000600), 0x4) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860073ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 836.090109][T18750] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) 21:58:58 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) [ 836.505709][ T29] audit: type=1804 audit(1599170338.776:36): pid=18770 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir057725981/syzkaller.BneUSA/281/bus" dev="sda1" ino=16384 res=1 [ 836.633297][ T29] audit: type=1804 audit(1599170338.836:37): pid=18767 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir057725981/syzkaller.BneUSA/281/bus" dev="sda1" ino=16384 res=1 [ 836.658065][ T29] audit: type=1804 audit(1599170338.896:38): pid=18754 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir057725981/syzkaller.BneUSA/281/bus" dev="sda1" ino=16384 res=1 21:58:59 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20233, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "e0c54b", 0x0, 0x0, 0x0, @dev, @mcast2}}}}, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0x0, 0xf0, 0xf0, 0xf0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@uncond, 0x3, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'bridge_slave_0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 836.725872][T18774] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) 21:58:59 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x2}}) 21:58:59 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0}) 21:58:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:59 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:58:59 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc018aa06, 0x0) 21:58:59 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 837.657871][T18794] usb usb2: usbfs: process 18794 (syz-executor.0) did not claim interface 0 before use [ 837.670775][T18789] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) 21:59:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:59:00 executing program 3: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a91877b5ea0bdc9e158bd830000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725560a6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0) r2 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, r2) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000100)="cf", 0x1, r3) keyctl$dh_compute(0x17, &(0x7f0000000180)={r4, r1, r4}, &(0x7f0000000440)=""/243, 0x389, &(0x7f0000000080)={&(0x7f0000000240)={'crc32c-intel\x00\x03\x00\x00\x00\x00\x00\x01\x00'}}) 21:59:00 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000180)={@broadcast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="33c8ad798dcb", @private, @link_local, @multicast2}}}}, 0x0) 21:59:00 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 838.691256][T18816] EXT4-fs (loop2): Can't mount with encoding and encryption 21:59:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5}, @IFLA_MACSEC_WINDOW={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) [ 838.963697][T18810] could not allocate digest TFM handle crc32c-intel [ 839.147834][T18827] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 839.273557][T18830] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 21:59:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @empty}], 0x38) connect$inet6(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 21:59:02 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:59:02 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') fanotify_init(0x0, 0x0) pselect6(0x37, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1ff, 0x0, 0x7fff}, 0x0, 0x0) [ 840.302625][T18842] EXT4-fs (loop2): Can't mount with encoding and encryption 21:59:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) 21:59:03 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a807100000c0a010100000000000000000300000908000440000000020900010073797a3100000000484f03809c280080040002801c020280cd00010032375ef97f6a80b4000ad17a052f6f81b873401f3ea553a610f6febaf0998249e50223f51df741e949fb03e6987a2f12a4587e471789579d65147d04c6325678a8ec65032a0ac9e096175acac686588ffa6560c0ec53b08f8cdd84266393477d69ab27ebc520a64142629c0d6909cdb3ac6d25ae35a5419f023f13dcd6b3d4eaf96850bd863685c93958771ba05881168167d03de6c5f4854028f9db887360785d4486fe95df85e81046f2dbe80c0f2ccc32112be5be2b3a705a912a9b7950461cf64d5d6253630056000000be000100a6f31a65000a7f5a804a2d6def3ae19cc7334b711a2d05fd25647241469f8e707f35d4801cafb82ea474a1dffaa55eceb2eb3f3b4d60bbeb072174815174b5def1f348e9fbeb3c1e7f5bcab121d79ab3d5691afb6fcfedd352966aadb143c6b920b7084503feacfae8606c84a0ba80391b19ecd23b991b6a948bcab89f24c70d9c835c7b2908c44d9147d4d64816d817986988d968d20cde2225c337042d2161f220eda34a27eba0cc91aab12d2f61bfbef5509f81201e7e9c0900005c00028008000180fffffffe08000180fffffffc08000180fffffffc0900020073797a32000000000900020073797a30000000000900020073797a31000000000900020073797a320000000008000180fffffffe08000180000000061400028008000180fffffffb08000180000000020c00028008000180fffffff80c000100be1310be6ca8849a040007800c000440000000000000007f14000640a7bbd8a3256c5af4129b5a042e00937704230a80d50001009306e23194d7fb9af1ed766a51c2a4308375add032c2b89040d3e256fa9488794e9c184fdb77865ad00baaa7170e25b3ee18237d289eb06a46f543e3c14269d5e9c895904aa75f7364167498b70b77bbe3b0867e46bb07d8cc80ec5ce6b65180904dee425f45b4db1f29656549a1acad4dcdb7d6b38fa2bc12dc007921c7eb5a4389f1f4a8d66e0a627a3db3b5f4cc98500c1a6811419f0379aa77a5b50ed405493abb66306739cf7e59b5dbd809271661a083b4af236a4e00014521bd0f4c32d0c21e35f74b8d2371a484888a3b9c106d0000005d000100052f070bca0bd7fe896056a10ab30f27990e92d793577dc2cc7c0431256168e03c44f22df2d12b69805884dda0a3bd7013adeab873c51935674534e5dcd6f3a5ad863129c3cb0cadac52f8f7ff45e7a0a98388bcdd4237b3080000007a0001002b5cc4ea07197605e2774a59c5d5c0ef57d1224f3a47e26e3c5235564c354acae17b8d50e9b031d2750c46ae6926a20dc9a45b29fb1665aa04e3c865233759385d4c45a702cd37567fcfd21005bb03d4f194dc007f4ba10d67b8ebed3b1e2409952cffb21abfd4d37369a2ca8ca4197165338ad266230000c5000100d37ac27b8cfcd324b503d7f6cb164911f17f0eedcc9b278e5ded66d60f7387b701ead64e009a3b7624d31483896917fa34fb72d7389a2c1735e31947e7dfcdace6b0c26b0c197dab851bc6e89e3a56552ae02f370b9dfb67195dba1bebe6abb2931c1f9a62e2850a8f35e49b17d543c35623e49506b66cf2daad5e541703bd0e3d836c3802181b17d5ba458f698acc0a40d47e9b86d2189c8d2d85d1f9f413a45df4d553666e0979649b4da440d0581787e10c4664d36803bb3a72d603f981f47e0000007b0001003d80f6aaee23527fe1b4ffafdf922d58ef4f1adb5d096de7f68d2e59b33f378920e4418d0be25180817d85c6837dfa43734ad2cb4b8e561a2948d35f204932b3772f4dd97ed69957890332c07657ac26398affa484a318e400e7a50eb0a9df7728087eb5513052fd79aca9c044586214792ad9c7e01bda0004100100dab245a4bdebf1ed4d301988121718fb3a8b7232875d25edffffdbd909da039a850b9e4088d76c064dbba8c9e88b67acbdd4860a93197081ac85cfb16b14db3d9a36bd77bce6855cdd775a5e18f19294d110abf2ab2c38085ce58efd2fa13c5ed7cac5458f5e58ef515278f04501b246661458c2ec2ab5820c85043df45ed4b1f3ea0491c78647208255f279f3c38389032292341bc32d5ef6f86bcd1bdb75da3c56175f08c61fbdd554c6adcb4e1db1856187c467c6b0ca5d17a8cdb6c84fa7fe0a4b2d237ca54157d504844feae128c5a55bae8d95f7dd619efe7bc05d6a1dc39c542806c15523537629e9bbeb7a004486dff773a98c1d0a1c403898d0b2567157152f39feac3a4abda402d67cb7a1446585acc8ea40f9f7e7f2ec02d593a5f80eaf28355e54f0044810cc5818c8cf35ad9afb2deead7c7ad573a9b3bfd96846f94aabdea79cf9ebc47f04acddeb14d8c74df25ad52e6c3caa24410fda5c9fad4ebc310e7215d642b23ab9dd5fd947fbd231dfa2497a43d5fc050c0d649b1428ec1ee7f7d1c5cc574f495b61d8f3db685fdddf3f25db5e2440642ffc60fb85a21f3968ef615296e8c202aba19976fcad54f3a58c8e9719b1e8f824a1a0a2831f8edbeb5fb56bf09ab52f30afc30eb47a670e06689653a83bd9c9831f38447f323ce2dca538831b2fe17fb37b6f3dfd4b1b8ca343e21f5f913b6cb717159fba38cea6c33801b46e6f8b9dbebe5e532f50b5cb6001054a3b9164e6ecd5369d00d4f8dcb5f9a16916924f71f61fc24bea511e473927dae3f709e848f87267c972afadd5a27ae240decf784f1f52730331cb5b727584a688b8d460f6e24ae8eec6c71e6b0bdd4cc37b9d5532365927d6972b1f81438f345f15d61d8c4494e1f95e539a13b9b60f50c8ff7dc5ed97751059e8aff7b101675372512700b4703d168d1125d79ac5c481b8d67e9f7c208ff4cc964d11e5942869ae7c77c0324dddf84ec6739a8204e57de86b2ad93d2553e609987850c816153877769ff3238e8475029f7ff9d58dafb6d5fe2d52bd46a3c148a1c471fe9fd29679139bae9b8ef04a7954637a946963a0f5b358e8370534c6241bbf920e8ae8cb1286175954860d06523a9ce2eedda646a11196e836d6b65f62a630a76a4af17ecbb591ca31538ae00f87a6474efb7cfe366d33d104e3ec670ef88ea4494c06ff4afa0fb1e7ef05c97589e18aac7331e1d2757863cd5f018a332c4ccb33f61e46ba638f42350ceccccfa6da47b7a2e324645de7eae55c5cb12f0bee9541a8648bca9e722779ac70dd5652335ad6599d613e36d12bad925c52ef555f18326ff331bd63fac0ae577d2fa11b537e2057aaffab61b6319e922625f421f8533ccc7e2953e57036e6a1c1680ff6b6604899dce190c7bffa54fc815fdd627c5f38fa690dda15625c4e1e42296367db2c615ff1697f3c1646503505edf8cd47080723017c52deab7c89d8a8b8e6b3f7abf1c3f5d966c7b547081795c181b948a24b84304f817adb19086f1b36919f890c4ca2cd0caead354445a190882b2a13498b301bdc9071daeae91a82a69fdc9e52dd4a01746ed698cd6f4642351a2a54418cb1be6d72375c653804fc025e2c0902c4d55f35d90ad48562f858d61eedee146e9185da2e4ca6df5c4d25ce60dce1900f24e9425a43ed917aedb0a2a9b2c5a8df7ce155359f2db475958122190ec06af67f336fcf13963119d62e155ac19c960d54b7bfd5c9eefbc57f8c85798e34b20a4c1c4628d1ab5ecd5bb11a50beee6861b0ed4e33b7c7746a92120f70023a1625fd7c22e459b5df7dde120fbfb179c0c189c8a0e5f7fc49932e2d54b36c68ca0deca1eae87cb7e9a2ddbfb1505e03bfc107fb6c4f05bbd8d58c8c976100b21d30fa3b064eafcc9860ac3064d7561187ab1e3947204a5bd0d336ec0adc8ea5a8b3eed1108fe85912f01de0a7c25f6eacddc61613fa862fec547d4c946fb60d421e33f85f7e0920933bef635fa88fd3734cb6542beb6ad506d9ecd8675ec4353c0feb90bc48611eabc349b433c6ef812add1623343d69f4d58180b7252b8a3c711c115db3cbae02fb137720b44f66d9f46114c5edd35e56cb3d05a3fdbb35085439f1791b1dbcb4d3572131bb906723755a6ed7e7e49bf8240b3e39086c8419c4c1fe112b8505e27506c6e40264cf1a6d86182f3a85de196337fb0db42a12309a186b8874029c289adbba532275acbfa5968c16f4cf59b29e8a6346cfa807bf4c599ee88b330eff10d457eb69fadd60eb179908151cb10c1bb6a3d594ccb38272e79d88b9843790ac06d923e4d82497accbb46b23ee3b65e3ea98d6c75ab90a6070d29f7cdbb0cd3703e93fcd4eb75958c74e8379da592228025725f5fe319b1f161ac202d820af1ba869740491710ec06d2ac7202d224b07c546f0541065425e75de8b920ad537641bc3b5d14f7fcbc923da7ed0eb28133aff107a7fe058689ec9c14a9ef8a8e4b8c495dcc1eba94977e6becba867c49c11207df0919871f8339943b1322bd22d7212bbe0e2ba322cf940a35347cab3b9580b87e9fe10253a11ecb988fe4d1c0f333965106875c7a93eeecf2b5e3ef097ee1a673fcdb0aa5ec9f1b3d33fc57ab780fa3c7d978e966f20fc46ec1c43fb836aa2e7675c6c34f485e993bcec6fd19089f9c9b29546457443fcb03d6d"], 0x7248}}, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 21:59:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:59:03 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="50000200000000000000030000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee01], 0x350) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) [ 840.965494][T18855] ptrace attach of "/root/syz-executor.0"[8501] was attempted by "    \x0a€q \x0c\x0a  \x09 @ \x09  syz1 HO€œ( € €€Í  27^ùj€´ \x0aÑz/o¸s@>¥S¦öþºð™‚Iå#õ÷AéIû [ 841.011818][T18858] EXT4-fs (loop2): Can't mount with encoding and encryption 21:59:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 21:59:03 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 841.861339][T18885] EXT4-fs (loop2): unsupported inode size: 4 [ 841.867749][T18885] EXT4-fs (loop2): blocksize: 4096 [ 841.973941][T18886] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 21:59:04 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 21:59:04 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xd7) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000300)=0x7a2, 0x4) recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x140, 0x0) 21:59:04 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 842.554328][T18900] EXT4-fs (loop2): unsupported inode size: 4 [ 842.560580][T18900] EXT4-fs (loop2): blocksize: 4096 21:59:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) 21:59:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000480)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) syz_open_procfs(0x0, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 21:59:05 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85321, &(0x7f0000000340)={{0x80}, 'port1\x00'}) [ 842.902228][T18907] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 21:59:05 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) [ 843.122003][ T29] audit: type=1804 audit(1599170345.396:39): pid=18912 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir458581860/syzkaller.CXihP5/616/bus" dev="sda1" ino=16379 res=1 21:59:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:59:05 executing program 4: openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf6, 0x0, &(0x7f0000000080)) 21:59:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x4, 0xffff}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x38, 0x2, [@TCA_BASIC_ACT={0x34, 0x3, [@m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) [ 843.640961][ T29] audit: type=1800 audit(1599170345.916:40): pid=18917 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.1" name="file0" dev="sda1" ino=16374 res=0 [ 843.669605][T18926] EXT4-fs (loop2): unsupported inode size: 4 [ 843.675965][T18926] EXT4-fs (loop2): blocksize: 4096 [ 843.793862][ T29] audit: type=1804 audit(1599170346.066:41): pid=18932 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir458581860/syzkaller.CXihP5/616/bus" dev="sda1" ino=16379 res=1 21:59:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 844.143036][T18940] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:59:06 executing program 1: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50}, 0x50) 21:59:06 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x0, 0x0, @private0}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in={0x2, 0x0, @remote}], 0x58) 21:59:06 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) readv(r0, &(0x7f0000001500)=[{&(0x7f00000001c0)=""/169, 0xa9}], 0x1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 21:59:06 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc1105517, 0x0) [ 844.590887][T18959] EXT4-fs (loop2): unsupported inode size: 4 [ 844.597221][T18959] EXT4-fs (loop2): blocksize: 4096 21:59:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:59:07 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0xa6, 0x4, 0x3ff, 0x0, 0x1}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) sendmsg$inet(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, 0x0, &(0x7f00000001c0)=""/70}, 0x20) 21:59:07 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x100000001, 0x7742) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007bf, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 21:59:07 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:07 executing program 3: r0 = epoll_create1(0x0) r1 = io_uring_setup(0x125b, &(0x7f0000000280)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000300)={0x14}) epoll_wait(r0, &(0x7f0000000340)=[{}], 0x1, 0x0) 21:59:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:59:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000001000010450030000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2b030000a8010000200012800b00010067656e6576650000100002800600080003000000040006"], 0x50}}, 0x0) [ 845.398337][T18983] EXT4-fs (loop2): unsupported inode size: 4 [ 845.404874][T18983] EXT4-fs (loop2): blocksize: 4096 [ 845.523048][T18986] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 845.770126][T19003] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 845.780333][T19003] netlink: 'syz-executor.0': attribute type 8 has an invalid length. 