XT_MGR(r7, 0x40046207, 0x0) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(r8, r7) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="09c973cee1276e6ac6272c575d86d5e9eacd6a648d7cfcd360ff07c0aded524d828f9a60236f9b953a80e15616bcbf055ea0e07a4a8fe8cc641047", 0x3b, 0x0, &(0x7f0000000140)={0x2, 0x4, @rand_addr=0x1bdb}, 0x10) sendto$inet(r5, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="024f00013799532c9b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000001c0)=0x12) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x9, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b38b) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000000)={r9, 0x3}, 0x8) [ 1342.808073][T28053] binder: 28010:28053 ioctl c018620c 20000100 returned -1 [ 1342.902949][T28119] binder: 28098:28119 ioctl c018620c 20000100 returned -1 02:44:35 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) read$FUSE(r3, 0x0, 0x0) 02:44:35 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) 02:44:35 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4006, 0x0, &(0x7f0000000440)) [ 1343.115765][T28342] binder: 28319:28342 ioctl c018620c 20000100 returned -1 02:44:36 executing program 5: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x29, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x53}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000085}, 0x4080) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x800, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x541b) [ 1343.351184][T28484] binder: 28444:28484 ioctl c018620c 20000100 returned -1 02:44:36 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000a1c0000000000000000000000000000000000000005000000"], 0x8758) 02:44:36 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000000080)=""/191) 02:44:36 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4007, 0x0, &(0x7f0000000440)) [ 1343.651675][T28775] binder: 28762:28775 ioctl c018620c 20000100 returned -1 [ 1343.675405][T28775] binder: 28762:28775 ioctl 8040450a 20000080 returned -22 02:44:36 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x30100, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r4, 0x2}, 0x10) 02:44:36 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x9, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b38b) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r5, 0x1000, 0x8}, 0xc) fcntl$setstatus(r0, 0x4, 0x0) 02:44:36 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) r7 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='syz1\x00'}, 0x10) r9 = dup2(r8, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r9, 0xc018620c, &(0x7f0000000100)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1407, 0x20, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r9}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x20004041) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) [ 1343.944809][T28963] bridge0: port 1(bridge_slave_0) entered learning state [ 1344.001846][T28963] bridge0: port 1(bridge_slave_0) entered learning state 02:44:36 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4008, 0x0, &(0x7f0000000440)) [ 1344.126748][T29110] binder: 29072:29110 ioctl c018620c 20000100 returned -1 02:44:36 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000200000000000000000000000000000000000000005000000"], 0x8758) [ 1344.176133][T29110] binder: 29072:29110 ioctl c018620c 20000100 returned -1 02:44:37 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000080)={0x9, 0x1, 0x4, 0x20000, 0x3, {}, {0x4, 0x8, 0x20, 0x7f, 0x7f, 0x8, "d070f81e"}, 0x41c98327, 0x2, @userptr=0x80000000, 0x2, 0x0, r4}) nanosleep(&(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000300)=0x2) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) 02:44:37 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000780)="9cfb7f5efda1a55c5874e1c26145bd9ff9cc10c6828be37c7222daedde36ef52f12e6876d12d1b4a07f06eaeecd3dee829296e44a2f38c0061ef24ed03656fac48cccbbc5b536aa7e4a05cd6bf4c637f92d77db7c88e8a3d6516e9317d69b03b0a046b0000000000000000eb83333f98b68a9b7373a95c96ab8a732faa00000000000001ffe714ee9afc10213ecc900000000000000000f884c3c4c3f96949ab5d6b2ca43a4a30c49ad3872d867353f38dcf0d7df6b1627a7d5e6b2fafc8f86e73b7f7e370517df5b7aa4d8e705a15eb0f2fd86fa2ae73ec96432de8ab67cb23519e20ae98c2f884ba24c0b779ddfec6f9480c57605117ac8aebc812f852d050752c3a8f772e70e5000000000000000000000000000000adaf699cfa465d5843a82b1c56ada02cbd409a7f296db9fd388f2e3a871744750004ae31403c77a20161b631302ea24116e939a9e4bc9f7250012414917b10354a89cb8850e503800c889c6f1e0d59065740a5b23c21a756b17dca910f8bdc3a784b9bdf74cc5cb882434d17aa8b14c3df0a407e06480025202b65c1c97ecd407c83", 0x199, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r1, r3}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={'tgr128-generic\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}}) keyctl$get_keyring_id(0x0, r3, 0xd649) [ 1344.503781][T29436] binder: 29400:29436 ioctl c018620c 20000100 returned -1 02:44:37 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x5d00, 0x0, &(0x7f0000000440)) 02:44:37 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x4001, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) 02:44:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000a200000000000000000000000000000000000000005000000"], 0x8758) 02:44:37 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000000)=""/9) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x541b) 02:44:37 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4100, 0x0) connect$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x6784fdb8e15c747c, {0x42, 0x0, 0x2}}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r2, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000100)) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000100)=[0x1, 0x2], 0x2) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)="99", 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000540)=ANY=[@ANYBLOB="0200fbdb2318aa38dfc100001960b82acc16719e6ac05081d0628b4c615463a4e34b96a548f688ae19775a391b4925410d1cbe38bb9c38a3d3e729655ba5586536a17ef1c3bc4e9411be0741b5bb5b73a4cfb46067e0c237d54c8fcad29d8e3455a6a6507b2c8fd998bcccf2b17efc171f4bd3d4c1615a9ae9681064e8bdc3fae0e0447885bd08ff086336d9ef2491ce3bc27cfbc83b1311a296aef68df8759b9784fb15bbdc24659fce9608c003f31ef11613fbe5d210168a109191f4bd57a73218b759a4ec31329ea1cb6d2a62087e4c9debd7aa112a2c30cd759fa57b0a0c0400000020407d84f4dc8f69fe3bd55fa852974893d55b72b06c2d0cba47fb284dc2d5d8c00c476d233d2d048ba80a5b117327f43a205f6b8f89b78ef6ef20cde0aef420e1f6c3e4a32a77e6af10bfff4231c077cdc22f5d7b3ebb83173d2b4cdb164ecfcb53ca7017bf88d6021538e22b16f12cca8dfb746d082fb02ae07eb53b857c15d32bebac60f2aff579e3748cc0ac4b525054a2ca07e4507688db466096eccea77fcdc8f5570d9dba2330d09e10df5eba322b6cd197f67625f85c5e6951545a57cabd66eabd7955243a0c7b5a4dc58f817020d5f2738468cd0279cd2544dc07fb84c7206296ee3aada8501ada09ab7a6f15a38a4da6dc20d73f1084e9f319f7f1227c45bb511f33b1e9374293da8ae5b75252fa2e7018586b5be2ab0aae2d5310d952c03ed3bdf6cc50c95970a6fd89d222", @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES64=r4, @ANYRES64, @ANYRES64=r4, @ANYRESOCT=r3, @ANYRES32=r4, @ANYRES32, @ANYRESOCT=r2], &(0x7f0000000140)=0xa) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x9, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b38b) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x2, 0x80, 0x207, 0x6, 0x4, 0x0, 0xffff, 0x1f, r6}, 0x20) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) 02:44:37 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x6000, 0x0, &(0x7f0000000440)) [ 1345.091542][T29777] binder: 29773:29777 ioctl c018620c 20000100 returned -1 02:44:37 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000540)={&(0x7f00000002c0)="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", &(0x7f00000003c0)=""/68, &(0x7f0000000440)="d86d12f3257efc95d2f9f11f751fdbe9c1725e93c7f450665133d15924fd2d73fa759a672802076358b9974b3d9a95dfa9b39adc7c979b4bc72d51fc9745db70ff6a76d08620bd1fbe59755fdc8dda4c214d9c1a67e93c1e", &(0x7f00000004c0)="52ce030d4d1b6a00771c60303dff76591b3a66b2f27e6783abaecaec5d10ffff4f40ad0bf3fd35b2aaf347b9dbea160e2925c56d4b52cd93ed389fd32dcb97ab89578fb9ed702e00a4bb448b7b0e8a615bd064af115c7ae426bdefac720d3d68c511b114410ac6a457f0", 0x9, r0, 0x4}, 0x38) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="9b0000000700000035000000000000000000080000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r5}, 0xc) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r7, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7f}, @IPVS_DEST_ATTR_WEIGHT={0x8}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x1c1240, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r3, 0x0, 0x5, &(0x7f0000000080)='self\x00', r5}, 0x30) wait4(r8, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) [ 1345.136287][T29777] binder: 29773:29777 ioctl 80404508 20000000 returned -22 [ 1345.248625][T29851] binder: 29816:29851 ioctl c018620c 20000100 returned -1 02:44:38 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r7, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x9, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b38b) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000080)={r9, @in6={{0xa, 0x4e21, 0x3, @mcast2, 0x1000}}, 0x4, 0x1, 0x6, 0x7, 0x40, 0x1f, 0x1}, &(0x7f0000000000)=0x9c) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000140)=r10, 0x4) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 02:44:38 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0xff00, 0x0, &(0x7f0000000440)) [ 1345.547484][T30185] binder: 30184:30185 ioctl c018620c 20000100 returned -1 02:44:38 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000300000000000000000000000000000000000000005000000"], 0x8758) 02:44:38 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2440, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x9, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b38b) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={r10, 0x1e, 0x4, [0x3, 0x3ff, 0x7, 0xfff9]}, 0x10) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x64}}, 0x0) bind$xdp(r1, &(0x7f0000000080)={0x2c, 0xc, r4, 0xa, r1}, 0x10) 02:44:38 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) r7 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) write$rfkill(r0, &(0x7f00000000c0)={0x2e, 0x8, 0x0, 0x0, 0x1}, 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) r9 = dup2(r8, r7) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r9, 0xc018620c, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) [ 1345.851555][T30365] binder: 30327:30365 ioctl c018620c 20000100 returned -1 02:44:38 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x2, &(0x7f0000000440)) [ 1345.899883][T30365] binder: 30327:30365 ioctl c018620c 20000100 returned -1 02:44:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000000)={r3}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) [ 1346.062410][T30565] binder: 30536:30565 ioctl c018620c 20000100 returned -1 02:44:38 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000009}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, 0x1, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1404}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2004}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0xb8]}, @CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2261}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x829}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7ff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x20}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4044000}, 0x4) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x541b) 02:44:38 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) umount2(&(0x7f0000000080)='./file0\x00', 0xd) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x804) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) read$FUSE(r3, 0x0, 0x0) 02:44:39 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000400000000000000000000000000000000000000005000000"], 0x8758) 02:44:39 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) ioctl$KDSKBLED(r4, 0x4b65, 0x70df) syncfs(r1) [ 1346.379505][T30835] binder: 30749:30835 ioctl c018620c 20000100 returned -1 02:44:39 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x3, &(0x7f0000000440)) [ 1346.441273][T30835] binder: 30749:30835 ioctl c018620c 20000100 returned -1 [ 1346.546194][T30963] bridge0: port 1(bridge_slave_0) entered learning state 02:44:39 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) getpeername$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800900010069706970000000002c000280060011000000000008000100", @ANYRES32=r8, @ANYBLOB="05000900000000000500040000000000060010000000000008000a00", @ANYRES32=r6, @ANYBLOB="67d10cd33dd2cc2eab25e67e1e"], 0x64}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x54c}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x14}, 0x40085) r9 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x20b00, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)="5bc08e055183ffb753c675fbb971aeea9dc1ed1d4ef14808ef9daf704085782f58730c6dec379e0b0aeb0fefcb97e69197d37f8a230ce794496202e79e8ecf861ad1f5485531c7c417aa2f4a0333b8dca4bbec245dc1c355f65135ebeef794e698490d1262df036b767d5a4e9076f913fc384fd33a18be27f7768443418bf825268e23fb184c3fe1cea00d7c47b4e1a96cccdd1fc8ca706ce759b84eace45a2666cceb9971b1ab6bdb017e9894a5c4dd27d0b8c2bfa3889d7a1018a565441741b2d447ba5dc1", 0xc6, r9}, 0x68) 02:44:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f00000000c0)={{0x48, 0x40}, {0xfb, 0xff}, 0x9, 0x5}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000000)={'virt_wifi0\x00', @ifru_names='ip6_vti0\x00'}}) 02:44:39 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f0000000100)={0x1, 0x2, 0x2, 0x1ff, &(0x7f0000000080)=[{}, {}]}) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:44:39 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x4, &(0x7f0000000440)) [ 1346.804328][T31259] bridge0: port 1(bridge_slave_0) entered learning state [ 1346.931342][T31292] binder: 31277:31292 ioctl c018620c 20000100 returned -1 [ 1346.952017][T31303] binder: 31275:31303 ioctl c018620c 20000100 returned -1 [ 1346.982828][T31292] binder: 31277:31292 ioctl 40505330 200000c0 returned -22 02:44:39 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x408000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) 02:44:39 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000440000000000000000000000000000000000000005000000"], 0x8758) 02:44:40 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:44:40 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r8, 0xc018620c, &(0x7f0000000100)) r9 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 02:44:40 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc4, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x98, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50458a8f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x727ff9b7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59dad641}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x58f9f5e4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2606eb42}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e7e0719}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b7febe9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a2c1bdb}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f2be965}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7138c486}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e3c5177}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r4, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0xfffeffff, @link='syz0\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x80) 02:44:40 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x5, &(0x7f0000000440)) [ 1347.489704][T31702] binder: 31700:31702 ioctl c018620c 20000100 returned -1 [ 1347.514853][T31709] binder: 31703:31709 ioctl c018620c 20000100 returned -1 [ 1347.577736][T31709] binder: 31703:31709 ioctl c018620c 20000100 returned -1 [ 1347.604696][T31709] binder: 31703:31709 ioctl c018620c 20000100 returned -1 02:44:40 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="8500000007000000350000000000000085000000080000009500000000000000534717d851e82efc73a5be0b82741fae5c3bf2e830a8a67a2887cdef83119550984e7a44472e1ef7c86c42678ac07ffa62660d3cba0c766b508133a01756c85e4021560b205d9b5b75748195a62b63c844190faf107a53fc7566cd34b494df551fb6a6f380af934c60e00cb6044b95f4d002b60e730315f022575b767edd81e050845b434429e1606e3e96b22411256e5b055f1fd7e28aa3d0ed0e49a411339dbcf9ae8b3274ca5cd5e93e9ebe1865b848792201d2dda1f58816"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xc0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x4, 0x5}, 0x0, 0x0, &(0x7f0000000380)={0x0, 0xf, 0xeb6a, 0x401}, &(0x7f00000003c0)=0x3dd8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=0x6}}, 0x10) syz_mount_image$btrfs(&(0x7f0000000540)='btrfs\x00', &(0x7f0000000580)='./file0\x00', 0x40, 0x2, &(0x7f0000000640)=[{&(0x7f00000005c0)="2c0eca2e06efe7df935a1184f588a0ca2e34b942485e89f43483f54274c2aa5575fe34093e0e60068a838c02649a2ca58b", 0x31, 0x8}, {&(0x7f0000000600), 0x0, 0x3}], 0x2040000, &(0x7f0000000680)={[{@max_inline={'max_inline', 0x3d, [0x37, 0x6d, 0x74]}}, {@notreelog='notreelog'}, {@treelog='treelog'}], [{@subj_type={'subj_type', 0x3d, '&&GPL-system}nodev'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r2}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r1}, 0xc) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x541b) 02:44:40 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x72b00, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000), 0x4) 02:44:40 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x10c502, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x18000) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 02:44:40 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x6, &(0x7f0000000440)) 02:44:40 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000005440000000000000000000000000000000000000005000000"], 0x8758) 02:44:40 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x30000, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4, 0x48a201) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x9, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b38b) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={r6, 0xfe01, 0x6, 0xd9, 0xf32e, 0x55b4}, &(0x7f0000000200)=0x14) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000100)=""/18, 0x2000, 0x1000, 0x7fffffff, 0x1}, 0x20) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, 0x3}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r8, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000080)=0x8) 02:44:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x4, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r3 = dup(r2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01003100", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000006c0)={0x0, 0xfffffeff, 0xae, 0x2, 0x22, 0x81, 0x800, 0x1ff, {r4, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x6, 0x0, 0xfffff066, 0x7, 0x2}}, &(0x7f0000000780)=0xb0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0302"], 0x2) close(0xffffffffffffffff) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000040)={0xfff, 0x8, [0x81, 0xff53, 0x3ff, 0x80, 0xfff0], 0x6}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x800, 0x0, 0x0, 0x9, 0x0, 0x8, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='P\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000f1ff00000a000100626173691c0002800002800c0000000000050000000000080001000104000000"], 0x50}}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr="44ea59c5ec7f957f886d7014a1ca0d61"}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x54}}, 0x4000000) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r3, 0x4038564f, &(0x7f0000000000)={{0x1, @addr=0x8}, 0x8, 0xe3, 0xff}) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") getsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000b67000), &(0x7f0000000140)=0xffffffffffffff45) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) 02:44:40 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x1a1100, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) [ 1348.155309][T32367] bridge0: port 1(bridge_slave_0) entered learning state 02:44:40 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x410201, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 02:44:41 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x7, &(0x7f0000000440)) 02:44:41 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, &(0x7f0000000000)={0xffff, 0x8, 0xffffff81, 0x106}) 02:44:41 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r4, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f00000000c0), 0x4) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x101000, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000180)=0x121001, 0x4) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f0000000080)={0xffffffff, &(0x7f0000000000)="8c5c25bb6838393c901553411a"}) 02:44:41 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8800, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="0210010000000000000078c1d370c14da8d6c976c0876d639a70c128d9ce6b132255df02b2", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x9, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b38b) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0xffff, 0x5, 0x0, 0x401, 0x11, "deebe01bb55f9765"}) r6 = socket(0x1, 0x1, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_ENCAP_FLAGS={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x64}}, 0x0) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000100)={r9, 0x1, 0x6, @link_local}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r5, 0x1}, 0x8) [ 1348.529573][T32568] IPVS: ftp: loaded support on port[0] = 21 [ 1348.697837][ T349] QAT: Invalid ioctl 02:44:41 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000480000000000000000000000000000000000000005000000"], 0x8758) [ 1348.785753][ T399] binder: 363:399 ioctl c018620c 20000100 returned -1 02:44:41 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x8, &(0x7f0000000440)) 02:44:41 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000080)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x22440, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000005, 0x4000012, r1, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 02:44:41 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x3, 0x0, 0x0, 0xffffffffffffffff}) write$binfmt_aout(r1, &(0x7f0000000080)={{0xcc, 0xfb, 0x6, 0xe6, 0x18b, 0x7f, 0x1ed, 0x2}, "6f25bd4dca471667539ffae86ee8d6b7f64a0eb3532628ee5814353ff80726", [[], []]}, 0x23f) 02:44:41 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:44:42 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) r1 = getpid() ptrace(0x10, r1) ptrace$getsig(0x2, r1, 0xffffffffff600043, &(0x7f0000000300)) prlimit64(r1, 0x6, 0x0, &(0x7f0000000000)) 02:44:42 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 02:44:42 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x300, &(0x7f0000000440)) 02:44:42 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000a540000000000000000000000000000000000000005000000"], 0x8758) [ 1349.511837][T31872] tipc: TX() has been purged, node left! 02:44:42 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000080)={0x5, 0x20303159, 0x8a, 0x8, 0x2, @discrete={0x9, 0xc00000}}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f0000000000)) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 02:44:42 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) 02:44:42 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r5}}, 0x48) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r8, 0xc018620c, &(0x7f0000000100)) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000300)=0xe8) sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000ff7fdf25200000920010ffffffffff00ffffffdf0800030000000000", @ANYRES32=r9, @ANYBLOB="08000100000000000c00990061040000000000000800010003000000"], 0x50}, 0x1, 0x0, 0x0, 0x4805}, 0x1) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000080)={0x9, 0x108, 0xfa00, {r5, 0xfb, "d85fd8", "89e158dd9de1b70ee0db403a5997bd6453497728ff183ed5c52deda95ff0f706eb8f68757da27dcfea50a967204501aac98ba6dc9bac3ae29b4728fbe602482c33a80671249dfebc640efb0930f14bc0392f5fb81f7e24a4d2aa7cea9a6da7bf2014e5250323e701c2945a95c2a4888ff705a680db6d2d91cd0f23b206d25f3abcf4722a3e312ffeafc8fcf94f6748a94cb53616d256a46b624c9dfe8b6f7bd35d0b7102a38b8aa3926d6ee02e118dbc9cfd40fb58ead61a5b22634b215ba5adb2d2d2ffac7142dc62d7ac453e13764fe466e6c3aed10acc8de09ded26f8dde58939300db4e823a66f3e09f5dd1ca86b4b50d78b45481eac3790c99c4e02120a"}}, 0x110) 02:44:42 executing program 5: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x541b) [ 1349.831718][ T1380] binder: 1332:1380 ioctl c018620c 20000100 returned -1 [ 1349.849949][ T1376] binder: 1321:1376 ioctl c034564b 20000080 returned -22 [ 1349.868863][ T1380] binder: 1332:1380 ioctl 5201 0 returned -22 02:44:42 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x500, &(0x7f0000000440)) [ 1349.977355][ T1447] binder: 1409:1447 ioctl c018620c 20000100 returned -1 [ 1350.025611][ T1607] binder: 1542:1607 ioctl c018620c 20000100 returned -1 [ 1350.071853][ T1447] binder: 1409:1447 ioctl c018620c 20000100 returned -1 02:44:42 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(0x0, r2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f00000001c0)="07e23d9ac16fb7a47e4f36d577eed1305ce6c3372a6c4e6ab5475444ea8f3b60f0559bd807e787b3f0d76a6709dfb2584aa15450079a02", 0x37}, {&(0x7f0000000200)}, {&(0x7f0000000300)="d962ff2b94f9cf0ebf12361fb6d4172448a0d3c6707e6e2b53433c359a231e611bb4a417e96fd2942f97cd84dc", 0x2d}, {&(0x7f0000000340)="351de01fb281252a8b9e42ae", 0xc}], 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="1c000000000000000100000002000000fcd05834a681fed604123c9d7f85d1d856b3047ef3a7b1082bdabf2ff249d44ebbb333656582c3e268690c08c45d5ed3c6493c57b369d8096d312d5d72b44b022a663ca3575a6475c058056e133d35ec", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0xd0, 0x80}, 0x8000004) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0xa0800, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r6 = socket$kcm(0x10, 0x7, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r8 = dup3(r7, r6, 0x80000) ioctl$TCSETAF(r8, 0x5408, &(0x7f0000000100)={0x915, 0x3, 0xa58, 0x0, 0xc, "be8b2037e4eea26c"}) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'ip6gretap0\x00', 0x2000}) 02:44:43 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x404880, 0x0) mq_notify(r3, &(0x7f00000001c0)={0x0, 0x2b, 0x0, @thr={&(0x7f0000000300)="32e03504c877737db69de5a649a890d8f9436097663d8bc7343f0d245b49917fd3190dc8d9ecebb4826fde55200d5d4c0b6208b9730eacd465ca127dd330b9cb7f6a52c2d2fb3521069682447305a49393d1b08432a91a666de2561d18492d0049f0fd5520d522f6977967e0a406c2fb807793212a1f6556631d9239f01521e4ce15543371457e992107b6b4f58f177a96d812ee4dc15ca19b4b92738adf6939b216328639f4227064ab3b455bf54fd0db1d326cc84a0a347d42a80fc7497c865125e0c75d680ae82408b2", &(0x7f0000000180)="dc8f694ea53dbdc40c10bdcb10f34ad81d8ebaea7829304247fb64610fa0f8d07c91de7897"}}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f00000000c0)=0x8000, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000000)=0x8, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r7 = fcntl$getown(r6, 0x9) ptrace$getenv(0x4201, r7, 0x62b7, &(0x7f0000000080)) 02:44:43 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80120000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x24000800) [ 1350.308021][ T1810] bridge0: port 1(bridge_slave_0) entered learning state [ 1350.410151][ T1810] bridge0: port 1(bridge_slave_0) entered learning state [ 1350.433274][ T1911] binder: 1831:1911 ioctl c018620c 20000100 returned -1 02:44:43 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000002780000000000000000000000000000000000000005000000"], 0x8758) 02:44:43 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20000, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$TIOCEXCL(r3, 0x540c) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:44:43 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x600, &(0x7f0000000440)) 02:44:43 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1002) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) fchdir(r0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$USBDEVFS_CONNECTINFO(r5, 0x40085511, &(0x7f0000000140)) r8 = dup2(r7, r6) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r8, 0xc018620c, &(0x7f0000000100)) getsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=0x30) 02:44:43 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0x62f1) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) 02:44:43 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x80, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) waitid$P_PIDFD(0x3, r3, &(0x7f00000001c0), 0x80000000, &(0x7f0000000100)) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x21b) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)=0x546) [ 1350.910123][ T2379] binder: 2349:2379 ioctl c018620c 20000100 returned -1 [ 1350.963036][ T2449] bridge0: port 1(bridge_slave_0) entered learning state 02:44:43 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x2d6e03, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1, 0x2) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000080)="ee92fb45620fcaa92fe9fe24a5dec36c4d23e152691ca160cf0adb67d3ebbde8bc68303cf68294dcc4081ecfcacd8b4589ca3b0a6246a12ae0ae604ed97f8d61368983673df609695bda32bfa72b3b133fc4ed6efaacbf86ead04f824edca04cc039b8f3b1ac6da1601957ff", 0x6c) [ 1351.034954][ T2491] binder: 2402:2491 ioctl c018620c 20000100 returned -1 02:44:43 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x700, &(0x7f0000000440)) [ 1351.113652][ T2491] binder: 2402:2491 ioctl 40086602 200000c0 returned -22 02:44:43 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0206c144963caae8bb5c06000000db3e23caeffed736913a455f3e457787e4f2250da01d37236e62a25cf738102e29bbe5b02f424bf9706f1ec7fb8db49ee10c22340fbf8624725dcffafce07fb79916b6b5fc8e8081f640a82b7692cf76c510ef2e9d0dda938efca9792161fd2bc602e703"], 0x15, 0x6) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r2, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000240)=0x4) flock(r1, 0xc) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000140)=0x7ff) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000080)) 02:44:44 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x200000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, r1, 0x0, 0x70bd24, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x1c, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfff}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1f}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xac06}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x20}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x2400a084}, 0x44) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) 02:44:44 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x0, 0x9, [0x9, 0xcc, 0x1000, 0x4, 0xffff, 0x9, 0x8485, 0x0, 0x1]}, &(0x7f0000000080)=0x1a) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in6={{0xa, 0x4e24, 0x3, @mcast2, 0x6}}, 0x200, 0x3, 0x9, 0x1, 0x87, 0x7, 0x20}, 0x9c) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x541b) 02:44:44 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000002840000000000000000000000000000000000000005000000"], 0x8758) 02:44:44 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000080)={0x20, {{0x2, 0x4e21, @multicast2}}, 0x1, 0x7, [{{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e22, @empty}}, {{0x2, 0x4e20, @local}}, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x43}}}]}, 0x410) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:44:44 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0xff00, &(0x7f0000000440)) [ 1351.683390][ T3225] binder: 3153:3225 ioctl c018620c 20000100 returned -1 02:44:44 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000000)={0x9, 0x2ee}) 02:44:44 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000080)={0x9, 0x4, 0x4, 0x0, 0x0, [{{r2}, 0x80000001}, {{r3}, 0x2}, {{r0}, 0x9}, {{r0}, 0x55d48a1f}]}) [ 1351.787788][ T3287] binder: 3275:3287 ioctl c018620c 20000100 returned -1 02:44:44 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x1000000, &(0x7f0000000440)) 02:44:44 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x10000, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r5) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000100)) ioctl$SOUND_MIXER_READ_DEVMASK(r7, 0x80044dfe, &(0x7f0000000140)) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x4000000, 0x8, {0x0, 0x7530}, {0x3, 0x8, 0x49, 0xff, 0x24, 0x20, "1edbfd0c"}, 0xfff, 0x2, @fd=r4, 0xf1f, 0x0, r0}) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) [ 1351.949785][ T3573] binder: 3422:3573 ioctl c018620c 20000100 returned -1 [ 1351.980212][ T3620] bridge0: port 1(bridge_slave_0) entered learning state [ 1351.989165][ T3573] binder: 3422:3573 ioctl 4b4d 20000000 returned -22 02:44:44 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0xffffffffffffffc2) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, &(0x7f0000000000)=0x6) ioctl$VFIO_SET_IOMMU(r3, 0x3b66, 0x5) [ 1352.251374][ T3836] binder: 3722:3836 ioctl c018620c 20000100 returned -1 02:44:45 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) sendto$rose(r3, &(0x7f0000000080)="48be1da0d1d30f9d91b2730e216b0868b7b3f851825ce91d5d533bfaed18dce725ab7fe76ef25da4be72c0e7087a1b913ec91c334fec4134ef7929476f3097d1eed388ffb4702acb6b51e8389b314cf4c6c34752a7ff71e359b5d11fff25f781e532a1cf3abd2fa6a61027eede6f409b85a42026754575a146ac4e3b1823a9b82ad7058c14e691d267c24ed0a0f6de207596a9d7c664ad84b943b7b156dc5d444f0b074fb5b1d69c1ad07bca8d7b5e4e62cae0efbe06614108555826daebd667b395c9a2a44c49acfcfab55d3d15bc6ff9a9d49d5ee889fd5cea72", 0xdb, 0x48000, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @bcast}, 0x1c) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 02:44:45 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000002880000000000000000000000000000000000000005000000"], 0x8758) 02:44:45 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000080)) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) getsockopt$inet_tcp_buf(r6, 0x6, 0xb, &(0x7f0000000140)=""/110, &(0x7f00000001c0)=0x6e) [ 1352.311103][ T3954] binder: 3937:3954 ioctl c018620c 20000100 returned -1 [ 1352.327166][ T3836] binder: 3722:3836 ioctl c018620c 20000100 returned -1 [ 1352.343337][ T3954] binder: 3937:3954 ioctl 800442d4 20000000 returned -22 02:44:45 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x2000000, &(0x7f0000000440)) [ 1352.406221][ T3836] binder: 3722:3836 ioctl 80044dfe 20000140 returned -22 [ 1352.473038][ T3984] binder: 3979:3984 ioctl c018620c 20000100 returned -1 [ 1352.615617][ T4146] binder: 4048:4146 ioctl c018620c 20000100 returned -1 02:44:45 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x210382, 0x0) read$FUSE(r1, 0x0, 0x0) [ 1352.663498][ T4146] binder: 4048:4146 ioctl c048ae65 20000080 returned -22 [ 1352.749773][ T4146] binder: 4048:4146 ioctl c018620c 20000100 returned -1 02:44:45 executing program 0: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$getregs(0xe, r0, 0x3, &(0x7f0000000080)=""/8) syz_open_dev$ttys(0xc, 0x2, 0x1) flock(0xffffffffffffffff, 0x8) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 02:44:45 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x3000000, &(0x7f0000000440)) 02:44:45 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(0x0, r2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6800) r4 = getegid() getgroups(0x1, &(0x7f0000000540)=[r4]) r5 = getegid() getgroups(0x1, &(0x7f0000000540)=[r5]) r6 = getegid() getgroups(0x1, &(0x7f0000000540)=[r6]) r7 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r7, 0x0, 0x0) lseek(r7, 0x6, 0x1) getdents64(r7, &(0x7f0000000000)=""/43, 0x2b) statx(r7, &(0x7f0000000280)='./file0\x00', 0x4000, 0x4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getegid() getgroups(0x1, &(0x7f0000000540)=[r9]) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x6}, [{0x2, 0x1}, {0x2, 0x6}, {0x2, 0x3}, {0x2, 0x5}, {0x2, 0x6}, {0x2, 0x0, r2}], {0x4, 0x3}, [{0x8, 0x2, r3}, {0x8, 0x3, r4}, {0x8, 0x0, r5}, {0x8, 0x2, r6}, {0x8, 0x5, r8}, {0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x5, r9}], {}, {0x20, 0x1}}, 0x8c, 0x1) 02:44:45 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000007880000000000000000000000000000000000000005000000"], 0x8758) 02:44:45 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r2, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x3, &(0x7f0000000080), 0x4) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000000)) 02:44:45 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:44:46 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x54a00, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000200)={0x4202, 0x2}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) acct(&(0x7f0000000380)='./file0\x00') r3 = dup3(r2, r0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x400000, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000340)=0xfc, 0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f00000001c0)={0x11, 0xc7, &(0x7f00000000c0)="5834c8e737b3e7c9728aed78a6abb2e48a75fa17dca65dc2491ae01b3326e9043020879083f7de208ea0ddf00c72f9e266ac327ff4a06137b33569c7ea31682ba5420a6a32ab497e03a6da47a0a2765e980238f77efdbaac0712a20c87748690677389ebcc2840049cea0c4fd822493ab5769de071b0706b50f585b872b6b8147998fc23ee31040fb4f53f04a76284cdbc277fbfb90769d3c4f61201eba54636a62739a47a62b57eaf6b1059ee1b4f01e59b55c2713e7c48c0884092344c56e2338fc1f0e89060"}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080)=0xfffffffa) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f00000003c0)) 02:44:46 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x8, 0x400000) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f00000001c0)={0x30, "8ecd328d1e9e9f994e22c6a2b0de740f0347a496a9c5b2f041ebd62bbe507d7d05eb5ac171b337f219407b131727643787f9d4a117f8050a2316911e887fe6c77103ab8f1c57223ceaa7494b208f2eff6958ce602219f9f955556b0f1be4543d5416c19ba5d14d3ecf3f8f69446a27cc23554520958ff0d1a98ba7dd8457a86a"}) r4 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000000b010100001000000000000200f704080002400000000108000240000000050800034000c4811e803700000008000300024000000075f1fad03fb32ebada351a030a0001002913282c290000000800034000000001"], 0x58}, 0x1, 0x0, 0x0, 0x84}, 0x1) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) 02:44:46 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x4000000, &(0x7f0000000440)) [ 1353.587655][ T5044] bridge0: port 1(bridge_slave_0) entered learning state [ 1353.688229][ T5129] binder: 5071:5129 ioctl c018620c 20000100 returned -1 02:44:46 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x4c8000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) setsockopt$inet6_tcp_int(r3, 0x6, 0x18, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000040)={0x1a, 0xf, 0x1f, "9fc0073a3836c0a63dca4dd49b38e85b3a2cd77e5ee2486be5fd6a26362ac4d108394ac8a1e707d32df2bfac0078aa0d549023d49b41cedb9e134c78", 0xe, "dd549cadc882ad48ce4594121d99971482c94e8285d25121062249d8dd2504c4d5aa03f0d539d5b9a26b55f43765ddd25a1ed2bc2373b7b94a23a147", 0xf0}) 02:44:46 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) [ 1353.923532][ T5336] binder: 5225:5336 ioctl c018620c 20000100 returned -1 02:44:46 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 02:44:46 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000000000)={0x4, [0x8, 0x3f935702, 0x82, 0x4]}) [ 1354.029886][ T5336] binder: 5225:5336 ioctl 408c563e 20000040 returned -22 [ 1354.045685][ T5444] bridge0: port 1(bridge_slave_0) entered learning state 02:44:46 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x5000000, &(0x7f0000000440)) 02:44:46 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000007940000000000000000000000000000000000000005000000"], 0x8758) [ 1354.241324][ T5552] binder: 5486:5552 ioctl c018620c 20000100 returned -1 02:44:47 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xffffffff, 0x1}, 0x8) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) connect$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x8, @loopback, 0x9}, 0x20) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x141280, 0x0) 02:44:47 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x111200, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20046089}, 0x240000a1) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800900010069706970000000002c000280060011000000000008000100", @ANYRES32=r8, @ANYBLOB="05000900000000000500040000000000060010000000000008000a00", @ANYRES32=r6, @ANYBLOB="c9147635dde1ad96b3cf42a4fb1f8fdf209bdd6d1d934c802b67c12e9e57916fb6083bd63a238d706995b8fee0c75ca2faf319485f230a7ecc0b70b0f38f1740e2e6d196e8567c2b85a62077b535535db874f13343ce5ca312ae6bb294dea5bdf50bfe3a34316420ea4f463eb67e17ef50a1a3ce61b89c404e296f4a130729fbf4151d96d8be3a10"], 0x7}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r6, 0x0, {0x2, 0xff, 0x4}, 0x1}, 0x18) fstat(r0, &(0x7f0000000080)) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 02:44:47 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x113482, 0x0) shmget(0x2, 0x2000, 0xc, &(0x7f0000ffc000/0x2000)=nil) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) 02:44:47 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)={0x30, r5, 0xc8ef0a4335e6829f, 0x0, 0x0, {0xf}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x21c, r5, 0x503, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x120, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x294}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd67c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x63}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe8f6}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x865c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x61cc1fcf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}]}, @TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x60d88a0f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7d45}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x74e}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2ea1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x48894}, 0x20000000) [ 1354.722832][ T5927] binder: 5877:5927 ioctl c018620c 20000100 returned -1 02:44:47 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x6000000, &(0x7f0000000440)) [ 1354.881801][ T6114] binder: 6022:6114 ioctl c018620c 20000100 returned -1 02:44:47 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) ioctl$SG_GET_LOW_DMA(r6, 0x227a, &(0x7f0000000140)) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r3, 0xc0884123, &(0x7f0000000080)={0x5, "c1c8dcf2904b19a3bd17faf14b0f200703e9208f64680d68476be0b51b6103fea79c4faf7743772b9b74a6528d5f05f49e98b1bc9a7c4d610d6189aceb2096dc", {0x0, 0x8}}) r7 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_USERNS(r7, 0xb701, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:44:47 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') 02:44:47 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000007980000000000000000000000000000000000000005000000"], 0x8758) 02:44:47 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6}, @IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_ENCAP_FLAGS={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x64}}, 0x0) connect$can_bcm(r2, &(0x7f0000000080)={0x1d, r5}, 0x10) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x541b) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x400100, 0x0) [ 1355.163241][ T6354] binder: 6334:6354 ioctl c018620c 20000100 returned -1 02:44:48 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r2 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) lseek(r2, 0x6, 0x1) getdents64(r2, &(0x7f0000000000)=""/43, 0x2b) mknodat(r2, &(0x7f0000000080)='./file0\x00', 0x100, 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) readahead(r3, 0x81, 0x1) [ 1355.294059][ T6354] binder: 6334:6354 ioctl c018620c 20000100 returned -1 [ 1355.371561][ T6484] binder: 6423:6484 ioctl c018620c 20000100 returned -1 02:44:48 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x7000000, &(0x7f0000000440)) [ 1355.450142][ T6617] bridge0: port 1(bridge_slave_0) entered learning state 02:44:48 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000000), 0x4) 02:44:48 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x226543, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) accept4$rose(r4, &(0x7f0000000080)=@full={0xb, @dev, @default, 0x0, [@null, @default, @rose, @default, @netrom, @bcast]}, &(0x7f00000000c0)=0x40, 0x800) lchown(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000200)={0x4, &(0x7f0000000300)=[{0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @random}]}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000140)=0x101, 0x4) syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r2, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000100)={0x3}) setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f00000001c0)=0x2800, 0x4) 02:44:48 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x100, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) 02:44:48 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) [ 1355.767003][ T6904] binder: 6894:6904 ioctl c018620c 20000100 returned -1 02:44:48 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x8000000, &(0x7f0000000440)) [ 1355.912788][ T6965] binder: 6923:6965 ioctl c018620c 20000100 returned -1 02:44:48 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x800, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40c243, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000080)=0xfffffffb) 02:44:48 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000c980000000000000000000000000000000000000005000000"], 0x8758) 02:44:48 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x821c2, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/22, 0x16}], 0x1) syz_genetlink_get_family_id$smc(&(0x7f0000000000)='SMC_PNETID\x00') 02:44:48 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x96440, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 02:44:49 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) bind$phonet(r5, &(0x7f0000000080)={0x23, 0x0, 0x1f, 0x6}, 0x10) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r8, 0xc018620c, &(0x7f0000000100)) ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/4096) 02:44:49 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x23b087ecdbceacf7) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000080)={0x81, 0xe, 0x8, 0xff, "9d67a7e1897833ef0b7f1397ae4946a3f35d7658eba317a27d11f544c8f228fa"}) [ 1356.496143][ T7615] binder: 7566:7615 ioctl c018620c 20000100 returned -1 02:44:49 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r3, 0x40045730, &(0x7f0000000080)=0xfff) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) r7 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) r9 = dup2(r8, r7) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r9, 0xc018620c, &(0x7f0000000100)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x1407, 0x0, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r9}]}, 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) ioctl$KVM_DIRTY_TLB(r6, 0x4010aeaa, &(0x7f0000000000)={0x8, 0x3}) 02:44:49 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x8cffffff, &(0x7f0000000440)) 02:44:49 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x9, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b38b) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={r5, 0x6}, 0x8) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000100)) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x69, 0x1, {0x2, 0x2, 0x1}}, 0x14) 02:44:49 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000ca40000000000000000000000000000000000000005000000"], 0x8758) [ 1356.781336][ T7731] binder: 7672:7731 ioctl c018620c 20000100 returned -1 [ 1356.803546][ T7734] binder: 7726:7734 ioctl c018620c 20000100 returned -1 02:44:49 executing program 4: socketpair(0x1d, 0xa, 0xfffffffb, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x3) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) getegid() ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r5) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000100)={0xfffffffd}) r8 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:44:49 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000000)) 02:44:49 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/6) [ 1357.086556][ T8059] binder: 7924:8059 ioctl c018620c 20000100 returned -1 02:44:49 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) set_thread_area(&(0x7f0000000000)={0x8001, 0x100000, 0x4000, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1}) [ 1357.138948][ T8059] binder: 7924:8059 ioctl c018620c 20000100 returned -1 02:44:49 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0xf6ffffff, &(0x7f0000000440)) [ 1357.329980][ T8174] binder: 8146:8174 ioctl c018620c 20000100 returned -1 02:44:50 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:44:50 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000007a80000000000000000000000000000000000000005000000"], 0x8758) 02:44:50 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000080)={0x34, 0x9e6, 0x8000, 0x5}, 0x8) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) 02:44:50 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x3, [@local, @empty, @rand_addr=0x87]}, 0x1c) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) 02:44:50 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000000)={0x6000, 0x100000}) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 02:44:50 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0xfeffffff, &(0x7f0000000440)) [ 1357.815590][ T8699] binder: 8671:8699 ioctl c018620c 20000100 returned -1 [ 1357.841578][ T8733] binder: 8703:8733 ioctl c018620c 20000100 returned -1 [ 1357.882439][ T8754] binder: 8692:8754 ioctl c018620c 20000100 returned -1 02:44:50 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000000)={0x100000001, 0x7}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x40}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x4001) [ 1357.930442][ T8754] binder: 8692:8754 ioctl 4010ae68 20000000 returned -22 02:44:50 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x61c842, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) pselect6(0x40, &(0x7f0000001340)={0x2, 0x0, 0x791, 0x100, 0x0, 0xffffffffffffff30, 0x5, 0x3}, &(0x7f0000001380)={0x1, 0x9, 0x4, 0x7fffffff, 0x2, 0x4, 0x9, 0x1}, &(0x7f00000013c0)={0xffffffffffffff81, 0x8, 0x1, 0xda32, 0x95, 0x3f, 0x5, 0x400}, &(0x7f0000001400)={0x77359400, 0x0}, &(0x7f0000001480)={&(0x7f0000001440)={[0xffffffff]}, 0x8}) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0xf000}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001300)={0x20, 0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r4, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a68730b20000000000000000000000000000000000000852a68730101000001000000000000000000000000000000852a646600000000", @ANYRES32=r7, @ANYBLOB='\x00\x00~'], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000100004328b6000000003000000000"], @ANYBLOB="0004000000000000"], 0x1000, 0x0, &(0x7f0000000300)="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"}) r8 = dup2(r6, r5) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) tee(r9, r0, 0x5, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r8, 0xc018620c, &(0x7f0000000100)) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r10, 0x5201) 02:44:50 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) epoll_create1(0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f0000000100)={0xfffffb41, 0x0, &(0x7f0000000000), &(0x7f0000000080)=[0xb2d2, 0x7, 0x401, 0x6, 0x69, 0x9], &(0x7f00000000c0)=[0x4, 0x200, 0x800, 0x7, 0x7]}) [ 1358.163392][ T9033] binder: 8942:9033 ioctl c018620c 20000100 returned -1 02:44:51 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000180)) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x40a043, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r6, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, [], @bt={0x1f, 0x1, 0x1, 0x6, 0xfffffffffffffffc, 0x6, 0x0, 0xf}}) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x4, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x480f0}, 0x20000001) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 02:44:51 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0xff000000, &(0x7f0000000440)) [ 1358.336111][ T9247] binder: 9217:9247 ioctl c018620c 20000100 returned -1 [ 1358.355620][ T9266] binder: 9197:9266 ioctl c018620c 20000100 returned -1 02:44:51 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000ca80000000000000000000000000000000000000005000000"], 0x8758) [ 1358.387950][ T9247] binder: 9217:9247 unknown command -1 02:44:51 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000080)={0x80, 0x3, 0x1f, 0x6, 0xffff, 0xfffff942}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) [ 1358.473504][ T9247] binder: 9217:9247 ioctl c0306201 20001300 returned -22 [ 1358.550365][ T9319] binder: 9297:9319 ioctl c018620c 20000100 returned -1 02:44:51 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285629, &(0x7f0000000080)={0x0, 0x80000000, 0x7f, [], &(0x7f0000000000)=0x40}) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x44200) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000180)=@ccm_128={{0x304}, "c574f69e54c7c7a5", "c1ba91e06669b9a022c8ab17e452d730", "02abbf9d", "8f70f623cf72e099"}, 0x28) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r6, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000140)=0x10, 0x4) 02:44:51 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x113340, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r7, 0xc0045004, &(0x7f0000000080)) 02:44:51 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0xffffff8c, &(0x7f0000000440)) 02:44:51 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x580, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)={0x30, r5, 0xc8ef0a4335e6829f, 0x0, 0x0, {0xf}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r5, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffff000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x24}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffe00}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000080) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) 02:44:51 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(0x0, r5, 0x0) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000000)={0x3, @default, r5}) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) [ 1359.030233][ T9882] binder: 9879:9882 ioctl c018620c 20000100 returned -1 [ 1359.046927][ T9883] binder: 9881:9883 ioctl c018620c 20000100 returned -1 [ 1359.124759][ T9890] binder: 9885:9890 ioctl c018620c 20000100 returned -1 [ 1359.195447][ T9890] binder: 9885:9890 ioctl c018620c 20000100 returned -1 [ 1359.224563][ T9988] binder: 9892:9988 ioctl c018620c 20000100 returned -1 [ 1359.262240][ T9988] binder: 9892:9988 ioctl 89e1 20000000 returned -22 02:44:52 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) write$P9_RLERRORu(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000f9010001005be4ffffff"], 0xe) r4 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x3, 0x404240) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, &(0x7f00000000c0)=0x97, 0x4) 02:44:52 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) 02:44:52 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000cb80000000000000000000000000000000000000005000000"], 0x8758) 02:44:52 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0xfffffff6, &(0x7f0000000440)) 02:44:52 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x7f, 0xb7, 0x8, 0x1, 0x0, 0xff, 0x4, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4e1d, 0x0, @perf_config_ext={0x7eb00, 0x10000}, 0x10000, 0x6, 0x80, 0x2, 0x2, 0x7f, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000700)) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000640)) r5 = msgget(0x1, 0x144) msgctl$MSG_STAT_ANY(r5, 0xd, 0x0) msgctl$MSG_INFO(r5, 0xc, &(0x7f0000000680)=""/99) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000000000)={0x9, &(0x7f0000000100)=[{@none}, {@none}, {@fixed}, {@fixed}, {}, {@none}, {@none}, {}, {}]}) fcntl$getown(r1, 0x9) readahead(r2, 0x2d, 0x3) 02:44:52 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000000)={0xcb, 0x4, 0x8, 0x8, 0x3, 0xf37, 0x76d}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) [ 1359.572713][T10411] binder: 10352:10411 ioctl c018620c 20000100 returned -1 [ 1359.604102][T10412] binder: 10407:10412 ioctl c018620c 20000100 returned -1 [ 1359.637366][T10411] binder: 10352:10411 ioctl 5201 0 returned -22 [ 1359.719677][T10429] binder: 10416:10429 ioctl c018620c 20000100 returned -1 02:44:52 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x854a642e4471c7df, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) [ 1359.809089][T10561] binder: 10431:10561 ioctl c018620c 20000100 returned -1 02:44:52 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0xfffffffe, &(0x7f0000000440)) 02:44:52 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) write$P9_RATTACH(r2, &(0x7f00000001c0)={0x14, 0x69, 0x2, {0x8, 0x3, 0x7}}, 0x14) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000180)={'wg2\x00', r5}) 02:44:52 executing program 1: syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0xa7a0c2, 0x0) sync() ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) [ 1360.093862][T10952] binder: 10938:10952 ioctl c018620c 20000100 returned -1 02:44:52 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000007cc0000000000000000000000000000000000000005000000"], 0x8758) 02:44:53 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="0800000013008105e06f02925dc0b5f207c804a01e000000302e20000000a3032e020c0002000200aacc2b2043b2d38212fa2059e3c47b5ac639c5f5dc4d0501b077050d2a51a95a52826d8f2f6d2757fc6e3dc074ba9d14b639a4722ee2a03cac5c0749c55c00000000dbd8c557572439c47e38d5d1f8fd13382e8dca3ef604c402b6a6e8b96d4d06eaef4fbe3391e81a84a0d90c50c26275f342085986aab462bb89588bc8979edcd7a2cdc9fb6fabaad0f852b63dad19ce82d408409c4f285b15ef350223b58e90e9f071ddfd24ae27afd68bf19a221a4d3290013eceaf851aaa3000"/251, 0xfb}], 0x1, 0x0, 0x0, 0xf000}, 0x4000080) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) r5 = openat$cgroup_ro(r4, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x0, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000100)) setsockopt$netrom_NETROM_T4(r7, 0x103, 0x6, &(0x7f0000000300)=0xffffffd6, 0x4) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f00000001c0)={0x4000, 0x14000}) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) fcntl$dupfd(r9, 0x0, r8) 02:44:53 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x100000000000000, &(0x7f0000000440)) 02:44:53 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x401, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r2, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r3 = socket$inet(0x2, 0x800, 0x80000) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f0000000280)='7', 0x1, 0x8000800, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x9, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b38b) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000080)={r6, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000140)=0x84) r8 = dup2(0xffffffffffffffff, r5) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f00000001c0)=0x200, 0x4) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000180)={r7}, 0x8) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000200)=0x408000) 02:44:53 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000000)=0x8, 0x4) 02:44:53 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x25e0c1, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) [ 1360.509993][T11393] binder: 11392:11393 ioctl c018620c 20000100 returned -1 [ 1360.547346][T11393] bridge0: port 1(bridge_slave_0) entered learning state [ 1360.588096][T11401] binder: 11399:11401 ioctl c018620c 20000100 returned -1 02:44:53 executing program 5: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) ioctl$KVM_SMI(r2, 0xaeb7) 02:44:53 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000)) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 02:44:53 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x200000000000000, &(0x7f0000000440)) 02:44:53 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000080)=[0x8000], 0x1, 0x280000, 0x1, 0xfffffffa, 0x3, 0x1, 0x2, {0x4, 0x0, 0x0, 0x8, 0x100, 0x66, 0x4, 0x5, 0x7, 0xc39, 0xf41d, 0x0, 0xffff, 0x800, "4a8eca4a5b0cfd993c5ac416a3ce1562653d73cfc181dcaf6537fa2a16047970"}}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000000)=0x9, 0x4) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) [ 1360.952366][T11817] bridge0: port 1(bridge_slave_0) entered learning state 02:44:53 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000140)={0xf000000, 0x2, 0xff, r0, 0x0, &(0x7f00000000c0)={0x9a090d, 0x4, [], @p_u32=&(0x7f0000000280)=0xffffffff}}) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0xf000}, 0x804) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000001c0)={0x80000001, 0x6, 0x4, 0x20, 0x200, {0x77359400}, {0x1, 0x2, 0x3, 0x9, 0xa2, 0x2, "f9e6254c"}, 0x8001, 0x4, @offset=0x8000, 0x3, 0x0, r4}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r6, 0x80045400, &(0x7f0000000240)) r7 = syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) r9 = dup2(r8, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000100)={0xffffffff}) ioctl$RFKILL_IOCTL_NOINPUT(r9, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:44:53 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000cdc0000000000000000000000000000000000000005000000"], 0x8758) [ 1361.052277][T11819] binder: 11816:11819 ioctl c018620c 20000100 returned -1 [ 1361.111314][T11869] bridge0: port 1(bridge_slave_0) entered learning state [ 1361.130205][T11868] binder: 11822:11868 ioctl 5201 0 returned -22 [ 1361.137935][T11819] binder: 11816:11819 ioctl aeb7 0 returned -22 [ 1361.173939][T11869] binder: 11820:11869 ioctl c018620c 20000100 returned -1 [ 1361.216122][T11869] binder: 11820:11869 ioctl c06864a2 200000c0 returned -22 02:44:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000080)={0x800, 0xffff}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) write$binfmt_elf64(r7, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xd6, 0x8, 0x3, 0x7, 0x2, 0x3, 0x41a8, 0x278, 0x40, 0x19d, 0x8, 0x7f, 0x38, 0x2, 0x4, 0x4, 0x6}, [{0x6474e551, 0x6, 0x0, 0x7ff, 0x1, 0x9, 0x10000, 0x9d45}, {0x6, 0xdd8, 0x9, 0x9, 0x80000001, 0x6, 0x3909, 0x9}], "0236411f551afaa53ce8deda4a28a912d62e56569034bb402f7bed0820eed63e42986017cfb26d8054fec3b1c62dd0fc9b59da779243b7951d986e5862d7895c151676811687820fadec54c6e17511e41fb00a1f107f27420ffb5c827511d28950aa8f34ed4e9e882f8cb036196d68bb47b37281fa28b54c060b8502c178eefe033044459971716373b07d9d4aeca0bcea9876adbeba46378e4a1230f3237c77e42688cc6c1cf600052224f6a34a"}, 0x15e) ioctl$SNDRV_PCM_IOCTL_PREPARE(r6, 0x4140, 0x0) 02:44:54 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000040)={0x1}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:44:54 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x300000000000000, &(0x7f0000000440)) 02:44:54 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000000)=0x3e6, 0x4) 02:44:54 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000100000000000140012800900010069706970000000000400028008000a00", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000140)=r6) r7 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) r9 = dup2(r8, r7) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r9, 0xc018620c, &(0x7f0000000100)) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f00000000c0)=r9) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000000)=0x9) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) [ 1361.441355][T12362] binder: 12361:12362 ioctl c018620c 20000100 returned -1 [ 1361.504510][T12362] binder: 12361:12362 ioctl 40087705 20000080 returned -22 [ 1361.602168][T12366] binder: 12364:12366 ioctl c018620c 20000100 returned -1 [ 1361.666928][T12420] binder: 12389:12420 ioctl c018620c 20000100 returned -1 [ 1361.678489][T12422] binder: 12400:12422 ioctl c018620c 20000100 returned -1 02:44:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000040), 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20040, 0x0) [ 1361.731879][T12420] binder: 12389:12420 ioctl 400454da 20000140 returned -22 02:44:54 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x200c0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:44:54 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000080)=""/194, &(0x7f0000000000)=0xc2) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) [ 1361.925076][T12869] bridge0: port 1(bridge_slave_0) entered learning state 02:44:54 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000007e00000000000000000000000000000000000000005000000"], 0x8758) 02:44:54 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x400000000000000, &(0x7f0000000440)) [ 1361.987837][T12869] binder: 12789:12869 ioctl c018620c 20000100 returned -1 02:44:54 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x24ec80, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) [ 1362.148686][T12994] bridge0: port 1(bridge_slave_0) entered learning state 02:44:55 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:44:55 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000000)={0xa, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) 02:44:55 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x200000, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 02:44:55 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4000, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:44:55 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x500000000000000, &(0x7f0000000440)) [ 1362.518609][T13350] binder: 13334:13350 ioctl c018620c 20000100 returned -1 02:44:55 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000003e80000000000000000000000000000000000000005000000"], 0x8758) 02:44:55 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x82002, 0x0) pwrite64(r1, &(0x7f0000000080)="0f1577125318318990e707d0fec4da5c00d629f6b47d7ad5842445be438911a310fd91a5372b7a80239b2a796af79452830811b16b52c3ab667d25e07f636687f1fdf44b9dded529cf0007200ee066902a7451c16f4c0f50ba006900d6a3ba0c3becd4e2af01df235025f8af43f0b4278ab7f4515bdb31fb331919e3aa2f9e6a9dd6a844b998f64b148c8debc700f15465371fd8851864ea8e8a7da59d78024894b775ee68bbbac325847dfab9770ab7924c094c62d550f41017a3414de43d9fad2b904dc6e7e7a988585f6ba0e0ad13", 0xd0, 0x1000) 02:44:55 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x600000000000000, &(0x7f0000000440)) 02:44:56 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x123280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0xc00) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x2) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x8001) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:44:56 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x700000000000000, &(0x7f0000000440)) [ 1363.439073][T13986] binder: 13977:13986 ioctl c018620c 20000100 returned -1 [ 1363.468296][T13986] binder: 13977:13986 ioctl 2402 8001 returned -22 02:44:56 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x80401, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) semop(0x0, &(0x7f0000000300)=[{0x1, 0x35af, 0x3000}, {0x1, 0x91}, {0x2, 0x99, 0x1800}, {0x3, 0x3c, 0x1800}], 0x4) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800900010069706970000000002c000280060011000000000008000100", @ANYRES32=r9, @ANYBLOB="05000900000000000500040000000000060010000000000008000a00", @ANYRES32=r7, @ANYBLOB="3d6d1b703c88fbec6570f05a275e261fb1bfb9710ac4e9d152ee135544b3d76303981b91608386eb6b5b7740d710362229c46db0df47b76ffcc968994b1898dd4d301027b340a760f767485e4e40a3f4b3339fe1cde1abcc543a434c1d371db79be94243"], 0x64}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', r7}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@delchain={0xa4, 0x65, 0x4, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xb}, {0xb, 0x8}, {0x5, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x1f}}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x48, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x4, 0x8}}, @TCA_U32_MARK={0x10, 0xa, {0x101, 0x64ff}}, @TCA_U32_CLASSID={0x8, 0x1, {0x0, 0xb1310c9329b89b45}}, @TCA_U32_LINK={0x8, 0x3, 0x9dc52ed}, @TCA_U32_DIVISOR={0x8, 0x4, 0xdf}, @TCA_U32_POLICE={0xc, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x200}, @TCA_CHAIN={0x8, 0xb, 0x101}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x80, 0x0) 02:44:56 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000003f00000000000000000000000000000000000000005000000"], 0x8758) [ 1363.586465][T14009] binder: 14001:14009 ioctl c018620c 20000100 returned -1 [ 1363.611705][T14009] bridge0: port 1(bridge_slave_0) entered learning state 02:44:56 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = msgget(0x1, 0x144) msgctl$MSG_STAT_ANY(r1, 0xd, 0x0) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000080)=""/134) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:44:56 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x800000000000000, &(0x7f0000000440)) 02:44:56 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = getpid() ptrace(0x10, r1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000100)={0x100, 0x30395056, 0x8000, 0x9, 0x3, @stepwise={{0xfff, 0x80000000}, {0x200, 0x8}, {0x4, 0x8e}}}) ptrace$getsig(0x2, r1, 0x4, &(0x7f0000000080)) setpriority(0x0, r1, 0x4) 02:44:57 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000cf00000000000000000000000000000000000000005000000"], 0x8758) 02:44:57 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x107200, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6}, @IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_ENCAP_FLAGS={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x64}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x240088c1}, 0x2404c811) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:44:57 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x8cffffff00000000, &(0x7f0000000440)) 02:44:57 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) pidfd_getfd(r4, r0, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000300)=0xff, 0x4) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r5) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f00000000c0)={0x1, 0x8, 0x100000, 0x4, 0x4, "5f873e622649ee1ff922378b99bae33d98ce11", 0x6c3, 0x23a4}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000340)={{0x7, 0x5}, {0xd7, 0x3}, 0x5, 0x0, 0x7}) ioctl$VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000000140)={0xa, @vbi={0x6, 0xffff, 0x1, 0x34325241, [0x4, 0x9], [0x80, 0x4], 0x1}}) r8 = dup2(r1, 0xffffffffffffffff) setsockopt$bt_BT_RCVMTU(r8, 0x112, 0xd, &(0x7f0000000000)=0x5, 0x2) 02:44:57 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x440140, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000080)=0x3, 0x4) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) r5 = accept$ax25(r4, &(0x7f0000000180)={{0x3, @default}, [@netrom, @remote, @netrom, @netrom, @rose, @netrom, @null, @null]}, &(0x7f0000000200)=0x48) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r5, 0x8983, &(0x7f0000000240)) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1, 0x0) accept4$tipc(r6, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x800) 02:44:57 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0xf6ffffff00000000, &(0x7f0000000440)) 02:44:57 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000003f10000000000000000000000000000000000000005000000"], 0x8758) [ 1365.037172][T14821] bridge0: port 1(bridge_slave_0) entered learning state [ 1365.071217][T14822] binder: 14820:14822 ioctl c018620c 20000100 returned -1 [ 1365.106259][T14821] binder: 14817:14821 ioctl c018620c 20000100 returned -1 02:44:58 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0xfeffffff00000000, &(0x7f0000000440)) 02:44:58 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) ioctl$SOUND_PCM_READ_RATE(r6, 0x80045002, &(0x7f0000000080)) read$FUSE(r3, 0x0, 0xffffffffffffff17) 02:44:58 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0xbb1, 0x0, 0x7}, {}]}) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) [ 1365.571420][T15135] binder: 15133:15135 ioctl c018620c 20000100 returned -1 [ 1365.593023][T15138] binder: 15134:15138 ioctl c018620c 20000100 returned -1 02:44:58 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000003f20000000000000000000000000000000000000005000000"], 0x8758) [ 1365.628898][T15138] binder: 15134:15138 ioctl 4008ae89 20000080 returned -22 [ 1365.641431][T15135] binder: 15133:15135 ioctl c018620c 20000100 returned -1 [ 1365.695560][T15135] binder: 15133:15135 ioctl 80045002 20000080 returned -22 02:44:58 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0xff00000000000000, &(0x7f0000000440)) 02:44:58 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 02:44:58 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x3) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)={0x2}) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRES64=r5, @ANYBLOB="0ab171df498b6c2f67a8f102a61773a0d913a6ce04ca76a5d09ecb2360b3750915c08a331be554903be1f762e2c673e04230ab47e810c6a2c0c3575740af1733028b99935a29240274752b5fc238959c476f87830450f50a8aa951b4955037748f1506a9d4d9033ca85aaceb901386b902448546a7e005218012f2d5160f384fac3a8aa6afca7da2a392abe987ae5abcc2e0be67a1eaacafc7"]]], 0x3}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r5, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x3, 0x0, 0x1, 0xfffffff8}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r8, 0xc018620c, &(0x7f0000000100)) sendmsg$NFNL_MSG_CTHELPER_NEW(r8, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="20000000070000070900010773797a3123000000e2fb1a50f182a7b07bf051eb6de49b3fcfddadd30bf65fcec49d463c67b1fdf594c2f8b70cc688130038b9aa601e29f3c1851b8f97e91f5cd33ee1b38a08b5df0def54c23f33618ffc1d68531bc490b4a31c3fb5efce7339653ea7e1762043c48a7dc3988662fae7654ea0c07915de6dd8d278bf947c8f2eefe9a2ca9c9fb79d77e72bc75f640840d897d2c09b81c1e0a5037e3019cdc070c61b796f5fca028a40055b45700866a2d7f29b9a7d7a456a059fc97125df1dc0f7743f96cafc8ec8962fc83c4a447f4f3594308c815c5ba0b45e11a7b053ed087d62fb028d3b47c8b983e5a585f576a85846a69f956ccfe1f9e84609aab6693bcea43d4169d23cf7a125a85893bea87873c02e29e73ee236dd052637856bd8d454a54c64be4ed344d83744f106fcf315fd60aacaa95d042ed852e9579d4d64b1f391fe2a55c65172d0c9854a1b17913033de8e3bc7a59f257f403d81f6a27d9ec71be90972ea1eb8d5a2179bc0abd14e53d9b7250192692de20041c3c3e9c675"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 02:44:58 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0xc0, 0x2000000005}) 02:44:58 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0xffffffff00000000, &(0x7f0000000440)) [ 1366.260047][T15551] binder: 15549:15551 ioctl c018620c 20000100 returned -1 02:44:59 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000003f30000000000000000000000000000000000000005000000"], 0x8758) 02:44:59 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001600)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="05000900000000000500040000000000060010000000000008000a00", @ANYRES32=r1, @ANYBLOB="f2f2d705cdff9da764454594513773fce9559c72a601baaa20d9ac29b48b95cd4b5a340de641369455f9d320e8735ee226d6266ed8b2e713e662ed366d83c812f5d7d4e0642396229d9245e46f787691089feee1f6b515f7ea15153812908524aa46582f8f54118769e9d795fd833bd9db80dab92fd05febb8019905ffae418c6be588e9fc42049522a1a0bdec4248e8ff40a17959c829590b6a9b2e8e9aac98e2bca3"], 0x64}}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r4 = getpid() ptrace(0x10, r4) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r5) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000100)) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205647, &(0x7f0000001340)={0xa10000, 0x0, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000001300)={0x99096d, 0x10001, [], @value64=0x1}}) sync_file_range(r8, 0x800, 0x0, 0x4) ptrace$getsig(0x2, r4, 0xffffffffff600043, &(0x7f0000000300)) clone3(&(0x7f0000001200)={0x10000200, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x29}, &(0x7f0000000100)=""/191, 0xbf, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=[r4], 0x1}, 0x50) rt_sigqueueinfo(r9, 0x1b, &(0x7f0000001280)={0x36, 0x5, 0x1ff}) 02:44:59 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mount(&(0x7f0000000080)=@sg0='/dev/sg0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='nfs4\x00', 0x80, &(0x7f0000000180)='/dev/rfkill\x00') r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) read$FUSE(r3, 0x0, 0x0) 02:44:59 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id'}}) r2 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x845) statx(r2, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) [ 1366.683021][T15865] binder: 15832:15865 ioctl c018620c 20000100 returned -1 [ 1366.711884][T15868] binder: 15867:15868 ioctl c018620c 20000100 returned -1 [ 1366.724631][T15865] binder: 15832:15865 ioctl c0205647 20001340 returned -22 02:44:59 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0xb77a}, &(0x7f00000000c0)=0x8) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x1b1401, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000000)={0x20, 0x1, 0x100, 0x100000001, 0x100000000000000}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:44:59 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x6b0dc0, 0x0) 02:44:59 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000001f40000000000000000000000000000000000000005000000"], 0x8758) 02:44:59 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7fff, 0x800) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x28, 0x1411, 0x4, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x14}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x8000) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r2, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:00 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x541002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:45:00 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2e4eb0e407ce4960) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x4, 0x798c, 0xffff8000, 0xa0, r0, 0x7, [], 0x0, r4, 0x0, 0x5, 0x5}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r5, &(0x7f0000000140)="2ff3c14ed5ebf7017b00d4dbab0b910d9a32abecbda2ac7ebdfd9a2ab2fc2ad8f6ed20b0ae5f9f350021aea034564cb75cb5027be37dfe21e2d2104a0941cac85612c72bd77ff2170890f6b8fc037b16dcd92de24b872ef81cee3bdd5c6690447f153d0156f22f0097a1fbfb779807ab7c93a7525cffcfd46d281d196943f84acabcc594f0f03226ecf92e5396724424120de459031752728ceabaf0ea5aff9ecf66d761f939116e8335c1ca7c7fb306be74341c781ccd683aa85509ae97c906c3de", &(0x7f00000002c0)="d4eaeaa5a5bdf004389a18ad6678730b8cd27754e939987ef44c59b129aa71bcf67d26c27bf9928d684addc3f7e85d6da9632c66010d1513e41cadb4b9f73ebe", 0x1}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000100)) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, &(0x7f0000000240)=0x4, 0x4) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) r9 = dup2(r8, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r9, 0xc018620c, &(0x7f0000000100)) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0x7, &(0x7f0000000080)={0x3, 0xfffc, 0x800, 0x5}, 0x10) 02:45:00 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) set_robust_list(&(0x7f0000000340)={&(0x7f0000000140)={&(0x7f0000000100)}, 0x1ff, &(0x7f0000000300)={&(0x7f00000002c0)}}, 0x18) lseek(r2, 0x6, 0x1) getdents64(r2, &(0x7f0000000000)=""/43, 0x2b) move_mount(r2, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x44) statx(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)) [ 1367.495393][T16489] binder: 16443:16489 ioctl c018620c 20000100 returned -1 02:45:00 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) 02:45:00 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000003f40000000000000000000000000000000000000005000000"], 0x8758) 02:45:00 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0x6, 0x1) getdents64(r1, &(0x7f0000000000)=""/43, 0x2b) openat(r1, &(0x7f0000000000)='./file0\x00', 0x40, 0x85) 02:45:00 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000080)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(0x0, r3, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)={0x2, 0x7, 0x4, 0x40000020, 0x1ff, {0x77359400}, {0x4, 0x8, 0x4, 0x0, 0x1, 0x2, "2ecb95f7"}, 0x1, 0x4, @fd, 0x7ff, 0x0, r7}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id'}}) r9 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r9, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) [ 1368.131921][T16985] binder: 16961:16985 ioctl c018620c 20000100 returned -1 [ 1368.158643][T16985] bridge0: port 1(bridge_slave_0) entered learning state 02:45:00 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f00000000c0)={0x4, 0x0, 0x4, 0x100, 0xe3, {r5, r6/1000+30000}, {0x5, 0x8, 0xfc, 0x1, 0x5c, 0xe4, "0a1a4d5d"}, 0xffffff6a, 0x4, @planes=&(0x7f0000000080)={0x3, 0x7, @userptr=0x7ff, 0x2d}, 0x6, 0x0, r7}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r8, 0x800443d2, &(0x7f0000000200)={0x4, &(0x7f0000000180)=[{}, {}, {@none}, {}]}) write$FUSE_NOTIFY_DELETE(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x33) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) fcntl$getflags(r1, 0x40a) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:45:00 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x30880, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) [ 1368.187384][T16985] binder: 16961:16985 ioctl c058560f 200002c0 returned -22 [ 1368.247214][T17009] binder: 17008:17009 ioctl c018620c 20000100 returned -1 [ 1368.284064][T17009] bridge0: port 1(bridge_slave_0) entered learning state [ 1368.328200][T17009] binder: 17008:17009 ioctl c0585611 200000c0 returned -22 [ 1368.365996][T17009] bridge0: port 1(bridge_slave_0) entered learning state 02:45:01 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000003f80000000000000000000000000000000000000005000000"], 0x8758) 02:45:01 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x100, 0x0, &(0x7f0000000440)) 02:45:01 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000000208010400000000000089b6af6b00040900010073797a310000000014000480080008400000008300000305000300110020000500030006000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40c0005) [ 1368.788953][T17323] binder: 17322:17323 ioctl c018620c 20000100 returned -1 02:45:01 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0x4f01) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)={0x30, r3, 0xc8ef0a4335e6829f, 0x0, 0x0, {0xf}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)={0x340, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x9, @loopback, 0x80000000}}}}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xba14}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2, @loopback, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8000, @dev={0xfe, 0x80, [], 0x23}, 0x500}}}}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7de1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf2b}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @remote, 0x200}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5c82a81, @empty, 0x2591}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'syz_tun\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'xfrm0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x43}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xa1, @local, 0x32}}}}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x80}, 0x4800) 02:45:01 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000ff0000000000000000000000000000000000000005000000"], 0x8758) [ 1368.958453][T17425] tipc: Started in network mode [ 1368.984974][T17425] tipc: Own node identity , cluster identity 4711 02:45:01 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) read$FUSE(r2, 0x0, 0x0) [ 1369.126655][T17505] bridge0: port 1(bridge_slave_0) entered learning state 02:45:02 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="ad3bac48981de41078320c2c51"]) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000500000000000000000000000000000000000005000000"], 0x8758) [ 1369.637158][T17739] fuse: Bad value for 'group_id' 02:45:02 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x604000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(0x0, r3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4e24, 0x0, 0x4e24, 0x8, 0x2, 0xa0, 0x80, 0x21, 0x0, r3}, {0x2, 0x3ff80000, 0x1, 0x20, 0x6, 0x30c6c45a, 0xff, 0x1}, {0xfffffffffffffff9, 0x0, 0x6, 0x6}, 0xfffffff9, 0x6e6bb7, 0x1, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x4d3, 0x6c}, 0x0, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x1, 0x1, 0x2, 0x9, 0x4, 0xffffff80}}, 0xe8) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800900010069706970000000002c000280060011000000000008000100", @ANYRES32=r8, @ANYBLOB="05000900000000000500edff00000000060010000000000008000a00", @ANYRES32=r6, @ANYBLOB], 0x64}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000180)={@loopback, r6}, 0x14) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:45:02 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x7ff, &(0x7f0000000440)) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) ioctl$SIOCX25GCALLUSERDATA(r4, 0x89e4, &(0x7f0000000240)={0x6a, "216278af52c71ea660f621acd477811162310614e5c543d4f26ecbdfc7e71c661b821211dec7ffce6e487cb3582cf41a1ba12cb353ae6b7ea57209b0aa370997813455622de476e4749420570705f8b87c2a993b609f8bc37fbecbbedbeea051429c29c89042c7f05a78e3dafd58a9871d75fdd5e385586cd3f47cdbbd876c91"}) mount(&(0x7f0000000000)=@sr0='/dev/sr0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='configfs\x00', 0x2000000, 0x0) 02:45:02 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) sendmsg$IPSET_CMD_TEST(r3, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0xb, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4c000) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x8000, 0x0) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r5, &(0x7f0000001440), 0xfffffc41) fadvise64(r5, 0x4000, 0x0, 0x4) r6 = syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00', @ANYRES16=r6], 0x2}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r6, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x101}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7f}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000000240)=0x4) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) [ 1370.042999][T17946] binder: 17945:17946 ioctl c018620c 20000100 returned -1 02:45:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000001000000000000000000000000000000000005000000"], 0x8758) [ 1370.111154][T17946] binder: 17945:17946 ioctl 89e4 20000240 returned -22 [ 1370.126364][T17949] binder: 17948:17949 ioctl c018620c 20000100 returned -1 02:45:02 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="02000100", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r7, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x9, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={r6, @in={{0x2, 0x4e21, @empty}}, 0x4, 0x9, 0x400, 0x5, 0xa0, 0x8, 0x6}, &(0x7f0000000000)=0x9c) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) [ 1370.309505][T18035] binder: 18013:18035 ioctl c018620c 20000100 returned -1 02:45:03 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x10040, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f00000002c0)={0x8, 0x2, 0x9, 0x1c9, &(0x7f0000000240)=[{}, {}]}) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f0000000000)) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r5 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r5, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) [ 1370.642200][T18260] binder: 18259:18260 ioctl c018620c 20000100 returned -1 [ 1370.674413][T18260] binder: 18259:18260 ioctl 8008af00 20000000 returned -22 02:45:03 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000002000000000000000000000000000000000005000000"], 0x8758) 02:45:03 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2080, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000802}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r3, 0x800, 0x5, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @broadcast}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x712}]}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048044}, 0x4040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000900010073797a30000000000900030073797a310000000014000200766500"/58], 0x40}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x4c, r5, 0x4, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x4c}}, 0x1) [ 1370.916898][T18366] IPVS: Error connecting to the multicast addr 02:45:03 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x9) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_mount_image$nfs(&(0x7f0000000080)='nfs\x00', &(0x7f0000000180)='./file0\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000240)="a97ce061a131a8377b797ccbc68b0dc47e86fbdf436be79b28bcb03ed949ac1ef698a9bae17c3c560929da314c52cbd3138d078087a74e62a30ba635f6aec4ebf1c97aef39d07f9309ed3b199409644baa87c54546c676d94327727b7f1e948d72b35c2e97c34dc4a8d9e8ee8a245bf2f3443429a92a21b52e8cf7b68d098230c8b546127f22bb15f0612126293b205fb0e3ee678dbcf5d8a61e30f1e5ae86a2b834dfef4ceb1bfe0dbd92bb1b10778b06010855cf21b48d30fe66299e8c", 0xbe, 0x6}], 0x40, &(0x7f0000000340)='#-&keyringkeyring\x00') r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000100)) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000380)={0x0, 0x9, 0x8}) dup2(r3, r4) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) ioctl$DRM_IOCTL_CONTROL(r6, 0x40086414, &(0x7f0000000000)={0x2, 0x80000001}) [ 1371.142475][T18449] nfs: Unknown parameter '#-&keyringkeyring' 02:45:03 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r2 = dup3(r0, r1, 0x80000) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr="51c1f6cc0e30496a32fc1309cc3b2d93", 0x7ff}, {0xa, 0x4e23, 0x60, @rand_addr="b25320be9fd987ea45471ce4f07784ee", 0x8}, 0x6, [0x3, 0x0, 0x4, 0x1ff, 0x7, 0x4, 0x4, 0x4]}, 0x5c) [ 1371.311597][T18566] bridge0: port 1(bridge_slave_0) entered learning state 02:45:04 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000003000000000000000000000000000000000005000000"], 0x8758) 02:45:04 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(0x0, r2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000000), 0x0, 0x4, 0x5, 0x3, 0xffffffff, 0xffffffe1, 0x6, {0x81, 0x2, 0x5, 0x7, 0x9, 0x5, 0xff, 0x8, 0x9, 0x6, 0x1, 0x9, 0xcc49, 0x81, "88cf856064f5c574ae12222754ade24e8fdd6afef33d75e7df57fa9d69aaed9f"}}) r6 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r6, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:04 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) [ 1371.564341][T18682] fuse: Bad value for 'user_id' [ 1371.632458][T18682] binder: 18679:18682 ioctl c018620c 20000100 returned -1 02:45:04 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200100, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 02:45:04 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000004000000000000000000000000000000000005000000"], 0x8758) 02:45:04 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000240)={0x80000000, 0x0, {0x2, 0x1, 0x0, 0x3, 0xffffffff}, 0x86e6}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r4 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) statx(r4, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:04 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="01f96f7bac3e98edfd58ef2801c3d45942880e1b44f4dc70163632d733e2d5a43a2efc4a73997bc24cee1cabecd78bd3d88bcc5f79cd45db23cd405af163d67f7152bd47e46144ba18b3e16bbecd9129290adfb7f8278b1c6eb5b39eb9bcc426ddbcf6ceda307c56d0cc1cfcba808fa8346375321de5b79fbd0417e09ccb358d80713122013712921f030c83d16b797140ce6d118ce3e4cd6bcf74d163d476bf27d3af5a7c737aa37992563c", 0xac}, {}], 0x2) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(0x0, r5, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(0x0, r7, 0x0) getresuid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000340)=0x0) mount$9p_tcp(&(0x7f00000001c0)='127.0.0.1\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x400, &(0x7f0000000380)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@noextend='noextend'}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@uid_eq={'uid', 0x3d, r5}}, {@dont_measure='dont_measure'}, {@fowner_lt={'fowner<', r7}}, {@uid_lt={'uid<', r8}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@obj_user={'obj_user', 0x3d, '/dev/rfkill\x00'}}, {@uid_gt={'uid>', r9}}]}}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) getpeername$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000180)=0x10) [ 1372.094643][T18797] binder: 18795:18797 ioctl c018620c 20000100 returned -1 [ 1372.111147][T18799] binder: 18798:18799 ioctl b704 20000340 returned -22 [ 1372.125834][T18797] binder: 18795:18797 ioctl 40605346 20000240 returned -22 [ 1372.146113][T18799] binder: 18798:18799 ioctl c018620c 20000100 returned -1 02:45:05 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x200a00, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 02:45:05 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000007000000000000000000000000000000000005000000"], 0x8758) 02:45:05 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x9, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}) 02:45:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x24, r6, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x4c, r6, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x81}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c040) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r7 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r7, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) [ 1372.690850][T19012] binder: 19010:19012 ioctl c018620c 20000100 returned -1 [ 1372.698940][T19011] binder: 19009:19011 ioctl c018620c 20000100 returned -1 [ 1372.722942][T19011] binder: 19009:19011 ioctl 890b 20000080 returned -22 02:45:05 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x101001, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000080)='fuse\x00', &(0x7f0000000240)="3433a2efdb2f0197f0019e0f5ca8ae930026c27b2b810ef1ad92a6df4153075800a2cdcce9f6886bc397a039e43e93fcc9077e2fa244b786684a634ad6d1aaf84ea66a100c41e1c147155b543ec5ed14ee47949f73f6b9663b388b981f6ad2f5e83c0e920a44042cb5adbdcc9d66738538eb0fb7a6407e2bddc3238e0fcc434da89bfb447279b4687d3d83dba2acd13974a5ba003bba1bbaebfb79602e6e86ae1a6e53d0aad2371c7eb2bee41f8aa44367ecddcfb4", 0xb5) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) ioctl$FBIOBLANK(r4, 0x4611, 0x4) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:05 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000009000000000000000000000000000000000005000000"], 0x8758) 02:45:05 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(r4, r3) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(r6, r5) r7 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(r8, r7) r9 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r9, 0xc018620c, &(0x7f0000000080)) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) [ 1373.163067][T19217] binder: 19216:19217 ioctl c018620c 20000100 returned -1 [ 1373.302188][T19233] binder: 19221:19233 ioctl c018620c 20000080 returned -1 [ 1373.322908][T19233] binder: 19221:19233 ioctl 5201 0 returned -22 02:45:06 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000000000)) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r5) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000100)) ioctl$TIOCSBRK(r7, 0x5427) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:06 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x84840, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 02:45:06 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000000000a000000000000000000000000000000000005000000"], 0x8758) 02:45:06 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x802) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x10000, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(r4, r3) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x4) r6 = dup2(0xffffffffffffffff, r5) r7 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(r8, r7) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5201) 02:45:06 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0xfffffffffffffec6) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000240)={0x80000000, 0x9, 0x4, 0x4000, 0xfffff800, {r2, r3/1000+30000}, {0x4, 0x8, 0x8, 0x46, 0x0, 0x2c, "024e8608"}, 0x4, 0x2, @planes=&(0x7f0000000180)={0xa49, 0x6, @mem_offset=0x9, 0x8}, 0x2, 0x0, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f00000002c0)=0x3ff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r5 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r5, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) [ 1373.910740][T19537] binder: 19536:19537 ioctl c018620c 20000100 returned -1 [ 1373.966388][T19537] bridge0: port 1(bridge_slave_0) entered learning state 02:45:06 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYRES64=r1, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x2) statx(r2, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:07 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000000000c000000000000000000000000000000000005000000"], 0x8758) 02:45:07 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_open_dev$binderN(&(0x7f0000001500)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001540)={{{@in6=@loopback, @in6=@local}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000001400)=0xfffffffffffffd99) r3 = dup2(r2, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000100)={0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000001200)={0x1fd, 0x3, 0x4000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) sysinfo(&(0x7f0000001240)=""/66) r5 = dup2(r4, r1) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) ioctl$DRM_IOCTL_GET_CAP(r6, 0xc010640c, &(0x7f00000012c0)={0x1}) ioctl$DRM_IOCTL_VERSION(r5, 0xc0406400, &(0x7f0000000000)={0x88, 0x7f, 0xaab, 0xdc, &(0x7f0000000080)=""/220, 0x1000, &(0x7f0000000180)=""/4096, 0x7b, &(0x7f0000001180)=""/123}) socket$unix(0x1, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000001440), &(0x7f00000014c0)=0x68) [ 1374.354968][T19743] bridge0: port 1(bridge_slave_0) entered learning state [ 1374.375903][T19743] fuse: Unknown parameter '' [ 1374.503836][T19810] binder: 19773:19810 ioctl c0406400 20000000 returned -22 02:45:07 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) set_mempolicy(0x4000, &(0x7f0000000180)=0x3d0, 0x8) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0x6, 0x1) getdents64(r1, &(0x7f0000000000)=""/43, 0x2b) r2 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) lseek(r2, 0x6, 0x1) getdents64(r2, &(0x7f0000000000)=""/43, 0x2b) statx(r2, &(0x7f0000000280)='./file0\x00', 0x3ffe, 0x100, &(0x7f00000002c0)) 02:45:07 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x210400, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000080)=0x1, 0x4) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000000c0)={0xfffc, 0x9, 0x0, 0x7fff, 0x7f, 0xea}) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) 02:45:07 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000000050c000000000000000000000000000000000005000000"], 0x8758) [ 1374.889479][T19962] binder: 19954:19962 ioctl c018620c 20000100 returned -1 [ 1374.939951][T19962] binder: 19954:19962 ioctl 560a 200000c0 returned -22 02:45:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000000)={0x9, 0x2}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="8c59"]) r4 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r4, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f0000000180)=0x4) 02:45:07 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000000000e000000000000000000000000000000000005000000"], 0x8758) 02:45:07 executing program 1: ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) [ 1375.237912][T20164] binder: 20161:20164 ioctl c018620c 20000100 returned -1 [ 1375.285176][T20164] binder: 20161:20164 ioctl 40087705 20000000 returned -22 02:45:08 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x200000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 02:45:08 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x200800, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:08 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x28800, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 02:45:08 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f00000000c0)={0x4, 0x0, 0x4, 0x100, 0xe3, {r5, r6/1000+30000}, {0x5, 0x8, 0xfc, 0x1, 0x5c, 0xe4, "0a1a4d5d"}, 0xffffff6a, 0x4, @planes=&(0x7f0000000080)={0x3, 0x7, @userptr=0x7ff, 0x2d}, 0x6, 0x0, r7}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r8, 0x800443d2, &(0x7f0000000200)={0x4, &(0x7f0000000180)=[{}, {}, {@none}, {}]}) write$FUSE_NOTIFY_DELETE(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x33) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) fcntl$getflags(r1, 0x40a) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:45:08 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000000000f000000000000000000000000000000000005000000"], 0x8758) 02:45:08 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0x6, 0x1) getdents64(r1, &(0x7f0000000000)=""/43, 0x2b) r2 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) lseek(r2, 0x6, 0x1) getdents64(r2, &(0x7f0000000000)=""/43, 0x2b) renameat(r1, &(0x7f0000000080)='./file2\x00', r2, &(0x7f0000000100)='./file0\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303026bd86ded31a9b30303030303030303030303034303041302c75736572", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r3 = open$dir(&(0x7f0000000000)='./file1\x00', 0x0, 0x81) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) statx(r3, &(0x7f0000000040)='./file1\x00', 0x100, 0x100, &(0x7f00000002c0)) [ 1376.024051][T20382] binder: 20380:20382 ioctl c018620c 20000100 returned -1 [ 1376.059457][T20382] bridge0: port 1(bridge_slave_0) entered learning state [ 1376.073982][T20387] fuse: Bad value for 'rootmode' [ 1376.096719][T20382] binder: 20380:20382 ioctl c0585611 200000c0 returned -22 [ 1376.140255][T20382] bridge0: port 1(bridge_slave_0) entered learning state 02:45:09 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) set_robust_list(&(0x7f0000000340)={&(0x7f0000000140)={&(0x7f0000000100)}, 0x1ff, &(0x7f0000000300)={&(0x7f00000002c0)}}, 0x18) lseek(r2, 0x6, 0x1) getdents64(r2, &(0x7f0000000000)=""/43, 0x2b) move_mount(r2, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x44) statx(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)) 02:45:09 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x20001, &(0x7f0000000540)=ANY=[@ANYBLOB="66647dd51a0cc597ae21fb8ff02794a36dcd71a1f20eb0a138e574b8d826ed51e635202e0ccdd7c233ceb2790401c4ca795a704a1b55ac7621e280b19db126367aba36780676504e0fa0ee1e24aec2cdaa2ec9b34c80530cca0a0ad77ebda86ef68b38ef9f1937791eb3f1e4bb5ad30a4b0800000000000000d594c7be03133952b84f7d0ae077655140b39cb9d0865ebc2a762e01e78afc9047ad324cea23e3b511039144e691a8489cd5ae7667475f160d5c81b7e3c0ed72aeaf1ad170aa83335b06aa95ed2e760b8e9160e0b19979facfefa58745572b103d00c9d3d6c595904d4950d9ea45387e0ca0e794b30f2d37f8823c86d64188df0cc0b95a0d84baf127738aafa50c6bab2c37f5e71f6b90945526", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040200,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4000, 0x7ff, &(0x7f0000000b80)) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) fcntl$notify(r2, 0x402, 0x20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000000a80)=[{{&(0x7f0000000140)=@pptp, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)=""/245, 0xfdec}], 0x1, &(0x7f0000000b00)=""/84, 0x54}, 0x6}, {{&(0x7f0000000780)=@generic, 0x80, &(0x7f0000000740)=[{&(0x7f0000000800)=""/115, 0x73}, {&(0x7f0000000880)=""/130, 0x82}, {&(0x7f0000000940)=""/5, 0x5}, {&(0x7f0000000700)=""/1}], 0x3, &(0x7f00000009c0)=""/165, 0xa5}, 0x2}], 0x2, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@local, 0x1d67, 0x0, 0x0, 0xe, 0xe25, 0x9}, 0x20) [ 1376.503125][T20494] bridge0: port 1(bridge_slave_0) entered learning state 02:45:09 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) set_robust_list(&(0x7f0000000340)={&(0x7f0000000140)={&(0x7f0000000100)}, 0x1ff, &(0x7f0000000300)={&(0x7f00000002c0)}}, 0x18) lseek(r2, 0x6, 0x1) getdents64(r2, &(0x7f0000000000)=""/43, 0x2b) move_mount(r2, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x44) statx(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)) 02:45:09 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000010000000000000000000000000000000000005000000"], 0x8758) 02:45:09 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02b1ffe9a590b5b2e7aaec5e6dfacc5c789c8efaa0b805da2f54c78491641e6addd6d081dd87d1c9bcd6e4fd3b763234684098227ae68adac6b817ad647e71b4a47a351c3e96ceb586cda2df6be4336b00045946daba1a6ffd48ed086e55251ced75b049a4749d657b4999652bf5d6e69c3af135329b59847993453aa6af905d7940bdc0ecc97c7bf4a09ef74a74ced1a1b033f645f2ab26a0cac9ad2d829d8db27a5ff69041dca1b55aea2c017dd91df722f3cb2a7b08ab57", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000001900)={0x4, 0xfffffff9, 0x4, r1, 0x0, &(0x7f00000003c0)={0x980928, 0x100, [], @value=0x3f}}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000019c0)={&(0x7f0000001940)=[0x5, 0x1], &(0x7f0000001980)=[0x0, 0x0, 0x0], 0x2, 0x9, 0xbbbbbbbb}) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000080)='./file0\x00', 0xdf8d, 0x7, &(0x7f0000001840)=[{&(0x7f0000000540)="d30db3eddccffed9ec8a645c162aaf0e9448374115f1bd306af6c23bfb310cfc352dd14da0e717624fc76991a10121c38750ae914055cdf2e30f5c9304feb83224c75691dbcb5c98ca4741248ec2e76b3af6406b74ff836bd3eecfca088bcfb1689cb5fff7f2d939b2751faaddd869d175f000e8f0f1298a231e0a9b6494b9edddd13c61704b82d5bf83967494e6d242e4193dbc71e2bf74bb5ec119f6239c76693ad2655312147a32ec15b1b7e62e166c8b85bff3e5f5855b9c52408930eb409a4db916d92f3f972d865e36ce02c22f690873ce3a", 0xd5, 0x2}, {&(0x7f0000000100)="6f4b129f8c2d7f2962ce20031f622716e70e55e6693de8e3a325241e71863e12211b661f84", 0x25}, {&(0x7f0000000640)="1a0954fdef6a81a11984369f292698c76b58fde569990ed113b33070e7d00062388200408bdd85f2a16d27ad26b96fff47c2876b8227637298e182bc65f271bd9856ebd0c50bbb65847877cf1e6eb062b6a54302aa45d6705968a4b3c2e42497410d47c74cb27d873902b7d0a00dd80351b51982edda946489f0f2b1e8d997ba3fd605b587c302b4b9394ad9ef6bec3bdb9ab3ea3c187736604ef6148cf3c04745851b97fdf45f12a99ea312fd768cfa040db3cdc8654aac87203000f510238c5310231fe3", 0xc5, 0x3ff}, {&(0x7f0000000140)="09fab29c83a623d770175585f5e97e83fee154b01633bed576087672caba1b", 0x1f, 0x1f}, {&(0x7f0000000740)="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", 0x1000, 0x3f}, {&(0x7f0000000180)="21530153cb5899c53f538350eaccfb66f77c859fbe703326835f199515ab", 0x1e, 0xaf4c}, {&(0x7f0000001740)="c524c743a65ccddc0cfdd921e7bf9751c946953cbed353f5046160f79e310f4c71867d8e3c34d6038a82a591308ee12a70b4d657104ab551f1e20ad5ffa2568b308ca9678c694c1826a938b3d0906ae8babae07957d4446a295edfad9750b85266cd57c5b2b2b435a403a75c7d3c9b22ed195867ec68b92cdd56333e459a5fafd9af1fe3aa62d4d8ba98bda3e3d71ff07d1f7d56fd6b42254ad09e903bc166e84c79e81b178ed2be1728c94e37ea376ae22305648fadd2d7335476aed7c9fb37eb2d97a3e7", 0xc5, 0x1}], 0x3040d0, &(0x7f0000000380)={[{@huge_never={'huge=never', 0x3d, '/dev/fuse\x00'}}, {@nr_blocks={'nr_blocks', 0x3d, [0x6d, 0x36, 0x70, 0x70, 0x36, 0x74]}}]}) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:09 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) set_robust_list(&(0x7f0000000340)={&(0x7f0000000140)={&(0x7f0000000100)}, 0x1ff, &(0x7f0000000300)={&(0x7f00000002c0)}}, 0x18) lseek(r2, 0x6, 0x1) getdents64(r2, &(0x7f0000000000)=""/43, 0x2b) move_mount(r2, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x44) statx(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)) [ 1376.947379][T20604] fuse: Unknown parameter '±ÿ饵²çªì^múÌ\xœŽú ¸Ú/TÇ„‘djÝÖÐ݇ÑɼÖäý;v24h@˜"zæŠÚƸ­d~q´¤z5>–ε†Í¢ßkä3k' 02:45:09 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1d33c293c22a5fa75778ba0fe18b050a710000a542d55900000000000000", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x820, 0x1) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:10 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000510000000000000000000000000000000000005000000"], 0x8758) 02:45:10 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) set_robust_list(&(0x7f0000000340)={&(0x7f0000000140)={&(0x7f0000000100)}, 0x1ff, &(0x7f0000000300)={&(0x7f00000002c0)}}, 0x18) lseek(r1, 0x6, 0x1) getdents64(r1, &(0x7f0000000000)=""/43, 0x2b) move_mount(r1, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x44) [ 1377.426622][T20717] fuse: Unknown parameter '3“Â*_§Wxºá‹ [ 1377.426622][T20717] q' 02:45:10 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) set_robust_list(&(0x7f0000000340)={&(0x7f0000000140)={&(0x7f0000000100)}, 0x1ff, &(0x7f0000000300)={&(0x7f00000002c0)}}, 0x18) lseek(r1, 0x6, 0x1) move_mount(r1, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x44) 02:45:10 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) set_robust_list(&(0x7f0000000340)={&(0x7f0000000140)={&(0x7f0000000100)}, 0x1ff, &(0x7f0000000300)={&(0x7f00000002c0)}}, 0x18) move_mount(r1, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x44) 02:45:10 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000a10000000000000000000000000000000000005000000"], 0x8758) 02:45:10 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000940)='/dev/video1\x00', 0x2, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={0x0, @can={0x1d, 0x0}, @vsock={0x28, 0x0, 0xffffffff, @my=0x1}, @ipx={0x4, 0x4, 0x1000, "fb81068cfca4", 0x3}, 0x5, 0x0, 0x0, 0x0, 0xffff, &(0x7f0000000180)='bond_slave_1\x00', 0x6, 0x0, 0x101}) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="100325bd7000aeea3a84a33da68808000b0076a3c31ea2144287d2f7834393e1f13052298360412ce63e493a2905c79710bd7e67ecdffbfb8f1e20c3a6", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) r7 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r7, &(0x7f0000000540)='./file0\x00', 0x4000, 0x400, &(0x7f0000000440)) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(0x0, r9, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000900)={&(0x7f0000000380), 0xc, &(0x7f00000003c0)={&(0x7f0000000a00)=@expire={0x3b4, 0x18, 0x20, 0x70bd26, 0x25dfdbff, {{{@in=@local, @in6=@ipv4={[], [], @remote}, 0x4e24, 0x1, 0x4e24, 0x9, 0xa, 0x100, 0xa0, 0x4, 0x0, r9}, {@in=@loopback, 0x4d2, 0x3c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x10001, 0x2, 0x5, 0x4, 0x100, 0x100000000, 0x120000000000, 0x6}, {0x2, 0x2, 0x0, 0xa0}, {0x2, 0x101, 0x80}, 0x70bd27, 0x0, 0x2, 0x2, 0x4, 0x8}, 0x8}, [@sec_ctx={0x3a, 0x8, {0x36, 0x8, 0x1, 0x97, 0x2e, "396f0bf729d3b023470386b2f7ef6715969605d6a64fd50e521bdf525e243569af5dd650fa2cca57b0123fc37afb"}}, @offload={0xc, 0x1c, {0x0, 0x1}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7}, @replay_val={0x10, 0xa, {0x70bd2c, 0x70bd2d, 0x4}}, @etimer_thresh={0x8, 0xc, 0xffff}, @migrate={0x134, 0x11, [{@in=@remote, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in=@broadcast, @in=@local, 0x5f, 0xdef48f1db9dd2653, 0x0, 0x34ff, 0xa, 0xa}, {@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@loopback, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@ipv4={[], [], @loopback}, 0x50, 0x4, 0x0, 0x3500, 0xa, 0x2}, {@in6=@ipv4={[], [], @loopback}, @in=@rand_addr=0x6, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, 0xff, 0x1, 0x0, 0x3503, 0x2, 0x2}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast1, @in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6=@mcast1, 0x2b, 0x1, 0x0, 0x3502, 0x2, 0x2}]}, @algo_crypt={0x4b, 0x2, {{'ctr-blowfish-asm\x00'}, 0x18, "046c9b"}}, @etimer_thresh={0x8, 0xc, 0x10001}, @algo_auth={0xcc, 0x1, {{'sha256-avx\x00'}, 0x420, "da8d22be65aaf8cb153be1a8e66e1cb5e20a29f904109bc2c6739e14e5f22ef36fcc4952de5987a9dba0d618a783a164db85b5cd1891bf6757ff8aa30f0066247b3f0730149af4b8b513cc6265011d906d5f7982df7a6f7f6930a239ca037e03dc808b501519333db007fb5534daa0c85222af636c4d669c029cdf5dd9d3c9f83d96f3bf"}}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x20048800}, 0x81) 02:45:10 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) move_mount(r1, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x44) [ 1378.059901][T20829] binder: 20827:20829 ioctl c018620c 20000100 returned -1 [ 1378.107302][T20829] bridge0: port 1(bridge_slave_0) entered learning state 02:45:10 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x44) 02:45:11 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x7]}, 0x8, 0x100000) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) sendmsg$unix(r2, &(0x7f0000000580)={&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000080)=[{&(0x7f00000002c0)="5a008463b8b1e43b8a2a92fee6b7afa958813011bde1cd64bd31600d21287b1908099861fecd4f0f789750c3dd971d11232c24f14201be758323530f761ec857dd06abd098f03a13dbc9c28d5a7b72f7ab410ac27a9a64f263ef12880d2f38d16c2cce035353702c264ce12efb7b96821eaebd10b2770e62e2d74ef851ad73f5c00c66f2010cead377a19b84fd", 0x8d}, {&(0x7f0000000380)="9bed72884856faf66f71ae01c0df724a1fae8bc42d1f65618a7c7d7d1b9fd998e7048b9195c9b64117bfa828273a9549979b526219fb8a326a2816411778df4ec3ba4ceb884e4f8e4451530434640cfeaaf907e6353d4008140cef331f9367a8156f947f6e4b737cc8c22564e4bbbbdc2f7a166f8872b5ef484c46", 0x7b}], 0x2, &(0x7f0000000540)=[@rights={{0x30, 0x1, 0x1, [r3, r0, r6, r5, r6, r0, r0, r0]}}], 0x30, 0x4}, 0x8000) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r7, 0x0, 0x0) lseek(r7, 0x6, 0x1) getdents64(r7, &(0x7f0000000000)=""/43, 0x2b) statx(r7, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:11 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x44) 02:45:11 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000018000000000000000000000000000000000005000000"], 0x8758) [ 1378.589916][T20942] bridge0: port 1(bridge_slave_0) entered learning state [ 1378.630185][T20942] bridge0: port 1(bridge_slave_0) entered learning state 02:45:11 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x44) [ 1378.676889][T20942] bridge0: port 1(bridge_slave_0) entered learning state 02:45:11 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x44) 02:45:11 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c303030303030043017309b06427030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB="2c6769643d5c6194b186811d01ff1ae04b683d02943c26140d3a4b91e91663907e0359352b3338770987b9cfadf773f74a8d92c1a751894a959bf4a15c92e87c4b54080016e200000000551e746e00000000", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) lseek(r1, 0x6, 0x1) getdents64(r1, &(0x7f0000000000)=""/43, 0x2b) r5 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) lseek(r5, 0x6, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000240)=0x4, 0x1) getdents64(r5, &(0x7f0000000000)=""/43, 0x2b) statx(r5, &(0x7f0000000180)='./file0\x00', 0x100, 0x7ff, &(0x7f0000000440)) 02:45:11 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000218000000000000000000000000000000000005000000"], 0x8758) 02:45:11 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x44) [ 1379.123322][T21058] fuse: Unknown parameter '00000000›Bp00' [ 1379.162922][T21058] binder: 21056:21058 ioctl c018620c 20000100 returned -1 02:45:12 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x44) 02:45:12 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="20002abd7000ffdbdf2500000000080002000500000008000700e000000108000c00020000000800070000000002"], 0x3}, 0x1, 0x0, 0x0, 0x84}, 0x0) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000100)) getsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000240)={@dev, @loopback}, &(0x7f0000000280)=0x8) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f00000003c0)=ANY=[@ANYBLOB="06000000000001000000000000000000000000000000000000000000b3fa90e026a309f125291747977459b1f86ba68564b7c2117271915ec1cf2bf17f788c93f714f510dfe35aac1b29e36392a74848b635c97f344c103507edd0c3174bc9ed4cbbd82e5e5ee0a5386f8e3b7234f2ba5e865385487555ff3bcb207ffc7be6e16ed2366cbe66fe7796b721d6db71a763ffb7adf4719c66de73ff8cd331c0e722a3e21959e1fb8f11c55c222e2f6be64ba4fcbbaa52b2a88b7a504777fd28de342c540d57c83d8314ba27262274"]) r8 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r8, 0xc018620c, &(0x7f0000000100)) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x440000, 0x0) ioctl$TUNSETSTEERINGEBPF(r8, 0x800454e0, &(0x7f0000000080)=r9) 02:45:12 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x44) 02:45:12 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000a1c000000000000000000000000000000000005000000"], 0x8758) [ 1379.683630][T21169] binder: BINDER_SET_CONTEXT_MGR already set [ 1379.720214][T21169] binder: 21168:21169 ioctl 40046207 0 returned -16 02:45:12 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) r6 = getegid() getgroups(0x1, &(0x7f0000000540)=[r6]) ioctl$TUNSETGROUP(r5, 