6cdeb09e81aec5fd66894c46b6f7c70e798a1446933cbf1d3ba26a2ac287b76bd7c431f5d4e7a389614a27ed88e4de545456e0bbc568655d065772e3336a050fa774e6e9d7fe0708f1c1d9be5985d87e5c048a5d8272a0a97fbae7799595b6c5ee5ca97af9346d32623b05feac65f60646a9f7af6ceb2e703aa1356f993013b38", 0x778, 0x0, &(0x7f00000010c0)={0x1c, 0x1c}, 0x1c) 14:04:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f0000000240)=""/86, 0x56, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000140)="c96750a04a8218c23c615b2355adfdd073b24d7530c06a1053cd8257cceb7b4e0526c48b2c33caa757637e810d1352375127a1573a5bd2647ccff689bf5a01664ff4cfef187c262bfa975a99886ce4017413c776f13b2b", 0x57, 0x0, 0x0, 0x0) 14:04:44 executing program 5: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000000)={@remote={0xfe, 0x80, '\x00', 0x0}}, 0x14) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000010c0)={0x1c, 0x1c}, 0x1c) 14:04:44 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c000100000000000000000007", @ANYRES32], 0x28}}, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000089, 0x0) [ 271.790582][T16671] device veth85 entered promiscuous mode 14:04:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x85) 14:04:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r4, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:44 executing program 1: perf_event_open(&(0x7f00000015c0)={0x2, 0xffffffffffffff9d, 0xde, 0x7, 0xfc, 0x3, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4c040, 0x4000100, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454ca, 0x4fc002) 14:04:45 executing program 0: recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@in6, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/176, 0xb0}, {&(0x7f0000000100)=""/91, 0x5b}, {&(0x7f00000000c0)=""/51, 0x32}], 0x10000000000001d7, &(0x7f0000000040)=""/24, 0x18}, 0x0) 14:04:45 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c000100000000000000000007", @ANYRES32], 0x28}}, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000089, 0x0) 14:04:45 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto(r0, &(0x7f0000000100)="0ed00c1d624d676f401852baf68d076ef1b97e459c0ea08bc0216ebe98837debad3f0050920c8bec88db214e1f745f8dad4af1bbf4c8796058dee718fe7b828075f86e2acc4d12b54da3f7eab89b2f8f9962c8143f29ae910e307aaad9", 0x5d, 0x0, &(0x7f0000000180)=@in={0x10, 0x2}, 0x10) 14:04:45 executing program 2: socket$inet6_tcp(0x1c, 0x1, 0x0) select(0x40, &(0x7f0000000200), 0x0, &(0x7f0000000280)={0x200000000000cbeb}, 0x0) select(0x40, &(0x7f0000000000)={0x7}, &(0x7f0000000040)={0x9}, 0x0, 0x0) 14:04:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r4, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:45 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c000100000000000000000007", @ANYRES32], 0x28}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000089, 0x0) [ 271.970407][T16698] device veth87 entered promiscuous mode 14:04:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x2000d) 14:04:45 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x0, 0x8001, 0x165cd727}, 0x10) 14:04:45 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f00000007c0)={[0x9]}, 0x8) bind$llc(r0, &(0x7f0000000800)={0x1a, 0x108, 0x3, 0xf7, 0x2, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)={'syz0', "feacde8f6a41cba4d8ae91b2ffbf9a1a59cc8c07ab172f515e84353845060e4828c1ce870064e3d1394aeb95cad785587b2a9483b9200279300c6b53ab4aad8f4dcbe399122c72166b704ded4c79cbf23dce92"}, 0x57) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x1f, 0x2, 0x0, 0xf0, 0x2, 0x2, 0x3e, 0xfff, 0x36c, 0x40, 0x1e3, 0xffffffff, 0x200, 0x38, 0x1, 0x4, 0xbeb6}, [{0x60000000, 0xfff, 0x100000000, 0xcb9, 0x100000000, 0x7, 0x4000000000000, 0x8}], "4f2cafc16dcf50359de4082296f3b2ada78bb8860b5f39fb079465071b8072e8ff876417eb91b86d0c4c5927e502273daa3e5723d3c0c468acdbea273b200ed3562d060f40e7760f1700c5aadd0a5ec888aa32db83a24ee2a29504131cd14157cdfe9e967e6f1b", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5df) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454ca, 0x4fc002) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x9, 0x8, 0xe0, 0x8, 0x0, 0xfffffffffffffffd, 0x12000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x56, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x102, 0xffffffffffffff01, 0x45, 0x6, 0x4, 0xe9e, 0x8000, 0x0, 0x7e, 0x0, 0x6}, 0xffffffffffffffff, 0x800000c, 0xffffffffffffffff, 0x3) 14:04:45 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000200)='c', 0x1}], 0x2, &(0x7f00000002c0)=[{0x38, 0x0, 0x0, "ddd4411c7d202079b8af5307561b6fb0ec7bf2865dd45f2bc6797645eed1dc811f"}, {0x58, 0x0, 0x0, "47a084ecd498aee955bc8295708d4ebab52620a0706c1aa7626ecf621ea214c00cc5ae4814cec6959be6391697b9555b70c204dc9e7ee467d4b1f07c953a9c6ee3"}, {0x58, 0x0, 0x0, "3e168be915e1a1cbe4652b581fd6ce3d1daa1d04767eb80cebb9667de33075f961bdb9d9b55ce8bbf32785243088e6e3d18e00710ff9e119a2fc7c0834cdb00dd5"}], 0xe8}, 0x101) 14:04:45 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c000100000000000000000007", @ANYRES32], 0x28}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000089, 0x0) 14:04:45 executing program 0: mount(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 14:04:45 executing program 5: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) setsockopt$sock_int(r0, 0xffff, 0x1015, &(0x7f0000000080), 0x4) [ 272.113174][T16724] device veth89 entered promiscuous mode 14:04:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x10000, &(0x7f0000000000), &(0x7f0000000080)=0x4) 14:04:45 executing program 1: perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x6bcef602c5c339c0, 0x30) ioctl$TUNSETLINK(r0, 0x400454ca, 0x4fc002) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(r2) sendfile(r1, r2, &(0x7f0000000040)=0x3, 0x5) 14:04:45 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c000100000000000000000007", @ANYRES32], 0x28}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000089, 0x0) 14:04:45 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe}, 0x0) 14:04:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000140)="c96750a04a8218c23c615b2355adfdd073b24d7530c06a1053cd8257cceb7b4e0526c48b2c33caa757637e810d1352375127a1573a5bd2647ccff689bf5a01664ff4cfef187c262bfa975a99886ce4017413c776f13b2bb118725aad997bce2b5250b4b631d7aa816f2b8d475edb8a0c6a3edafea03dca7a8f3ab35b5c9f6d9ccd230e17f0c702f93f14686616ad93f4ac4b6098e701210000000000c140595342c63b34d0721c11f7bc83db0fbfcdd382bad0eb5ed5abb744e8120f749b550fc9424d6fb9ce0261a688f9123a7fa7e6274c6e4ef799498f9acd592bdd00d53625", 0xe1, 0x0, 0x0, 0x0) 14:04:45 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r0, 0xffff, 0x4, &(0x7f0000000100), 0x4) [ 272.245121][T16749] device veth91 entered promiscuous mode 14:04:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:45 executing program 0: socket$inet6_tcp(0x1c, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) select(0x40, &(0x7f0000000200)={0x9f99}, 0x0, &(0x7f0000000280)={0xcbeb}, 0x0) 14:04:45 executing program 1: ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000180)={@private2, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@setlink={0x5c, 0x13, 0xbc36dbba4257cd10, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x0, 0x1}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x100}, @IFLA_EXT_MASK={0x8, 0x1d, 0x4}, @IFLA_LINKMODE={0x5, 0x11, 0x2}, @IFLA_MTU={0x8, 0x4, 0x1}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv0\x00'}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x78a6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x40080) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) ioctl$TUNSETLINK(r0, 0x400454ca, 0x4fc002) 14:04:45 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c000100000000000000000007", @ANYRES32], 0x28}}, 0x0) r1 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) 14:04:45 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000140), 0x10) 14:04:45 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x900, &(0x7f0000000040), 0x8) [ 272.353557][T16768] device veth93 entered promiscuous mode 14:04:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:45 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c000100000000000000000007", @ANYRES32], 0x28}}, 0x0) r1 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) 14:04:45 executing program 1: r0 = perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454ca, 0x4fc002) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20200, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000000)=""/151, 0x97}) 14:04:45 executing program 0: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x30, &(0x7f0000000180), 0x4) 14:04:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}], 0x10}, 0x20005) 14:04:45 executing program 5: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendmsg(r0, &(0x7f00000025c0)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f00000022c0)=[{&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="a73c2bf2cfd5b77b0ac7f6203003c8125d9a13b403f34d8b8ef85387f8136cafd2ad8ced8fce5987b35f977f8c5d46b2667336a607e34ddff6c1739bb90407df649f542d8d5cba4424e09dd51f332d8c89687a91b2c0115aa826f57ad428c6870093da2372d2467a4086ba1e9e2af378b44c163bb9c36028aa6c69c029cb40a5ffbefbefdf63f1b85a25f3cfb6fefc0d573f779de4b5898cdc54", 0x9a}, {&(0x7f0000001140)="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", 0x1000}, {&(0x7f0000002140)="8e067a88c5ff4077d70696eb37ce17b000771e67ed85a5a971456a840ea8e1d5b6bad0dc239a66f6996a71fc5f7f980b57875688778b2cf1bd35451f316002f3783ee2d6f2e8c98266dc429b876bd7733bb108aa35408da7bb8e5c102a6db9a10ffc389b52e19b5c4be104c8febdb004785b6f9648978aa9989892366c58f433970192ef72a6359da1e28ec3d85ce26ad821df941bfabbeab921dde270be24411c215ddc80c7dfa2af530c0778d265d517e2292cd7c3fc36305476ead49356182f8c8c6c697753c39472057c935560", 0xcf}, {&(0x7f0000002240)="039f37fc9919fcbc0a815141a81b2eb74b8fb2d6bbdf8390ff02a0e22d5bd27e50bef96f739315124642f16bea2161fa296c11ba4ea397b4", 0x38}], 0x5, &(0x7f0000002340)=[{0xd0, 0x0, 0x0, "9e5ba089fc8a460cfe08524791407910a5f73f3348cf4c7ae61fbcf1a7601c887a15264e824f4a6e4d0d681221ba3221fc07c42c69b8bca6cdb918a658a00dc59f2781d71b0060a76bda0c947986e78913a9fba0150db4f4b6cdee59169a35ced148137739d9cd5ce99ebb43fb77a637084f752e96b86cde745dae8011b78ac851bb5f6f14bff2a6754b295ce4978a690b18f659cf7b73094b3ea211afa9cab30c76e73278e88772a9b23b280cd074f4690e46c5b278bdc78b"}, {0xd8, 0x0, 0x0, "de6354d4f5d9866540f61535301c6f359820e2bcd0879c75e0623214e5042074f86f26ac84ff16a95a452afb999a376ab50e0af2d693de3d89504d59b8ba74b2548b5f2cd6edfad111204658e533fcafd1bd22d9814bc6c2e3a811e44d7d9c561b1b8399114d63309758d4299e49a32dc90a144aafc5e56fa90cf20038ac073b4bd0a6424b762b5e10dcafb6a674de3ba8f823fa0e6273770675e666221e0083f69d853f21a88b249f35cb96d0c5c0525910cbb5266c04978596fe120e7c8b2736"}, {0xb8, 0x0, 0x0, "b011d341d1960b61ac9547190f9052c865c40a94f5d63ba4e51623a83f0de8c4685b2ea847541db7cfa9d0d7d4e767a44793b78276bf0fc00fa58aa712505724bae41bb49789da71476fe89a0533515ec5f7a5b807b8f1ebcb36c56bfe33ac0064d99eff489489aed6d8805cabad876d5445078bf0909b470ba18e02d3e82cfde43e35e8b5718bd113c0288640067aff90b7924c1460d809259a7dcf6fde968088"}], 0x260}, 0x0) 14:04:45 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c000100000000000000000007", @ANYRES32], 0x28}}, 0x0) r1 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) [ 272.522899][T16791] device veth95 entered promiscuous mode 14:04:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:45 executing program 2: syz_emit_ethernet(0x42, &(0x7f0000000580)=ANY=[@ANYBLOB="a9e903ccbc5c00000000000008"], 0x0) 14:04:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, &(0x7f0000000140)="c9", 0x1, 0x0, 0x0, 0x0) recvfrom$unix(r0, &(0x7f0000000240)=""/222, 0xde, 0x0, 0x0, 0x0) 14:04:45 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0xffffffff) 14:04:45 executing program 5: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) getsockopt$sock_int(r0, 0xffff, 0x1007, &(0x7f0000000000), &(0x7f0000000080)=0x4) 14:04:45 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0x0, 0x2, &(0x7f0000001600)="26ea64b4", 0x4) 14:04:45 executing program 1: perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454ca, 0x4fc002) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000140)='1', 0xa}], 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'veth0_macvtap\x00', @remote}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') writev(r1, &(0x7f0000000280)=[{&(0x7f0000000140)='1', 