21:59:08 executing program 1: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) 21:59:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:59:08 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:08 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) readv(r0, &(0x7f0000001500)=[{&(0x7f00000001c0)=""/169, 0xa9}], 0x1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 21:59:08 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0xffffffff00000000, 0x0) 21:59:08 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000013c0)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) [ 846.414310][T19014] EXT4-fs (loop2): unsupported inode size: 4 [ 846.420640][T19014] EXT4-fs (loop2): blocksize: 4096 [ 846.472855][T19013] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 21:59:08 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) migrate_pages(0xffffffffffffffff, 0x1, 0x0, 0x0) 21:59:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:59:09 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:09 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x853, 0x48}, 0x40) 21:59:09 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x410000, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={0x0, 0xfc01, 0x2, [0x0, 0x4]}, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, 0x0, &(0x7f0000000480)) mount(&(0x7f0000000280)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='ceph\x00', 0x0, 0x0) 21:59:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 847.292849][T19044] EXT4-fs (loop2): invalid first ino: 1 [ 847.459653][T19049] ceph: No path or : separator in source [ 847.852708][T19056] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 21:59:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'dummy0\x00', &(0x7f0000000800)=@ethtool_perm_addr={0x20, 0x6, "fe176e8bbe66"}}) 21:59:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r5, 0x14301}}, 0x20}}, 0x0) 21:59:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="0f0836660f3a633ea466bad004ec9a13000000fb00f00fb18500000000670f01cb660f388054fe04660f3a0aef07cf66ba410066ed", 0x35}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:59:10 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:10 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0505611, &(0x7f0000000000)={0x0, 0xa}) 21:59:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 848.265880][T19071] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 848.297535][T19074] EXT4-fs (loop2): invalid first ino: 1 [ 848.307959][T19069] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 848.406855][T19081] device bond1 entered promiscuous mode [ 848.413427][T19081] 8021q: adding VLAN 0 to HW filter on device bond1 21:59:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 21:59:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 848.592614][T19084] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 21:59:11 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:11 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x45206f4e, 0x4) 21:59:11 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, 0x0, &(0x7f00000000c0)) [ 849.130862][T19131] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 21:59:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 849.330745][T19141] EXT4-fs (loop2): invalid first ino: 1 21:59:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x20, 0x2, 0x1, 0x201, 0x0, 0x0, {0x0, 0x2}, [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x20}}, 0x0) 21:59:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:59:11 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@ldst={0x6, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 21:59:11 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0xffffffffffffff30, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001114e593000000000000000008000100000000000800030000000000"], 0x20}}, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000400), 0x40000000000017a, 0x0) 21:59:11 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) [ 849.696348][T19147] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 21:59:12 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 21:59:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:59:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x248000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0x12000005f) [ 850.091252][T19162] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 850.340473][T19174] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 21:59:12 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:12 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x80047210, 0x0) [ 850.392087][T19169] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 21:59:12 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, 0x0, &(0x7f0000000040)) 21:59:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 850.861418][ T29] audit: type=1804 audit(1599170353.137:42): pid=19182 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir458581860/syzkaller.CXihP5/625/bus" dev="sda1" ino=15730 res=1 [ 850.905576][T19183] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 851.089802][ T29] audit: type=1804 audit(1599170353.177:43): pid=19182 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir458581860/syzkaller.CXihP5/625/bus" dev="sda1" ino=15730 res=1 21:59:14 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x3, 0x4, 0x8, 0x0, 0x1}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 21:59:14 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$unix(0x1, 0x0, 0x0) 21:59:14 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:14 executing program 3: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, r0, 0x601, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 21:59:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) socket(0x0, 0x0, 0x0) 21:59:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 852.219273][T19209] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) 21:59:14 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x300, 0x0, 0x0) 21:59:14 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x600) setsockopt$IP_VS_SO_SET_ADD(r0, 0x2, 0x482, 0x0, 0x0) 21:59:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:59:14 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:15 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000040)='cgroup\x00', 0x0, &(0x7f0000000240)='no,e\x00') 21:59:15 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={0xffffffffffffffff, 0x24, 0x0, 0x0, 0x0}, 0x20) [ 853.074463][T19235] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 853.260291][T19241] cgroup: Unknown subsys name 'no' [ 853.284947][T19242] cgroup: Unknown subsys name 'no' 21:59:15 executing program 1: unshare(0x2a040600) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vhost-vsock\x00', 0x2, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:59:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 21:59:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:59:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) fsconfig$FSCONFIG_SET_FD(r1, 0x7, 0x0, 0x0, 0xffffffffffffffff) 21:59:15 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0x8}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @loopback}], 0x1c) 21:59:15 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) [ 853.666624][T19257] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) 21:59:16 executing program 3: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r6 = dup(r1) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x24, r4, 0x201, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x24}}, 0x0) 21:59:16 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x2, 0x4, 0x3, 0x21f}, 0x40) bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="1805000000000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000791714000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xf1, &(0x7f0000000080)=""/241, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:59:16 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:59:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae60, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f00000003c0)=0xe2) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) [ 854.449173][T19277] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) 21:59:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x891e, &(0x7f0000000040)={'veth1_virt_wifi\x00', @ifru_ivalue}) 21:59:17 executing program 1: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000000801f7e999e0c2bf67c40000e69c5dde0202000224f76d6586e97bf618a81d000800140700000000000000670800f9ffffffff110810a732256bd61a0d0aff"], 0x1}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 21:59:17 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 21:59:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:59:17 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5}, 0x18}}, 0x0) 21:59:17 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280), 0x0}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xa0001, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 21:59:18 executing program 0: set_mempolicy(0x2, &(0x7f0000000080)=0xe4e, 0x6) creat(&(0x7f0000000240)='./file0\x00', 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) 21:59:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 856.144307][T19313] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) 21:59:18 executing program 4: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r0, 0xff}, 0xc) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r0, 0x6, 0x8}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000340)={&(0x7f00000000c0)="2499869ed799a83f0479376f382824ebbe6d401ee5dc9d65d536fd5666fccf753688", &(0x7f0000000200)=""/189, &(0x7f0000000100)="c1ce9984f3dd68b778a372f72456c52161cca42e6fbb2451fc1cf94ac178fdb811d92e73be9600151b9013f48db443839c5d10f1c2425ff9f3ce84cdc4e2e6", &(0x7f00000002c0)="9bc6135850e8a6b91626c07f5ffa48932d30994b5581d4b27893ced131aad2cacc0069498f30efc95db74478886672061bf3c57574ca2d", 0x5cf9, r1, 0x4}, 0x38) r2 = socket$kcm(0x10, 0x2, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000a40)=@can, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xf, 0x0, 0x101, &(0x7f0000000040)) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4ca20100, &(0x7f0000000080)=[{&(0x7f0000000840)="2300000025000511d25a80648c63940d0424fc60040018000a001100022f004837153e", 0x23}], 0x1}, 0x0) r3 = socket$kcm(0xa, 0x6, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000940)) setsockopt$sock_attach_bpf(r3, 0x10d, 0x2, &(0x7f0000000040), 0x17) 21:59:18 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280), 0x0}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) [ 856.535040][ T29] audit: type=1804 audit(1599170358.817:44): pid=19322 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir065100667/syzkaller.FQVw3W/539/bus" dev="sda1" ino=16374 res=1 [ 856.713518][ T29] audit: type=1804 audit(1599170358.877:45): pid=19322 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir065100667/syzkaller.FQVw3W/539/bus" dev="sda1" ino=16374 res=1 [ 856.737986][ T29] audit: type=1804 audit(1599170358.887:46): pid=19322 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir065100667/syzkaller.FQVw3W/539/bus" dev="sda1" ino=16374 res=1 21:59:19 executing program 0: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000030003dfa0000000000000018000021004c000100480001000700010078740000380002802a000600260000006e676c65000000000000000000000000000000000000473c06000000ffffffef00000000080002"], 0x1}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$netlink(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 856.762452][ T29] audit: type=1804 audit(1599170358.897:47): pid=19322 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir065100667/syzkaller.FQVw3W/539/bus" dev="sda1" ino=16374 res=1 21:59:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 857.025751][T19336] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 857.290121][T19358] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 857.299937][T19358] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 6 [ 857.348905][T19339] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 857.357327][T19339] CPU: 0 PID: 19339 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 857.366069][T19339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 857.376192][T19339] Call Trace: [ 857.379605][T19339] dump_stack+0x21c/0x280 [ 857.384143][T19339] sysfs_warn_dup+0x1e9/0x210 [ 857.388953][T19339] sysfs_do_create_link_sd+0x2ab/0x380 [ 857.394589][T19339] sysfs_create_link+0x125/0x190 [ 857.399720][T19339] device_add+0x186e/0x40d0 [ 857.404335][T19339] ? kmsan_get_metadata+0x116/0x180 [ 857.409635][T19339] ? kmsan_set_origin_checked+0x95/0xf0 [ 857.415285][T19339] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 857.421519][T19339] wiphy_register+0x3daf/0x4cf0 [ 857.426469][T19339] ? kmsan_get_metadata+0x116/0x180 [ 857.431804][T19339] ieee80211_register_hw+0x587b/0x6530 [ 857.437371][T19339] ? ieee80211_register_hw+0x13f1/0x6530 [ 857.443131][T19339] mac80211_hwsim_new_radio+0x3835/0x57d0 [ 857.448938][T19339] hwsim_new_radio_nl+0x1575/0x1a30 [ 857.454224][T19339] ? hwsim_tx_info_frame_received_nl+0x1360/0x1360 [ 857.460852][T19339] genl_rcv_msg+0x1703/0x18a0 [ 857.465613][T19339] ? kmsan_set_origin_checked+0x95/0xf0 [ 857.471237][T19339] netlink_rcv_skb+0x6d7/0x7e0 [ 857.476064][T19339] ? genl_rcv+0x80/0x80 [ 857.480291][T19339] genl_rcv+0x63/0x80 [ 857.484337][T19339] netlink_unicast+0x11c8/0x1490 [ 857.489346][T19339] ? genl_pernet_exit+0x90/0x90 [ 857.494278][T19339] netlink_sendmsg+0x173a/0x1840 [ 857.499351][T19339] ____sys_sendmsg+0xc82/0x1240 [ 857.504303][T19339] ? netlink_getsockopt+0x17e0/0x17e0 [ 857.509740][T19339] __sys_sendmsg+0x6d1/0x840 [ 857.514433][T19339] ? kmsan_copy_to_user+0x81/0x90 [ 857.519574][T19339] ? put_old_timespec32+0x231/0x2d0 [ 857.524835][T19339] ? kmsan_get_metadata+0x116/0x180 [ 857.530089][T19339] ? kmsan_get_metadata+0x116/0x180 [ 857.535347][T19339] ? kmsan_get_metadata+0x116/0x180 [ 857.540679][T19339] __se_compat_sys_sendmsg+0xa7/0xc0 [ 857.546033][T19339] __ia32_compat_sys_sendmsg+0x4a/0x70 [ 857.551559][T19339] __do_fast_syscall_32+0x2af/0x480 [ 857.556834][T19339] do_fast_syscall_32+0x6b/0xd0 [ 857.561757][T19339] do_SYSENTER_32+0x73/0x90 [ 857.566324][T19339] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 857.572689][T19339] RIP: 0023:0xf7fd7549 [ 857.577038][T19339] Code: Bad RIP value. [ 857.581134][T19339] RSP: 002b:00000000f55b00cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 857.589600][T19339] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 857.597639][T19339] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 857.605672][T19339] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 857.613685][T19339] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 857.621823][T19339] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 21:59:20 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() r3 = gettid() tkill(r3, 0x5000000000016) tkill(r2, 0x2f) ptrace(0x10, r2) ptrace$peeksig(0x4209, r2, &(0x7f0000000000)={0x0, 0x0, 0x37}, &(0x7f0000000080)) 21:59:20 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280), 0x0}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:20 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[{0x10}, {0x10, 0x11}], 0x20}}], 0x1, 0x0) [ 857.819440][T19370] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 857.829226][T19370] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 6 21:59:20 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x3c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r0, 0x4) 21:59:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:59:20 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000006a80)={0x0, 0x0, &(0x7f0000006a40)={&(0x7f00000065c0)={0x60, r3, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) 21:59:20 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x8004550f, 0x0) 21:59:20 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000000)={0x5, 0x8, [0x0, 0x0]}) 21:59:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:59:21 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000006a80)={0x0, 0x0, &(0x7f0000006a40)={&(0x7f00000065c0)={0x60, r3, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) 21:59:21 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180)='/dev/video#\x00', 0x68, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x0, 0x4, {0x2, @raw_data="a127713c8f17c92b3823961688951a5c679137cf326cc0a05179296efecaedfe1a32564db0e6a5f0a2977d4c38a419be3fe1eead79e0acb178742ba5c8fdc51dc33db86c5a94a6148386c85d94a46f80992d85a302c4700c604684f76969f97308a7c8fb89e03bb24681fc205b6fb9ac7eb5c6843eb225dcaed417554b3f91a4518fd2b3b89e548b8b4f555aafb166a3645d2ec4f555e8227e6d2fc87999fad7286c055a6b50c627b0a140366a5a45335b5fbf158795f012e174da6b9635c8640e89e85918739e23"}}) 21:59:21 executing program 3: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000200060000071a80000001cc", 0x10) setsockopt(0xffffffffffffffff, 0x2000000000000107, 0x1, 0x0, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, &(0x7f0000000040)) rseq(0x0, 0x0, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0), 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3d, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000001c0)={0x1000, 0x0, 0x0, 0x0, 0x0, 0x3f}) r1 = memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) [ 859.073099][T19397] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) 21:59:24 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) 21:59:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:59:24 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000038e000/0x9000)=nil, 0x9000, 0x2000, 0x0, &(0x7f000080a000/0x2000)=nil) 21:59:24 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb303385351", 0x0}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:24 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x146, &(0x7f0000000200)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '@\x00', 0x110, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9, "a78ce540cd4f791153d5dea6b2590b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a80302"}, {0x0, 0x1, "000000000000e5fffff9c600"}, {0x3, 0x15, "8dcc2fd3fc316fd01bee9a930f51ac3aa596272dae8ae89cb1ead0996e3aa57dc4379d1b981c6cfc714d17df090afeadd5bb95f77c97064fcbb41aaf432daad94a5fb3a32b7004d2bc40fb7679af4023ebffe6ef8de80b9b3a81547cd4d61c4dbaddb40935d93add71b00917af5d6d1f3629bf7df5a4bb6735581e627198afa680dbd5003bcedff248887a9bcbcbef5dc0e9c4a09d97533782edee8b716b1556a5c848c3b71c"}]}}}}}}, 0x0) 21:59:24 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f00000000c0)=0x80000000, 0x4) [ 862.419226][T19439] IPv6: addrconf: prefix option has invalid lifetime [ 862.428977][T19435] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) 21:59:24 executing program 3: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x24000844) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r2 = perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x71, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)='f', 0x1}], 0x1, 0x0, 0x0, 0xf00}, 0x0) [ 862.572416][T19439] IPv6: addrconf: prefix option has invalid lifetime 21:59:25 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb303385351", 0x0}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:25 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000004000)={0x0, 0x10, &(0x7f0000003fc0)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000004040)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], &(0x7f00000000c0)=0x8) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x76, &(0x7f0000000180)={r1}, 0x8) 21:59:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 