0x400454ce, r6) r7 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, r4, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffffffff}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x4044010}, 0x24004841) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x100, 0x109, &(0x7f0000000440)) 02:45:12 executing program 1: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x44) 02:45:12 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x280, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) write$P9_RCREATE(r3, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x8, 0x3, 0x5}, 0x9}}, 0x18) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x20040, 0x0) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, &(0x7f0000000080)) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) [ 1379.950700][T21280] fuse: Bad value for 'rootmode' [ 1380.025290][T21280] binder: 21269:21280 ioctl c018620c 20000100 returned -1 02:45:12 executing program 1: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x44) [ 1380.102086][T21284] binder: 21283:21284 ioctl c018620c 20000100 returned -1 02:45:13 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(0x0, r2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}}) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000000000)='./file0\x00', 0x0) statx(r3, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:13 executing program 1: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x44) 02:45:13 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000020000000000000000000000000000000000005000000"], 0x8758) 02:45:13 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x84000, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x6aa082, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) accept4$tipc(r0, &(0x7f0000000080)=@name, &(0x7f00000000c0)=0x10, 0x1000) r7 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) r9 = dup2(r8, r7) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r9, 0xc018620c, &(0x7f0000000100)) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000080)) [ 1380.585790][T21512] binder: 21496:21512 ioctl c018620c 20000100 returned -1 02:45:13 executing program 1: mkdir(0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x44) 02:45:13 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) listxattr(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000240)=""/151, 0x97) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:13 executing program 1: mkdir(0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x44) 02:45:13 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x420b43, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x9, 0x222500) 02:45:13 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000a20000000000000000000000000000000000005000000"], 0x8758) 02:45:13 executing program 1: mkdir(0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x44) 02:45:13 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0x5, &(0x7f00000015c0)=[{&(0x7f0000000240)="0d77b66b085dfae66f72f64bf89b693756e4dda3c41c7ae09b7a9ee71ad77789113ea3163fe59417f1b1ca96cbf92c3f2fc203fa23dbfe6830f20c1b0dc1f7232282b7a5a05dfe27fb4aef122a19f9e040ff928b86c561c9d0451cebea61dbf582b6bebcd4ed6a61d093739e5a601a4e0a0e4a27b8c9682c1c399bc2bce975ee5dad39ed583dc6b607b83deb348cd70f62ad23cb67d75f233e93d74f9693f66b3786875c1615155e6936489ae84370560c0ed4cf78e79b87b46195aea186c23cc8a2ad2630c7a70a9983cab360337575537339da3dd7fabedf22a813cb3fc6fc9bd6aaa282335b0f4dd9e5880d589e1df32376", 0xf3, 0x7}, {&(0x7f0000000340)="4d26a2e94aada352b8a6446026763cae3bfa8111317598e8a19d35a1d414f51a1fff91a25fddce54461b8b99180e198108179e7d546a70005a6c31e87dde1b86d0fcb6ee7c", 0x45}, {&(0x7f0000000540)="4dd39c939fd19b55c3167b9af289e54eb2877be7bee57424af7d5511d6f46646d10ceac6edef647b1181edaea7e0c516d0c5c4c30020a8fcb74b2110a6f91d224e839f0ce4268d93852da988b3d1a65c8e84fe73ea1132193be0df55392431226a1c8de63adc1e32090488813a6b", 0x6e, 0x20}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f0000000180)="8f", 0x1, 0x5aa}], 0x40, &(0x7f0000001640)={[{@nolazytime='nolazytime'}, {@uqnoenforce='uqnoenforce'}, {@logbsize={'logbsize', 0x3d, [0x25, 0x37, 0x44, 0x31, 0x25, 0x31, 0x38]}}, {@quota='quota'}, {@filestreams='filestreams'}, {@swidth={'swidth', 0x3d, 0x81}}], [{@context={'context', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, 'fuse\x00'}}, {@permit_directio='permit_directio'}, {@smackfstransmute={'smackfstransmute', 0x3d, 'fuse\x00'}}]}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030300f30303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:14 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(0x0, 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x44) 02:45:14 executing program 0: ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000100)) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000003c0)={0x1, 0xe, 0x4, 0x2, 0x9, {}, {0x3, 0x2, 0x20, 0x8, 0x0, 0x3f, "f9da4e04"}, 0x1, 0x4, @fd, 0x7, 0x0, r0}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000440)=[r2, r3, r4], 0x3) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) sendmsg$sock(r5, &(0x7f0000000340)={&(0x7f0000000140)=@hci={0x1f, 0x4, 0x2}, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)="044512a2400db1712d51e5016a220bdfe3db71fa05fe9e89f6024e76f7241d46a674b0fdfecbd95786bb8f6f868a345c7df902411b539906fc0e1347efa9e483adb8b158f175e3000ec41f93fe0725b4cce75ef64eb5189771b9a40fd1def42600bc15593dde914cac6f738913a874280165eaae3dee28181a67df82e590bece25c9c5b86a92b45b7b2014fcb3678177308194dbbc944099f6b655df3d81ef63d9de005b8c522d6f6810c361760dce6478a3c5c2", 0xb4}], 0x1, &(0x7f00000002c0)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xdc}}, @txtime={{0x18, 0x1, 0x3d, 0x8000}}, @mark={{0x14, 0x1, 0x24, 0x80000000}}], 0x78}, 0x2000c804) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r7, 0x2) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5201) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x681, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r8, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 1381.440420][T21922] fuse: Bad value for 'rootmode' [ 1381.550170][T21962] bridge0: port 1(bridge_slave_0) entered learning state [ 1381.593326][T21962] bridge0: port 1(bridge_slave_0) entered learning state 02:45:14 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) r2 = getpid() ptrace(0x10, r2) ptrace$getsig(0x2, r2, 0xffffffffff600043, &(0x7f0000000300)) getpgrp(r2) 02:45:14 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(0x0, 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x44) 02:45:14 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(0x0, 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x44) 02:45:14 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000030000000000000000000000000000000000005000000"], 0x8758) 02:45:14 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) 02:45:14 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="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"]) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:14 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x44) [ 1382.401189][T22255] fuse: Bad value for 'group_id' 02:45:15 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x44) 02:45:15 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="06003d01b4968a62d768f3317af9aafa1500", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="0c02f0677a4f75705f69643d", @ANYRESDEC=0x0, @ANYBLOB="2e00aaa2d4e94ccb173b0168b1dc6a681af6c79b9b5660bd26804769a121b87c5a59e2f05c1980e9b67b514c467af7845c20dc4310e5037ed56eebe9630acab3f05b3f6a5401c7520e37ae018796aa6e68bf94c8ebf81a2bd7dae45a17eec918727db6ba8a5d9714243a7dfc2b91cb3862b313221665ac8d9451f43147187360e1e66d4b58291cb8d920af19e414440a3faf603cd718962f583b"]) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x6ff, &(0x7f0000000440)) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 02:45:15 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x44) [ 1382.720050][T22361] fuse: Unknown parameter '' 02:45:15 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000040000000000000000000000000000000000005000000"], 0x8758) 02:45:15 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x44) 02:45:15 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x44) 02:45:15 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f0000000240)=""/151, &(0x7f0000000080)=0x97) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "130bc317c29ac753", "d65dc4bef61eb8e1ce6696df02e1a86fe55157d769da04f7406ddfeec14be6c7", "9c1af1a5", "0cd6bbe63d4102db"}, 0x38) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r5 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r5, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:16 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000044000000000000000000000000000000000005000000"], 0x8758) 02:45:16 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x44) 02:45:16 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) 02:45:16 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x20, 0x140d, 0x400, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:16 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) [ 1383.811726][T22590] binder: 22589:22590 ioctl c018620c 20000100 returned -1 02:45:16 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000544000000000000000000000000000000000005000000"], 0x8758) 02:45:16 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 02:45:16 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) 02:45:16 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 02:45:17 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000480000000000000000000000000000000000000005000000"], 0x8758) 02:45:17 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r0, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:17 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000048000000000000000000000000000000000005000000"], 0x8758) 02:45:17 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x20, 0x3, &(0x7f0000000380)=[{&(0x7f0000000240)="b95753644a9ea72281de83238da62f7bdb28f5045bc9a385340790ba055381b507ed97c673e97f02d3bf48305c83267a420b9634b69a297b5b110c39d425affa14316297ffede5d109437d9ff061403ad94560284079305e67435325add6175e26cd308f6f9b4f539af16052d2bcdb25fd6a80c94a2ac871fd6bb8acded6", 0x7e, 0xebcc}, {&(0x7f00000002c0)="323ebfbe7bc1b704372103ec495763aa1e77162890044436f53a0780f9e821092fb177a3923bcae005c977615d2f40bbc53d041bdd38f23c80ffb988fece7229070de9ab5d8bd5305077d0590c651225ea0293c2d187cce7d7ac45147a2d4fd43bfd6af4b621b0632f201e86ff45ac852af3274b5b6b57a25dcf5b7ad28a58e31577453ea2eef015ac3b44312a15700ae866ff3b29e017", 0x97, 0x4}, {&(0x7f0000000180)="bea75f698221baeb5c593041ed6b7d990eecf8f5fd2c227ba7fa68cb42", 0x1d, 0x10000}], 0x800, 0x0) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:17 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000480000000000000000000000000000000000000005000000"], 0x8758) [ 1385.111002][T23023] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. 02:45:17 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000a54000000000000000000000000000000000005000000"], 0x8758) 02:45:18 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000480000000000000000000000000000000000000005000000"], 0x8758) 02:45:18 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x1, @rand_addr="8c83494917c08f6e7f4ef389841fe96f", 0x5}]}, &(0x7f0000000240)=0x10) r4 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r4, &(0x7f0000000040)='./file0\x00', 0x4000, 0x2, &(0x7f0000000440)) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) [ 1385.655460][T23236] binder: 23234:23236 ioctl c018620c 20000100 returned -1 02:45:18 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000278000000000000000000000000000000000005000000"], 0x8758) 02:45:18 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000300000000000000000000000000000000000000005000000"], 0x8758) 02:45:18 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) finit_module(r1, &(0x7f0000000000)='user_id', 0x1) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:19 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000300000000000000000000000000000000000000005000000"], 0x8758) 02:45:19 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000284000000000000000000000000000000000005000000"], 0x8758) 02:45:19 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x10040, 0x0) write$FUSE_STATFS(r1, &(0x7f0000000440)={0x60, 0x0, 0x1, {{0xd4, 0x0, 0x2, 0xa5, 0x200, 0x8, 0x7, 0x5}}}, 0x60) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0x10000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000340)={r3}) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) ioctl$KVM_GET_TSC_KHZ(r6, 0xaea3) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x45000) statx(r7, &(0x7f0000000080)='./file0\x00', 0x4000, 0x800, &(0x7f0000000240)) [ 1386.567908][T23751] bridge0: port 1(bridge_slave_0) entered learning state 02:45:19 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000300000000000000000000000000000000000000005000000"], 0x8758) [ 1386.616979][T23751] binder: 23707:23751 ioctl c018620c 20000100 returned -1 [ 1386.693713][T23751] binder: 23707:23751 ioctl aea3 0 returned -22 02:45:19 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000288000000000000000000000000000000000005000000"], 0x8758) 02:45:19 executing program 1 (fault-call:2 fault-nth:0): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) 02:45:19 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2202, 0x0) bind$xdp(r4, &(0x7f0000000080)={0x2c, 0x4, 0x0, 0x2b, r5}, 0x10) [ 1387.115252][T23966] FAULT_INJECTION: forcing a failure. [ 1387.115252][T23966] name failslab, interval 1, probability 0, space 0, times 0 [ 1387.170670][T23966] CPU: 1 PID: 23966 Comm: syz-executor.1 Not tainted 5.6.0-rc3-next-20200228-syzkaller #0 [ 1387.180610][T23966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1387.190677][T23966] Call Trace: [ 1387.194051][T23966] dump_stack+0x188/0x20d [ 1387.198407][T23966] should_fail.cold+0x5/0x14 [ 1387.203014][T23966] ? lock_downgrade+0x7f0/0x7f0 [ 1387.207872][T23966] ? setup_fault_attr+0x1e0/0x1e0 [ 1387.212920][T23966] should_failslab+0x5/0xf [ 1387.217345][T23966] kmem_cache_alloc+0x29b/0x730 [ 1387.222200][T23966] ? apparmor_cred_prepare+0x760/0x760 [ 1387.227685][T23966] getname_flags+0xd2/0x5b0 [ 1387.232197][T23966] ? security_capable+0x8e/0xc0 [ 1387.237067][T23966] user_path_at_empty+0x2a/0x50 [ 1387.241938][T23966] __x64_sys_move_mount+0x259/0x430 [ 1387.247148][T23966] ? __ia32_sys_fsmount+0xbc0/0xbc0 [ 1387.252351][T23966] ? ksys_write+0x19f/0x250 [ 1387.256863][T23966] ? __ia32_sys_read+0xb0/0xb0 [ 1387.261636][T23966] ? __ia32_sys_clock_settime+0x260/0x260 [ 1387.267364][T23966] ? trace_hardirqs_off_caller+0x55/0x230 [ 1387.273111][T23966] do_syscall_64+0xf6/0x790 [ 1387.277631][T23966] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1387.283550][T23966] RIP: 0033:0x45c849 [ 1387.287460][T23966] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1387.307095][T23966] RSP: 002b:00007fd9a5cabc78 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 1387.316831][T23966] RAX: ffffffffffffffda RBX: 00007fd9a5cac6d4 RCX: 000000000045c849 [ 1387.324803][T23966] RDX: ffffffffffffffff RSI: 0000000020000080 RDI: 0000000000000003 [ 1387.332776][T23966] RBP: 000000000076bf00 R08: 0000000000000044 R09: 0000000000000000 [ 1387.340747][T23966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1387.348720][T23966] R13: 0000000000000755 R14: 00000000004ca115 R15: 0000000000000000 02:45:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000788000000000000000000000000000000000005000000"], 0x8758) 02:45:20 executing program 1 (fault-call:2 fault-nth:1): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) 02:45:20 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000100)) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f00000027c0)=r0) lseek(r1, 0x6, 0x1) getdents64(r1, &(0x7f0000000000)=""/43, 0x2b) statx(r1, &(0x7f0000000080)='./file0\x00', 0x4000, 0x20, &(0x7f0000000440)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) recvmsg$kcm(r2, &(0x7f0000002780)={&(0x7f0000000240)=@isdn, 0x80, &(0x7f0000001700)=[{&(0x7f0000002800)=""/70, 0x46}, {&(0x7f0000002880)=""/206, 0xce}, {&(0x7f0000000180)=""/48, 0x30}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000540)=""/172, 0xac}], 0x6, &(0x7f0000001780)=""/4096, 0x1000}, 0x2160) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) [ 1387.616730][T24077] FAULT_INJECTION: forcing a failure. [ 1387.616730][T24077] name failslab, interval 1, probability 0, space 0, times 0 [ 1387.654555][T24077] CPU: 0 PID: 24077 Comm: syz-executor.1 Not tainted 5.6.0-rc3-next-20200228-syzkaller #0 [ 1387.664505][T24077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1387.674575][T24077] Call Trace: [ 1387.677886][T24077] dump_stack+0x188/0x20d [ 1387.682236][T24077] should_fail.cold+0x5/0x14 [ 1387.686837][T24077] ? lock_downgrade+0x7f0/0x7f0 [ 1387.691693][T24077] ? setup_fault_attr+0x1e0/0x1e0 [ 1387.696741][T24077] should_failslab+0x5/0xf [ 1387.701163][T24077] kmem_cache_alloc+0x29b/0x730 [ 1387.706038][T24077] getname_flags+0xd2/0x5b0 [ 1387.710554][T24077] ? security_capable+0x8e/0xc0 [ 1387.715422][T24077] user_path_at_empty+0x2a/0x50 [ 1387.720291][T24077] __x64_sys_move_mount+0x2f0/0x430 [ 1387.725521][T24077] ? __ia32_sys_fsmount+0xbc0/0xbc0 [ 1387.730723][T24077] ? ksys_write+0x19f/0x250 [ 1387.735244][T24077] ? __ia32_sys_read+0xb0/0xb0 [ 1387.740016][T24077] ? __ia32_sys_clock_settime+0x260/0x260 [ 1387.745744][T24077] ? trace_hardirqs_off_caller+0x55/0x230 [ 1387.751527][T24077] do_syscall_64+0xf6/0x790 [ 1387.756055][T24077] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1387.761951][T24077] RIP: 0033:0x45c849 [ 1387.765938][T24077] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1387.785947][T24077] RSP: 002b:00007fd9a5cabc78 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 1387.794374][T24077] RAX: ffffffffffffffda RBX: 00007fd9a5cac6d4 RCX: 000000000045c849 [ 1387.802435][T24077] RDX: ffffffffffffffff RSI: 0000000020000080 RDI: 0000000000000003 [ 1387.810430][T24077] RBP: 000000000076bf00 R08: 0000000000000044 R09: 0000000000000000 [ 1387.818407][T24077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1387.826386][T24077] R13: 0000000000000755 R14: 00000000004ca115 R15: 0000000000000001 [ 1387.941591][T24080] bridge0: port 1(bridge_slave_0) entered learning state 02:45:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000ffffff8d000000000000000000000000000000000005000000"], 0x8758) [ 1387.983474][T24080] binder: 24079:24080 ioctl c018620c 20000100 returned -1 02:45:20 executing program 1 (fault-call:2 fault-nth:2): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) [ 1388.293480][T24187] FAULT_INJECTION: forcing a failure. [ 1388.293480][T24187] name failslab, interval 1, probability 0, space 0, times 0 [ 1388.339327][T24187] CPU: 1 PID: 24187 Comm: syz-executor.1 Not tainted 5.6.0-rc3-next-20200228-syzkaller #0 [ 1388.349260][T24187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1388.359337][T24187] Call Trace: [ 1388.362738][T24187] dump_stack+0x188/0x20d [ 1388.367094][T24187] should_fail.cold+0x5/0x14 [ 1388.371697][T24187] ? lock_downgrade+0x7f0/0x7f0 [ 1388.376573][T24187] ? setup_fault_attr+0x1e0/0x1e0 [ 1388.381678][T24187] should_failslab+0x5/0xf [ 1388.386140][T24187] kmem_cache_alloc+0x29b/0x730 [ 1388.391022][T24187] getname_flags+0xd2/0x5b0 [ 1388.395535][T24187] ? security_capable+0x8e/0xc0 [ 1388.400401][T24187] user_path_at_empty+0x2a/0x50 [ 1388.405268][T24187] __x64_sys_move_mount+0x2f0/0x430 [ 1388.410481][T24187] ? __ia32_sys_fsmount+0xbc0/0xbc0 [ 1388.415686][T24187] ? ksys_write+0x19f/0x250 [ 1388.420201][T24187] ? __ia32_sys_read+0xb0/0xb0 [ 1388.424974][T24187] ? __ia32_sys_clock_settime+0x260/0x260 [ 1388.430703][T24187] ? trace_hardirqs_off_caller+0x55/0x230 [ 1388.436442][T24187] do_syscall_64+0xf6/0x790 [ 1388.440968][T24187] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1388.446862][T24187] RIP: 0033:0x45c849 [ 1388.450759][T24187] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1388.470367][T24187] RSP: 002b:00007fd9a5cabc78 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 1388.478787][T24187] RAX: ffffffffffffffda RBX: 00007fd9a5cac6d4 RCX: 000000000045c849 02:45:21 executing program 4: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0)='NLBL_UNLBL\x00') r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xfff, 0x200000) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc0}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x3c}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x8114) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc8800) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0xc0884123, &(0x7f0000000300)={0x3, "d02591ba316194696e1024484d1eca39b7dfbe0f61c19f90924a4a759f15af7024177d7771b72522b6a2d516527ab467ce461b6406d110d501620233fe03a034", {0x4, 0x7}}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0xc0102, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000440)={0x3f, 0x4, 0x4, 0x200000, 0x7ff, {0x77359400}, {0x3, 0x1, 0x3f, 0x8, 0x70, 0x4, "d267d2f5"}, 0x1, 0x0, @planes=&(0x7f0000000400)={0x3, 0x0, @fd=r2, 0x9}, 0x3, 0x0, r4}) ioctl$VT_WAITACTIVE(r5, 0x5607) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r7 = pidfd_getfd(0xffffffffffffffff, r6, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r7, 0xc03064b7, &(0x7f0000000040)={0x0, 0x4, 0x2, 0x9, 0x4, 0x40, 0x9, 0x2, 0xe6b7, 0x10000, 0x37, 0x1e8}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:45:21 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x1ff, 0x2}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x2, 0x200, 0xfffffffffffffaaa}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYPTR, @ANYBLOB="2c726f6c746d6f64653d30303030303030303030303030403030203034303030302c5d7365725f69645c3a451e96808f326b48c81d3d", @ANYPTR64=&(0x7f00000007c0)=ANY=[@ANYPTR=&(0x7f0000000700)=ANY=[@ANYRESDEC=r6, @ANYRES16, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES16], @ANYPTR=&(0x7f0000000780)=ANY=[@ANYRESDEC, @ANYPTR, @ANYRESDEC=0x0], @ANYPTR64], @ANYBLOB='D\x00\x00\x00\x00D\x00\x00\x00_', @ANYRES32, @ANYBLOB="2c002bac570ce1f17f2e6f39d06a0f0c1cbde1fb6cb0a7736efabafa9b428c27b5879b"]) r7 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r7, &(0x7f0000000040)='./file0\x00', 0x4000, 0x1, &(0x7f0000000440)) [ 1388.486795][T24187] RDX: ffffffffffffffff RSI: 0000000020000080 RDI: 0000000000000003 [ 1388.494790][T24187] RBP: 000000000076bf00 R08: 0000000000000044 R09: 0000000000000000 [ 1388.502765][T24187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1388.510738][T24187] R13: 0000000000000755 R14: 00000000004ca115 R15: 0000000000000002 [ 1388.567317][T24192] bridge0: port 1(bridge_slave_0) entered learning state [ 1388.581235][T24191] bridge0: port 1(bridge_slave_0) entered learning state [ 1388.596721][T24191] bridge0: port 1(bridge_slave_0) entered learning state [ 1388.608411][T24192] binder: 24190:24192 ioctl c018620c 20000100 returned -1 [ 1388.627171][T24192] binder: 24190:24192 ioctl 89e0 20000300 returned -22 02:45:21 executing program 1 (fault-call:2 fault-nth:3): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) [ 1388.697021][T24192] bridge0: port 1(bridge_slave_0) entered learning state [ 1388.736237][T24192] bridge0: port 1(bridge_slave_0) entered learning state 02:45:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000794000000000000000000000000000000000005000000"], 0x8758) 02:45:21 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x10000, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) ioctl$CAPI_INSTALLED(r5, 0x80024322) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000000000)) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r8, 0xc018620c, &(0x7f0000000100)) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0xfffffffffffffc02) [ 1388.962727][T24400] FAULT_INJECTION: forcing a failure. [ 1388.962727][T24400] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1388.975966][T24400] CPU: 0 PID: 24400 Comm: syz-executor.1 Not tainted 5.6.0-rc3-next-20200228-syzkaller #0 [ 1388.985858][T24400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1388.995918][T24400] Call Trace: [ 1388.999226][T24400] dump_stack+0x188/0x20d [ 1389.003581][T24400] should_fail.cold+0x5/0x14 [ 1389.008191][T24400] ? setup_fault_attr+0x1e0/0x1e0 [ 1389.013228][T24400] ? __lock_acquire+0x18c3/0x5270 [ 1389.018275][T24400] __alloc_pages_nodemask+0x17a/0x820 [ 1389.023656][T24400] ? kmem_cache_free+0x91/0x320 [ 1389.028515][T24400] ? putname+0xe1/0x120 [ 1389.032683][T24400] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 1389.038413][T24400] ? find_held_lock+0x2d/0x110 [ 1389.043197][T24400] ? filename_lookup+0x287/0x3e0 [ 1389.048144][T24400] ? lock_downgrade+0x7f0/0x7f0 [ 1389.053013][T24400] cache_grow_begin+0x8c/0xc10 [ 1389.057786][T24400] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 1389.063261][T24400] kmem_cache_alloc+0x66a/0x730 [ 1389.068129][T24400] getname_flags+0xd2/0x5b0 [ 1389.072637][T24400] ? security_capable+0x8e/0xc0 [ 1389.077501][T24400] user_path_at_empty+0x2a/0x50 [ 1389.082366][T24400] __x64_sys_move_mount+0x2f0/0x430 [ 1389.087597][T24400] ? __ia32_sys_fsmount+0xbc0/0xbc0 [ 1389.091908][T24403] binder: 24402:24403 ioctl c018620c 20000080 returned -1 [ 1389.092797][T24400] ? ksys_write+0x19f/0x250 [ 1389.092813][T24400] ? __ia32_sys_read+0xb0/0xb0 [ 1389.092827][T24400] ? __ia32_sys_clock_settime+0x260/0x260 [ 1389.092846][T24400] ? trace_hardirqs_off_caller+0x55/0x230 [ 1389.120618][T24400] do_syscall_64+0xf6/0x790 [ 1389.125137][T24400] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1389.131030][T24400] RIP: 0033:0x45c849 [ 1389.133728][T24403] binder: 24402:24403 ioctl c018620c 20000100 returned -1 [ 1389.134926][T24400] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 02:45:21 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x20002) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) [ 1389.134935][T24400] RSP: 002b:00007fd9a5cabc78 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 1389.134948][T24400] RAX: ffffffffffffffda RBX: 00007fd9a5cac6d4 RCX: 000000000045c849 [ 1389.134968][T24400] RDX: ffffffffffffffff RSI: 0000000020000080 RDI: 0000000000000003 [ 1389.185984][T24400] RBP: 000000000076bf00 R08: 0000000000000044 R09: 0000000000000000 [ 1389.193967][T24400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1389.201940][T24400] R13: 0000000000000755 R14: 00000000004ca115 R15: 0000000000000003 [ 1389.375688][T24507] fuse: Bad value for 'fd' 02:45:22 executing program 1 (fault-call:2 fault-nth:4): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) 02:45:22 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000100)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000080)=0x3, 0x4) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="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"], 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r7, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x54}, @ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xff}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x1) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000100)) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:45:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000798000000000000000000000000000000000005000000"], 0x8758) 02:45:22 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) r4 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) lseek(r4, 0x6, 0x1) getdents64(r4, &(0x7f0000000000)=""/43, 0x2b) renameat(r3, &(0x7f0000000000)='./file0\x00', r4, &(0x7f0000000080)='./file0\x00') [ 1389.650738][T24630] binder: 24612:24630 ioctl c018620c 20000100 returned -1 02:45:22 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) [ 1389.843879][T24749] bridge0: port 1(bridge_slave_0) entered learning state 02:45:22 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8000, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:45:22 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRESDEC]) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x64440, 0x121) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00') r2 = getpid() ptrace(0x10, r2) ptrace$getsig(0x2, r2, 0xffffffffff600043, &(0x7f0000000300)) move_pages(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000ff7000/0x9000)=nil], &(0x7f0000000280)=[0x7eca, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) 02:45:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000c98000000000000000000000000000000000005000000"], 0x8758) 02:45:23 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x80, 0x0) getpeername$l2tp(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0xf000}, 0x40) tee(r2, r3, 0x6, 0x8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) [ 1390.363849][T25097] fuse: Bad value for 'user_id' [ 1390.431977][T25106] bridge0: port 1(bridge_slave_0) entered learning state [ 1390.484825][T25106] bridge0: port 1(bridge_slave_0) entered learning state 02:45:23 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x482440, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) 02:45:23 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'osx.', 'user_id'}, &(0x7f0000000180)='fd', 0x2, 0x2) 02:45:23 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r6, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x0) r7 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000100)) ioctl$NS_GET_USERNS(r7, 0xb701, 0x0) 02:45:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000ca4000000000000000000000000000000000005000000"], 0x8758) [ 1391.049101][T25446] binder: BINDER_SET_CONTEXT_MGR already set [ 1391.085680][T25446] binder: 25444:25446 ioctl 40046207 0 returned -16 02:45:24 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000140)={0x5}) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x9, 0x101, 0x6121, 0xdab, 0x10}}) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r8, 0xc018620c, &(0x7f00000000c0)) ioctl$BLKPBSZGET(r8, 0x127b, &(0x7f0000000080)) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:45:24 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x500, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000000c0)="f54563141c1d420b2f9f7f2f3174f41ef84584f74387bd787132a6453340c9359e925811e7785356311101ef772c1331f928312b00fdf6ca0f13dbd4fefc93044bf357dbd81b501f951e1a648bfc3df375b7d65a7ce2d3df941a04b8867375f9ded6e653a3242aaa57c56d27b94b434741a079699a942745f4d7e0cf15f165b99f1ff9057c73c7d3e9fa5d94fd9ef00f4bca44e5d0250aa1d31b16882df6f2d95dd1065ea4a4c89609279f7d6df8eae4757f6739aab756fabb9717d3ae002621b82de76293a46636f99ec26b3603ec311d89f67cde577cbdf1ef75710dc95ec3dd73fc250f5d71a5ec21bc2cecb33f941334723aa8282c") r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x2) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r8 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, r7, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffffffff}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r7, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2260a90274"}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c000}, 0x4890) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00', r4}, 0x10) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) [ 1391.444579][T25553] binder: BINDER_SET_CONTEXT_MGR already set [ 1391.477689][T25553] binder: 25552:25553 ioctl 40046207 0 returned -16 [ 1391.545314][T25555] binder: 25554:25555 ioctl c018620c 20000100 returned -1 02:45:24 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) read$FUSE(r6, 0x0, 0x0) 02:45:24 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) write$dsp(r3, &(0x7f0000000000)="208ddda8af33bc60030beb21fc6dd62b48d99cbfe7", 0x15) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) ioctl$TIOCSIG(r6, 0x40045436, 0x19) 02:45:24 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000000007a8000000000000000000000000000000000005000000"], 0x8758) [ 1391.952838][T25862] binder: 25858:25862 ioctl c018620c 20000100 returned -1 [ 1391.989691][T25862] binder: 25858:25862 ioctl c018620c 20000100 returned -1 02:45:24 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(0x0, r2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(0x0, r4, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x20000, 0x0) bind$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setxattr$trusted_overlay_origin(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='trusted.overlay.origin\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6607b9", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000001,max_read=0x0000000000000001,default_permissions,euid=', @ANYRESDEC=r2, @ANYBLOB="9b64308599113e71", @ANYRESDEC=r4, @ANYBLOB=',\x00']) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4000, 0x7ff, &(0x7f0000000440)) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r8, 0xc018620c, &(0x7f0000000100)) ioctl$DRM_IOCTL_GET_MAP(r8, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, 0x401, 0x0, 0x29, &(0x7f0000ffb000/0x4000)=nil, 0x6}) [ 1392.022377][T25865] binder: 25860:25865 ioctl c018620c 20000100 returned -1 [ 1392.049703][T25865] binder: 25860:25865 ioctl 6609 0 returned -22 [ 1392.102411][T25865] binder: 25860:25865 ioctl c018620c 20000100 returned -1 [ 1392.148083][T25865] binder: 25860:25865 ioctl 40045436 19 returned -22 [ 1392.164455][T25935] fuse: Unknown parameter 'f¹0x0000000000000003' 02:45:24 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x41202, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) [ 1392.222303][T25935] binder: 25902:25935 ioctl c018620c 20000100 returned -1 [ 1392.245774][T25935] binder: 25902:25935 ioctl c0286404 20000080 returned -22 02:45:25 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x8) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) 02:45:25 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000ca8000000000000000000000000000000000005000000"], 0x8758) 02:45:25 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c75b950507365725f", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r5) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r7, 0xc05c5340, &(0x7f0000000240)={0x6, 0x10001, 0xfff, {0x8000, 0x16b}, 0x101, 0x530}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) openat$cgroup_subtree(r4, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) [ 1392.627321][T26215] fuse: Unknown parameter 'u¹PPser_00000000000000000000' 02:45:25 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f00000002c0)) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000200)={0xa0, 0x320, 0x1000, 0x600, 0x2, 0x1f, 0xf, 0x1, {0x8, 0x6, 0x1}, {0x71e, 0xffffffe1, 0x1}, {0x96, 0x4}, {0x9, 0x1f}, 0x1, 0x10, 0x1, 0x1, 0x0, 0x61888b87, 0x8d, 0x0, 0x80000001, 0x4, 0x0, 0x5, 0x21, 0x200, 0x3, 0x11}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) read$FUSE(r5, 0x0, 0x0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180)='/dev/udmabuf\x00', 0x2) ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, &(0x7f00000001c0)) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) r9 = dup2(r8, r6) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r9, 0xc018620c, &(0x7f0000000100)) accept4$ax25(r9, &(0x7f0000000080)={{0x3, @bcast}, [@bcast, @null, @remote, @default, @bcast, @remote, @bcast]}, &(0x7f0000000140)=0x48, 0x1000) 02:45:25 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(0x0, r2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions='default_permissions'}], [{@uid_gt={'uid>', r2}}]}}) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) lseek(r3, 0x6, 0x1) getdents64(r3, &(0x7f0000000000)=""/43, 0x2b) statx(r3, &(0x7f0000000080)='./file0\x00', 0x6000, 0x200, &(0x7f0000000440)) [ 1392.971854][T26484] binder: 26451:26484 ioctl c018620c 20000100 returned -1 02:45:25 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x2, 0x117) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) 02:45:25 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x20040, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:45:26 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="01360be7d1375854b1b3d152b67df6acd11b05ce2cf8b47d652dd8022bb568db09accf8c3c290f507643e2dd36a89b206d1f5452782ccb564ca55d71837341803891f69ac5ac865e63f571d81357eb2cd93adfd09bfde9052760", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r5 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r5, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:26 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)=0x7, 0x4) 02:45:26 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x347e, 0x88040) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) r7 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) r9 = dup2(r8, r7) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r9, 0xc018620c, &(0x7f0000000100)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x2080, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) [ 1393.564836][T26899] binder: 26898:26899 ioctl c018620c 20000100 returned -1 02:45:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000cb8000000000000000000000000000000000005000000"], 0x8758) [ 1393.634244][T26899] fuse: Unknown parameter '6 çÑ7XT±³ÑR¶}ö¬ÑÎ' [ 1393.734239][T26904] binder: 26901:26904 ioctl c018620c 20000100 returned -1 [ 1393.771297][T26904] binder: 26901:26904 ioctl c018620c 20000100 returned -1 [ 1393.833521][T26904] binder: 26901:26904 ioctl c018620c 20000100 returned -1 02:45:26 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) read$midi(r4, &(0x7f0000000000)=""/32, 0x20) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) [ 1394.133961][T27213] binder: 27187:27213 ioctl c018620c 20000100 returned -1 02:45:26 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x80, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4000, 0x0) sendto$rxrpc(r0, &(0x7f0000000080)="c7ef61c846d2fb4e5693ae3bcab1616bdcd1ec106abe5bab96a59c83982cf868ddf42a7afe7dafb9cdeb7d4421aaea4419d8", 0x32, 0x40090, 0x0, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x44, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001980)='nl80211\x00') ioctl$RTC_WIE_ON(r0, 0x700f) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x6000000, &(0x7f0000000400)=ANY=[@ANYBLOB="75707065726469203d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c0061c16cfa1cec88197e642b8ea6d94fdbcb63daff1336ebcfac99aeab7c27687b5021b974213d9551afb93fb9d1e5b8d470c20ec8b5ad792774c75632c718597d06be5b8d5d14194c45a98c3efef74d4bfa7e010893358ada176301801d1cb9218da1010c7028aa7fad839c33542db9f52f60f1409a150a9c6eb60961adaea104b7c5b2a6618aebec05cae73509565dc07a82bc37f79f0dccb86cd8464d16549400000000"]) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = dup(0xffffffffffffffff) epoll_pwait(r1, &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000280)={[0x2]}, 0x8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140)="b7754a29731b3c0bccbcf13ac93b72c27bbee241c73768cf9ff1a427aafb32170e63f686fc64898dc2cb89d28472e6c3dbd64497ab53eb110aa152fa", 0x3c, r3}, 0x68) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) 02:45:27 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) mount(&(0x7f0000000000)=@sr0='/dev/sr0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='aio\x00', 0x12002, &(0x7f0000000140)='(\x00') move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = getpid() ptrace(0x10, r3) ptrace$getsig(0x2, r3, 0xffffffffff600043, &(0x7f0000000300)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(0x0, r5, 0x0) syz_open_dev$radio(&(0x7f0000000380)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000003c0)={0x6, 0x6, {}, {r5}, 0xffff, 0x7}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) fsetxattr$security_evm(r6, &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="040e19ae289fb7c3a116215ea500648163e2a2e6f067"], 0x16, 0x2) 02:45:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000000007cc000000000000000000000000000000000005000000"], 0x8758) 02:45:27 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x9, &(0x7f0000000240)=[{0x7, 0x5, 0x3f, 0x1}, {0xffff, 0xc2, 0x1f}, {0x99c7, 0x7, 0x40, 0xffffffff}, {0x4, 0xfb, 0x8, 0x6}, {0xe2b1, 0x7, 0x23, 0x2}, {0x0, 0x1, 0x7a, 0x5}, {0x3ff, 0x17, 0x1f, 0xfffffff7}, {0x1, 0x3f, 0x8, 0x1}, {0x400, 0x1f, 0x14, 0x7}]}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) connect$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x40, 0x4}, 0x4}}, 0x10) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r4 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r4, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) [ 1394.457448][T27319] bridge0: port 1(bridge_slave_0) entered learning state [ 1394.546156][T27324] binder: 27318:27324 ioctl c018620c 20000100 returned -1 [ 1394.565936][T27316] overlayfs: unrecognized mount option "upperdi =./file0" or missing value 02:45:27 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x0, &(0x7f00000000c0)={{r1, r2/1000+30000}}, &(0x7f0000000100)) pselect6(0x40, &(0x7f0000000140)={0x4, 0x6, 0xffffffffffffffff, 0x3, 0x2, 0xe26, 0x7, 0x3}, &(0x7f0000000180)={0x1f, 0x7, 0x40, 0x5, 0x4, 0x0, 0x8, 0x9}, &(0x7f00000001c0)={0x1, 0x8000, 0x20, 0x5, 0x100000001, 0x7fffffff, 0x2, 0x1f}, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000280)={&(0x7f0000000240)={[0x69]}, 0x8}) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) 02:45:27 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttynull\x00', 0x2080, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x2e, 0x4, 0x0, {0x4, 0x6, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2e) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) write$P9_RFSYNC(r3, &(0x7f0000000080)={0x7, 0x33, 0x2}, 0x7) r4 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r4, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000cdc000000000000000000000000000000000005000000"], 0x8758) [ 1395.088297][T27664] binder: 27638:27664 ioctl c018620c 20000100 returned -1 02:45:27 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) getpeername$ax25(r3, &(0x7f0000000080)={{0x3, @rose}, [@remote, @rose, @remote, @default, @remote, @default, @bcast, @default]}, &(0x7f0000000000)=0x48) 02:45:27 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000100)) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000000c0)=""/206) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f00000001c0)=0x1) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) r5 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r5, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) [ 1395.305738][T27801] binder: 27746:27801 ioctl c018620c 20000100 returned -1 02:45:28 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r2, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) [ 1395.414117][T27844] binder: 27797:27844 ioctl c018620c 20000100 returned -1 [ 1395.448438][T27844] binder: 27797:27844 ioctl 80045518 200001c0 returned -22 02:45:28 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x4a6a02, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:45:28 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='security.ima\x00', &(0x7f0000000440)=@v2={0x5, 0x0, 0x9, 0xffff7fff, 0x1000, "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"}, 0x1009, 0x1) open(&(0x7f0000000200)='./file0/file0\x00', 0x208800, 0x1) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x300}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x81}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) move_mount(r0, &(0x7f0000000000)='./file0\x00', r0, 0x0, 0x12) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$int_out(r1, 0x5462, &(0x7f0000000080)) 02:45:28 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000000007e0000000000000000000000000000000000005000000"], 0x8758) 02:45:28 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x5c400) read$FUSE(0xffffffffffffffff, 0x0, 0x0) [ 1395.897701][T28254] bridge0: port 1(bridge_slave_0) entered learning state 02:45:28 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$unix(0x1, 0x5, 0x0) fcntl$getflags(r0, 0xb) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000240)={0x0, 0xffff, 0xffff, r3, 0x0, &(0x7f0000000180)={0x990a7e, 0x8c, [], @p_u32=&(0x7f0000000080)=0x20}}) splice(r2, &(0x7f0000000000)=0x6, r4, &(0x7f0000000280)=0x1000, 0x5, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r5 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r5, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:28 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x103800, 0x8a) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x8, 0xa, 0x4, 0x10000, 0x40, {r1, r2/1000+10000}, {0x2, 0x0, 0x80, 0xff, 0x7f, 0x6, "1bd458ca"}, 0xffff, 0x2, @fd=r5, 0xfff, 0x0, 0xffffffffffffffff}) faccessat(r6, &(0x7f0000000140)='./file0\x00', 0x3, 0x1500) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) [ 1396.107663][T28329] bridge0: port 1(bridge_slave_0) entered learning state [ 1396.144890][T28329] bridge0: port 1(bridge_slave_0) entered learning state 02:45:29 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000080)=""/102, 0x66}, {&(0x7f0000000100)=""/132, 0x84}, {&(0x7f00000001c0)=""/118, 0x76}, {&(0x7f0000000240)=""/102, 0x66}, {&(0x7f00000002c0)=""/165, 0xa5}], 0x5) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) [ 1396.392157][T28569] binder: 28551:28569 ioctl c018620c 20000100 returned -1 02:45:29 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000000003e8000000000000000000000000000000000005000000"], 0x8758) 02:45:29 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', r1, 0x0, 0x44) 02:45:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)={0x30, r4, 0xc8ef0a4335e6829f, 0x0, 0x0, {0xf}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x6c, r4, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3232d60c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x6c}}, 0xc090) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r6 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r6, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:29 executing program 4: ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x100100a1}, 0x8000) [ 1396.861613][T28780] binder: 28779:28780 ioctl c018620c 20000100 returned -1 [ 1396.913404][T28783] binder: 28781:28783 ioctl c018620c 20000100 returned -1 02:45:29 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x7, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x20, @ipv4={[], [], @local}, 0x4}, 0x20) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) 02:45:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000f003000010010000200200001001000008030000080300000803000004000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="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"], 0x440) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x2) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:45:30 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67bd815b0900726f75", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xc8, 0x0, &(0x7f0000000240)="6d25804cfa5c0555543382fce46a4094a4cb4e2448dc0d479df590125702f9156901ef4a199d6662166b60054a2131873c24ea9136161f03e2c2fb5d81bd902ea4ff528011e620c589bf9418e4ba351873957f3082df5dec7d1ad2a9bfc751c91bc728edb799fc10c7642c61126b57cd392be61ac238ebec8a97378641b60b4bb12ac1ca9edcf0ff345e43e26915353528ceb7cf7e1e2d85755381df9ef463cfbc7270016cd70b5e44c92f594458fcbd367c0ab14b78459db28446450c4265af11c384df0b57eb2e"}) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000000)=[0x0, 0x1]) r4 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r4, &(0x7f0000000040)='./file0\x00', 0x4000, 0x400, &(0x7f0000000440)) 02:45:30 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000000003f0000000000000000000000000000000000005000000"], 0x8758) [ 1397.359606][T29088] binder: 29086:29088 ioctl c018620c 20000100 returned -1 [ 1397.473304][T29110] fuse: Unknown parameter 'ff' 02:45:30 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0x6, 0x1) getdents64(r0, &(0x7f0000000000)=""/43, 0x2b) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r0, 0x0, 0x64) 02:45:30 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x3, 0x1000, 0x2000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) 02:45:30 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000540)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x198, r4, 0xe00, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7bc8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6b6e}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff7a88}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbc78}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x79e04d36}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4008001}, 0x10) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r5 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r5, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:30 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0x6, 0x1) getdents64(r1, &(0x7f0000000000)=""/43, 0x2b) move_mount(r0, &(0x7f0000000080)='./file0\x00', r1, 0x0, 0x44) [ 1397.979751][T29555] binder: 29477:29555 ioctl c018620c 20000100 returned -1 02:45:30 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000cf0000000000000000000000000000000000005000000"], 0x8758) 02:45:30 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000002b40)=[{{&(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/210, 0xd2}, {&(0x7f0000001300)=""/3, 0x3}, {&(0x7f0000001340)=""/120, 0x78}, {&(0x7f00000013c0)=""/53, 0x35}, {&(0x7f0000002bc0)=""/167, 0xa7}, {&(0x7f00000014c0)}, {&(0x7f0000001500)=""/200, 0xc8}, {&(0x7f0000001600)=""/25, 0x19}, {&(0x7f0000001640)=""/82, 0x52}], 0xa, &(0x7f0000001780)=""/153, 0x99}, 0x4e}, {{&(0x7f0000001840)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002ac0)=[{&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/97, 0x61}, {&(0x7f0000002940)=""/117, 0x75}, {&(0x7f00000029c0)=""/75, 0x4b}, {&(0x7f0000002a40)=""/51, 0x33}, {&(0x7f0000002a80)}], 0x6}, 0x5}], 0x2, 0x0, 0x0) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x89, @local, 0x4e21, 0x2, 'dh\x00', 0x11, 0x2, 0x27}, 0x2c) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) fcntl$dupfd(0xffffffffffffffff, 0x406, r3) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) ioctl$VIDIOC_G_CTRL(r6, 0xc008561b, &(0x7f0000000140)={0x4, 0x8}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000002e40)=ANY=[@ANYBLOB="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"], 0x48) 02:45:31 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67720600000079663d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x8a) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0x6, 0x1) getdents64(r1, &(0x7f0000000000)=""/43, 0x2b) statx(r1, &(0x7f0000000080)='./file0/file0\x00', 0x4000, 0x1, &(0x7f0000000440)) 02:45:31 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x802) r2 = dup2(r1, r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000180)=0x7ff, 0x4) move_mount(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x54, 0x0, &(0x7f0000000440)=[@register_looper, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x8, 0x1, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/74, 0x4a, 0x0, 0x3}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}, 0x40}], 0x28, 0x0, &(0x7f00000003c0)="ca2c0d930d489ce78ee1142309bab45c05f5df3573f2c1ebb480b9f8961a6b7f59f17e20244c1397"}) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) r6 = accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{}, [@null, @bcast, @rose, @netrom, @remote, @remote, @null, @bcast]}, &(0x7f0000000280)=0x48, 0x80800) getsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000140), 0x10) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000100)) read$dsp(r7, &(0x7f0000000200)=""/4, 0x4) 02:45:31 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x128c1, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) [ 1398.546123][T29929] fuse: Unknown parameter 'gr' [ 1398.582913][T29930] binder: 29928:29930 ioctl c018620c 20000100 returned -1 [ 1398.646513][T29930] binder: 29928:29930 ioctl c018620c 20000100 returned -1 02:45:31 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000000003f1000000000000000000000000000000000005000000"], 0x8758) 02:45:31 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="66643da4630ab43b5570359fddf69016752d87b81ac29015b413fd0a08b4ab1c1ad94c1c5a165b0b7fc70c1e54f677210dfca6dc4b8640e9520d697fc5b00cda247cf5c4a9e0de2fa985c952a603be11f067f533e33dc8a1832cb4fdc14fa2981819d2158f0f77122f6f1754758ace3ed483c5db4f08e5f3479f8c5ceaff0527dc187da805f772ccc01f826c61207084269deb9a360ee2992acb3b4810593655a51f30130ac02e6df3cbc67d94ead205413c4d23acdc009ad51adf65c3", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x11, &(0x7f0000000240)) 02:45:31 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x44380, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/153) move_mount(r0, &(0x7f0000000080)='./file0\x00', r0, 0x0, 0x51) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000180)={0x5, 0x72d}) ioctl$KDDELIO(r1, 0x4b35, 0x1) 02:45:31 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x802) r5 = dup2(r4, r3) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r8, 0xc018620c, &(0x7f0000000100)) r9 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:45:31 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYRESOCT=r0]) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0xc0200, 0x10) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f0000000340)={0x5, 0x4, &(0x7f0000000240)=[0x8, 0x0, 0xe, 0x1000], &(0x7f0000000280)=[0x7f, 0x7c], &(0x7f00000002c0)=[0x4, 0xed], &(0x7f0000000300)=[0x9e24, 0x1, 0x40, 0x5, 0x1ff]}) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:32 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000000003f2000000000000000000000000000000000005000000"], 0x8758) [ 1399.249895][T30382] binder: BINDER_SET_CONTEXT_MGR already set [ 1399.271775][T30382] binder: 30346:30382 ioctl 40046207 0 returned -16 02:45:32 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(0x0, r5, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x800000, &(0x7f0000000100)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0xa00}}], [{@seclabel='seclabel'}]}}) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) 02:45:32 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000000)={0x0, @multicast1, 0x4e21, 0x3, 'fo\x00', 0x37, 0x21d3, 0x76}, 0x2c) 02:45:32 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) [ 1399.715705][T30672] binder: 30669:30672 ioctl c018620c 20000100 returned -1 [ 1399.721480][T30673] binder: 30671:30673 ioctl c018620c 20000100 returned -1 02:45:32 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000000003f3000000000000000000000000000000000005000000"], 0x8758) 02:45:32 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="54000000166ba36d353928108f79a19aea0c25236457717e939308b3b764062d18", @ANYRES16=0x0, @ANYBLOB="00002abd7000fcdbdf25010000000c001600020000000000000008001800ac1414290600020001000000140008007465616d5f736c6176655f31000000000500210001000000050012003f000000"], 0x3}, 0x1, 0x0, 0x0, 0x40840}, 0x4845) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r8, 0xc018620c, &(0x7f0000000100)) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f00000001c0)={0x1, r8}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) 02:45:32 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="0000123a7800000000ed0000b1be206afea78bf5668c9a16e146d8f3a5bdeba3e68a283bc858c8354840ffbf79", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:32 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x90002, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) creat(&(0x7f0000000140)='./file1\x00', 0x48839a9cc6c71628) io_uring_enter(r3, 0x2, 0x5, 0x0, &(0x7f00000000c0)={[0x7ff]}, 0x8) r4 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r4, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000100)='veth1_to_batadv\x00') r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(0xffffffffffffffff, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f0000000280)='7', 0x1, 0x40000, &(0x7f0000618000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x5, 0x0}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x9, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b38b) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240)={r7, 0xba}, 0x8) [ 1400.151027][T30999] binder: 30997:30999 ioctl c018620c 20000100 returned -1 [ 1400.243376][T30999] binder: 30997:30999 ioctl c018620c 20000100 returned -1 [ 1400.291930][T31005] binder: 31001:31005 ioctl c018620c 20000100 returned -1 02:45:33 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000000001f4000000000000000000000000000000000005000000"], 0x8758) 02:45:33 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x10000, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) sendmsg$sock(r1, &(0x7f0000000680)={&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)="93d4977e4fedf01f93d56b24d09c05ae67abdc9ac4fcbff520851569d14d4548b2ab5d6c6c7abf3cc308aa7b76f3580f35cb306c87859a149e3a0f10998d60ef57c4f78c83c7710d9af22d", 0x4b}, {&(0x7f0000000180)="0866736227cca9c0dd6c", 0xa}, {&(0x7f00000001c0)="284f2af098cbdd4b635d321be224586713c8df0f1797d38708511bd6839ea4f261f184e7fe8363311695fa4eb658ebb3e306f5c6f72dc908838d93086abc86cb3447c1c84ff80a1d893936", 0x4b}, {&(0x7f0000000240)="477ea936d21ba33abd586913e3f04c09274d67ac5dd77a4425dcb60a9469a0965092b4526fb385ca3aea17e36e6e938845d4a1983c957d279a4f1650866c5433325f6cb56e22202b4a4887fc02ea11ea95922acba17e82f767f8e080c41711fa08d5cc5119c0b0353e4444a2fa219c24b07bafb947e50a7bdfb2892c8ddea2233f850af8441c8467034c852cd011d6f1a961389f8e7d2be5ec92c6fd6b004a5a2ca1497f76081a8bd12ed177ed7058bdedaddd31007287f0c786ccea806d7bc5a4ff3ed404b5830a2a69acbca6a25bebbd5f651cd9eb204297d2ee44e9d7db7e56", 0xe1}, {&(0x7f0000000340)="a109b0e5677f8ed44c6b682041302ed8980d0c8f0f7f9a079020043dcc592d5ebefc564baaa1e9eb5f248293823f92af9c6152140fce344985229859f812fa1498eff067e2f64754e36c6d9fde7ab5b23a90b36c8934f9753f64a066668fb12447dc7ed36ca7f546f7efc69d22b0cbbc1d0488deb1c7c28e1fc0663a8645cda03998519871c0f9edf68a91bc62fad3", 0x8f}, {&(0x7f0000000400)="f84c7d753d5337ebd555", 0xa}, {&(0x7f0000000440)="15de8f4785cbdc8d068283176cbe7b3da909a0ab8bb33aeebe8d54c1735e2fb9cb39f8272233f612b33e6b3435013c48839dc29bef22507ebe680d032d29127d7a37afda32cd62", 0x47}, {&(0x7f00000004c0)="768d01da0dd18c194c672f6797d5267ce265649539d65875e920ec72045a73dffe75158e675895ef906075ddf303554559055a4d6e0038e1fe806eb6db285ae5fd0e5b89f5a8584f56c734970efe1b064249dafa960871beb3f8259b1720501f09c13c4b59037efb97735499f98c41a29ac55852c181ab7831be7d740dc18c7da92127329ad673ed96d489f0f6e02c1427d10d1bcce79ed8c13e46361adba57f6cc98d87edf12a78b4dd", 