0xa}], 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000440)={'veth1_vlan\x00', @random}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @loopback}}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000001640)=@newtfilter={0x32b4, 0x2c, 0x0, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x3}, {0x1, 0xfff2}, {0xfff1}}, [@filter_kind_options=@f_rsvp={{0x9}, {0xcbc, 0x2, [@TCA_RSVP_POLICE={0x85c, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0xca}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8ea}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x8f, 0x9, {0x8, 0x0, 0x5, 0x903, 0x6, 0x3}, {0x6, 0x1, 0xba0, 0xfffd, 0xbd6, 0xdc}, 0x7, 0x1, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x8a53, 0x4, 0x81, 0xf8, 0xfcc, 0x401, 0xc9, 0x1, 0x1, 0x40, 0x5, 0x20, 0xff, 0x6, 0x5, 0x1, 0x5, 0x3, 0x1, 0x6e, 0x0, 0xcb0, 0x200, 0x7, 0x100, 0x40, 0x1f, 0x1f, 0x50f3, 0x9, 0xd8, 0x3f, 0x4, 0x90da, 0x28c, 0x8, 0xfffffff7, 0x200, 0x8, 0x34, 0x5, 0x3, 0x0, 0x5, 0x3, 0x9, 0x248b, 0x401, 0x1, 0x9, 0x5, 0xffff, 0x2, 0x248, 0x40, 0xfffffff9, 0x9, 0x9, 0x8, 0x6, 0x1000, 0x7f, 0x0, 0x0, 0x40, 0xfffffff9, 0x2, 0x7, 0xb88b, 0xffffff00, 0x5, 0x2, 0x1ff, 0x7, 0x8, 0x1, 0xf86, 0x0, 0x40, 0x5, 0x7fffffff, 0x800, 0x800, 0x43, 0xdd4c, 0x5, 0x7, 0x8001, 0x7, 0x8, 0x80000, 0x20002000, 0xbd, 0x2a0, 0x3fe7, 0xfff, 0x7fff, 0x5, 0x4, 0xffffffff, 0x93, 0x737, 0x8, 0x9, 0x5, 0x3, 0x76, 0xc07, 0x7, 0x1f, 0x80000000, 0xe0, 0x0, 0x7fff, 0x401, 0xfffff7b3, 0x1, 0x4d, 0x9, 0x3f, 0x3f, 0x5, 0xde, 0x4, 0x1777bcff, 0x80, 0x6, 0x6, 0x1, 0x7, 0x7, 0x9, 0x5, 0x10001, 0x8, 0x5, 0xd74, 0x3, 0x7, 0xf61, 0x0, 0xffffffff, 0x2, 0x9, 0x1, 0x5, 0x81, 0x7fff, 0x8, 0x6, 0xc341, 0x2, 0x8, 0x100, 0x8, 0x7fffffff, 0x2, 0x6, 0x3, 0x5, 0x8, 0xb5a5, 0x101, 0xe125, 0x1, 0xffff0000, 0x6, 0x10001, 0x6, 0x6, 0x0, 0x7, 0x6280, 0x6, 0x7, 0x1, 0x200000, 0x7, 0x2, 0x5c, 0x5, 0x80000001, 0x3, 0x7fffffff, 0x3f, 0x81, 0x54, 0x9, 0x7f, 0xd4e, 0x7428f49d, 0x5, 0x2, 0x2, 0x3, 0x7, 0x401, 0x3, 0x0, 0x62, 0x3, 0x27e, 0xbcd, 0x7fffffff, 0x5, 0x2, 0x8, 0x10001, 0x400, 0x1, 0x9c6, 0xffff0000, 0x52330491, 0x5, 0x9, 0xffffffff, 0x0, 0xffffffff, 0x10001, 0x8, 0x100, 0x100, 0x2, 0x0, 0x5, 0x3, 0xff, 0x8b, 0x4, 0x2000000, 0x2, 0x4, 0x0, 0x4, 0x80000000, 0x54fa, 0x80, 0x5, 0x1, 0xfffffff9, 0x9, 0x80000000, 0x7, 0x8001, 0xd, 0xf6, 0xb6f, 0x5, 0x5, 0x3, 0x6, 0xfffffffa, 0x4, 0x9, 0x2, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffa, 0x2, 0x7, 0x80000000, 0x6, 0x1000, 0x3, 0x0, 0x59b8, 0x9a4, 0x7ff, 0xffff, 0x80000000, 0x9, 0xd8, 0x7, 0x5, 0x0, 0x5, 0x1, 0x2, 0x9, 0xb09e, 0x9, 0xff, 0x6, 0x3f, 0x167d, 0x0, 0x2, 0x9, 0x2, 0x1fe00, 0xfffffff9, 0x8, 0x4, 0x7fffffff, 0x2, 0x605, 0x4, 0x7, 0x6, 0x1000, 0xf85f, 0x1, 0x3, 0x8, 0x2, 0x3, 0x1, 0x8001, 0x0, 0x3, 0x2, 0x4, 0x40, 0x800, 0x3, 0x6, 0x7f, 0x8, 0x0, 0x4, 0x9, 0xfffffff9, 0x8, 0x8, 0x2c, 0x1, 0x7fc0000, 0x2, 0x0, 0x1, 0x3, 0x6, 0x7, 0xffffffff, 0x200, 0xffffffaf, 0xd3, 0x6, 0xff, 0x3, 0x5, 0x1, 0x6, 0x9, 0x9, 0x7, 0x200, 0x3, 0x10000, 0x3, 0xffffffff, 0x9, 0x6, 0x81, 0x59, 0x5, 0x9, 0x7, 0x81, 0x1, 0xff, 0x0, 0xeae, 0x7, 0x3, 0x1000, 0x4, 0x800, 0x1000, 0x9, 0x5, 0x3, 0x8, 0x9, 0x100, 0x7, 0xffff8000, 0x4, 0x1, 0x100, 0xfffffffd, 0x7, 0x40, 0x10000, 0x5, 0x2, 0x1, 0xfffff2a4, 0x40, 0x80000000, 0xfffffffd, 0xb366, 0x7f, 0xff, 0x40, 0x10000, 0x161e, 0xffffffff, 0x44, 0x8000, 0x2, 0x10001, 0x4, 0x8, 0x9, 0x7ff, 0x7, 0x9, 0x4, 0xfffffffb, 0x1ff, 0x1800, 0x3, 0x8, 0x40, 0xfffffe7e, 0x3, 0x6, 0x101, 0xfffe0, 0x7f, 0x10ea, 0x0, 0x6, 0x1, 0x407, 0x101, 0x9, 0x67, 0x1, 0x0, 0xfde6, 0x8000, 0x9, 0x1f, 0xffff, 0x101, 0x0, 0x7, 0x68d99c0d, 0xaa8, 0x5, 0x960abf, 0x81, 0x0, 0x3f, 0x9, 0xff, 0x2, 0x3, 0x6, 0x3, 0x3f, 0x0, 0x4, 0x8, 0x0, 0xdc2, 0xffff6f7c, 0xfc000000, 0x1, 0x3, 0xbc, 0x9, 0x7ff, 0xfffffe01, 0x7fffffff, 0x20, 0x2c1, 0x6, 0x2, 0x8, 0x6, 0x1, 0x20, 0x5, 0x4, 0x6, 0x9, 0x2, 0x101, 0x5, 0xde8c, 0x2, 0x2, 0x101, 0xa8, 0xfffffff8, 0x7fffffff, 0x0, 0x4, 0x3, 0xc3d, 0x24000000, 0x1, 0x7fff, 0x552, 0x80000001, 0x1ff, 0x8, 0x0, 0x6fc, 0x10, 0x7fff, 0x4, 0x6, 0xfff, 0x6, 0x800, 0x1, 0xffff, 0xfffffe01, 0x8]}]}, @TCA_RSVP_POLICE={0x454, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x3e}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfff}, @TCA_POLICE_RATE64={0xc, 0x8, 0xb0b1}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1f}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1ff, 0x4, 0x0, 0x4, 0x1, 0xffffff80, 0x7, 0x34a, 0x0, 0x3, 0x1, 0x2, 0x9, 0x6, 0x7, 0xffff, 0x8, 0x5, 0x3, 0x7fff, 0x1, 0x9, 0x5, 0x6, 0x2, 0x1, 0x9, 0xfffffffb, 0x200, 0xffffffe0, 0x1, 0x4, 0x6, 0x5, 0x7, 0x7, 0x0, 0x20, 0x8, 0xfffffffa, 0x0, 0x0, 0xe8, 0x9, 0x6, 0x1, 0x2, 0x3, 0x9, 0x7fffffff, 0x8, 0x1f, 0x2, 0x384, 0x42d12083, 0x2, 0xffff, 0x8, 0x0, 0x0, 0x1, 0x8, 0x5, 0x1, 0xe9c, 0x3, 0x500, 0x2, 0x7fff, 0x5, 0x52, 0x9, 0x401, 0x101, 0xffff, 0x2, 0x8, 0x7, 0x81, 0x0, 0x4, 0x7, 0x2, 0x7, 0x8000, 0x3ff, 0xfffff056, 0x1, 0x6, 0x1000, 0x8, 0x3, 0x4080, 0x1, 0x800, 0x2, 0xfffffffc, 0x1ff, 0x3, 0xffffffff, 0x10000, 0x47, 0x0, 0x6, 0xfffffff7, 0x80000001, 0xbfc, 0xdb8, 0x3, 0x7, 0xffffffff, 0x2, 0x1, 0xfffffffe, 0x8, 0x20, 0x5, 0x6, 0x1a1, 0x9, 0x10001, 0xfddf, 0xfffffffb, 0xff, 0xffff0432, 0x5ed9, 0x4, 0x275, 0x1f, 0x8, 0x2, 0x6, 0x1ff, 0x0, 0xbd8, 0x7fff, 0x3, 0x7, 0x1, 0xfffffffc, 0x1, 0x8000, 0x800, 0x8, 0x81, 0x1de, 0xfffffff9, 0x3, 0x80, 0x7ff, 0x1f, 0x5, 0x1, 0x1, 0x5, 0x800, 0x7, 0x5, 0x4, 0x40, 0x3, 0x44d, 0x8000, 0x8000, 0x200, 0x9, 0x7fff, 0x6080000, 0x3f, 0x0, 0xffffffff, 0x400, 0x1000, 0xffffffff, 0x6, 0x2, 0x2, 0x80, 0xb07b, 0x4, 0x60, 0x245e400, 0x0, 0x2, 0x3ff, 0xdf, 0x9, 0x29, 0x0, 0x200, 0x2, 0x1, 0x2, 0x2, 0x8ad6, 0xfffffe00, 0x101, 0x80, 0x7fff, 0xc0, 0x7f, 0x2c, 0x80000000, 0x8, 0xe5a8, 0x7fffffff, 0x611, 0x8000, 0x8, 0xcb, 0xc9, 0x8000, 0x7, 0x8, 0xc478, 0x10000, 0x6, 0x6, 0x6, 0x200, 0x8, 0x6, 0xfff, 0x5, 0x8, 0x5, 0xfffffffb, 0x80, 0x8, 0xbb9, 0x47, 0x9, 0x5, 0xa7, 0x101, 0x1, 0x2, 0xc5f9, 0xffffffff, 0x3, 0x20, 0x6, 0x7, 0xd8, 0xffffffff, 0xc11, 0xfffffeff, 0x4, 0xaea0, 0xb4, 0x20, 0x5, 0x0, 0x8, 0x7, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x18000}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff1, 0xfff1}}]}}, @filter_kind_options=@f_basic={{0xa}, {0x16cc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xc, 0x1}}, @TCA_BASIC_EMATCHES={0x1318, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xbd}}, @TCA_EMATCH_TREE_LIST={0x9c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8000, 0x3, 0x3f}, {0x3, 0x2, 0x3f, 0x8}}}, @TCF_EM_META={0x4c, 0x2, 0x0, 0x0, {{0x7, 0x4, 0xabec}, [@TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="6e8593abafd507c162"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x9, 0x2}, {0x1, 0x30}}}, @TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_VAR="e58aed4b2116b5ceef69", @TCF_META_TYPE_VAR="1e13eec5333a", @TCF_META_TYPE_VAR="e1ae9f5af2ef"]}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x401, 0x7, 0x5}, {{0x3, 0x1}, {0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x61bc, 0x3, 0x1}, {0x3f, 0x2f95242c, 0x101, 0x7fff}}}]}, @TCA_EMATCH_TREE_LIST={0x6c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x800, 0x8, 0x7}, {0x1, 0x1, 0x1}}}, @TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x100, 0x9, 0x4}, [@TCA_EM_IPT_NFPROTO={0x5}]}}, @TCF_EM_IPT={0x44, 0x1, 0x0, 0x0, {{0x5a0, 0x9, 0xfffc}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1f}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7f}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf78}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x11f4, 0x2, 0x0, 0x1, [@TCF_EM_META={0x68, 0x2, 0x0, 0x0, {{0x8, 0x4, 0x7}, [@TCA_EM_META_RVALUE={0x2f, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="4385", @TCF_META_TYPE_VAR="06c572a70a0c5d", @TCF_META_TYPE_VAR='>', @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="68c4d94eb2e4a2", @TCF_META_TYPE_VAR="514111a6ee0295b67b39"]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="e9018d70"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x14c0, 0x5c, 0x2}, {0x400, 0x4, 0x2}}}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="77eedd56c0", @TCF_META_TYPE_INT=0x3]}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x4, 0x8, 0x1}, {0x0, 0x2}}}, @TCF_EM_CONTAINER={0xa0, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x200}, "c228fe071a70cdbd5fa1608b28185a096f758fe275c749856f7f04855bd2da915a2a370226a635c9e4075b629466449192e6729c028cb30cefc0c26995fde5ddc2fcc5c2a0c9a10e6c5dd2b46865990069bf14fa7ac252a75ac4659bac34c55af0fd73b94f5950f508ccef167f5fe044b5e845e5c14291ccecaae47d5c6a21ae15add14b7b522e09d1c9bb9ee77a8cb5e5"}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x0, 0x8, 0x1e1}, {0x1, 0x6, 0x1}}}, @TCF_EM_CONTAINER={0x90, 0x2, 0x0, 0x0, {{0x2, 0x0, 0x4}, "0dd60c661da688415968d644472b6662876b118e6c02fe14d673cc2e6b2771c05f320e43122571b5b9179073f97f0c0d452481b7425e09315ac54b3d67a24610190ece4d351f0451695a5ed3b48b9423e2b165ff189569cd03dce0b30dbbfd8372b294e356ddf730b631b96e9aa3454f95ce1a3f7cd2493fc1b2122850dccc1479a85a"}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x8, 0x2, 0x2}, {0x5, 0x7, 0x1, "a2398f0c21ca5d"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x81, 0x8, 0x4}, {0x3, 0x1, 0x3}}}, @TCF_EM_CONTAINER={0x100c, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x7}, "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"}}]}]}, @TCA_BASIC_EMATCHES={0x3a8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_LIST={0x240, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x4c, 0x1, 0x0, 0x0, {{0xff, 0x9, 0x27}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x80}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7f}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3f}]}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x2, 0x4}, {0x8, 0x7, 0x1, "9047543089c076"}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x437, 0x8, 0x200}, {0xffffffffffffffff, 0x2, 0x5}}}, @TCF_EM_IPT={0xec, 0x1, 0x0, 0x0, {{0x5, 0x9, 0x69}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_DATA={0xd6, 0x5, "635ba335a865c9fd06dc2d3571c68767600a1ae78942508b0c3cc37ea3b2193e7be4ebe363165bbede301e6c6f7c0755540ba039c1a7d3f4ee42f757741c08065b8fabc853354a8414bd8e20a7215a0d4312d1baf42d90bf095b13baa78dbf2eb6b1f14ea0c0c861828dd5d69c8a8343bd048980cfb9fd0e3d8972a985ec75fd2cd4b5f67b8d4250663ba12a9a4ae587d5884e1832385f88b5f027bf833c38a93161c308c81c750117187db84c3d96d23a19393cb627aec5a32a3efd9fdcfde65d53bc4b91f92f5dc8b91ba41bea37fc88a5"}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x100, 0x8, 0x7ff}, {0x4, 0x5, 0x2}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8, 0x3, 0x800}, {0xfffffff9, 0x9, 0x3f, 0x4f}}}, @TCF_EM_META={0x38, 0x2, 0x0, 0x0, {{0x5, 0x4, 0x58a}, [@TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="8b0565a160c6c46aa7", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x2}, {0x86e, 0x7, 0x1}}}]}}, @TCF_EM_META={0x48, 0x3, 0x0, 0x0, {{0x9, 0x4, 0x8001}, [@TCA_EM_META_RVALUE={0x1c, 0x3, [@TCF_META_TYPE_VAR='cr', @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="1848b5526c9957ffbaea", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x1e, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="20f075", @TCF_META_TYPE_VAR="d21de3", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="58782c8ff6f7a2b2"]}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x1ff}, {0x2, 0x100, 0x5, 0x0, 0xf, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x5, 0x7, 0x4}, {{0x1, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x8c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x2, 0x0, 0x0, {{0x1ff, 0x4, 0x9}, [@TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_VAR="4c2a2f31e7", @TCF_META_TYPE_VAR="38b33a", @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x6]}]}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x2, 0xa2}, {0x1f, 0x9, 0x1, "9a2d785ac88076f96c"}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x2, 0x2, 0x5}, {0x2, 0x4, 0x2, "fcb89de0"}}}, @TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x1, 0x9, 0x1000}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x9}, {0xa9, 0xfff, 0xffffffff}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x98, 0x2, 0x0, 0x0, {{0x9, 0x0, 