863.520053][T19450] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) 21:59:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 21:59:26 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb303385351", 0x0}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) [ 864.499273][T19473] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) 21:59:27 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ustat(0x1, &(0x7f0000000040)) 21:59:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r2}, 0x8) 21:59:29 executing program 0: syz_emit_ethernet(0x6a, &(0x7f0000000040)={@multicast, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @rand_addr=0x7f000001, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@broadcast}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast2}, {}]}]}}}}}}}, 0x0) 21:59:29 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfffffffffffffffe) r2 = accept4(r1, 0x0, 0x0, 0x0) write$binfmt_elf32(r2, 0x0, 0xff42) close(r2) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000240), 0x0) 21:59:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 21:59:29 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f0", 0x0}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:29 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0x14, 0x2, [@TCA_PIE_ECN={0x8}, @TCA_PIE_BETA={0x8}]}}]}, 0x40}}, 0x0) 21:59:29 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) [ 867.314996][T19497] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) 21:59:30 executing program 3: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000)=0x2, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x64, &(0x7f0000000000)={r2}, 0x8) 21:59:30 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r1, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x80, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_all\x00', 0x26e1, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0185879, 0x0) 21:59:30 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000041c0)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xa200e1, &(0x7f0000000100)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 21:59:30 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x541b, 0x0) 21:59:30 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f0", 0x0}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) [ 868.259382][T19519] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 868.321592][T19510] mmap: syz-executor.1 (19510) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 868.382939][T19524] fuse: Bad value for 'fd' [ 868.436194][T19523] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) 21:59:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000230005efd1080000000000000000fc60376cc737281427dd02000000d1bd7ee11d5826f7c9d390f359e9", 0x2e}], 0x1}, 0x0) 21:59:30 executing program 3: recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) shutdown(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r1, 0x1) 21:59:31 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) 21:59:31 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f0", 0x0}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) [ 869.073450][T19524] fuse: Bad value for 'fd' 21:59:31 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x3) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x540) sendfile(r0, r1, 0x0, 0x1c575) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f000001d080)={0x0}}, 0x0) 21:59:31 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/ptype\x00') r1 = syz_open_procfs(r0, &(0x7f0000000000)='timerslack_ns\x00') socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1af5eff25331f2c060d7f77959af48ba8a8d24a25bf5f947d295fb747f57b749d9a5ff3ada239f3b62d2e25f348b72fc8bdd0190bdc3259c6867a9e6d3616c829a9eb1c09f0794b0d3760f6b00000094265b0b98f61ede62c498599b7f0d4f7c6706b5d2ee45cb52d0648d67a9f42784ecafa7bb8494a3011d8698d045ff392dd140d7b94188be865ea4d6573230aa94549c3b64bfb80599126af61f8a7dc0846802296cefa83384f2", @ANYRES16=r3, @ANYBLOB="02002bbd7000ffdbdfa06b00000c080002149ae1b57c95a5296bc6be1198ca3bb9cecf49543cdaee7c82016091"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0x6, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="ba010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1d4}}, 0x2400c014) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="8802a9182b9a5ec653480000920c0162d2a65ebe207de67af37f81f1dbce47d76f52dbfd19a6ca2d81cf61a6ea2d1931a92223f878c66b310a54856d1c96c32a84b69d210e11e86c1e19551fc2d8832847fa", @ANYRES16=r3, @ANYBLOB="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"], 0x288}, 0x1, 0x0, 0x0, 0x41}, 0x41) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x28, r3, 0x200, 0x70bd2c, 0x25dfdbbd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40081}, 0x20000000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xbc, r3, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xa8, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6e61}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x318ce22d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b079b40}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6817c693}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc13}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2edf}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacb}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1db476c1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x57ad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb730}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xefc3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68648499}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa77f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb880}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c94cc31}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc216}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e09ac88}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8bfd}]}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x20020040) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x1f0, r3, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xec, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3672b65a}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5bd09650}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa26967e}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69180b4b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35a7e1a0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e58c174}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xbdb34b2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fe3ed8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x404971f5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x215053db}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43d2a9b2}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47bed660}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2cc9c665}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x11374b72}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c1e3528}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x6}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x673d45a0d75fe532}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xdc, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x423bf166}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xedca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xcb0c40a}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x709e421c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8f8f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc809}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf3a3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x692c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x641c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f5cc088}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ad5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c9b72c8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5429}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5483aef}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70600f45}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9dd6}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d98}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea81}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4442b3c9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8bd9984}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa695}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb567}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6e17}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbffa}]}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x20008080}, 0x4800) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x290, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39a3a238}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x170, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4250d1be}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27234ae8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9f6d}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28ba63d3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x57f4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f1d64de}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe902}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7c41}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58ce7256}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xba05}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcf30}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a57cb9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbcc1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8f17}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x791faca6}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x64fc9b0d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3ede}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbf8a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7eb38808}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda0e}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52083369}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x337c08c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20d718fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xba1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1c6c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ad3821a}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a279a7c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd3fa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa3ff0d0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ba2c3d0}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x33af}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb7a2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a1ecfdb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45fcc5dd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d16504e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a20a4ec}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8c97}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfe19}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x42581b35}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e0086f2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf508}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b4465d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd17f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe734}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24b85b0c}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb6c5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff6d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa217}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xffff2f35}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5157d9a5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5436}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd2f6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6e7b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x77e9}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x7}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x4040088}, 0x5) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x1a0, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x70, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x57c0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39b339de}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x20}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa63d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x48f5}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a57eac5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe35}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3d55}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6443ba98}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13acd946}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37da9c67}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9417}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xc4, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14e7deb3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78f651c6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x49}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14d2a628}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x784d0159}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52e3a79e}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79e176be}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7554d367}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f89e08e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}]}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0xe) ioctl$TCGETA(r4, 0x5434, 0x0) [ 869.470484][T19543] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 869.597532][ T29] audit: type=1804 audit(1599170371.878:48): pid=19547 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir278834866/syzkaller.EG7Vc0/534/file1/file0" dev="loop5" ino=5 res=1 [ 869.815206][T19552] device lo entered promiscuous mode 21:59:32 executing program 1: delete_module(0x0, 0x800) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x100000000, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendfile(r0, r1, 0x0, 0x24002d00) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 21:59:32 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0xf56, 0x0, {0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) 21:59:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000040)={0x18, 0x16, 0x111, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1e}]}, 0x18}], 0x1}, 0x0) 21:59:32 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473", 0x0}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) [ 870.426731][T19553] Y­4`Ò˜: renamed from lo [ 870.473704][ T29] audit: type=1804 audit(1599170372.748:49): pid=19550 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir278834866/syzkaller.EG7Vc0/534/file1/file0" dev="loop5" ino=5 res=1 [ 870.749205][T19564] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) 21:59:33 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0xc8, 0x0, 0x278, 0x5803, 0x278, 0x2e8, 0x2e8, 0x278, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'bridge0\x00', 'geneve1\x00'}, 0x0, 0x108, 0x150, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@connbytes={{0x38, 'connbytes\x00'}, {[], 0x0, 0x3}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@ipv6={@private2, @loopback, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@inet=@tos={{0x28, 'tos\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) 21:59:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000040)={0x18, 0x16, 0x111, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1e}]}, 0x18}], 0x1}, 0x0) 21:59:33 executing program 0: perf_event_open(&(0x7f0000001240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000511d25a80648c63940d0124fc601003d0400a0002000200000037153e370a00018004000000d1bd", 0x33fe0}], 0x1}, 0x0) 21:59:33 executing program 3: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 21:59:33 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473", 0x0}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) [ 871.523985][T19584] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 871.562368][T19585] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:59:33 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473", 0x0}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) [ 871.783809][T19590] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:59:34 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000040)=0xffbfffff) 21:59:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000040)={0x18, 0x16, 0x111, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1e}]}, 0x18}], 0x1}, 0x0) [ 872.286550][T19604] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) 21:59:34 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5) 21:59:34 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0x40045017, 0x0) 21:59:34 executing program 0: r0 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0x0, 0xfe27) 21:59:34 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x8002) writev(r0, &(0x7f0000001280)=[{0x0}, {&(0x7f00000001c0)="b5", 0x1}], 0x2) 21:59:34 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb97", 0x0}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000040)={0x18, 0x16, 0x111, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1e}]}, 0x18}], 0x1}, 0x0) 21:59:35 