0xaa}, {&(0x7f0000000580)="ca8d569620e24f174d4357c9d432379459acc2ca741a29a64883ab5cb7e2d4e22c1372d7b64acc2b", 0x28}], 0x9}, 0x20004000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x3ff) r3 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000700)) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) ioctl$KVM_SET_BOOT_CPU_ID(r5, 0xae78, &(0x7f00000006c0)) [ 1400.709686][T31342] bridge0: port 1(bridge_slave_0) entered learning state 02:45:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(0x0, r4, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(0x0, r6, 0x0) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffa, 0x4, &(0x7f0000000680)=[{&(0x7f0000000180)="e8ee735acdb5641cf8b1ab", 0xb, 0x8}, {&(0x7f0000000300)="3e82ee91e31322fa816387b3af59f69445628455f9970dc51668b8820d9919c8958bfca8f95a5340f310766dc96b0e37cc14739e50477604a9966ab6b4d13c9892e92f50a113e381f5ce47f084f3183220d98f40f80da0a58d2954b37be77fe6f719c4f05b7fbd240fd8315802fa2eae8035b56a9dca79098850e9131d1e0e49ee0b1a9e2f76a5c904b650c0c7d6dd7598a23cdabd458294fcb3d64830a5", 0x9e, 0xfffffffffffffffb}, {&(0x7f0000000540)="644f183c3f6eaefa9f771df5dfbe17c445a763cab4289d900031eb5e8c8cd5ac37d2b0ef6c62fd3b1ff46204b689a4b26a47d8f007a6ae2a209ff3b151b5af317df4ded7920bf8e1166d801fba782be650fe418893931c1a6a1d90edb98d225de775198081a1c224b68b685024212ae7cabf515f98071986fac47240bba226381a1f966060e2681086f4d8315ae69fe238c0fb", 0x93, 0x4b}, {&(0x7f0000000600)="8adcb0c893b2767fd802a38a7b000e6627cac343077abfb8b5d08f1d14dca95ac3348d90d8a149a81e9b28ecfd4c7bd12a9ad6c35d420e3915ea2d2b1534cc4ce5341670676f2605604137f7d1166e5853c23305aa269908f99a35197211d65dc3b592894b3ebe8ca4535dcca065750fe15c35b8f98531dbd6", 0x79, 0x100000000}], 0x8, &(0x7f0000000700)={[{@errors_continue='errors=continue'}], [{@uid_eq={'uid', 0x3d, r4}}, {@subj_role={'subj_role', 0x3d, '/dev/binder#\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@dont_appraise='dont_appraise'}, {@uid_eq={'uid', 0x3d, r6}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x5f, 0x66, 0x64, 0x38, 0x30, 0x39, 0x62], 0x2d, [0x38, 0x64, 0x64, 0x32], 0x2d, [0x54, 0x33, 0x37, 0x32], 0x2d, [0x32, 0x38, 0x66, 0x30], 0x2d, [0x33, 0x39, 0x63, 0x32, 0x34, 0x34, 0x63, 0x36]}}}]}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="4f053d", @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2467726f66705f69643da5298376d2856f4de4bf902d3e6de20000000000000009cb01edbe2a4c05008a8a65bccc801197bb519822", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r8 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r8, &(0x7f0000000040)='./file0\x00', 0x4000, 0x20, &(0x7f0000000440)) 02:45:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000801040500010000000000401fa97229cf7079c5f69867b53c278f1015519f6bb40c5aebc8eee570bb30ec6422dae50de42e3e989b44d3f9104ae8db85432c456fff59613093a11ed9201b46"], 0x1c}}, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x1, 0x4, 0xc) sendmmsg$alg(r4, &(0x7f0000000140), 0xffffffffffffff68, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)={0x3}) connect$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x80000001, @local}}, 0x24) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) ioctl$SCSI_IOCTL_DOORUNLOCK(r6, 0x5381) move_mount(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x1a384) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 1400.760230][T31342] binder: 31340:31342 ioctl c018620c 20000100 returned -1 [ 1400.817708][T31346] binder: 31344:31346 ioctl c018620c 20000100 returned -1 [ 1400.829400][T31342] binder: 31340:31342 ioctl ae78 200006c0 returned -22 [ 1400.862164][T31346] binder: 31344:31346 ioctl 4c07 0 returned -22 02:45:33 executing program 1: mkdir(&(0x7f0000000040)='./file0/../file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x161c40, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) [ 1400.937933][T31346] ntfs: (device loop3): parse_options(): Invalid uid option argument: 00000000004294967295 [ 1401.067629][T31346] fuse: Unknown parameter 'O' 02:45:33 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x80440, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:45:34 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643dfbe07f7b23cbb748ee2bc1650d33bddaf020b5bf1c85df95039af830c96d29f20db2807857caf17b3f839abd88270e56f6787935929b6f472dd070ccb077a6147406642a6fd91b0cca88a343db8e7ca71bd52060d409a69b02a172d7e06d300edeea48dd29fffeaf3ce6668672b2", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f0000000100)={0xa30000, 0xffffffff, 0x5, r1, 0x0, &(0x7f0000000080)={0x990970, 0x1, [], @p_u8=&(0x7f0000000000)=0x4}}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r5, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) getpeername$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x0) 02:45:34 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000000003f4000000000000000000000000000000000005000000"], 0x8758) [ 1401.358045][T31668] fuse: Bad value for 'user_id' 02:45:34 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x101) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) 02:45:34 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4400, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) preadv(r0, &(0x7f0000002680)=[{&(0x7f0000000080)=""/243, 0xf3}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)}, {&(0x7f00000011c0)=""/132, 0x84}, {&(0x7f0000001280)=""/249, 0xf9}, {&(0x7f0000001380)=""/107, 0x6b}, {&(0x7f0000001400)=""/185, 0xb9}, {&(0x7f00000014c0)=""/171, 0xab}, {&(0x7f0000001580)=""/194, 0xc2}, {&(0x7f0000001680)=""/4096, 0x1000}], 0xa, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:45:34 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00a39891e080af39a13d2165b21f803d7dc61b7feeb83804da3e217bff1decade28f08d975fe4cb41f14326b982fe38294fd99def2f02ea5ebea2a281dbf829eed5a9407b6e4cfef6e0a8237fe451f7510fec4e2f3a8e544e86fcdf8cb02c599bcc634c59cedfb652190e6b0682973c6a76ab91367fe8c7a8eff7af920bb1955769a8cf30570d8de57194929f14335e49d8b6e9f6331c1cd6f4aa78c43e8c623736daccb1e9b4571ad8dc829aef7d89dd1c9f4edaf8f2eeb1be6d19af0f7c78bf49806daae5d6842587d1d39009eda3c8993bd6eabdf17c4250314d2c262102426bf"]) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r5) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000100)) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000000)=r7) [ 1401.839925][T31943] binder: 31929:31943 ioctl c018620c 20000100 returned -1 02:45:34 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x230383) write$FUSE_DIRENT(r1, &(0x7f0000000240)={0x128, 0xffffffffffffffd1, 0x7, [{0x6, 0x0, 0x11, 0x8, 'securitytrusted:{'}, {0x2, 0x100000000, 0x5, 0x4, '(*,#\\'}, {0x80000, 0x0, 0x2, 0x8cd, '%+'}, {0x2, 0x8, 0x3, 0x6, 'em0'}, {0x0, 0x7, 0x0, 0x798baa84}, {0x2, 0x0, 0x1, 0x6, '\x95'}, {0x1, 0x7, 0x1, 0x6, ']'}, {0x3, 0x1, 0x11, 0x7ff, 'securitytrusted:{'}]}, 0x128) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) r2 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) lseek(r2, 0x6, 0x1) getdents64(r2, &(0x7f0000000000)=""/43, 0x2b) renameat(r2, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./file0\x00') 02:45:34 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000000003f8000000000000000000000000000000000005000000"], 0x8758) 02:45:34 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) semget$private(0x0, 0x1, 0x180) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:45:35 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x42401, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(0x0, r2, 0x0) r3 = getegid() getgroups(0x1, &(0x7f0000000540)=[r3]) fchownat(r0, &(0x7f0000000080)='./file0\x00', r2, r3, 0x100) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000580)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[], [{@fsname={'fsname', 0x3d, '\x8d\xb12\x9b\xdc\xbdp\aH\xeb\x98\x91o\x8a\xa3l\x14\x7f\x04Z2n\xcd;\xc5#!E\xdb\xe2\xa2\xa4tj>\xff\x98\xeer/\xaa\t\x1e\x05OD\x8f\xf2~\x9d\x98O\xa8\xf9\xdb\bN\xcd\"T\x9c\'\xf5\xc6u\x0f\x97\"\n\xa5\x89\xf7/3\xc8\x0e\xda\x9f\xba\xc7\xb43\xcc\x92\x116\x02\xa0w\xfe\x89G\xbd\xfb\x1e\xfe\x00\x00\x00\x00'}}, {@context={'context', 0x3d, 'staff_u'}}, {@smackfshat={'smackfshat', 0x3d, 'fd'}}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x37, 0x37, 0x39, 0x34, 0x37, 0x64, 0x60], 0x2d, [0x36, 0xa, 0x66, 0x61], 0x2d, [0x33, 0x65, 0x33, 0x38], 0x2d, [0x38, 0x64, 0x65, 0x36], 0x2d, [0x65, 0x66, 0x66, 0x37, 0x32, 0x32, 0x62, 0x65]}}}]}}) r5 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r5, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:35 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x44) [ 1402.343538][T32366] fuse: Bad value for 'user_id' 02:45:35 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x20100, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000019c0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1={0x0, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @in=@multicast1}, {0x2000000}}}, 0xb8}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f00000000c0)={0xf000000, 0x8, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9a090f, 0x3f, [], @p_u32=&(0x7f0000000000)=0x7}}) read$FUSE(r6, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) 02:45:35 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000080)={0x6, 'ip_vti0\x00', {0xffffffff}, 0x6a36}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r2, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) [ 1402.587867][T32560] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. 02:45:35 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000000000ff000000000000000000000000000000000005000000"], 0x8758) 02:45:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r5) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000100)) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000000c0)={0x6, 0x8, 0x4, 0x40000000, 0x3ff, {r3, r4/1000+10000}, {0x1, 0x8, 0x6, 0x80, 0x3, 0x3a, "eb0bb774"}, 0x9, 0x2, @fd=r7, 0x7, 0x0, r8}) ioctl$USBDEVFS_GET_CAPABILITIES(r9, 0x8004551a, &(0x7f0000000140)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r10 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r10, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) [ 1402.871872][T32751] binder: 32735:32751 ioctl c018620c 20000100 returned -1 02:45:35 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffff9, &(0x7f0000000280), 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg0\x00'}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) [ 1402.942558][T32751] binder: 32735:32751 ioctl c018620c 20000100 returned -1 [ 1402.950834][T32751] bridge0: port 1(bridge_slave_0) entered learning state 02:45:35 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',meafure,\x00']) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) [ 1403.185694][ T530] fuse: Unknown parameter 'meafure' 02:45:35 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) get_thread_area(&(0x7f0000000000)={0xf3ae35f, 0x20000800, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}) 02:45:36 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(0x0, r4, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(0x0, r6, 0x0) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffa, 0x4, &(0x7f0000000680)=[{&(0x7f0000000180)="e8ee735acdb5641cf8b1ab", 0xb, 0x8}, {&(0x7f0000000300)="3e82ee91e31322fa816387b3af59f69445628455f9970dc51668b8820d9919c8958bfca8f95a5340f310766dc96b0e37cc14739e50477604a9966ab6b4d13c9892e92f50a113e381f5ce47f084f3183220d98f40f80da0a58d2954b37be77fe6f719c4f05b7fbd240fd8315802fa2eae8035b56a9dca79098850e9131d1e0e49ee0b1a9e2f76a5c904b650c0c7d6dd7598a23cdabd458294fcb3d64830a5", 0x9e, 0xfffffffffffffffb}, {&(0x7f0000000540)="644f183c3f6eaefa9f771df5dfbe17c445a763cab4289d900031eb5e8c8cd5ac37d2b0ef6c62fd3b1ff46204b689a4b26a47d8f007a6ae2a209ff3b151b5af317df4ded7920bf8e1166d801fba782be650fe418893931c1a6a1d90edb98d225de775198081a1c224b68b685024212ae7cabf515f98071986fac47240bba226381a1f966060e2681086f4d8315ae69fe238c0fb", 0x93, 0x4b}, {&(0x7f0000000600)="8adcb0c893b2767fd802a38a7b000e6627cac343077abfb8b5d08f1d14dca95ac3348d90d8a149a81e9b28ecfd4c7bd12a9ad6c35d420e3915ea2d2b1534cc4ce5341670676f2605604137f7d1166e5853c23305aa269908f99a35197211d65dc3b592894b3ebe8ca4535dcca065750fe15c35b8f98531dbd6", 0x79, 0x100000000}], 0x8, &(0x7f0000000700)={[{@errors_continue='errors=continue'}], [{@uid_eq={'uid', 0x3d, r4}}, {@subj_role={'subj_role', 0x3d, '/dev/binder#\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@dont_appraise='dont_appraise'}, {@uid_eq={'uid', 0x3d, r6}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x5f, 0x66, 0x64, 0x38, 0x30, 0x39, 0x62], 0x2d, [0x38, 0x64, 0x64, 0x32], 0x2d, [0x54, 0x33, 0x37, 0x32], 0x2d, [0x32, 0x38, 0x66, 0x30], 0x2d, [0x33, 0x39, 0x63, 0x32, 0x34, 0x34, 0x63, 0x36]}}}]}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="4f053d", @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2467726f66705f69643da5298376d2856f4de4bf902d3e6de20000000000000009cb01edbe2a4c05008a8a65bccc801197bb519822", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r8 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r8, &(0x7f0000000040)='./file0\x00', 0x4000, 0x20, &(0x7f0000000440)) 02:45:36 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000008dffffff000000000000000000000000000000000005000000"], 0x8758) [ 1403.464886][ T655] binder: 627:655 ioctl c018620c 20000100 returned -1 [ 1403.513493][ T655] binder: 627:655 ioctl 4c07 0 returned -22 02:45:36 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x8001, 0x1c) move_mount(r0, &(0x7f0000000080)='./file0\x00', r0, 0x0, 0x44) 02:45:36 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000780)="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", 0x199, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r2, r4}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={'tgr128-generic\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='logon\x00', 0x0) [ 1403.616745][ T655] ntfs: (device loop4): parse_options(): Invalid uid option argument: 00000000004294967295 02:45:36 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(0x0, r4, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(0x0, r6, 0x0) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffa, 0x4, &(0x7f0000000680)=[{&(0x7f0000000180)="e8ee735acdb5641cf8b1ab", 0xb, 0x8}, {&(0x7f0000000300)="3e82ee91e31322fa816387b3af59f69445628455f9970dc51668b8820d9919c8958bfca8f95a5340f310766dc96b0e37cc14739e50477604a9966ab6b4d13c9892e92f50a113e381f5ce47f084f3183220d98f40f80da0a58d2954b37be77fe6f719c4f05b7fbd240fd8315802fa2eae8035b56a9dca79098850e9131d1e0e49ee0b1a9e2f76a5c904b650c0c7d6dd7598a23cdabd458294fcb3d64830a5", 0x9e, 0xfffffffffffffffb}, {&(0x7f0000000540)="644f183c3f6eaefa9f771df5dfbe17c445a763cab4289d900031eb5e8c8cd5ac37d2b0ef6c62fd3b1ff46204b689a4b26a47d8f007a6ae2a209ff3b151b5af317df4ded7920bf8e1166d801fba782be650fe418893931c1a6a1d90edb98d225de775198081a1c224b68b685024212ae7cabf515f98071986fac47240bba226381a1f966060e2681086f4d8315ae69fe238c0fb", 0x93, 0x4b}, {&(0x7f0000000600)="8adcb0c893b2767fd802a38a7b000e6627cac343077abfb8b5d08f1d14dca95ac3348d90d8a149a81e9b28ecfd4c7bd12a9ad6c35d420e3915ea2d2b1534cc4ce5341670676f2605604137f7d1166e5853c23305aa269908f99a35197211d65dc3b592894b3ebe8ca4535dcca065750fe15c35b8f98531dbd6", 0x79, 0x100000000}], 0x8, &(0x7f0000000700)={[{@errors_continue='errors=continue'}], [{@uid_eq={'uid', 0x3d, r4}}, {@subj_role={'subj_role', 0x3d, '/dev/binder#\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@dont_appraise='dont_appraise'}, {@uid_eq={'uid', 0x3d, r6}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x5f, 0x66, 0x64, 0x38, 0x30, 0x39, 0x62], 0x2d, [0x38, 0x64, 0x64, 0x32], 0x2d, [0x54, 0x33, 0x37, 0x32], 0x2d, [0x32, 0x38, 0x66, 0x30], 0x2d, [0x33, 0x39, 0x63, 0x32, 0x34, 0x34, 0x63, 0x36]}}}]}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="4f053d", @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2467726f66705f69643da5298376d2856f4de4bf902d3e6de20000000000000009cb01edbe2a4c05008a8a65bccc801197bb519822", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r8 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r8, &(0x7f0000000040)='./file0\x00', 0x4000, 0x20, &(0x7f0000000440)) 02:45:36 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000000c0)={0x5, 0x4, 0x1, 0xe54}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x9) move_mount(r1, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) 02:45:36 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000005000000000000000000000000000005000000"], 0x8758) 02:45:37 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) io_uring_setup(0xbb6, &(0x7f0000000240)={0x0, 0x0, 0x6, 0x3, 0x229}) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x101480) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x180, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000540)={0x0, 0x0, [], @raw_data=[0x9, 0x3, 0x1, 0x3, 0x200, 0x9, 0x1, 0x4, 0x6, 0x80, 0x4, 0x1, 0x2, 0x1, 0x80000000, 0x1ff, 0x8, 0x2, 0x80000000, 0x5e, 0x2, 0x8001, 0x80, 0x1, 0x8, 0xa327, 0x5, 0x1, 0x3, 0x1f, 0x7, 0x8]}) r4 = getpid() r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)={0x30, r8, 0xc8ef0a4335e6829f, 0x0, 0x0, {0xf}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000000a00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3a8, r8, 0xa, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc0000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfc28}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_MEDIA={0x114, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa7a0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf27}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x54}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x73}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_MEDIA={0xf4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xec}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb3d}]}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x899}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffeffff}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ptrace(0x10, r4) ptrace$getsig(0x2, r4, 0xffffffffff600043, &(0x7f0000000300)) sendmsg$AUDIT_SET(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x3e9, 0x400, 0x70bd25, 0x25dfdbfe, {0x42, 0x1, 0x2, r4, 0x8001, 0x6, 0x7ff, 0x0, 0x310}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x44048840}, 0x44000) [ 1404.271177][ T1070] binder: 1069:1070 ioctl c018620c 20000100 returned -1 02:45:37 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f00000000c0)) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) 02:45:37 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(0x0, r4, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(0x0, r6, 0x0) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffa, 0x4, &(0x7f0000000680)=[{&(0x7f0000000180)="e8ee735acdb5641cf8b1ab", 0xb, 0x8}, {&(0x7f0000000300)="3e82ee91e31322fa816387b3af59f69445628455f9970dc51668b8820d9919c8958bfca8f95a5340f310766dc96b0e37cc14739e50477604a9966ab6b4d13c9892e92f50a113e381f5ce47f084f3183220d98f40f80da0a58d2954b37be77fe6f719c4f05b7fbd240fd8315802fa2eae8035b56a9dca79098850e9131d1e0e49ee0b1a9e2f76a5c904b650c0c7d6dd7598a23cdabd458294fcb3d64830a5", 0x9e, 0xfffffffffffffffb}, {&(0x7f0000000540)="644f183c3f6eaefa9f771df5dfbe17c445a763cab4289d900031eb5e8c8cd5ac37d2b0ef6c62fd3b1ff46204b689a4b26a47d8f007a6ae2a209ff3b151b5af317df4ded7920bf8e1166d801fba782be650fe418893931c1a6a1d90edb98d225de775198081a1c224b68b685024212ae7cabf515f98071986fac47240bba226381a1f966060e2681086f4d8315ae69fe238c0fb", 0x93, 0x4b}, {&(0x7f0000000600)="8adcb0c893b2767fd802a38a7b000e6627cac343077abfb8b5d08f1d14dca95ac3348d90d8a149a81e9b28ecfd4c7bd12a9ad6c35d420e3915ea2d2b1534cc4ce5341670676f2605604137f7d1166e5853c23305aa269908f99a35197211d65dc3b592894b3ebe8ca4535dcca065750fe15c35b8f98531dbd6", 0x79, 0x100000000}], 0x8, &(0x7f0000000700)={[{@errors_continue='errors=continue'}], [{@uid_eq={'uid', 0x3d, r4}}, {@subj_role={'subj_role', 0x3d, '/dev/binder#\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@dont_appraise='dont_appraise'}, {@uid_eq={'uid', 0x3d, r6}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x5f, 0x66, 0x64, 0x38, 0x30, 0x39, 0x62], 0x2d, [0x38, 0x64, 0x64, 0x32], 0x2d, [0x54, 0x33, 0x37, 0x32], 0x2d, [0x32, 0x38, 0x66, 0x30], 0x2d, [0x33, 0x39, 0x63, 0x32, 0x34, 0x34, 0x63, 0x36]}}}]}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="4f053d", @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2467726f66705f69643da5298376d2856f4de4bf902d3e6de20000000000000009cb01edbe2a4c05008a8a65bccc801197bb519822", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r8 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r8, &(0x7f0000000040)='./file0\x00', 0x4000, 0x20, &(0x7f0000000440)) [ 1404.596642][ T1394] binder: 1364:1394 ioctl c018620c 20000100 returned -1 [ 1404.663815][ T1405] binder: 1404:1405 ioctl c018620c 20000100 returned -1 02:45:37 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsu\x00', 0x402000, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(r6, r5) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000240)={0x3}) getpeername$tipc(r4, &(0x7f0000000000)=@id, &(0x7f0000000080)=0x10) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000000010000000000000000000000000005000000"], 0x8758) 02:45:37 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000798000000000000000000000000000000000005000000"], 0x8758) [ 1404.903354][ T1561] binder: BINDER_SET_CONTEXT_MGR already set [ 1404.960414][ T1561] binder: 1514:1561 ioctl 40046207 0 returned -16 02:45:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) lseek(r3, 0x6, 0x3) getdents64(r3, &(0x7f0000000000)=""/43, 0x2b) fanotify_mark(r2, 0x0, 0x0, r3, &(0x7f0000000340)='./file0/file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video2\x00', 0x2, 0x0) r5 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000380)={0x4, 0x4, 0x4, 0x1, 0x88, {}, {0x1, 0x8, 0x9, 0x79, 0x4, 0x0, "f5c6d867"}, 0x4, 0x3, @planes=&(0x7f0000000280)={0x570, 0x1, @userptr, 0x804d}, 0x700, 0x0, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) move_mount(r5, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x1000, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e23,mmap,version=9p2000.u,access=any,access=user,access=', @ANYRESDEC=r7, @ANYBLOB="2c616669643d30783030303030303030303010b77745091bd81b52d5c387c35a1f783030303230302c66756e633d4b45584543aa494e495452414d46535f434845434b2c6f626a5f757365723d2c6c6f776c696e302c686173682c00"]) r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20\x00', 0x802900, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x8040ae9f, &(0x7f0000000300)) [ 1405.167049][ T1751] binder: 1737:1751 ioctl c018620c 20000100 returned -1 02:45:37 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000180)={0x80000000, 0x1, 0x1, "cc47de65abe1f7100d2f94ba2a7683173fe291e794125195ae1a1a831eba6bed", 0x59565955}) r4 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000240)=""/13, &(0x7f0000000280)=0xd) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000), 0x4) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) lseek(r5, 0x6, 0x1) getdents64(r5, &(0x7f0000000000)=""/43, 0x2b) statx(r5, &(0x7f0000000040)='./file0\x00', 0x0, 0x10, &(0x7f00000002c0)) 02:45:38 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000798000000000000000000000000000000000005000000"], 0x8758) [ 1405.426043][ T1911] binder: 1861:1911 ioctl c018620c 20000100 returned -1 02:45:38 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000000020000000000000000000000000005000000"], 0x8758) 02:45:38 executing program 1: ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0xa30000, 0x2, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9a0001, 0x8, [], @value=0x7}}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000140)=0x9000000000000) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000100)={0x7, 0x4}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r2, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) [ 1405.637503][ T2077] bridge0: port 1(bridge_slave_0) entered learning state 02:45:38 executing program 3: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x80, &(0x7f0000000440)) 02:45:38 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace$getsig(0x2, r1, 0xffffffffff600043, &(0x7f0000000300)) ptrace$getenv(0x4201, r1, 0x8, &(0x7f0000000000)) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) 02:45:38 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000798000000000000000000000000000000000005000000"], 0x8758) 02:45:39 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000000030000000000000000000000000005000000"], 0x8758) 02:45:39 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x9, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000200)={0x4, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="100000000600"/16, 0x10, 0x0, 0x0, 0x1}]) clock_gettime(0x0, &(0x7f0000000000)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x9, 0x4c000) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f00000002c0)={0x3, 0x3800, 0x6, 0x3}) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r6, 0x80045300, &(0x7f0000000240)) move_mount(r3, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) 02:45:39 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace$getsig(0x2, r1, 0xffffffffff600043, &(0x7f0000000300)) ptrace$setregs(0xb, r1, 0x0, &(0x7f0000000540)="c5c483647536c361aae8b80db32af41964b1af3175996a33413462ac39a517a9d2765f9718ea55196bcda01f0895b51bbb20f59a5a2ffacd97f1017fa18af774b949a121a580a5bed8f6dbdeb44d0badf84d2c151801c29c651db095f826408e37c13d3bdf887c77f993ffa12da957df6d6066524dc690bf16d6f91b491c3e2d22f018ffc0b9b0a9a141095a221d8ebd9eaae0db853c5d9487f8390c40da2d298ff3a5bb18cfd3bdbcb18a9f6a272c99e726431a14f183216c895fa60198c7504d5d97b016ea09f81a4c26b7ba4d1f71372e4a8b") r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_ENCAP_FLAGS={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x64}}, 0x0) sendto(r0, &(0x7f0000000240)="9de7e2e02c86fc9db0951cb6a039830b76788727c33239f72ac93f7b71232715fbce199c5a6afbf1c70312a5ee16e5a6dc6c2858578ab367fe36d62322e2864047d66e26a3f2758eded582ec00c4e452a0334383e0ea80dac7da752792000adb9055a5d28a29d9abc4a4a790a63262997b090b7736da3206b28404cf0e4d7d53fdcb4860d3b5c7723c25c95dedb5e9308662d634acd3ea300fd0cef7cafcd565718b4aee8b97096aac5113494da72599a887b4342363ac6154f1fcc6c3e81729604e2cc7c0a65d0c144191989e", 0xcd, 0x10801, &(0x7f0000000340)=@xdp={0x2c, 0x6, r6, 0x34}, 0x80) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r8 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r8, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:39 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) lseek(r3, 0x6, 0x3) getdents64(r3, &(0x7f0000000000)=""/43, 0x2b) fanotify_mark(r2, 0x0, 0x0, r3, &(0x7f0000000340)='./file0/file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video2\x00', 0x2, 0x0) r5 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000380)={0x4, 0x4, 0x4, 0x1, 0x88, {}, {0x1, 0x8, 0x9, 0x79, 0x4, 0x0, "f5c6d867"}, 0x4, 0x3, @planes=&(0x7f0000000280)={0x570, 0x1, @userptr, 0x804d}, 0x700, 0x0, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) move_mount(r5, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x1000, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e23,mmap,version=9p2000.u,access=any,access=user,access=', @ANYRESDEC=r7, @ANYBLOB="2c616669643d30783030303030303030303010b77745091bd81b52d5c387c35a1f783030303230302c66756e633d4b45584543aa494e495452414d46535f434845434b2c6f626a5f757365723d2c6c6f776c696e302c686173682c00"]) r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20\x00', 0x802900, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x8040ae9f, &(0x7f0000000300)) [ 1406.510786][ T2604] bridge0: port 1(bridge_slave_0) entered learning state [ 1406.527924][ T2602] binder: 2600:2602 ioctl c018620c 20000100 returned -1 [ 1406.562213][ T2602] binder: 2600:2602 ioctl 80045300 20000240 returned -22 [ 1406.642983][ T2654] binder: 2606:2654 ioctl c018620c 20000100 returned -1 02:45:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000100)=""/224) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x8000) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) move_mount(r3, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) 02:45:39 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000080)={0x50, 0x4, &(0x7f0000000540)="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", {0x100, 0xff, 0x38303553, 0x5, 0x8, 0x3, 0xc, 0x8a11}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r2, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:39 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000000040000000000000000000000000005000000"], 0x8758) 02:45:39 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) lseek(r3, 0x6, 0x3) getdents64(r3, &(0x7f0000000000)=""/43, 0x2b) fanotify_mark(r2, 0x0, 0x0, r3, &(0x7f0000000340)='./file0/file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video2\x00', 0x2, 0x0) r5 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000380)={0x4, 0x4, 0x4, 0x1, 0x88, {}, {0x1, 0x8, 0x9, 0x79, 0x4, 0x0, "f5c6d867"}, 0x4, 0x3, @planes=&(0x7f0000000280)={0x570, 0x1, @userptr, 0x804d}, 0x700, 0x0, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) move_mount(r5, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x1000, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e23,mmap,version=9p2000.u,access=any,access=user,access=', @ANYRESDEC=r7, @ANYBLOB="2c616669643d30783030303030303030303010b77745091bd81b52d5c387c35a1f783030303230302c66756e633d4b45584543aa494e495452414d46535f434845434b2c6f626a5f757365723d2c6c6f776c696e302c686173682c00"]) r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20\x00', 0x802900, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x8040ae9f, &(0x7f0000000300)) [ 1406.936030][ T2827] binder: 2823:2827 ioctl c018620c 20000100 returned -1 [ 1407.133373][ T2921] binder: 2838:2921 ioctl c018620c 20000100 returned -1 02:45:39 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x40, 0x82080) connect$l2tp(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1, 0x4}, 0x10) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) 02:45:40 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) lseek(r3, 0x6, 0x3) getdents64(r3, &(0x7f0000000000)=""/43, 0x2b) fanotify_mark(r2, 0x0, 0x0, r3, &(0x7f0000000340)='./file0/file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video2\x00', 0x2, 0x0) r5 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000380)={0x4, 0x4, 0x4, 0x1, 0x88, {}, {0x1, 0x8, 0x9, 0x79, 0x4, 0x0, "f5c6d867"}, 0x4, 0x3, @planes=&(0x7f0000000280)={0x570, 0x1, @userptr, 0x804d}, 0x700, 0x0, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) move_mount(r5, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x1000, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e23,mmap,version=9p2000.u,access=any,access=user,access=', @ANYRESDEC=r7, @ANYBLOB="2c616669643d30783030303030303030303010b77745091bd81b52d5c387c35a1f783030303230302c66756e633d4b45584543aa494e495452414d46535f434845434b2c6f626a5f757365723d2c6c6f776c696e302c686173682c00"]) r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20\x00', 0x802900, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x8040ae9f, &(0x7f0000000300)) 02:45:40 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',000000000000?\x00id=\x00'/42, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r2, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="008630a69fff93fd060f66bf722d09000000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x9, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b38b) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={r6, 0x7f, 0x1000}, &(0x7f0000000080)=0x8) statx(r1, &(0x7f0000000040)='./file0\x00', 0x6000, 0x0, &(0x7f0000000440)) 02:45:40 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x1) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) [ 1407.573534][ T3151] fuse: Unknown parameter '000000000000?' [ 1407.654343][ T3156] binder: 3153:3156 ioctl c018620c 20000100 returned -1 02:45:40 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000000070000000000000000000000000005000000"], 0x8758) 02:45:40 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) lseek(r3, 0x6, 0x3) getdents64(r3, &(0x7f0000000000)=""/43, 0x2b) fanotify_mark(r2, 0x0, 0x0, r3, &(0x7f0000000340)='./file0/file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video2\x00', 0x2, 0x0) r5 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000380)={0x4, 0x4, 0x4, 0x1, 0x88, {}, {0x1, 0x8, 0x9, 0x79, 0x4, 0x0, "f5c6d867"}, 0x4, 0x3, @planes=&(0x7f0000000280)={0x570, 0x1, @userptr, 0x804d}, 0x700, 0x0, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) move_mount(r5, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x1000, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e23,mmap,version=9p2000.u,access=any,access=user,access=', @ANYRESDEC=r7, @ANYBLOB="2c616669643d30783030303030303030303010b77745091bd81b52d5c387c35a1f783030303230302c66756e633d4b45584543aa494e495452414d46535f434845434b2c6f626a5f757365723d2c6c6f776c696e302c686173682c00"]) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20\x00', 0x802900, 0x0) 02:45:40 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000100)) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d19, &(0x7f0000000000)=0x2b) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_ENCAP_FLAGS={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x64}}, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={r4, @broadcast, @local}, 0xc) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r7 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r7, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) [ 1408.054929][ T3378] binder: 3375:3378 ioctl c018620c 20000100 returned -1 02:45:40 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000000090000000000000000000000000005000000"], 0x8758) 02:45:40 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="6a4300000000000000000f0000001c0007800c0003e74648d2bf358b5268212a0000000000000000000c"], 0x30}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x368, r4, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffdd}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x547b5f0f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x63}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcbde}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdd9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3f0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}]}, @TIPC_NLA_BEARER={0x13c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xd, @loopback, 0x7f}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xffff0001, @local, 0x1000}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1, @mcast2, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x26043a72}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5d5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfc00000}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x28, @rand_addr="c6f6201de2df9e03bc6294a51ca84f64", 0xfffffff8}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0x1b}, 0xffffffff}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x79, @mcast2}}}}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffed8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x20}]}]}, 0x368}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r5 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r5, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) 02:45:41 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) lseek(r3, 0x6, 0x3) getdents64(r3, &(0x7f0000000000)=""/43, 0x2b) fanotify_mark(r2, 0x0, 0x0, r3, &(0x7f0000000340)='./file0/file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video2\x00', 0x2, 0x0) r5 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000380)={0x4, 0x4, 0x4, 0x1, 0x88, {}, {0x1, 0x8, 0x9, 0x79, 0x4, 0x0, "f5c6d867"}, 0x4, 0x3, @planes=&(0x7f0000000280)={0x570, 0x1, @userptr, 0x804d}, 0x700, 0x0, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) move_mount(r5, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x1000, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e23,mmap,version=9p2000.u,access=any,access=user,access=', @ANYRESDEC=r7, @ANYBLOB="2c616669643d30783030303030303030303010b77745091bd81b52d5c387c35a1f783030303230302c66756e633d4b45584543aa494e495452414d46535f434845434b2c6f626a5f757365723d2c6c6f776c696e302c686173682c00"]) [ 1408.321270][ T3458] binder: 3384:3458 ioctl c018620c 20000100 returned -1 [ 1408.465170][ T3557] binder: 3542:3557 ioctl c018620c 20000100 returned -1 02:45:41 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(0x0, r2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}}) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r3, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:41 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) creat(&(0x7f00000001c0)='./file0\x00', 0x110) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0x6, 0x1) getdents64(r1, &(0x7f0000000000)=""/43, 0x2b) linkat(r1, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0x1400) getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@l2tp={0x2, 0x0, @remote}, &(0x7f0000000000)=0x80) fcntl$getown(r0, 0x9) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) [ 1408.634835][ T3693] fuse: Bad value for 'user_id' 02:45:41 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) lseek(r3, 0x6, 0x3) getdents64(r3, &(0x7f0000000000)=""/43, 0x2b) fanotify_mark(r2, 0x0, 0x0, r3, &(0x7f0000000340)='./file0/file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video2\x00', 0x2, 0x0) r5 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000380)={0x4, 0x4, 0x4, 0x1, 0x88, {}, {0x1, 0x8, 0x9, 0x79, 0x4, 0x0, "f5c6d867"}, 0x4, 0x3, @planes=&(0x7f0000000280)={0x570, 0x1, @userptr, 0x804d}, 0x700, 0x0, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) move_mount(r5, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x1000, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e23,mmap,version=9p2000.u,access=any,access=user,access=', @ANYRESDEC=r7, @ANYBLOB="2c616669643d30783030303030303030303010b77745091bd81b52d5c387c35a1f783030303230302c66756e633d4b45584543aa494e495452414d46535f434845434b2c6f626a5f757365723d2c6c6f776c696e302c686173682c00"]) 02:45:41 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000000000000000000a0000000000000000000000000005000000"], 0x8758) [ 1408.918021][ T3924] binder: 3861:3924 ioctl c018620c 20000100 returned -1 02:45:41 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6}, @IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_ENCAP_FLAGS={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x64}}, 0x0) sendmmsg(r2, &(0x7f0000005780)=[{{&(0x7f0000000240)=@in6={0xa, 0x4e20, 0x29, @local, 0x8}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)="eba0c1ce8aa2", 0x6}, {&(0x7f0000000540)="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", 0x1000}], 0x2, &(0x7f0000001540)=[{0xb8, 0xb, 0x6, "63e6cc89e7bf30a174b81c2d25172645aad8e4450d79f0b61facc6fb157cd7561b953eb5fe67fa3b68b8c4a8cb1d440791de960e07e728e426289768fbb9729424033a91237a8a7c7890339eb8315795cc2d7b27dca79e41b50f41c6ca02de3d788124f58d54843e26f998d237e4bfb10814eb7e9a2debc43c434d09457f55bcb9c341eb387b0bd63959baaf8a4573195936f12e418b8473738fcab481bc5fdb749353"}, {0x18, 0x115, 0x101, "de92e92436"}, {0x110, 0x108, 0x6, "eb520bffb0a807a382f08275e9d9b276e0b1e3ebc08f32c6da91f896d3510131e492121e0a4cc088f4a4e28c3816362b5de9c2afe82d7121810a711858e1df7cdc36758617ab2d6c69a5b815de2864357d70203029f4e65bc28a8733e637eea119a93c9812c95b43880bc0b095ddd873b917903241deb5ce34bed4e749a1fd98563b65d8f63d5ccc618f9450d0712f1687c5dfc0f8a4993481fc0784092f5f7b23a5ce98325ed14d8787cd8bf8289310c8c7807ecafcb0281677a415ba757cc963125abbad2604f1c49a1bf4d45ba8a0552c7375f9f18cd7c870aa3c8471edeb4e29c869144efdc4089ac138f6fdf8f69eb77e634befa6f29e"}], 0x1e0}}, {{&(0x7f00000002c0)=@isdn={0x22, 0x80, 0x7f, 0x80, 0x2}, 0x80, &(0x7f0000002980)=[{&(0x7f0000000340)="24973bbe213bee65e13f56a2f9454f383d7f79dabd3010d269de36fb84b54645807599a5aa74bf0a1fa0399415316611b681781d5120fea01013a31a4d386cdd70d35b1d0c6c584e16837ae31874cce2991e73ea1434b1bb97d3b26d7e6351bb6fd18218b631656e7ffe3c15", 0x6c}, {&(0x7f0000001740)="d1be26ee02b9e9bf11be8c453007a7aadea94d9d391dece6dcedb9ebacac49e064cad5f6b524b22e4685c1ce7db3de3fd7c103a63394870da56b66e45cbe33c863ab647f3068be8693c1d0f4f1f1c9b50d2dd6eac2b35d", 0x57}, {&(0x7f0000000180)="35792fad071c6b16544000ddda3ca345801b574490f0f69c06bd", 0x1a}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000027c0)="6c2151572df1784cb4b929698962c9c3c90b61d5fc90a2f4778861e356c82a14daa3563b3961ba8d925f4bd3b69763d6e21e3b55003728505e303201eb22a82164efc8810f46c1fc21c6f5e0a7153fce8d93835640f7bc348dc432888d62d85257bccd259ad2fdb1cf1ecbd358bb6cd26562a30a7ed8ad38f2b75a192afe8990bed6f38adf46711a570e47930ad49efb6978128c732eb90de57a3ee03e37f614f0ea229e9539e5a3db7e3e8e6108b020d66165a7587e915b70f4ae23b14596", 0xbf}, {&(0x7f0000002880)="78c3982522aea81685d623132a43f3e2cdb9fd41df555aea97491fa23e463ea0a88c64e828bc18b606d67f5969d5f1365f00e855faa96c31107faea2809d0e21828023ea747ee65b189d37ba398e5ec61823afaffadd384369db37314c4f4d8e545f0d1bc0eb47b0609eb7c3b96fb8f2654def8eeff464343ae03ab822894fbf7868d17ba7af756d450c1c4fd4b90486f7ba66bc9929ab12146a397d0f34a7102818b67ff2e06e5187244a29e7aee803e0bd8f60dadaa190a8bf8baec4f2122e56770e177edafba0832caeaf35ea941091b7e5703a20c5ac0ff1b0cd60781b0431fbeae3d1963b43375e00773f62b99e0c", 0xf1}, {&(0x7f00000003c0)="78f7a27c1d2f3f6136452f8a832820fa845b61bd0c042fb58190ee58ad4e3509cbea0b0a04f1387ceda048b64a4cd5fc11a6910b", 0x34}], 0x7}}, {{&(0x7f0000002a00)=@ll={0x11, 0x64a7b515cadcf84b, r7, 0x1, 0x3f, 0x6, @dev={[], 0xf}}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002a80)="1eb0f231aec33ac7037dc515da23fc289dc22b5477f000e626dd6754c02fac838f815e273995c39d007b6aac74de6bbcb119b48a4609d6add0807a55c141e8884b2ab753f6052151975679d920a6fcfacd8f3060f6ef6815713f624c59fdd46fa055aea0b5c15cc7d85596eebd85cc17a64af481de83b674afe1090ca93579ae5e6be4b74450076b35bce38989f235ace7188ee82a3ff01b8bdc9b572c628cfdae7312062e70fc65275630e728eb6532f638398dff9500ebea23a5591f21de0c8a77f1a53a4374f6323bb2e3f781dac2b418c4be20e2801a824721d2cc01a63a8b1e2350", 0xe4}, {&(0x7f0000002b80)="5a5270ea30ab7b2c4db5994db9f9eb4165ae9a69a0edc828e4fd57d0f265e1ab7feb8672f415ca", 0x27}, {&(0x7f0000002bc0)="6b962b6b2216c4c15beb46d19fd929d215fcb52a08978648b3d8f964f8de9acc9b2b98cfd87b31ac82ba5a0a8fa26cfeb2fda7296fec10351a6ff60fc9272ac96deb85bcbe74caca3e050ccff2ffb11603e86bd01c5c2623cdd0e6b9c744ec4837eed1976734f751b34dce4cb1b1e9f8535bd67859d8b6cbaf03e58065fba90adbbeefab33c66d3f838b76b3c5e45f939c346ced83ec573153860b3539057da5c2468d252d143b346f8e20076e34c0f2b4d6b6", 0xb3}], 0x3, &(0x7f0000002cc0)=[{0x58, 0x0, 0xffffffff, "0f9a8257ba65225106266500c39b726f3a9f1191a74f267831703884652e3dc0b997f2b651e9430a772dac03382484ac121acdc948536753e59683c50c2a6a62a105"}, {0xe8, 0x110, 0x0, "9c284e340bb2c7a952df76584f4433708870bfd2c477b31d9279c0bcde0d82b8e6e1a969c7d67825d96b642a9027cd0325db3663bf57fabac0202c91303975ad46dabb9e9a48f68578488f53e02fcb1b9d7342585f5cd00282038a229016664bd36da75f27675a043472bc60c2acb86e6302addda1e04f06a8364604c42768ee46d3c22eb4f5cc845dc3b85cab1dafbfb2efc4fc2b5c56985e97949fdf090aa9a5d35462fc4e82f5ed91cb5e4ba5d386da0ae636b43a56603790c3f453762051e4eea87a8760a1ed8c7648abdbf85c11e7"}, {0xb8, 0x104, 0x1, "93fc3633d94044ef299358dda8192a336293dff9705e12aca81ab8b36cf8c07206748f4f841c0f9de579e45091ba0afc08bb9086b4ec0c54ee32e12b9a00492451ea6efca694108a739e0e700363f167593ad06d7f2e6262b218ddd474d50417594fb1007dac28c8a00279a6479220a7fb371d60b171e70abd5fba47d333d6248008f5edb270f88268f3574b36dc848788f501186f98402f00e28cb0b72d166b514f256c"}], 0x1f8}}, {{&(0x7f0000002ec0)=@x25={0x9, @remote={[], 0x0}}, 0x80, &(0x7f0000003280)=[{&(0x7f0000002f40)="148d4e93b7b3bf47eb7269974f9bc8c52c9e1c61d6b5d730cc48b97cbc2b677b59a74df6f2ddc125f963837a47a1de99abfd57bd7f2e65bdae0d120c", 0x3c}, {&(0x7f0000002f80)="a874b972c95bbfac9725bb260e2d0f02bf5fa1ddbba5831096481e66e85e700af6b4de997adbf61fce691d3dcf8c4d363932a29753d2ae4714b29830c9729b163a66168bf65312c72ba91f3c344972e3c03161097e2bf82427ac667fd930511331b95cd6509c39674da77d29eff7b30ddb1e145d73f4f22b417d307b60313bc7ba9a9a1e5cdb6adf4d2db7bd5882cd4c1a0174cd", 0x94}, {&(0x7f0000003040)="e57c99d166b199be2b831a58f09066ad85346f358686d00cf2ba920941dbe3c1d86017a825bcf815e1be3d38547500a278bfac02cb8d7f6854d775893b946e73525990e1f8e2e0deefa9f4f8bab9d4180d378c9d4a3b7f474df892c0f32163993de98c5468b8ed0301a046636bbac02c0c069dfd14bb4372eb58cfdda8b99d1eee608cf13f84d1e66caddc0f618faa69803bf39eb7c47ff310eaffbe883e4d2f581c1dec122b6058ac82df0628715d", 0xaf}, {&(0x7f0000003100)="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", 0xfc}, {&(0x7f0000003200)="5280a0665acc3ff1578036c3a7a0c375930a6115254eeede05232351c42f9093b10ab25a3ad9ac517d60974918746aec9cdd0724f10d681184965e306dff49abe773b40a6254ce4a11e3d504c6052b67b8701961", 0x54}], 0x5, &(0x7f0000003300)=[{0x80, 0x114, 0x7f, "dbe580cdfe09aa2c3b314cad5968a0eaa6e3e35fcbc0acaa5663269f48658cd1fd3baa970f1b6e7140cea18753a16a8e8fb735f887b39336e9c4bfd2f9f8f81d08fe3f202c8a70a080ec4b2b5cf52d7da135fee197cf6b1a8d5455f07980c52507c5a264165fdec363a4cc695cf014"}], 0x80}}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003380)="57a4470b897b49802d16e2f7dcb9d3c1238921b2dfd3bfb7f5bacbd8696d0f449f9106b2455052b926eacee89bbb3de0012a856e181358f8e1a7e858535dcde038bbecf184d4acc912901e1d59973946aee2cbdceee21df01fa34a372c20455a2e8cc127f481f5a6df3b94cba4e51d5211421f9c7d9d5866c8d386df6aba00512a170c46627ee927b6c16981bb915a4c15eab9bce9780cf7af6eaa3885789d8cb8971d1d9586a06cfaa5338703feb31791763fb48041a3f5bfa062d8954c88d84dcd62c92421a75e3d3853be5be1313347c2bda4cabc394f2c", 0xd9}, {&(0x7f0000003480)="f23b18694f4775f3081f0766c7c1e00eedcf06316cd43206c4501300218d091c91f9a0bf2b2cb772beb6f1", 0x2b}], 0x2, &(0x7f0000003500)=[{0x1010, 0x101, 0x8, "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"}, {0xc0, 0x116, 0x0, "3e7e3f03d1f43a1bde245341164aa8333381da02c41f571e03f7b6ab83ebe3118907b6894f40e6077d9eabdab7ba178699b4b73d31c1230407f76c59748fb8f22a8505f56e07828113dcb5a2ab084a8487a599676664aacea4b0c0e405a6cc5a5a376a8d41b7bbc81647794afa57c55797e81189ecf5298854f4cfb5e5261bb9c0cd485db7427840a42e1227b60ee1cbedce3580cb157639cbf3549b665bbfa5f4672fd341a8c8143ba3928b94df90e4"}, {0xb8, 0x84, 0x6, "895f9e1defcf0f4fe7f9aa1936eb8bf7cbe9a547fd4ce72e611bf2851657dbf06b0cf7aaa71858ffb523b9cc31dbdde381b7d36eef7ddf1ac5cb98a993746299ef2e6038d26d2e31f71ea43b498ae4bf6dd5efed15a49fce00a2398fca6c2345ad05b521a3863f06f63c915cb4a417acf43187220f73965ce2a7ba957833d78e9cf068d9cd1673d1949fd1f76f7df5552f695031593812e5e5000947fe36cd1864"}], 0x1188}}, {{0x0, 0x0, &(0x7f0000004800)=[{&(0x7f00000046c0)="335e54239a3532ad49b2087fdc56c6bc2b526cb5664987784c0e97c49b57e0bfb6dd1ea5a7e3e2523af77c01fb542ec2be80dee4afae64b09fa2bc99a248e5975ebc0fba1b2fe0a4c6c4439062741fea10343039e2b78766c6be9c46d963182295ddc7c5d73d903475d021978d8fb391fd5c42c866c05ae1c7bbf958d200ccd4f2c8d4ef89bf02874279077323b251d7ae0b76448c73de8234c93f6d9269970c1bff040b32fed4fdf7593c02869708a467970c557685ef8bcfa721126de6edf5d5f681fe5aafe141c6f51d787cbcf3efb27bdcac40a767742ecc9240", 0xdc}, {&(0x7f00000047c0)="acfca77a1f6072929b4c0e389d8948a4f5cb20df6beb89882406c3aa7bebe298", 0x20}], 0x2, &(0x7f0000004840)=[{0x60, 0x0, 0x0, "8818c6d6b63523747ab9392964f535f462eee0cd72b5a2ac9b6ec7252327c551db21f09577f40fdfc8abebd9be936c0cbaee7eb3c8b4efe56630c14165414dc5e326cf8b30c5227364ead490"}, {0xb0, 0x10e, 0x9, "75e8f4aacdcfe011b9f40b31fa01341ec9bdef5f9184042bb648b2475080d95a138441a66589f4ef7208399dee9b097393e965c28af6dcdde06332c8a7b807814d1f0da1ae8215c05d1efe77acbcc065988560f7db758756f85af256a7588b6041268c6110e656b84c6810b9ce1b57f0e80714b28ad2add3ecc7209415f3a5d534a8dd1b844bf5e69f003089803a72c83f23b2d4d52b8a7a6f7070f676d6"}, {0xf0, 0x109, 0x7, "b29890908167b7f42246c0af862208260e9cef0e58cdcdf3c77f281fd1e61e967c5803d6843cb01a703724ce4555c2148f9e1ef295c12916c6064e45a1400927e49d65f3006499c9bd36e39dfedaa567213259380203ea85e9bda896981d426c2ba641237afaa8c053dc317b231ade77d5544becf0b0df52c371a0d1b1cb7c802db19ce0090e01b83ec332a657042bb18814501f344c57182daf18456651ba206e42d752b2b7ed38ba2fd695087440b1063781179a4199882a6fc2f02c5146a9ee86eaa5e7a4b4ce29a8e6e643d8a150111f69dd8ec0e32be071c6"}, {0x80, 0x10e, 0x0, "c3ff1c1ac11cbc9db9143454316ac7959b3976d4722187d1cc85c77df608789bdd6df93e3ba0a4013df0b4ee1f7f7e86575d39f37df6a1f14c17269f8b58e3fe0b48a99f07279093ffb2b0d788f8238381e42a39d0aab66a9264fbb219e6c3e861e20982b190d76aa703b4"}, {0xd0, 0x111, 0x400, "f81f3421b3a94b200fb9380df96477e2c0fd1278608e9421f1edb04b6def4af8a14741a3c8b1763c8167a4ee328b1d8caa6f5fe88de79f1b93d2c3f09da5f4f4e7bd4679766c3b20aa65127a8c9299edd6cbfd840bcb00a5a807556320afdaa465e886faa612687c18ce5f634519ce5375307cfcf1a0cd3a25c1fec8526b4f4c6f37c713584abc5778973377154634510d16ab2d1779d8212a73454c3b2763ca3eb27a715352a916835600d1fb3469fdfc58237d226f4cafd0273eaf1fcb9db1"}], 0x350}}, {{&(0x7f0000004bc0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'gcm-aes-ce\x00'}, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000004c40)="4640072f80749e1f04eebf1f6dd6a3e17d527d22acdb89e651b00711785ef54a234eeca47fe2f50dd36c220f5c9ad54aa7253827ff20fd83b64d33610165624770977eb020e20145", 0x48}], 0x1, &(0x7f0000004d00)=[{0xf0, 0x10e, 0xe6, "948ed06464195ea107208291be904e635bd042e7a30bfdab7e6bf481d1beccb4974485f2dba0802d9b80268142f2ce8d2467abd0a53d2394eafb383529320a1838282b4cee7aa051c8a93f522afebf435f5b4ef1fe582cf72123d4e5ea7f1ff1b1a9ae8e80d74926793d8b8511a6509be95028a969f1a4cfb061262e8b9ba3c837196fefcb8ad917abff7c12bd6b3f7f6480a8d46943571dde2a41be25964e430111030c14345485f5675706b1e0892ca8075c85db670d7d0928b8071f694ec153661468318b31d6bffb3f6e39c065f0be3a831bcfa713976b1e95707376"}, {0xf8, 0x102, 0xffffffff, "c5dd293c10b172d6ccb1e758c39b3aed8d20a16cfa27e4ce1686b6af36874c07b4b217487a8e6b16c987e79b43cc41f02c482823b25e0ee928ab8b6de0b5011c85593b66d0693b1505f185f2ce7d5981c0423b1102aed811f7f0b5f75ca2e460af17e92f1c9198b6c06ee067509c35998a4acb4500e6280dc42d7fc0d1e553aef17295ef7fda3e914eaa14a90c1616e27f79f96397145fbd63c91456b7493df3c01b6166a04d42e5709473922f7bccaf57b72253c5790a9210508211b78024440f129ac6ca3ff3b1d04639f5534d48d3a75221185140015119dd53ff41f51f6eec582d"}, {0xb8, 0x104, 0x2b208a60, "397773df61118d2c3253fe14696753ff6d70ce70e5dff916246cd379b8ef5480776881334ece71b0194bc5a109dc421d0e953f8cfe15a4ed835d5a91b4d9c92a608ea02fcb3f732841e6dce5671a2e95ac2b1e3085ca30f9854661b788da3a44847938ea87b66f760656e8393e15d831e1253c57456c7bc99bdd92a35c3006e3f8dfc7c3ab61fd1bdacd816f701ec7571a992fa1d12810b1d02b2b3f3cdad580af3e4a"}, {0xa8, 0x6, 0x401, "2572488787fec03062a1eca841b381721cf2257a9ec9788ed4ea34c55ad8ba1eda557665b321c7fc90697d7a32da540a2f8e328c7774ed8132a78f606e90d8cde44da3bc01a268aabb0b8223b0a21b4dfa88fcf5b7135e5aab776373aa769e0de00e78f6d7600ae6f76f8970dd3eaa267896bcb3d082e8eb0e4a79f1c8e110f5066001942a3aaa544c1827c9cfcac1e361875c5692f3127d"}, {0x100, 0x109, 0x7, "c67e5e694e5b42d0557e4804fd8ba20bf993dbba4f3fcca5c04e30416b9f176ec18aea5c5d82215d5f1983732ca2f9d24e1f633b1382027f4b1419ef64e4b9fa415a562fc22b840275104eb0614b0f803d4b8eafbb51bb3d3d0ce04159602ebb160fb3c2d86422f2e0f8bf9d0efedb60834b366010b7201798494b2513308a0622420b377f38fdb45184618f724569a59a764bdc2f8c2a102a4f608689457cc47eb166b5053b2c46509c7785735847ddb03ad1615fcc73cf62396ced96dc685cee9c42f9f8ceee1e0a92ee7625f5c402623e70e2f31b377a8141f00183ba38135c87f3c434b831483fcc"}, {0x40, 0x101, 0x7, "8cc332a01768beee39ae3b8f085644fdd2ff0731772b5615b096817a5da6e070f77a8d95cf69e7af58fdf812"}, {0x30, 0x1, 0x3f, "96eb177ff0f4d8b8cd0d9c6c23002360b64ab18e12da1e79df01065fd9dcc8"}], 0x4b8}}, {{&(0x7f00000051c0)=@nl=@kern={0x10, 0x0, 0x0, 0x80000}, 0x80, &(0x7f00000056c0)=[{&(0x7f0000005240)="df5b7769dff6f83b9f6ed059dfb5d7029ef594ba7b9ee4a8f4009669314e6b78da1a37d4763fdf009cdb91a2dbda53feaa3ca57b2cf6296acee6ed6d349b12ca36c1f58056ca5f02d53b4774ece05c563c6a8c3b5b09f5ba0f0674c6e7722a57889529b41e99ca906538", 0x6a}, {&(0x7f00000052c0)="c16d6078a3eced60b3ce8ed78d66bb88cdb823e3646ba995ff4a3b67165f37df8385b5f4b31b450bb2496aa0d4fbe0466660c1a8ae5d17de9804ebe47bf43ed647ceb4c3c80bda3b33363784bf69a2587d776ba521a2f52291a5fa713507ea56eeea1706aca892d6d193b5c5abeb60a5c2b0dd2a411a16159c4c18131a2e830d1a26c336f2cbe54318d10de5a5cd31f7b5", 0x91}, {&(0x7f0000005380)}, {&(0x7f00000053c0)="3cbc780cc6f9da74f1e5bbc1e8275f74f48102f1ce7a281f98ac5a9750cf36005a920ca632de5cf4ec52accb925e8e64776f122d200016a524dd599f12c32c0a60e5f16bc42415b098b99d88da847156cb664b9d4d63ea03c5a81e9a621cabe59c8ac40bcac2c84d2b09640a4f473337b3f9f94edb9b984a49b2d905a9c4c9ff1eeabaf1d0e2c5e6f485810aa845f3ddeefea5e5b1b3f28fc40a94af04553aa58b8777c71c078a011c72adb15e1f33d1702676b526b5dc530a4a1730", 0xbc}, {&(0x7f0000005480)="a2b6a49025d4c7b96270469c81fd9498c8eae7930738e118fa068e686b58f6ad2b4d0ee4ef3cb86f1f19d70aefaa6952cecd5dc4c66be947bb473fbb3d2cf4e104937fa7da6329a3a030ffe6f1e7e9081a53bd36d6b3a669d1ef7e7a8a2ad0d7b771ed93dc5a4634dd85fce4d3d157efccec7111fc9a0b97290288bfd0ccb6be44ae28fe24083e79f6a62b3d337cdbb7e598a62d8cdceabab89b05247de352ed504dc4a1ea0b1ebccab89caabc8ff7d726838132b90c", 0xb6}, {&(0x7f0000005540)="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", 0xfa}, {&(0x7f0000005640)="343e55761334fb8cc6f831b8902764976855184c4862159eb3eb931889c11997401163527e3cc3476e5aa0dae8b319aded6ee9b31f8f2b3c3df591b0f2ec4ede0bfded888dbac3edc5762d20738c0c4896def97bd851197d79bf884b6488917787aa8f21", 0x64}], 0x7, &(0x7f0000005740)=[{0x28, 0x188, 0x1, "c5da462c2b6d1ad4af1027dd01133b48b25919"}], 0x28}}], 0x8, 0x4000000) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:41 executing program 1: socketpair(0x15, 0x0, 0x9a9, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000380)={0x7bb}, 0x4) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) 02:45:41 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) lseek(r3, 0x6, 0x3) getdents64(r3, &(0x7f0000000000)=""/43, 0x2b) fanotify_mark(r2, 0x0, 0x0, r3, &(0x7f0000000340)='./file0/file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video2\x00', 0x2, 0x0) r5 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000380)={0x4, 0x4, 0x4, 0x1, 0x88, {}, {0x1, 0x8, 0x9, 0x79, 0x4, 0x0, "f5c6d867"}, 0x4, 0x3, @planes=&(0x7f0000000280)={0x570, 0x1, @userptr, 0x804d}, 0x700, 0x0, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) move_mount(r5, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) [ 1409.142104][ T3969] bridge0: port 1(bridge_slave_0) entered learning state [ 1409.315260][ T4068] binder: 3974:4068 ioctl c018620c 20000100 returned -1 02:45:42 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000000000000000000c0000000000000000000000000005000000"], 0x8758) 02:45:42 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) lseek(r3, 0x6, 0x3) getdents64(r3, &(0x7f0000000000)=""/43, 0x2b) fanotify_mark(r2, 0x0, 0x0, r3, &(0x7f0000000340)='./file0/file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video2\x00', 0x2, 0x0) r5 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000380)={0x4, 0x4, 0x4, 0x1, 0x88, {}, {0x1, 0x8, 0x9, 0x79, 0x4, 0x0, "f5c6d867"}, 0x4, 0x3, @planes=&(0x7f0000000280)={0x570, 0x1, @userptr, 0x804d}, 0x700, 0x0, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) move_mount(r5, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) 02:45:42 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x40000, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e22, 0x101, @loopback, 0x680}], 0x2c) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="02080000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x9, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b38b) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000000c0)={r7, 0x101}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={r8, 0x5}, 0x8) r9 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r9, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) 02:45:42 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000240)) r4 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r4, &(0x7f0000000040)='./file0\x00', 0x4000, 0x1, &(0x7f0000000300)) [ 1409.625242][ T4198] binder: 4196:4198 ioctl c018620c 20000100 returned -1 [ 1409.728550][ T4209] binder: 4200:4209 ioctl c018620c 20000100 returned -1 02:45:42 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x48c) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) [ 1409.839871][ T4248] binder: 4205:4248 ioctl c018620c 20000100 returned -1 [ 1409.873400][ T4248] binder: 4205:4248 ioctl c0bc5310 20000240 returned -22 02:45:42 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) lseek(r3, 0x6, 0x3) getdents64(r3, &(0x7f0000000000)=""/43, 0x2b) fanotify_mark(r2, 0x0, 0x0, r3, &(0x7f0000000340)='./file0/file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video2\x00', 0x2, 0x0) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000380)={0x4, 0x4, 0x4, 0x1, 0x88, {}, {0x1, 0x8, 0x9, 0x79, 0x4, 0x0, "f5c6d867"}, 0x4, 0x3, @planes=&(0x7f0000000280)={0x570, 0x1, @userptr, 0x804d}, 0x700, 0x0, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) 02:45:42 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000000000000000050c0000000000000000000000000005000000"], 0x8758) 02:45:42 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000000)) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000240)) r4 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r4, &(0x7f0000000040)='./file0\x00', 0x4000, 0x1, &(0x7f0000000440)) [ 1410.069933][ T4398] binder: 4370:4398 ioctl c018620c 20000100 returned -1 [ 1410.092136][ T4383] binder: 4324:4383 ioctl c018620c 20000100 returned -1 02:45:42 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) lseek(r3, 0x6, 0x3) getdents64(r3, &(0x7f0000000000)=""/43, 0x2b) fanotify_mark(r2, 0x0, 0x0, r3, &(0x7f0000000340)='./file0/file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video2\x00', 0x2, 0x0) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000380)={0x4, 0x4, 0x4, 0x1, 0x88, {}, {0x1, 0x8, 0x9, 0x79, 0x4, 0x0, "f5c6d867"}, 0x4, 0x3, @planes=&(0x7f0000000280)={0x570, 0x1, @userptr, 0x804d}, 0x700}) [ 1410.371674][ T4518] binder: 4496:4518 ioctl c018620c 20000100 returned -1 [ 1410.375861][ T4521] binder: 4519:4521 ioctl c018620c 20000100 returned -1 02:45:43 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x9, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b38b) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)={r6, 0x9}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={r7, 0x3f, 0x7}, 0x8) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000000)='lazytime\x00', 0x0, 