0x4}, "050a284ed97600a63890441830a7c7cd30bd7bb3786f72f8953734939f09a9a2231dda00afb38bea29832ee1f825488121a67a597de5a128255e5d017b48bfdb02abd54ffacbff3953eecd01418bd6b9ad11c0d6413335cf12e8655eae94ca99cb215aef5135d78990d7b0af99fcb875cdc558ca8f988f42212b08a9e12bc73bd0be4447c559255a3e4fa041"}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x8, 0x0, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x100, 0x2, [@TCA_ROUTE4_ACT={0xf4, 0x6, [@m_gact={0xf0, 0x13, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x18e1, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1000, 0x5553, 0x5, 0x401, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0xffffffad, 0x9, 0x3, 0x0, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x634, 0x2}}]}, {0x7c, 0x6, "2a80aef0d18f9d8300fe677dd57ce9b4148dfa40a465b40f233cc59c9eee1da55b0921a6ccffc7b3a4b5a147927312b15f61bae4d307908a88dc3c7b6409704611eb57d2b0f3ad0f9ac1adff359300d4aa49f82ea610683938e4797568ebfef0e7de1c4d1bf36efce0764303f4db5a06a8889169f24cbbca"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_ROUTE4_IIF={0x8}]}}, @filter_kind_options=@f_rsvp6={{0xa}, {0xdd8, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xffe0, 0xa}}, @TCA_RSVP_ACT={0x34c, 0x6, [@m_ife={0x138, 0x5, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x9}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_PRIO={0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x0, 0x5, 0x9}, 0x1}}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xfbd1}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x81}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x800}]}, @TCA_IFE_TYPE={0x6, 0x5, 0xffff}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}]}, {0x9d, 0x6, "286818a64e285bf25ed52692b80aa8bc3e8933b079aebcd9ccf1296af207c8042fd321a979d306c3c065561d5b02bd6d15b94b39e07337a50547725485d61655f4d6d0bb76d85529d75138b8803d5f35863005c8ce3141a9b95facdd480a91964ccc556b9815eaffb6607167c70bf57c5904cfb28cedbca8617c988655126efb21e0e5884bd2af63036a2905aa7f016b9f2ac4efe9f1541ac3"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x138, 0x11, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x80, 0x4, 0x7fff, 0x2}, @broadcast, @rand_addr=0x64010102, 0x0, 0x1}}]}, {0xe8, 0x6, "0e1706b71fd6fae230f2559a26d0967ccb111007ebd066361dbeb8df7a4fcf4e68cc6235d613cf37f2cf7ca9e474693cece5b823211f3af1639348f6f1f6c69de9e37db7f09f4505788425f0b683cff10ad929d32049665e91a5996d6baa7a31b92f3191987bfaf83c798d76c21058607470f1a73ff1da5a13c6c0775d0cb9585a415581b849f9cfe5ae7a3c44c87bbb49a157ba90222a9322c1eaaa0dd39bf2430a72b3eb083c525e68479e451aa7b484d6b7842a5488fefd251467e2c79d5294825ba3f446c30d3bc7fc28d531ff3f8be8e6299c8a3f87bf5edb18b5ddc1485de02302"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_gact={0xd8, 0x15, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x877e, 0xcde, 0x1, 0x9, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2394, 0x2}}]}, {0x86, 0x6, "a5c100409ad712ac8e085dd2f74cfc37fffab20171074de322a11b2429ee93fb23bb036e01c041a960986c892b67373056fe5c4ddc1781dc7ac296ed2d90ff479cf40dcfd0e53aa3500cff3e54107378a8f349a367f357481bafd6a2cc33ecc4d25fc85147e3f4b513f3b0b3bd9e838d18f5921c93f4797e183794548a0f3ce3d73b"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @TCA_RSVP_POLICE={0x1c, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x40}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}]}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x7, 0xa}}, @TCA_RSVP_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x6, 0x0, 0x3, 0x4, {0x4, 0x1, 0x2, 0x5e, 0x4, 0x8}, {0x11, 0x2, 0x3f, 0x0, 0x7f, 0xfff}, 0x9, 0x800, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x59, 0x200, 0x1000000, 0x3, 0xfffffc01, 0x5, 0x400, 0x6, 0x7, 0x2d, 0x80000000, 0x80, 0xcee0, 0x4, 0x81, 0x0, 0xffff, 0xc088, 0x43, 0x3ff, 0xa0b, 0xfffeffff, 0x4, 0x5, 0x7, 0x5, 0x6, 0x3, 0x9, 0x1, 0x400, 0x4, 0x2, 0x81, 0x100, 0x0, 0x6, 0x81, 0xfffffe00, 0x5, 0xc9, 0xe62, 0x1, 0x8, 0x92c9, 0x83f, 0x6, 0x0, 0x8, 0x8, 0x2, 0x7fffffff, 0x20, 0x3f, 0x9, 0x3, 0x8001000, 0xffffffff, 0x7fff, 0x30000000, 0x5, 0x3, 0xd9c, 0xfffffff8, 0x8, 0x4, 0xfffffffc, 0x80, 0xc7, 0x4, 0x0, 0x64, 0x4, 0x10001, 0x4, 0x9, 0x1, 0x80000000, 0x13a, 0x7d8c, 0xa766, 0xedb, 0x7fff, 0x4, 0xc0c9, 0x6, 0xffffffe3, 0x3, 0x7, 0x3, 0x1, 0x7, 0x7f, 0xac67, 0x7, 0x0, 0x4, 0x0, 0x7, 0x5, 0x100, 0x40, 0x1, 0xfff, 0x3d65, 0x80000001, 0x200, 0x80, 0x3, 0x1f, 0x2807, 0x1, 0x9, 0x706, 0x8, 0x470, 0x6, 0x3, 0x9, 0x40, 0x7fff, 0x1, 0x800, 0x7, 0x404000, 0x3, 0x7f, 0x4, 0x100, 0x7fff, 0x5, 0x7, 0x9, 0x5, 0xffff, 0x1, 0x3ff, 0x7fff, 0x400, 0x7, 0x48c6, 0x80000001, 0x9, 0x6, 0x3f, 0xb6a, 0x7, 0x1000, 0x7fffffff, 0x5, 0x50f3, 0x8000, 0x8000, 0x8, 0x101, 0x1, 0x59d, 0x3ff, 0x71, 0x334f, 0x7fff, 0x1, 0x6, 0x4, 0x400, 0xfffffffe, 0x0, 0x7, 0xc909, 0x2, 0x8, 0x51e7, 0x9, 0x7, 0x0, 0x0, 0x6a60505c, 0x5, 0x6, 0x80000000, 0x8001, 0x3, 0x7, 0xe603, 0x8000, 0x0, 0x0, 0x9b1, 0x8be0587, 0x0, 0x81, 0xffff, 0x3c, 0x7, 0x1, 0x2, 0x2c9400, 0x6, 0x1, 0x7fff, 0x0, 0x4, 0x3ff, 0x7ff, 0x401, 0x7, 0x40, 0x3, 0x9, 0x401, 0x9, 0x8, 0x7, 0x101, 0x0, 0x7fffffff, 0x6, 0x1, 0xfffffff9, 0xffff, 0x6ae2, 0xaf0, 0x5, 0x5, 0x0, 0xd5, 0x9, 0x5b00, 0x2c, 0x1f1, 0x8, 0x80000000, 0xffff436c, 0x8000000, 0x1, 0x7, 0x3, 0x1, 0x9, 0x5, 0x0, 0x1f, 0x3, 0x52, 0x41, 0x9, 0x10000, 0x3d, 0x0, 0x8001, 0x6, 0xaec, 0x7, 0x2, 0x21c, 0x4]}]}, @TCA_RSVP_ACT={0x18c, 0x6, [@m_mpls={0xc4, 0x11, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x800}, @TCA_MPLS_PROTO={0x6, 0x4, 0xf8}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x878f5}, @TCA_MPLS_TTL={0x5, 0x7, 0x9e}, @TCA_MPLS_LABEL={0x8, 0x5, 0x2b816}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0xc73, 0x2, 0x78e0, 0x9f3}, 0x3}}]}, {0x41, 0x6, "4ddf0f742f17f3224fca8b545984efbb984f9ee20c0109408d7c3ebb040be51d8f13e330a24e467f313f382bc0f02e94fad165e7b4cb3fc828b261fefa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0xc4, 0x6, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xa9b}]}, {0x8f, 0x6, "cf1df6332f6b30a14f10cbc6306549d1604ba36d060e53ff7f69b3fa4ea4cc07153396db531c5a3465785c61c5bf1809c50249b40db0abec50e672532ced4a840489dc1e3f518a6da8f985deb9782da8353fdeaa139e0ddc5f35dc9806885a5a62b6e7dd703d12db2b5fe9ac581657d83446d9d2661dfe9790480c005ef7a67e8fe559a473728d19eaf3f8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x3f, 0x7, 0x5}, {0x2, 0x100, 0x3}, 0x62, 0xa2, 0x7f}}, @TCA_RSVP_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0xcd0, 0x9, 0x69ec, {0x5, 0x0, 0xff, 0xba2, 0x6, 0x2}, {0x8, 0x1, 0x8000, 0x20, 0x3f, 0x3}, 0xffff7fff, 0xffff2fe4, 0x7153}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x3, 0x71, 0x0, 0x3, 0x0, 0x8, 0x400, 0x10000, 0x0, 0xff, 0x5, 0x519, 0x0, 0x354, 0xfffffe01, 0x8000, 0x80000000, 0x0, 0x80000001, 0x1, 0x1, 0x6, 0xf4, 0x0, 0x400, 0x5776, 0x2, 0x8000, 0x8909, 0x9, 0xe2, 0x4, 0x2, 0x3, 0x8, 0x0, 0x5, 0x80, 0x9, 0x10001, 0x4, 0x4, 0x1, 0x9, 0x8, 0x4, 0x33, 0xab7, 0xce24, 0x8, 0x0, 0x7, 0x4f, 0x4, 0x6, 0x9, 0x5, 0x10001, 0x5, 0x1ff, 0x5, 0x9, 0xf5, 0x6, 0xbb4d, 0xfff, 0x2, 0x0, 0x4, 0x5, 0x200000, 0x400, 0x4, 0x7, 0x1, 0x40, 0x6, 0x100, 0x6, 0x6e, 0xffffffff, 0x7, 0x400, 0x10000, 0xb44, 0x7, 0x8, 0x0, 0x81, 0x5, 0x0, 0x5, 0x13ee, 0xc347, 0x20, 0x5, 0x6, 0x81, 0x5ec6, 0x4, 0x7, 0x9, 0x0, 0x80000001, 0xb02, 0x9, 0xffff, 0xb61, 0x617, 0x9, 0xff, 0x6fe0, 0xbc, 0x81, 0x1, 0x1, 0x5, 0x7fffffff, 0x8, 0x6, 0x7, 0x6, 0x1, 0x413, 0x0, 0x0, 0x2, 0x7f, 0x6b, 0x7ff, 0xff, 0xdb, 0xfffffff8, 0x5, 0xffffffc1, 0x3, 0x3, 0x8000, 0xffff, 0x1, 0x4, 0x6, 0x9, 0xe6, 0x8a3, 0x7, 0x3ff, 0xdb3, 0x1c, 0x9, 0x3f05, 0x6, 0x5, 0x4, 0x10000, 0x9, 0xba5, 0x7f, 0x7, 0x200, 0xf0, 0x7, 0xaf, 0x1, 0x3ff, 0x7, 0x3, 0x10000, 0x8, 0x1, 0x0, 0x2, 0x7f, 0x200, 0x6, 0x5, 0x7, 0x4, 0x7, 0x40, 0x0, 0x7, 0xfffffffb, 0x8000, 0x1, 0x543, 0x7ff, 0x400, 0x1000, 0x8, 0x7, 0x56d, 0x8, 0x7, 0x0, 0x3, 0xd8d5, 0x5, 0x0, 0x6, 0x24000, 0x100, 0x9, 0x8, 0x9, 0x0, 0x9, 0x9cd, 0x7f, 0xc4d, 0xfffffffe, 0x80, 0x7, 0x80, 0x6, 0x1ff, 0x3, 0x8001, 0x1, 0x6, 0x1, 0xffffffff, 0x3, 0x0, 0x7, 0x7, 0x2, 0xff, 0x20, 0x80, 0xf24, 0x5, 0x5, 0x6, 0xffffffc0, 0x7fff, 0x2f87, 0x0, 0x0, 0xfff, 0x1000, 0xffffffe1, 0x1, 0x77, 0xffffffff, 0xdaf, 0x0, 0x8, 0x3, 0x0, 0x8, 0x8, 0xf0, 0x7]}]}]}}]}, 0x32b4}, 0x1, 0x0, 0x0, 0x800}, 0x2004c845) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000140)='1', 0xa}], 0x1) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'sit0\x00', r2, 0x4, 0x2, 0xfd, 0x2, 0x5, @dev={0xfe, 0x80, '\x00', 0x26}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x700, 0x1, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'erspan0\x00', r4, 0x8, 0x80, 0x3f, 0x1, {{0xb, 0x4, 0x1, 0xc, 0x2c, 0x67, 0x0, 0xb0, 0x2f, 0x0, @multicast2, @private=0xa010102, {[@noop, @rr={0x7, 0xf, 0x99, [@private=0xa010101, @rand_addr=0x64010100, @broadcast]}, @lsrr={0x83, 0x7, 0x2c, [@multicast2]}]}}}}}) [ 272.722753][T16822] device veth97 entered promiscuous mode 14:04:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:45 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000100)="6cd67f0355fbf16e83bc08cfcb640ebacf93889b458d677d97512224d9b0eecc159b5a7432a8ece8d28e306e5649e30e0262a8eb8bd95cb041a009579f047bec66b31e302276b31bbe4864f6f54bfc137e4ca284b72f04b7ff4dbb3223747544b5b14464332c5c5960753e80933e43d33683e088fe3dc44d83f509e885e88a8f82428f2e40e21dbb3b34f71ec2b84ce172b24a34", 0x94}, {&(0x7f0000000200)='c', 0x1}], 0x2, &(0x7f00000002c0)=[{0x38, 0x0, 0x0, "ddd4411c7d202079b8af5307561b6fb0ec7bf2865dd45f2bc6797645eed1dc811f"}, {0x58, 0x0, 0x0, "47a084ecd498aee955bc8295708d4ebab52620a0706c1aa7626ecf621ea214c00cc5ae4814cec6959be6391697b9555b70c204dc9e7ee467d4b1f07c953a9c6ee3"}, {0x58, 0x0, 0x0, "3e168be915e1a1cbe4652b581fd6ce3d1daa1d04767eb80cebb9667de33075f961bdb9d9b55ce8bbf32785243088e6e3d18e00710ff9e119a2fc7c0834cdb00dd5"}], 0xe8}, 0x101) 14:04:45 executing program 3: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) setsockopt$sock_int(r0, 0xffff, 0x1003, &(0x7f00000000c0)=0x8, 0x4) 14:04:45 executing program 0: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f00000001c0)={0x100000000}, 0x10) 14:04:45 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x12, &(0x7f0000000080), 0x1) bind$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0xffffffffffffffd3, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000300)="4df2c7a557b7c8a05494e210a82b6683270bf1049acaaa09b2fe99c29129d1f694961be2ff592b35aa834a9ae495daf0269292907549cf19aa0e64e1cc10b1aae989bdf0ce9742459e1d941d5efb39e612b00dfebc6250d78cee24f4b55118c04ceab40f1722110ea3fd63cbdba7637503c88c0301e249e6e79b9981aa3d856a087aa6142e3a87510c453a3c679a191ea86de5b61eed8236c2e04c312d08a2057d5c88b91a751f89c27e626db976e32e3670a36722faebbdfa50c313789f1cbaad0746c1bd768a13dabf0f41d71e14d535c0e765683bd8c211867c684a48861357008517c5064bf1d54e779f3f0030d7e5a9dac1b6ec1cf456168335dea71ca54ed8846fbbc6e9ca4d284586fb8547b990a78b214b6a15d4f3fe5c719cd40e811e01af75d69a620881bbf174973194dfdc10d6b5c5bd74a7aae298786dd7d235f6d74a5fc8ffd3251bc34c701f642411b85feb9b871048efaa6e12713bb696a54d64df06c69adc0821321fdfcec3598e1e4b7b166afc5ef5f56e9b87f10e63ee3e88a739907462239e3d950a13edb18f38e0bdba62cbe143505a9145b8fb915257a5a48e5561aab6a0a156aa169eb51b61a38c695a839c8d3de58ed0e68b82eaf5deb60f83b996786d93e2fb7a83ca9387bf728c76ba0f47edd996dd3ffe93749dcceac449475dc04f3d99813eaf40e9124e69392be7388700e21475fc10866831c66bdaae6bdd874c014a1b6a29e56c02030eac13e692d7d05fb2e47843471f651d046ec0a58a034aa7c7b458e09dc079d207f87536d29185078ee8d3a81ae012d9d41b50a79ee0e9a49d997d95fec7364ae07c1ccb6229072f1cb416551a72047f0443534fb19d848d7eba9ca139beb13f687ad071a48e06bbf4b1089fb9ed243a2d7a6f953108783f097f1ccbff8a80d0191c825f8e0c32031e611bc5979a18f6d08b51a5107f60e577f041f2e1a30265a460f1a63936a5c4960bfb2e5f020515b2a38c6b91408ba1b06a774a0086b381e2b7f2cd9f7e1306148d3900eed30e2dd4a0c7fd0b1c8d2816fd77581d3be2828308b2cb7d20a09b6ec78ae0b5be469b0883ae4b70fa06634fceecdf3fbdd8d52d8dd59929d8d70f15c2ba87e3927449c4cb229efa6c96dfa18a038c197ce04c826daa99689b8ac61011fcdef3f5c1ffe9cdfec027a8e0fca7cee80480ff89ec9b8a076c9bf5f76dda7c41993a4da0baba9c420596b0514db618395d0fab198fa150ad6824a49be0fe1a8eab2358bf60b43e143379254af7308ce39c7f95fefaf0f337e33ddceb11b87756ef01f561cb2fe21c5684aacf7e733dc63fd750fa0492589c9a95bbee7356b2a6d8982f07e26b6afbcdae5b69c5a364ce54bc7d4d812c1ca0ea6187ae2628a179db383e0e5aba732c54f13ebba911287aeb8f27b3cbe8376ca9415c761f6dcff809aa75e18611d96a5d821ec1f64585653ffb1661d20562064bd9aee0943336596eca349c8fe5b0476b11966bba0b8f46851a6a52e6d63b8532e5e8462dbde0899601b649ca11ccb50759b7d823474fc03dc806432a3815b43748288af572a3de6f6cb1c5f4c749f6e4f4e7f7418845a527063c50ae67cd82d4dd671004312e5b807c74c81efe62f6386c6f4c629556fb2c6b9c2ac7592975e7c5ff2dd9e00435fd7c916fd316419ad6c4268188aa360c55b7373f42474cae7f7f8cd9ec328992e0b1dbd0fe47e5a84d3719496c2df354df96496e705c3cdb9f5cb4175e76ac048742e1b87afb9cb2d2f3dac7b7a5446d7865b90f27773dd2ba602341d90b2cee1186a71d845739dc7d28a142ee0fafc1daacadda85e7027fa39328e2580141b4c441012b147691ce988b644f90ffaa8059f57db57e46d77de7e9259d8047458f3559289827879e38914e72105d2b3439a6d2e439ccd2c4973327fa5347ead12f75fb0ea14baee66025324e8bdac35e831e2d4586f3829ce21fbdccf70c0443cc89ba7a851579896b7d417447b18e35ba74fd5cc14b8ba8fb5ed3f6355d749235ef222c9b149558ea9d8fa6fbd4a7c908b5fd057d0a5e1ead", 