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0x204000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r2, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, r3+30000000}}, 0x0) r4 = dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000000)={0x2001}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, 0x0, 0x0) [ 872.940115][T19619] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) 21:59:35 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000041c0)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=r0]) statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x7ff, 0x0) [ 873.055958][ T29] audit: type=1400 audit(1599170375.338:50): avc: denied { block_suspend } for pid=19624 comm="syz-executor.0" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 21:59:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000040)={0x18, 0x16, 0x111, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1e}]}, 0x18}], 0x1}, 0x0) 21:59:35 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb97", 0x0}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:36 executing program 5: sendmmsg(0xffffffffffffffff, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="fd67ce9460", 0x5}], 0x1}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:59:36 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0x204000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r2, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, r3+30000000}}, 0x0) r4 = dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000000)={0x2001}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, 0x0, 0x0) [ 873.949878][T19644] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) 21:59:36 executing program 1: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) read(r0, &(0x7f0000000040)=""/105, 0x69) 21:59:36 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0xc, 0x0, 0x0, 0x71, 0x11, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x4000}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 21:59:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000040)={0x18, 0x16, 0x111, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1e}]}, 0x18}], 0x1}, 0x0) 21:59:36 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb97", 0x0}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:36 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0xb, 0x800, 0x8, 0x161, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001180)={r0, &(0x7f0000000040), &(0x7f00000021c0)=""/4096}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001080)={r0, &(0x7f0000000040), &(0x7f0000000080)=""/4096}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, &(0x7f0000000040)=0x42, r1, &(0x7f00000010c0)=0x1, 0x7f, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a40)={&(0x7f00000011c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x40044}, 0xc840) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c000005e7ffffffffffffff0000000000", @ANYRES32=0x0, @ANYBLOB="0040020000000000280012800b0001006d616373656300001800028005000600000000000c00010000000000000000000a000500140000000000000008000a00", @ANYRES32=r6, @ANYBLOB], 0x5c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000001980)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001940)={&(0x7f00000031c0)={0x33c, r7, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x2c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x7f}, {0x8, 0x0, 0x9}, {0x8, 0x0, 0x6c73}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x8}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x34, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x101}, {0x8, 0x0, 0x5b2b147e}, {0x8, 0x0, 0xfffff800}, {0x8, 0x0, 0xdc}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0x400}]}, @NL80211_ATTR_IE={0xac, 0x2a, "71b217aee3df60fe8d83aa994e2c06ecb8cffb8b492da9916ff9aa9150d9ecb31749f42286d1f653e6a8bece8b8f6e357f0c14999be096bc63ac3279db2db77ea27dedd0c66a91957fefefefece54724cdc88858f273a437df1f63577397b398009d095022c562432ffd0d5f9d4871d5e5ff8bdc5aeb3bfc46df9b4d8c3a31f3ad5a7fbe281a306b49595764115b9fc4eadc93610323cc2c3cf779b3855d6dd77d2999f26c69c9d5"}, @NL80211_ATTR_IE={0x1fd, 0x2a, "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"}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x6}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1000}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x33c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c1) socket(0x18, 0x800, 0x3) getsockname$packet(r3, &(0x7f0000001a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001d00)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x5c}}, 0x0) [ 874.571137][T19669] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) 21:59:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000040)={0x18, 0x16, 0x111, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1e}]}, 0x18}], 0x1}, 0x0) [ 874.645202][T19675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19675 comm=syz-executor.5 21:59:37 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x397) setuid(r1) socket$phonet_pipe(0x23, 0x5, 0x2) [ 874.700211][T19677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=19677 comm=syz-executor.5 21:59:37 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}]}]}}, &(0x7f0000000300)=""/250, 0x36, 0xfa, 0x8}, 0x20) [ 874.803576][T19677] device geneve2 entered promiscuous mode 21:59:37 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) [ 875.117378][T19687] BPF:[1] FUNC_PROTO (anon) [ 875.122208][T19687] BPF: [ 875.125514][T19687] BPF:meta_left:16 meta_needed:24 [ 875.130599][T19687] BPF: [ 875.130599][T19687] [ 875.198300][T19691] BPF:[1] FUNC_PROTO (anon) [ 875.203249][T19691] BPF: [ 875.206086][T19691] BPF:meta_left:16 meta_needed:24 [ 875.211158][T19691] BPF: [ 875.211158][T19691] 21:59:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x679, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x40) 21:59:37 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000000080)={0x20, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x10}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) [ 875.406402][T19679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=19679 comm=syz-executor.5 [ 875.420481][T19675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19675 comm=syz-executor.5 21:59:37 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040), 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) 21:59:38 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) [ 875.715757][T19679] device geneve2 entered promiscuous mode 21:59:38 executing program 4: setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000040)={0x18, 0x16, 0x111, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1e}]}, 0x18}], 0x1}, 0x0) 21:59:38 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000500)='tmpfs\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000005040)={[{@mpol={'mpol', 0x3d, {'interleave'}}}]}) 21:59:38 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0xe9}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/199, 0xc7}], 0x1, 0x0) close(r0) [ 876.237539][T19718] tmpfs: Bad value for 'mpol' [ 876.281191][T19718] tmpfs: Bad value for 'mpol' 21:59:38 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r1 = dup(r0) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 21:59:38 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:38 executing program 4: setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000040)={0x18, 0x16, 0x111, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1e}]}, 0x18}], 0x1}, 0x0) 21:59:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000000)='nolazytime\x00', 0x0, 0x0) 21:59:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x38}}, 0x0) 21:59:39 executing program 4: setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000040)={0x18, 0x16, 0x111, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1e}]}, 0x18}], 0x1}, 0x0) 21:59:39 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:40 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede)\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b00)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x3af4701e) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="b98ddc3c61ccc99a30a7d3b4731ab23a2233cfd3f66ac163", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0xfffffdef}, 0x1, 0x300}, 0x0) 21:59:40 executing program 0: r0 = socket$inet(0x2, 0x840000000003, 0x7) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) 21:59:40 executing program 5: unshare(0x28000000) clone(0x7f408a664000, 0x0, 0x0, 0x0, 0x0) 21:59:40 executing program 3: socket(0x1, 0x5, 0x7e) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000440)={0x30, 0x2, 0x0, 0x4, 0x8, 0x3, 0x800000000000}, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r1, &(0x7f0000002200)=[{{&(0x7f0000001540)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000015c0), 0x0, &(0x7f00000028c0)=""/214, 0xd6}, 0x7}, {{&(0x7f0000001600)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000001700)}, 0x728b553b}, {{&(0x7f0000002a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001980), 0x0, &(0x7f00000017c0)=""/175, 0xaf}, 0xffffffff}, {{&(0x7f0000004cc0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000640)=[{&(0x7f0000005740)=""/187, 0xbb}, {&(0x7f0000004e00)=""/250, 0xfa}, {&(0x7f0000001d00)=""/205, 0xcd}, {&(0x7f0000005000)=""/151, 0x97}, {&(0x7f0000005700)=""/56, 0x38}, {&(0x7f0000001880)=""/138, 0x8a}, {&(0x7f00000051c0)=""/23, 0x17}, {&(0x7f0000005200)=""/33, 0x21}, {&(0x7f00000005c0)=""/74, 0x4a}], 0x9, &(0x7f0000000700)=""/260, 0x104}, 0xffff}, {{&(0x7f00000053c0)=@ipx, 0x80, &(0x7f00000054c0)=[{&(0x7f0000000540)=""/89, 0x59}], 0x1, &(0x7f0000005500)=""/117, 0x79}, 0x2f4}, {{&(0x7f0000001a00)=@sco, 0x80, &(0x7f00000003c0), 0x2d, &(0x7f0000000840)=""/80, 0x50}, 0x1}, {{&(0x7f0000001680)=@xdp, 0x80, &(0x7f0000001780), 0x0, &(0x7f0000001b80)=""/246, 0xf6}, 0xd9}], 0x7, 0x20, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x1ffe, 0x3, 0xfffffffffffffffe}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='t', 0x1, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000280)='encrypted\x00', &(0x7f00000002c0)=@builtin='builtin_trusted\x00') keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000180)={r5, 0xbe, 0x1006}, &(0x7f00000000c0)=ANY=[@ANYRESDEC], &(0x7f00000002c0)="afa956f99fd5ca40a2a1515e0d4bba7d88a39d6919ef447e8984c7e0cd4407af0aed3a82dc305722365fc3188e138c41acd2c584ddd617254db80f19a6dae9d7585a00bb7a94c78069051dbbbb88ebde2a6e5b6b75df1a0ce8c65323f27c5b4c2f9a3177e57ddb7135da90f1784d0bf29366e0f2c970aea6115c47b75127e0ef73d614fc9e4a1c750cfaddf118b1f06ddfdf96531ed1ae7a89b3976c09fc52aff0f7effdf05e750548608ee8181e8a64ec66cec78f7b3fc33b37ef434288", &(0x7f0000003a80)=""/4102) listen(r4, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x4cb62, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000140)=0x200004) perf_event_open(&(0x7f0000001c80)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffff749, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xfffffffffffffd, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x1fc}) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) ioctl$BLKTRACESTART(r6, 0x1274, 0x0) ioctl$BLKTRACESTOP(r6, 0x1275, 0x0) 21:59:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000040)={0x18, 0x16, 0x111, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1e}]}, 0x18}], 0x1}, 0x0) 21:59:40 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:40 executing program 0: r0 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000280)=ANY=[]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="516836df458f74584daee0b16fa69fb408f702357dd03c0915367222e188b0da8f391b67f9a13d675d3fd4e8eb7830fcfb3b9e02dd3821646705e612704ab57b73731eb73a9de9972a391b2ed9"], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) mkdirat(r0, &(0x7f0000000000)='./file1\x00', 0x0) 21:59:40 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0xffffffff, 0x33}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x6}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 21:59:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000040)={0x18, 0x16, 0x111, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1e}]}, 0x18}], 0x1}, 0x0) 21:59:40 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:40 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x400024c, 0x0) 21:59:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) [ 880.311901][T19775] not chained 10000 origins [ 880.316470][T19775] CPU: 1 PID: 19775 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 880.325143][T19775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 880.335375][T19775] Call Trace: [ 880.338682][T19775] dump_stack+0x21c/0x280 [ 880.343039][T19775] kmsan_internal_chain_origin+0x6f/0x130 [ 880.348809][T19775] ? ip_do_fragment+0x3b50/0x3b50 [ 880.353873][T19775] ? kmsan_get_metadata+0x116/0x180 [ 880.360570][T19775] ? kmsan_set_origin_checked+0x95/0xf0 [ 880.366135][T19775] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 880.372292][T19775] ? _copy_from_user+0x201/0x310 [ 880.377256][T19775] ? kmsan_get_metadata+0x116/0x180 [ 880.382475][T19775] __msan_chain_origin+0x50/0x90 [ 880.387436][T19775] __get_compat_msghdr+0x6db/0x9d0 [ 880.392573][T19775] get_compat_msghdr+0x108/0x2b0 [ 880.397527][T19775] __sys_sendmmsg+0x755/0xf70 [ 880.402232][T19775] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 880.408134][T19775] ? __msan_poison_alloca+0xf0/0x120 [ 880.413439][T19775] ? kmsan_copy_to_user+0x81/0x90 [ 880.418476][T19775] ? _copy_to_user+0x1bf/0x260 [ 880.423264][T19775] ? put_old_timespec32+0x231/0x2d0 [ 880.428479][T19775] ? kmsan_get_metadata+0x116/0x180 [ 880.433696][T19775] ? kmsan_get_metadata+0x116/0x180 [ 880.438907][T19775] ? kmsan_get_metadata+0x116/0x180 [ 880.444119][T19775] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 880.449600][T19775] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 880.455160][T19775] __do_fast_syscall_32+0x2af/0x480 [ 880.460383][T19775] do_fast_syscall_32+0x6b/0xd0 [ 880.465342][T19775] do_SYSENTER_32+0x73/0x90 [ 880.469866][T19775] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 880.476311][T19775] RIP: 0023:0xf7f40549 [ 880.480380][T19775] Code: Bad RIP value. [ 880.484450][T19775] RSP: 002b:00000000f55190cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 880.492957][T19775] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020007fc0 [ 880.500934][T19775] RDX: 000000000800001d RSI: 0000000000000000 RDI: 0000000000000000 [ 880.509002][T19775] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 880.516981][T19775] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 880.524959][T19775] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 880.532951][T19775] Uninit was stored to memory at: [ 880.537992][T19775] kmsan_internal_chain_origin+0xad/0x130 [ 880.543723][T19775] __msan_chain_origin+0x50/0x90 [ 880.548673][T19775] __get_compat_msghdr+0x6db/0x9d0 [ 880.553802][T19775] get_compat_msghdr+0x108/0x2b0 [ 880.558747][T19775] __sys_sendmmsg+0x755/0xf70 [ 880.563442][T19775] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 880.568831][T19775] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 880.574386][T19775] __do_fast_syscall_32+0x2af/0x480 [ 880.579578][T19775] do_fast_syscall_32+0x6b/0xd0 [ 880.584677][T19775] do_SYSENTER_32+0x73/0x90 [ 880.589173][T19775] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 880.595478][T19775] [ 880.597791][T19775] Uninit was stored to memory at: [ 880.602805][T19775] kmsan_internal_chain_origin+0xad/0x130 [ 880.608513][T19775] __msan_chain_origin+0x50/0x90 [ 880.613527][T19775] __get_compat_msghdr+0x6db/0x9d0 [ 880.618625][T19775] get_compat_msghdr+0x108/0x2b0 [ 880.623552][T19775] __sys_sendmmsg+0x755/0xf70 [ 880.628218][T19775] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 880.633584][T19775] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 880.639118][T19775] __do_fast_syscall_32+0x2af/0x480 [ 880.644306][T19775] do_fast_syscall_32+0x6b/0xd0 [ 880.649143][T19775] do_SYSENTER_32+0x73/0x90 [ 880.653635][T19775] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 880.659940][T19775] [ 880.662256][T19775] Uninit was stored to memory at: [ 880.667287][T19775] kmsan_internal_chain_origin+0xad/0x130 [ 880.673091][T19775] __msan_chain_origin+0x50/0x90 [ 880.678020][T19775] __get_compat_msghdr+0x6db/0x9d0 [ 880.683119][T19775] get_compat_msghdr+0x108/0x2b0 [ 880.688042][T19775] __sys_sendmmsg+0x755/0xf70 [ 880.692709][T19775] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 880.698071][T19775] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 880.703634][T19775] __do_fast_syscall_32+0x2af/0x480 [ 880.708846][T19775] do_fast_syscall_32+0x6b/0xd0 [ 880.713688][T19775] do_SYSENTER_32+0x73/0x90 [ 880.718183][T19775] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 880.724488][T19775] [ 880.726799][T19775] Uninit was stored to memory at: [ 880.731815][T19775] kmsan_internal_chain_origin+0xad/0x130 [ 880.737524][T19775] __msan_chain_origin+0x50/0x90 [ 880.742537][T19775] __get_compat_msghdr+0x6db/0x9d0 [ 880.747636][T19775] get_compat_msghdr+0x108/0x2b0 [ 880.752561][T19775] __sys_sendmmsg+0x755/0xf70 [ 880.757228][T19775] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 880.762588][T19775] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 880.768121][T19775] __do_fast_syscall_32+0x2af/0x480 [ 880.773309][T19775] do_fast_syscall_32+0x6b/0xd0 [ 880.778164][T19775] do_SYSENTER_32+0x73/0x90 [ 880.782658][T19775] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 880.788962][T19775] [ 880.791277][T19775] Uninit was stored to memory at: [ 880.796322][T19775] kmsan_internal_chain_origin+0xad/0x130 [ 880.802116][T19775] __msan_chain_origin+0x50/0x90 [ 880.807043][T19775] __get_compat_msghdr+0x6db/0x9d0 [ 880.812144][T19775] get_compat_msghdr+0x108/0x2b0 [ 880.817068][T19775] __sys_sendmmsg+0x755/0xf70 [ 880.821735][T19775] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 880.827119][T19775] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 880.832657][T19775] __do_fast_syscall_32+0x2af/0x480 [ 880.837844][T19775] do_fast_syscall_32+0x6b/0xd0 [ 880.842685][T19775] do_SYSENTER_32+0x73/0x90 [ 880.847178][T19775] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 880.853485][T19775] [ 880.855885][T19775] Uninit was stored to memory at: [ 880.860900][T19775] kmsan_internal_chain_origin+0xad/0x130 [ 880.866609][T19775] __msan_chain_origin+0x50/0x90 [ 880.871535][T19775] __get_compat_msghdr+0x6db/0x9d0 [ 880.876637][T19775] get_compat_msghdr+0x108/0x2b0 [ 880.881564][T19775] __sys_sendmmsg+0x755/0xf70 [ 880.886232][T19775] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 880.891592][T19775] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 880.897129][T19775] __do_fast_syscall_32+0x2af/0x480 [ 880.903360][T19775] do_fast_syscall_32+0x6b/0xd0 [ 880.908203][T19775] do_SYSENTER_32+0x73/0x90 [ 880.912717][T19775] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 880.919039][T19775] [ 880.921363][T19775] Uninit was stored to memory at: [ 880.926390][T19775] kmsan_internal_chain_origin+0xad/0x130 [ 880.932106][T19775] __msan_chain_origin+0x50/0x90 [ 880.937055][T19775] __get_compat_msghdr+0x6db/0x9d0 [ 880.942175][T19775] get_compat_msghdr+0x108/0x2b0 [ 880.947222][T19775] __sys_sendmmsg+0x755/0xf70 [ 880.951893][T19775] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 880.957260][T19775] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 880.962796][T19775] __do_fast_syscall_32+0x2af/0x480 [ 880.968073][T19775] do_fast_syscall_32+0x6b/0xd0 [ 880.972915][T19775] do_SYSENTER_32+0x73/0x90 [ 880.977409][T19775] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 880.983714][T19775] [ 880.986028][T19775] Local variable ----msg_sys@__sys_sendmmsg created at: [ 880.992981][T19775] __sys_sendmmsg+0xbb/0xf70 [ 880.997559][T19775] __sys_sendmmsg+0xbb/0xf70 21:59:43 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000300)='./bus/file0\x00', 0x0, 0x0) 21:59:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000040)={0x18, 0x16, 0x111, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1e}]}, 0x18}], 0x1}, 0x0) 21:59:43 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:43 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001780)="a45d4e26c6fadcbd663ccd6c0aca006b802c18d131b5427b3d4515dee8f10570a5923f3f543435278f94c3f8f0d4c35488ecfb1bd630b2e1e0e4247bb44938f03d603b27e44942ddcd3f11f086e6bf39ab074b690284b6d6aff6cc1e736b32f7d781c315bad312c6e8062089abe9838cd011d5227aa050589d2e5f34e10165336747bc2156f8e2570a4a76d4af1ef57edb31f57834ba2486c9f253a1737d59d15a11571414ec61c17dc20d9974e58cf2925c7c6e56216d4e35e39a9977e27e21450596008761c86e21", 0xc9}], 0x1) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000600)=0xfffffffe, 0x4) sendto$inet(r0, &(0x7f0000000080)="c9", 0x1, 0x11, 0x0, 0x0) sendto$inet(r0, &(0x7f00000001c0)="af70a26c584244b3d28fd2024fb72cb2dfede5f041f32260336c9f446c4ded681c6059b7464a8edb4de1538ba7b7a17cfea90ee47eede196378c8c5075f003214c7bb4ee73919fd652b9b282cd8ad9ed3fd6c4d90f5d57566cba3bc790b025db40d4ccb79d1e42086f8f96fdc9f5725ab164954a99d685139af1f137b63044308af7c5967f32f1724e5b12982c3d3ee8b747cadfe6194efe1366bbc217be8da77d9b23266c419287b639e13c8ec8ecd511a613c7001a1cb370933cb623", 0xbd, 0x0, 0x0, 0x0) 21:59:43 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000300)='./bus/file0\x00', 0x0, 0x0) 21:59:43 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000040)={0x18, 0x16, 0x111, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1e}]}, 0x18}], 0x1}, 0x0) [ 882.379568][T19838] overlayfs: filesystem on './bus' not supported as upperdir 21:59:45 executing program 5: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:59:45 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) syz_open_procfs(0x0, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) 21:59:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000040)={0x18, 0x16, 0x111, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1e}]}, 0x18}], 0x1}, 0x0) 21:59:45 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 21:59:45 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}], 0x1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x140, &(0x7f0000000240)="f7f249b9740c0764ca04b400befbf2f3c921bf3c0f339e57f4f21016a5b60a00088024c30e478947d190ac0000009038396bb68e4053cd0c65727a81b1af4915e96c43607a144f6543b6faf143e648fcbde4967033f51be252a22ea40c9422247185569bdffc58cff1685babdf7d77ac6c0ceb6e4d48ec30cd70a1a381611750c5a0848886f1e31994b00400000060d441a0b9777c243bccd3ff8bfc59a323235d9e3bc4442f31a1046924fa8bc1374961b6f2256df197e2824843e18fa643f50ef92e06c29349336b401a17576e1c42793b572195edca29ea7be8db994ce41f2cf3fc8b0bdf76758bee68eb0dff3e8e7db9c1b5ca9f42c651601f4ffdb9c29afc7d4c827cd1b7da08adbb97423b75b676838f23dce9020329912cd8a841a45b8622544643744e550768e5b2126e6401447e7ac4499fd8b08ac22a4957769a99"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 21:59:45 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000040)={0x18, 0x16, 0x111, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1e}]}, 0x18}], 0x1}, 0x0) 21:59:45 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x80047213, &(0x7f00000001c0)) [ 883.478369][T19855] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 21:59:46 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640), 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000040)={0x18, 0x16, 0x111, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1e}]}, 0x18}], 0x1}, 0x0) 21:59:46 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="0a0775b0d5e383e5b3c066ff000000e2", 0x10) sendmmsg$alg(r1, &(0x7f0000002700)=[{0x8000000000000000, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)='%', 0x1}, {&(0x7f0000000140)="0272f8e661d82e2f7a1924", 0xb}], 0x2}], 0x7ffff000, 0x0) 21:59:46 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)="d8e0", 0xfa5f}], 0x1}}], 0x1, 0x0) [ 884.450186][T19873] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 21:59:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640), 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000040)={0x18, 0x16, 0x111, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1e}]}, 0x18}], 0x1}, 0x0) 21:59:47 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:47 executing program 5: [ 885.259464][T19889] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 21:59:48 executing program 0: 21:59:51 executing program 3: 21:59:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640), 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000040)={0x18, 0x16, 0x111, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1e}]}, 0x18}], 0x1}, 0x0) 21:59:51 executing program 1: 21:59:51 executing program 5: 21:59:51 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:51 executing program 0: [ 889.341318][T19915] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 21:59:51 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x1, 0x4}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x287b361ae6c523fa, 0x10, &(0x7f0000000000), 0x128}, 0x48) 21:59:51 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)='&', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="aa", 0x1}], 0x1}}], 0x2, 0x0) 21:59:51 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000040)={0x18, 0x16, 0x111, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1e}]}, 0x18}], 0x1}, 0x0) 21:59:51 executing program 3: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x30, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xfffffffc, @private1}}}, 0x108) [ 889.949798][T19924] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 21:59:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000040)={0x18, 0x16, 0x111, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1e}]}, 0x18}], 0x1}, 0x0) 21:59:52 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="ed2358ba7626547deb9d", 0xa}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="82af2bcd4e51c0546a556e3d67de97920403bb2766dab4ab9cf123852b0156038a0d54d2752c69130beef6f5f04986afffbd01941ff6854dc6b36313df2ecd3b1944bd8ea07cb2db395034eb70aea84c37d6c037c1423998e387cb9b6c108a64753638453412dc4aff26755c9407fd5a1c9635688ff748896eb4a209d10f5fbc344b0080cabbf6f8cf", 0x89}], 0x1}}], 0x2, 0x0) 21:59:53 executing program 1: r0 = memfd_create(&(0x7f0000000000)='[wlan1keyring', 0x5) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1312feab21c2b32b, 0x4d091, r0, 0x0) 21:59:53 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:53 executing program 5: r0 = socket(0x2, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000002b8, 0x0) 21:59:53 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) 21:59:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000040)={0x18, 0x16, 0x111, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1e}]}, 0x18}], 0x1}, 0x0) 21:59:53 executing program 3: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xec, 0xec, 0x180, 0x0, 0x0, 0x2d4, 0x2d4, 0x2d4, 0x2d4, 0x2d4, 0x4, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec, 0x0, {}, [@common=@unspec=@devgroup={{0x34, 'devgroup\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback}}}, {{@uncond, 0x0, 0x70, 0x94}, @REJECT={0x24, 'REJECT\x00'}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6_vti0\x00'}, 0x0, 0x130, 0x154, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "3f357f4b6a4b6681872e20b780e2514e8f5b4f6aa20e0c27b1bfcf6731282d9d95de2cefe823eb307cbaf488d5685306015171e52cf8597f31cc8ee19fdc63ec5721031fdb4a3645032bc18923c73d8eeb13d95100000000000000000000000083000000000000000000000000000000000000000000000000001300", 0x80}}]}, @REJECT={0x24, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3c4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf1}, 0x14) sendfile(r2, r1, 0x0, 0x4000000000edc0) [ 891.150209][T19954] x_tables: duplicate underflow at hook 2 [ 891.184392][T19953] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 21:59:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, 0x0, 0x0) [ 891.260694][T19960] x_tables: duplicate underflow at hook 2 21:59:53 executing program 0: r0 = socket(0xa, 0x802, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xec, 0xec, 0x180, 0x0, 0x0, 0x2d4, 0x2d4, 0x2d4, 0x2d4, 0x2d4, 0x4, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec, 0x0, {}, [@common=@unspec=@devgroup={{0x34, 'devgroup\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback}}}, {{@uncond, 0x0, 0x70, 0x94}, @REJECT={0x24, 'REJECT\x00'}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6_vti0\x00'}, 0x0, 0x130, 0x154, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "3f357f4b6a4b6681872e20b780e2514e8f5b4f6aa20e0c27b1bfcf6731282d9d95de2cefe823eb307cbaf488d5685306015171e52cf8597f31cc8ee19fdc63ec5721031fdb4a3645032bc18923c73d8eeb13d95100000000000000000000000083000000000000000000000000000000000000000000000000001300", 0x80}}]}, @REJECT={0x24, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3c4) socket$inet(0x2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf1}, 0x14) sendfile(r2, r1, 0x0, 0x4000000000edc0) 21:59:53 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140), 0x0, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:53 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f00000000c0)={[], 0x0, 0x9, 0x1}) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 21:59:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, 0x0, 0x0) [ 891.948956][T19970] x_tables: duplicate underflow at hook 2 [ 892.087574][T19974] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 892.306005][T19970] x_tables: duplicate underflow at hook 2 21:59:54 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1, 0x0, &(0x7f0000000280)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7e9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822d979328c5352021a2b8b55b49f44e6d4455e90757eaf79b430d125027a6eb3f3e9cd426e67ee5d27d543ca3e20338afe0a52d6f7ac5a5aff58"}, 0x40) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 21:59:56 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000='version=9p2000'}, {@access_client='access=client'}], [], 0x6b}}) 21:59:56 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140), 0x0, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:56 executing program 5: unshare(0x8020600) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 21:59:56 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0) clone(0x70024000, 0x0, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0400"], 0x2) mount$fuse(0x20000000, &(0x7f0000000580)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}], 0x20}, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x3002801, &(0x7f0000000380)={[{@nfs_export_off='nfs_export=off'}, {@metacopy_off='metacopy=off'}, {@nfs_export_off='nfs_export=off'}], [{@fowner_eq={'fowner'}}, {@smackfsdef={'smackfsdef', 0x3d, 'fowner'}}, {@subj_user={'subj_user', 0x3d, 'overlay\x00'}}]}) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000000c0)={0x7915, 0x5, 0x4}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000080)='.', 0x0, 0x5010, 0x0) 21:59:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, 0x0, 0x0) 21:59:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001a80)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0}}], 0x1, 0x0) [ 893.965810][T19996] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 21:59:56 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140), 0x0, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:56 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget(0x2, 0x1000, 0x78001a81, &(0x7f0000ffa000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) 21:59:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) [ 894.260828][T20005] IPVS: ftp: loaded support on port[0] = 21 21:59:56 executing program 5: unshare(0x8020600) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 894.792002][T20016] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 21:59:57 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r0, &(0x7f0000000040)=""/37, 0x25) getdents(r0, 0x0, 0x0) 21:59:57 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a90200000000", 0x1d, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) [ 895.631532][T20053] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 896.167458][T12486] tipc: TX() has been purged, node left! 21:59:58 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:59:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) 21:59:58 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xdf, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f00000000c0)={0x0, 0x0, 0x0}) 21:59:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r0, &(0x7f0000000040)=""/37, 0x25) getdents(r0, 0x0, 0x0) 21:59:58 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a90200000000", 0x1d, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:58 executing program 5: unshare(0x8020600) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 896.518832][T20068] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 21:59:59 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a90200000000", 0x1d, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 21:59:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) 21:59:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r0, &(0x7f0000000040)=""/37, 0x25) getdents(r0, 0x0, 0x0) [ 897.043329][T20077] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 21:59:59 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x3, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {{0x0, 0x883e, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}, 0x32) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 21:59:59 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x2040, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RLERRORu(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c00000007ffff0f00b1f82bc4d8ccb51c85bf8dd7"], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) 21:59:59 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d225000000", 0x2c, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) [ 897.660670][T20096] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 898.227926][T20101] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 898.276480][T20101] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:00:00 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000c40)=ANY=[@ANYBLOB="1802aa3b57ff88090000000000000000850000002cca317c00000095e9ffffff000000d21c052a70f04dedaa719df27f59a53d4ae82efff363a5c306d308000000f0003e51408dcdbf0000f6e06cfa2d95a0fcb196b7ac6119a2f9a3606d1c7b6179ef24dccea6950a989432355396377ea501000000690a00c91b3e66e44fb573ba2963e19ac3e74e306ba17a87590f6674ebd7ee6ee8fba7425371c2bdf496a74c97b6d6dcb5cb98eadc6f92a1301746269a8260cb7a800001da79b26c37121a426ac48ee8648c5d6da9a4f65a3fd982611a00b133ae0d05c7253f7dfd34334b4a9bf36d69c4c134010000008e3b118b167934fa7234eaffe588cac68ea5fdbfbc8b723578196d95c3982de0354f01477de93f3ba87772a00634545a475544f3c034f3cfa9d6ab82b3963f3f071d5767affaae589c11f05b3ba52f07135db7801cf21152095c151a2e493581637e9597b3953e0114e89a5bc7c03861c684d1504e5cac6af6c1f212a8cbf88437786d56fda75321aa5c3a3e92523433030000000000000000174f8ad5395aa7c74bf047fea1e5e09d51fb8b026d802c7c224a0ea37c99ffbfaf5db1b9773f75b96faf15fcda6e8ecbfbf34765424034c0ad9de7d8a169481508f280c32edaad2535faf648c8cccf14a4048274dd3fcb479ef84d49c553548699a3fc0ea7f569e36d9faaae0bebb9110a622bd57302000000b814e388a0392de7c866d24d388c8b11f881454bfdda56f5bf7b"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={0xffffffffffffffff, 