0x0) r8 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r8, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) [ 1410.431786][ T4518] binder: 4496:4518 ioctl 4b64 20000000 returned -22 02:45:43 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) lseek(r3, 0x6, 0x3) getdents64(r3, &(0x7f0000000000)=""/43, 0x2b) fanotify_mark(r2, 0x0, 0x0, r3, &(0x7f0000000340)='./file0/file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video2\x00', 0x2, 0x0) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) [ 1410.592447][ T4557] binder: 4523:4557 ioctl c018620c 20000100 returned -1 02:45:43 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000000000000000000e0000000000000000000000000005000000"], 0x8758) 02:45:43 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c748b6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643dd8b2e3acb508fa92a8f3ecf6bed5a56b185301794eb0da3997549992c8cb7a5b215377650efdf1337a29f0fa1f42b1d5bd04396d25a191bb719461f210b7ef6501431c9c46762ac44f957ed35387a3d6633bba464b4bffc0d37e7b8218d5838dc17d8c26e586891d2288c80244423b43b17bb6728fe6feda0398419e2e5cfe34ae0be980f8502c44733461313fc63d0a40749bb9dbf76fd01c8eaff7ea9c6496519e0785ca03cbc9", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x4000, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000380)={'icmp\x00'}, &(0x7f00000003c0)=0x1e) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000100)={0x0, @bt={0x0, 0xffffffff, 0x0, 0x3, 0x9999, 0x4, 0xc000, 0xfff, 0x8000, 0xb4e, 0x7, 0x1, 0x8, 0x7fff, 0x0, 0x4, {0x200, 0xfff}, 0x4}}) r5 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r5, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) [ 1410.711746][ T4648] binder: 4625:4648 ioctl c018620c 20000100 returned -1 02:45:43 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = msgget(0x1, 0x144) msgctl$MSG_STAT_ANY(r1, 0xd, 0x0) msgctl$MSG_INFO(r1, 0xc, &(0x7f00000000c0)=""/210) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) [ 1410.949507][ T4834] fuse: Unknown parameter 't‹otmode' 02:45:43 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) lseek(r3, 0x6, 0x3) getdents64(r3, &(0x7f0000000000)=""/43, 0x2b) fanotify_mark(r2, 0x0, 0x0, r3, &(0x7f0000000340)='./file0/file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video2\x00', 0x2, 0x0) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) [ 1410.991571][ T4834] binder: 4771:4834 ioctl c018620c 20000100 returned -1 [ 1411.027519][ T4834] binder: 4771:4834 ioctl c0845657 20000100 returned -22 [ 1411.194680][ T4901] binder: 4837:4901 ioctl c018620c 20000100 returned -1 02:45:44 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000000)='./file0\x00', 0x2400, 0x4, &(0x7f0000000440)) 02:45:44 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f00000000c0)='./file0\x00', 0x15f, 0x2, &(0x7f0000000200)=[{&(0x7f0000000100)="e831042e10967ef641238ee4c41248", 0xf, 0x800}, {&(0x7f0000000140)="c37e6cf42a5aa864ad3df542b31ba26cad1a57395814b4bcd9e2f7e1a8ff0518a8432392298a0e66d09306eebeac2e1d01eec968ae15f02bebe40ddccd3513de8bcb8e6f422324ac5548b9603d941b8dfec6428337948d40e5292ba2cfe5dd61ff6ddce8b13956f5a2dcc0f95376a7db1b512b3e40aed4a246449dd53ea284ac5a97c81437f386d867e2d0bc0eec18eda0a808f6f8e61a6d93fa48a24c2c7e654f0eca16a1114aa2f2ac1fdedd216c133737dc3ba819ca962b6462c117de6c09", 0xc0, 0xffffffff}], 0x0, &(0x7f0000000240)='\x00') r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) 02:45:44 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000000000000000000f0000000000000000000000000005000000"], 0x8758) 02:45:44 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) lseek(r3, 0x6, 0x3) getdents64(r3, &(0x7f0000000000)=""/43, 0x2b) fanotify_mark(r2, 0x0, 0x0, r3, &(0x7f0000000340)='./file0/file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video2\x00', 0x2, 0x0) [ 1411.551408][ T5049] NFS: mount program didn't pass remote address 02:45:44 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643dc7f92562cc9cf095db85e41ef18df8453aca4ea5d98d763850900e795dce336fc3c1f255aaf2851d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x200, 0x0) sendfile(r2, r3, &(0x7f0000000080), 0x1) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000240)) [ 1411.759944][ T5192] binder: 5108:5192 ioctl c018620c 20000100 returned -1 02:45:44 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) recvmsg$kcm(r1, &(0x7f0000000440)={&(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000500)=""/102400, 0x19000}, {&(0x7f0000000000)=""/1, 0x1}, {&(0x7f0000000180)=""/189, 0xbd}, {&(0x7f0000000240)=""/166, 0xa6}, {&(0x7f0000000300)=""/91, 0x5b}], 0x5}, 0x100) [ 1411.919158][ T5285] fuse: Bad value for 'user_id' [ 1411.968705][ T5285] bridge0: port 1(bridge_slave_0) entered learning state 02:45:44 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000000100000000000000000000000000005000000"], 0x8758) [ 1412.061532][ T5373] bridge0: port 1(bridge_slave_0) entered learning state 02:45:44 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) lseek(r3, 0x6, 0x3) getdents64(r3, &(0x7f0000000000)=""/43, 0x2b) fanotify_mark(r2, 0x0, 0x0, r3, &(0x7f0000000340)='./file0/file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video2\x00', 0x2, 0x0) 02:45:44 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000000)={0x4c6, 0x4}) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) [ 1412.245708][ T5468] binder: 5465:5468 ioctl c018620c 20000100 returned -1 [ 1412.411670][ T5505] binder: 5471:5505 ioctl c018620c 20000100 returned -1 [ 1412.439341][ T5505] binder: 5471:5505 ioctl 4008ae61 20000000 returned -22 02:45:45 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) lseek(r3, 0x6, 0x3) getdents64(r3, &(0x7f0000000000)=""/43, 0x2b) fanotify_mark(r2, 0x0, 0x0, r3, &(0x7f0000000340)='./file0/file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video2\x00', 0x2, 0x0) 02:45:45 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000005100000000000000000000000000005000000"], 0x8758) [ 1412.692888][ T5675] binder: 5674:5675 ioctl c018620c 20000100 returned -1 02:45:45 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r1 = getegid() getgroups(0x1, &(0x7f0000000540)=[r1]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c72506f746d6f64653d40e611ecb6429524301d207b30303034303030302c5b7365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',\x00']) socket$nl_route(0x10, 0x3, 0x0) r2 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r2, &(0x7f0000000040)='./file0\x00', 0x2000, 0x0, &(0x7f0000000440)) 02:45:45 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) lseek(r3, 0x6, 0x3) getdents64(r3, &(0x7f0000000000)=""/43, 0x2b) fanotify_mark(r2, 0x0, 0x0, r3, &(0x7f0000000340)='./file0/file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) [ 1412.949850][ T5760] fuse: Unknown parameter 'rPotmode' [ 1413.031665][ T5793] binder: 5776:5793 ioctl c018620c 20000100 returned -1 02:45:45 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000200)={0xffffffff, 0x8, 0x4, 0x80000, 0x400, {}, {0x2, 0x0, 0x3, 0x59, 0xfc, 0x2, "5a8dd984"}, 0x9c9, 0x4, @userptr=0x10000}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x108) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r3, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x8, 0x6, 0x1f, 0xfffffff9}, {0x800, 0x3f, 0xff, 0x7fffffff}, {0x33, 0x80, 0x64, 0x3}, {0x58d0, 0x7d, 0x0, 0x42}, {0x1, 0x9, 0x96, 0x2}, {0x9, 0x9, 0x3f}, {0x0, 0x2, 0xda, 0x505f}]}) lsetxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@md5={0x1, "305bf20dfe45fe853463f22efef821cf"}, 0x11, 0x1) 02:45:45 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) lseek(r3, 0x6, 0x3) getdents64(r3, &(0x7f0000000000)=""/43, 0x2b) fanotify_mark(r2, 0x0, 0x0, r3, &(0x7f0000000340)='./file0/file0\x00') [ 1413.189811][ T5888] binder: 5873:5888 ioctl c018620c 20000100 returned -1 [ 1413.232279][ T5888] binder: 5873:5888 ioctl c058565d 20000200 returned -22 02:45:46 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000000)) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="00000000000c00016a004baa1a126086937e9529fce527786116d7ebe448627ac83409b67d982d729a524201b0252c3df2645009d2ef5dccccaee07af0ecc79e042f245bf29cb9b35a28eb84b3d837d245132c071211"]) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) [ 1413.328542][ T5892] binder: 5889:5892 ioctl c018620c 20000100 returned -1 02:45:46 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) lseek(r3, 0x6, 0x3) getdents64(r3, &(0x7f0000000000)=""/43, 0x2b) 02:45:46 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000000000000000a100000000000000000000000000005000000"], 0x8758) 02:45:46 executing program 1: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file1', [{0x20, '{&securityselfself*'}, {}, {0x20, '--wlan1keyring'}, {}, {}, {0x20, '--keyring'}, {}], 0xa, "0ed51c37d50c75e0a8f6ecbd1ea9c0f9bc99be31ab2875944d608f6b49c156c4e05888aa3b84cb"}, 0x63) [ 1413.649236][ T6052] binder: 6017:6052 ioctl c018620c 20000100 returned -1 02:45:46 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000000)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67727f75705f69643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r3, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:46 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) lseek(r3, 0x6, 0x3) getdents64(r3, &(0x7f0000000000)=""/43, 0x2b) 02:45:46 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0x6, 0x1) getdents64(r0, &(0x7f0000000000)=""/43, 0x2b) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0x6, 0x1) getdents64(r1, &(0x7f0000000000)=""/43, 0x2b) move_mount(r1, &(0x7f0000000080)='./file0\x00', r1, 0x0, 0x12) [ 1413.977949][ T6307] bridge0: port 1(bridge_slave_0) entered learning state [ 1414.068472][ T6317] binder: 6309:6317 ioctl c018620c 20000100 returned -1 02:45:46 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000000180000000000000000000000000005000000"], 0x8758) 02:45:46 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) lseek(r3, 0x6, 0x3) [ 1414.352143][ T6464] binder: 6420:6464 ioctl c018620c 20000100 returned -1 02:45:47 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x6, 0x3) 02:45:47 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) symlink(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0\x00') 02:45:47 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(0x0, r3, 0x0) r4 = getegid() getgroups(0x1, &(0x7f0000000540)=[r4]) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='fuse\x00', 0x800000, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions='default_permissions'}], [{@obj_user={'obj_user', 0x3d, 'GPLsecurity{-'}}]}}) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r5) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000100)) ioctl$SNDRV_PCM_IOCTL_INFO(r7, 0x81204101, &(0x7f0000000580)) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00b030551bfa2e9b6804d7afd38f6352a4faa77c573b7f4c83cb515ca43e08c4b41ea51c5ea9ccefca596e85677508842e62a8106d071752c9cc03e9fe8ddb4ff2a71c2e2a164a838e847890ad03618d91a4c24ebf9621a135ce71f89f62c7488b6aca6d699ade95a28d8aaa67553f15b9"]) r8 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r8, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) [ 1414.567086][ T6525] binder: 6522:6525 ioctl c018620c 20000100 returned -1 02:45:47 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) lseek(0xffffffffffffffff, 0x6, 0x3) [ 1414.682348][ T6528] binder: 6527:6528 ioctl c018620c 20000100 returned -1 [ 1414.717192][ T6528] binder: 6527:6528 ioctl 81204101 20000580 returned -22 [ 1414.856103][ T6679] binder: 6576:6679 ioctl c018620c 20000100 returned -1 02:45:47 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) lseek(0xffffffffffffffff, 0x6, 0x3) 02:45:47 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:47 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x9, &(0x7f000059aff8)={r2}, &(0x7f000034f000)=0x2059b38b) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYBLOB="b2000000ca7b6be7f9b71b66d7fab019d4ddde998da40707bdc69c86b25d61b20baec1e4ff5cc1ca68d9bf859317d61c079049900259a1d8132b87bb73f5e3305eeb378979c7861f76d332d4c59ab68456a78e9c6df89e3ef948de17d58805c4477ae1c33170a24da2312fbef32f2d1073d1f8001bd94544a8afb3e00659597e9d28c0a27fde8d61cf4fa79681c93fbb2b04016a2a1606577b12992a9a6415552d8125c18f54a0f4661219c432808874323900000000"], &(0x7f0000000040)=0xba) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={'macsec0\x00', {0x2, 0x4e27, @multicast2}}) syz_open_dev$char_usb(0xc, 0xb4, 0xfff) r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2c0801, 0x0) move_mount(r3, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x484901, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x9) 02:45:47 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000002180000000000000000000000000005000000"], 0x8758) [ 1415.149030][ T6738] binder: 6734:6738 ioctl c018620c 20000100 returned -1 [ 1415.221164][ T6741] bridge0: port 1(bridge_slave_0) entered learning state 02:45:48 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) lseek(0xffffffffffffffff, 0x6, 0x3) 02:45:48 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) accept4$unix(r3, &(0x7f0000000240)=@abs, &(0x7f0000000000)=0x6e, 0x80000) r4 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r4, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:48 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', r0, 0x0, 0x41) r1 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) fcntl$setpipe(r2, 0x407, 0x2) [ 1415.538740][ T6950] binder: 6873:6950 ioctl c018620c 20000100 returned -1 02:45:48 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(r1, r0) r2 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x6, 0x3) [ 1415.681577][ T6951] binder: 6945:6951 ioctl c018620c 20000100 returned -1 [ 1415.785963][ T6962] bridge0: port 1(bridge_slave_0) entered learning state 02:45:48 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000000000000000a1c0000000000000000000000000005000000"], 0x8758) 02:45:48 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x100, &(0x7f0000000240)) 02:45:48 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0x6, 0x3) 02:45:48 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x26) alarm(0x100000000) 02:45:49 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0x6, 0x3) 02:45:49 executing program 1: mkdir(&(0x7f00000000c0)='./file1\x00', 0x155) move_mount(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x16) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)={0x2dc, 0x12, 0x100, 0x70bd2b, 0x25dfdbfe, {0x14}, [@nested={0x8e, 0x6, 0x0, 0x1, [@typed={0x8, 0x66, 0x0, 0x0, @fd}, @generic="e36bfd35e7fb84f92e796103acbb3719f2c7314686a4b5aff2d18229a8b6f3780be5a5dd8ba0704b615e293011f67cbda2e87bba73e34b8b8560ba8fd93382dd7f586dc6d8806e7274307657ca6a66362a3bca9b3d3e30ea71c177ae671299fc52082bb0efdb8f10d2b2af4244dfde28442246e93001", @typed={0x8, 0x6f, 0x0, 0x0, @pid}, @typed={0x4, 0x77}]}, @nested={0x237, 0x69, 0x0, 0x1, [@typed={0x8, 0x4a, 0x0, 0x0, @pid}, @generic="023db337ff829d4b35dc120d72a1bb3c99f02ce25347d400ca568c9dde57eda805e8dd3cc75e01f6ae995fc7adf307f5b64573113b3c89d5d651010f9f2fe0a837272ac471dfe817ab893401c832b8659a63cce2f09154f871554f9ed063b9b9d9de604822b8d8b59bc6c8353cc7d6cee6b3", @typed={0x8, 0x33, 0x0, 0x0, @uid}, @generic="0ace4747ddbceb4a302d540c7019ef27bc6f2c7ef053f788baa584541e23dd1b7f2b41814e9da0715eb614202d0eadd9db07ef67eef6206add2f650110b546aa5c167661326037479472865a29197fd3d65508ccef28559f4db88e2b877042c61e63b5a892acc970cbb44512cb5e05767adbcb42e0bb43f418c60005693dcb3d4c91cbac345d2891aed6adea958fa8c2bed9730a2f8de20ee619422a73bc67fbbe7b6182bbceb54c1bc862402e712f23abc938bb733486b9e7e8ec5a433ece25bff3dae5da29d621e5de6141171d62183805e2ac3f0f3fe317702b8a4412e29fcdc547b8db784cbca022", @generic="3efd66e4dcc609d1803cae8a4a0085613ff8f6cd1fdf1fbcdf3f45851dd7e1568cb93b5ce5ef2c19f69a33726400a3bce9548e5545f45980577dd605756035687d14611139a2abfd3251fc697d655d62709d60b88b77eea73f2756048a2afcd6cd2cc1774a31a4b34a3ac48ae76787d756bc95f87726dfb3e3e218e02946e5036b023fdd73314839ae137144db12a5fa34cd9cee6306a745e5b7399e44238f42ad2995e18aa7777a9be20569beff17d5abf0b984b631b7", @typed={0x8, 0x19, 0x0, 0x0, @fd}, @typed={0x8, 0x1c, 0x0, 0x0, @pid}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x5ec3260f6f7955ea}, 0x4040004) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(r2, r1) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x100) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) fcntl$setpipe(r4, 0x407, 0x5) r5 = dup2(r3, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x1490) 02:45:49 executing program 4: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x6, 0x3) 02:45:49 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000000200000000000000000000000000005000000"], 0x8758) [ 1416.637986][ T7276] binder: BINDER_SET_CONTEXT_MGR already set [ 1416.696894][ T7276] binder: 7275:7276 ioctl 40046207 0 returned -16 02:45:49 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x6, 0x3) 02:45:49 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000100)) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r2, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"/302], 0x1}, 0x1, 0x0, 0x0, 0x1}, 0x20040008) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r3) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r8, 0xc018620c, &(0x7f0000000100)) ioctl$KDSETMODE(r8, 0x4b3a, 0x0) 02:45:49 executing program 4: r0 = open$dir(0x0, 0x0, 0x0) lseek(r0, 0x6, 0x3) [ 1417.172987][ T7490] binder: 7478:7490 ioctl c018620c 20000100 returned -1 02:45:49 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x6000, 0x800, &(0x7f0000000440)) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self\x00', 0x20e000, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r5, 0x80045700, &(0x7f0000000080)) 02:45:50 executing program 4: r0 = open$dir(0x0, 0x0, 0x0) lseek(r0, 0x6, 0x3) 02:45:50 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000000000000000a200000000000000000000000000005000000"], 0x8758) 02:45:50 executing program 4: r0 = open$dir(0x0, 0x0, 0x0) lseek(r0, 0x6, 0x3) 02:45:50 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x18800, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(0x0, r3, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c76657273696f6e3d3970323030302e4c2c6d6d61702c64666c747569643d9e756862c980e2540a4037b4ad4a5549e6930aa9c82de836b37fca81ca155a4c4726eb40c449c84af0c9d3d9d54375da5688c0d8d97eb053b0d88389aaa860d6333b73756deb7dd9b673a6e85142107bbabefe316141378234c402ad4fe547e5be2982ffeaa4e4", @ANYRESHEX=r3, @ANYBLOB=',mmap,nodevmap,cache=loose,debug=0x0000000000000101,cache=none,appraise,fowner>', @ANYRESDEC=0xee01, @ANYBLOB=',func=FILE_CHECK,uid>', @ANYRESDEC=r4, @ANYBLOB=',fsuuid=b037\n179-16\x00a-822c-fa81-233754c7,obj_type=,hash,dont_measure,\x00']) move_mount(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) 02:45:50 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd\a', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = open$dir(&(0x7f0000000180)='./file0/file0\x00', 0x2480, 0x124d7b131e21816b) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000240)={@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, {&(0x7f0000000000)=""/32, 0x20}, &(0x7f0000000080), 0x4}, 0xa0) statx(r1, &(0x7f0000000300)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) [ 1417.761221][ T7711] bridge0: port 1(bridge_slave_0) entered learning state 02:45:50 executing program 4: open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x6, 0x3) [ 1417.832715][ T7712] fuse: Unknown parameter 'fd0x0000000000000003' 02:45:50 executing program 4: open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x6, 0x3) 02:45:50 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', r0, 0x0, 0x44) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x240c0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f00000000c0)=0x10, 0x4) 02:45:50 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="66643d00dcb2159ae4514e2c05bbd08868190436cb93a6a364e5ee7a327eafee1e7c28fa1f44ccb7dfd20080b6e4d0600fffbcced123322631e615b9b1757e36bfee4e28fbb9ab4af829a8dec5194e84113e86ef8d4e0c21a204328f0272a8e4b2f013a4a7f3bcf4a4c87bf1fba150", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:50 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000000300000000000000000000000000005000000"], 0x8758) 02:45:50 executing program 4: open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x6, 0x3) [ 1418.342948][ T7948] fuse: Bad value for 'fd' 02:45:51 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x89) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(0x0, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000001c0)='./file1\x00', 0x8, 0x3, &(0x7f0000000440)=[{&(0x7f0000000200)="554dcf9988fb03943e2fddb999edc37edf029cd2290d5616ff851dcc5c2c5ccbcff76651f17ca7ccffb08f6d69d425a10384276ddedd8b120a432a982c39c05dbfa297d19089abb5eb8773fba1f8857b1881e6ef01075b6a24de896aa8637414c3d4d7c894b023c246aa86f909eb33e091f1920114bd8bf981911caf85105b7dd8d40f94d036cba70bad0c1da6f5f221f6275968fa2ac904941c245d09a42a655170c71704ecfb3ab73eb32996b61c09edcbfeabb288bac2c8dab804caf1aab3df9717d277daccbf4253a8ec8c37781440ea4dc2ce6e42b3d8de84634f", 0xdd, 0x4}, {&(0x7f0000000300)="6d5fc6db4ce4bfbb9f40ba38a2528c76c345853d6706e9762d78deed7a6871f37122347c8700a869eac29e5482fe5c8e2af0d52155e68578ddaea7be82492412a5c63111010303ca3bea70983461b51879790233b14780eda37cf78729f1977f0344f0bc1030c579ec2affce83ef4b1606260d9048a02a33643b74e9ba29a8231763fe532460425ddd3c0cb2f655", 0x8e, 0x7}, {&(0x7f00000003c0)="64b96bdca2b63cbe38ef7fef", 0xc, 0xf8}], 0x10020, &(0x7f00000004c0)={[{@dioread_lock='dioread_lock'}, {@usrjquota='usrjquota='}, {@nogrpid='nogrpid'}], [{@fowner_eq={'fowner', 0x3d, r1}}, {@audit='audit'}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/binder#\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/binder#\x00'}}]}) r2 = semget(0x3, 0x2, 0x341) semctl$GETPID(r2, 0x1, 0xb, &(0x7f0000000140)=""/12) open$dir(&(0x7f0000000000)='./file0\x00', 0x103a00, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000040)=""/23) timer_create(0x3, &(0x7f0000000080)={0x0, 0xbb, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000000c0)=0x0) timer_delete(r6) r7 = getpid() ptrace(0x10, r7) ptrace$getsig(0x2, r7, 0xffffffffff600043, &(0x7f0000000300)) timer_create(0x5, &(0x7f0000000540)={0x0, 0x41, 0x2, @tid=r7}, &(0x7f0000000580)) 02:45:51 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) 02:45:51 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) 02:45:51 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 02:45:51 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000000400000000000000000000000000005000000"], 0x8758) 02:45:51 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) open$dir(&(0x7f0000000040)='.\x00', 0x111000, 0x1b1) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x40802, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r0) r4 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x0) lseek(r4, 0x6, 0x1) getdents64(r4, &(0x7f0000000000)=""/43, 0x2b) rmdir(&(0x7f00000000c0)='./file0\x00') openat(r4, &(0x7f0000000080)='./file0\x00', 0x80, 0x180) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x0) 02:45:51 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 1419.030990][ T8248] bridge0: port 1(bridge_slave_0) entered learning state [ 1419.195722][ T8290] binder: 8263:8290 ioctl aea2 0 returned -22 02:45:52 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x131) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) r7 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) r9 = dup2(r8, r7) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r9, 0xc018620c, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r9, 0xc00c642d, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000180)={r6, r10, 0x3ff}) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f00000000c0)) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) [ 1419.240335][ T8290] binder: 8263:8290 ioctl c018620c 20000100 returned -1 [ 1419.275892][ T8290] binder: 8263:8290 ioctl 4004556d 0 returned -22 02:45:52 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 1419.460905][ T8374] binder: 8366:8374 ioctl c018620c 20000100 returned -1 02:45:52 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000000440000000000000000000000000005000000"], 0x8758) 02:45:52 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)={0x30, r8, 0xc8ef0a4335e6829f, 0x0, 0x0, {0xf}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x10c, r8, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6ca}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x37}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4064}, 0xc000080) r9 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r9, 0xc018620c, &(0x7f0000000100)) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000000306010200000000000000000100000000000000000200000900020073797a310000000009ff000000000000000000000900020073797a3200000000326afa1a50a04160e7ea407800000000fe12c3a1d97abdbb6ae55318ffc82e18239123f4aba9a30443f72f6385a2ff9fa707016654bff7bfaa9e7a9b21ad5f21355cc09100f509fcdb"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4804) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000000440)) [ 1419.519554][ T8374] binder: 8366:8374 ioctl c018620c 20000100 returned -1 [ 1419.557985][ T8374] binder: 8366:8374 ioctl c00c642d 20000140 returned -22 [ 1419.586563][ T8374] binder: 8366:8374 ioctl c010640b 20000180 returned -22 02:45:52 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x1ff, 0x2}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x2, 0x200, 0xfffffffffffffaaa}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYPTR, @ANYBLOB="2c726f6c746d6f64653d30303030303030303030303030403030203034303030302c5d7365725f69645c3a451e96808f326b48c81d3d", @ANYPTR64=&(0x7f00000007c0)=ANY=[@ANYPTR=&(0x7f0000000700)=ANY=[@ANYRESDEC=r6, @ANYRES16, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES16], @ANYPTR=&(0x7f0000000780)=ANY=[@ANYRESDEC, @ANYPTR, @ANYRESDEC=0x0], @ANYPTR64], @ANYBLOB='D\x00\x00\x00\x00D\x00\x00\x00_', @ANYRES32, @ANYBLOB="2c002bac570ce1f17f2e6f39d06a0f0c1cbde1fb6cb0a7736efabafa9b428c27b5879b"]) r7 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r7, &(0x7f0000000040)='./file0\x00', 0x4000, 0x1, &(0x7f0000000440)) 02:45:52 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f2, 0x2, 0x70bd25, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x48880}, 0x20000080) lseek(r1, 0x6, 0x1) getdents64(r1, &(0x7f0000000000)=""/43, 0x2b) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000080)=0x8, 0x4) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) ioctl$KDSKBLED(r5, 0x4b65, 0x7) move_mount(r0, &(0x7f0000000000)='./file0\x00', r1, 0x0, 0x61) [ 1419.772668][ T8479] binder: BINDER_SET_CONTEXT_MGR already set [ 1419.831522][ T8479] binder: 8468:8479 ioctl 40046207 0 returned -16 [ 1419.842671][ T8580] bridge0: port 1(bridge_slave_0) entered learning state [ 1419.891049][ T8570] bridge0: port 1(bridge_slave_0) entered learning state 02:45:52 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0xc4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}, {&(0x7f0000000300)="483ff365a8cba21c4e5453235b99e3965cdc805eea82ee1b66565fe75bfcdf41b5b718af7b0bfa9df9a19975f114095ef6f8366dd9dbb68c7f7953f298d5af9deae25ec7c563b4a04821e7734f391e7c10a0804b7fc54fdf3d3f2acfb23db6af55cfa6404d5b2fe05a8d337ae905f7aa0985ed357d8bc5de3c9adf3004bb0f316153770af9b71e03262447b31b33cb464947fe381e8dede09de7c7b16e4d87c52f03131b2ed273f112c51528969ab4287df2", 0xb2}], 0x2, 0x0, 0x0, 0xf000}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r5) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000100)) ioctl$DRM_IOCTL_SET_VERSION(r7, 0xc0106407, &(0x7f0000000180)={0x81, 0x2, 0xfffffffc, 0x3f}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) r9 = dup2(r8, r4) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r9, 0xc018620c, &(0x7f0000000100)) getsockname$llc(r9, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000140)=0x10) setresuid(0x0, r3, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [{0x74aa, 0x1}, {0x5, 0x52e9e1a}], r3}, 0x18, 0x0) 02:45:52 executing program 3 (fault-call:1 fault-nth:0): r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) 02:45:52 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x402000, 0x93) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) [ 1420.086800][ T8878] bridge0: port 1(bridge_slave_0) entered learning state 02:45:52 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x1ff, 0x2}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x2, 0x200, 0xfffffffffffffaaa}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYPTR, @ANYBLOB="2c726f6c746d6f64653d30303030303030303030303030403030203034303030302c5d7365725f69645c3a451e96808f326b48c81d3d", @ANYPTR64=&(0x7f00000007c0)=ANY=[@ANYPTR=&(0x7f0000000700)=ANY=[@ANYRESDEC=r6, @ANYRES16, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES16], @ANYPTR=&(0x7f0000000780)=ANY=[@ANYRESDEC, @ANYPTR, @ANYRESDEC=0x0], @ANYPTR64], @ANYBLOB='D\x00\x00\x00\x00D\x00\x00\x00_', @ANYRES32, @ANYBLOB="2c002bac570ce1f17f2e6f39d06a0f0c1cbde1fb6cb0a7736efabafa9b428c27b5879b"]) r7 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r7, &(0x7f0000000040)='./file0\x00', 0x4000, 0x1, &(0x7f0000000440)) 02:45:53 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000005440000000000000000000000000005000000"], 0x8758) [ 1420.356325][ T8992] bridge0: port 1(bridge_slave_0) entered learning state 02:45:53 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) [ 1420.479313][ T8992] binder: 8987:8992 ioctl c018620c 20000100 returned -1 02:45:53 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) r1 = getpid() ptrace(0x10, r1) ptrace$getsig(0x2, r1, 0xffffffffff600043, &(0x7f0000000300)) r2 = getpgrp(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(0x0, r4, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c80)=[{&(0x7f0000000080)={0x190, 0x34, 0x800, 0x70bd2c, 0x25dfdbfd, "", [@nested={0xd0, 0x10, 0x0, 0x1, [@generic="88760805a1f2a8aecb0a256e65e5989e21a55c179e523256fd87c27c042aecaf48191c79b6dd4546a0a5c09b9bc8eb96d6cefdd7cb1870c4bf6695db4170692462a25fb563c8667b1474900c73b252c7a3e6927b1e6f2e65ec2e14da66120aab9ee7c77dc22d1a080414bfe1af55d9ee2c8ea42e3cb3754b769705842e19811a33a263995000e5494ed9e2ef76732ec66e21df07d4b131db972229fe53e41a51b20dcdf9c4a7fd253c82a0cc529298a2c6d9156deb288032f674f0f50782e0c179c08f2d", @typed={0x8, 0x68, 0x0, 0x0, @pid=r1}]}, @generic="0f5307fba2209193ad21b412d76b4c6c79706aac4d7fbd6ae7498dae101722d5de915a226dd5d745de57a6e32e07c573b2663a92f121fb4b4ee74e82ad3619f45ea2c21c28ae6fcc5dc6c7dd1d0261a9424fb04ab1cb6607695da03ab44a3781304489f1f1eec43be98c44b80b8339982423a3a4c5300cf7fd6d868fb1ed66ae35153907914628a2730950c59cdad49aeb0e59718f76cf24ae696c4cdfcec6cdc2f49cf42b5387ee3e7d322631e5ea"]}, 0x190}, {&(0x7f0000000240)={0x1f4, 0x28, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@nested={0xe8, 0x9, 0x0, 0x1, [@generic="580ae303fb1e081ac72a99533927e3834d88047d5a4ec0f476eeb11249ec392faedf07497e6698bc5854fb8c4107ed19d0dd5ee38cb2434a2a24ce555c1dec3a27c5ad09f6b2e86000f056db261e8af11fe849482e0ce88e0cb071c854df0ca12470ca8be38f10342aaff04d0e23653582b1e8e9a50a2770964ec1ab014e11f12c5165d8aedea487b0ab48d378678401c080b08960e755ddd614bf1d", @typed={0x8, 0x89, 0x0, 0x0, @u32=0x3f}, @typed={0x8, 0x90, 0x0, 0x0, @pid=r2}, @typed={0x37, 0x40, 0x0, 0x0, @binary="daa37f85409f2048c94b2ccf7be44a5540576ca002c510d969cfc420fee85d08ed9f8cb3a7446b8f484560bfbbe82f8c05153d"}]}, @nested={0xfa, 0x83, 0x0, 0x1, [@typed={0x8, 0x29, 0x0, 0x0, @uid=r4}, @typed={0x8, 0x19, 0x0, 0x0, @u32=0x100}, @generic="b010bd008963d2c139627586c710ec2f23491c4c8f31b12209502b04d9b3f6113d2a807101f4a9d17186d02faedda31f3f97e12abf340e748aeaddb5290de97430672de8b374a95c56c7969dc5acb7f461436c6249fa92f65d7c26747c6062c4876d44e72a1a9bf14ccab775b7934ba54ceec245778d76b4c43629b051766e2ff7c3d2b86370456a699731b3b691c97e1321582e01324892ca5fba4e9fa8763c81109967395c5630288baf631ca9a391c9e9c6e0454eefdd000d25548d9121689b832271f5f44329d70acc11b9ccbdc221b8", @typed={0x14, 0x66, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, [], 0x13}}]}]}, 0x1f4}, {&(0x7f0000000440)={0x228, 0x19, 0x800, 0x70bd25, 0x25dfdbfe, "", [@generic="2f1ae1951a08bbc9a674347c83e238df46b1208700864c941871a292bcfb7650c902d0bd34686c3a6ecbf3bf7426916c31691f949f49358413b534e0af2ede09a8e3079441c002a270d0acea5501cfa01cc241350fe9fd5a13e68cf02df170816ce9433e1b5c1325009a40d4bbca0558ec7e2ffb060586f9d60104510a1b74a21a64b56373636016efbabcef85cb04a31c228ac6cfa21fd64a7ef1d1b7b42bb5fedd618799ce685f0bb9566a623649c28b1ea7e835c2fc5f855b596da7f7e793ad2c972bcb020b21", @generic="d3c37456253fb0b82d7c4c5468c59f983cf6039db8e7d09cf67300be4e6a5be55140aa0899528ae2f5f5569bcc4e0004e1c3151fd3339289c193f5ae7ccf20d44cf69c899810ed2a489dd6af6816004b1176001682", @nested={0xed, 0xa, 0x0, 0x1, [@generic="5de07d13739ce53e0ccc3b4bb930bb941b2e41e3d6ffecb12c63c5be21e3f4ed56c315b0e187dcbbf97420e16aeadf65a1625625b6bcd6f9e98a372fa93cbd2322a375396e42f40f0a373ec5c045bcbeae295d05ff2bb5e329181598e67cc94f8216a44f92189d71498b2022ead7393faeff72ea2163954fd7caabc25e3401aebdac5c5987fc152eca2492279a528c50", @typed={0x14, 0x4d, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x56, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x66, 0x0, 0x0, @fd=r5}, @generic="bb659d3338666b1af8372c9126a4bde94566fafb6601448d9a18d2934d26034693d6df8801a80906b2dda60b13a05993a457ee5190"]}, @typed={0x8, 0x6, 0x0, 0x0, @u32=0x8}]}, 0x228}, {&(0x7f0000000680)={0xd4, 0x16, 0x8, 0x70bd2b, 0x25dfdbfd, "", [@generic="80bd83e7b8ba9a75a00a54733ea8f9a72af068015a9011a627bc01834d45c30370cd5cdbc40475b5cab2495568c89555209619c227e6b3d55c09202789bdbaf7bda218311b38152075ebc14c9b73c23e62b68e7f5642a2f12f9ea2ec9ea7b9fbb9d64e1d5173fbf40b2f4a5da10143d6028206c2f3987dc0c9e20297240d1a986981238bf30a1a98df37a7458db4ca150e0396f6f3fc180899281b5c7fd2efcea9324d4332615efd58975f4d315d7bf4d64666e278fa11fca1a939f8e7efaa5a55537d5e"]}, 0xd4}, {&(0x7f0000000780)={0x4fc, 0x3b, 0x800, 0x70bd2a, 0x25dfdbfe, "", [@nested={0x332, 0x82, 0x0, 0x1, [@generic="53da8fb05eea6c098a0ece03fe71086fa3c8caa15bfa9da73b2442ed42a617271f53a635fc81cc767108535a16bcdff7cd181a4233cdbb7476a002f0d31f4ffe596a38b1c90cdd9b457405b294ab3255deb43dbb19888751583ce5ecb51c184629470e56d0718f3d3332015b5f30a44b9b6a3d1e4c535f50968fa33e89d25a106cca6e800fac865a62bb00eb7b69a11012e2eee47fae8f2fb4387d6ce27eba2e827b87a9868bfb32e692c7", @typed={0x8, 0x3e, 0x0, 0x0, @u32=0x14b4f943}, @typed={0x8, 0x35, 0x0, 0x0, @ipv4=@empty}, @generic="acf611cfba1ff6fd3a01c194577c339acfa2f05e5a150da35066383f9c5344fc6e74cf95e37bcf102f579f4b56c0678c54044297acb2498ec0d5dd82d7b6a6b2f7c54b11bc42848e2af3d074c9fe64734dfd3ee19d35a820a0edcffb2275434e202ed2314c4010212509156042aba766976ec45e1620bcf72710e82f70704a2a9eac50182f24f86aa6aea2ecec79c07c920225372a44480c10441e473a5b0427dcc7e7caf60e8b0c04dd3d867599072a4c768bd33e78dd6506775391268b", @typed={0x14, 0x36, 0x0, 0x0, @ipv6=@local}, @generic="43fef730a8fcb00b6562648cbe58a5f6a038b1ec2493b8c4bea11ca7d2531404e7687fea7a112d5bc30c3b1feac0ae7da9f745855f58e006b00bb07c87f1ad3e53a394af781791adb874bd04e4c32b7b8a4d3339", @generic="4d20273b309ee0852a080e117c77668cd777e818c97fbba7d593565afd368fdade13a88b186d3dd0081422a7cd0cb2f3353c968bcb9c096cb0ed0ecea250bb3f09ebcd4cfae272195c6b3f033b629099c06d81d294292c7cf58a988108f5e618a09d5c19444b6c9ebcfdf67d783c00761a9101f5b47da5ea5e8230205bcdc79325e2f04735860b89e0722b46306d1dc777db017d0d31979d3179fff76490ce060c3451dba67a446546dbcdefc8b9ebf05721af67b029c798008698ddab6e64153992b7bba171aa0dc10ee762f9fa7b642a54fcd44ea82db245a93304ea27995e81bb13a3cbc2294a80", @generic="10f4e0678d8d0a6e6b7c726c16e064b5769d5c973f3ce728f68150a6aa36b8d0aec0ce997549520ecef807542c6b8fd3942a7de7f7206734368b5fbce51f5fdf65bfebccea9a850032680a8f2fc7c018b89dc6d1ea3377974d5ff3859f4bbdb1be00abd1"]}, @nested={0x19b, 0x28, 0x0, 0x1, [@typed={0x8, 0x7f, 0x0, 0x0, @u32=0x699}, @generic="622e5d32f7c72223446ff5bbc88af843fba9bbf4c52946a44fd1cf2d5f3c6bfc3b4583dd1630a981cd2f925a1862ba5ed799000b936d73434598106dbcc3a7eec2035b62c4d6eab4af707a793fe1e910e8c1c85e099c1641597d189b03e299a95e45a3fcd9e8ab0512e8ebae4ac4f189ef3759da11d51ec7ba6ff5a98fbd66123be6c28bf65de9b51917363a9e373e257cafc92e8370d2c7", @generic="955e734e68fda1a173e64e264747e2e8a4f4427993581665f9e0210c0b3c95eb7a4ea557d8ab035c861ef73adc65dd64e53fbea0f27df64b0187231649e3d35c7090cf2e74895ef17b7c118b6f0fed7ef6d6d1eaf8f174e86cd265bfa8ce6c6a562b395e1d8451e967582d8756803adcdbd2537b80ac0aba76a034972b376616c3c87a7e2d7f91348791cf96f7925ea0727e1b7c75e809927ec0894905ed0c33cebca9fb7bcc586c9534bfea69cedd191963a3db488c1f1da0ae3074a7b2a5eef3b5405803a1eab77ddbae8774c3899e7369ca75be8c4e", @typed={0x20, 0x8b, 0x0, 0x0, @binary="1c678b6965f0b4660ba9734f40b9675a3a5ec472478dc268053ac230"}]}, @typed={0x14, 0x13, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x6d, 0x0, 0x0, @fd=r6}]}, 0x4fc}], 0x5, 0x0, 0x0, 0x4048041}, 0x2000c000) [ 1420.557894][ T8992] binder: 8987:8992 ioctl 89e0 20000300 returned -22 02:45:53 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000)=0xf266, 0x4) [ 1420.672945][ T9103] bridge0: port 1(bridge_slave_0) entered learning state [ 1420.709132][ T9103] bridge0: port 1(bridge_slave_0) entered learning state 02:45:53 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x3) 02:45:53 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x1ff, 0x2}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x2, 0x200, 0xfffffffffffffaaa}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYPTR, @ANYBLOB="2c726f6c746d6f64653d30303030303030303030303030403030203034303030302c5d7365725f69645c3a451e96808f326b48c81d3d", @ANYPTR64=&(0x7f00000007c0)=ANY=[@ANYPTR=&(0x7f0000000700)=ANY=[@ANYRESDEC=r6, @ANYRES16, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES16], @ANYPTR=&(0x7f0000000780)=ANY=[@ANYRESDEC, @ANYPTR, @ANYRESDEC=0x0], @ANYPTR64], @ANYBLOB='D\x00\x00\x00\x00D\x00\x00\x00_', @ANYRES32, @ANYBLOB="2c002bac570ce1f17f2e6f39d06a0f0c1cbde1fb6cb0a7736efabafa9b428c27b5879b"]) r7 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r7, &(0x7f0000000040)='./file0\x00', 0x4000, 0x1, &(0x7f0000000440)) 02:45:53 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) eventfd2(0x956, 0x800) 02:45:53 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0xffffffffffffff7f, 0x3) 02:45:53 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000000480000000000000000000000000005000000"], 0x8758) [ 1421.088781][ T9418] bridge0: port 1(bridge_slave_0) entered learning state 02:45:53 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000040)='vlan1\x00') move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) 02:45:54 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) 02:45:54 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x3) [ 1421.363783][ T9598] bridge0: port 1(bridge_slave_0) entered learning state 02:45:54 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r7 = dup2(0xffffffffffffffff, r3) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000100)) write$P9_RVERSION(r7, &(0x7f0000000080)={0x15, 0x65, 0xffff, 0x4ca9, 0x8, '9P2000.u'}, 0x15) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000000000)) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) 02:45:54 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 02:45:54 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x6d) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) [ 1421.681476][ T9807] binder: 9651:9807 ioctl c018620c 20000100 returned -1 02:45:54 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x3) [ 1421.759784][ T9807] binder: 9651:9807 ioctl 5415 20000000 returned -22 02:45:54 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000000000000000a540000000000000000000000000005000000"], 0x8758) 02:45:54 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, [0x80, 0x7fffffff, 0xdd1, 0x7]}) 02:45:54 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x3) 02:45:54 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) fcntl$getflags(r4, 0xb) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000100)) setsockopt$inet_icmp_ICMP_FILTER(r7, 0x1, 0x1, &(0x7f00000008c0)={0x76dd}, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) r9 = dup2(r8, r5) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r9, 0xc018620c, &(0x7f0000000100)) ioctl$VIDIOC_G_ENC_INDEX(0xffffffffffffffff, 0x8818564c, &(0x7f0000000900)) [ 1422.145491][T10028] binder: 9993:10028 ioctl c018620c 20000100 returned -1 [ 1422.212113][T10028] binder: 9993:10028 ioctl 4068aea3 20000080 returned -22 02:45:55 executing program 4: lseek(0xffffffffffffffff, 0x7fffffffffffffff, 0x3) [ 1422.332262][T10053] bridge0: port 1(bridge_slave_0) entered learning state [ 1422.386519][T10053] binder: 10033:10053 ioctl c018620c 20000100 returned -1 02:45:55 executing program 4: lseek(0xffffffffffffffff, 0x7fffffffffffffff, 0x3) 02:45:55 executing program 5: getpgid(0xffffffffffffffff) r0 = getpid() ptrace(0x10, r0) ptrace$getsig(0x2, r0, 0xffffffffff600043, &(0x7f0000000300)) ptrace$getenv(0x4201, r0, 0x40007fd, &(0x7f0000000000)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x93b540, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x541b) 02:45:55 executing program 4: lseek(0xffffffffffffffff, 0x7fffffffffffffff, 0x3) 02:45:55 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000002780000000000000000000000000005000000"], 0x8758) 02:45:55 executing program 4: r0 = open$dir(0x0, 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x3) 02:45:55 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x121000, 0x0) connect$rds(r1, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) 02:45:56 executing program 4: r0 = open$dir(0x0, 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x3) 02:45:56 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) fchmod(r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x80010, r4, 0x10000000) 02:45:56 executing program 4: r0 = open$dir(0x0, 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x3) [ 1423.544941][T10475] bridge0: port 1(bridge_slave_0) entered learning state [ 1423.576411][T10475] binder: 10474:10475 ioctl c018620c 20000100 returned -1 02:45:56 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000002840000000000000000000000000005000000"], 0x8758) 02:45:56 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x4a0000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) r1 = eventfd(0x9) fsetxattr$security_evm(r1, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="02429482a5c5fa530049c0ad40"], 0xd, 0x1) 02:45:56 executing program 4: open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x7fffffffffffffff, 0x3) 02:45:56 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r6}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000100)) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r8, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_LOCK(r8, 0x4008642a, &(0x7f00000002c0)={r9, 0x9}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f00000000c0)={r9, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000080)={r7, 0x80000}) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 02:45:56 executing program 4: open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x7fffffffffffffff, 0x3) [ 1424.031285][T10617] binder: 10587:10617 ioctl c018620c 20000100 returned -1 02:45:56 executing program 5: syslog(0x3, &(0x7f0000000080)=""/125, 0x7d) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000140)={0x9, 0x1, 0x4, 0x8, 0x9, {r4, r5/1000+10000}, {0x2, 0x8, 0x2, 0x6, 0x2, 0x1, "81d74e46"}, 0x0, 0x5, @planes=&(0x7f0000000100)={0x5, 0xf42b, @fd=r8, 0x6}, 0x6, 0x0, r9}) [ 1424.122093][T10617] binder: 10587:10617 ioctl c018620c 20000100 returned -1 [ 1424.208502][T10617] binder: 10587:10617 ioctl c00c642e 20000080 returned -22 02:45:57 executing program 4: open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x7fffffffffffffff, 0x3) 02:45:57 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000002880000000000000000000000000005000000"], 0x8758) 02:45:57 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000080)={0xffffffe5, 0xc, 0x4, 0x100000, 0xffffffff, {0x77359400}, {0x5, 0x2, 0x4, 0x80, 0x81, 0x1, "237e1964"}, 0x7, 0x1, @userptr=0x800, 0x1f, 0x0, r4}) 02:45:57 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) [ 1424.661528][T10905] binder: 10863:10905 ioctl c018620c 20000100 returned -1 02:45:57 executing program 5: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x8200, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl(r0, 0x9, &(0x7f0000000100)="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") prctl$PR_SET_NAME(0xf, &(0x7f00000000c0)='eth1keyring(\'\x00') r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x201, 0x0) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000080)={0xa, {0x9, 0x5, 0xf3f}}) [ 1424.710327][T10905] bridge0: port 1(bridge_slave_0) entered learning state [ 1424.752956][T10905] binder: 10863:10905 ioctl c0585611 20000080 returned -22 02:45:57 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) [ 1424.868019][T10947] bridge0: port 1(bridge_slave_0) entered learning state 02:45:57 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000000)=0x1, 0x4) 02:45:57 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) 02:45:57 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) 02:45:58 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000007880000000000000000000000000005000000"], 0x8758) [ 1425.248483][T11153] binder: 11150:11153 ioctl c018620c 20000100 returned -1 02:45:58 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x0) [ 1425.392261][T11162] binder: 11156:11162 ioctl c018620c 20000100 returned -1 02:45:58 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x0) 02:45:58 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$VIDIOC_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000080)={0x0, @bt={0xff, 0x2, 0x0, 0x3, 0x2, 0x3ff, 0x5, 0x1000, 0x363, 0x1, 0x0, 0x2, 0x7, 0x8, 0x14, 0x10, {0x1, 0x1}, 0xa1, 0x6}}) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 02:45:58 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0xdb9ab1f910d721e0, 0x70bd2c, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x40) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x4080) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) 02:45:58 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8001}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3800000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) [ 1425.815621][T11385] binder: 11381:11385 ioctl c018620c 20000100 returned -1 [ 1425.842732][T11384] binder: 11382:11384 ioctl c018620c 20000100 returned -1 02:45:58 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x0) [ 1425.884982][T11385] binder: 11381:11385 ioctl c0845658 20000080 returned -22 [ 1425.982536][T11407] binder: 11388:11407 ioctl c018620c 20000100 returned -1 02:45:58 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000ffffff8d0000000000000000000000000005000000"], 0x8758) [ 1426.033412][T11407] IPVS: Error connecting to the multicast addr 02:45:58 executing program 4 (fault-call:1 fault-nth:0): r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x3) 02:45:58 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000140)=0x80000000) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000000)=0x4) r5 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) lseek(r5, 0x6, 0x1) getdents64(r5, &(0x7f0000000000)=""/43, 0x2b) move_mount(r0, &(0x7f0000000180)='./file0\x00', r5, 0x0, 0x44) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f00000000c0)=0x1, 0x4) 02:45:59 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x280, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = socket$kcm(0x10, 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x400100, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000000c0)={0x980000, 0x8, 0x8, r4, 0x0, &(0x7f0000000080)={0xa2092a, 0x3f, [], @p_u8=&(0x7f0000000000)=0x1}}) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f0000000100)={0x3, 0x9}) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 02:45:59 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0xa0f02, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x10100) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x1, 0x5, 0x80, 0x2, "b857b7365929244e877c3cfb7a7774fe0d00c527130e9036cd5880b4456d763d2a9a1872496bf73390cbe011dce481eed5d68aa414ae816327839747dda40b", 0xc}, 0x60) 02:45:59 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x3) [ 1426.458983][T11716] binder: 11703:11716 ioctl c018620c 20000100 returned -1 02:45:59 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000007940000000000000000000000000005000000"], 0x8758) 02:45:59 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x400001, 0x0) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0x6, 0x1) getdents64(r1, &(0x7f0000000000)=""/43, 0x2b) move_mount(r0, &(0x7f0000000080)='./file0\x00', r1, 0x0, 0x0) 02:45:59 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x800) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r3, 0x3) 02:45:59 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x2) 02:45:59 executing program 5: prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) [ 1426.972289][T12076] binder: 12037:12076 ioctl c018620c 20000100 returned -1 02:45:59 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0x6, 0x1) getdents64(r1, &(0x7f0000000000)=""/43, 0x2b) statx(r1, &(0x7f0000000000)='./file1\x00', 0x400, 0x10, &(0x7f00000000c0)) [ 1427.019150][T12076] binder: 12037:12076 ioctl 3 0 returned -22 02:45:59 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x4) 02:45:59 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000007980000000000000000000000000005000000"], 0x8758) 02:45:59 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000000)=""/35, 0x23}], 0x1, &(0x7f0000000140)=""/229, 0xe5}, 0xfffffff9}, {{&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/238, 0xee}], 0x1, &(0x7f0000000400)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000001400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001480)=""/61, 0x3d}, {&(0x7f00000014c0)=""/115, 0x73}], 0x2, &(0x7f0000001580)=""/47, 0x2f}, 0x4}], 0x3, 0x40, &(0x7f0000001680)={0x77359400}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmmsg(r0, &(0x7f00000090c0)=[{{&(0x7f0000001740)=@isdn={0x22, 0x4, 0x9, 0xe3, 0x40}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000017c0)="dfb73173a1f599c7b7cefff6424bff27039d8599e0a71c897ebd174ca02c0bb58f97ce4a5670b2d3dca8fce4ef", 0x2d}, {&(0x7f0000001800)="f7c5f850bbd032fa1a7d72d3f9346b13bf4c9fd8e54bde4c9ac8dcb208038af19329f2fd84486491e4498adb75e6090c0d95394f7d452c3cb3eade7caa59b6e654677323e69e6955f9d4c296f574fb0849026c005c0820d9f44701fc20baad8537eea78eef3bb0eb20b5f6a0a24ac114376a4d1821ee546da6c6e89966bf1b61c084da5c23fcd27dc2e24ca511d1ca31efcbebb034beaeb32ec6f204cac69041105488eb8e79b93b23b3", 0xaa}, {&(0x7f00000018c0)="7112d6432d4e87bc2d8ce980ebeec0af281af44f4a2849a96b0acf61123faa9a6250662ac337f7ad730a984cb019bab6b42ca817c46f519678187872d81c14207289cc3cd3152ef95a1191e7a6c3fac6e0be2b749ee707fd0519f336c16be6d4f2dbdc5a7e5ff55d12d762cc79d4e561bbf41eceffc593c4b6c1f71a44fb93bdf00d2a32b9db375c18f297aed49d339020169022df59a4f54b0075b5fd63a47542b7e8e2c78eeada6157d97af67f6140d61a85e933ce0332145a096b5429399353c86a170606345d0daabfd39ed87a9337b32926594b5ea75b3b60b4cbb373b242a338f61bda214b10afff7c2964519b200513e13c9493b6b94024a0446ee63b8db17b0529b365ffff58c5c6f7319a21e50547db918317f6ccbd032e19cc37452903ba79955e09e69e6abd2f3d0acc937236791abb07cdc6776c0027c83ac60d442028d3cc6ea514747ad2a025d12309983c184d73f899101a475586b0a655a83ae7bb3e41487188595aa0a1c26ba0ce8541ce91231f3286a570020904fea85c87e9d3d5007367885e7d79c61a3a3ddfbc1810c8b852bbde79a17055c6213e609cd5a527f02ab014a81edd1eb1e253f175edafaeda1749bb0d5c7257ecca7895abead9d2880cb44e1061f4d14707313d1d445c930a038b7dc29e8e085d794d619d44c1be5fa8c9a3d497ee4b92485ecd6929f8a06a3fc1bfb566a8d33ec05ac597294f154d3df09cd693356ba1418ea1e813e869acb7a3a1b0eb787bbd98d4e4e2fa3db128a9a4054b3a64c917b332f6618ac33f54f18105b91b2d9f7be21c9d5da32544066c3b8c752a9ac71acd048d9d85307d5cb8fd1eceb09e86d6c4ef951c6e7f469bfbb4c79c04c7407570557ec22f3706678af2dc9328bcb3e06c05021eeb6c91c81acca5913ebdb222beb45d892f0197455109dfa0d6f051e22f5baf698854e3dde74c16f00a891718c1e81f1ec74a440ef728b62e9c549f8998b646cd52482e0dd0745b926f29ec2bd22b3489c9b9d9971bd06a0f087c38ccdbc4224a4877156f4160a36f594d63a6910a6d772d66a018039e15a4494cecaf37bda085520bbf2e541a23168ee19f529f0030e01d1282e4506f05f6dffe8a94dad5e16a522aef70e115b04b70be1753382c0c980c2096fd86510041acef307d8a65759a9a81df19753d92b5b8985703cc7e3ca3718561d89922f5cc99cbdf350108923e198b5a31c1b7fc76947696b870e6d49a644911c9b3f180849f32e10cacb67f817da8cd64707191475058f9beadff77389806279996e14411916585ede9ccf87eb202cd06ea667e5a737615220639f4ec81d6c8dc77f7665e459039be6e692207da068b8c7f808111ce3d170a29673c889ce36b4d40561acc94792dead42fb21d5c9eb94dfea42fe888ce96730aba813a5b102f672b20d945e0ae1384e5f1a7431d5456cac81846338267fece0228338d3400e6d77710287f89e6cd69ca35ab1bb9ef9b8f989f8066eab04591c618f225c6e635f3fc5ed74eda781c90a099c95059ca7f3fc72a25982ff78178db58cf9e933aeb1edb34f2f85d8bd6175d921566f286d29fc935f88802056c20c4a2f0a527833711d46368e7ef0f342e8d55c8ced81672bb6eb83dbae96949943fa3180a45bcfdbee5762aac75efd4dcda4a5d1b5ddc0c94d422576fab588052f2766a7eaf2f5e850308342ef9f94dda119b55636cc872c3903e936b268506aa14ec2b513ee06d157f5c13aacd821e83102c8527f42eac861ae5e75889479cec9e31b9e11ef4e30b56de4505d8dab1c6cfba230a8f3fee16b34210e3cef8c7d46c04106e8d62634ef27f46e28821f1978549f685d5620eb74cd3a298a87512a094ffbe74d59387b76003ae89e2237d2055e8623a9cdb5576539fce319b3d1fad9b0e11f7b7fae282dddccf6fe41ca6b9367bdd21aa53684039fe4b81d9fddd76178e723379756a230ece2bd8878c9a47f6a50c42d016f4192784afd8a606626c5a99eed5ef6e13f90c6ef9e9a919e7d4fab43eb28b24d573fc772be245ccf3a15a17edcea0bfb5a5b7caeff03a8a8e815b84b483090960203d007ec8a58fb1bec0e636baad7d9125b511c3339d0891b360936ea8fa0b44de8610a46302c741cb8388651d2e1cc742675ef779be0f3485b897b06be4ecfbcd72d539b87ceefcb7ffc3a7a5e0571b650e1aa0557408b6353d8f0bea7519efe2ce749015209f2c1bfec1d1926841b04e0e669f3711d560e6d0471c1b138ee0865b8feb3757799788dbd723bd4bcc4381962ce5afe0aec2049e42512f4b0dc5ab9a241051d7e3eaa9e26a091222912ae050617dd567a766a8abc3aa2c22150403c28f351688cd1e605fe8cbd2280509f078ffd38951c297030524ea489f6eaddb23310629e12b92c22cca53d1ec7643b1a7ef70896d1be35133707ee055735e7fdbaf53f1f5a6ab52234b29db07411b3483a6e76ed8dabe3e1489b50ed01f3800def2cbac9de79dd156799db464f8ca2a55b0bd1953d7a41b16e0a3c3fa3ab09b64bfcda3d23e6227fb22155f9a4371ffd6a60432b2cac80e525426136d521baca4a186c7da7ab3cb2269e14acae22e6e3fe21e5e973e233d4884e9c6c014c7ca34f6bf297eadc1fe1889293b10f79a3764a195c311093f6642fee1b2fd39e3f7c3a710b4a7a7832f09afb1df91ae5cb82ae1079973c87b6ff3d8efdf74304876b4f3fa264a7948fba76a387fbfaacc65067118173a06ee7349c22368ae7e7b5d9046306ec771703211171ba14282f18bb7f2a1eb4588e4c83e0aebfd2455b67daff3704a864a92fbe0a5a3f755c0966d4d0788da7e8feea1f8308efaf2fb5a42b9327e8e743a4619d8025ea47ce419456fd8dc75c684bb9885952b28d93a6bc7a2819202e64778fe3203af4382b0e0686653b0072e60bfbdabb0a61f68fb63aeff556faac2638889f5890fd491ff78d0bd68d524cf6c2e145e9112dc550fc0b57ee4452126d90aa6c5ada217e287572f292b6f7d38b3337a96c8f40e270cc50c0d9e5911b20ec03e2ae9a4c109189ef11164fc84bc5edcc1bf149926f880912a2cbbf627399fe47931c56b5821257f56dc532a0bfcab601843c4864b0ea03028f4f2a97091d18ec94a6c806e35f100128a75f6101d8a760f75634667af082d8cb0c84478cf3031c632481c0d8f4e3507df2dc8d8f1edf33ebe8ad2c60d5ac359fd821d10a79cf04d8ac403b7fffbebd3428cbcd0500b3d4c3dc34afe132abf3c777602bda15847e862d866189f1ceb13b6130a001eca99ab6fb1e404b6e12fbb18b945a6aed9b3e308d58bad60842fe654e7c3478481a29d12aa97dff3ca0057c38815720b6c3d858dfc4577d41f3a16663cfe99f9caf4208769709c519323bbeff6cf42bc9adb2f9cab288f51990b9bb312d10bdc7a1c139351fd121424c54393982cd7ff7029fe2aa05f640827eed10d4b198e665ddd2cfe1a8b2c6de9efb44c9b7da9b9bea978a26c009642a9d795c989b6bb79d138d0c82c1f7da719e9c4b99a299db8a0b97fbe2642d7160bc0586db761b7414aa0259f2228913ed7c4e9fad95413513ae89aa8f60a9270d9bfcaca169a581696103a10ad2db1357b597b1a72fb8342c03e4f6359648d8004b5772f18624745862185f24dd68b6d569a9b06275d914ab1c5795112a83ac54d4f7dc2a093c4359d7bab1396cf7da8bbc7e919d3753882cb9a7a9f704f13c30c0f6f2f9ffedbf7c704c31ab8241eb240e6dc97f93fe4e071c8272436adf34d31fb890f9ffefda27b5886df42cb918ab4470bf123bc946f6403119ca3258e128df582ab69bcfb432e84878f3d7cb473c9dd6db5526d3f677003a2d9a0316eb3c41818e0bc19b55ded384041967a27a208b5e433229b68c93a1062ba6cee2896460bfb29b61fe6fb94627894574c3b58a836ec1363df9b5725c4d1ea0a7b49b6be2ea13d24e550beb1522b5f2e421832a001b4bd74862c29a55f5ba7901c62a3368ee3f01083190eb8cfb3b2aac11496ae90653f73903178774d54ce0f5b66d9a35d79c8cfff4f7e3eef830423d8b59489a74c00e0b13b6126ea066f164dcf79938e0975d5a4c643c018d83dea6e623e834987e5315d9f343eaf679b80d1c43b9d539defa2f95dae7a1c37d8083b64d47ded14435545add7555f605c6bf02c15ba9b9cf2b46b4115110216bc3382195912e4b80bc1dbc76880b31183d5b451d4ade043aab4ec66095b908b0b4a3c8202d780080faffed550381cd5ec6925ccc0aea469f7042e77e2e54da4b3b77e024d5b8a9e93558d1f5624938c19f3bb5562477943382df146f83451c2eb7536e832a6727b3dbace9e0e682af4985fc585c10a35cb3d732f00fd62752887c60dc47b8cfa477e1aad3bbac7378ddaf482d7205606fd1da12ad17c189cec77f6a09a3e9e8d57521ce2518967d9987a0eb5498f545472629b38c7d27160fbb39cc8834ad30ea87b7159e687820f7c32a278ef67f3fa789f4779a22656c4a2b5720b3f1ad5395ac44d33440e74f36e4a814200b124fbb0b4d7197b4a520173f72be998e7dca3b57068eced0daf8ca1860c47462569811457099dd38e6c43cdcaa8f36691bb8a773de998cdd7d283b4c2b83d8ab4fe6190a70eaca151a8bffc17b7faaf8008b9958cb3989ddce6f7ea47d946919042dd36074f50d04ddbac23c996a72e1f40b52f96a56c58b6fcd72b621ce4eaad4bbe523756702b8c46a86b8b1387688d77ee69eed9dbf83a0ec5309475efa30b868724fe9d01a9cf1c40cce52630da8056431a61fd3c81f641e987f7f23f57586c40cb7c376da003db9238c7bc26e8e9910811e6e9c7626d31cc088bd0ff6cbad8b6ffb8ff8a679f5636c226f3b60e9df75939eb3079f11a73ab93b110d9e5e2784e0229c39cb282fef8f8912337d78a5871fb9065137ba13558718a45fb632c76e6198a152e30ae2588c98cf56f85c96ff06746b5a9d1123ed4df4e9b6d2e04e5587a1a36474747f40a5cbdfd1c1107a212a4e5ecbb83f7b0091b6707e30f6a1ca5ac4af8f5aeafdefcb41dcaf29fa375fbe8f7e316b95100ec30f87ee77cdcff845fe4830b76b44787e3759f9fe6c22d53ce01362cc164a81c94d4b1df481731e0e56e1c50bede88b379e713783cfe95251a798bbd58ce63a859bfa07c9221fa9a7b47524434b64803d5fd2edb71fdcae77d854ad67b092dd02b988c41e8f21f5c468415e9c5c4e25a54ce98947bf8b520341a663a442fd6e410b6a8cbd765a4f577da1601f50ab760228952aa178470d0a01f0b15251a5b967206476cc62cdecad396c92de5ec02300c0e52c945363b1f618ae4fbb6b3bea2ba6c05e5d679c4e88faebf57cf28d6e0895259da87043d3f1cc74e7b55bc3a6254dd00fece360252c67cff6706d6f823014751a0cbec0dd1151537e6035e3b8083c065111708248953f294b6a52595ceb7d9ece479376677c1487d50e24838fc499bb22954e524befadcaed77d6a23a5334bcf616050d1c66d9907ba2ca4d672fa522da4097fdccb2d6aca5c0a337a8672f067cf9cd3d6293121b3abfb308d7466f2e11988bdbc1d1fd4f67662c2b1995c3e1ff5ce5fe1884a1f5f0d24d38a12eec9bd3c9f0280d91ed21c0f0a6070a2ca37e7834b2da9be56751698f836f43e5714c9a90383c43b4dd88cac1801ad945d2e2d2f565835efb1bd5d2b9a17b90abbdd0dbe831eed3ad761154c9b0ce980c8ae231482ced3fdd3bf27b17243d36a92992b3fbd00523f68e06300fd54b433f47815d7", 