0x5b5}], 0x1}, 0x0) 14:04:45 executing program 1: perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454ca, 0x4fc002) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'macvlan1\x00', @random}) 14:04:45 executing program 5: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendmsg(r0, &(0x7f0000000880)={&(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="90"], 0x3b8}, 0x0) 14:04:46 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) 14:04:46 executing program 2: open$dir(&(0x7f0000000180)='./file0\x00', 0xb02, 0x0) 14:04:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 272.936450][T16845] device veth99 entered promiscuous mode 14:04:46 executing program 3: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1c, 0x1c}, 0x1c) 14:04:46 executing program 0: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x20081, &(0x7f00000010c0)={0x1c, 0x1c}, 0x1c) 14:04:46 executing program 5: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000010c0)={0x1c, 0x1c}, 0x1c) 14:04:46 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x200e42, 0x0) [ 273.061799][T16876] device veth101 entered promiscuous mode 14:04:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:46 executing program 1: perf_event_open(&(0x7f00000015c0)={0x0, 0x80, 0xde, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x5, 0x8001}, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454ca, 0x4fc002) 14:04:46 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, &(0x7f0000000180), &(0x7f00000001c0)=0x8) 14:04:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x5, &(0x7f0000000040), 0xc) 14:04:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 14:04:46 executing program 5: syz_emit_ethernet(0x22, &(0x7f0000000080)={@broadcast, @empty, @val, {@ipv4}}, 0x0) [ 273.191418][T16901] device veth103 entered promiscuous mode 14:04:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:46 executing program 1: perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x20000, 0x20) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x3d, 0xed, 0x9, 0x6, 0x0, 0x8, 0xa300, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x8000, 0x0, 0x1, 0x4, 0x3, 0x5, 0x18a8, 0x0, 0x1ff, 0x0, 0x7}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x8) ioctl$TUNSETLINK(r0, 0x400454ca, 0x4fc002) 14:04:46 executing program 3: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) ioctl$KDSETMODE(r0, 0x20044b0a, 0x0) 14:04:46 executing program 0: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) bind(r0, &(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 14:04:46 executing program 5: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x13, 0x0, 0x0) 14:04:46 executing program 3: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendto$inet6(r0, &(0x7f00000000c0)="429dfecef2e62b327bec42a067a0502d2ca86f3d27d57ed3731c49783b277c9a2b756acc975bbef0925d832cd6fe8eb6d065f7e4336b601381e23d72bee5d2bde586ff5ee0a7d2417402a1fb784f150d00b9f691048807be9c827b07fbc3ee9265fddb5f9434f0b11a150b2b4ba617436ae3124a171bc244dc4b62a97b84a5fd2c5a0128ff6bb6cedd2b5c0fe86d50f4a2d1b2e3641bba5bad9ac696f6dbd38a79449a7f662d0f22eee1bdce455b8bffd72521a9f13a7cc97e43a17aae5988b9ac0c1b890bb9db95aa704cebc25e77498c33f601fa3ffdb08c8b5a321cc5e9e35fbe45c81d60953417e17b52b5d7fd45b5e0a539f9052066248a1e6ad92b8a69af4f975e63d01af8c3aa9e10dd23a5e3b1e9743ea3ad2963aad7001c726f5a4090cb37ccfcc9e16dc48026804fec40fc8491ce8f458f1903b5ca534c0b72687de39d50f2cce3daf0daf56217675c1548620dd6374bdbf949a2549d328debb15beebc23f3d43faa4d550437ecae58509e372c20c53034318deddc2301ed5f0488fe9ff08aa832f5a5313c2626dbf9ad6bc00460279e2879fcdbb3b247cf61602fb84f704a0fa9768316293ccf69bea7617385aba0c114cd8989c54c0bf4d52eca72495d236b19e31d4933d53247f4734d4e01b6f87eb42708d90b0003aac1a402b9156b261e5aab5a7519d722d104e65a7c2cca499039fc5a6b253cdf486a5ecbf9fb6860c227ffde5f836f0fe246102740beea678e3f6c72ee193c53c6a839cb1f8503e3283753bc15945504b46ef2cdd061d4473f291c3cd520f7fc6dbba9b00563efc735bca9ce8899b0fba5739e66a6d24928c34e53d33a90fa1313845658e561dbc81e760e7536e5f504d2dd18dd045efa4bc953121d699f7c73142bf27b13a2f8b721ee24c3ea7008faff7b16d5edf68424f6094576876faee50cadb692f1bf6240cf7069edff7cae2b97e56e60e8afe075d2166712059131389357500c5f4ee540d4b1c6e89f94f098b20b1899ad8594753e2d5dbf69abdd50b7ecf19fa7502ab66335820434361ae871fab646d36bf8cf41d8b658f43bb0cefda58e5f9f17ab31779f5beb3c29f4823bd46936f11ba55a9a3ef17e2100fd1d686bffbd335b48f5206ad416e33a04feb13ef1c6fe1687fd2326e8e04870c671ca9e51518c162af1a7d45e331d5072add46b005e90ab9de8cc5623ce59a6038a2630dd4db63e30adf9dd46167dd9a0d837b86807415aa07f7647dab94c370167732d1da9a93b2bf714aac1d79d901fcc605427770ce2323e473bf2da8e3ebc146c68f8f9723de85008d0fa206bea86164121f519a0c8f7ad1cc8ba0c429cae3c1649405d1c0ca3b4b47c64bd173d7edf91e3f588397f141574063fb4c4c295ddf7b69417399e0f3da733d38ffc8fd2b84a6458b1a30878c8dedd325db7e67eea49d12a6e9644b50779b85bcc82310a198ca40601e54ab76d464529e5b18935e9586a9edc804e3f10737d5c3ab2f7334512dbb84ebeea53c7a94873ae21e33eafc05640abdb693ca558ce815efa20929875b0f8cd7d575fba2aa42fc9595a30bb173237fa5af90b5f10cc348251c8b5e6d037581d0ca0a6bfec654f352fba2c67817184888d443dc8b6ca03ef4da13cb6d665faee0a7d826a2030e796f7958d8d8709042ddafca967fbf00a7a733f3962870ace9fccbc66ab9e5ba435b066fe9a9b987adb7b7c9015242a3df1f137a081192e2644bb17576c08c79ace5c94b0920a835f092a3137360499ca2924cdbc95590d8b810ebdc30647edaa5bfeab74de6601f749710548473947cb31da661116cfb831131e76ba881ee0cb605db36a9e70dcb16550ca8a8c1f0c2dc879a121e7f571044c6114c47d3dd03dc5e69048ea31037a609fe8a0b7fd2c4ca7e53cccafaa769d1417d3397e7e0e277699aaee8f3d031098e42988d75a868f6bf34ddd6c8f81692816ff54a59e014b56834fe61d51d0f48c795496c629c17b326f34b9dea67337829e144261ee9faa4c5f1313065427b68705356e293f7e6405e7694261f8876895d878e475bd1ebf632077c96093645884defc696089e572220e513e3552049fbc351bfb075cfee38a28f39f14af37d7d080e60e6c17c99e385e7c6011e732fb6beb5c707e71f6735967e1e129fd5207febff60eccd6410d154584c1b6005c1a971268b36410f3530dcd89a2275f10154e1fc12b6f05829de29edc93fb816665eae564e0ff935ec0f28b0f7f199e89893dea71526bb1115f3a55b849924f89b41d6818b17e942f8a048d64261680d4e53359cddbb236dadba9a7a4c37a344405f6e29c97ce1c836b41f5283735d62d5de9775510c723fa3bfd4eb694f8f9091fb376cc1c3f0e9c709d16aee37a34e61e12ecdbb99b3070fda56cf1ab88b74df534de64ef99cd6e48bd60172459942f82c28fe4d7f442f2a1102cd65d9a97ec82642584bc56c6d91aa1dd3ab8bfa6d68c2c0073e4b2d160ed302c64aa7579a925e24d03512e9dff6096cdeb09e81aec5fd66894c46b6f7c70e798a1446933cbf1d3ba26a2ac287b76bd7c431f5d4e7a389614a27ed88e4de545456e0bbc568655d065772e3336a050fa774e6e9d7fe0708f1c1d9be5985d87e5c048a5d8272a0a97fbae7799595b6c5ee5ca97af9346d32623b05feac65f60646a9f7af6ceb2e703aa1356f993013b385d12423457e5a955c16d29b6db4a4be5e216102ca6db7abefe3bd34e9861bf228d96a1c6fc7469bf9b1784196c", 0x7a5, 0x0, &(0x7f00000010c0)={0x1c, 0x1c}, 0x1c) [ 273.357383][T16924] device veth105 entered promiscuous mode 14:04:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:46 executing program 0: mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 14:04:46 executing program 1: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendmsg(r0, &(0x7f00000025c0)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f00000022c0)=[{&(0x7f0000000080)='x', 0x1}, {0x0}, {&(0x7f0000002240)="03", 0x1}], 0x3}, 0x0) 14:04:46 executing program 5: mount(&(0x7f00000008c0), 0x0, 0x0, 0x0, 0x0) [ 273.487568][T16951] device veth107 entered promiscuous mode 14:04:47 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[{0x30, 0x0, 0x0, "ddd4411c7d202079b8af5307561b6fb0ec7bf2865dd45f2bc6"}, {0x58, 0x0, 0x0, "47a084ecd498aee955bc8295708d4ebab52620a0706c1aa7626ecf621ea214c00cc5ae4814cec6959be6391697b9555b70c204dc9e7ee467d4b1f07c953a9c6ee3"}, {0x28, 0x0, 0x0, "3e168be915e1a1cbe4652b581fd6ce3d1d"}], 0xb0}, 0x0) 14:04:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x5, 0x0, 0x0) 14:04:47 executing program 5: socket$inet6_tcp(0x1c, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) select(0x40, &(0x7f0000000200)={0x9f99}, &(0x7f0000000240)={0x615}, &(0x7f0000000280)={0xcbeb}, 0x0) 14:04:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:47 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x20, 0x0, &(0x7f0000000040)=0xfffffef8) 14:04:47 executing program 3: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0xa}, 0xffffffffffffff4a) 14:04:47 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_int(r0, 0xffff, 0x1012, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 14:04:47 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, &(0x7f0000000140)="c9", 0x1, 0x0, 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:04:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}, {&(0x7f0000000c00)='^', 0x1}], 0x3}, 0x0) [ 274.155583][T16977] device veth109 entered promiscuous mode 14:04:47 executing program 0: select(0x2300, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0)) 14:04:47 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x12, &(0x7f0000000080), 0x1) bind$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0xffffffffffffffd3, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000240)="9b", 0x1}], 0x1}, 0x0) 14:04:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:47 executing program 5: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) recvmsg(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=""/172, 0xac}, 0x40003) 14:04:47 executing program 3: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) getsockopt$sock_int(r0, 0xffff, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 14:04:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000100)=@file={0xa}, 0xa) 14:04:47 executing program 2: symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00') 14:04:47 executing program 1: syz_emit_ethernet(0xae, &(0x7f00000005c0)={@local, @remote, @val, {@ipv6}}, 0x0) [ 274.340980][T17008] device veth111 entered promiscuous mode 14:04:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:47 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000680)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)='5', 0x1}], 0x1, &(0x7f0000000580)=[@dstaddrv6={0x1c, 0x84, 0xa, @mcast1}, @sndrcv={0x2c}, @sndinfo={0x1c}, @sndrcv={0x2c}, @sndrcv={0x2c}], 0xbc}, 0x0) 14:04:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000140)="c96750a04a6f4c4162615b2355adfdd973b24d7530c0bd4853cd8257cceb7b4e0526c48b2c33caa757637e810d1352375127a1573a5bd2647ccff689bf5a01664ff4cfef187c262bfa975a99886ce4017413c776f13b2bb118725a99997bce2b5250b4b631d7aa816f2b8dd61c15f0ccd10b32e3dd87ce9e475edb8a0c6a3edafea03dca7a8f3ab35b5c9f6d9ccd230e17f0c702f93f14686616ad0b5f16e57293f48c4b6098e70121", 0xa9, 0x0, 0x0, 0x0) 14:04:47 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, &(0x7f0000000140)="c9", 0x1, 0x0, 0x0, 0x0) recvfrom$unix(r0, &(0x7f0000000240)=""/222, 0xde, 0x80, 0x0, 0x0) 14:04:47 executing program 3: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x6}, 0x0) 14:04:47 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000140), 0x10) 14:04:47 executing program 1: r0 = socket(0x2, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@in={0x10, 0x2}, 0x10) 14:04:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0xa) select(0x40, &(0x7f0000000000)={0xed2}, &(0x7f0000000100)={0x3f}, 0x0, 0x0) 14:04:47 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[{0x10}], 0x10}, 0x0) [ 274.535988][T17038] device veth113 entered promiscuous mode 14:04:47 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 