0x1800000000000060, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x2000000000000277) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0xfffffffffffffed3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) 22:00:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 22:00:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)}, 0x0) 22:00:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x16, 0x0, 0x0) 22:00:00 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d225000000", 0x2c, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 22:00:01 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x81) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffe00}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000200)={'gretap0\x00', {0x2, 0x4e20, @rand_addr=0x64010100}}) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x6) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f00000001c0)={0x8, 'vxcan1\x00', {'ip6_vti0\x00'}, 0x8}) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x1000, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x623}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1, 0x3, 0x3, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) [ 898.833805][T20121] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 22:00:01 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d225000000", 0x2c, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 22:00:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)}, 0x0) [ 899.835864][T20136] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 22:00:02 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f495", 0x33, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 22:00:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)}, 0x0) 22:00:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000140)={@void, @val={0x3}, @mpls={[], @ipv4=@gre={{0x5, 0x6, 0x0, 0x0, 0x61, 0x8, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x86dd, [], "fbb30e5bcc3cbcd9b4"}}}}}, 0x100c) [ 900.759750][T20143] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 22:00:03 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f495", 0x33, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) [ 901.782655][T20152] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 901.790511][T20152] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 901.879447][T20160] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 902.218738][T20152] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 902.769809][T20152] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 902.956567][T20152] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 903.889001][T12486] tipc: TX() has been purged, node left! 22:00:09 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f495", 0x33, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 22:00:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x6, 0x6}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x7eb, 0x1}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f00000002c0)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x81, 0xc0, 0x1, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x7, 0x1, 0x3, 0xd6, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xef, 0x32, 0x1}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x4d, 0x3f, 0x0, 0x0, 0x6}, 0xbb, &(0x7f0000000340)={0x5, 0xf, 0xbb, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x5, 0x20, 0xa3c5}, @generic={0x8b, 0x10, 0x3, "31832c1746f3be824d1ad17fa812416f53a6fb083cb28cdeb9c9e4ead908cc54cd04c28abc22a16f37c3bbfe76d5545c769b8aa19fe0fbdff1e88560b78ef68e1d645cf597de8603ea64f6673bbd4ef759d1db794bda0745e7efe4b96b43c3e602e1669ba403ba5144ebce4f5df061c11c5ca9431c49ca95de905caedbe00f48d35db348c6f04a75"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x6, 0x81, 0xff54}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "92ea6cdd53762393cd90f247f0547547"}]}, 0x7, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x40f}}, {0xd2, &(0x7f0000000500)=@string={0xd2, 0x3, "573486a6f779b7dd8d387b2b058402c99ae4821b15d4e31a02b52c950f330309d20b1a60a011d0209522b459549ccf0e4272cde45e8061cc517725f1c17a39d53d51c5e0b24ccb1d27e7f3811146af9b80c4f91cf2b5cc49f85572347c193e5fe439ebda3dcef7bf37f51df04618a6c868e424674269b6d0a5a63c0d2a7f28937f2739747c4122a18ba55afb012fcf77debe424f687b6acaaf8c11b874bfe13ce07a57c9197b0601fa7f5a9c591242a4f7d9233e94fde08341c958c5272cfa0d4633760b335db824285d4c0bd527820a"}}, {0x4b, &(0x7f0000000600)=@string={0x4b, 0x3, "53118c8294072f09109cec034e914cba44e73b2a3c9c8589c21aeac7e49abd464a63d39b82fc053694cfda908e8910d20b2691da7fa7de0b8698235c908b561a1ee7a94ac02791ea63"}}]}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$setopts(0x4200, 0x0, 0x10000000000004, 0x0) 22:00:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{0x0}], 0x1}, 0x0) [ 907.170129][T20197] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 907.395346][T12486] device hsr_slave_0 left promiscuous mode [ 907.471254][T12486] device hsr_slave_1 left promiscuous mode [ 907.493424][T12486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 907.501323][T12486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 907.565056][T12486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 907.572899][T12486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 907.622660][T12486] device bridge_slave_1 left promiscuous mode [ 907.629418][T12486] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.723387][T12486] device bridge_slave_0 left promiscuous mode [ 907.730208][T12486] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.820041][T12486] device veth1_macvtap left promiscuous mode [ 907.826543][T12486] device veth0_macvtap left promiscuous mode [ 907.833288][T12486] device veth1_vlan left promiscuous mode [ 907.839149][T12486] device veth0_vlan left promiscuous mode [ 907.961166][T11888] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 908.439918][T11888] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 8 [ 908.450124][T11888] usb 2-1: config 1 interface 0 has no altsetting 0 [ 908.696849][T11888] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 908.706393][T11888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.715580][T11888] usb 2-1: Product: Ð… [ 908.719812][T11888] usb 2-1: Manufacturer: з [ 908.724609][T11888] usb 2-1: SerialNumber: ã°Š [ 908.826721][T20205] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 910.867530][T11888] usb 2-1: USB disconnect, device number 13 [ 911.991093][T11888] Bluetooth: hci0: command 0x0409 tx timeout [ 913.756315][T12486] bond1 (unregistering): Released all slaves [ 913.897754][T12486] team0 (unregistering): Port device team_slave_1 removed [ 913.918417][T12486] team0 (unregistering): Port device team_slave_0 removed [ 913.936464][T12486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 913.958535][T12486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 914.047592][T12486] bond0 (unregistering): Released all slaves [ 914.070593][T11888] Bluetooth: hci0: command 0x041b tx timeout [ 914.154371][T20215] IPVS: ftp: loaded support on port[0] = 21 [ 915.185442][T20215] chnl_net:caif_netlink_parms(): no params data found [ 915.491553][T20215] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.498838][T20215] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.508958][T20215] device bridge_slave_0 entered promiscuous mode [ 915.534677][T20215] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.543153][T20215] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.553020][T20215] device bridge_slave_1 entered promiscuous mode [ 915.666958][T20215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 915.701620][T20215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 915.797833][T20215] team0: Port device team_slave_0 added [ 915.836583][T20215] team0: Port device team_slave_1 added [ 915.919016][T20215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 915.926274][T20215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 915.952939][T20215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 915.979237][T20215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 915.986964][T20215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 916.013166][T20215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 916.088067][T20215] device hsr_slave_0 entered promiscuous mode [ 916.096358][T20215] device hsr_slave_1 entered promiscuous mode [ 916.161407][ T9099] Bluetooth: hci0: command 0x040f tx timeout [ 916.432939][T20215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 916.458680][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 916.467312][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 916.487637][T20215] 8021q: adding VLAN 0 to HW filter on device team0 [ 916.509883][ T8724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 916.519282][ T8724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 916.528844][ T8724] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.536175][ T8724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 916.558114][ T8724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 916.567535][ T8724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 916.577215][ T8724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 916.586769][ T8724] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.594274][ T8724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 916.615633][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 916.640973][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 916.678319][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 916.688949][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 916.699565][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 916.709824][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 916.720479][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 916.730030][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 916.740914][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 916.761793][ T8724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 916.771591][ T8724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 916.789012][T20215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 916.836370][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 916.844504][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 916.868998][T20215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 916.989027][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 917.001987][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 917.047021][ T8724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 917.056345][ T8724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 917.075461][T20215] device veth0_vlan entered promiscuous mode [ 917.085490][ T8724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 917.095449][ T8724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 917.126884][T20215] device veth1_vlan entered promiscuous mode [ 917.160792][ T8724] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 917.170572][ T8724] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 917.207701][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 917.217538][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 917.234784][T20215] device veth0_macvtap entered promiscuous mode [ 917.255392][T20215] device veth1_macvtap entered promiscuous mode [ 917.295628][T20215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 917.306254][T20215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.316758][T20215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 917.327512][T20215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.337622][T20215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 917.348244][T20215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.358412][T20215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 917.369080][T20215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.379237][T20215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 917.389914][T20215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.404164][T20215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 917.414251][ T8724] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 917.424043][ T8724] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 917.433731][ T8724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 917.445044][ T8724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 917.467478][T20215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 917.479777][T20215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.489967][T20215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 917.500606][T20215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.511611][T20215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 917.522300][T20215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.532736][T20215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 917.543508][T20215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.553782][T20215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 917.564424][T20215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.577098][T20215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 917.590566][ T9099] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 917.600756][ T9099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 22:00:20 executing program 0: 22:00:20 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6001000800101100fe800000000000000000000000000000ff02000000000000000000000000000100000e22"], 0x0) 22:00:20 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x600) sendfile(r0, r1, 0x0, 0x1c542) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:00:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{0x0}], 0x1}, 0x0) 22:00:20 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc676", 0x37, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 22:00:20 executing program 1: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x2008d}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x600) sendfile(r0, r1, 0x0, 0x1c575) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000200)={0x3c, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x7b}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/softnet_stat\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ip6gre0\x00'}) [ 918.161717][ T29] audit: type=1804 audit(1599170420.440:51): pid=20459 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir065100667/syzkaller.FQVw3W/578/file0" dev="sda1" ino=16289 res=1 22:00:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{0x0}], 0x1}, 0x0) 22:00:20 executing program 5: [ 918.208396][T20458] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 918.234037][T11888] Bluetooth: hci0: command 0x0419 tx timeout 22:00:20 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc676", 0x37, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) [ 918.492900][ T29] audit: type=1804 audit(1599170420.770:52): pid=20467 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir057725981/syzkaller.BneUSA/309/file0" dev="sda1" ino=16279 res=1 [ 918.518176][ T29] audit: type=1804 audit(1599170420.770:53): pid=20464 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir057725981/syzkaller.BneUSA/309/file0" dev="sda1" ino=16279 res=1 22:00:20 executing program 0: 22:00:21 executing program 5: [ 918.917667][ T29] audit: type=1804 audit(1599170421.200:54): pid=20473 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir065100667/syzkaller.FQVw3W/578/file0" dev="sda1" ino=16289 res=1 22:00:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000040)={0x18, 0x0, 0x111, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1e}]}, 0x18}], 0x1}, 0x0) [ 919.076419][ T29] audit: type=1804 audit(1599170421.340:55): pid=20461 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir057725981/syzkaller.BneUSA/309/file1/file0" dev="loop1" ino=6 res=1 22:00:21 executing program 3: [ 919.223833][T20477] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 22:00:21 executing program 5: 22:00:21 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x12, 0x2, 0x8, 0x1}, 0x40) r1 = socket$inet6(0xa, 0x80002, 0x0) connect(r1, &(0x7f00000000c0)=@ipx={0x4, 0x0, 0x0, "0107091000"}, 0x80) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000140)="10", &(0x7f00000001c0)=@tcp6=r1}, 0x20) r2 = socket$inet6(0xa, 0x80002, 0x0) connect(r2, &(0x7f00000000c0)=@ipx={0x4, 0x0, 0x0, "8b2319b5b042"}, 0x80) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000280), &(0x7f00000002c0)=@tcp6=r2}, 0x20) [ 919.478636][T20484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20484 comm=syz-executor.4 22:00:21 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc676", 0x37, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 22:00:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000040)={0x18, 0x0, 0x111, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1e}]}, 0x18}], 0x1}, 0x0) [ 920.054697][T20493] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 920.061979][T20494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20494 comm=syz-executor.4 22:00:22 executing program 1: 22:00:22 executing program 5: 22:00:22 executing program 3: 22:00:22 executing program 0: 22:00:22 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253", 0x39, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 22:00:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000040)={0x18, 0x0, 0x111, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1e}]}, 0x18}], 0x1}, 0x0) 22:00:22 executing program 5: 