0x1000}], 0x3, &(0x7f0000002900)=[{0xc0, 0x102, 0x9, "4742b4cc41d2265c2a44679429e6050c792febdb87f88bcf089c66c9e4f9751c53461be95f90e091f890c497d75394b947b8c431f6f7c9a3e79832ce2e743e0c3b2fdecb7cf67d11658fb5690ba18a90c544cd487e7bc5c2108183ad0b20ab7ff1d8e3ac9c57360db42c296042b870ea0591c8dbb6108a1f5500b8da0bde466e0d1d680c0040c7f666701decac8703fa0242fa3b35279b52aa8f74dd6d09ca626bb479a545c82505a9b94b4e41"}], 0xc0}}, {{&(0x7f00000029c0)=@isdn={0x22, 0x8, 0x4, 0x7, 0x1}, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000002a40)="b47b73c6a723f07d710dd9547188b7393f22553e9b597c71f1f9377179fa7927c34ad8eac11dbb29a3f5f3e44443c32dd0f35e74f5881a59ea26393ce4db0466f27a94ac5974670c6c3b77001087eb076034b14126fa1a52cba171115e06649f6f883a8f606c8e9fc583c8762ece1f279fada8df73", 0x75}, {&(0x7f0000002ac0)="39a872b94687fa3349be45a34e9e08c65275855edcfacbd84e0b93484b9213a58b254af6d75cd56d07ceb757c727a943d9d7856bd6521b1313187f8a050f72993f020c9d2fe6adff750a67cd2c7d22fdb012913d6e7db8ddc7ad61fd219dc2c21f825528a74b7a170054051c069aa758f47bbac93b504d7c6ff946b955b47cdbb6a0bb1d9f79f863ea8a16b70e11cb67df2e164ce03f7503fefe9bd3d4cbf77a9060d79690118b37125df4714ea6b9ec14bc301ef5c42823e51abfee82ba54b068fb0abc8e47c688681dcceb210e8ac7ee48", 0xd2}, {&(0x7f0000002bc0)="3a343956a338f2d7f38c2016271885bf94a6d8423895c68dc10704d3934f9526e1d4379c43486240d2af6109571cf4b5ebce7267078d0be0703a35052e208791cfafa1312ce9d41e58d9373000bcc812a83c9dffab36d8afdfbbf9aa989e7ae1b2e3cef9d7d654bd900ba3b9", 0x6c}, {&(0x7f0000002c40)="87bfb1abf4a5100f4f9ce6c52df84ac56160dda4c818f2fffffaac973cbd4ec11c39faaf5bd813f0b28ba8644caf4799f5efc9f5ddc36586a0b4a5c804746d92ade7eca4b27dae72e3b5f7354ca0a64de57b3008ee09df166fe81caaad4e3b34b4ec3fb5caf4650cf1c1777e7e8a631a91cb46b2d2640884e62c14c3b67727e4989a0af048ebc3793ad0fb8e79a481faf8361531ca29b57af3d7545ca01b33c57d8eafe8b5c96adf15c870fd2ef07b8a0e76cde5fb9776311f0933f9fd0a05c88f9f089882742d097ffcfc", 0xcb}, {&(0x7f0000002d40)="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", 0xfd}, {&(0x7f0000002e40)="28fa8db8c3eeb24263b0c3d4ac644e62bacba9fe0182bd32b19d921ec2b86db2a7d73e97ce8c4555b8b036d5a67b", 0x2e}, {&(0x7f0000002e80)="bf61f6d7f2d56777791fdace051aeab1d0df557dee969f96a70970ad3a284275214468194d58e6a765f42f0675", 0x2d}, {&(0x7f0000002ec0)="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", 0x1000}], 0x8, &(0x7f0000003f40)=[{0x1010, 0x105, 0xfff, "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"}, {0xb8, 0x117, 0x3, "a818d80aa677f43c18839f1a814c5965f9a280d494e62e6e17bfe92357244d355029c93c34ddbf4975956a8bca70e7ad2da36f45666692aae3e528732090e6f44e267029ff079b4474a4bf36155f41ac0bfe3be2987a3d431c03cb0773831e734ef58af8c2a0d00fc963fce4fda97a65722ca56beb44ca4bd2db444c3de29dd5d3e027f46ad3632707511caa991dbe169b52e8b18ea4bc8b01be2aabe5f487de3e2703c52731"}, {0x40, 0x100, 0xfffffffb, "a607f207cb18c560e730f40902868ff901de2f1bf944add1ff2122f16e76e389da070f383f99def683c8"}, {0x50, 0x112, 0x8, "99055aec6bcfd6a8d4a7664be058abd926fefe71ebbedd1d57d395dfc0f1a72f4687023f4eb7d1b6d988a849d386502d1ed363ba8d14af4e6c82"}, {0xd8, 0x103, 0x0, "3e29f94afad17b1d6209e475082ecfda99c354445bb1d3352f58428c738dad70c0ac9a61b1edf20e8316250bdfc8999d92f7d63f6f8d1589f3c7a9c21c0fa45b184bfe1b0a686116e82a9c3eedb91c4e848f14d02e7ec16863b6e531b7e2bf0ab6881112d6109a46182a053b1c658e188ee5719a9231c46b174f48d735386c0c8790964472fe763227ed8b787c47d2b988c832582bc1720979e976a4f0fac7cf87e8fddd050ef7d9802b146fe5cc25ef0f8a7caeac00531bd8a3c7b62c58fff316d1b71f"}, {0x78, 0x115, 0x40ecf62d, "135d8e299b5295744d9b20e0eca134b86aae5134c488e4f0570ef5373069778eb279152699d2b76cb40d240c2ebf35a5b443174d6d8282659bf722ee361ab04d01a28feff01bad249965669d6ccdac4f34bab7040edaf072e03daa6ed7b0d23ffcb66458960be6"}, {0x1010, 0x102, 0x8001, "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"}, {0x20, 0x108, 0x8, "429e856e7e8b995f541840556c6c31cf"}], 0x22d8}}, {{&(0x7f0000006240)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @loopback}, 0x1, 0x3, 0x4, 0x4}}, 0x80, &(0x7f00000074c0)=[{&(0x7f00000062c0)="f7dcd4c19170341ee93836fac08a3b0af93b625bd9d0", 0x16}, {&(0x7f0000006300)="e983c601367a4bb20af2c5a095cbf2465868cc5ea28949c4c4a748f03b6ed2442ede8d0fbf852aeacbef80724168ffb881b70521194fc78fe249a6d297d11a7b335ca5524c09a7ca22357ab02cd491bd", 0x50}, {&(0x7f0000006380)="d9770cd32518b02d78be53b9436c20ec2071c7028e18533af49869b96a821971bcc230a37362f6eefeec936879ad890462116d5427756b1d5a3423bfd2c1e891c17fbad4decb342104355e4df1aec922103590da763d3a06a6301b14df8d6ad6d3ca002866314847bf1cb48a6d976361e3cb499f47d28ac1afe7576c0449e3a1e42a2903a8cd07ed407bcdd0fed4b18b587e24b1df5b0fdb55341f3ad6e7f4e1026444597f055d18e6c539037d6b1f7bf94f6657f0366bbe79b9e2d10357a959e0af084908d164e1c7309acb78e3c3d5904510db553f", 0xd6}, {&(0x7f0000006480)="a05c5ca10f393911007f59d547", 0xd}, {&(0x7f00000064c0)="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", 0x1000}], 0x5, &(0x7f0000007540)=[{0x1010, 0x114, 0x2, "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"}, {0x50, 0x88, 0x1, "bfa61bb64a6a7ced4c942ba1a7314ab54636a0d438c6b81c5176d8c5040eb929708b224b4f9a64d7d1b5697850027b3baf2c7cde2b983147de8c65ef"}], 0x1060}}, {{&(0x7f0000008700)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x1, 0x0, 0x4}}, 0x80, &(0x7f0000008840)=[{&(0x7f0000008780)="9621e5af29078e0a4d70479d1b8b3ffd3b203647b46a20932ddf1bae52dd3b97bd5fd81ca9b6bf81fe7d4acbb1379bc8ab72d99aeca72d2c01d081f86d4f39073745968fa23bb1caec7c90160278c208c59a827351111bea7f3e57ccc0ce467e8ff00afc55b4961a2d24990c18c437cab6e54053ad1dfb17840bdaa88941c60c3e1e2a613506c88340fda859b646fd5794be172ef21fd58d1a0bc19d8f16f45c48bd3acb21fae1e8f6699badd23b48c7977466f6e7f48179136354f38aa6", 0xbe}], 0x1, &(0x7f0000008880)=[{0xf0, 0x10d, 0x0, "27176b0518942ba19da060b1710da0cf596cb666a569c2497448432b385bd3981d4b90694a822aeaf1f9e01776247a213bc3dbd6f06eeaaa27b8924b16135c7ed5267a6cb909ed5929de0ab6e25d1b17c6897efbfcc6ee2e7169149e8d836bf62413801fb53f2d8c90f17d92129c44e3b7d256abbfae83f35fbd700e44394039eb341a65cecac8970dec8272ae02a06f6731fb30ba39e168d5829ca1faec73e201ed3cc13fd0738e33e0214c1170a389cdb6086fce328aec493a69d111fd5d6d908ac5b7cca449dfb2ccbc7b0992b5b7af18a4880b9847dbe918ea271468"}, {0x58, 0x103, 0xfffffbd5, "d7403e9b2e39c90d795fcde6b8f46f118e7aa4c596c805fba3d42c884b8273c7a42b0fcb2891935852acbfcd49cfea16f7a7ad75082025d3b81b41884d82026d9b"}, {0x100, 0x108, 0x5, "a33af3751cc6a2a0594dd3f423b47cd3d9b73d27185e001bbbbd60c1bd410104a45a22413d820c054c149560d9903fa77fac4d2d6d6b7befa8bbdb503069b769c8e8e00b9a7a51c6e8095659a0eb790ca0855d55e5fdb19aead422b3d8fbf0af77c0157b8dbf1e493d8bf271f86cda70291c3fa32fcfd9072234df28d37f9fa98f37e9a0a34b8fbb6e3a0452d11a410b24d9f16795d3e17f56dae0c4ccee113ad982ee7d86678623cbba28dbad4da61bba2dfb34d4a653bfbb608c01ea277051768f867df56efbd94bb4f27093c45ea02094d5ef87969a554c4ed78f1139c1ff8dbe514bf707a1d368816e8f"}], 0x248}}, {{&(0x7f0000008b00)=@llc={0x1a, 0x206, 0x1f, 0x73, 0xff, 0x20}, 0x80, &(0x7f0000009000)=[{&(0x7f0000008b80)="75ef302af793e4f4e30c12979edfae4223ac0b73de43d22866da526ca3a244bbd3b24a22dc5eb9cbfc064252881cc8", 0x2f}, {&(0x7f0000008bc0)="c93f130cf44b449bb294a15ac2c9f781bef57302abe52c4a0fd523345817a96cf9592f6f104e8e6de2e94ad956cbcb5eebdb360fc709ee6dbf5a08e19230de30b23bcf2b36b5fede13ad2c3980b57bb2408f73724090b0127f9d346ae149ffaccf131b6a8af4", 0x66}, {&(0x7f0000008c40)="b6a948c505612c8807f68afdb55895e62f0ff03dc99d2ec01a35c1a89d4e40bb9aff8457b1d28f661185a602bc623fc64e4bea5bfea70184f407e6d7148f5bb583a1b15a7acc558abd59828126f79b8334ebad06aa90b9e01fa2260571b695c896af28f384883b2ba2a18d65bb317ad8cd961fd6f940036ad4ef8d5be9ef86e13f1fea62220ac7d81b3f07d56681b8871239ed712fd1ca", 0x97}, {&(0x7f0000008d00)="e47fde9eb42284dbd59fca5d142a485efbc4a4b3809c9e37dc4e38e5bd235f4fc0d69f08e1c6e2afdb72802f076c1415edd0d20ccf6fe68da4fc97084d6af0284aa528e37eac67d9b42fc09e4aaca2e38b0687e568957c7614198b50f50407787cc99a319c8b8c3ebac8372efd5e69feef8c3ecd4183472e695d4192214bd245817d6eaec46f57582b30e0f96c07c83c6aa0d170cee064", 0x97}, {&(0x7f0000008dc0)="f7541e1f2280bfab548d7c80d27325dbc2947ae2044ae1c69be07d6df05c23a0d70034dcad8813aa5cd345429fef19a93b7e370ca0da03b3065cdd051a0c3fae717af73704ed5580d64ff5d978ee2af5c680d79ec0203e65ebfa2848e0ccdd3cae191269ab84c07665516ec84b00", 0x6e}, {&(0x7f0000008e40)="a702cdc2439d029460ba297891841d03b5c11a8a7450", 0x16}, {&(0x7f0000008e80)="b32f0481c10bc32715e71bf233b5b9ac1b7865c25e1d952d3b7b4b58e8", 0x1d}, {&(0x7f0000008ec0)="5f3b1388d15fcf495270464fe115a12e26d13483a1a4a8266889c0aed7d74b2297fc37d738de110c0feb77092361f6e44071aec097d272a327568dd90e3e1babaf2acd218434289f7dfc81e10c8b6bdb6d1e7839ea5c0f11aba8d7f4721f9faf847b0c9eaaece9aa95ae9295c1505b660d1ab53d556edb6f638efe6ed5d60b2d7834163822280104893cd23886c903f1ba7451902ce247693f51426283a001471777059e63f08101e108bcabf0", 0xad}, {&(0x7f0000008f80)="1544246249299dc705cba5a6f752f447b0abea9227", 0x15}, {&(0x7f0000008fc0)="a3cfc3", 0x3}], 0xa}}], 0x5, 0x94) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x9, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b38b) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000016c0)={r7, 0x5, 0x5, [0x6, 0xffff, 0x3, 0xc0f2, 0x1]}, &(0x7f0000001700)=0x12) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x541b) 02:46:00 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) r4 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x4, 0x20e002) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)={0x2}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f00000001c0)=0x20000000, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000140)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x80000) r9 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x143800, 0x0) dup3(r5, r9, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f00000000c0)={0x1f, 0x3b, &(0x7f0000000080)="52ab5fd114dfec36da4b9f8b5c582dcdf7216695054dfbae6a034463d7973e6ba6d5e9ed45253ca24c91747fa3b98de8188e00099e61a3366db692"}) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2000, 0x0) 02:46:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000080)={0x3, 'veth1_to_hsr\x00', {0x1ff}, 0x2}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x1, 0x1, 0x7, 0x1, 0x40, 0x80, 0x8001}, 0xc) r6 = getpid() ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f00000000c0)={0x1, 0x66a, 0x5, 0x9bcb}) ptrace(0x10, r6) ptrace$getsig(0x2, r6, 0xffffffffff600043, &(0x7f0000000300)) tkill(r6, 0x2a) r7 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r7, 0x7fffffffffffffff, 0x3) [ 1427.498536][T12399] binder: 12375:12399 ioctl 80104592 200000c0 returned -22 [ 1427.502676][T12442] bridge0: port 1(bridge_slave_0) entered learning state [ 1427.553869][T12471] binder: 12414:12471 ioctl c018620c 20000100 returned -1 [ 1427.588719][T12471] bridge0: port 1(bridge_slave_0) entered learning state 02:46:00 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/238, 0xee}, {&(0x7f0000000300)=""/157, 0x9d}], 0x2, 0xffff) r3 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x9e0000, 0x3, 0xfffffffb, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9909d1, 0x2, [], @p_u32=&(0x7f00000004c0)=0x6}}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000140)) r5 = syz_open_dev$binderN(&(0x7f0000000480)='/dev/binder#\x00', 0x0, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r5) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000100)) ioctl$SNDRV_PCM_IOCTL_LINK(r7, 0x40044160, &(0x7f0000000440)=0x8) getpeername$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f00000001c0)=0x1c) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r7, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 02:46:00 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000080)=0xc) [ 1427.641946][T12471] binder: 12414:12471 ioctl 401870cb 200000c0 returned -22 02:46:00 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x90000481) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x541b) [ 1427.842363][T12687] bridge0: port 1(bridge_slave_0) entered learning state 02:46:00 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000000000000000c980000000000000000000000000005000000"], 0x8758) [ 1427.974900][T12816] binder: 12759:12816 ioctl c018620c 20000100 returned -1 02:46:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r6 = dup2(r4, r5) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc2604110, &(0x7f0000000140)={0x4, [[0x482b6e73, 0x80000001, 0x2, 0x80, 0x1, 0x6, 0x2, 0x8001], [0x40, 0x7ff, 0x989, 0x80000001, 0x7cf94c5e, 0x101, 0x80000000, 0x8], [0xfff, 0x7, 0x1b35, 0x1, 0x5, 0x0, 0x5]], [], [{0x2, 0x2, 0x1, 0x0, 0x0, 0x1}, {0x9, 0x3, 0x1, 0x1, 0x1}, {0xffffffe0, 0x80000001, 0x1, 0x0, 0x0, 0x1}, {0x7, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x20, 0x95, 0x0, 0x1, 0x0, 0x1}, {0x9, 0xffff}, {0x1, 0x401, 0x0, 0x1}, {0x81, 0x8, 0x0, 0x1, 0x0, 0x1}, {0x7fffffff, 0x3ff, 0x1, 0x1, 0x0, 0x1}, {0x4, 0x3ff, 0x0, 0x0, 0x1}, {0x10000, 0xfffffffd, 0x0, 0x1, 0x1}, {0xf0, 0xd6, 0x1, 0x1, 0x1, 0x1}], [], 0x9}) lseek(r3, 0x7fffffffffffffff, 0x3) 02:46:00 executing program 1: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x4002, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000000c0)=0x79) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) 02:46:00 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000080)={0x66ec, 0x1, 0x4, 0x100, 0x20, {0x77359400}, {0x1, 0xc, 0x3f, 0x38, 0x4, 0x1, "7dcc63b6"}, 0x4, 0x2, @offset=0xffffffff, 0x3ff, 0x0, r3}) connect(r4, &(0x7f0000000100)=@l2={0x1f, 0x5, @fixed={[], 0x10}, 0x9, 0x1}, 0x80) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) [ 1428.172407][T12986] binder: 12948:12986 ioctl c018620c 20000100 returned -1 02:46:01 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x600000, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) fsetxattr$security_evm(r1, &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@v1={0x2, "8db0ede1794f57f0"}, 0x9, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000180)) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000000)) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x541b) [ 1428.383682][T13121] binder: 13060:13121 ioctl c018620c 20000100 returned -1 02:46:01 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$VIDIOC_G_ENC_INDEX(r3, 0x8818564c, &(0x7f0000000300)) r4 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000080)={0x3, 0x1, 0x4, 0x20, 0xffff8000, {0x77359400}, {0x1, 0x0, 0x1, 0x0, 0x80, 0x81, "b039a7d3"}, 0x10000, 0x4, @offset=0x3, 0x5}) prctl$PR_CAPBSET_DROP(0x18, 0x1b) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$PPPIOCSCOMPRESS(r5, 0x4010744d) r6 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r6, 0x7fffffffffffffff, 0x3) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) fchdir(r8) sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0xfffffffffffffe4e, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) [ 1428.517885][T13260] bridge0: port 1(bridge_slave_0) entered learning state 02:46:01 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)={0x7fff, 0x1, 0x7}) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) [ 1428.618259][T13260] bridge0: port 1(bridge_slave_0) entered learning state [ 1428.702016][T13389] binder: 13371:13389 ioctl c018620c 20000100 returned -1 02:46:01 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) [ 1428.747032][T13389] binder: 13371:13389 ioctl 8818564c 20000300 returned -22 02:46:01 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000000000000000ca40000000000000000000000000005000000"], 0x8758) [ 1428.793641][T13389] binder: 13371:13389 ioctl c018620c 20000100 returned -1 [ 1428.862012][T13480] bridge0: port 1(bridge_slave_0) entered learning state 02:46:01 executing program 5: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000440)="02b4d3403e2f21423f35b316c09fa1eb7e55903f8250584e578163f0a20a44edb3cfa5a5690b21490a4f6d442ff3841b13affdd0", 0x34, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000780)="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", 0x199, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r2}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={'tgr128-generic\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) ioctl$SNDRV_PCM_IOCTL_RESUME(r5, 0x4147, 0x0) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000940)="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", {0x0, 0x4f, 0x20493859, 0x6, 0x8001, 0x3, 0x7, 0x5}}) r6 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x6, r6, 0x0, 0x0, 0x0) keyctl$search(0xa, r0, &(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, r6) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r8 = getpid() ptrace(0x10, r8) ptrace$getsig(0x2, r8, 0xffffffffff600043, &(0x7f0000000300)) ioprio_get$pid(0x1, r8) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x541b) 02:46:01 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) write$P9_RREADDIR(r3, &(0x7f0000000000)={0x2a, 0x29, 0x1, {0x80000000, [{{0x0, 0x4, 0x1}, 0x1, 0xff, 0x7, './file0'}]}}, 0x2a) 02:46:01 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 02:46:01 executing program 1: mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x1c0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) r5 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r5, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x40) 02:46:02 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x292b40, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) [ 1429.381431][T13820] binder: 13792:13820 ioctl c018620c 20000100 returned -1 [ 1429.393444][T13840] binder: 13796:13840 ioctl c018620c 20000100 returned -1 [ 1429.445834][T13840] IPVS: Error connecting to the multicast addr 02:46:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000007a80000000000000000000000000005000000"], 0x8758) 02:46:02 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = getpid() ptrace(0x10, r1) ptrace$getsig(0x2, r1, 0xffffffffff600043, &(0x7f0000000300)) process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/194, 0xc2}, {&(0x7f0000000000)=""/64, 0x40}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/162, 0xa2}], 0x1, 0x0) 02:46:02 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000200), &(0x7f0000000300)=0x40) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r4 = dup2(r1, r2) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r5) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000100)) ioctl$DRM_IOCTL_RES_CTX(r7, 0xc0106426, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0}]}) ioctl$DRM_IOCTL_DMA(r4, 0xc0406429, &(0x7f00000001c0)={r8, 0x2, &(0x7f00000000c0)=[0x0, 0x7], &(0x7f0000000100)=[0x4, 0xfffff000, 0x7ff], 0x0, 0x5, 0x9, &(0x7f0000000140)=[0x8, 0x3, 0x1c000, 0x1, 0x1], &(0x7f0000000180)=[0x6, 0xfffffe01, 0xb7]}) lseek(r0, 0x7fffffffffffffff, 0x3) 02:46:02 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 1429.889520][T14111] bridge0: port 1(bridge_slave_0) entered learning state 02:46:02 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x200000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1f4, 0x4000) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000080)=""/130) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f0000000180)={0x1, [0x0]}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000140)={0x1, 0x5, 0x3, 0x0, 0x6b, 0x400, 0x3}) 02:46:02 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x9, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b38b) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000000)={r7, 0x6ca, 0x3c1f, 0x9, 0x10000, 0x7}, &(0x7f0000000080)=0x14) lseek(r0, 0x7fffffffffffffff, 0x3) 02:46:02 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000000)='./file0/file0\x00', r0, 0x0, 0x56) [ 1430.356674][T14419] binder: 14414:14419 ioctl c018620c 20000100 returned -1 [ 1430.405352][T14419] bridge0: port 1(bridge_slave_0) entered learning state [ 1430.419064][T14420] binder: 14416:14420 ioctl c018620c 20000100 returned -1 02:46:03 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x6100, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0xfffffffffffffffb) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) 02:46:03 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000000000000000ca80000000000000000000000000005000000"], 0x8758) 02:46:03 executing program 1: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e20, @rand_addr=0xe896}, {0x6, @multicast}, 0x22, {0x2, 0x4e24, @local}, 'team0\x00'}) 02:46:03 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x1a0643, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r2, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6099, 0x1, 0x0, 0x6}, &(0x7f0000000140)=0x14) 02:46:03 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) setsockopt$inet6_buf(r3, 0x29, 0xca, &(0x7f0000000180)="1814cb4ee4b76f84ee0d10fa5399731924323c0814ceb2f26598f5f051c9e5cb19a1f0158c435ace80d6b4e35ad346", 0x2f) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4, @in6}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) [ 1431.124718][T14734] binder: 14730:14734 ioctl c018620c 20000100 returned -1 [ 1431.146762][T14731] binder: 14728:14731 ioctl c018620c 20000100 returned -1 [ 1431.216298][T14767] bridge0: port 1(bridge_slave_0) entered learning state 02:46:04 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) 02:46:04 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x41000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 02:46:04 executing program 4: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x3) 02:46:04 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000000000000000cb80000000000000000000000000005000000"], 0x8758) 02:46:04 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x16000, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x1) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x1c1, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000140)=0x1) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000000)=0x1) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) 02:46:04 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x3) socket$can_raw(0x1d, 0x3, 0x1) 02:46:04 executing program 0: ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) [ 1431.713174][T15184] binder: 15168:15184 ioctl c018620c 20000100 returned -1 02:46:04 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x8001) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) recvmsg$can_raw(r2, &(0x7f0000000280)={&(0x7f0000000080)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/243, 0xf3}, {&(0x7f0000000000)=""/5, 0x5}], 0x2, &(0x7f0000000240)=""/6, 0x6}, 0x40000001) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x4b6683, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) 02:46:04 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x1f2) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x7, 0x8, 0x45e45332, 0x97, 0x108, 0xffffffffffffffff, 0x80000000, [], 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x40) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}, {&(0x7f0000000680)="ea883423c8b6b32938af8da1a5c22c7d3716ceff1098d5578bc00218cdc4d855613b66e2e39d6e7b205760657a651de574c89c40d781ff421b2f98ac42fd9b2bb2dd775bffea90a684852e6c931c4eb1abf6d6887cf290b19e4b51846dda9b481c046938b31a5d9502d00e5c21891925e74b75de6b9a082b218dce53e855080c8b97e4696ebaa6092c3fb655a35831c19218512ab25dc32be829e8ce7174762d7207b7968c4cf025124f4f970e4ec3025ac6d9548ecae16c00400d9fbec68ba683c031add18519ed3d1e28d0c0de8ef7507478b5662646801f5bb2e4f0f3fbdbacfb57360325591524cea5049b3e8dc750a90ccd297b451ab444d38356832dbbdb31b7afaa8148c1b4ee0d545bbb9af2df6afe", 0x113}, {&(0x7f00000003c0)="dc45622afbc034df6508f40d19b372e3157fd8547a7adfd77064abf0cfaa29c2ccec672faf5ff513b31d6865a5c4296b6eae0165135ef0ae26f4d1e176279d552ebc2e498900ad65d5c350697edc591cd9bc73ac57b1c09356395b6f9ceca6b5fb", 0x61}, {&(0x7f0000000440)="1796274545b9847f4302f5aa7cc20ff1f990ee759763fcdcc19c3f172ca87f0b5a2ee5b434541f31b9a226c129813abf4b93360547bfe57d71b2461c2118f53f45a08f4cfbe663a14f0eacfc364e3b3c5dc3773036e1ca3919b7ff382ec9c4c2c31f8a3ea67facf3dff38f29b3fe9604445b02822aa2c4edd45c69e5b5a3b09ed711cc51b3a8ae81aaf1f8ee3194e9a51ce5fd3d14b749e129e51174f37bc8f07bd0e2ba51d19a8946b998fa642dc13f45a47da22cea33b5ce800f60608319609290f6edfe500afb7f21", 0xca}, {&(0x7f0000000540)="7ab573a2695d96efbee13cef92b6042f6d2d24af4f9ad3453bc6e00b5311c7f130bfdabd0004f68b5911f126490779ea8a8846a80b494c2df06986efe9d7d74263c30b54ca397a0eab53dbd50c154e5ca1de37277862ad6d782404f589eecf815b48b3947a7fd62fc5fd72eebcc80a15c2949666cbbdc88d52fd8b238f58031cd3f42f908ad0a26ba9a7936125fdbbbb9a380ca31b9fbbe7aa822de2771897e007f2486c490a13", 0xfd1c}], 0x5, 0x0, 0x0, 0xf000}, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r6 = dup2(0xffffffffffffffff, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) open$dir(&(0x7f0000000140)='./file1\x00', 0x20041, 0x40) write$FUSE_INIT(r6, &(0x7f00000000c0)={0x50, 0xfffffffffffffffe, 0x3, {0x7, 0x1f, 0x8, 0x1010020, 0x6, 0x8, 0x1, 0x93b}}, 0x50) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1) 02:46:04 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x900, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000080)={0xe, 0x79, 0xc, 0x5, 0x5}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x541b) 02:46:04 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r8, 0xc018620c, &(0x7f0000000100)) sendmsg$SOCK_DESTROY(r8, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)={0x3fc, 0x15, 0x200, 0x70bd29, 0x25dfdbfc, {0x1e, 0xff}, [@INET_DIAG_REQ_BYTECODE={0xcc, 0x1, "5c21b6ef8913756cbecd30a29b201bc5fbfaf6c2f86bab730980b8139d3233796e1817c88f34efc5e61144e9de24cf57585c7dce3e064a8ea8b447b85f07eb923bba03cbb26b0c84002e73c8e930d78e88dbfa093519c1f6c3674b0f9881339cfad53033102c4817ae42dcc6c7dfe47beff394a994e6d5bf903319473b823a7a71f2787e77cced0a76f33b0eeab9f99ec16e0b46fd9d01c5f3b16cb11d1b5ce7201afe1ab3b72dedb0066326e137a68a0becc85e969d7c797cfadcbf67ebb35fbd1f46924fe7f686"}, @INET_DIAG_REQ_BYTECODE={0x9d, 0x1, "326aede73ea4fb515fd0b5bf64b95cf021dc87aba65d68fb3cfb6727c5f6de2c482621cfd7e8a70ea4093bb1c57f9cc416b860b5b36536dd954c4f7598101a1d4cc9d2981e2b7ac355c851951a1e8e38b935710b44d17df8e8cfa7254c2ba1a5b3dbc0f4c729904cf9bfd8a4458b15521e353f2d8797c3152273f7b32f91fa7da9bcadd0d242a3c768147cfd6ce387d971814da395224823d7"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "085068aef1604dddce42114383823dbb67b3d5e04d743bcd483a46bdd5b9d00a4c7957ba4d5177d6f7f13bec4991df06ad47f3e7ba77a89fd7d7299028b642bc0419971ed9ac016d309671128667cb94cba6600bca6ebfa0f13d5e50f0f1ff6fdfa021cb5f2ee6f35b515843e41a0412f9accc6eda983bc52058e32430b5769cf5168ffe9c638b8b977ad49e68"}, @INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "1f2ee87fea67608b9711b3f45508fa02cc2d3013bb20b4809c3cceeaa38769f96c2469fffd1ef2a97ae8cec2f997414301be0ac3d5fc2c1f23ef0e895d8d3a40ba11158a0faeff0f85fe0de042b656fb47dad9b3f5d702bdf7620bdd092305277195e4feccebbcd64505dd64bf5c56183426e1aca00804a29f6d7b44668e8df497e1219cd2c500b781bf80c6baef82cd942822876d6062"}, @INET_DIAG_REQ_BYTECODE={0x1f, 0x1, "b34118d6e2fb058e19d8f6deb512be1804e2e37cf2695f127a0fde"}, @INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "c161ce9a90db374fc4f0a0136d4f0dbd2eb54844b4ee4d2eab78469553a07403a676b1ce9169382c82a959121443dda6b3e066c74c7f49afd95182e69fc0c74c921754f14dd03ca8b3d6bcbe8272838c70ab84cf344ca5cc9f0616a2fe7b53eba6767c49270cd3230c68e05a5c147cf26f607f70bfdd2083b7241368cf0c67f4e9a114b77e6f7d31ed4efbaa9ab4e7c688773c2238db81edda4735a7cee5c8e9c4fb04838c9f32919c19755817"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "c00b7d0fe709089f189dfc903a1face185bcfccb2e41bed81078bf16e48776c33e066dc8746bb49242b347ef4a3c7b8c6ccc671382b380c0fe39b9f5dec8648bce962a96899681b28c85e401bccb4af7f8efd64399548060897265040cd19902b359b8a9bb5714584f04cd9ceb8c70c68cc7362c"}]}, 0x3fc}, 0x1, 0x0, 0x0, 0x40050}, 0x40004) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="02002200", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x9, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b38b) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000080)={r9, @in6={{0xa, 0x4e22, 0x0, @mcast1, 0x80000000}}, 0x2, 0x8}, &(0x7f0000000000)=0x90) [ 1432.081511][T15464] bridge0: port 1(bridge_slave_0) entered learning state [ 1432.081537][T15465] binder: 15463:15465 ioctl c018620c 20000100 returned -1 [ 1432.148594][T15464] bridge0: port 1(bridge_slave_0) entered learning state [ 1432.236978][T15527] binder: 15471:15527 ioctl c018620c 20000100 returned -1 02:46:05 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000007cc0000000000000000000000000005000000"], 0x8758) 02:46:05 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) 02:46:05 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = dup3(r0, r0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{@none}, {@fixed}]}) 02:46:05 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) [ 1432.540874][T15855] binder: 15823:15855 ioctl c018620c 20000100 returned -1 02:46:05 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000000)={0xdc, 0x3f}, 0x2) 02:46:05 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x72) 02:46:05 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = getpid() ptrace(0x10, r4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) fsetxattr$security_capability(r5, &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v1={0x1000000, [{0x3, 0x80000000}]}, 0xc, 0x1) ptrace$getsig(0x2, r4, 0xffffffffff600043, &(0x7f0000000300)) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={[], 0xfbff, 0xffff, 0x426, 0x1c65, 0xffff, r4}) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) [ 1432.838371][T16080] binder: 16057:16080 ioctl c018620c 20000100 returned -1 02:46:05 executing program 5: ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x541b) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x10002, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000080)={0x33, 0x2}) [ 1432.945281][T16105] binder: 16100:16105 ioctl c018620c 20000100 returned -1 [ 1432.984534][T16105] bridge0: port 1(bridge_slave_0) entered learning state [ 1433.023789][T16105] binder: 16100:16105 ioctl c0481273 20000080 returned -22 02:46:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000000)={0x3, 0x5, 0x9}) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x7fffffffffffffff, 0x3) 02:46:05 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x10000, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x288d00, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000100)={0x2003}) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) 02:46:05 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000000)) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 02:46:05 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000000000000000cdc0000000000000000000000000005000000"], 0x8758) 02:46:06 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x200, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) [ 1433.316033][T16502] binder: 16501:16502 ioctl c018620c 20000100 returned -1 02:46:06 executing program 3: r0 = open$dir(&(0x7f00000004c0)='.\x00', 0x24c03, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x400400, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000400)={0x10, 0x30, 0xfa00, {&(0x7f00000003c0)={0xffffffffffffffff}, 0x2, {0xa, 0x4e20, 0x0, @mcast2, 0x9}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000440)={0x11, 0x10, 0xfa00, {&(0x7f0000000380), r2}}, 0x18) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000000)={0x3f, 0x20, 0x6, 0x3}) lseek(r0, 0x0, 0x3) r3 = socket$kcm(0x10, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x9, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b38b) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000002c0)={r7, 0x3fe0}, 0x8) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000480)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000300)={0x7fff, 0x5}, 0xc) vmsplice(r3, &(0x7f0000000200)=[{&(0x7f0000000080)="cb2cb7340667fe434b0c3fe6b82294e8b4f1baf6adf8f579b835da4c0e6bbe9a28582b72206b5c389936454b0fb95df6cd0e0dd14ba9d99f4f28ff630eaa1917935dc5a3ff30fa6c9a5d6cdbcea3da704345503edbbcb75a04eed92387b5c162b53eddb4bb5299359a5d53617f87a1b5e58c2720fabc950769730f5b24c8fa1f7182c2804709be383beac8713edd9b9dc084bbdf170ca8372ab58f72b190db34c2977fb80c7a6b0b5ecab074c32f96790c85050848e4b8d1b8c01367f0bc32389140ccfaa411db72cbddc33ffe", 0xcd}, {&(0x7f0000000180)="8374", 0x2}, {&(0x7f00000001c0)="0b9b050a6062648972370252", 0xc}], 0x3, 0x6) [ 1433.449369][T16535] bridge0: port 1(bridge_slave_0) entered learning state 02:46:06 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002000)=""/166, 0xa6}], 0x1}}], 0x36e, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4001) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@mcast1, @mcast1, @local, 0x0, 0x40, 0x0, 0x0, 0x800000000000, 0x5000008}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x40004) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0x7fffffffffffffff, 0x3) sendmsg$can_raw(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@canfd={{0x2, 0x1}, 0x30, 0x2, 0x0, 0x0, "5f8715805de23d04cf0eb3747f0e041ecdca3ad4b532f3f65a0466fd60149f11fb910b7f9a030131fdb01d79defa9a389165dd7429145fb2267366c64b7caaf3"}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40) [ 1433.594256][T16666] bridge0: port 1(bridge_slave_0) entered learning state 02:46:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x400, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) 02:46:06 executing program 0: prctl$PR_GET_SECUREBITS(0x1b) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000080)={0xbf7c, 0x1, 'client0\x00', 0xffffffff80000002, "98418a914ac84dc4", "7c290ecd9b824a504820b3e9fcd3ab66f3818bd91f0bd318caf5664cd6cb8266", 0x0, 0x9}) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 02:46:06 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x80000) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x10) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x541b) 02:46:06 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000007e00000000000000000000000000005000000"], 0x8758) [ 1433.881508][T17016] binder: 16978:17016 ioctl c018620c 20000100 returned -1 02:46:06 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x2000000, 0x4) [ 1434.006557][T17106] binder: 17069:17106 ioctl c018620c 20000100 returned -1 02:46:06 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0xa0200, 0x80) lseek(r0, 0x7fffffffffffffff, 0x3) [ 1434.074009][T17106] binder: 17069:17106 ioctl 80045430 7fc09a078bcc returned -22 02:46:06 executing program 0: ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x105500, 0x0) getsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) 02:46:06 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = accept$inet(r3, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10) setsockopt$inet_tcp_buf(r4, 0x6, 0x1c, &(0x7f0000000100)="76a10cec5b058c27155823d458747258b530f5f0bce76f822b51f7e94d424b1e7c6febf86777a69ed722a1e62b36f891fd5b3dc1747308e209a83a10c30b9de9f8c792ac81873fc395fd4272f370eb06e063bf678ce700c6b9a1f31cad5b5c9e827af3b802c6b4fc6dc6d113a3231f484ab58ecce4b95a649229a01782c14baf1d08bc230c6fe2c85b763bb69e0792b491e5bea299ed375873514994095883413e61b7f666fb3c9335856da5f8324b79a80dca6d02a9589e2d03e2e21ac00dd182ec1f73e5c4b49a82a30b29c3f74d06", 0xd0) 02:46:06 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCXONC(r1, 0x540a, 0x2) lseek(r0, 0x0, 0x3) 02:46:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000100)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000000c0)=0x2, 0x8) syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(r4, r3) r5 = dup2(r2, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) accept4$phonet_pipe(r5, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80800) r6 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r6, 0x7fffffffffffffff, 0x3) 02:46:07 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x105002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) [ 1434.489174][T17448] binder: 17428:17448 ioctl c018620c 20000100 returned -1 [ 1434.566775][T17572] binder: BINDER_SET_CONTEXT_MGR already set [ 1434.605224][T17572] binder: 17513:17572 ioctl 40046207 0 returned -16 02:46:07 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000000c0)=0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000100)) recvfrom$inet6(r1, &(0x7f0000000140)=""/221, 0xdd, 0x40000000, &(0x7f0000000040)={0xa, 0x4e21, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, 0x1c) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000000)=""/25) 02:46:07 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) r1 = open(&(0x7f0000000000)='./file0\x00', 0x180, 0x80) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='veno\x00', 0x5) 02:46:07 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @remote}, 0xfffffffffffffd29) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x9, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b38b) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000000)={r7, 0x9}, &(0x7f0000000080)=0x8) r8 = inotify_init1(0x0) fadvise64(r8, 0x100000000, 0x751, 0x4) 02:46:07 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000003e80000000000000000000000000005000000"], 0x8758) 02:46:07 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x802) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$SIOCAX25OPTRT(r3, 0x89e7, &(0x7f0000000000)={@null, @bcast, 0x2, 0x44}) [ 1434.952047][T17864] binder: 17859:17864 ioctl c018620c 20000100 returned -1 02:46:07 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x15d800, 0x100) lseek(r0, 0x0, 0x3) [ 1435.164583][T18078] binder: 17922:18078 ioctl c018620c 20000100 returned -1 02:46:08 executing program 0: ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000100)) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r7, 0x41007701, &(0x7f0000000080)='.%-\\vmnet0-em0mime_typecgroup\x00') r8 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r9 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r9, r8, 0x0, 0x209) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{0x5, 0x4}, {0xff, 0xffc}, {0x1, 0xf237}, {0x3, 0xfffa}, {0x8445, 0x3}, {0x8, 0x2}]}) 02:46:08 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200480}, 0xc, &(0x7f0000001280)={&(0x7f0000001300)=ANY=[@ANYBLOB="cc110000120000022dbd7000fcdbdf2515d806054e214e24c50c0000000000000500000001010000010000008000000000080000fcffffff", @ANYRES32=r0, @ANYBLOB="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"/4507], 0x3}}, 0x1) r4 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r4, 0x0, 0x3) 02:46:08 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000040)={0x8021, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f0000000200)=0x7fffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x2a6002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x2000, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)={0x1}) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000000)=0x3f, 0x4) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x800, 0x10) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x204100, 0x0) getsockname$inet(r6, &(0x7f0000000180), &(0x7f00000001c0)=0x10) move_mount(r5, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) [ 1435.428470][T18279] binder: 18232:18279 ioctl c018620c 20000100 returned -1 02:46:08 executing program 4: r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x147000, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0xe1, 0x42881) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0xf000}, 0x0) fcntl$setlease(r6, 0x400, 0x1) r7 = dup2(r5, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000100)) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f00000000c0)={'veth1\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) write$6lowpan_enable(r7, &(0x7f0000000040)='1', 0x1) lseek(r0, 0x7fffffffffffffff, 0x3) 02:46:08 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000003f00000000000000000000000000005000000"], 0x8758) [ 1435.591177][T18321] bridge0: port 1(bridge_slave_0) entered learning state [ 1435.612477][T18303] binder: 18281:18303 ioctl c018620c 20000100 returned -1 02:46:08 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x140, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x6, 0x1) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/43, 0x2b) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xa0800, 0x20) write$vhost_msg(r2, &(0x7f00000004c0)={0x1, {&(0x7f0000000380)=""/149, 0x95, &(0x7f0000000440)=""/127, 0x1, 0x1}}, 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r4 = getpid() ptrace(0x10, r4) ptrace$getsig(0x2, r4, 0xffffffffff600043, &(0x7f0000000300)) fcntl$lock(r3, 0x5, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x9, r4}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x800) setxattr$trusted_overlay_upper(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.upper\x00', &(0x7f0000000680)={0x0, 0xfb, 0x99, 0x4, 0x52, "bb5117d25598139e111a3c4dcc53a218", "3b0ec6b243df1db2861e242a260571791aadb97dee49306c60deb406971ccf713e3220bc8c805b7cecf14c61ad42204097519c40c9453e7fc759249fdd0026f249092182fe76eb0672335ae9c30ce92f8cb73e2a3069d85534c7df90f29478eed50581a96f542c383d95e58c8e6a5abb36184ad5ef12a9ef7b9ecbde1fa2e07dae056cb1"}, 0x99, 0x2) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="08002cbd70007200000002000000480002000000000008000100", @ANYRES32=0x0, @ANYBLOB="0c0003000300000000000000"], 0x30}}, 0x4001) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000100)) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000080)="c0e4f06fedd07205f9def2560e405dd9ac0b083bfe6687cf8e737897aaf986cb7f5bb5d59b7f85d75ad1fcaaf5e83327d4821276da747c227dd6451d23f9da0f993dedce3d5fb3155b069b03318364185854c7d11bfef9e5134107a7a98067ccf063364341c54d273d62d4f76fb5a9ca68a654181271323d2d38501a4ea9aa700c82c2beb45f8c26e2d317aab17792253ea2a36252e67e1160bd268791961c86bd3619222def7267d35eb630fb232cc810e53658fe57502aacd91dd499a735b406a8d16b6bb7845217", 0xc9) [ 1435.647463][T18303] binder: 18281:18303 ioctl 4008744b 20000040 returned -22 [ 1435.712825][T18341] binder: 18319:18341 ioctl c018620c 20000100 returned -1 [ 1435.716040][T18384] bridge0: port 1(bridge_slave_0) entered learning state 02:46:08 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) ioctl$BLKIOOPT(r4, 0x1279, &(0x7f0000000080)) [ 1435.801592][T18341] bridge0: port 1(bridge_slave_0) entered learning state 02:46:08 executing program 3: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0xa0100, 0x0) lseek(r0, 0x0, 0x3) 02:46:08 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x91, 0x840) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futimesat(r2, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={{0x0, 0x2710}, {r3, r4/1000+30000}}) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) getsockopt$packet_int(r6, 0x107, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 1436.043608][T18754] binder: 18677:18754 ioctl c018620c 20000100 returned -1 [ 1436.104380][T18754] binder: 18677:18754 ioctl 1279 20000080 returned -22 02:46:08 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) fadvise64(r0, 0x6, 0x0, 0x3) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x541b) 02:46:08 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4000}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWTABLE={0x7c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x10c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r5 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000140)={r5, r6, 0x8, 0x8f, &(0x7f0000000080)="9b0fe68b9526fe8f454be57c18953e95ae619e8d06fb454f8e59c4f7ec96f348eb894bb9f5acbf6d2cf641f119ecfe8aa813b4d343e3011324f2f658064ec05fa3e7bbbc186a8956793baa1f8d64881761ebcfe61bde044951d577114c8fbb6e187505986db90abee1fe893dd15c7a26b03e8c1bc840588f6b8883d1689773fb643cd407f8b3b96fe8808d43a391a6", 0xd6, 0x5, 0x3f, 0x3, 0x6, 0x3, 0x819f, 'syz0\x00'}) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000200)) 02:46:09 executing program 3: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) [ 1436.351941][T18972] bridge0: port 1(bridge_slave_0) entered learning state 02:46:09 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x2000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x802) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000000)=0x5) 02:46:09 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7, 0x100) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x80000) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) execveat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000540)=[&(0x7f0000000340)='\x00', &(0x7f0000000380)='trans=fd,', &(0x7f00000003c0)='@GPL\x00', &(0x7f0000000440)='cache=loose', &(0x7f0000000480)='access=any', &(0x7f00000004c0)='measure', &(0x7f0000000500)='{\x00'], &(0x7f0000000740)=[&(0x7f0000000580)='vboxnet1$proc\x00', &(0x7f00000005c0)='access=any', &(0x7f0000000600)=')%!(//\x00', &(0x7f0000000640)='version=9p2000', &(0x7f0000000680)='dfltuid', &(0x7f00000006c0)='-md5sumselinuxeth1securityvmnet0\'\x00', &(0x7f0000000700)='9p\x00'], 0x400) setresuid(0x0, r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x13fa890, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any='access=any'}, {@posixacl='posixacl'}, {@uname={'uname', 0x3d, '/dev/audio#\x00'}}, {@version_L='version=9p2000.L'}, {@fscache='fscache'}, {@uname={'uname', 0x3d, 'md5sumvmnet1)eth1nodeveth0-selinuxwlan1([@proc'}}, {@cache_loose='cache=loose'}, {@version_9p2000='version=9p2000'}, {@dfltuid={'dfltuid', 0x3d, r6}}], [{@measure='measure'}]}}) bind$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x1ff, @rand_addr="36b6641498bb5940b901f8ef607512d0", 0xd5f6}, 0x20) r7 = socket$caif_seqpacket(0x25, 0x5, 0x2) ioctl$void(r7, 0x5450) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f0000000780)) move_mount(r0, &(0x7f0000000100)='./file0\x00', r0, 0x0, 0x44) 02:46:09 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000000000000000cf00000000000000000000000000005000000"], 0x8758) 02:46:09 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x1) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x48200, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) 02:46:09 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = semget$private(0x0, 0x0, 0x8) semctl$SEM_INFO(r4, 0x3, 0x13, &(0x7f0000000080)=""/60) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000000000)) 02:46:09 executing program 3: r0 = open$dir(&(0x7f0000002400)='./file0\x00', 0x18080, 0x120) lseek(r0, 0x0, 0x3) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000002680)=@v1={0x0, @adiantum, 0x4, "6478f9d1e6437d11"}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f00000026c0)=0xf49) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$sock_SIOCOUTQ(r7, 0x5411, &(0x7f0000000040)) sendmmsg$sock(r3, &(0x7f0000002500)=[{{&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x0, 0x3, 0x1, 0x3, {0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xfffffff8}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000140)="3f25deac047e2d44bf89014d28c423b0f8403ec15b6e2341f91550300731b8ac490dc8f31ad31765f6c2fe50ad92cb95435914472a8506e0098a65692d2d41a74a66e7b95fa41febb8d4", 0x4a}, {&(0x7f0000001700)="b0e1d7ebf0b238e4f2a89fdeabd59d4f32ffc6ed20a50f3430839c51f57857980641bdced219cf42da700e8421fe2de89f0eb8bdc45c55b41133a3a5a4c31beec4850255b1ae5569167abf409fdd", 0x4e}, {&(0x7f0000000240)="ac9820fd0b9a27", 0x7}, {&(0x7f0000000280)="3df4224b24e40047f764eef5174c6e714449038013456c02fae5cb290cb6475ef18b1d99e62be8", 0x27}, {&(0x7f00000002c0)="9a436d648c3a2ad254838cf7595778de0fee28be3c4ce8b61c69626490f14c901b90bd827a10c094e244d121a7baf5be021b01bb720678bdc52a2a84eba8a5ab74d29a53b0f53d2794c5e4db8ea1658f5228958f8421c39019e20a4290c7d5df046ec1526a0db3f78265988ded4c3f203c6093a70f2b6de9b3643ab286e061a1853407f3705b532e78e83128a522f987de3c16521c90a86194ebd70b91eda5dbad053aedb313dca132632acec247e6d8c7f0aa89fa6639bc27305298f2bc9ccf9bbbd603ad1e304d60447075f919883f1a8dcd7bacca311a10bbad72054c1cbb97ce1d07c5d9c690", 0xe8}, {&(0x7f00000003c0)="6720afe78b8c7d8749ff8065cadb48d43c15871127bf562845c0fbdb2ab5bb3eb0ae018f89d46877012ef5160f27dbcc44e5732ec38dfd69161bc16cef8697a42977c4d097d3dbf6f5c3981b9d4e9e609634a7f94729c5aa522b7704555d719e0938b007ea5f0931cec59440d77327765ee8b16e0f5080edd1c0ece98348343995f6a626a9413c341bcbdb6a90818145fa", 0x91}], 0x6, &(0x7f0000000500)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x7ff}}, @mark={{0x14, 0x1, 0x24, 0x92f}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x6041}}, @mark={{0x14, 0x1, 0x24, 0x101}}, @mark={{0x14, 0x1, 0x24, 0xfffffff8}}, @mark={{0x14, 0x1, 0x24, 0x80000001}}, @mark={{0x14, 0x1, 0x24, 0x7fff}}], 0xd8}}, {{&(0x7f0000000600)=@ethernet={0x6, @local}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000680)="5d943f3d238489fa60f5ee66f20731aff5514de40a3a78fe7f751b8b7606b75fedac39f26dc1caccfea1a416cf3fe8ea73d325ee81015bce58f75883a163f7c3e7e2f5d34b6e7d73675be866a09f45a480c4b304", 0x54}, {&(0x7f0000000700)="3e7ef1c06f94f42094e378dc0571395db477f53d58b68e3aab7ba4716e28be8ceb27646707e21e1d61e3cd992f8dc470357cf1b01c0222ef439d87628198a12dcd6dbd09f066955b001fd0b6608f7dfe783e2a1ea9a306ecab98c98642374139febeae2b8c6f4cd453a2ecb4c24e3c01cc45dd5653ad113d15e1a6fba3727a11e8de632a3557791a5f7c3bf73e2cb561deca2e5b57a6bedb9dddae588dbaffdb8f1a435f07a158408b6de443a326dd5bb39985dcd6eca5036007e474a0dea8b890aed05141946aef63d89a74466ce8768e519c05c3ed0bf28f6a7f9adecd1ac704b9b2b481b702a213b8351b0bc649f10557525e9240c9944a5bda9f92a2e7295477157919b400e4b61979de3b43cdcbadb92abcf189a4afce07e8c5f8c009087bbc3dcf04e907fccc129b5459fab43c143426e4cdd2bd66f19ef954aa574c1b987a3ced8c47b7de2ef34b88f10b6d0aa5ce9cb220008e7127440444e4241c7b678e5aeb8a982a9d91d50f8e57d90b1c2ff381474629bdea34e9d793ae097701ab1f71545aa80a83dc1e1a56038dd28342b7a3f76a0ccba091be65ec664d7c354eb08a1b45dbeff21432d4557e36fb3b10aae51eca9723da86853a747d89f267c603747529e9d702beb305ab7adf2c336bc5a60036960f0b9cb9b138d77fb52321c8e5b2abbc7fa6101f225a954b9ce2a0560c5d8a5caae2980a1c3bbb06e63b67b7c1555031661ef2df9b18c2162be2894a657b6c20e6b0da08665ee876bccb4b22d4b533f841049d7b40db32ba8ad5071c60539e43d1f16fa03889d65a5583940c8daa8630ca814ed493cca018d4bf82f462a38d2b8d5b5ff2a64f3c30ebab88968e0b46142123549f210ab61e82d1f35dccb3a219d3d51836467eb61666f644945b892965471fce018306217379ad7e9dd08e577d984d2063809befa4bb9ff1ffc0945e0067cbbf6174c57be44bf57478ce34be4bc79b8bdeb9178cc070f9fabfd6728e166b767c723afdc2b98abeada359c7233b27ede364aea81df4f01511cfefdb58b0b06f88d7b0ef648ce193ed4f243d5969971c84be77b01495272cfde4b614fee39d35507c4dc06299629ad5ec939842f534c725d6543bf66bcfbc905a9ba710d7104a88757cadcbd1ec4b1ce82898a33eebd06f1c151ea94d818f8fb9d0e10ba0e6e4aaa5bb43501f4b5bdbe66a1fea4fc415dd2873266f87422837986d7b578e0f4375d9d0e19309fb9864b3528095ebc4ef2a3d6419cbc026fd8d302cd09ca915a0e8b38a9f786b527b2a6b78285ce7cb38bdc7562d5e6d8e1127bb8a5cd50f5cc6416cec72a75cae606d8eb1e194ed718f10c4a659e9975fb384cf6459cde9e859709a6c10f197dca0ed7c061d9b4c01a0605406e9063abb35de1ef8b46f2dbe030bfebbb135ef7833ccb4c65ae82351412dedc4163de1c22f44786a6a18495cac4e5813f6e710d037d7e20381ab22bd23ba8bf0ca4a5400289d4962bc821af8f27b2a82ce1b239e3b81375ad23d20e2ac033aad542c80f40e13029bd35422e4fbf09277ab6a453022e69c165b3db5837feec7e17749375bb3129d3cbb50516db7f47840363d9a69cc729c14da9c3e3ee94bdb37b9574fd547bb39698579d6ef626a6a1997d456952e19ed84cb136d9b8541203d60f9ceefe687b815ff5926681a0c5194f745322d11058a5e1788626bbbb8e8bc28a2920737f6fc99f8f5b611c62e31ce5d776c69531050820673a1be008fb6192327578d213449053082e36bcfa2e35b275c80e739d3aead4f31087bdf668c99aa56f08f6a328d49255a50ef11a3a2b33ffa88d737a812ac29b5e0e5e78a076f9fb65709caf6ad55919717983a96f588b383d413adcbf61085f8a907db562ad29fc30b39af0a7013b382ee8f6a84b42912e10d14e15d3840f53dec3e68ba67428c4191712d079cb0153edbead4fb3c884411abd231a0a5357eb18519928d48b337a10c57fa260e4424b1ac88c75fc888028a449af130e4d10cc364a75e7f8089c2e455e525e7eacf8f6cf952452bfd638e804529cbcdf1d8ff4e1e3b45428078037e875b64a97305b6a697a6e09489c94f319e2a6ceb487c2ee3baa53b04934b991d9e69f6843c201fb08941a6b41955918f79d2b88cad7162174e1b2997f811b995eb920ff45d0a835e8dcebd4b52fe40060550fcf8e46fde13ccdf00d549fc9dd75a3c5b060d6c7a129e395682f718603693f7f746fdcbf0de98b7f98e9cde8fed3e0af1ccc3aa80b3b6ac13d911dc088f3c3e0664d1cbfbd7d42fbd5848ca67f3a33d5859c7a2583f99988dc1cd5d299c11c948100a1e5b37fbffa55fec06d29911d46f7a0262b799a97794bd0f17ce5b4047d83281e0824494588b010c1db5837f52aef4cbb8262ea76097f0f62cf3081578cbc1fe450c44ef78400d0d75adc6dbf83b6809ad2951bbd530be83b6b59ee853cd01bd4ea1f4e581f2bbcc43219f06e6e6a554cef605d31c10a61d2a1fefb2cc82e40808348d4c0e82c7f27a4f607f605a70a1accb888068287a2bef56ebc3fc9899537592e5c94887a5087aa1d30e3d47f892dd649424930e32a4a6730941ae4cac8814df1bd19fc80c9b1a3fb8c4b42b404c2d4ed449685adde9c43b0fd578dda07913dc882e96129f73bc33f91fa67194aef7264cc7e5d2600b88c5f0cadbe66b06f0583924802395306d1481a6dcbff6659cb572d035959ae8a08aa6acbf9f658b885a60a084cebe90afdbda95ef514945346370d4fedd3f2b1efec39760b0e734c0f5126d101aff32836d857a428068711483e82ec3747c95518659980d98e09d885eae6a4e637871bb58c1f5e37adc46e1ff4e7cace0ba44cfce663af816ca7761925bac319b912fe00f75d5d7b46cb397742edf923a802a81fa94894a2d4b48a0fae9c4c6aba8f22f6ede4627a50b9f091c2a8ca9dd116f58ac3ffe7a299075c1c11f3a6097a17e3ec31272373289cca8c5685d7753e2622daab98b7c40d9b2ae459def73ff52eea25926a1e46c3baafd716957ece1659eb4c2384a1b9f55038c0af32bc7bb1c5ca860202c26e1f4d78103f6737a031aae91a4a7789e23bdc2567a4e2acac43179778ec9b09e8c63100c3b110cb45ee09a993f17199b542314400b37a09157260a9312a201efba778a8dff8eabfbd1e85c5c1f7f4ec3528a86cd4b7fe7d323618368ea982d07879a4354210726fe0c739040179809ce15fbbcc92693a608aeedd8fa524db9e8ede1829d9039bb442292be23e924eea199b3b1c0db64a7209f47f5d848d68cc4b237f971f2b6bef4842f5fa7ce57311429635a41fd01ac7e65a95491f7b325e41f7d5e6bc6943b4b06b5cc9d2e76dff41b3a9101351177e03f465cb28d2919e5ece1857d37c60618ed2b42458e1c22397dbfb13de33bb2de91eae04087d0769114313368212e863afa60c3d0b1a1ce78d26a08b79cd4953b879e34ee4a685ba4de6feb102ac4b684a7adf6b48763418e3e0676ec946aa71f53d29ccd925ebe8a2f021a3b8dd31d73f262afd083dd7ee75ac168e2c7240fce90025671ddc65b0ebab8273c401bb57c6e0b010e0e9757cd6d13229eb5c28cf4bd9c226b1bac885a175a302039fa928448da0bd7bdeaae69d022a277b0fe4ad64355152ca863676e090ac735a80a281c9d35987b31e0e324a550c057205c04226df6ebb769c43aacf06f45598f79ae8d39aa7922f731ab3cae97dff0c773c6d7dd3695db13034e9461ced2063014a3b1606ac856461673473135828067fb8db2c1e05bb123d544c8451cc8cd676fe58fef00428d80854b9f2189f2f4875b8f1edb789e87e223d900029f12cd1ffa4ce91deaccdea7d6e49c7d911e31ae1a37b6d795504fda2947aec9e903e855ec568985f2875f06dc7a5de0338f242eb99ad98f4e0a0ff0af035fdb32426cd93a9f12e83f94fa1856647ecb7c0ea28b6be679aee78390d7bf35e4307e1f5eb0c176ebd5573562823548dd7e2c9b3b58da8ce9aa526d1d79beda68e15aafa2065bf91bbfa0b135abf627baf990d813b58fde4b7d209d82135ee86bbfe8a5e25f465a1095fd370250729250a7ad396bed35815c7a11a4cc6fb11a991d3134702a83b7e86a9b5a7eff01a4e747128eae6ad73442f85542102dd3db267f2aa7743626f011e12088290855e96e2b9f5ec6ce14ed4a3943913a40a56a6b1d80f5b988c3a695d3a716cdfdc218f43b93a147df97da8b307a9d5a08c1bbd17d030e55f7b43225e11adade6cfd63c56e7b26e62308cae77365330e307d6e8e8f139bb053b5f39539531ebcb1be28d6cae4e9df406e7626b11d2dde6373fb43eeb68d396741f08d27a49c0bf3184e74eaa76ab3c858e1cabd7225c8c141bf78e09868280e754d7f4c5923f0fbf7a634294a3c77c616298a1d15118ffc0705e17221cd182f6a0c4d577f2eab196b2b567ee2875aa4eb3a17adb86853afd8cdaaaad7cd72667fbaca3786e862b61d1beabbc0a9e46e745afb3d7fc702e26670aef20f4837b892f3d27791d173f110f880763f82c7d13a485e08cdd7f2ed4301dade71f9ed407da127f4b266896bece11802fd71bd2c4e9b83cc698329d04c5679c30d99d15c82483bf5f8d1e3707b09ed07008376508466f3063cccfeb4b1c5a9e237488e560898bae8b6f2b3947b1c90188108230be2d3cf0dd8da01df8abf2a75ddb109d98c5893117efcd4b4480f79d40ce73b539ff8c72377f476343bc7175dee8fc0a01fe166bd45d22ca53b9ea0ab6fbc97e1a94fddcd566913a0fe5782666cb615b1652912c9b11029e56086d05e81c3588415e3ba34db10066b4f4f5cd59d40371b1bd6106fe31aeb88f8b54bd74613264df369641da5a462219086fc456b63b03f6790199befb573f90920693fca22fdc797dd71f21414e4d2da7bb7691b22e10d2b4bdd5b3fd028648093a88717dce623c2da1b38997fd53a8685ff4a376d9b40e436051f26e8822b75349e8b52bb03a891c541913709feb74ba18917af75b99c419648138f66d4539d1ff14840fd17a24353d1fe79f03359ffe63a100e3a90e6b278a77623a5d8c3f77ffabe162591a0b417880eaed8049670198d7ce361dff085c5dae2fe5661749800359283d4b3c96a0755ccf05402a913ca2eb4471f104cd53e8930eb121ad2c9d42266504bf684278cda2ff690749de1a47586ebba2b9a74a20b5fd0e6031fb9c33a033f51098ffde6948295abdc2d487095e43f6f229c9b72b5bd40959f5ac7c5af4781e229c669f1ae2fac7fb17bfeeb938b0ce35168d3e435f121c02e50fe31f99af075c7cc4843f895c4927f00322b3e80558a4366dd8c11a221fb35f3557140c0f31bdb109adf7485e729cae99b2426add48a74969c633dd262abfb0fafcc18c9997646f4e49f9e15eb8154185478fd62422d3d94436b488464025c1f3a18e93781cb67df82364510fa4d76241a70430858e88213e9ef0d81df92497f9f5d218eff59b2635678cb17aefc0a123941e26cdb112abb6125ef0cbfa3e87ec6a3e3afbc6a2bf31fa44c610bedf2a491f34a0018592583dcbb9d592bcb45bcac5a79816e270dca923bc58254471b3ee6d120289300f1297164a3d954c15018cce81c05a0d651cceb78400c2653369db2492c1cfd97938fef7bba6040d6651202cf49144e6467664c8e191001282b7d9f5b0697db2891e2a358b3dcb0b01b78b67e0384937bd737d041a9b646841cc57952b6ac23a35b42a0b47b643b5b23d40a0563f1cfd1510b730e5652e7467ed68a673533", 0x1000}, {&(0x7f0000002700)="7240c1fbdee513e6d5acfdff143f2850ff6e5fa3e1033a3de2a43a6220a41d0c4c1687566cf87d78eb58b9fc95c35c9013d82b80458add4995212875d004b9f5f4fa9f8c5a7d8350a8322b8a236af2b46e0e332368fcf2fce76500b3f2ea4c50de6bc61b6f07e3b1ea248cb26125a9fad99b65c94c313061b5d63ad65de34d17938f6c1e", 0x84}, {&(0x7f00000017c0)="bbb43f1b63a4fd46c95c30c730932e576b63e2fa9d6324b123260a74a92c1f4126ff72d5b07c67f41cbb1ccaaab1f0b47346b7775535ce7afedb0957eeeaf70547e541da5f46e8e5b88fc838db48878cdd63e84c6243f4b51872aa85ffe94ce5dfe48a2999388e4d6ac5344ee327e3ecd622bf9d906fd5213a25f0a9ff781215977d07840126a9b248ccb63957bf7165141800ea7d559e838f2d8b8001c5dd392d9353e5fb563c7f2ea62b8a0d3d95c26614107f66", 0xb5}, {&(0x7f0000001880)="f22d7616fee3f186ecf86139f10f474aaeda9399b478dbd19ca5202f8ecc50a787f7d957b7886b581137004e3735bd522bd314b1d715bd7d", 0x38}], 0x5, &(0x7f0000001940)=[@mark={{0x14, 0x1, 0x24, 0x2}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001980)="de7ab00013f7c9d6b695b16e0b5b83ccc1e4c8f5f522883fb627022a811fd3f03716d53107c6a959cd50a443ca57d6b41911e6b8f3bdd5c8d58d77f976ba23d67c367020a030f8c45cdc449017cfda423213432db66202f247d90e2af36c12300ad8a4a94b0551031a458203ebea92263d8383912eb74597cf21dd5940efae24fd48ffd9f108b2dfd43d8786b40aba01a03e9236d80e1bdd4f3a94eb256a1508708cddcb97036f11", 