14:04:47 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000140)="c9", 0x1, 0x0, 0x0, 0x0) 14:04:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5, @ANYBLOB], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) select(0x40, &(0x7f00000001c0), &(0x7f0000000200)={0x9}, &(0x7f0000000240)={0x8b6b}, 0x0) 14:04:47 executing program 2: mount(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 14:04:47 executing program 3: syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @random="7acc685dcc45", @val, {@ipv4}}, 0x0) 14:04:47 executing program 0: getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@broadcast, @remote}, 0xfffffffffffffffe) 14:04:47 executing program 1: madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) 14:04:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5, @ANYBLOB], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:47 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockname(r0, 0x0, &(0x7f0000000040)) [ 274.689528][T17069] device veth115 entered promiscuous mode 14:04:47 executing program 5: r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x0) fchown(r0, 0x0, 0x0) 14:04:47 executing program 1: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) recvmsg(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x40003) 14:04:47 executing program 3: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) setsockopt$sock_int(r0, 0xffff, 0x10000, &(0x7f0000000000), 0x4) [ 274.769407][T17082] device veth117 entered promiscuous mode 14:04:47 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000006c0)={&(0x7f0000000240)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@dstaddrv6={0x1c, 0x84, 0xa, @mcast1}, @sndrcv={0x2c}, @sndinfo={0x1c}, @sndrcv={0x2c}, @sndrcv={0x2c}], 0xbc}, 0x0) 14:04:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5, @ANYBLOB], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:47 executing program 0: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000010c0)={0x1c, 0x1c, 0x3}, 0x1c) 14:04:47 executing program 5: socket$inet6_tcp(0x1c, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) select(0x40, &(0x7f0000000200), &(0x7f0000000240)={0x615}, &(0x7f0000000280)={0xcbeb}, 0x0) 14:04:48 executing program 1: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x9, &(0x7f0000000000), 0x4) 14:04:48 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqn(r0, 0x0, 0x9, 0x0, &(0x7f0000000040)) 14:04:48 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000080)="4484e02fff89b1f9e2a2084504ed08c0d9bc02e1306923a3b9f877571381118c0f5063edebfda2d6539b37fbd2beb19bc39d5c081deae557", 0x38, 0x0, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000140)="c96750a04a6f4c4162615b2355adfdd973b24d7530c0bd4853cd8257cceb7b4e0526c48b2c33caa757637e810d1352375127a1573a5bd2647ccff689bf5a01664ff4cfef187c262bfa975a99886ce4017413c776f13b2bb118725a99997bce2b5250b4b631d7aa816f2b8dd61c15f0ccd10b32e3dd87ce9e475edb8a0c6a3edafea03dca7a8f3ab35b5c9f6d9ccd230e17f0c702f93f14686616ad0b5f16e57293f48c4b6098e70121", 0xa9, 0x0, 0x0, 0x0) 14:04:48 executing program 0: r0 = socket$inet(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) [ 274.948497][T17111] device veth119 entered promiscuous mode 14:04:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff0065"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:48 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000100)="6cd67f0355fbf16e83bc08cfcb640ebacf93889b458d677d97512224d9b0eecc159b5a7432a8ece8d28e306e5649e30e0262a8eb8bd95cb041a009579f047bec66b31e302276b31bbe4864f6f54bfc137e4ca284b72f04b7ff4dbb3223747544b5b14464332c5c5960753e80933e43d33683e088fe3dc44d83f509e885e88a8f82428f2e40e21dbb3b34f71ec2b84ce172b24a34", 0x94}, {&(0x7f0000000200)='c', 0x1}, {0x0}], 0x3, &(0x7f00000002c0)=[{0x38, 0x0, 0x0, "ddd4411c7d202079b8af5307561b6fb0ec7bf2865dd45f2bc6797645eed1dc811f"}, {0x58, 0x0, 0x0, "47a084ecd498aee955bc8295708d4ebab52620a0706c1aa7626ecf621ea214c00cc5ae4814cec6959be6391697b9555b70c204dc9e7ee467d4b1f07c953a9c6ee3"}, {0x58, 0x0, 0x0, "3e168be915e1a1cbe4652b581fd6ce3d1daa1d04767eb80cebb9667de33075f961bdb9d9b55ce8bbf32785243088e6e3d18e00710ff9e119a2fc7c0834cdb00dd5"}], 0xe8}, 0x101) 14:04:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:04:48 executing program 5: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1006, 0x0, 0x0) 14:04:48 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0x10) 14:04:48 executing program 2: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x1c, 0x1c}, 0x1c) 14:04:48 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}], 0x10}, 0x0) 14:04:48 executing program 3: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) fchown(r0, 0x0, 0xffffffffffffffff) [ 275.114713][T17140] device veth121 entered promiscuous mode 14:04:48 executing program 1: mount(&(0x7f00000008c0), &(0x7f0000000900)='./file0\x00', 0x0, 0x0, 0x0) 14:04:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt(r0, 0x0, 0x0, 0x0, 0x0) 14:04:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff0065"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:48 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="b4", 0x1}, {0x0}, {0x0}, {&(0x7f0000000c00)='^', 0x1}], 0x4}, 0x0) 14:04:48 executing program 1: mount(&(0x7f00000008c0), &(0x7f0000000900)='./file0\x00', 0x0, 0x0, 0x0) 14:04:48 executing program 2: syz_emit_ethernet(0x10a7, &(0x7f00000005c0)={@local, @remote, @val, {@ipv6}}, 0x0) 14:04:48 executing program 5: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendto$inet6(r0, &(0x7f00000000c0)="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", 0x769, 0x0, &(0x7f00000010c0)={0x1c, 0x1c}, 0x1c) 14:04:48 executing program 1: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xf02, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=' ', 0x1}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)="40e3ab68af9079887c4ef6435ef6b3a3a0030b7d6de3051f5e5f81eb17af7c18447732b5852cf247f65ea1af6d81fc28b8b84f3f8091f8b03fd1d90cde466e3aba00091c36e14aed6cf35c6c4fcad4a541800c410f3bc2b281533101cd9f6e5db407eebc3131999ef99d33f19287f8ba070dc7acefaa61a49035c1b64b199fbe", 0xff25}], 0x1, 0x0, 0x0) 14:04:48 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) 14:04:48 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) [ 275.328627][T17172] device veth123 entered promiscuous mode 14:04:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x0) sendto$unix(r0, &(0x7f0000000140)="c9", 0x1, 0x0, 0x0, 0x0) 14:04:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff0065"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:48 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001300)=0x1, 0x4) 14:04:48 executing program 1: r0 = shmget(0x2, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) 14:04:48 executing program 0: mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 14:04:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000001c0)="836552d77cbf38c1ae3faffeb253b5bcf782c57b208d873c5703eb3e9c97ba32fcac45dd413630c52cb49cca8cd6016483066477caa2d27b7faa7d89855ba2d3c03a9146bc52815eda17d6dfb0d3070fd2495e4ab04fa8d1778ab72467452a5a7d139bb01f338f60", 0x68) 14:04:48 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x12, &(0x7f0000000080), 0x1) bind$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0xffffffffffffffd3, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000240)="9b", 0x1}, {&(0x7f0000000300)="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", 0x584}], 0x2}, 0x0) [ 275.486314][T17201] device veth125 entered promiscuous mode 14:04:48 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) select(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x3f}, 0x0, 0x0) 14:04:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) select(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x3f}, 0x0, 0x0) 14:04:48 executing program 3: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/171, 0xab}], 0x1}, 0x0) close(r0) 14:04:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f00080001"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x20081, 0x0, 0x0) 14:04:48 executing program 5: socket$inet6_tcp(0x1c, 0x1, 0x0) select(0x40, &(0x7f0000000000)={0x7}, &(0x7f0000000040)={0x9}, 0x0, 0x0) 14:04:48 executing program 1: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) getsockopt$sock_int(r0, 0xffff, 0x1007, 0x0, &(0x7f0000000080)) 14:04:48 executing program 2: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1c, 0x1c}, 0x1c) [ 275.657528][T17227] device veth127 entered promiscuous mode [ 275.697581][T17246] __nla_validate_parse: 44 callbacks suppressed 14:04:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x188) 14:04:48 executing program 0: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendto$inet6(r0, &(0x7f0000000080)="971a60c7d51f56a8edf63019ec49b96a5245ecabaf2798952752f7c8282c30170f59a95428a53cb4db837196a47c4a91984cbabe10a2556ba8797138c628e616a806e3af5473eecea1346e45196b965a3b0a467ea9b1d7c50243cdd31c", 0x5d, 0x108, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) [ 275.697595][T17246] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 14:04:48 executing program 5: open$dir(0x0, 0x11f94e8d5e10ffb1, 0x0) 14:04:48 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="b4fa83212b6734dc48da7ab73d1e64e0de94226ecbf86622a3941cd6d44292eec8b0e408ca0b661919196a496617aa68b1b3136d5a3fe609529bebedebb2d32fa79be5c50c340f44e7c3ffbda82a0289e3afe3faafb69f9e8b35bc5ee4f0791ed170e628331eb3c0dd30916ac407e03e5835028082fae174c6c9", 0x7a}, {&(0x7f0000000000)="a24c84090e6b3f616ed2dc719756a6787002454e9a59fb0b51b68f56597f67fc10e72cd4", 0x24}, {&(0x7f0000000200)="e20548e51d58c9049f3074fa64b6b30ed9d4f75a2ce4fa4a9691b31a71e8c7493c9c61e205ada23f6a2a3b5964f881422ba738c25b489459b8", 0x39}, {&(0x7f0000000240)="8111898f34ea5bfee901", 0xa}], 0x4}, 0x0) 14:04:48 executing program 1: semget(0x1, 0x0, 0x40) 14:04:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f00080001"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:48 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000000580)=ANY=[@ANYBLOB="a9e903ccbc5c0000000000000806"], 0x0) 14:04:48 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x2a6f) 14:04:49 executing program 1: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendmsg(r0, &(0x7f0000000b00)={&(0x7f0000000880)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f0000000a80)=[{0x10}], 0x10}, 0x0) 14:04:49 executing program 0: socketpair(0x1e, 0x0, 0x0, 0x0) [ 275.895687][T17273] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:04:49 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x40) 14:04:49 executing program 2: r0 = mq_open(&(0x7f0000000000)=')&\xdf%-[,:\x00', 0x0, 0x0, 0x0) mq_notify(r0, 0x0) 14:04:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x1}, 0x24}}, 0x0) 14:04:49 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000001bc0)='./file0\x00', 0x0, 0x0) 14:04:49 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [@uac_as], [{}]}}]}}]}}, 0x0) 14:04:49 executing program 3: request_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0) [ 276.003478][T17273] device veth129 entered promiscuous mode [ 276.032249][T17279] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 14:04:49 executing program 5: io_setup(0x8, &(0x7f0000000280)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$vcs(0xffffff9c, &(0x7f0000001340), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x2000000000000}]) 14:04:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f00080001"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:49 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb09005c"], &(0x7f00000002c0)=""/129, 0x5c, 0x81, 0x1}, 0x20) 14:04:49 executing program 0: request_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0xfffffffffffffffc) 14:04:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x80108906, 0x0) 14:04:49 executing program 3: io_setup(0x8, &(0x7f0000000280)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$thread_pidfd(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}]) 14:04:49 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240), 0x8}) io_setup(0x0, &(0x7f0000000280)) [ 276.161147][T17312] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:04:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, &(0x7f0000000000)) 14:04:49 executing program 2: r0 = syz_io_uring_setup(0x128b, &(0x7f0000000040), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x10000000) [ 276.222201][T17312] device veth131 entered promiscuous mode [ 276.252125][T17318] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 14:04:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f000800010073"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 276.328831][T17338] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 276.343814][T17338] device veth133 entered promiscuous mode [ 276.352594][T17338] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 276.386449][ T8926] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 276.576427][ T8926] usb 2-1: device descriptor read/64, error 18 [ 276.856515][ T8926] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 277.056436][ T8926] usb 2-1: device descriptor read/64, error 18 [ 277.176595][ T8926] usb usb2-port1: attempt power cycle [ 277.596464][ T8926] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 277.696519][ T8926] usb 2-1: Invalid ep0 maxpacket: 0 [ 277.846387][ T8926] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 277.936494][ T8926] usb 2-1: Invalid ep0 maxpacket: 0 [ 277.941811][ T8926] usb usb2-port1: unable to enumerate USB device 14:04:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="76f3e011c5b2801cde862a32a7bba9df", 0x10) 14:04:52 executing program 0: io_setup(0x200, &(0x7f0000000000)=0x0) r1 = socket$alg(0x26, 0x5, 0x0) io_submit(r0, 0x1, &(0x7f0000000640)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x22ce, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 14:04:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x2, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f0000000840)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000340)='Q3', 0x2}]) 14:04:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000080)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_WOL_MODES={0x184, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}]}, {0x4}]}, @ETHTOOL_A_BITSET_BITS={0xe0, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '{-}#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x15, 0x5, "e510c24b7aafa4198cffc428a66e0f32e6"}, @ETHTOOL_A_BITSET_MASK={0x41, 0x5, "806a6c46fcaf7b3fb8d6a5855599641ac2a43693477a33341ba0ff2ca50d4fc19eaa0d95bd82163537f677d1c0b6249158145eeba00778e86a591f3743"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_WOL_MODES={0x218, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '{%]{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\\-}{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1010000}]}]}, @ETHTOOL_A_BITSET_VALUE={0x45, 0x4, "448ab0bff7008b36f0c9d66f4e51b3de3f5b82547405cb8d9c5b9c62dc840c41ab6cdee849fae63e6171563fc275d6a3451fe1e52170e18d2756ba5d212f2ca514"}, @ETHTOOL_A_BITSET_VALUE={0xe1, 0x4, "10e1df50b8bb79a553ffdf2fea01a9ec0538fae8dd7cebe94313ec6654c563f54860bc149c8b2f56477450da86f8f74db9d5fb6c799f50fb9e9afc66f48f31914468459cb8e60f2826260a7fcde180fb026ae4328fd88f2cacce68e7422ca4fcd96972e176d71e8f09d7c64b2db0f98c6b4be48c1505cbd75d9a2f6d15c80b72b053959510dcfdc3edab2806a54e70d680771a25e867619de18a789f50ac3d6c58af971aa6d8e0dc648fc06c911547360f5b5047985d0231469c07beaf704e950bf3976763175138a9942d437fc392991e1266b3ab2b0365da5d9262d5"}, @ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}, @ETHTOOL_A_WOL_MODES={0xafc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xaf1, 0x5, "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"}]}]}, 0xec4}, 0x1, 0x0, 0x0, 0x800}, 0x4090) 14:04:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f000800010073"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:52 executing program 5: io_setup(0x8, &(0x7f0000000280)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:04:52 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@mcast1}, 0x14) 14:04:52 executing program 1: clock_gettime(0x1, &(0x7f00000001c0)) 14:04:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000001c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @ptr]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000001dc0)=""/233, 0x38, 0xe9, 0x1}, 0x20) 14:04:52 executing program 5: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, 0x0) [ 279.135951][T17363] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 279.173687][T17363] device veth135 entered promiscuous mode 14:04:52 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000001540)='/sys/class/power_supply', 0x840, 0x0) 14:04:52 executing program 2: openat$cgroup(0xffffffffffffffff, &(0x7f000000bec0)='syz0\x00', 0x200002, 0x0) 14:04:52 executing program 1: renameat(0xffffffffffffffff, &(0x7f0000050c00)='./file0\x00', 0xffffffffffffffff, 0x0) [ 279.243080][T17378] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 14:04:52 executing program 5: r0 = semget$private(0x0, 0x2, 0x0) semctl$GETZCNT(r0, 0x0, 0xf, 0x0) 14:04:52 executing program 3: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)={0x0, 0x2710}) 14:04:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f000800010073"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:52 executing program 0: select(0x40, &(0x7f00000015c0), 0x0, &(0x7f0000001640), &(0x7f0000001680)={0x0, 0x2710}) 14:04:52 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) 14:04:52 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) 14:04:52 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, 0x0) 14:04:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, 0x0) 14:04:52 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x0) 14:04:52 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001540)='/sys/class/power_supply', 0x0, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) [ 279.414376][T17401] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 279.450442][T17401] device veth137 entered promiscuous mode 14:04:52 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003240)={0xffffffffffffffff}) sendmsg$sock(r0, 0x0, 0x0) 14:04:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f00080001007366"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:52 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003240)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="e8", 0x1}, {0x0}], 0x2}, 0x0) 14:04:52 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003240)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="e8", 0x1}], 0x1}, 0x0) 14:04:52 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003240)={0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000003280)) 14:04:52 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000300), &(0x7f0000000380)='./file0\x00', 0x0, 0x3, &(0x7f0000000400)=[{&(0x7f00000003c0)="cd5d8a57ea00f68f08645810493a037ac2b179348e7b3c9e84b76f51be14ff90b30451b7e5f10c850b6b34302f", 0x2d, 0x2}, {&(0x7f0000000a80)="aa907a70dbaa54886331e689db9ddef911d4ded08d66a25acd36304a5df7f0d208922f5faf21f3ca1f94e6f3b2dee75b0f039b104f86af3428cdc6eccbc35e961e7d3c0ef8cfd6c1ac04bf993b6680c46f10ea6d105ac0decb9b2d5b03f41999d98b2ffdd22ae11762e98b55ec6721ea4648d16835c5d2380a42f1fe4c6506101889d903fb16c9a891c26c586ee435b7", 0x90, 0x2}, {&(0x7f0000000980), 0x0, 0x5b187e1e}], 0x0, &(0x7f0000004300)={[{}, {}, {@mode}, {@nr_blocks={'nr_blocks', 0x3d, [0x0]}}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) 14:04:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x0, 0x0, &(0x7f0000000780)) 14:04:52 executing program 5: openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000057c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 14:04:52 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003240)) 14:04:52 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003240)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) [ 279.644371][T17434] device veth139 entered promiscuous mode [ 279.674956][T17444] loop2: detected capacity change from 0 to 157822 14:04:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f00080001007366"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:52 executing program 1: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) getpgid(0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) [ 279.700781][T17444] tmpfs: Bad value for 'nr_blocks' 14:04:52 executing program 5: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) 14:04:52 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003240)={0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(r0, 0x8902, 0x0) 14:04:52 executing program 2: socket(0x2, 0x3, 0x5) [ 279.745901][T17444] loop2: detected capacity change from 0 to 157822 [ 279.778174][T17444] tmpfs: Bad value for 'nr_blocks' 14:04:52 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001480)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 14:04:52 executing program 1: r0 = socket(0x2, 0x1, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x24004045) 14:04:52 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8916, 0x0) 14:04:52 executing program 0: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x29, &(0x7f0000000040), 0x10) 14:04:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140), 0xffffffffffffff23) [ 279.876842][T17470] device veth141 entered promiscuous mode 14:04:53 executing program 1: r0 = socket(0x2, 0x5, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, 0x0, 0x0) 14:04:53 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000480), 0x974e247c635ed087, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, r3}}, 0x38) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000740)={0x6, 0x118, 0xfa00, {{0x0, 0x9, "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", 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1}}}, 0x120) unshare(0x60020000) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x38) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @in6={0xa, 0x0, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 14:04:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f00080001007366"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:53 executing program 3: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x23, 0x0, 0x0) 14:04:53 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0xc0189436, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @private0}}) 14:04:53 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:04:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x12, 0x7ff, 0x0, 0x7}, 0x40) 14:04:53 executing program 2: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0) 14:04:53 executing program 3: r0 = socket(0x2, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 14:04:53 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local}}) [ 280.099274][T17509] device veth143 entered promiscuous mode 14:04:53 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x20001, &(0x7f0000000640)) 14:04:53 executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f00000008c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10, 0x0}, 0x0) 14:04:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 280.267073][T17561] device veth145 entered promiscuous mode 14:04:54 executing program 5: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0xd, &(0x7f0000000040)={0x1}, 0x10) 14:04:54 executing program 1: r0 = socket(0x2, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)="814fc0a45aefb9db0f802b5e4d0ca1bd", 0x10}, 0x0) 14:04:54 executing program 2: select(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x7f000000}) 14:04:54 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000200)=[{}], r1, 0x1, 0x1, 0x400000}}, 0x20) 14:04:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:54 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}}) [ 281.078520][T17602] __nla_validate_parse: 9 callbacks suppressed [ 281.078536][T17602] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:04:54 executing program 1: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x7, &(0x7f0000000040), 0x10) 14:04:54 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8946, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @private0}}) 14:04:54 executing program 5: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x16, &(0x7f0000000040), 0x10) [ 281.118713][T17602] device veth147 entered promiscuous mode [ 281.130492][T17602] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.4'. 