22:00:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 920.608054][T20503] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 22:00:23 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 22:00:23 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f00000013c0)=ANY=[@ANYBLOB="18020000e2ffffff000000000000000085000000360000009500001800000000922ae83713ab9662ce3ae356538dda120000010000801b10fb54a82b5cd28d82de5ac54e32ad558c4601f4208d49631979a42d6884ec11ce14138b8fe903ddc702e404e19a5183d769676520e98a263345e44d5187b3c4d86abeb12303ff139fe0d0000000d60400003d395311eb8800000000008aff66d6b3181ffc1d62a3954c11c27839dc007c4d296e7359ea79a75dd098bbc4fa13aee48ca9e8969faebf3183fe803abbf5024b42dc265b36fc9dae00a0d0956d252bd8b6464ef3c6a7352ce743905fd6def8b8d3ca6e3abdb2dfc61696e340bb8e2a098c8d3efc3adc57196b40def3858ef569147fa4108328392d322ab4df10a2f69a6bdf7257d327070e42410f5746ef59aea2544047d6d8ad442e00000000000017c729300d231a9f04c2918b68dfa8a0b36754ed5290a8cd84000076d6b80630d6ccde49b29a6cb5f4fc0001000000004b713c488c1cf04dcd7238aeada5acf3209a08439f1ff01ffbe5b57922b6f6c6310386597760525b595fe1f697bc114cd1778e97a3f0295f946974cdb458be2a34cf9264c36b558fbf17a76f3547497aba5086e30ec8a57c8143d152518754a07e60b9afaf4985672a1c7b3c200021de95ae7b68136b0046d535dd39c0dc5469869e9b342b953f81447e6b9e522d62b1e6ffcaab304f134306335fc7a44195254b45a6c1312a13696c7202df5f764713504f94c5e0fbc70bcb975f97ed7bbf0508000000605ae54e9072a22d91744a332e2fa806e63c5cd98a8569a6d6bcfb0000002cf6c75ac63f04af77c9fa1e9773b2b7130eae67e0ebe380d0f648713e68153579c02d71c58d147b00821ab9a6475b31e1ebf1369afe98682efbf3983f283f2faf8f40e39927aca97b0374814d63c93c912dd08586b9c5330e3beb0a38856929e7d8b1b06c9bd5d7e5490f3b8502b694ea9483bd4bd287c83ff998a7469426ec8bdb2a00000000071cbc8106e787cd1a0000000000351aaedb6f7db803a4e0f19aa407d27fff926525fc0c1407ad4f432218621afa5a88f7beadc3c157a7ac9949b10b3bba15e1fc7c785758242a90f1840ccaa862a943d2ad2fd91f2e8e9081f4febfe3be642f4156e09bf8505b1e952852e55387055006ff85c013a78129a88807bc4dc49c6266fa5214ea4b09d643374c33e1e5c98c43a99e85e0ae3bef22c8f45a4e0700"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r0, 0xffffffffffffffff, 0x25, 0x2}, 0x10) close(r3) [ 920.814630][T20507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20507 comm=syz-executor.4 22:00:23 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253", 0x39, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 22:00:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000040)={0x18, 0x16, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1e}]}, 0x18}], 0x1}, 0x0) [ 921.449668][T20522] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 22:00:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) 22:00:24 executing program 3: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x18}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x34) 22:00:24 executing program 5: semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000000)=""/178) 22:00:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000040)={0x18, 0x16, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1e}]}, 0x18}], 0x1}, 0x0) 22:00:24 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253", 0x39, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 22:00:24 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 22:00:24 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a1, &(0x7f0000000680)='&@[\x00') [ 922.127600][T20540] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 22:00:24 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="3d6ee2e04b91ab10143d9bbe86dd", 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 22:00:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000040)={0x18, 0x16, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1e}]}, 0x18}], 0x1}, 0x0) 22:00:24 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x40047459, 0x0) 22:00:24 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 22:00:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/221, 0xdd}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/155, 0x9b}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)=""/45, 0x2d}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) shutdown(r1, 0x0) [ 923.007148][T20573] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 22:00:26 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, 0x0, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 22:00:26 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="03"], 0x38}}, 0x0) 22:00:26 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f008001bffffff00004000632f77fbac141431e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 22:00:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000040)={0x10, 0x16, 0x111}, 0x10}], 0x1}, 0x0) 22:00:26 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 22:00:26 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000630277fbac141417ee", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) [ 924.286771][T20597] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 924.324322][T20596] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 22:00:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000040)={0x10, 0x16, 0x111}, 0x10}], 0x1}, 0x0) 22:00:26 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="020a000007000000b6f1eaabdeff844105001abb"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 22:00:26 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 22:00:27 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}}}]}}]}, 0x58}}, 0x0) 22:00:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000040)={0x10, 0x16, 0x111}, 0x10}], 0x1}, 0x0) 22:00:27 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a543) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 925.133390][T20613] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 925.419099][T20621] sch_tbf: burst 0 is lower than device team0 mtu (1514) ! 22:00:29 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000340)) 22:00:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000040)={0x18, 0x16, 0x111, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x18}], 0x1}, 0x0) 22:00:29 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="38000000000000002900000004"], 0x38}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 22:00:29 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, 0x0) 22:00:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) 22:00:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000340)=""/60, 0x3c}], 0x1, 0x800000, 0x0) 22:00:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000040)={0x18, 0x16, 0x111, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x18}], 0x1}, 0x0) 22:00:29 executing program 0: socket$packet(0x11, 0x3, 0x300) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) socket(0x1a, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000180)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040), &(0x7f0000000140)=0x14) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, 0x0) fchdir(r0) ioctl$SIOCNRDECOBS(0xffffffffffffffff, 0x89e2) unshare(0x40000000) 22:00:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x70, 0x90}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:getty_var_run_t:s0\x00'}}}, {{@ip={@loopback, @private, 0x0, 0x0, 'bridge_slave_1\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 22:00:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/104, 0x68}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/32, 0x20}, {0x0}], 0x2) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r5, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/209, 0xd1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) recvfrom$inet(r6, 0x0, 0xffffff8b, 0x0, 0x0, 0x800e00515) shutdown(r5, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r7, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r6, 0x0) shutdown(r4, 0x0) 22:00:29 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, 0x0) 22:00:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000040)={0x18, 0x16, 0x111, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x18}], 0x1}, 0x0) [ 927.967986][T20658] IPVS: ftp: loaded support on port[0] = 21 22:00:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/104, 0x68}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/223, 0xdf}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) recvfrom$inet(r3, 0x0, 0xffffff8b, 0x0, 0x0, 0x800e00515) shutdown(r2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r4, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r3, 0x0) 22:00:31 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000580)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="ae", 0x1}], 0x1, &(0x7f0000000440)=ANY=[], 0x110}, 0x0) 22:00:31 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3}, 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000100), 0x98) 22:00:31 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, 0x0) 22:00:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/104, 0x68}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/223, 0xdf}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) recvfrom$inet(r3, 0x0, 0xffffff8b, 0x0, 0x0, 0x800e00515) shutdown(r2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r4, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r3, 0x0) 22:00:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/104, 0x68}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/32, 0x20}, {0x0}], 0x2) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r5, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/209, 0xd1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) recvfrom$inet(r6, 0x0, 0xffffff8b, 0x0, 0x0, 0x800e00515) shutdown(r5, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r7, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r6, 0x0) shutdown(r4, 0x0) 22:00:31 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, 0x0}, 0x0) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20105) [ 929.700443][T20658] IPVS: ftp: loaded support on port[0] = 21 [ 930.995079][T12486] tipc: TX() has been purged, node left! 22:00:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/104, 0x68}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/209, 0xd1}], 0x1) recvfrom$inet(r3, 0x0, 0xffffff8b, 0x0, 0x0, 0x800e00515) shutdown(r2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r4, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r3, 0x0) 22:00:33 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)) 22:00:33 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3}, 0x1c) shutdown(r0, 0x0) 22:00:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/104, 0x68}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/32, 0x20}, {0x0}], 0x2) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) shutdown(r3, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r5, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r4, 0x0) 22:00:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000880)=""/176, 0xb0}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/228, 0xe4}, {0x0}], 0x2) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xa2, 0x0, 0x0, 0x800e00716) shutdown(r3, 0x0) shutdown(r4, 0x0) 22:00:33 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000580)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="ae", 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="100000008400000008"], 0x110}, 0x0) [ 931.494202][T20775] EXT4-fs (loop2): Can't read superblock on 2nd try 22:00:33 executing program 3: 22:00:34 executing program 4: 22:00:34 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)) [ 932.179302][T20796] EXT4-fs (loop2): Can't read superblock on 2nd try 22:00:34 executing program 3: 22:00:34 executing program 5: 22:00:34 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000020000000600010000000800040005000600010000ff"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000280)="baf3741bc1bde4f533feb3033853513af25ad9faebd6f04e72b473bb9749", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)) 22:00:35 executing program 0: 22:00:35 executing program 4: 22:00:35 executing program 3: [ 932.968335][T20814] EXT4-fs (loop2): Can't read superblock on 2nd try 22:00:35 executing program 3: 22:00:35 executing program 5: 22:00:36 executing program 1: 22:00:36 executing program 4: 22:00:36 executing program 0: 22:00:36 executing program 2: 22:00:36 executing program 3: 22:00:36 executing program 5: 22:00:36 executing program 4: 22:00:36 executing program 3: 22:00:36 executing program 0: 22:00:36 executing program 2: 22:00:36 executing program 5: [ 934.593788][T12486] tipc: TX() has been purged, node left! 22:00:37 executing program 3: 22:00:37 executing program 1: 22:00:37 executing program 0: 22:00:37 executing program 4: 22:00:37 executing program 5: 22:00:37 executing program 2: 22:00:37 executing program 3: 22:00:38 executing program 0: 22:00:38 executing program 4: 22:00:38 executing program 5: 22:00:38 executing program 3: 22:00:38 executing program 2: [ 935.990222][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! 22:00:38 executing program 0: 22:00:39 executing program 1: 22:00:39 executing program 3: 22:00:39 executing program 5: 22:00:39 executing program 4: 22:00:39 executing program 2: 22:00:39 executing program 0: 22:00:39 executing program 3: 22:00:39 executing program 5: 22:00:39 executing program 2: 22:00:39 executing program 0: 22:00:39 executing program 4: 22:00:39 executing program 5: 22:00:40 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00'}, 0x45c) ioctl$UI_ABS_SETUP(r0, 0x5501, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) 22:00:40 executing program 2: 22:00:40 executing program 3: 22:00:40 executing program 0: 22:00:40 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0205647, &(0x7f0000000280)={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "df5074d0"}, 0x0, 0x0, @planes=0x0}) 22:00:40 executing program 5: syz_open_dev$video4linux(&(0x7f0000000740)='/dev/v4l-subdev#\x00', 0x0, 0x4200) 22:00:40 executing program 3: r0 = socket(0x25, 0x5, 0x0) connect$can_j1939(r0, 0x0, 0x0) 22:00:40 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) read$dsp(r0, &(0x7f0000000200)=""/15, 0xf) read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x2020) 22:00:40 executing program 5: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 22:00:40 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2, 0x0) write$dsp(r0, &(0x7f0000000280)="807671aebb34f82f369c4822657613fa4d6133b5cb3b3a4c6614760b300de33f22542981438b6d3a3bb98bccd268f458df38bd00000000000000000022fb68a58a13a036ac9b74f83405000000000000004297f23161e2a790bdc9de61d2334d80eb5b06654bdff3ed104e06e628e9fc50d47c1a54924fc5e28b80557d7ba98fe3c185c21d7b7285e576cef5d900"/153, 0xfffffee8) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 22:00:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)={0x18, r1, 0x703, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 22:00:41 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) read$dsp(r0, 0x0, 0x0) [ 939.426954][T20896] input: syz0 as /devices/virtual/input/input33 [ 939.459866][T20901] input: syz0 as /devices/virtual/input/input34 22:00:42 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) write$rfkill(r0, 0x0, 0x0) 22:00:42 executing program 3: syz_open_procfs(0x0, &(0x7f0000000280)='numa_maps\x00') 22:00:42 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x4600, 0x0) 22:00:42 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x0, 0x0) read$dsp(r0, &(0x7f0000000000)=""/77, 0x4d) pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 22:00:42 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000140)={0xf, 0x8}, 0x10) 22:00:42 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x531002]}) 22:00:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00'}, 0x45c) ioctl$UI_ABS_SETUP(r0, 0x5501, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556d, 0x0) 22:00:42 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x2) read$FUSE(r0, 0x0, 0x0) write$FUSE_ATTR(r0, &(0x7f00000000c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01, 0xee00}}}, 0x78) 22:00:42 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, 0x0) [ 940.502327][T20926] input: syz0 as /devices/virtual/input/input35 22:00:42 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x0) 22:00:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00'}, 0x45c) ioctl$UI_ABS_SETUP(r0, 0x5501, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x40045565, 0x0) 22:00:43 executing program 5: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x2000000000000005, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 941.071665][T20941] input: syz0 as /devices/virtual/input/input37 [ 941.139634][T20947] input: syz0 as /devices/virtual/input/input38 22:00:43 executing program 1: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000002440)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80044df9, &(0x7f0000002480)) 22:00:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000014000380100003800c09"], 0x40}}, 0x0) 22:00:43 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x1, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040), 0x2) 22:00:43 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0) 22:00:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0) 22:00:43 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000140)) [ 941.511454][T20960] misc userio: No port type given on /dev/userio 22:00:44 executing program 4: r0 = syz_init_net_socket$ax25(0x6, 0x5, 0x0) setsockopt$ax25_int(r0, 0x103, 0x0, 0x0, 0x300) 22:00:44 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001200)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0bc5310, &(0x7f0000001240)={{0x8}}) 22:00:44 