0xa8}], 0x1, &(0x7f0000001a80)=[@txtime={{0x18, 0x1, 0x3d, 0x1e}}, @timestamping={{0x14, 0x1, 0x25, 0x32b}}, @timestamping={{0x14, 0x1, 0x25, 0x1e}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x60}}, {{&(0x7f0000001b00)=@in6={0xa, 0x4e22, 0x3, @remote}, 0x80, &(0x7f0000002080)=[{&(0x7f0000001b80)="779a8bc1a648a22044cef5a1a7f6577d38bbc2a93bb672626edc53ca9e415a6b1dcf923669608457fd5866dabb950f4aee7186270fd12988c8cd8fac8aab0e98b50150118cfa218045f2326a96115da588d0e233fe3b31bbb894a61e2e100ae5c7de98cafb0a44a61ffa71d066135e3f065407ddeb475b768ddb11746fd4fd3693b3f7edc783491a06ff3910353ef2", 0x8f}, {&(0x7f0000001c40)="87753b87a3e86876b43d6b8c789516b1676383f666de33ad8becddf92ceba090dda22bff5fadf4b106e724d311375603c207c95d2400b39cdeffe50000000000", 0x40}, {&(0x7f0000001c80)="c617f94664c7e9e964e56e1e832d29de89d07f421f6b645df71d3eced23570db560eabe34557dd97340f3b457afac1ec64fc61bd168fd2977427f44ee800a0daa7332076e35185ce3376584315f4f03c8f9b6db8aa5b8170cacc68a8b392f94a7adfeb281d90590831ac0d2ddff77320700b1b970f183e861d45c21091d3ecb6ac2ab04c969ab9627068152df429f46bff8969f076e6d2f143c1e1fb845ca0965672d9b169a22fb330bb45e8e5cfb7defe3e244d4471c3e37b2f81035497bfe3bda5d159bd273c3bb75ec61436575da7434d4d4235c6598036e44f4a2fc34e1c77b33ca6093a03e553b348c21dd549", 0xef}, {&(0x7f0000001d80)="480b9a5c9e63305fb7e426c54a14da3513299bddd032bdc93631bd743af73bcb69fc60a949edd44f78955b06b0ba0c401616124148be9de6cc63cc1b3449cd5fc08bb882df634b3ec93ce5b98cf8c472173e0c5024bebdde3cfcbe75dd6b71aba331475a0ce43e67ada08d0ff39722992d8bb2421e50cb71bbb0426c296a65ed5022cb8fd4bf43fe14f2574f53ea800778f821dad52c23acbc5d9c537a3559cc6e7e423741afb9eea1d1f09d65aadd61f845444084144caedeb08dbac6001bae6f3117435dc4c37baab66f0dde88088706f1ddf1fb6ff113e583536523ba053deac38b27be4d99", 0xe7}, {&(0x7f0000001e80)="f76a5698d8fe05e2e854f4698a1cab2de2fabf58601dd23718d9a1164493ba9cc9fac190eca675241d0ecc736167f36adb148dcd5df43c1363ac130f24e1c977b933b0c19b2434dfb19e15d666696529fcbf89a621ea74c3a2fe1e42e289876c3c3ea9eb99159d41e58b9b7040ed337b42ccdd6009fcc71b01141a81e2be91d9910c64a4826af107f9314371caad8630ceb6ee7d67a1", 0x96}, {&(0x7f0000001f40)="179f156e0a3f8ee5b248807811d19579a82609cf7e448fec183cb7e6e2c58e87f472495317fba55d3c2d2168794252d0c70674251231b6c5e0daf5464a1aa2a1c6b14ee1b4579143860540e007d78cc1704b8f70d0a98aade22d4f94231e16091b7819b4b4237756401cd0e4b58a805d45892fb6af8adac0ebd5552242ef7bc8bb45372b6c172f8a829015ca3ace3cbd478dd1d2897b9f6c80d9c0cf10f3b996e0f147a3e36a47029bf84a722f4ef93a9fe8ca6deaf500ce16daf30fe8666aa50a1f4bbab5b494ec4bdb005a5d917dfea5e472f52a4ca44286cfd9d3e221379e84eecccff7d159408ce1b8961c2663f9d246d74b19ef4e", 0xf7}, {&(0x7f0000002040)="a070ec", 0x3}], 0x7, &(0x7f0000002100)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x80000000}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xb465}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0xecc}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f00000021c0)="9fcc0bab8aacddac44dcd2b3bfc6b977fc8e73d6cce5bf167dc09c6499fe6df06a2e3029a31b96308f8e85c200d901cdae570c1c40f0df479bc67011c0cad075759d5233ccb89ff4431d57807a772596b2b71a8733bc4dcf92e5091da4e95083acc43a6be67f370c504d7c3febac4a09e147d602d0ab924fe25a8866bead2655fd885df3da21f9ed82275381ec6b25afb3f215ca4fbe9a74a96765e3968faca33c1e2d94aa569fbb", 0xa8}], 0x1, &(0x7f00000022c0)=[@txtime={{0x18, 0x1, 0x3d, 0x1ff}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x10}}, @mark={{0x14, 0x1, 0x24, 0x80000001}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0xc0}}, {{&(0x7f0000002380)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x80, &(0x7f0000002400), 0x0, &(0x7f0000002440)=[@timestamping={{0x14, 0x1, 0x25, 0x91}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x2338}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x20}}], 0x90}}], 0x6, 0x0) ioctl(r2, 0x5, &(0x7f0000000080)="1bad85b810dbb51ba1ab6bd613d61fa035bb203d639e339224bd25768a1246ce06306f6234cd2ba4bf7737a0c2f39e03351c") [ 1436.711026][T19219] bridge0: port 1(bridge_slave_0) entered learning state [ 1436.722204][T19216] binder: 19149:19216 ioctl c018620c 20000100 returned -1 [ 1436.793739][T19216] binder: 19149:19216 ioctl 5416 20000000 returned -22 [ 1436.860456][T19238] bridge0: port 1(bridge_slave_0) entered learning state [ 1436.952883][T19298] binder: 19230:19298 ioctl c018620c 20000100 returned -1 [ 1436.998914][T19298] binder: 19230:19298 ioctl 8921 20000000 returned -22 02:46:09 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r2 = dup2(r0, 0xffffffffffffffff) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe4, 0x14, 0x403, 0x70bd2d, 0x25dfdbfb, {0x22, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x7, 0x1, "5ad30d"}, @INET_DIAG_REQ_BYTECODE={0xc2, 0x1, "46904531849776e9e25478f101a101983ecf04bced4e365595933212468547d5180264930a7a765384e14eaeed667b5dfe0860105b7c3b376e8f0f76c6b6f098cd1509e4b5a4823ba35afc44f83d7f151aabf6f45d86a25c99f0819d8274a978cf9031f9628a668890fcebe3631c0f94dd243858103031f314fc6dae4ea73d08c8c753ae4644d71e39451233397b5b2e8dc4c96f77fc734e94a25d22f7a95c1a66fa7d33c19b3cd953adcb5d76745a4ae241b0628e2cb7d8ae94ec4cc840"}]}, 0xe4}, 0x1, 0x0, 0x0, 0x15}, 0x4000) fsetxattr$security_evm(r1, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000080)=@sha1={0x1, "ed7963f962f53b31ac6cca3081291e763d4af5cf"}, 0x15, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000340), &(0x7f0000000380)=0xc) 02:46:09 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) fsetxattr$security_ima(r0, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000080)=@md5={0x1, "703da34d124866134c3ea7540a20ee91"}, 0x11, 0x3) 02:46:09 executing program 4: open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) lseek(r0, 0x7fffffffffffffff, 0x0) 02:46:09 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) write$FUSE_OPEN(r5, &(0x7f0000000080)={0x20, 0x0, 0x1, {0x0, 0x10}}, 0x20) r6 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'macsec0\x00', 0x1}, 0x18) [ 1437.247077][T19735] bridge0: port 1(bridge_slave_0) entered learning state 02:46:10 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000003f10000000000000000000000000005000000"], 0x8758) [ 1437.423208][T19802] bridge0: port 1(bridge_slave_0) entered learning state [ 1437.461606][T19803] binder: BINDER_SET_CONTEXT_MGR already set [ 1437.502234][T19803] binder: 19751:19803 ioctl 40046207 0 returned -16 02:46:10 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xffffffff) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000080)) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000100)={0x4bc, 0x0, 0x5, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [{{0x254, 0x1, {{0x1, 0x5}, 0x7, 0xe7, 0x4, 0xfe00, 0x1b, 'syz0\x00', "db7d2c3a2078702168e62fe9a3e799ebfdf3724efed51eeb735385e5c1bacf39", "6ae6374203dea99a27a6c87bebc37a122d53b33b40a33dabdb3f5484ff6d08a2", [{0x1ff, 0x2, {0x1, 0x39}}, {0x8001, 0x7, {0x3, 0xf4}}, {0x401, 0xf61, {0x70686d8efbc67f4e, 0x8}}, {0x100, 0x6, {0x3, 0xffffffff}}, {0x80, 0x5, {0x0, 0x71}}, {0x5, 0x8, {0x1, 0x8}}, {0x8000, 0x9, {0x3, 0x7e85ae6a}}, {0x200, 0x4, {0x2, 0x1f}}, {0x0, 0x2, {0x0, 0x9}}, {0x37b3, 0xfff, {0x1, 0x4}}, {0x9, 0x401, {0x0, 0x401}}, {0xda, 0x40, {0x1, 0x2}}, {0x1ff, 0x0, {0x2, 0x9}}, {0x0, 0x0, {0x1, 0x3}}, {0x6, 0x7, {0x0, 0x7}}, {0xf800, 0x7, {0x3, 0x6}}, {0x16, 0x4, {0x0, 0x1800}}, {0x5, 0x80, {0x5, 0x1}}, {0x18, 0x9, {0x3, 0x5}}, {0x81, 0x5, {0x0, 0x1}}, {0x1, 0x7, {0x3, 0x1}}, {0x1, 0x5fb8, {0x3, 0xffffffff}}, {0xd9, 0x7, {0x2, 0x3}}, {0x3, 0xe0f5, {0x1, 0xaeb4}}, {0x8, 0x1000, {0x0, 0x6}}, {0x0, 0x5, {0x3, 0x58d09608}}, {0x3, 0x3, {0x3, 0x8000}}, {0x7, 0xfff, {0x2, 0x2}}, {0x9, 0x5, {0x2, 0x1}}, {0x28, 0x2, {0x1, 0x317}}, {0x1, 0x9, {0x2, 0x5f2}}, {0x6, 0x80, {0x0, 0x8}}, {0x6, 0x800, {0x1, 0x3}}, {0x0, 0x80, {0x2, 0x1}}, {0xfffa, 0x5, {0x2, 0x5000}}, {0xf3, 0x2, {0x0, 0xc1}}, {0x5, 0x401, {0x1, 0x1}}, {0xfff, 0x9, {0xc5f898ef08b61ee9, 0x3}}, {0x400, 0x9, {0x2}}, {0xf9e7, 0x1, {0x1, 0x9}}]}}}, {{0x254, 0x1, {{0x1, 0x5}, 0x7f, 0xc0, 0x0, 0x101, 0x4, 'syz1\x00', "e538a8bf14b4818f2492d8dc8721459a8adde6bd56b6e6ef0fee450050204921", "782e701037d367563a9d339d987ef24dc2d510a6038ac6c86ec4137cbfb969ad", [{0xa9, 0x4, {0x2, 0xfffff800}}, {0x391, 0xffa7, {0x1, 0x100}}, {0x8000, 0x67}, {0xc993, 0x20, {0x1, 0x2}}, {0x401, 0x1f, {0x0, 0x5}}, {0x2, 0x3, {0x2, 0x2f59}}, {0x1f, 0x200, {0x3, 0x10000}}, {0x81, 0x3, {0x0, 0x4}}, {0x1, 0x0, {0x2, 0x9}}, {0x8000, 0x2, {0x2, 0x9}}, {0x7ff, 0x20, {0x1, 0x1}}, {0x6, 0xdf, {0x3, 0x20}}, {0x28, 0x65c, {0x2, 0xa90}}, {0x2, 0x9, {0x1, 0xfffffffc}}, {0x800, 0x401, {0x0, 0x4}}, {0x3ff, 0x6, {0x4a0355fc49031e8a, 0x5}}, {0x7fff, 0x81, {0x2, 0x9}}, {0xfffa, 0x1, {0x2, 0x6}}, {0x6, 0x1, {0x1}}, {0x1000, 0x9, {0x2, 0x6}}, {0x4, 0x6, {0x3, 0x7fffffff}}, {0x5, 0x800, {0x1}}, {0x3, 0x6, {0x0, 0x656}}, {0x0, 0x1, {0x1, 0x1}}, {0x4b1, 0x7, {0x3, 0x7fffffff}}, {0x200, 0x3, {0x1, 0xbb8f}}, {0x2896, 0x40, {0x1, 0x1}}, {0x7fff, 0xfe8}, {0x0, 0x8, {0x3, 0x9}}, {0xff, 0xff80, {0x0, 0x2}}, {0x0, 0x7, {0x1, 0xffffdacd}}, {0x20, 0x1, {0x3, 0x2}}, {0x3, 0x101, {0x2, 0x5}}, {0x3, 0x72c0, {0x0, 0x9}}, {0x4, 0x2, {0x0, 0xffffffa4}}, {0x5, 0x101, {0x1, 0x9}}, {0x4, 0x7ff, {0x0, 0x10001}}, {0x100, 0x4000, {0x2, 0x4}}, {0x5, 0x8, {0x1, 0x2}}, {0x2, 0xc000, {0x3, 0x5}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000640)=0xffffffffffffffff) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ptrace(0x10, 0x0) ptrace$getsig(0x2, 0x0, 0xffffffffff600043, &(0x7f0000000300)) r3 = getpid() ptrace(0x10, r3) ptrace$getsig(0x2, r3, 0xffffffffff600043, &(0x7f0000000300)) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, r1, &(0x7f0000000680)={r6, r2, 0x7}) 02:46:10 executing program 4: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x3) [ 1437.823599][T20154] bridge0: port 1(bridge_slave_0) entered learning state [ 1437.908602][T20154] binder: 20122:20154 ioctl c018620c 20000100 returned -1 02:46:10 executing program 5: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80000, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000640)=0x2607) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x802) r5 = dup2(r4, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) ioctl$NBD_SET_SIZE_BLOCKS(r5, 0xab07, 0x7) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r8, 0xc018620c, &(0x7f0000000100)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000005c0)={0x0, @l2tp={0x2, 0x0, @local, 0x2}, @tipc=@name={0x1e, 0x2, 0x2, {{0x41}, 0x2}}, @in={0x2, 0x4e22, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0xa14, &(0x7f0000000580)='ip6gre0\x00', 0x0, 0x10000, 0x1f}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r8, 0xc4c85512, &(0x7f0000000080)={{0x1, 0x5, 0x1, 0x3, '\x00', 0xffff}, 0x1, [0x6, 0x47, 0xb039, 0x8, 0x5, 0x6, 0x4, 0x9126, 0x4, 0x7ff, 0x1, 0x80000000, 0x16, 0x10001, 0xa0, 0x7fffffff, 0xb4, 0x6, 0x7fffffff, 0x1, 0x7, 0xfffffffffffffff9, 0x8, 0x100000002, 0x1fffffffe0, 0x5, 0xc755, 0x2, 0x7, 0x10000, 0x4, 0x3f, 0x3f00000000000000, 0x2, 0x0, 0x5, 0x5, 0x3, 0x3b4, 0x8, 0x8, 0x1f, 0x6, 0xc9, 0x0, 0x2, 0x2, 0x7ff, 0xff, 0xfff, 0x8000, 0x4, 0xf4, 0x6, 0x7, 0x3ff, 0x3, 0x5, 0x7, 0x4, 0x1, 0x1, 0x100, 0x101, 0x72e8, 0x74c5, 0xafa, 0x8, 0x80000000, 0xfffffffffffffbcc, 0x20, 0x2, 0x6, 0x7, 0x3, 0x6, 0xfffffffffffff7e9, 0xb44c, 0x80, 0x100000001, 0x9, 0x0, 0xe0a0, 0x401, 0xffffffffffffdf80, 0x8, 0x1, 0x93, 0xc3, 0x5c0, 0xfffffffffffff95b, 0x5, 0x7, 0x2, 0x7, 0x3, 0x8, 0x7, 0x8, 0x3, 0xfffffffffffffffa, 0x1, 0x5, 0x80000000, 0x91f, 0x2, 0x80000000, 0x5, 0xe2, 0x6, 0x8, 0x10001, 0x5, 0x0, 0x8, 0x7f7, 0x8, 0x2, 0x4, 0x0, 0x3, 0x1, 0x7, 0x9, 0x7fff, 0x92, 0x6, 0x1]}) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) 02:46:10 executing program 4: r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r2, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x28, &(0x7f0000000140)}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000003400)=[{{&(0x7f0000000200)=@hci={0x1f, 0x3, 0x1}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)="f4bfd63ed9b3f2d83c1f590d3be39a5dbbfa9522680172d031fd6467698abd979275a469afea4d", 0x27}, {&(0x7f00000002c0)="5928bc8ab1b8ab8b9aa7ece7c658bae5f399e15d02d559ac4102a6be89ad501f7e1f54c6b290b5c52a24c43f35978fd16e71b66e96368d922baf6ebe6403d63f4dbe1cdc02ad612688daf08db22abb1279e82af84d4da8bba8a9e361730c515435a83aeb2bf0ed5c039b7bc2726dd9f67b7e19f9e8c4dab2ef1ca815c0ebc1f733527c67e6ecd119847e8bc62531e3ade85707c5f6258b716f373fbfc7c19c679061269cd49f48e5ed266a7cb481cfcd71aea7dbbf6f712f48d0", 0xba}], 0x2, &(0x7f0000003500)=ANY=[@ANYBLOB="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"], 0x1190}}, {{&(0x7f0000001580)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @remote}, 0x1, 0x1, 0x4, 0x4}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001600)="4d6b11b5fb4d6ac26a79234c5693e5", 0xf}, {&(0x7f0000001640)="b0ae9b7ade5d1e4999048fd118390a6ccb8ebed44797ec588490da435dd76e5a88165509ce9c6fd0db73bfb760a59e70f9d12c043b3a58ac32e31699423041202482166a76de8f61eb303c2750d6942c06756fdd713eca3d8695450d6276a1a44213c23031b83376e4ae601b2c7cfb0c36c5c9fea0c1f9055d31e27f33935102c6421c0cf910fa87c6", 0x89}, {&(0x7f0000001700)="46ea7ac4a6cfa0f731b1d8f223e3b903972308d10a0bc260f6426a845e0217f053a9501118e9d62e3e1ac04e5bb3e9a52e918dae92365bc42bf61c2c93feb5d1de6dbc8d930fa5ab7d94ec9f850d192bcb62a845794a57ba593da0763612d1f58b70cae91835ae243d199fbb402ae5697605c86e68eff887256219c46ce72325a87f1a94da7441c1ab9d3bb3bc24e3504c8caae025dbab0a895c603db93179f5dcb44e0b951ccb3c4bab044786e7f24cecb136da186779c99f0801522e31244a480254fe85ba9d63ebe27516257e5a8360cdfcb2d44a184dc72960ba861bad78267c08e401c19b209714", 0xea}], 0x3}}, {{&(0x7f0000001840)=@ll={0x11, 0xf5, 0x0, 0x1, 0x39, 0x6, @random="119b52b68aa4"}, 0x80, &(0x7f0000001ac0)=[{&(0x7f00000018c0)="31def52b20cfc452bb1996e5b30c0985637149e20434f987897e30ab833e7a3d39d1ff8d93eab1f4baaf613d0773489d6f10f5c857aa9873f09bf168e2174a43332ec893bc6a86bcc65a45a6e21d7562805628bd77200cd8693053f8ab7394dcb28a6f9a47972a1ab35bbaf7ffcd6c6cbc63c2c086841eb9d194284f9f0601aef6c00b6b776a64", 0x87}, {&(0x7f0000001980)="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", 0xfa}, {&(0x7f0000001a80)="b1f02c585346bb3394acac92ead833f8f84d88a656d370d39de7316db33f960f0f997091173606cb569fb8c0f9f745ee2608", 0x32}], 0x3, &(0x7f0000001b00)=[{0x38, 0x0, 0x5, "a88437889bda46a5cfee0bc2aa6c894ab96779eee2e019fcbde732ff069cff664b5ea3ec9c"}, {0xb8, 0x11, 0x7fff, "6bacc6931616c14e6c0e849a2cdb3163abe08112acdb5b8c5f8b9bc0ab21a1504131d505f98788f94e3612f06613fe66d015e078be318437cfabc821a5286189dafd366b4777afd642e6b5f0d74e89c514f050a48e862695d76fac6fa1c4ae5f3602e541fcb14565d0efb4eb39df4289ea46224d04836140730a8f1c5ef4da077a9514d81488b55331c4df560eadf48c63f165c7916c5a5e8bd7166e609aea8722"}, {0x60, 0x118, 0x53, "545ef0be52922e887448d353f40feee4d44b6f793fed683c8bcbe37de10e5307902160a181c2e3030865fcbcd15800119c98df79195fd73ae14753c6af162d21d7ee889c62522c671431d6d4291adc"}], 0x150}}, {{&(0x7f0000001c80)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x10}, 0x80, &(0x7f0000003140)=[{&(0x7f0000001d00)="4aa9a7835a422da88eb0f9f665f779f3bf95649eb75d7f2be44fa5f0cfaea5fe626651c603b39615048684acd14cc6a76333415e72b36882300ad3703bfff18431c8a1284e5cd6689026dfeb60e103cd5dfd23ffc8b8800c4dd1cbbbf4802697d7108a55dfdafc1d3ef4faededdc0d51153e2b7181ccf15b1c893b7504cd16a2c544773ccb3c153eccb10b609ea4dd46e79f66c792e5002ddd683fca0946493d2ff5cc0e180aa1bd27db84bd86838b7c25a409864383e1198c4fcfcf64c56153a6d037a35283bec3465cd1969f3964642b0abbf5c3232d1d61da495225cf", 0xde}, {&(0x7f0000001e00)="71b31df614db007342010655cfe6d52508a900d7e7cfbd0596ce1b8c76a450d5c6771c0ac7327291c67e43172ef379ca4de3a0135ab0c3e819c7731b0e7cb07b5a70aa44874c8bee8ebc2f3b88161fec45476bc3c19bc9140a2284131daa699300dbfea463ef7f468645920edc6a9e4ac4deb7e99cc9e5ec2a52ba1dc38de44f70a9fe5a55170ba80d7ced5d44c1576ddc0a12ddd929332f2e5b0dec54ac22328efc5df5b99b", 0xa6}, {&(0x7f0000001ec0)="2f63d68da814d9318beeeba17ffcf4bc8959ea63b9cd978c2eeded27bd6fda4c090479697d4b2271f27e537ddb9072131464ff106ed29f72a88ce783f7", 0x3d}, {&(0x7f0000001f00)="adc4aa6b40f7687ee5c059a5b582a29d6b7f8b2c9c56c9f39c284f21ae0533cf3ae33dadf296b03cac1eaef47b9d75b3915564458d396853911d48aa3ac3cdf47ba266fbefe43d3e0202e8ed441480e4ce0f6577cf743cae51ec060f16811ce82b640bfa889510539451f2984dfca21caf931ec425787119ac5b9d9996c4e4f0008819c982e0ca7903d7da763bf6039258845f80bbb447f14738f916455795e520b8b296b74c7ab30f", 0xa9}, {&(0x7f0000001fc0)="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", 0x1000}, {&(0x7f0000002fc0)="18ed6930e5e68ba7a7ae68f5b0bfc6953f157fe7bf3d01a02f6f9f62505f631cde278444217c28f766d75324982b1edbfd3c49941f84cd2dd07979", 0x3b}, {&(0x7f0000003000)="77776b078e177126526bfc011d86f614bcbe2c17011985fefb1442d730a692a05a216ee3496bd92563", 0x29}, {&(0x7f0000003040)="537c782f6b1fa95c695aa59d84d02d0cbd3b522a2a1bacec64e334a329bb0855c7a6076bdf62b9c818baa960af7349f6f08e3e517132ef58771da057117ca17c8475de3cbcd08ffe42ca22706be10251b5e42819a02a041e1cd79a5aec44155a5bb215bd2aca21ee644aaf0753c03057d7aa335d451f1432bb2e03d2b754e5b9ca302522af02792e9dcd8712226a5f5b678e31fb3a4575957b9581c52c11560775801586a754d34894497a218a9e1cbc0d64dec14d417f1db26c8e5655edfc1e3a1b1567cd0da09a", 0xc8}], 0x8, &(0x7f00000031c0)=[{0xa0, 0x10f, 0x2, "f28c5fd6aeddacdc8c6395d7c5c49b5e6827d1cafa630fa5d54d47cac8b96906d83d857f8554754c1fc1fd98ad2d918f2504fd3037fa93cf5562e2d4c222123455d4b313e2c1e0fd607f182e82bab1086a13c74d5fd434482f96e382f7cb688a0c4926c141441364925bf1365595e951bac385a97dea3b96fb72fbbdbc54f3cac00783e3fbcdf25299b5c741"}, {0x80, 0x10d, 0x2, "5c3b81eef7021b12696bcdc4950144f106dd812e6c70cfd23a40cff110e250e6b6899891bb17846886a5f0895d8e1282b959cce4ffa04b6b7af34d201aeb1d766080b17be81199fabe8792a0fcb4e2bbefb9fb1658008518989ff66d744e1919d04046b5fd3a0e7fa9"}, {0xf0, 0x0, 0x4, "716da5059501035221a6bff6f40ccba6df22b1d677559102afe1efb64d83b53c7a877ffe45eebc6d3ec356167b8e6060e90d91ad6d4d894152b3228b352db5066ded41ee31911e4732678e0dcdd9f92cc3ab32297372a2debf85269f4531b36a780c8727b6234b40463f4028a66a8c97c9f6f00abf9e0df082a24e296fc4c67835ebc013741c71de899951c380a6730393a95f4b3e2298ffc59e3b14b7bf24e1885ad664d4db8226772545748ee7f66cc07fdda2be2bb25e6f48225ff2633aff77cd77e81367c97012f9c87014d36e3ef5fd9fca508996cbe87a072f"}], 0x210}}], 0x4, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000080)=""/34, &(0x7f00000000c0)=0x22) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000100)) ioctl$KVM_SIGNAL_MSI(r7, 0x4020aea5, &(0x7f0000000000)={0x4000, 0x3000, 0x0, 0x7, 0x9}) lseek(r0, 0x7fffffffffffffff, 0x3) [ 1438.161087][T20231] binder: 20158:20231 ioctl c018620c 20000100 returned -1 [ 1438.171013][T20231] binder: 20158:20231 ioctl ab07 7 returned -22 02:46:10 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000003f20000000000000000000000000005000000"], 0x8758) [ 1438.231408][T20231] binder: 20158:20231 ioctl c018620c 20000100 returned -1 02:46:11 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7, 0x20000) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000080)={0x0, 0x7530}, 0x10) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x4) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000180)={0x8, 0x7f}) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r3) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000100)) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5201) 02:46:11 executing program 4: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x13c842, 0x8) socket$caif_seqpacket(0x25, 0x5, 0x5) lseek(r0, 0x7fffffffffffffff, 0x3) [ 1438.322462][T20231] binder: 20158:20231 ioctl c4c85512 20000080 returned -22 [ 1438.457017][T20388] binder: BINDER_SET_CONTEXT_MGR already set [ 1438.473823][ T27] audit: type=1800 audit(1585536371.189:45): pid=20402 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17483 res=0 [ 1438.496199][T20388] binder: 20366:20388 ioctl 40046207 0 returned -16 02:46:11 executing program 5: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x22101, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0xe) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00') ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) read$rfkill(r4, &(0x7f0000000040), 0x8) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x541b) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r5) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r7, 0xc08c5335, &(0x7f00000001c0)={0x80000001, 0x584, 0x1, 'queue0\x00', 0xd6}) 02:46:11 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x4) [ 1438.823744][T20675] binder: 20674:20675 ioctl c018620c 20000100 returned -1 02:46:11 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000003f30000000000000000000000000005000000"], 0x8758) 02:46:11 executing program 4: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x4e8000, 0x86) lseek(r0, 0x7fffffffffffffff, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) 02:46:11 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000000080)="0973243dd1316971e93e004c0ae886bb736ba03a0da5791ebed620c0f4", 0x1d, 0x4000040, &(0x7f00006f7000)={0x2, 0x4e24, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x9, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b38b) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000000)={r4, 0x5}, 0x8) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) [ 1439.076752][T20785] binder: 20766:20785 ioctl c018620c 20000100 returned -1 [ 1439.105498][T20785] binder: 20766:20785 ioctl b701 0 returned -22 02:46:12 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0xa00c0, 0x0) setsockopt$inet_buf(r1, 0x0, 0x24, &(0x7f0000000080)="6fbada54538593c1e810258cda7294635cc7681ef9fb1c9743dedf7eabf667e581a5e716108051653afaf7ba00620d649bb1453c4db627fc534e07263ee1e246d12acdcbae6ba6c3d7eace73727c5ed523571e06273843af22383567fee3097f3a81402aeea2ed1655382449cf211096540fd0bb23a4e6f47ce8b3722b1e", 0x7e) write$uinput_user_dev(r1, &(0x7f0000000340)={'syz0\x00', {0x3, 0x7, 0x3, 0x8}, 0x50, [0x4, 0x2, 0x7fffffff, 0x8, 0x3, 0x4, 0x1, 0x1000, 0x94000000, 0x2, 0x100, 0x2, 0x7, 0xaa, 0x3f, 0x335, 0xbf7, 0xfffffffe, 0x5, 0x1a3, 0x800, 0x7bc, 0x4, 0x8000, 0xe0, 0x5, 0xcb5b, 0x4a394324, 0x3, 0x1, 0xff, 0x4, 0x4, 0x64, 0x7, 0x1, 0x8, 0xff, 0x3c6, 0x3, 0x1, 0x9, 0x7, 0x4, 0x8, 0xfffffc01, 0x0, 0x3, 0x2, 0x2, 0x0, 0x0, 0xa5, 0x1000, 0x6, 0xffff3019, 0x1, 0x8, 0x7c, 0xffffffff, 0x7, 0x7, 0x0, 0x4], [0x6, 0x9, 0x10000, 0x1, 0x1f, 0x4, 0x101, 0x9, 0x1, 0xed, 0x0, 0x4, 0x6, 0x100, 0x101, 0x1ff, 0x7fffffff, 0x3, 0x2, 0xffffffc1, 0x2, 0x6b0, 0x0, 0x1, 0x6, 0x4, 0x1, 0x4, 0x28, 0x7fffffff, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7, 0x8, 0x84, 0x81, 0x3ff, 0x0, 0xffffff80, 0x1ff, 0x9, 0x80000000, 0x2, 0x3f, 0x2, 0xfffff000, 0x1, 0xfff, 0xd8e, 0x3ff, 0x6, 0x10000, 0xffff, 0x2, 0x0, 0x8fa, 0x0, 0xe7cb, 0x1, 0x5, 0x54e], [0x9, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x9, 0x9, 0x5, 0x6, 0x7483, 0x3, 0x8, 0x4, 0x3, 0x7, 0x24000000, 0x4c5, 0x69, 0x20, 0x8, 0x7ff, 0x80, 0x3, 0xacd, 0x0, 0x3, 0x5, 0x5, 0x1, 0xfffffffd, 0x3, 0x70, 0x5, 0x8, 0x100, 0x5, 0x7, 0x3, 0x8, 0x80, 0x3, 0x5818, 0x2, 0xf5, 0x0, 0x9, 0x0, 0x8, 0x5, 0x4, 0xffffff00, 0x1dc, 0x4, 0x8000, 0x2, 0x800, 0x7, 0x81, 0x101, 0x9, 0xe000, 0x8, 0x4], [0x1, 0x8, 0x0, 0xffff, 0x5748, 0x4, 0x7c, 0x6, 0x5, 0x4874, 0xd, 0x60000000, 0x3, 0x9, 0x2, 0x10000, 0x5, 0x5, 0x8000, 0x7e7, 0x40000000, 0x1, 0x1000, 0x1, 0x4, 0x6, 0x400, 0x915, 0x100, 0x9, 0x2, 0x0, 0x80, 0x8, 0x6, 0x7, 0x100, 0x6, 0x3, 0x40, 0xfffffff8, 0x7, 0xffffffff, 0x9, 0xc28, 0x9, 0x2, 0x5, 0x6, 0x8, 0xfffffffb, 0x1, 0x1, 0x0, 0x8, 0x0, 0x8, 0x6, 0x10001, 0x7, 0x1, 0x6ec, 0x1f, 0x1]}, 0x45c) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) getpeername$llc(r4, &(0x7f00000007c0), &(0x7f0000000800)=0x10) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000300)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', r6}) [ 1439.413118][T20989] binder: 20931:20989 ioctl c018620c 20000100 returned -1 [ 1439.444095][T20989] bridge0: port 1(bridge_slave_0) entered learning state 02:46:12 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x3) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000000c0)="3b04fb95897cf296d18612fc5b65c497ba17bcae0689675f97092528aa32be70f71cc1fa83a72618f30c451775e0c8d32351cbd6e356395e2ff41aa002fc616a6e9910ee9d6ff97c5d12c0f31b61f6994b5665335c49805bfb3ee7f633a4b5eaceb49a7d7bec406d448929318bf310ab7e0a55d14b92bb9947e50154b727a5b2d4584e7ad8bd8d782535e617193b7e1e3b06328c98209ff47d116c5dac8ee717bf1993e6c9879000f32e0ce62b977f9fe8142e7a861b73143baa51a561d5f595af75780c4e41f1f8f38e24feca1d9c189ebe248c82dbe63ea3b8f541f7a95dab2c0f6fd03c407b4388fc5c7af5be"}, {&(0x7f00000004c0)="5bc8e7fb8df6dc316c485ec3062ad9e3872f1877142a8581a0bfc8238fa5f3a8145dad813640a0963caed6faa28e55b2340c64613be95fba32150518d76ebcfd0cbab6caa55457b4e06d6517838ff84d31db14bdbbbd22dbb3351e528e96237b6ea412f0669a33c01a07fa2eef2f0df726ff43b5ab26b61fe086da2b67d9c3b2897de756d670237186cd41068598600dbca54012cb818157c6699317affef0d2dd336c8f8d21a5b7b1871ffffc01ef238030b1032831eb6cd3d95bef8b0d36c138a81c26c8c3"}, {&(0x7f00000005c0)="e0d5f268f43f05433c8dbda23cdbbdc5472a94ceb17394a154e950de3037d613de19f931420cc843829fbcc68a745b12bd04203e3ff6b5a864e80b3c1a3977b954c23808dd5c8b42b45e222d8777e4909cdb90534604ddf82408bfb97dcb5ecada57930d02ac34d0cc7281cef7b4ca291090a8cb1583dd13d91987aa3186b9566cc7e218dfebfba5e8b6949d85d410829579de3b730cd922a6d6bd7b46ee3101b6b5497f7cd22777032e8fe2fd6bb9d217"}, {&(0x7f0000000680)="86e925b3d505cd1d0bbdbf4509300cead7d0df7484018f7cee642fb69d4321cf58bcb1d89289974b2ab07672676b9078196c89e3ccd1db890a7eb878a5a281f5964c4588b38dfa83842d2a53c90dffa575dceb5cb62309663607dec4e36cc8021373495b148720793c84c1bf1afe523a8186cbe31c2da6de56556dbc2bf85478507d12fbd01ac05bbb0885c7706a920855ff0f498e2d6f9c3c0d6884a07f59b8a8c670babc3a799641c2213636feb085e8f67a55047349b1b1705a82c8a4752f26a16a585d4f4e680c9a6cc06a0839057741924de3155a03edb98316d06186bfe5a646c48ce3448a7ab64158e1597f08155793"}, {&(0x7f00000001c0)="eae701c78ff0cada45ee7224e784258464d08293a868a91105ee48391e"}], 0x1, 0x0, 0x0, 0xf000}, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) pwrite64(r1, &(0x7f0000000300)="fbefcd655903dbacda524162857d376c9f7f5dc215bbe7f3e0c099feca5cd3d90def0da65d3bf43622f3d69a842fb2c88fe32cc35621b74e39e451dfbb802a56d4810b277113063997ade56b114438da4686af06149042b95653dec8682a20d1efd116b6873b178291a5adac105db99cd51331289b35b6cf8298aeb6ffe653555d227140e1dade047d0a2222b839f6591d0efec8a66ab3800bf2d3c0ef1e7b414cc43286e61b85de917caedc2d468b642222c3a689c423e8145bc394639db479a0ba38019bbebaac2e118bdc6dc022b446b16e4d76125fc304df306c47143dab1e00aab184abc36f9c1467682bfb6747acc59482daeb0327d2efa11ee4b3fc1c6534e4f80d4493fea87acbf65061f2a41fc7d1fea6d380ccf9bebf178e0c02a5eb08d7f48e80c2a10e01c4f6533924c6c08170b9c23d8aeba24bf1e32fb0a01976c917d3f9000000000000000000005908574de28a8391c728a2503897a64502b1a5c85835962d0ae211b71266f2d59212ee3d696c3a0811118e755373297b00"/396, 0x18c, 0x2) 02:46:12 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000001f40000000000000000000000000005000000"], 0x8758) 02:46:12 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000100)) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000180)={0x9c0000, 0x100, 0x7fff, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x9909e2, 0x9, [], @value=0xfffffffa}}) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f00000001c0)={0x800, 0xa46a, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x14e24, 0x0, @rand_addr="aca6e34f0000052d0000000000000020"}, 0x1c) recvmmsg(r4, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r5) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000000c0)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000080)=0x7f, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) [ 1439.609864][T21038] bridge0: port 1(bridge_slave_0) entered learning state 02:46:12 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000080)=""/127) 02:46:12 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x3) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000080)={0x6, @output={0x0, 0x0, {0x7, 0xe1}, 0x3, 0x8}}) [ 1439.922066][T21297] binder: 21249:21297 ioctl c018620c 20000100 returned -1 [ 1439.973296][T21297] binder: 21249:21297 ioctl 80404509 20000080 returned -22 02:46:12 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) bind$isdn(r3, &(0x7f0000000000)={0x22, 0x8, 0x40, 0xf8, 0x7}, 0x6) [ 1440.194079][T21463] binder: 21373:21463 ioctl c018620c 20000100 returned -1 02:46:12 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000003f40000000000000000000000000005000000"], 0x8758) 02:46:13 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10082, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, &(0x7f0000000240)={r5, &(0x7f0000000140)=""/239}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000080)={0x7, 0x0, [{0x2c8, 0x0, 0x6}, {0x9cc, 0x0, 0x9fbd}, {0xde9, 0x0, 0xe00000000000000}, {0x3af, 0x0, 0x3}, {0x955}, {0x8cd, 0x0, 0xfffffffffffffeff}, {0x88, 0x0, 0x1000}]}) 02:46:13 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0x2}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40044) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) fcntl$dupfd(r0, 0x406, r5) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) ppoll(&(0x7f0000000000)=[{r4, 0x80c1}, {r0, 0x200}, {r5, 0x4600}, {r0, 0x140a}, {r6, 0x611e247b77e71e6}], 0x5, &(0x7f0000000080), &(0x7f00000000c0)={[0x9]}, 0x8) [ 1440.500255][T21619] binder: 21617:21619 ioctl c018620c 20000100 returned -1 02:46:13 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000001f40000000000000000000000000005000000"], 0x8758) [ 1440.552845][T21620] binder: 21618:21620 ioctl c018620c 20000100 returned -1 [ 1440.593735][T21620] bridge0: port 1(bridge_slave_0) entered learning state [ 1440.640899][T21620] bridge0: port 1(bridge_slave_0) entered learning state 02:46:13 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000000000000000cb80000000000000000000000000005000000"], 0x8758) 02:46:13 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000001280)=0x80000001, 0x4) syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0x3, &(0x7f00000011c0)=[{&(0x7f00000000c0)="b776b0358c2b8823bd6c754c7df58bddbc09694d2e296d4ff38bfa413af7dba10cc5cbd2c33178ac7b1a22b270295ba14db569c15e238d451a", 0x39, 0x100000000}, {&(0x7f0000000100)="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", 0x1000, 0xb928}, {&(0x7f0000001100)="e5e73790f94d118e8f9d658fba65a8cc0bf51369c2c56db18b47f2005c339a6b6a2864d49a5a9caf3900f032d0aaaf3ac39f5ef164cc6f2619440480d11a6d05687fb315eff3756256e35ecbe5359b02ae28944baa86f45eaef5359d5dc00a8f26c8b87e03528a988004f7df45c337fb4515f9b14490e6bb1ef4e86abb7c8bbd8ce2", 0x82, 0x4}], 0x10, &(0x7f0000001240)='\x00') 02:46:13 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000003f80000000000000000000000000005000000"], 0x8758) 02:46:13 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000001f40000000000000000000000000005000000"], 0x8758) 02:46:14 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000000000000000cb80000000000000000000000000005000000"], 0x8758) 02:46:14 executing program 4: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x59fc02, 0x94) lseek(r0, 0x7fffffffffffffff, 0x3) 02:46:14 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000001f40000000000000000000000000005000000"], 0x8758) 02:46:14 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000000ff0000000000000000000000000005000000"], 0x8758) 02:46:14 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) rt_sigreturn() r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_ENCAP_FLAGS={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x64}}, 0x0) sendto$packet(r3, &(0x7f0000000080)="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", 0x1000, 0x4000000, &(0x7f0000000000)={0x11, 0x3, r8, 0x1, 0x20, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) lseek(r0, 0x7fffffffffffffff, 0x3) 02:46:14 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000000000000000cb80000000000000000000000000005000000"], 0x8758) 02:46:14 executing program 0 (fault-call:3 fault-nth:0): r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) [ 1442.265647][T22502] FAULT_INJECTION: forcing a failure. [ 1442.265647][T22502] name failslab, interval 1, probability 0, space 0, times 0 [ 1442.330771][T22502] CPU: 0 PID: 22502 Comm: syz-executor.0 Not tainted 5.6.0-rc3-next-20200228-syzkaller #0 [ 1442.340716][T22502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1442.350822][T22502] Call Trace: [ 1442.354166][T22502] dump_stack+0x188/0x20d [ 1442.358537][T22502] should_fail.cold+0x5/0x14 [ 1442.363176][T22502] ? lock_downgrade+0x7f0/0x7f0 [ 1442.368060][T22502] ? setup_fault_attr+0x1e0/0x1e0 [ 1442.373219][T22502] should_failslab+0x5/0xf [ 1442.377652][T22502] __kmalloc+0x2d9/0x7a0 [ 1442.381911][T22502] ? bpf_test_init.isra.0+0x90/0x230 [ 1442.387212][T22502] ? rcu_read_lock_held_common+0x130/0x130 [ 1442.393041][T22502] bpf_test_init.isra.0+0x90/0x230 [ 1442.398168][T22502] ? bpf_test_init.isra.0+0x230/0x230 [ 1442.403544][T22502] bpf_prog_test_run_skb+0x101/0x1480 [ 1442.408956][T22502] ? bpf_test_init.isra.0+0x230/0x230 [ 1442.414345][T22502] ? fput_many+0x2f/0x1a0 [ 1442.418701][T22502] ? bpf_test_init.isra.0+0x230/0x230 [ 1442.424188][T22502] __do_sys_bpf+0xbac/0x3f10 [ 1442.428819][T22502] ? lock_downgrade+0x7f0/0x7f0 [ 1442.433700][T22502] ? bpf_prog_load+0x15f0/0x15f0 [ 1442.438672][T22502] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1442.444239][T22502] ? wait_for_completion+0x3c0/0x3c0 [ 1442.449541][T22502] ? __this_cpu_preempt_check+0x28/0x190 [ 1442.455197][T22502] ? __sb_end_write+0x101/0x1d0 [ 1442.460081][T22502] ? __ia32_sys_clock_settime+0x260/0x260 [ 1442.466088][T22502] ? trace_hardirqs_off_caller+0x55/0x230 [ 1442.471837][T22502] do_syscall_64+0xf6/0x790 [ 1442.476364][T22502] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1442.482265][T22502] RIP: 0033:0x45c849 [ 1442.486165][T22502] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1442.505778][T22502] RSP: 002b:00007fc5dfffac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1442.514216][T22502] RAX: ffffffffffffffda RBX: 00007fc5dfffb6d4 RCX: 000000000045c849 02:46:15 executing program 4: lseek(0xffffffffffffffff, 0x6, 0x1) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/43, 0x2b) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x6000, 0x200, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000400)=0xe8) r3 = getegid() r4 = getegid() getgroups(0x1, &(0x7f0000000540)=[r4]) newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = getegid() getgroups(0x1, &(0x7f0000000540)=[r6]) r7 = getegid() getgroups(0x1, &(0x7f0000000540)=[r7]) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000500)={{}, {}, [{}, {}, {0x2, 0x6}, {0x2, 0x6}, {0x2, 0x4}, {0x2, 0x4, r0}, {0x2, 0x3}, {0x2, 0x2, r2}], {0x4, 0x2}, [{0x8, 0x6, r3}, {0x8, 0x2, r4}, {0x8, 0x4, r5}, {0x8, 0x3, r6}, {0x8, 0x4, r7}], {0x10, 0x1}}, 0x8c, 0x3) r8 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r8, 0x7fffffffffffffff, 0x3) 02:46:15 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000020000000000000000000000000000000000000005000000"], 0x8758) [ 1442.522287][T22502] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 000000000000000a [ 1442.532260][T22502] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1442.540242][T22502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1442.548253][T22502] R13: 0000000000000059 R14: 00000000004c2f70 R15: 0000000000000000 02:46:15 executing program 0 (fault-call:3 fault-nth:1): r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) 02:46:15 executing program 5 (fault-call:0 fault-nth:0): syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@show_sys_files_no='show_sys_files=no', 0x7}]}) [ 1442.856125][T22632] FAULT_INJECTION: forcing a failure. [ 1442.856125][T22632] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1442.869365][T22632] CPU: 1 PID: 22632 Comm: syz-executor.0 Not tainted 5.6.0-rc3-next-20200228-syzkaller #0 [ 1442.879268][T22632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1442.889451][T22632] Call Trace: [ 1442.892757][T22632] dump_stack+0x188/0x20d [ 1442.897115][T22632] should_fail.cold+0x5/0x14 [ 1442.901731][T22632] ? setup_fault_attr+0x1e0/0x1e0 [ 1442.906766][T22632] ? __lock_acquire+0x18c3/0x5270 [ 1442.911809][T22632] __alloc_pages_nodemask+0x17a/0x820 [ 1442.917200][T22632] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 1442.922928][T22632] ? find_held_lock+0x2d/0x110 [ 1442.927710][T22632] ? lock_downgrade+0x7f0/0x7f0 [ 1442.932595][T22632] cache_grow_begin+0x8c/0xc10 [ 1442.937369][T22632] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 1442.942861][T22632] __kmalloc+0x6d6/0x7a0 [ 1442.947106][T22632] ? bpf_test_init.isra.0+0x90/0x230 [ 1442.952402][T22632] ? rcu_read_lock_held_common+0x130/0x130 [ 1442.958229][T22632] bpf_test_init.isra.0+0x90/0x230 [ 1442.963355][T22632] ? bpf_test_init.isra.0+0x230/0x230 [ 1442.968734][T22632] bpf_prog_test_run_skb+0x101/0x1480 [ 1442.974127][T22632] ? bpf_test_init.isra.0+0x230/0x230 [ 1442.979522][T22632] ? fput_many+0x2f/0x1a0 [ 1442.983866][T22632] ? bpf_test_init.isra.0+0x230/0x230 [ 1442.989247][T22632] __do_sys_bpf+0xbac/0x3f10 [ 1442.993929][T22632] ? lock_downgrade+0x7f0/0x7f0 [ 1442.998787][T22632] ? bpf_prog_load+0x15f0/0x15f0 [ 1443.003750][T22632] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1443.009309][T22632] ? wait_for_completion+0x3c0/0x3c0 [ 1443.014600][T22632] ? __this_cpu_preempt_check+0x28/0x190 [ 1443.020245][T22632] ? __sb_end_write+0x101/0x1d0 [ 1443.025154][T22632] ? __ia32_sys_clock_settime+0x260/0x260 [ 1443.030884][T22632] ? trace_hardirqs_off_caller+0x55/0x230 [ 1443.036629][T22632] do_syscall_64+0xf6/0x790 [ 1443.041148][T22632] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1443.047043][T22632] RIP: 0033:0x45c849 [ 1443.050942][T22632] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1443.071512][T22632] RSP: 002b:00007fc5dfffac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1443.079943][T22632] RAX: ffffffffffffffda RBX: 00007fc5dfffb6d4 RCX: 000000000045c849 [ 1443.087945][T22632] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 000000000000000a [ 1443.095933][T22632] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1443.103928][T22632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1443.111927][T22632] R13: 0000000000000059 R14: 00000000004c2f70 R15: 0000000000000001 [ 1443.175540][T22663] FAULT_INJECTION: forcing a failure. [ 1443.175540][T22663] name failslab, interval 1, probability 0, space 0, times 0 [ 1443.217117][T22663] CPU: 1 PID: 22663 Comm: syz-executor.5 Not tainted 5.6.0-rc3-next-20200228-syzkaller #0 [ 1443.227041][T22663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1443.237101][T22663] Call Trace: [ 1443.240409][T22663] dump_stack+0x188/0x20d [ 1443.244760][T22663] should_fail.cold+0x5/0x14 [ 1443.249368][T22663] ? lock_downgrade+0x7f0/0x7f0 [ 1443.254245][T22663] ? setup_fault_attr+0x1e0/0x1e0 [ 1443.259304][T22663] should_failslab+0x5/0xf [ 1443.263736][T22663] __kmalloc+0x2d9/0x7a0 [ 1443.267992][T22663] ? __x64_sys_memfd_create+0x131/0x450 [ 1443.273555][T22663] ? __this_cpu_preempt_check+0x28/0x190 [ 1443.279193][T22663] ? __sb_end_write+0x101/0x1d0 [ 1443.284062][T22663] ? strnlen_user+0x1f5/0x2e0 [ 1443.288909][T22663] __x64_sys_memfd_create+0x131/0x450 [ 1443.294299][T22663] ? ksys_write+0x19f/0x250 [ 1443.298826][T22663] ? memfd_fcntl+0x17c0/0x17c0 [ 1443.303611][T22663] ? __ia32_sys_clock_settime+0x260/0x260 [ 1443.309339][T22663] ? trace_hardirqs_off_caller+0x55/0x230 [ 1443.315083][T22663] do_syscall_64+0xf6/0x790 [ 1443.319601][T22663] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1443.325509][T22663] RIP: 0033:0x45c849 [ 1443.329417][T22663] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1443.349042][T22663] RSP: 002b:00007fc09a078a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1443.357468][T22663] RAX: ffffffffffffffda RBX: 00007fc09a0796d4 RCX: 000000000045c849 [ 1443.365540][T22663] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1941 [ 1443.373528][T22663] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000001 [ 1443.381508][T22663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1443.389490][T22663] R13: 0000000000000be7 R14: 00000000004ce08e R15: 0000000000000000 02:46:16 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000030000000000000000000000000000000000000005000000"], 0x8758) 02:46:16 executing program 0 (fault-call:3 fault-nth:2): r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) 02:46:16 executing program 5 (fault-call:0 fault-nth:1): syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@show_sys_files_no='show_sys_files=no', 0x7}]}) 02:46:16 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="80020200000000003c001280090001006970704e000101000000000000000100", @ANYRES32=0x0, @ANYBLOB="01000100", @ANYRES32=r9, @ANYBLOB="05000900000000000500040000000000060010000000000008000a00", @ANYRES32=r7, @ANYBLOB], 0x64}}, 0x4000) bind$can_j1939(r5, &(0x7f0000000140)={0x1d, r9, 0x0, {0x0, 0x0, 0x2}}, 0x18) ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f0000000100)={0x80, &(0x7f0000000080)="a8653e46a138fb8e357431aa093a682a1807cf415c6f2e985697bfee5450a6754bfd1d4beded7e2015e191fd0f9f919a15548ced8007d0e60c4ffa39071bf934f59a8ba1f1f47cc9c307fdabb813216f5ad7e099e253b14e5c02b00abf76d157c44bfb9e02a97c8cd5d23400167ee1504f118f7e4a22833a614c8cf58dadf4a2"}) r10 = dup2(r2, r1) ioctl$TIOCGETD(r10, 0x5424, &(0x7f0000000000)) [ 1443.871702][T22681] FAULT_INJECTION: forcing a failure. [ 1443.871702][T22681] name failslab, interval 1, probability 0, space 0, times 0 [ 1443.888235][T22682] FAULT_INJECTION: forcing a failure. [ 1443.888235][T22682] name failslab, interval 1, probability 0, space 0, times 0 [ 1443.966319][T22681] CPU: 1 PID: 22681 Comm: syz-executor.0 Not tainted 5.6.0-rc3-next-20200228-syzkaller #0 [ 1443.976246][T22681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1443.986317][T22681] Call Trace: [ 1443.989637][T22681] dump_stack+0x188/0x20d [ 1443.993997][T22681] should_fail.cold+0x5/0x14 [ 1443.998621][T22681] ? lock_downgrade+0x7f0/0x7f0 [ 1444.003495][T22681] ? setup_fault_attr+0x1e0/0x1e0 [ 1444.008583][T22681] should_failslab+0x5/0xf [ 1444.013017][T22681] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 1444.018428][T22681] ? bpf_fentry_test6+0x24/0x40 [ 1444.023318][T22681] ? bpf_test_init.isra.0+0x68/0x230 [ 1444.028617][T22681] ? bpf_ctx_init+0xd3/0x1a0 [ 1444.033226][T22681] bpf_prog_test_run_skb+0x1f1/0x1480 [ 1444.038717][T22681] ? bpf_test_init.isra.0+0x230/0x230 [ 1444.044144][T22681] ? fput_many+0x2f/0x1a0 [ 1444.048505][T22681] ? bpf_test_init.isra.0+0x230/0x230 [ 1444.053915][T22681] __do_sys_bpf+0xbac/0x3f10 [ 1444.058524][T22681] ? lock_downgrade+0x7f0/0x7f0 [ 1444.063411][T22681] ? bpf_prog_load+0x15f0/0x15f0 [ 1444.068377][T22681] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1444.073945][T22681] ? wait_for_completion+0x3c0/0x3c0 [ 1444.079246][T22681] ? __this_cpu_preempt_check+0x28/0x190 [ 1444.084892][T22681] ? __sb_end_write+0x101/0x1d0 [ 1444.089773][T22681] ? __ia32_sys_clock_settime+0x260/0x260 [ 1444.095505][T22681] ? trace_hardirqs_off_caller+0x55/0x230 [ 1444.101299][T22681] do_syscall_64+0xf6/0x790 [ 1444.105820][T22681] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1444.111721][T22681] RIP: 0033:0x45c849 [ 1444.115632][T22681] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1444.135245][T22681] RSP: 002b:00007fc5dfffac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1444.143665][T22681] RAX: ffffffffffffffda RBX: 00007fc5dfffb6d4 RCX: 000000000045c849 [ 1444.151656][T22681] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 000000000000000a [ 1444.159646][T22681] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1444.167634][T22681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1444.175615][T22681] R13: 0000000000000059 R14: 00000000004c2f70 R15: 0000000000000002 [ 1444.192752][T22682] CPU: 0 PID: 22682 Comm: syz-executor.5 Not tainted 5.6.0-rc3-next-20200228-syzkaller #0 [ 1444.202673][T22682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1444.212745][T22682] Call Trace: [ 1444.216059][T22682] dump_stack+0x188/0x20d [ 1444.220445][T22682] should_fail.cold+0x5/0x14 [ 1444.225055][T22682] ? lock_downgrade+0x7f0/0x7f0 [ 1444.229933][T22682] ? setup_fault_attr+0x1e0/0x1e0 [ 1444.235053][T22682] ? shmem_destroy_inode+0x70/0x70 [ 1444.240184][T22682] should_failslab+0x5/0xf [ 1444.244701][T22682] kmem_cache_alloc+0x29b/0x730 [ 1444.249565][T22682] ? find_held_lock+0x2d/0x110 [ 1444.254345][T22682] ? __alloc_fd+0x46d/0x600 [ 1444.258871][T22682] ? shmem_destroy_inode+0x70/0x70 [ 1444.264007][T22682] shmem_alloc_inode+0x18/0x40 [ 1444.268784][T22682] ? shmem_destroy_inode+0x70/0x70 [ 1444.273903][T22682] alloc_inode+0x61/0x1e0 [ 1444.278258][T22682] new_inode_pseudo+0x14/0xe0 [ 1444.282973][T22682] new_inode+0x1b/0x40 [ 1444.287257][T22682] shmem_get_inode+0x84/0x7e0 [ 1444.291960][T22682] __shmem_file_setup.part.0+0x7a/0x2b0 [ 1444.297582][T22682] shmem_file_setup+0x61/0x90 [ 1444.302278][T22682] __x64_sys_memfd_create+0x28a/0x450 [ 1444.307667][T22682] ? memfd_fcntl+0x17c0/0x17c0 [ 1444.312463][T22682] ? __ia32_sys_clock_settime+0x260/0x260 [ 1444.318374][T22682] ? trace_hardirqs_off_caller+0x55/0x230 [ 1444.324121][T22682] do_syscall_64+0xf6/0x790 [ 1444.328649][T22682] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1444.334555][T22682] RIP: 0033:0x45c849 [ 1444.338808][T22682] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1444.358772][T22682] RSP: 002b:00007fc09a078a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1444.367198][T22682] RAX: ffffffffffffffda RBX: 00007fc09a0796d4 RCX: 000000000045c849 [ 1444.375507][T22682] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1941 [ 1444.384906][T22682] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000001 [ 1444.393374][T22682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1444.401356][T22682] R13: 0000000000000be7 R14: 00000000004ce08e R15: 0000000000000001 [ 1444.404803][T22685] binder: BINDER_SET_CONTEXT_MGR already set [ 1444.471208][T22685] binder: 22684:22685 ioctl 40046207 0 returned -16 02:46:17 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000040000000000000000000000000000000000000005000000"], 0x8758) 02:46:17 executing program 5 (fault-call:0 fault-nth:2): syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@show_sys_files_no='show_sys_files=no', 0x7}]}) 02:46:17 executing program 4: lseek(0xffffffffffffffff, 0x7fffffffffffffff, 0x3) 02:46:17 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) [ 1444.859646][T22794] FAULT_INJECTION: forcing a failure. [ 1444.859646][T22794] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1444.872987][T22794] CPU: 1 PID: 22794 Comm: syz-executor.5 Not tainted 5.6.0-rc3-next-20200228-syzkaller #0 [ 1444.882913][T22794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1444.893239][T22794] Call Trace: [ 1444.896652][T22794] dump_stack+0x188/0x20d [ 1444.901019][T22794] should_fail.cold+0x5/0x14 [ 1444.905632][T22794] ? setup_fault_attr+0x1e0/0x1e0 [ 1444.910671][T22794] ? find_held_lock+0x2d/0x110 [ 1444.915555][T22794] __alloc_pages_nodemask+0x17a/0x820 [ 1444.921148][T22794] ? lock_downgrade+0x7f0/0x7f0 [ 1444.926034][T22794] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 1444.931765][T22794] ? lock_acquire+0x197/0x420 [ 1444.936473][T22794] cache_grow_begin+0x8c/0xc10 [ 1444.941369][T22794] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 1444.946936][T22794] kmem_cache_alloc+0x66a/0x730 [ 1444.952173][T22794] ? __alloc_fd+0x46d/0x600 [ 1444.956790][T22794] ? shmem_destroy_inode+0x70/0x70 [ 1444.962029][T22794] shmem_alloc_inode+0x18/0x40 [ 1444.966889][T22794] ? shmem_destroy_inode+0x70/0x70 [ 1444.972004][T22794] alloc_inode+0x61/0x1e0 [ 1444.976461][T22794] new_inode_pseudo+0x14/0xe0 [ 1444.981674][T22794] new_inode+0x1b/0x40 [ 1444.987131][T22794] shmem_get_inode+0x84/0x7e0 [ 1444.992078][T22794] __shmem_file_setup.part.0+0x7a/0x2b0 [ 1444.997651][T22794] shmem_file_setup+0x61/0x90 [ 1445.002342][T22794] __x64_sys_memfd_create+0x28a/0x450 [ 1445.007732][T22794] ? memfd_fcntl+0x17c0/0x17c0 [ 1445.012537][T22794] ? __ia32_sys_clock_settime+0x260/0x260 [ 1445.018279][T22794] ? trace_hardirqs_off_caller+0x55/0x230 [ 1445.024037][T22794] do_syscall_64+0xf6/0x790 [ 1445.028563][T22794] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1445.034475][T22794] RIP: 0033:0x45c849 [ 1445.038587][T22794] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1445.058291][T22794] RSP: 002b:00007fc09a078a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1445.066718][T22794] RAX: ffffffffffffffda RBX: 00007fc09a0796d4 RCX: 000000000045c849 [ 1445.074696][T22794] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1941 [ 1445.082800][T22794] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000001 [ 1445.090882][T22794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1445.098869][T22794] R13: 0000000000000be7 R14: 00000000004ce08e R15: 0000000000000002 02:46:18 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x13) 02:46:18 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000050000000000000000000000000000000000000005000000"], 0x8758) 02:46:18 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cbac4c07d57d995b61e89a4530f92304f242b416ae9eeefc0e9c60ebab1c176bf9bb4dde984510c82dc2b9381b72b100d0682fd0a0c4a06b29e220dc28dac72599456d4c4e6f3fe2d1dee18f638ac947b5e026a3287c84ccc727d6ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb398dff1db3df9858837458a4ca03767c69cee1b6be484e4c9507af216bd8ed42f7dd5adb8e49f4a94615e49c08c9a208e4557cd4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9d441d42f49db6d4a47f2e898961cb43e438c4e41ae43ea118e1407a601dae4b8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa2285b6e4afd8c1cc3eb215ba22f43115dbba9dc7beedb130d9f2be90133a0e3ed34258b330cdf0c92abaacb8c9370634060105baa664953514605fba394aa64e03fb5da791ecf9c873aa021945b985a8a66e9cfa9d9e57033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bcaabd6948537faf9fff8dc4006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11a767761fe46169b2b5b8cdedb695cc425fe203d2f2655a76865c2cb4e2470fcfb1248c0add5431a7fbcb0ef4f66a09af93a09fab1daae4b518d7a5d9d54008694c0f3b626d6afcde5fc5e7b3b3f03454cc8f05b8cb621d09240dc200443e7e708ba45026f226dd5f6aec66374d84c02fc49eb697e3161ca77690f4e4ed90301cc78355ff012097d625dbeb84f2cac23dfdfe2ea5a9e235637b115d8cbfe481c8abce2729c9955e80b698776f1dc14728d50b54586115980590d06b9b100b9d2fe891342cd8a961f036e431d70260cdb560d3ffa02d91fd08b9ec122d944ac55de4f71a1675c3c432e8e3e348ae23301577cae76a6abf6557fc227b3305a912572b47156f7a3f18da8e82b153833c4a7ea1cab4f5fe873414f817ed087b79042478f64a5007fa3b2a49042c3e507bb2a0a84932fdd6bd79effb7aa5192f442c3a6b4b36550f9f0c10e1dca208584eed38f7ab718c9729a260150bcba99adb86"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0x2, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) [ 1445.352774][T22794] ntfs: (device loop5): parse_options(): The show_sys_files option requires a boolean argument. 02:46:18 executing program 5 (fault-call:0 fault-nth:3): syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@show_sys_files_no='show_sys_files=no', 0x7}]}) 02:46:18 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0x3, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) 02:46:18 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000070000000000000000000000000000000000000005000000"], 0x8758) 02:46:18 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8fc533f07ed9d1a0, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000080)="b28d9617") r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0x7fffffffffffffff, 0x3) [ 1445.870095][T23019] FAULT_INJECTION: forcing a failure. [ 1445.870095][T23019] name failslab, interval 1, probability 0, space 0, times 0 [ 1445.960839][T23019] CPU: 0 PID: 23019 Comm: syz-executor.5 Not tainted 5.6.0-rc3-next-20200228-syzkaller #0 [ 1445.970853][T23019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1445.981525][T23019] Call Trace: [ 1445.984834][T23019] dump_stack+0x188/0x20d [ 1445.989283][T23019] should_fail.cold+0x5/0x14 [ 1445.993889][T23019] ? lock_downgrade+0x7f0/0x7f0 [ 1445.998754][T23019] ? setup_fault_attr+0x1e0/0x1e0 [ 1446.003802][T23019] should_failslab+0x5/0xf [ 1446.008227][T23019] kmem_cache_alloc+0x29b/0x730 [ 1446.013190][T23019] ? lock_downgrade+0x7f0/0x7f0 [ 1446.018077][T23019] __alloc_file+0x21/0x340 [ 1446.022597][T23019] alloc_empty_file+0x6d/0x170 [ 1446.027382][T23019] alloc_file+0x5e/0x4d0 [ 1446.031651][T23019] alloc_file_pseudo+0x165/0x250 [ 1446.036732][T23019] ? alloc_file+0x4d0/0x4d0 [ 1446.041257][T23019] ? shmem_get_inode+0x47a/0x7e0 [ 1446.046215][T23019] __shmem_file_setup.part.0+0x102/0x2b0 [ 1446.051868][T23019] shmem_file_setup+0x61/0x90 [ 1446.056571][T23019] __x64_sys_memfd_create+0x28a/0x450 [ 1446.061955][T23019] ? memfd_fcntl+0x17c0/0x17c0 [ 1446.066725][T23019] ? __ia32_sys_clock_settime+0x260/0x260 [ 1446.072472][T23019] ? trace_hardirqs_off_caller+0x55/0x230 [ 1446.078208][T23019] do_syscall_64+0xf6/0x790 [ 1446.082722][T23019] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1446.088615][T23019] RIP: 0033:0x45c849 [ 1446.092511][T23019] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1446.112131][T23019] RSP: 002b:00007fc09a078a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1446.120558][T23019] RAX: ffffffffffffffda RBX: 00007fc09a0796d4 RCX: 000000000045c849 [ 1446.128539][T23019] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1941 [ 1446.136527][T23019] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000001 [ 1446.144514][T23019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1446.152502][T23019] R13: 0000000000000be7 R14: 00000000004ce08e R15: 0000000000000003 02:46:19 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0x4, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) 02:46:19 executing program 4: open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) lseek(r0, 0x8, 0x2) 02:46:19 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000090000000000000000000000000000000000000005000000"], 0x8758) 02:46:19 executing program 5 (fault-call:0 fault-nth:4): syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@show_sys_files_no='show_sys_files=no', 0x7}]}) [ 1446.629314][T23308] bridge0: port 1(bridge_slave_0) entered learning state 02:46:19 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0x5, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) 02:46:19 executing program 4: socket$pptp(0x18, 0x1, 0x2) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000000)={0x6, 0xa, 0x2cc0, 0xfffffff9, 0x3, 0x3579}) lseek(r0, 0x7fffffffffffffff, 0x3) [ 1446.905849][T23495] FAULT_INJECTION: forcing a failure. [ 1446.905849][T23495] name failslab, interval 1, probability 0, space 0, times 0 [ 1446.988883][T23495] CPU: 1 PID: 23495 Comm: syz-executor.5 Not tainted 5.6.0-rc3-next-20200228-syzkaller #0 [ 1446.998890][T23495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1447.008968][T23495] Call Trace: [ 1447.012275][T23495] dump_stack+0x188/0x20d [ 1447.016646][T23495] should_fail.cold+0x5/0x14 [ 1447.021257][T23495] ? lock_downgrade+0x7f0/0x7f0 [ 1447.026118][T23495] ? setup_fault_attr+0x1e0/0x1e0 [ 1447.031164][T23495] should_failslab+0x5/0xf [ 1447.035587][T23495] kmem_cache_alloc+0x29b/0x730 [ 1447.040475][T23495] ? kmem_cache_alloc+0x358/0x730 [ 1447.045510][T23495] security_file_alloc+0x34/0x160 [ 1447.050543][T23495] __alloc_file+0xd8/0x340 [ 1447.054973][T23495] alloc_empty_file+0x6d/0x170 [ 1447.059747][T23495] alloc_file+0x5e/0x4d0 [ 1447.064003][T23495] alloc_file_pseudo+0x165/0x250 [ 1447.068961][T23495] ? alloc_file+0x4d0/0x4d0 [ 1447.073491][T23495] ? shmem_get_inode+0x47a/0x7e0 [ 1447.078466][T23495] __shmem_file_setup.part.0+0x102/0x2b0 [ 1447.084115][T23495] shmem_file_setup+0x61/0x90 [ 1447.088802][T23495] __x64_sys_memfd_create+0x28a/0x450 [ 1447.094176][T23495] ? memfd_fcntl+0x17c0/0x17c0 [ 1447.098966][T23495] ? __ia32_sys_clock_settime+0x260/0x260 [ 1447.104698][T23495] ? trace_hardirqs_off_caller+0x55/0x230 [ 1447.110442][T23495] do_syscall_64+0xf6/0x790 [ 1447.114964][T23495] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1447.120870][T23495] RIP: 0033:0x45c849 [ 1447.124766][T23495] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1447.144376][T23495] RSP: 002b:00007fc09a078a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1447.152792][T23495] RAX: ffffffffffffffda RBX: 00007fc09a0796d4 RCX: 000000000045c849 [ 1447.160768][T23495] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1941 [ 1447.168742][T23495] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000001 [ 1447.176724][T23495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1447.184698][T23495] R13: 0000000000000be7 R14: 00000000004ce08e R15: 0000000000000004 [ 1447.239681][T23545] binder: 23511:23545 ioctl c018620c 20000100 returned -1 [ 1447.268647][T23545] binder: 23511:23545 ioctl 401845c0 20000000 returned -22 02:46:20 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0x6, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) 02:46:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000000a0000000000000000000000000000000000000005000000"], 0x8758) 02:46:20 executing program 5 (fault-call:0 fault-nth:5): syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@show_sys_files_no='show_sys_files=no', 0x7}]}) 02:46:20 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0x7, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) 02:46:20 executing program 4: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0xa) lseek(r0, 0x7fffffffffffffff, 0x3) [ 1447.721684][T23758] FAULT_INJECTION: forcing a failure. [ 1447.721684][T23758] name failslab, interval 1, probability 0, space 0, times 0 [ 1447.786979][T23758] CPU: 0 PID: 23758 Comm: syz-executor.5 Not tainted 5.6.0-rc3-next-20200228-syzkaller #0 [ 1447.796910][T23758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1447.806985][T23758] Call Trace: [ 1447.810298][T23758] dump_stack+0x188/0x20d [ 1447.814663][T23758] should_fail.cold+0x5/0x14 [ 1447.819268][T23758] ? lock_downgrade+0x7f0/0x7f0 [ 1447.824133][T23758] ? setup_fault_attr+0x1e0/0x1e0 [ 1447.829186][T23758] should_failslab+0x5/0xf [ 1447.833610][T23758] kmem_cache_alloc+0x29b/0x730 [ 1447.838480][T23758] ? kmem_cache_alloc+0x358/0x730 [ 1447.843520][T23758] security_file_alloc+0x34/0x160 [ 1447.848561][T23758] __alloc_file+0xd8/0x340 [ 1447.853000][T23758] alloc_empty_file+0x6d/0x170 [ 1447.857780][T23758] alloc_file+0x5e/0x4d0 [ 1447.862039][T23758] alloc_file_pseudo+0x165/0x250 [ 1447.866990][T23758] ? alloc_file+0x4d0/0x4d0 [ 1447.871515][T23758] ? shmem_get_inode+0x47a/0x7e0 [ 1447.876573][T23758] __shmem_file_setup.part.0+0x102/0x2b0 [ 1447.882230][T23758] shmem_file_setup+0x61/0x90 [ 1447.887182][T23758] __x64_sys_memfd_create+0x28a/0x450 [ 1447.892576][T23758] ? memfd_fcntl+0x17c0/0x17c0 [ 1447.897349][T23758] ? __ia32_sys_clock_settime+0x260/0x260 [ 1447.903074][T23758] ? trace_hardirqs_off_caller+0x55/0x230 [ 1447.908822][T23758] do_syscall_64+0xf6/0x790 [ 1447.913335][T23758] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1447.919231][T23758] RIP: 0033:0x45c849 [ 1447.923131][T23758] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1447.942763][T23758] RSP: 002b:00007fc09a078a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1447.951534][T23758] RAX: ffffffffffffffda RBX: 00007fc09a0796d4 RCX: 000000000045c849 [ 1447.959511][T23758] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1941 [ 1447.967489][T23758] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000001 [ 1447.975520][T23758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1447.983685][T23758] R13: 0000000000000be7 R14: 00000000004ce08e R15: 0000000000000005 02:46:20 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cbac4c07d57d995b61e89a4530f92304f242b416ae9eeefc0e9c60ebab1c176bf9bb4dde984510c82dc2b9381b72b100d0682fd0a0c4a06b29e220dc28dac72599456d4c4e6f3fe2d1dee18f638ac947b5e026a3287c84ccc727d6ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb398dff1db3df9858837458a4ca03767c69cee1b6be484e4c9507af216bd8ed42f7dd5adb8e49f4a94615e49c08c9a208e4557cd4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9d441d42f49db6d4a47f2e898961cb43e438c4e41ae43ea118e1407a601dae4b8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa2285b6e4afd8c1cc3eb215ba22f43115dbba9dc7beedb130d9f2be90133a0e3ed34258b330cdf0c92abaacb8c9370634060105baa664953514605fba394aa64e03fb5da791ecf9c873aa021945b985a8a66e9cfa9d9e57033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bcaabd6948537faf9fff8dc4006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11a767761fe46169b2b5b8cdedb695cc425fe203d2f2655a76865c2cb4e2470fcfb1248c0add5431a7fbcb0ef4f66a09af93a09fab1daae4b518d7a5d9d54008694c0f3b626d6afcde5fc5e7b3b3f03454cc8f05b8cb621d09240dc200443e7e708ba45026f226dd5f6aec66374d84c02fc49eb697e3161ca77690f4e4ed90301cc78355ff012097d625dbeb84f2cac23dfdfe2ea5a9e235637b115d8cbfe481c8abce2729c9955e80b698776f1dc14728d50b54586115980590d06b9b100b9d2fe891342cd8a961f036e431d70260cdb560d3ffa02d91fd08b9ec122d944ac55de4f71a1675c3c432e8e3e348ae23301577cae76a6abf6557fc227b3305a912572b47156f7a3f18da8e82b153833c4a7ea1cab4f5fe873414f817ed087b79042478f64a5007fa3b2a49042c3e507bb2a0a84932fdd6bd79effb7aa5192f442c3a6b4b36550f9f0c10e1dca208584eed38f7ab718c9729a260150bcba99adb86"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0x8, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) 02:46:20 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x3) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000000)) [ 1448.118342][T23867] binder: 23865:23867 ioctl c018620c 20000100 returned -1 [ 1448.153170][T23867] binder: 23865:23867 ioctl 8040552c 20000000 returned -22 02:46:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000000c0000000000000000000000000000000000000005000000"], 0x8758) 02:46:21 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cbac4c07d57d995b61e89a4530f92304f242b416ae9eeefc0e9c60ebab1c176bf9bb4dde984510c82dc2b9381b72b100d0682fd0a0c4a06b29e220dc28dac72599456d4c4e6f3fe2d1dee18f638ac947b5e026a3287c84ccc727d6ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb398dff1db3df9858837458a4ca03767c69cee1b6be484e4c9507af216bd8ed42f7dd5adb8e49f4a94615e49c08c9a208e4557cd4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9d441d42f49db6d4a47f2e898961cb43e438c4e41ae43ea118e1407a601dae4b8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa2285b6e4afd8c1cc3eb215ba22f43115dbba9dc7beedb130d9f2be90133a0e3ed34258b330cdf0c92abaacb8c9370634060105baa664953514605fba394aa64e03fb5da791ecf9c873aa021945b985a8a66e9cfa9d9e57033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bcaabd6948537faf9fff8dc4006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11a767761fe46169b2b5b8cdedb695cc425fe203d2f2655a76865c2cb4e2470fcfb1248c0add5431a7fbcb0ef4f66a09af93a09fab1daae4b518d7a5d9d54008694c0f3b626d6afcde5fc5e7b3b3f03454cc8f05b8cb621d09240dc200443e7e708ba45026f226dd5f6aec66374d84c02fc49eb697e3161ca77690f4e4ed90301cc78355ff012097d625dbeb84f2cac23dfdfe2ea5a9e235637b115d8cbfe481c8abce2729c9955e80b698776f1dc14728d50b54586115980590d06b9b100b9d2fe891342cd8a961f036e431d70260cdb560d3ffa02d91fd08b9ec122d944ac55de4f71a1675c3c432e8e3e348ae23301577cae76a6abf6557fc227b3305a912572b47156f7a3f18da8e82b153833c4a7ea1cab4f5fe873414f817ed087b79042478f64a5007fa3b2a49042c3e507bb2a0a84932fdd6bd79effb7aa5192f442c3a6b4b36550f9f0c10e1dca208584eed38f7ab718c9729a260150bcba99adb86"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0x9, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) 02:46:21 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) write(r1, &(0x7f0000000080)="a3177da8e8796de7a7a87fdadcc4627ff493de5261593fb7758caab6c35029bde21d4222d7229de252f45a3c49acc104cc0a73626e72ee8abe1e045771f41ebca61e70c1ac05ef4b694d4612a9c9f71231afafd2efd2bf5a4332eb9edcefd2ea632311bb28e5999a092a13571a0a31d5b31b230a91afd25789266e509782bec2c80397e90b8efcd3ddd303329b085d", 0x8f) lseek(r0, 0x7fffffffffffffff, 0x3) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) ioctl$VIDIOC_ENUMAUDIO(r4, 0xc0345641, &(0x7f0000000000)={0xde8, "53d97dcbf259697fda3fea7a95c3b680096e67ca1e20a076bcdde5490e885338", 0x1}) [ 1448.623261][T24106] bridge0: port 1(bridge_slave_0) entered learning state 02:46:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000000e0000000000000000000000000000000000000005000000"], 0x8758) [ 1448.683431][T24106] binder: 24077:24106 ioctl c018620c 20000100 returned -1 [ 1448.734840][T24106] binder: 24077:24106 ioctl c0345641 20000000 returned -22 02:46:21 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xb, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) 02:46:21 executing program 5: syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@show_sys_files_no='show_sys_files=no', 0x7}]}) 02:46:21 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x20000) sendto$l2tp(r0, &(0x7f0000000080)="4ea9c1c051e77060d8a1daba41d39434d2b457c8c7d1b7409411b4dd0026a0d52a58973464fcb2725312ec297da0a1a57e40494740ac459df5e37bc517a918ef8df047f82d7b26f3db6efec1b5a44055842941498b133191ec7b136b66f3fc55bf276be25884b2fc85831b72b30b1e0243ef65bfb3dde11c54cadbc0f6959e86256a3adab3f3a55c6ee95456ced728bd328f6eb5ca08a7befdf79cf7e72317cb1f7164766eda665e5333d00d4a5a9c176e3d6b7a4fd64b074df7d2a024af758659133afe86deea094c2b5832f5e2a74caae8eede30e019381adaf7e37683c6963705ee51b393fa5d81bcb91dc5e4611e81d5004ae2db", 0xf6, 0x401c080, &(0x7f0000000180)={0x2, 0x0, @rand_addr, 0x3}, 0x10) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x51) setxattr$security_evm(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.evm\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xc7, 0x0) lseek(r1, 0x7fffffffffffffff, 0x3) r2 = getpid() ptrace(0x10, r2) ptrace$getsig(0x2, r2, 0xffffffffff600043, &(0x7f0000000300)) r3 = syz_open_procfs(r2, &(0x7f00000001c0)='net/stat\x00') getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000200)=0x9, &(0x7f0000000240)=0x4) 02:46:21 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xc, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) [ 1449.304096][T24393] ntfs: (device loop5): parse_options(): The show_sys_files option requires a boolean argument. 