14:04:54 executing program 0: r0 = socket(0x2, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x1}, 0x10) 14:04:54 executing program 1: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x8, 0x0, 0x0) 14:04:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:54 executing program 5: r0 = socket(0x23, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) 14:04:54 executing program 3: r0 = socket(0x2, 0x2, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x84, 0x83, 0x0, 0x0) [ 281.314337][T17633] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 281.374258][T17633] device veth149 entered promiscuous mode [ 281.393169][T17641] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.4'. 14:04:55 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000001000)) 14:04:55 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @remote}}) 14:04:55 executing program 1: r0 = socket(0x2, 0x5, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x0, @link_local, 'xfrm0\x00'}}, 0x1e) 14:04:55 executing program 3: syz_mount_image$erofs(0x0, 0x0, 0x0, 0x321d4a, &(0x7f0000000600)=[{0x0}], 0x0, 0x0) 14:04:55 executing program 5: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x3, 0x0, 0x300) 14:04:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:55 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x890b, &(0x7f0000000500)={'ip6gre0\x00', 0x0}) 14:04:55 executing program 1: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x14, 0x0, 0x0) 14:04:55 executing program 2: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x13, &(0x7f0000000040)={0x1}, 0x10) [ 281.996431][T17660] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:04:55 executing program 2: r0 = socket(0x18, 0x0, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x5, 0x0, 0x84) 14:04:55 executing program 1: semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000080)=""/209) 14:04:55 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @private0}}) 14:04:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 282.062336][T17660] device veth151 entered promiscuous mode [ 282.099847][T17671] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 14:04:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:55 executing program 2: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x31, 0x0, 0x0) [ 282.237308][T17691] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 282.292516][T17691] device veth153 entered promiscuous mode [ 282.301241][T17696] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 14:04:56 executing program 3: r0 = socket(0x1e, 0x5, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 14:04:56 executing program 1: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x6, &(0x7f0000000040)={0x1}, 0x10) 14:04:56 executing program 0: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x32, &(0x7f0000000040), 0x10) 14:04:56 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e20, @loopback}}}, 0x90) 14:04:56 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8943, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 14:04:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:56 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) [ 282.975416][T17714] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:04:56 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x5452, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 14:04:56 executing program 3: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x64, 0x0, 0x0) [ 283.016796][T17714] device veth155 entered promiscuous mode 14:04:56 executing program 2: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000080)=':') 14:04:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 283.059672][T17714] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 14:04:56 executing program 3: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x7b, 0x0, 0x0) 14:04:56 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000009c0000009c000000040000000000000000000003000000000300000005000000238d170ec15fa3d0568d36"], &(0x7f0000000180)=""/235, 0xb8, 0xeb, 0x1}, 0x20) 14:04:56 executing program 1: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x82, 0x0, 0x0) 14:04:56 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 14:04:56 executing program 5: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0xb, &(0x7f0000000040)={0x1}, 0x10) 14:04:56 executing program 2: syz_mount_image$erofs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000600)=[{0x0, 0x2}], 0x0, 0x0) 14:04:56 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8931, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) [ 283.200325][T17743] device veth157 entered promiscuous mode 14:04:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:56 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 14:04:56 executing program 5: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x77, 0x0, 0x0) 14:04:56 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8923, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 14:04:56 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8904, &(0x7f0000000500)={'ip6gre0\x00', 0x0}) 14:04:56 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local}}) 14:04:56 executing program 2: r0 = socket(0x1e, 0x5, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={0x0, 0xf0ff7f}}, 0x0) 14:04:56 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8947, &(0x7f0000000500)={'ip6gre0\x00', 0x0}) [ 283.344545][T17766] device veth159 entered promiscuous mode 14:04:56 executing program 1: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0xb, &(0x7f0000000040), 0x10) 14:04:56 executing program 5: unshare(0x8000800) 14:04:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:56 executing program 2: r0 = socket(0x2, 0x2, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0) 14:04:56 executing program 3: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0xc, 0x0, 0x0) 14:04:56 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f00000016c0)=[{{&(0x7f00000004c0)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x0) 14:04:56 executing program 0: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x19, 0x0, 0x0) 14:04:56 executing program 5: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x4, 0x0, 0x0) 14:04:56 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89b0, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 14:04:56 executing program 3: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0xc, &(0x7f0000000040), 0x10) [ 283.533047][T17796] device veth161 entered promiscuous mode 14:04:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:56 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @remote, 0x0, 0x0, 0xffffffff, 0x10000}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}}) 14:04:56 executing program 0: msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/38) 14:04:56 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdf4) 14:04:56 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x64, &(0x7f0000000140)=0x300, 0x4) 14:04:56 executing program 3: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x17, 0x0, 0x0) 14:04:56 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @rand_addr=' \x01\x00', 0x0, 0x1f1eecad9b4aa1c9}}) [ 283.682869][T17817] device veth163 entered promiscuous mode 14:04:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000680)) 14:04:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:56 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x5, 0x0, 0x84) 14:04:56 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 'syz0\x00'}) 14:04:56 executing program 0: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x31, &(0x7f0000000040), 0x10) 14:04:56 executing program 1: syz_mount_image$erofs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x0) 14:04:57 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8980, &(0x7f0000000500)={'syztnl0\x00', 0x0}) 14:04:57 executing program 5: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x4, 0x0, 0x4) 14:04:57 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fanotify_mark(r0, 0x2, 0x10, 0xffffffffffffffff, 0x0) [ 283.875939][T17855] device veth165 entered promiscuous mode 14:04:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:57 executing program 0: r0 = socket(0x2, 0x806, 0x0) ioctl$sock_bt_hci(r0, 0x0, 0x0) 14:04:57 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @private2}}) 14:04:57 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x894a, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 14:04:57 executing program 3: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x4, 0x0, 0x28) 14:04:57 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2}}) 14:04:57 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8940, 0x0) [ 284.007337][T17882] device veth167 entered promiscuous mode 14:04:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d0000", @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:57 executing program 2: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x18, 0x0, 0x0) 14:04:57 executing program 3: openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x38) unshare(0x60020000) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 14:04:57 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001b80)={&(0x7f0000001780), 0x10, 0x0}, 0x0) 14:04:57 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @remote}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000580)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}}) 14:04:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d0000", @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:57 executing program 2: r0 = socket(0xa, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) [ 284.152430][T17906] device veth169 entered promiscuous mode 14:04:57 executing program 1: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x5, 0x0, 0x3) 14:04:57 executing program 5: socketpair(0x10, 0x2, 0x610e, &(0x7f0000000300)) 14:04:57 executing program 2: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0xb, 0x0, 0x0) 14:04:57 executing program 1: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0xb, 0x0, 0x0) [ 284.278293][T17938] device veth171 entered promiscuous mode 14:04:57 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}}, 0x0) 14:04:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d0000", @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001d000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000000)="66b856008ee066b81e018ee8c4c3015dd64e660f3841bbab6c0000260f1c5f9f3e3e360f01c266bad10466ed260f5cb4863d3ca07d0f01cbc4c3456bd384", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:04:57 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, 0x0) ftruncate(r2, 0x1) lseek(r2, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8400fffffffa) write$binfmt_elf64(r1, &(0x7f0000004280)=ANY=[@ANYBLOB="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"/805], 0x356) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000006c0)="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", 0x2000, &(0x7f0000003e80)={&(0x7f0000000200)={0x50, 0xfc857153c933b2f4, 0x438, {0x7, 0x21, 0x3, 0x220a0, 0x0, 0x2, 0x7, 0x1}}, &(0x7f0000000280)={0x18, 0x0, 0x1, {0x7}}, &(0x7f00000002c0)={0x18, 0x0, 0xfa2, {0x3}}, &(0x7f00000026c0)={0x18, 0x0, 0x36e, {0x80000000}}, &(0x7f0000002700)={0x18, 0x0, 0x60bf72d9, {0x8a44}}, &(0x7f0000002740)={0x28, 0x0, 0x400, {{0x200, 0x51, 0x1}}}, &(0x7f0000002780)={0x60, 0x0, 0xffffffff, {{0x4, 0xfffffffffffffff8, 0x2, 0x0, 0x33, 0x1}}}, &(0x7f0000002800)={0x18, 0x0, 0x3, {0xe1d}}, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000002880)={0x20, 0x0, 0x3, {0x0, 0x18}}, 0x0, &(0x7f0000003bc0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x6, 0x6, 0xbc6c, 0x7ff, {0x4, 0x0, 0x665, 0x9, 0x0, 0x4, 0x10000, 0x7, 0x0, 0x0, 0x6, 0xee01, 0xee00, 0x101, 0x7}}}, &(0x7f0000004200)={0x50, 0x0, 0x7ff, [{0x0, 0x400, 0x1, 0x1f, '\x14'}, {0x4, 0x8001, 0x6, 0x0, '\'!