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000013000b"], 0x38}}, 0x0) 22:00:44 executing program 5: r0 = gettid() perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, r0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001780)=ANY=[@ANYBLOB="18020000e2ffffff000000000000000085000000360000009500001800000000922ae83713ab9662ce3ae356538dda120000010000801b10fb54a82b5cd28d82de5ac54e32ad558c4601f4208d49631979a42d6884ec11ce14138b8fe903ddc702e404e19a5183d769676520e98a263345e44d5187b3c4d86abeb12303ff139fe0d0000000d604000000000000008aff66d6b3181ffc1d62a3954c11c27839dc007c4d296e7359ea79a71dd098bbc4fa13aee48ca9e8969faebf3183fe803abbf5024b42dc265b36fc9dae00a0d0956d252bd8b6464ef3c6a7352ce743905fd6def8b8d3ca6e3abdb2dfc61696e340bb8e2a098c8d3efc3adc57196b40def3858e322ab4df10a2f69a6bdf7257d327070e42410f57466f59aea2544047d6d8ac442e00000000000017c729300d231a9f04c2918b68dfa820b36754ed5290a858cf1f49750abe73b1c0d1215dcd84000076d6b80630d6ccde49b29a6cb5f4fc0001000000004b713c488c1cf04dcd7238aeada5acf3209a08439f1ff01ffbe5b584c45102db65156b7922b6f6c6310386597760525b595fe1f697bc114cd1778e97a3f0295f946974cdb458be2a34cf9264c36b558fbf17a76f3547497aba5086e30ec8a57c8143d15251875432e74b54afaf4985002a1c7b3c200021de95ae7b68136b0046d535dd39c0ff5469869e9b342b953f81447e6b9e522d62b1e6ffcaab304f134306335fc7a44195254b45a6c1312a13696c7202df5f764713504f94c5e0fbc71a9570f4a0febd2484b8a944340bcb975f97ed7bbf0508000000605ae54e9072a22d91744a332e2fa806e63c5cd98a8569a6d6bcfb0000002cc2f6c75ac63f04af77c9fa1e9773b2b7130eae67e0ebe380d0f648713e68153579c02d71c58d147b00821ab9a6475b31e1ebf1369afe98682efbf3983f283f2faf8f40e39927aca97b0374814d63c93c912dd0c690f36b15bda849049f7abf62ece6a581455ec5435675d40249cb79c54b0a3885690000008000000000d7e5490f3b85ecb594ea9483bd4bd287c83ff9cffef66726ec8bdb2a00000000071cbc8106e787cd1a0000000000351aaedb6f7db803a4e0f194670f1e7fff926525fc0c1407ad4f432218621afa5a88f7beadc3c157a7ac9949b1003bba15e1fc7c785758242a90f1840ccaa862a943d2ad2fd91f2e81f4febfe3be642f4156e09bf8505b1e952852e55387055006ff85c0882e6f59561d924d4dc49c6266fa5214ea4b09d643374c33e1e5c98c43a99e85e0ae3bef22c8f460839668499f88dcef191368c28ff6741528471a7d42"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000340)=[@ip_tos_u8={{0x11}}], 0x18}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r1, r2, 0x25}, 0x10) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000013c0)='cpuacct.usage_all\x00', 0x7a05, 0x1700) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x40}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r4, &(0x7f0000000100)="051bce5f84ac51699ceeeaf7fcf690d8ccaf605aecfdee333f80806e709eb016922625e4611abe1dddb8ebf75174b7f24e429ca09abadfe3500693b0218f3ee3f53f7795c62c8f557d095a15abea049d61d29338", 0x0, 0x4}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 22:00:44 executing program 0: openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0), 0x10000000000000cb, 0x0, 0xffffffffffffff69, 0x20000001}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x200091}) socketpair(0x1, 0x3, 0x0, &(0x7f00000004c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xccc67, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000008, 0x0, @perf_config_ext={0x200, 0x1ad}, 0x2000, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0xe) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 942.077171][T20970] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 22:00:44 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x400000000) [ 943.125344][ T29] audit: type=1800 audit(1599170445.401:56): pid=20983 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.4" name="memory.events" dev="sda1" ino=16369 res=0 22:00:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet6_group_source_req(r2, 0x29, 0x4b, &(0x7f0000000300)={0x120, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x20000408) 22:00:45 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) socketpair(0x18, 0x0, 0x0, &(0x7f0000000240)) 22:00:45 executing program 2: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000800014e24049c44e702951c72f35e5afd000034f35a6c3713773d3bcf63d7e099f05a000042ee"]) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x3f00, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000638877fbac141429e0", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) 22:00:45 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="24fe73e5d2c935b019bc"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x5}, 0x0, 0x0, 0x0, 0x5, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009}, 0x25a, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280)}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0f362902"], 0xda00) bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x2, 0x7fff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(r3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) close(r2) 22:00:45 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x77540947ad9a168d}) 22:00:45 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee01) 22:00:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0xab}, 0x5800, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x54, r1, 0x401, 0x0, 0x0, {0x25}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x90}, {0xc}}]}, 0x54}}, 0x0) 22:00:46 executing program 4: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x0) 22:00:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) move_pages(0x0, 0x4, &(0x7f0000000000)=[&(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000040), &(0x7f0000000000), 0x0) 22:00:46 executing program 5: unshare(0x20000) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x81402, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) acct(&(0x7f0000000040)='./file0\x00') socket(0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') 22:00:47 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000040)='x', 0x1}], 0x1}}], 0x1, 0x400c07c) 22:00:47 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1071fe, 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x8080fffffffe) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) [ 945.095662][T21031] Process accounting resumed [ 945.399758][T21035] Process accounting resumed [ 945.572608][ T29] audit: type=1800 audit(1599170447.852:57): pid=21043 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15889 res=0 [ 945.744612][ T29] audit: type=1804 audit(1599170447.892:58): pid=21043 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir211616640/syzkaller.faQGfI/590/file1/bus" dev="sda1" ino=15889 res=1 [ 946.276590][ T29] audit: type=1804 audit(1599170448.552:59): pid=21045 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir211616640/syzkaller.faQGfI/590/file1/bus" dev="sda1" ino=15889 res=1 [ 946.478445][ T29] audit: type=1804 audit(1599170448.662:60): pid=21051 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir211616640/syzkaller.faQGfI/590/file1/bus" dev="sda1" ino=15889 res=1 [ 946.643338][ T29] audit: type=1800 audit(1599170448.922:61): pid=21008 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.0" name="memory.events" dev="sda1" ino=16366 res=0 22:00:49 executing program 1: 22:00:49 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x8]}, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) 22:00:49 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @local, @empty, @remote, @remote}}}}, 0x0) 22:00:49 executing program 4: r0 = syz_open_dev$video(&(0x7f0000001040)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000180)={0x2, {0x0, 0x0, 0x0, 0x8001}}) 22:00:49 executing program 0: 22:00:49 executing program 4: 22:00:50 executing program 3: 22:00:50 executing program 2: sync() r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') renameat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000100)='./file0/file0\x00') lremovexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=ANY=[]) connect$unix(0xffffffffffffffff, 0x0, 0x0) 22:00:50 executing program 0: sync() rename(0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x501840, 0x0) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) 22:00:50 executing program 4: sync() mknod$loop(&(0x7f00000000c0)='./file1\x00', 0x0, 0x1) rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file1\x00') truncate(&(0x7f0000000040)='./file1/../file0\x00', 0x0) 22:00:50 executing program 5: 22:00:50 executing program 1: 22:00:50 executing program 5: 22:00:50 executing program 0: sync() rename(0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x501840, 0x0) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) 22:00:50 executing program 4: 22:00:50 executing program 2: 22:00:50 executing program 3: 22:00:50 executing program 4: 22:00:50 executing program 2: 22:00:51 executing program 5: 22:00:51 executing program 3: 22:00:51 executing program 0: 22:00:51 executing program 4: 22:00:51 executing program 1: 22:00:51 executing program 2: 22:00:51 executing program 5: 22:00:51 executing program 0: 22:00:51 executing program 3: 22:00:51 executing program 4: 22:00:51 executing program 2: 22:00:52 executing program 0: 22:00:52 executing program 5: 22:00:52 executing program 4: 22:00:52 executing program 3: 22:00:52 executing program 2: 22:00:52 executing program 1: 22:00:52 executing program 0: 22:00:52 executing program 5: 22:00:52 executing program 3: 22:00:52 executing program 4: 22:00:52 executing program 2: 22:00:53 executing program 4: 22:00:53 executing program 5: 22:00:53 executing program 2: 22:00:53 executing program 0: 22:00:53 executing program 3: 22:00:53 executing program 2: 22:00:53 executing program 1: 22:00:53 executing program 4: 22:00:53 executing program 3: 22:00:53 executing program 5: 22:00:53 executing program 0: 22:00:53 executing program 2: 22:00:54 executing program 5: 22:00:54 executing program 0: 22:00:54 executing program 4: 22:00:54 executing program 2: 22:00:54 executing program 3: 22:00:54 executing program 5: 22:00:54 executing program 1: 22:00:54 executing program 0: 22:00:54 executing program 2: 22:00:54 executing program 4: 22:00:54 executing program 3: 22:00:54 executing program 5: 22:00:55 executing program 0: 22:00:55 executing program 4: 22:00:55 executing program 5: 22:00:55 executing program 2: 22:00:55 executing program 3: 22:00:55 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)=""/198, &(0x7f0000000100)=0xc6) 22:00:56 executing program 1: 22:00:56 executing program 3: 22:00:56 executing program 0: 22:00:56 executing program 2: 22:00:56 executing program 4: 22:00:56 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev, 'team_slave_0\x00'}}, 0x1e) r1 = dup2(r0, r0) sendmsg$SOCK_DESTROY(r1, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={0x0, 0xff5e}}, 0x0) 22:00:56 executing program 4: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8921, &(0x7f0000000500)={'sit0\x00', 0x0}) 22:00:56 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40a85321, &(0x7f0000000080)) 22:00:56 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f000000ad40)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) 22:00:56 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000700)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000100)) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x8010500d, &(0x7f0000000000)) 22:00:56 executing program 5: r0 = socket(0x23, 0x5, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0, 0xf0ff7f}}, 0x0) 22:00:56 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="d8000000183597a251acfcf2b6d6008109e00f80ecdb4cb9040a0265ef0b007c05e87c55a1bc0009009b0006000b0000000500050007008178a8001600140006400200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1f9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e0ffdcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1}, 0x0) [ 954.976746][T21193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13592 sclass=netlink_route_socket pid=21193 comm=syz-executor.0 22:00:57 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0xffffffffffffffc3) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r0, 0x301, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 22:00:57 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) 22:00:57 executing program 2: r0 = socket(0x18, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0x4008b100, 0x0) 22:00:57 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x10, &(0x7f00000000c0), 0x8) 22:00:57 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000000) 22:00:57 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) [ 955.261291][T21203] sctp: [Deprecated]: syz-executor.5 (pid 21203) Use of struct sctp_assoc_value in delayed_ack socket option. [ 955.261291][T21203] Use struct sctp_sack_info instead 22:00:57 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x1e, &(0x7f0000000200)={0x0, 0x8601}, 0x10) 22:00:57 executing program 3: clock_getres(0x77b3e3be36fa2ce5, 0x0) 22:00:57 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockname(r0, &(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000500)=0x80) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000640)) 22:00:57 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 955.804984][T21213] ===================================================== [ 955.811998][T21213] BUG: KMSAN: kernel-infoleak in kmsan_copy_to_user+0x81/0x90 [ 955.819455][T21213] CPU: 1 PID: 21213 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 955.828118][T21213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 955.838160][T21213] Call Trace: [ 955.841459][T21213] dump_stack+0x21c/0x280 [ 955.845808][T21213] kmsan_report+0xf7/0x1e0 [ 955.850228][T21213] kmsan_internal_check_memory+0x238/0x3d0 [ 955.856030][T21213] ? kmsan_get_metadata+0x116/0x180 [ 955.861229][T21213] ? kmsan_get_metadata+0x116/0x180 [ 955.866429][T21213] kmsan_copy_to_user+0x81/0x90 [ 955.871276][T21213] _copy_to_user+0x18e/0x260 [ 955.875952][T21213] move_addr_to_user+0x3de/0x670 [ 955.880897][T21213] __sys_getsockname+0x407/0x5e0 [ 955.886235][T21213] ? put_old_timespec32+0x231/0x2d0 [ 955.891429][T21213] ? kmsan_get_metadata+0x116/0x180 [ 955.896620][T21213] ? kmsan_get_metadata+0x116/0x180 [ 955.901813][T21213] ? kmsan_get_metadata+0x116/0x180 [ 955.907009][T21213] __se_sys_getsockname+0x91/0xb0 [ 955.912034][T21213] __ia32_sys_getsockname+0x4a/0x70 [ 955.917230][T21213] __do_fast_syscall_32+0x2af/0x480 [ 955.922467][T21213] do_fast_syscall_32+0x6b/0xd0 [ 955.927346][T21213] do_SYSENTER_32+0x73/0x90 [ 955.931862][T21213] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 955.938185][T21213] RIP: 0023:0xf7fd7549 [ 955.942242][T21213] Code: Bad RIP value. [ 955.946311][T21213] RSP: 002b:00000000f55d10cc EFLAGS: 00000296 ORIG_RAX: 000000000000016f [ 955.954724][T21213] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000480 [ 955.962710][T21213] RDX: 0000000020000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 955.970675][T21213] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 955.978644][T21213] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 955.986606][T21213] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 955.994574][T21213] [ 955.996892][T21213] Local variable ----address@__sys_getsockname created at: [ 956.004085][T21213] __sys_getsockname+0x91/0x5e0 [ 956.008930][T21213] __sys_getsockname+0x91/0x5e0 [ 956.013781][T21213] [ 956.016102][T21213] Bytes 2-3 of 24 are uninitialized [ 956.021285][T21213] Memory access of size 24 starts at ffff888057f4fd50 [ 956.028033][T21213] Data copied to user address 0000000020000480 [ 956.034171][T21213] ===================================================== [ 956.041099][T21213] Disabling lock debugging due to kernel taint [ 956.047256][T21213] Kernel panic - not syncing: panic_on_warn set ... [ 956.053851][T21213] CPU: 1 PID: 21213 Comm: syz-executor.4 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 956.063897][T21213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 956.073941][T21213] Call Trace: [ 956.077262][T21213] dump_stack+0x21c/0x280 [ 956.081686][T21213] panic+0x4d7/0xef7 [ 956.085616][T21213] ? add_taint+0x17c/0x210 [ 956.090063][T21213] kmsan_report+0x1df/0x1e0 [ 956.094571][T21213] kmsan_internal_check_memory+0x238/0x3d0 [ 956.100396][T21213] ? kmsan_get_metadata+0x116/0x180 [ 956.105597][T21213] ? kmsan_get_metadata+0x116/0x180 [ 956.110800][T21213] kmsan_copy_to_user+0x81/0x90 [ 956.115647][T21213] _copy_to_user+0x18e/0x260 [ 956.120250][T21213] move_addr_to_user+0x3de/0x670 [ 956.125196][T21213] __sys_getsockname+0x407/0x5e0 [ 956.130175][T21213] ? put_old_timespec32+0x231/0x2d0 [ 956.135365][T21213] ? kmsan_get_metadata+0x116/0x180 [ 956.140556][T21213] ? kmsan_get_metadata+0x116/0x180 [ 956.145749][T21213] ? kmsan_get_metadata+0x116/0x180 [ 956.150946][T21213] __se_sys_getsockname+0x91/0xb0 [ 956.155974][T21213] __ia32_sys_getsockname+0x4a/0x70 [ 956.161172][T21213] __do_fast_syscall_32+0x2af/0x480 [ 956.166365][T21213] do_fast_syscall_32+0x6b/0xd0 [ 956.171208][T21213] do_SYSENTER_32+0x73/0x90 [ 956.175707][T21213] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 956.182019][T21213] RIP: 0023:0xf7fd7549 [ 956.186087][T21213] Code: Bad RIP value. [ 956.190174][T21213] RSP: 002b:00000000f55d10cc EFLAGS: 00000296 ORIG_RAX: 000000000000016f [ 956.198576][T21213] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000480 [ 956.206535][T21213] RDX: 0000000020000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 956.214492][T21213] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 956.222465][T21213] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 956.230507][T21213] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 956.240403][T21213] Kernel Offset: disabled [ 956.245013][T21213] Rebooting in 86400 seconds..