02:46:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000000f0000000000000000000000000000000000000005000000"], 0x8758) 02:46:22 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x309102, 0x0) fcntl$setpipe(r0, 0x407, 0x9) lseek(r0, 0x7fffffffffffffff, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) connect$rose(0xffffffffffffffff, &(0x7f0000000140)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x40) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r5 = getpid() ptrace(0x10, r5) ptrace$getsig(0x2, r5, 0xffffffffff600043, &(0x7f0000000300)) mq_notify(r4, &(0x7f0000000080)={0x0, 0x2f, 0x4, @tid=r5}) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r8, 0xc018620c, &(0x7f0000000100)) ioctl$sock_inet_tcp_SIOCINQ(r8, 0x541b, &(0x7f00000000c0)) 02:46:22 executing program 5: syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0x2, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@show_sys_files_no='show_sys_files=no', 0x7}]}) 02:46:22 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xd, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) [ 1449.725362][T24607] binder: 24536:24607 ioctl c018620c 20000100 returned -1 [ 1449.788293][T24607] binder: 24536:24607 ioctl c018620c 20000100 returned -1 02:46:22 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000100)={0xffffffffffffffff}, 0x4, {0xa, 0x4e22, 0xb2, @empty, 0xfffffff8}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000180)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0), r1}}, 0x18) r2 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r2, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) [ 1449.829388][T24607] binder: 24536:24607 ioctl 541b 200000c0 returned -22 [ 1449.862296][T24609] ntfs: (device loop5): parse_options(): The show_sys_files option requires a boolean argument. [ 1449.986070][T24609] ntfs: (device loop5): parse_options(): The show_sys_files option requires a boolean argument. 02:46:22 executing program 5: syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0x3, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@show_sys_files_no='show_sys_files=no', 0x7}]}) 02:46:22 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') lseek(r0, 0x7fffffffffffffff, 0x3) 02:46:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000100000000000000000000000000000000000000005000000"], 0x8758) [ 1450.351443][T24911] ntfs: (device loop5): parse_options(): The show_sys_files option requires a boolean argument. 02:46:23 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xe, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) 02:46:23 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) lseek(r2, 0x6, 0x1) getdents64(r2, &(0x7f0000000000)=""/43, 0x2b) getdents64(r2, &(0x7f0000000140)=""/147, 0x93) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1a) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r1) r7 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_SUBDEV_G_CROP(r7, 0xc038563b, &(0x7f0000000200)={0x0, 0x0, {0x3, 0xffffffff, 0x9, 0x8000}}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) ioctl$VFIO_IOMMU_UNMAP_DMA(r6, 0x3b72, &(0x7f0000000000)={0x18, 0x0, 0x9, 0xffffffffffff5e19}) 02:46:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000180000000000000000000000000000000000000005000000"], 0x8758) [ 1450.580015][T24911] ntfs: (device loop5): parse_options(): The show_sys_files option requires a boolean argument. 02:46:23 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x3) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2400, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r1, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f0000000080)="a0e64a0976effdf28512c068cf0a326978ea5d413957472c3433ba0ba6b73118b7dd0a9fa2a727d7c24ca51b668ccba48c51f7d0d8db56d65e20ee8b3e3a3bb4d0a7e5f183a25fa1abbdae4141701ce9b4eb880e820ec5319b2cfccb477b018d42b776c009e9aaf4f3b1236fff2110ec3b5cdc52d1a4e197a1d0aaadedeeaffffd", 0x81}) [ 1450.721151][T25039] binder: 24986:25039 ioctl c018620c 20000100 returned -1 [ 1450.747031][T25039] binder: 24986:25039 ioctl 3b72 20000000 returned -22 02:46:23 executing program 5: syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0x4, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@show_sys_files_no='show_sys_files=no', 0x7}]}) 02:46:23 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000100)={r7, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0]}) lseek(r0, 0x0, 0x3) 02:46:23 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) sendto(r1, &(0x7f00000000c0)="d601370d77257ac6bacab341c2d6b593c576bcf0d9d7fa90cb85bb2142c808cfff3372b7917d1676bb842c9bc099abf975464290bf68956624d89eb8429480f9af5c3211f0ee35591f2901a1d8be65c420d7baa2c4cf798206e20f3aad75b30a726959033383ee7692690cd6b7cf2d52fa1bf30e0eb1ab2d584294bed2a15d5bf3fe7a84d7925059537aa89a4ec36febde5b3267abdceec0352b84c322606b69546af4aec58980ff0ee98a35335e5582606df90b69d6d23ffc8c7ff9f23a405805f53e38d79e93bede9f67ebe54121d28efcbe53d33d686b174ea09f5ec479a18573f8a5d51fa3b822ffa776e257d8616b5c9d0ca0c874bc72", 0xf9, 0x81, &(0x7f00000001c0)=@nfc_llcp={0x27, 0x1, 0x1, 0x7, 0x0, 0x3e, "ba4b4fc620fce804353281e8692e3c6019115fbb5dc194e7086c557e3858d7decfe5013d51b352fb900ba1d4656d37178219288df0aeb747c7cdbfe29d4e60", 0x8}, 0x80) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) 02:46:23 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xf, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) 02:46:23 executing program 4: open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) lseek(r0, 0x80, 0x0) [ 1451.076287][T25324] ntfs: (device loop5): parse_options(): The show_sys_files option requires a boolean argument. [ 1451.165449][T25354] binder: 25312:25354 ioctl c018620c 20000100 returned -1 [ 1451.192526][T25324] ntfs: (device loop5): parse_options(): The show_sys_files option requires a boolean argument. [ 1451.329235][T25382] bridge0: port 1(bridge_slave_0) entered learning state 02:46:24 executing program 5: syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0x5, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@show_sys_files_no='show_sys_files=no', 0x7}]}) 02:46:24 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000300000000000000000000000000000000000000005000000"], 0x8758) 02:46:24 executing program 3: r0 = open$dir(&(0x7f0000000280)='./file0\x00', 0x521000, 0x0) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x8b39, 0x1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="78f2cc1a120e283fd19c77f261ba06fa073dffb82e85159abbaefccc836a903088f30991e45e5ebe552adda38a33a2be1ce93e62949ce4bf595ac53915a299bfca8175a34dfa81b4e5d6f8b36627f865c59ed40e9a1882dd0f73d59e14ea6cb45c2b2c2b6c46462caf17ab088cca6af9bebb110692dc59a4bc1ffd400919a5679275537fdc50c1f7a8082cc50a99ec7d5417f2f7a4b5a600569f676a0bbf8c9134cb6bb63b7fac5422a10b05aa4ba79793a0edceb9478ca5788502527ede8dccd7f7915b013a4f4abb4b9e2dbebcf4991828c1a962015d08", 0xd8, 0x6}], 0x80, &(0x7f0000000200)={[{@data_ordered='data=ordered'}, {@errors_withdraw='errors=withdraw'}, {@nodiscard='nodiscard'}], [{@seclabel='seclabel'}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@audit='audit'}]}) lseek(r0, 0x0, 0x3) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2c3, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000002c0)=@gcm_256={{0x303}, "c260e170403891a7", "1faae67ae7c41d52763f3e8b71b85170e2b9f8cfbabe7e49b21b1939ef0e7d1a", "7c2f7cc2", "497267d8d65c7706"}, 0x38) 02:46:24 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0x10, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) 02:46:24 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x800, 0x3, {0x0, 0x0, 0x3, 0x0, 0xfffff43b}, 0x2}) socket$nl_xfrm(0x10, 0x3, 0x6) 02:46:24 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r3, 0x800455d1, &(0x7f0000000000)) lseek(r0, 0x7fffffffffffffff, 0x3) [ 1451.793005][T25781] gfs2: Unknown parameter 'seclabel' [ 1451.851631][T25804] binder: 25780:25804 ioctl c018620c 20000100 returned -1 [ 1451.869932][T25856] binder: 25806:25856 ioctl c018620c 20000100 returned -1 [ 1451.871433][T25769] ntfs: (device loop5): parse_options(): The show_sys_files option requires a boolean argument. [ 1451.917279][T25856] binder: 25806:25856 ioctl 800455d1 20000000 returned -22 02:46:24 executing program 3: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x226c03, 0x0) lseek(r0, 0x0, 0x3) stat(&(0x7f0000000040)='./file0\x00', 0x0) 02:46:24 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0x11, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) [ 1452.072851][T25769] ntfs: (device loop5): parse_options(): The show_sys_files option requires a boolean argument. 02:46:24 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x802) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000140)) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) move_mount(r3, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RWALK(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="640000006f614d0700200400004eda000004000000030000000000000001490000007f000000000000002003e390080700000000000002001004000000c298654f612f89ba99930000000200000000060000"], 0x64) 02:46:24 executing program 5: syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0x6, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@show_sys_files_no='show_sys_files=no', 0x7}]}) 02:46:24 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000440000000000000000000000000000000000000005000000"], 0x8758) 02:46:25 executing program 4: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x80, 0x0) lseek(r0, 0x7fffffffffffffff, 0x3) 02:46:25 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) r1 = getpid() ptrace(0x10, r1) ptrace$getsig(0x2, r1, 0xffffffffff600043, &(0x7f0000000300)) ptrace$peek(0x1, r1, &(0x7f0000000000)) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) sendto$llc(r4, &(0x7f0000000080)="f391d8e57939fab910b23b629861641c36d6b060bcbd0860c2250a14a1220dfbb8", 0x21, 0x4c000, &(0x7f00000000c0)={0x1a, 0x10f, 0x1, 0x2, 0x3, 0x1c, @random="20d77d1b1b03"}, 0x10) [ 1452.519438][T26313] binder: 26246:26313 ioctl c018620c 20000100 returned -1 [ 1452.563186][T26366] ntfs: (device loop5): parse_options(): The show_sys_files option requires a boolean argument. [ 1452.573851][ C1] [ 1452.573856][ C1] ===================================== [ 1452.573860][ C1] WARNING: bad unlock balance detected! [ 1452.573867][ C1] 5.6.0-rc3-next-20200228-syzkaller #0 Not tainted [ 1452.573870][ C1] ------------------------------------- [ 1452.573878][ C1] syz-executor.5/26366 is trying to release lock (rcu_callback) at: [ 1452.573902][ C1] [] rcu_core+0x592/0x1370 [ 1452.573905][ C1] but there are no more locks to release! [ 1452.573909][ C1] [ 1452.573909][ C1] other info that might help us debug this: [ 1452.573915][ C1] 1 lock held by syz-executor.5/26366: [ 1452.573918][ C1] #0: ffff8880909660d8 (&type->s_umount_key#53/1){+.+.}, at: alloc_super+0x152/0x910 [ 1452.573944][ C1] [ 1452.573944][ C1] stack backtrace: [ 1452.573955][ C1] CPU: 1 PID: 26366 Comm: syz-executor.5 Not tainted 5.6.0-rc3-next-20200228-syzkaller #0 [ 1452.573961][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1452.573964][ C1] Call Trace: [ 1452.573968][ C1] [ 1452.573982][ C1] dump_stack+0x188/0x20d [ 1452.574000][ C1] ? rcu_core+0x592/0x1370 [ 1452.574019][ C1] lock_release+0x586/0x7c0 [ 1452.574047][ C1] ? lock_downgrade+0x7f0/0x7f0 [ 1452.574071][ C1] ? lockdep_unregister_key+0x490/0x490 [ 1452.574086][ C1] rcu_core+0x5b2/0x1370 [ 1452.574106][ C1] ? __rcu_read_unlock+0x560/0x560 [ 1452.574209][ C1] __do_softirq+0x26c/0x99d [ 1452.574227][ C1] irq_exit+0x192/0x1d0 [ 1452.574239][ C1] smp_apic_timer_interrupt+0x19e/0x600 [ 1452.574252][ C1] apic_timer_interrupt+0xf/0x20 [ 1452.574262][ C1] [ 1452.574315][ C1] RIP: 0010:console_unlock+0xba8/0xf00 [ 1452.574328][ C1] Code: 89 48 c1 e8 03 42 80 3c 38 00 0f 85 36 03 00 00 48 83 3d 52 d6 37 08 00 0f 84 8e 01 00 00 e8 8f a3 16 00 48 8b 7c 24 28 57 9d <0f> 1f 44 00 00 eb 88 e8 7c a3 16 00 c7 05 72 1c 04 0b 00 00 00 00 02:46:25 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x1f, 0x3) 02:46:25 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) getpeername$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) ioctl$VIDIOC_SUBDEV_G_FMT(r4, 0xc0585604, &(0x7f00000000c0)={0x0, 0x0, {0x3, 0x2, 0x1013, 0x13, 0xc, 0x4, 0x0, 0x5}}) move_mount(r1, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) [ 1452.574334][ C1] RSP: 0018:ffffc90000cbf880 EFLAGS: 00000212 ORIG_RAX: ffffffffffffff13 [ 1452.574345][ C1] RAX: 0000000000040000 RBX: 0000000000000200 RCX: ffffc900143d9000 [ 1452.574351][ C1] RDX: 0000000000016e14 RSI: ffffffff815bf1f1 RDI: 0000000000000212 [ 1452.574358][ C1] RBP: 0000000000000000 R08: ffff88804dbf61c0 R09: fffffbfff1334569 [ 1452.574365][ C1] R10: fffffbfff1334568 R11: 0000000000000001 R12: ffffffff84a5da50 [ 1452.574372][ C1] R13: ffffffff8a15c930 R14: 0000000000000075 R15: dffffc0000000000 [ 1452.574418][ C1] ? netconsole_netdev_event+0x2a0/0x2a0 02:46:25 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000480000000000000000000000000000000000000005000000"], 0x8758) [ 1452.574433][ C1] ? console_unlock+0xba1/0xf00 [ 1452.574452][ C1] vprintk_emit+0x2a7/0x710 [ 1452.574467][ C1] vprintk_func+0x79/0x17e [ 1452.574488][ C1] printk+0xba/0xed [ 1452.574500][ C1] ? kmsg_dump_rewind_nolock+0xd9/0xd9 [ 1452.574512][ C1] ? trace_hardirqs_on+0x55/0x220 [ 1452.574524][ C1] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 1452.574535][ C1] ? ___ratelimit+0x59/0x573 [ 1452.574576][ C1] __ntfs_error.cold+0x91/0xc7 [ 1452.574588][ C1] ? __ntfs_warning+0x160/0x160 [ 1452.574598][ C1] ? __lock_acquire+0x18c3/0x5270 [ 1452.574612][ C1] ? pointer+0x10b/0x680 [ 1452.574624][ C1] ? file_dentry_name+0x120/0x120 [ 1452.574692][ C1] parse_options+0x19b9/0x1c60 [ 1452.574710][ C1] ? kasan_unpoison_shadow+0x30/0x40 [ 1452.574720][ C1] ? ntfs_put_super+0x1710/0x1710 [ 1452.574732][ C1] ? kmem_cache_alloc_trace+0x340/0x7d0 [ 1452.574745][ C1] ? __raw_spin_lock_init+0x28/0x100 [ 1452.574756][ C1] ntfs_fill_super+0x1cb/0x3080 [ 1452.574769][ C1] ? set_blocksize+0x24f/0x2c0 [ 1452.574783][ C1] mount_bdev+0x305/0x3c0 [ 1452.574794][ C1] ? load_system_files+0x6f50/0x6f50 [ 1452.574806][ C1] ? ntfs_rl_punch_nolock+0x1da0/0x1da0 [ 1452.574819][ C1] legacy_get_tree+0x105/0x220 [ 1452.574829][ C1] ? ns_capable_common+0xe2/0x100 [ 1452.574840][ C1] vfs_get_tree+0x89/0x2f0 [ 1452.574851][ C1] do_mount+0x1306/0x1a60 [ 1452.574864][ C1] ? copy_mount_string+0x40/0x40 [ 1452.574876][ C1] ? _copy_from_user+0x123/0x190 [ 1452.574889][ C1] __x64_sys_mount+0x18f/0x230 [ 1452.574903][ C1] do_syscall_64+0xf6/0x790 [ 1452.574915][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1452.574923][ C1] RIP: 0033:0x45f29a [ 1452.574933][ C1] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 2a 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 1452.574938][ C1] RSP: 002b:00007fc09a078a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1452.574948][ C1] RAX: ffffffffffffffda RBX: 00007fc09a0796d4 RCX: 000000000045f29a 02:46:25 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0x12, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) [ 1452.574954][ C1] RDX: 00007fc09a078ae0 RSI: 00000000200003c0 RDI: 00007fc09a078b00 [ 1452.574960][ C1] RBP: 000000000076bf00 R08: 00007fc09a078b40 R09: 00007fc09a078ae0 [ 1452.574966][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000ffffffff [ 1452.574972][ C1] R13: 0000000000000be7 R14: 00000000004ce08e R15: 000000000076bf0c [ 1453.206198][T26527] binder: 26519:26527 ioctl c018620c 20000100 returned -1 02:46:26 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x0, 0x4010, 0xffffffffffffffff, 0x10000000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000000000001410000001c001700000000000000006574683a6d6163766c616e31000000004b2dfd4ba1c5cadd6880a8c9df9bc7cf000cae9199efaefc2d6630a4086b5abc5d8bee831b61997d9da3e5cd74e9b39d441fc32608cede0406242befe5d97da342d45a6ae2349aeb5daa0e0b6fe3066abb924ca6a219323568ab6462de"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x300, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x8111) [ 1453.283874][T26366] ntfs: (device loop5): parse_options(): The show_sys_files option requires a boolean argument. 02:46:26 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@loopback, @in=@empty}}, {{@in=@multicast1}}}, &(0x7f0000000000)=0xe8) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x80, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ocfs2_control\x00', 0x8a000, 0x0) renameat(r6, &(0x7f0000000240)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00') ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) r9 = dup2(r8, r5) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r9, 0xc018620c, &(0x7f0000000100)) setsockopt$netrom_NETROM_T2(r9, 0x103, 0x2, &(0x7f00000001c0)=0x9, 0x4) 02:46:26 executing program 5: syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0x7, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@show_sys_files_no='show_sys_files=no', 0x7}]}) 02:46:26 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) ioctl$TCSETAW(r4, 0x5407, &(0x7f00000000c0)={0x1, 0x8000, 0x6, 0x8000, 0x2, "4c9f97c1e2bed89a"}) lseek(r1, 0x6, 0x1) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r5) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000100)) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xa, 0x0, 0x2, 0x0, 0x7f, 0xc9}, {0x2, 0x7, 0x1, 0x7, 0x3, 0x800, 0xf2}]}) getdents64(r1, &(0x7f0000000000)=""/43, 0x2b) statx(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x10, &(0x7f0000000180)) [ 1453.507606][T26779] binder: 26744:26779 ioctl c018620c 20000100 returned -1 02:46:26 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0x13, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) [ 1453.556321][T26814] binder: 26769:26814 ioctl c018620c 20000100 returned -1 [ 1453.636202][T26878] binder: 26846:26878 ioctl c018620c 20000100 returned -1 [ 1453.655346][T26866] ntfs: (device loop5): parse_options(): The show_sys_files option requires a boolean argument. [ 1453.667152][T26878] binder: 26846:26878 ioctl 5407 200000c0 returned -22 02:46:26 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x4100, 0xe0b1ed9015458c3e) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x44) [ 1453.746601][T26878] binder: 26846:26878 ioctl c018620c 20000100 returned -1 02:46:26 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000000)={0x1, {0x8, 0x7, 0x101, 0x3, 0x8, 0xffffffe0}}) lseek(r0, 0x7fffffffffffffff, 0x3) 02:46:26 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffe, 0x3) [ 1453.861929][T26866] ntfs: (device loop5): parse_options(): The show_sys_files option requires a boolean argument. 02:46:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000f40100000000000000000000000000000000000005000000"], 0x8758) 02:46:26 executing program 5: syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@show_sys_files_no='show_sys_files=no', 0x7}]}) 02:46:26 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0x14, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) [ 1454.044812][T27292] binder: 27213:27292 ioctl c018620c 20000100 returned -1 02:46:26 executing program 3: open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/145, 0x91) [ 1454.151445][T27371] ntfs: (device loop5): parse_options(): The show_sys_files option requires a boolean argument. [ 1454.176624][T27292] binder: 27213:27292 ioctl 401c5504 20000000 returned -22 02:46:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000180200000000000000000000000000000000000005000000"], 0x8758) 02:46:27 executing program 5: syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0xa, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@show_sys_files_no='show_sys_files=no', 0x7}]}) 02:46:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001580)={r4, 0x0, 0x40, 0xf0, &(0x7f00000012c0)="8f6e921d0a57c8a5c51e1c2a1e2c90ff6dcf76333ab2b8de0317b3f9b87c6ac34353bb0960d5a697a3fba5952f78611817aad88f6257cb5ace076219f57fbb26", &(0x7f0000001300)=""/240, 0x5, 0x0, 0xd4, 0x7a, &(0x7f0000001400)="b9df7c47877311e82231a66a1cc5759e5713ef7eeb95ab12adb9c7867864dd66fef7e09451bddf034f37fc996d1ee8dd3e00928018d49119d16792abb174842d0f462aeea4c026a236b753c0c58843b128353b02f2b79718c77e844e51a5d7972309acb0e650dbc89792873721509a2fcea2d9cb65546f2aaca3b64ac4598ad70bc9f63d29ff80178e7a2467bb1069fc03c28393ef7a335973afefcc610bbff496a5b3664bf1b58a0c6db232e2d1af5f976f39bba21fd0753778f29ce0b6bf7576f890e8d9367b22ec82ebb85201f80c6517909e", &(0x7f0000001500)="6faf7e722aaf55fdd49594c7c7b11f50481eedd7ff949bcbbe7de9f59ed1e2411f9df9a3508ff475ac4a1819386aff3c8e870f8efc0977d1bddb30d3eeb05ae5e7bf7e90bef35a49bcf3dcb407000e679a5b8c24880c4c1879d5ba317b3172a4001d004dfc905d394e368137ef4fae13a5128d47c233dba306ca"}, 0x40) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001180)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800900010069706970000000002c000280060011000000000008000100", @ANYRES32=r5, @ANYBLOB="050081000000000000000400040000000608001c0000000000000000", @ANYRES32=r4, @ANYBLOB="2dc7cbaa913aa8ab4ec49250bafa3563d48d60950fe344e1cde3c85a5d6d7fa815919d15a8708874c2b75d9d0426f4b7e239e59b0aa04169f93b644ba283753ee9d5953a49f5e6"], 0x64}}, 0x240048d5) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001800)=ANY=[@ANYBLOB='x\x00hF', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0xc800}, 0x4) r6 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) ioctl$VFIO_SET_IOMMU(r6, 0x3b66, 0x8) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001280)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2d16d187802b229cab1", 0x37}], 0x1, 0x0, 0x0, 0xf000}, 0x0) recvmsg(r7, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/243, 0xf3}], 0x2, &(0x7f0000001740)=""/174, 0xae}, 0x2042) r8 = open$dir(&(0x7f0000000040)='.\x00', 0x100, 0x0) lseek(r8, 0x7fffffffffffffff, 0x3) 02:46:27 executing program 3: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x115) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) sendmsg(r1, &(0x7f0000000540)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)="6c435e44a41c852d4b48013e4d230c498a8925ca20f34bc1f49930ffa85c8396ac58cd7b704229085f17a3893cd62774bb3a548019a96dd34a7f6a51b80dd17f36d11c40c2ced65ab4c1758792e4e922a1f7217d1803f131eb72715f2e1de12f11eb4eb58f1467e5b466baf338b0d34bbd5bed6bcf701191cbfadf2e79aa609181b3c13731d7c904f718b48402d487c964a2ec381019632564de8c822ebfca1908154ba358f668240e80a3", 0xab}, {&(0x7f0000000180)="eb6d3f8aaab9be548f4488952427fee30eb52c0b04c535b73a18d971b59a5f4c2323252b7fcb7a511b20668bcb96ad75f9fa529cc2f87f92f8679b4558d7470e0cebec0ca18d45d384f4b0c780ac6a6a0e799912d5dc5b79d40935df877040539833462bc803fe2a53ccc37392d8a5ac0df891f91d87f6275001bc3016e71fa8204d764ce90d216e3f088ed0071a32a4befd50c5b9c71dfa39db13759d520ddddc64230a7345b57c4993adca5462830ac97ff35889", 0xb5}], 0x2, &(0x7f0000000280)=[{0xb0, 0x1f, 0xfff, "35ff485825432af9236d13db90b4a620d1317d0fd12f5524def8eeea4a2b3323f90f62166608958ffe13cf0318dc9f6c83362eb422b10833410bd156a1ee602910b9a00c77286b2a658af7fd1e23aad8a7c79bf67914dc196a4ceb02f2286f145ff1eca74bab4d0e0821172c04de26fcd6f838ea7243c88b56ae698cbae6827da8e385b2a58cdf40655d13ab8fbf31713123d6bd5d33276f0fc556e8"}, {0x18, 0x10b, 0x3, "a404f9c6248ff936"}, {0x100, 0x6, 0x4, "ccdf8f114f6b045c7e46766d68eaf96793f00cef76c64373c4de33bc5959e6a7f70b7706018b6b61cf10612ad2008949a7814f17623baa95dcae08a1868f5354081822aacab26971a4ac6e00210fbe5ca50b0e91661d79ccb3d988852e4cb8e63378ee2d85fd88f0a03b83361ca2ae8cf5fb38b1b92086e8e46f96f5fb502b36861f90e707090e8bdef4965dd203e01a1e90c1616a08d31490caacd8bd4b74298653f6c76d2fb576d387f515a0daa65dcc2c841ddabb2d672c1376ef7bd275b2b1f559274568048bdb637b67aa3c5dd1a0a252c282230b90fd4b56b16891f91fca0f16d1001f03ba07554ad4a16be9"}, {0x40, 0x128, 0x401, "78929fe0155717e523c1e7631f507c8b8fd80ea448d39fa1d61dbd7c74d5e674357d51c3fabaf43b458b9d2768d37f"}, {0xb8, 0xff, 0x0, "7e6a34d07470844d42b5076e086e87ad4d9488e54d25a018d11ab425a2ba948ea9425c34a88f182f00a625079cbbf3ba2aec4a08abed3f0c28bed89b663e8d9014f807d2976840ee2d02b433b238d21a00c5cf1e8e10f5f88f83148afa37ba228582501fad3fb4b5d2d7a40813d823d11ce74498979a2e867c145086a85196c644f6fe8455ba17cf490ede27768f2adcf7116273c580f87104e5d487c20a189d18"}], 0x2c0}, 0x40000) lseek(r0, 0x9, 0x3) 02:46:27 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0x15, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) [ 1454.562909][T27591] binder: BINDER_SET_CONTEXT_MGR already set [ 1454.611079][T27591] binder: 27589:27591 ioctl 40046207 0 returned -16 02:46:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000780200000000000000000000000000000000000005000000"], 0x8758) 02:46:27 executing program 5: syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@show_sys_files_no='show_sys_files=no', 0x7}]}) [ 1454.705296][T27615] bridge0: port 1(bridge_slave_0) entered learning state 02:46:27 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x3) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r2 = accept(r1, &(0x7f0000000100)=@nfc, &(0x7f0000000180)=0x80) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000001c0)={0x10001, {{0x2, 0x4e24, @broadcast}}, 0x0, 0x3, [{{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e24, @rand_addr=0xb5}}, {{0x2, 0x4e23, @remote}}]}, 0x210) ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0) 02:46:27 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0x16, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) 02:46:27 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x2e, &(0x7f0000000080)=""/81, &(0x7f0000000000)=0x51) [ 1454.994128][T27918] bridge0: port 1(bridge_slave_0) entered learning state 02:46:28 executing program 5: syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0x48, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@show_sys_files_no='show_sys_files=no', 0x7}]}) 02:46:28 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0x17, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) 02:46:28 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000840200000000000000000000000000000000000005000000"], 0x8758) 02:46:28 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000140)={0xa00000, 0x5, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x990afe, 0x9, [], @value=0x4}}) syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) r6 = dup2(r4, r5) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x101, 0x1, {0x4, 0xe898, 0x40}}) r7 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r7, 0x7fffffffffffffff, 0x3) 02:46:28 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0x18, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) [ 1455.435436][T28235] binder: BINDER_SET_CONTEXT_MGR already set [ 1455.491019][T28235] binder: 28181:28235 ioctl 40046207 0 returned -16 02:46:28 executing program 3: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0xd) lseek(r0, 0x0, 0x3) 02:46:28 executing program 5: syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0x4c, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@show_sys_files_no='show_sys_files=no', 0x7}]}) 02:46:28 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) write$P9_ROPEN(r6, &(0x7f0000000140)={0x18, 0x71, 0x2, {{0x0, 0x0, 0x1}, 0x1}}, 0x18) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) getsockopt$inet_dccp_int(r3, 0x21, 0x3, &(0x7f00000000c0), &(0x7f0000000080)=0x4) [ 1455.738535][T28441] __ntfs_error: 7 callbacks suppressed [ 1455.738548][T28441] ntfs: (device loop5): parse_options(): The show_sys_files option requires a boolean argument. 02:46:28 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @rand_addr=0xffffffff}, {0x2, 0x4e23, @rand_addr=0xe44}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, 0x43, 0x0, 0x0, 0x0, 0x3, 0x0, 0x401, 0xfffffffffffffffa, 0xfff}) lseek(r0, 0x7fffffffffffffff, 0x3) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000140)='em1proceth0vmnet1user\xaa-self:+cgroup\x00', &(0x7f0000000180)="00de86749e1e84a4b329269a555e4582df0b10a6627a90d811e120f0ff1559394c49d1ea1a1d68c1fda2bceb59dbfcaec3ec93093e77c0e33c4948b9dbae0f47cceeedb865e624255b829e1f2f1abc8735b28e723368941e5b72635218f1de739892b83cddd510b6fc356f2181ecc8ebf4e3d4", 0x73) 02:46:28 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cbac4c07d57d995b61e89a4530f92304f242b416ae9eeefc0e9c60ebab1c176bf9bb4dde984510c82dc2b9381b72b100d0682fd0a0c4a06b29e220dc28dac72599456d4c4e6f3fe2d1dee18f638ac947b5e026a3287c84ccc727d6ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb398dff1db3df9858837458a4ca03767c69cee1b6be484e4c9507af216bd8ed42f7dd5adb8e49f4a94615e49c08c9a208e4557cd4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9d441d42f49db6d4a47f2e898961cb43e438c4e41ae43ea118e1407a601dae4b8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa2285b6e4afd8c1cc3eb215ba22f43115dbba9dc7beedb130d9f2be90133a0e3ed34258b330cdf0c92abaacb8c9370634060105baa664953514605fba394aa64e03fb5da791ecf9c873aa021945b985a8a66e9cfa9d9e57033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bcaabd6948537faf9fff8dc4006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11a767761fe46169b2b5b8cdedb695cc425fe203d2f2655a76865c2cb4e2470fcfb1248c0add5431a7fbcb0ef4f66a09af93a09fab1daae4b518d7a5d9d54008694c0f3b626d6afcde5fc5e7b3b3f03454cc8f05b8cb621d09240dc200443e7e708ba45026f226dd5f6aec66374d84c02fc49eb697e3161ca77690f4e4ed90301cc78355ff012097d625dbeb84f2cac23dfdfe2ea5a9e235637b115d8cbfe481c8abce2729c9955e80b698776f1dc14728d50b54586115980590d06b9b100b9d2fe891342cd8a961f036e431d70260cdb560d3ffa02d91fd08b9ec122d944ac55de4f71a1675c3c432e8e3e348ae23301577cae76a6abf6557fc227b3305a912572b47156f7a3f18da8e82b153833c4a7ea1cab4f5fe873414f817ed087b79042478f64a5007fa3b2a49042c3e507bb2a0a84932fdd6bd79effb7aa5192f442c3a6b4b36550f9f0c10e1dca208584eed38f7ab718c9729a260150bcba99adb86"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0x19, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) 02:46:28 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000880200000000000000000000000000000000000005000000"], 0x8758) [ 1455.963030][T28557] binder: 28498:28557 ioctl c018620c 20000100 returned -1 [ 1455.969712][T28441] ntfs: (device loop5): parse_options(): The show_sys_files option requires a boolean argument. [ 1455.998643][T28561] binder: 28559:28561 ioctl c018620c 20000100 returned -1 [ 1456.026407][T28557] binder: 28498:28557 ioctl c018620c 20000100 returned -1 [ 1456.059786][T28561] binder: 28559:28561 ioctl 890c 20000080 returned -22 02:46:28 executing program 5: syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0x60, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@show_sys_files_no='show_sys_files=no', 0x7}]}) 02:46:29 executing program 3: lseek(0xffffffffffffffff, 0x0, 0x3) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@v1={0x2, "c90ef6aec080f6a24856df4d065261a7413a"}, 0x13, 0x2) 02:46:29 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1a, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) [ 1456.316616][T28874] ntfs: (device loop5): parse_options(): The show_sys_files option requires a boolean argument. 02:46:29 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x3) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000080)=0xfe4e) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) getpeername$tipc(r3, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100293ad8a90600d66b9b4b4259a5bd7027fcdbdf3dfb8c1a785368080001268f00"], 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x200000c0) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000100)={0x990000, 0xfffffffb, 0x1, r0, 0x0, &(0x7f00000000c0)={0x9b090e, 0x8001, [], @value=0x10001}}) [ 1456.506927][T28874] ntfs: (device loop5): parse_options(): The show_sys_files option requires a boolean argument. 02:46:29 executing program 3: open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) 02:46:29 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x121000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x24, r5, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) lseek(r0, 0x7fffffffffffffff, 0x3) 02:46:29 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1b, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) 02:46:29 executing program 5: syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0x68, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@show_sys_files_no='show_sys_files=no', 0x7}]}) 02:46:29 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000300000000000000000000000000000000000005000000"], 0x8758) 02:46:29 executing program 3: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x0) lseek(r0, 0x0, 0x3) 02:46:29 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') 02:46:29 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x3) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000780)="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", 0x199, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r1, r3}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={'tgr128-generic\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(0x0, r5, 0x0) r6 = getegid() getgroups(0x1, &(0x7f0000000540)=[r6]) add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000940)="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", 0x1000, 0xffffffffffffffff) keyctl$chown(0x4, r1, r5, r6) [ 1457.001162][T29204] ntfs: (device loop5): parse_options(): The show_sys_files option requires a boolean argument. 02:46:29 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2e0, 0xe80, 0x40000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) 02:46:29 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000e80300000000000000000000000000000000000005000000"], 0x8758) [ 1457.192009][T29204] ntfs: (device loop5): parse_options(): The show_sys_files option requires a boolean argument. 02:46:30 executing program 5: syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0x6c, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@show_sys_files_no='show_sys_files=no', 0x7}]}) 02:46:30 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x82202, 0x0) lseek(r0, 0x0, 0x3) 02:46:30 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) ioctl$VT_DISALLOCATE(r4, 0x5608) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) r7 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) r9 = dup2(r8, r7) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r9, 0xc018620c, &(0x7f0000000100)) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000080)) [ 1457.451179][T29584] ntfs: (device loop5): parse_options(): The show_sys_files option requires a boolean argument. 02:46:30 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000f00300000000000000000000000000000000000005000000"], 0x8758) 02:46:30 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xd, 0x40000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) [ 1457.679156][T29584] ntfs: (device loop5): parse_options(): The show_sys_files option requires a boolean argument. 02:46:30 executing program 5: syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0x74, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@show_sys_files_no='show_sys_files=no', 0x7}]}) 02:46:30 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe4e, 0x40000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) 02:46:30 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'bridge0\x00', {0x2, 0x4e23, @multicast2}}) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) 02:46:30 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0xea) lseek(r0, 0x0, 0x3) [ 1458.109335][T29958] ntfs: (device loop5): parse_options(): The show_sys_files option requires a boolean argument. 02:46:31 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="38f971c4", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000000000001410000001c001700000000000000006574683a6d6163766c616e31000000004b2dfd4ba1c5cadd6880a8c9df9bc7cf000cae9199efaefc2d6630a4086b5abc5d8bee831b61997d9da3e5cd74e9b39d441fc32608cede0406242befe5d97da342d45a6ae2349aeb5daa0e0b6fe3066abb924ca6a219323568ab6462de"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r5, 0x400, 0x70bd25, 0x25dfdbff, {{}, {}, {0x1c, 0x18, {0x0, @bearer=@l2={'eth', 0x3a, 'team_slave_1\x00'}}}}, ["", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x24040010}, 0x4004000) lseek(r0, 0x7fffffffffffffff, 0x3) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r8, 0xc018620c, &(0x7f0000000100)) ioctl$KDGKBENT(r8, 0x4b46, &(0x7f0000000140)={0x0, 0x3, 0xd9f}) 02:46:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000000c0)=0x81, 0x4) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000080)) lseek(r3, 0x0, 0x3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x9, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b38b) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={r7, @in6={{0xa, 0x4e21, 0x0, @empty}}, 0x40, 0x2, 0x546, 0x273f9dca, 0xa, 0x1ff, 0xfa}, &(0x7f0000000200)=0x9c) 02:46:31 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000f10300000000000000000000000000000000000005000000"], 0x8758) [ 1458.338660][T29958] ntfs: (device loop5): parse_options(): The show_sys_files option requires a boolean argument. 02:46:31 executing program 5: syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0x7a, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@show_sys_files_no='show_sys_files=no', 0x7}]}) 02:46:31 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x20000f40, 0x40000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) [ 1458.447936][T30174] binder: 30172:30174 ioctl c018620c 20000100 returned -1 [ 1458.483879][T30175] binder: 30171:30175 ioctl c018620c 20000100 returned -1 [ 1458.529287][T30175] binder: 30171:30175 ioctl c018620c 20000100 returned -1 02:46:31 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0xb, 0x101, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x13, 0x1, 'vboxnet1vmnet1\x00'}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x6, 0x1, '^\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0x8, 0x1, 'GPL\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x24044040) lseek(r0, 0x0, 0x3) 02:46:31 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x40000000, 0x40000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) 02:46:31 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x1ab442, 0x120) lseek(r0, 0x7fffffffffffffff, 0x3) 02:46:31 executing program 5: syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0x300, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@show_sys_files_no='show_sys_files=no', 0x7}]}) [ 1458.837002][T30496] binder: 30495:30496 ioctl c018620c 20000100 returned -1 02:46:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8001, @remote, 0x62b}, 0x20) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0x0, 0x3) 02:46:31 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cbac4c07d57d995b61e89a4530f92304f242b416ae9eeefc0e9c60ebab1c176bf9bb4dde984510c82dc2b9381b72b100d0682fd0a0c4a06b29e220dc28dac72599456d4c4e6f3fe2d1dee18f638ac947b5e026a3287c84ccc727d6ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb398dff1db3df9858837458a4ca03767c69cee1b6be484e4c9507af216bd8ed42f7dd5adb8e49f4a94615e49c08c9a208e4557cd4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9d441d42f49db6d4a47f2e898961cb43e438c4e41ae43ea118e1407a601dae4b8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa2285b6e4afd8c1cc3eb215ba22f43115dbba9dc7beedb130d9f2be90133a0e3ed34258b330cdf0c92abaacb8c9370634060105baa664953514605fba394aa64e03fb5da791ecf9c873aa021945b985a8a66e9cfa9d9e57033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bcaabd6948537faf9fff8dc4006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11a767761fe46169b2b5b8cdedb695cc425fe203d2f2655a76865c2cb4e2470fcfb1248c0add5431a7fbcb0ef4f66a09af93a09fab1daae4b518d7a5d9d54008694c0f3b626d6afcde5fc5e7b3b3f03454cc8f05b8cb621d09240dc200443e7e708ba45026f226dd5f6aec66374d84c02fc49eb697e3161ca77690f4e4ed90301cc78355ff012097d625dbeb84f2cac23dfdfe2ea5a9e235637b115d8cbfe481c8abce2729c9955e80b698776f1dc14728d50b54586115980590d06b9b100b9d2fe891342cd8a961f036e431d70260cdb560d3ffa02d91fd08b9ec122d944ac55de4f71a1675c3c432e8e3e348ae23301577cae76a6abf6557fc227b3305a912572b47156f7a3f18da8e82b153833c4a7ea1cab4f5fe873414f817ed087b79042478f64a5007fa3b2a49042c3e507bb2a0a84932fdd6bd79effb7aa5192f442c3a6b4b36550f9f0c10e1dca208584eed38f7ab718c9729a260150bcba99adb86"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xe80, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) 02:46:32 executing program 5: syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0x500, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@show_sys_files_no='show_sys_files=no', 0x7}]}) 02:46:32 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000f20300000000000000000000000000000000000005000000"], 0x8758) 02:46:32 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x9, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b38b) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000080)={r5, @in6={{0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, [], 0x43}, 0x401}}, [0x2, 0x24, 0x4, 0xd4ec, 0x1, 0x8, 0x7, 0x1, 0x1, 0x1a31a98a, 0xfff, 0x9, 0x1ff, 0xc000000000000000, 0x8001]}, &(0x7f0000000000)=0x100) lseek(r0, 0x7fffffffffffffff, 0x3) 02:46:32 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x12980, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000080)) 02:46:32 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000002, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) 02:46:32 executing program 5: syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0x600, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@show_sys_files_no='show_sys_files=no', 0x7}]}) 02:46:32 executing program 4: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) read(r1, &(0x7f0000000040)=""/134, 0x86) lseek(r0, 0x7fffffffffffffff, 0x3) 02:46:32 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) lseek(r0, 0x0, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) write$P9_RFLUSH(r3, &(0x7f0000000140)={0x7, 0x6d, 0x1}, 0x7) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000100)) 02:46:32 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000f30300000000000000000000000000000000000005000000"], 0x8758) 02:46:32 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000004, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) 02:46:32 executing program 5: syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0x700, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@show_sys_files_no='show_sys_files=no', 0x7}]}) 02:46:32 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x8000400000000001, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)) sendmsg$IPSET_CMD_TEST(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x158, 0xb, 0x6, 0x3, 0x0, 0x0, {0x8, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6c395892}, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0xfa9}}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xfff}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x2}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x9}]}, @IPSET_ATTR_DATA={0x78, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7fffffff}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_macvtap\x00'}, @IPSET_ATTR_BYTES={0xc}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xd4}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x80000000}, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x867}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x401}, @IPSET_ATTR_ADT={0x4c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x9}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={[], [], @remote}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}]}, 0x158}, 0x1, 0x0, 0x0, 0x4040}, 0x805) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000080)=0x30) [ 1460.033498][T31507] binder: 31444:31507 ioctl c018620c 20000100 returned -1 [ 1460.219911][T31588] binder: 31515:31588 ioctl c018620c 20000100 returned -1 02:46:33 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'osx.', 'systemem0[vmnet0vboxnet1self/\x00'}, &(0x7f00000000c0)='selinuxsecurity\xd7selfposix_acl_access.\xdcGPL:eth0,vmnet1]\x00', 0x37, 0x1) 02:46:33 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000007, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) 02:46:33 executing program 5: syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0xa00, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@show_sys_files_no='show_sys_files=no', 0x7}]}) 02:46:33 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000f40300000000000000000000000000000000000005000000"], 0x8758) 02:46:33 executing program 4: open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) 02:46:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000001140)=0x1, 0x4) r6 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x1, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) fcntl$setown(r8, 0x8, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_STATS(r7, 0x80f86406, &(0x7f0000000080)=""/4096) newfstatat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', &(0x7f00000010c0), 0x2000) lseek(r6, 0x0, 0x3) 02:46:33 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000008, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) 02:46:33 executing program 5: syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0x1020, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@show_sys_files_no='show_sys_files=no', 0x7}]}) 02:46:33 executing program 4: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x83, 0xa49e6a6d057278b4) lseek(r0, 0x7fffffffffffffff, 0x3) [ 1460.919716][T32050] binder: 32048:32050 ioctl c018620c 20000100 returned -1 [ 1461.078112][T32138] __ntfs_error: 11 callbacks suppressed [ 1461.078124][T32138] ntfs: (device loop5): parse_options(): The show_sys_files option requires a boolean argument. 02:46:33 executing program 4: clock_adjtime(0x2, &(0x7f0000000080)={0x2, 0x4f, 0x7, 0x0, 0x1, 0x1ff800000000000, 0x9, 0x4, 0x3fffffffc00000, 0x1, 0x9, 0x7fffffff, 0x40, 0x4, 0x2100000006, 0xb, 0x1, 0x10001, 0x200000000000fd01, 0x5c, 0x0, 0x8, 0x1f, 0x3fe, 0x80000008, 0x40}) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@random={'os2.', '\x00'}, &(0x7f00000001c0)='(\x00', 0x2, 0x1) lseek(r0, 0x7fffffffffffffff, 0x3) 02:46:33 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x401, 0x0) 02:46:34 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000f80300000000000000000000000000000000000005000000"], 0x8758) 02:46:34 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000009, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) [ 1461.385871][T32138] ntfs: (device loop5): parse_options(): The show_sys_files option requires a boolean argument. 02:46:34 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x200000) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="ce0000000000000039be5b0553a617b481b4deb9eb89fa0cf09517769c855be727ad215db20eef0caf2b634b9c273573dc3b0a490eb1cc0990a095874c26c2aab0adc2e2b63a5ba2d30a39c46229d671b5d86a932efc4e72b344e8dbc956127c3b248d9ac5e801b0a5f16003e314bdea40fc0137153e94931f0100b0cccd24f5fa174a086c17c60d0408c45694f12732779d665a4d19e23b729bc450988d2670d77bd69c2c6ce8dbb745f701a10f1f4de783087a5543fade06d0d29e3163747c1c2dd4277893fb19"], 0x119540) r3 = dup2(r2, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f00000002c0)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x9, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b38b) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000080)={r7, 0x401, 0x8000}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r8, 0x4}, &(0x7f0000000140)=0x8) r9 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r9, 0x7fffffffffffffff, 0x3) 02:46:34 executing program 5: syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@show_sys_files_no='show_sys_files=no', 0x7}]}) 02:46:34 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x4000000a, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) 02:46:34 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_ENCAP_FLAGS={0x6}]}}}, @IFLA_MASTER={0x8}]}, 0x64}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6}, @IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_ENCAP_FLAGS={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x64}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) r9 = dup2(r8, r1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r9, 0xc018620c, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x87d}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, &(0x7f00000000c0)={r10, 0x110, "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"}, &(0x7f0000000240)=0x104) [ 1461.659005][T32486] binder: 32456:32486 ioctl c018620c 20000100 returned -1 02:46:34 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) accept4(r1, &(0x7f00000028c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000002940)=0x80, 0x0) recvmsg$can_bcm(r2, &(0x7f0000002ac0)={&(0x7f0000002980)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002a00)=""/123, 0x7b}], 0x1}, 0x10080) lseek(r0, 0x7fffffffffffffff, 0x3) [ 1461.800371][T32503] binder: 32499:32503 ioctl c018620c 20000100 returned -1 [ 1461.834396][T32568] ntfs: (device loop5): parse_options(): The show_sys_files option requires a boolean argument. 02:46:34 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x4000000e, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) [ 1461.987206][T32743] bridge0: port 1(bridge_slave_0) entered learning state [ 1462.025711][T32568] ntfs: (device loop5): parse_options(): The show_sys_files option requires a boolean argument. 02:46:34 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000500000000000000000000000000000000000005000000"], 0x8758) 02:46:34 executing program 5: syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0x2010, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@show_sys_files_no='show_sys_files=no', 0x7}]}) 02:46:34 executing program 3: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x40000, 0x20) lseek(r0, 0x0, 0x3) 02:46:35 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffb8, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x40000011, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e090000631177fbac141429e0", 0x0, 0x8}, 0x28) [ 1462.245917][ T533] ntfs: (device loop5): parse_options(): The show_sys_files option requires a boolean argument. 02:46:35 executing program 4: open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) lseek(r0, 0x1, 0x3) 02:46:35 executing program 3: mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x8002, &(0x7f00000000c0)={[{@mode={'mode', 0x3d, 0x6bb}}], [{@subj_role={'subj_role', 0x3d, 'ppp1bdevvmnet1@B!cpuset#.self'}}, {@subj_type={'subj_type', 0x3d, 'system)$.'}}, {@smackfsdef={'smackfsdef'}}]}) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) [ 1462.496834][ T533] ntfs: (device loop5): parse_options(): The show_sys_files option requires a boolean argument. 02:46:35 executing program 5: syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0x3f00, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@show_sys_files_no='show_sys_files=no', 0x7}]})