(]^\''}]}, 0x0, &(0x7f0000003d80)={0xa0, 0xfffffffffffffffe, 0x0, {{0x3, 0x0, 0x0, 0xff, 0x1000, 0x4, {0x1, 0x23, 0x9, 0x100000000, 0x0, 0x7, 0x10000, 0x0, 0x0, 0x2000, 0x3ff, 0x0, 0x0, 0x4}}, {0x0, 0xb}}}, 0x0}) creat(&(0x7f0000000140)='./bus\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000180)={r5, 0x8c, &(0x7f00000003c0)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x23e8a56a, @rand_addr=' \x01\x00', 0x9}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @local}]}, &(0x7f0000000480)=0x10) 14:04:57 executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f00000008c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x3}}, 0x10, 0x0}, 0x0) 14:04:57 executing program 1: write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) unshare(0x60020000) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x38) 14:04:57 executing program 5: r0 = socket(0x2, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x0) 14:04:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00000000000000", @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 284.467866][T17997] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 284.489018][T17993] device veth173 entered promiscuous mode 14:04:57 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8907, 0x0) 14:04:57 executing program 2: socket(0x2c, 0x3, 0x400) 14:04:57 executing program 5: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0xa, 0x0, 0x0) [ 284.583041][T18018] device veth175 entered promiscuous mode 14:04:57 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8948, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 14:04:57 executing program 1: r0 = socket(0x2, 0x6, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x82, 0x0, 0x0) 14:04:57 executing program 5: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x6e, 0x0, 0x0) 14:04:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00000000000000", @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 284.734782][ T36] audit: type=1804 audit(1630505097.796:23): pid=18055 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir056712939/syzkaller.JMCDct/420/file0/bus" dev="ramfs" ino=52613 res=1 errno=0 [ 284.774015][T18056] device veth177 entered promiscuous mode [ 284.869022][ T36] audit: type=1804 audit(1630505097.886:24): pid=18065 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir056712939/syzkaller.JMCDct/420/file0/bus" dev="ramfs" ino=52613 res=1 errno=0 [ 285.558633][ T36] audit: type=1804 audit(1630505098.626:25): pid=18073 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir056712939/syzkaller.JMCDct/420/file0/file0/bus" dev="ramfs" ino=53295 res=1 errno=0 14:04:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000200)=[{0x2b}], r1, 0x1, 0x1, 0x48}}, 0x20) 14:04:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(r0, 0x0, 0x9, 0x0, &(0x7f0000001ac0)) 14:04:58 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89a0, &(0x7f0000000500)={'ip6gre0\x00', 0x0}) 14:04:58 executing program 1: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0xa, 0x0, 0x0) 14:04:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00000000000000", @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:58 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8936, &(0x7f0000000500)={'ip6gre0\x00', 0x0}) [ 285.618892][ T36] audit: type=1804 audit(1630505098.686:26): pid=18073 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir056712939/syzkaller.JMCDct/420/file0/file0/bus" dev="ramfs" ino=53295 res=1 errno=0 14:04:58 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x400000, 0x4) 14:04:58 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89b0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @private0}}) 14:04:58 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0x53, 0x7, 0x9ef1, 0x61, @mcast2, @loopback, 0x7800, 0x40, 0x80000000, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6tnl0\x00', r1, 0x0, 0x7, 0x4, 0x0, 0x0, @empty, @rand_addr=' \x01\x00', 0x7, 0x700, 0x100}}) 14:04:58 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8922, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) [ 285.749294][T18083] device veth179 entered promiscuous mode 14:04:58 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}}) 14:04:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)) [ 285.872473][T18102] ip6_vti0: mtu less than device minimum 14:04:59 executing program 3: r0 = socket(0x1e, 0x5, 0x0) bind$bt_hci(r0, 0x0, 0x0) 14:04:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/18, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:59 executing program 1: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000), 0x10) 14:04:59 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) io_setup(0x202, &(0x7f0000000200)) 14:04:59 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8937, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 14:04:59 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8932, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 14:04:59 executing program 1: r0 = socket(0x2, 0x5, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x400300}}, 0x0) [ 286.016122][T18122] device veth181 entered promiscuous mode 14:04:59 executing program 5: r0 = socket(0x2, 0x5, 0x0) connect$pppoe(r0, 0x0, 0x0) 14:04:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/18, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:59 executing program 1: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x13, 0x0, 0x4) 14:04:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000001000)) 14:04:59 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001400)={0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 14:04:59 executing program 0: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x11, &(0x7f0000000040), 0x10) [ 286.133592][T18142] __nla_validate_parse: 20 callbacks suppressed [ 286.133608][T18142] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:04:59 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @private}}}) 14:04:59 executing program 0: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x7, 0x0, 0x0) 14:04:59 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x1}) 14:04:59 executing program 5: add_key$user(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="dc", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000340)={0x0, r0}, 0x0, 0x0, 0x0) 14:04:59 executing program 2: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x18, 0x0, 0x0) [ 286.178506][T18142] device veth183 entered promiscuous mode [ 286.206361][T18155] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.4'. 14:04:59 executing program 0: r0 = socket(0x2, 0x5, 0x0) accept$packet(r0, 0x0, 0x0) 14:04:59 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x400000, 0x4) 14:04:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/18, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:59 executing program 2: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0xf, 0x0, 0x0) [ 286.305142][T18162] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability 14:04:59 executing program 0: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x78, 0x0, 0x0) 14:04:59 executing program 5: r0 = socket(0x1e, 0x5, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={0x0}}, 0x24008854) 14:04:59 executing program 3: syz_open_dev$video4linux(&(0x7f0000000140), 0x2, 0x0) 14:04:59 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x894a, &(0x7f0000000500)={'ip6gre0\x00', 0x0}) 14:04:59 executing program 1: r0 = socket(0x23, 0x5, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 14:04:59 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x48, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @local}}}, 0x90) [ 286.431651][T18177] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:04:59 executing program 1: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x71, 0x0, 0x0) 14:04:59 executing program 3: r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='i:', 0x2, 0xffffffffffffffff) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="dc", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000540)={r0, r1, r0}, 0x0, 0x0, 0x0) 14:04:59 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000006c0)="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", 0x2000, &(0x7f0000003e80)={&(0x7f0000000200)={0x50, 0xfc857153c933b2f4, 0x438, {0x7, 0x21, 0x0, 0x220a0, 0x0, 0x0, 0x7, 0x1}}, &(0x7f0000000280)={0x18, 0x0, 0x1}, &(0x7f00000002c0)={0x18, 0x0, 0xfa2}, &(0x7f00000026c0)={0x18, 0x0, 0x36e}, 0x0, &(0x7f0000002740)={0x28, 0x0, 0x0, {{0x200, 0x51}}}, 0x0, &(0x7f0000002800)={0x18, 0x0, 0x3, {0xe1d}}, 0x0, &(0x7f0000002880)={0x20, 0x0, 0x3, {0x0, 0x18}}, 0x0, &(0x7f0000003bc0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x6, 0x6, 0xbc6c, 0x0, {0x4, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x6, 0xee01, 0xee00, 0x101}}}, &(0x7f0000004200)={0x30, 0x0, 0x7ff, [{0x4, 0x0, 0x6, 0x0, '\'!(]^\''}]}, 0x0, &(0x7f0000003d80)={0xa0, 0xfffffffffffffffe, 0x0, {{0x3, 0x0, 0x0, 0xff, 0x1000, 0x4, {0x0, 0x23, 0x9, 0x0, 0x0, 0x7, 0x10000, 0x0, 0x0, 0x2000, 0x3ff, 0x0, 0x0, 0x4}}, {0x0, 0xb}}}, 0x0}) creat(&(0x7f0000000140)='./bus\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x7c, &(0x7f00000003c0)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x23e8a56a, @rand_addr=' \x01\x00', 0x9}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @local}]}, &(0x7f0000000480)=0x10) 14:04:59 executing program 2: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0xc, 0x0, 0x0) [ 286.489427][T18177] device veth185 entered promiscuous mode [ 286.526977][T18193] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.4'. 14:04:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/19, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:04:59 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8903, 0x0) 14:04:59 executing program 1: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0xd, 0x0, 0x0) 14:04:59 executing program 2: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8914, &(0x7f0000000080)={'syztnl0\x00', 0x0}) [ 286.615510][ T36] audit: type=1804 audit(1630505099.676:27): pid=18204 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir607047778/syzkaller.OxmAbQ/397/file0/bus" dev="ramfs" ino=53498 res=1 errno=0 14:04:59 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x200ab00, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x0, {0x2, 0x0, @loopback}, 'veth1_to_hsr\x00'}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @local, 0x0, 0x2, 'wlc\x00'}, 0x2c) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 14:04:59 executing program 0: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x24, &(0x7f0000000040), 0x10) 14:04:59 executing program 1: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @empty}}) [ 286.714187][T18214] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 286.737067][ T36] audit: type=1804 audit(1630505099.766:28): pid=18209 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir607047778/syzkaller.OxmAbQ/397/file0/bus" dev="ramfs" ino=53498 res=1 errno=0 14:04:59 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000140)=0x1, 0x4) 14:04:59 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x0, @local}}}, 0x90) 14:04:59 executing program 0: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x14, 0x0, 0x4) [ 286.814430][T18214] device veth187 entered promiscuous mode [ 286.837804][T18220] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.4'. [ 287.428551][ T36] audit: type=1804 audit(1630505100.496:29): pid=18250 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir607047778/syzkaller.OxmAbQ/397/file0/file0/bus" dev="ramfs" ino=52840 res=1 errno=0 14:05:00 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000006c0)="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", 0x2000, &(0x7f0000003e80)={&(0x7f0000000200)={0x50, 0xfc857153c933b2f4, 0x438, {0x7, 0x21, 0x0, 0x220a0, 0x0, 0x0, 0x7, 0x1}}, &(0x7f0000000280)={0x18, 0x0, 0x1}, &(0x7f00000002c0)={0x18, 0x0, 0xfa2}, &(0x7f00000026c0)={0x18, 0x0, 0x36e}, 0x0, &(0x7f0000002740)={0x28, 0x0, 0x0, {{0x200, 0x51}}}, 0x0, &(0x7f0000002800)={0x18, 0x0, 0x3, {0xe1d}}, 0x0, &(0x7f0000002880)={0x20, 0x0, 0x3, {0x0, 0x18}}, 0x0, &(0x7f0000003bc0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x6, 0x6, 0xbc6c, 0x0, {0x4, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x6, 0xee01, 0xee00, 0x101}}}, &(0x7f0000004200)={0x30, 0x0, 0x7ff, [{0x4, 0x0, 0x6, 0x0, '\'!(]^\''}]}, 0x0, &(0x7f0000003d80)={0xa0, 0xfffffffffffffffe, 0x0, {{0x3, 0x0, 0x0, 0xff, 0x1000, 0x4, {0x0, 0x23, 0x9, 0x0, 0x0, 0x7, 0x10000, 0x0, 0x0, 0x2000, 0x3ff, 0x0, 0x0, 0x4}}, {0x0, 0xb}}}, 0x0}) creat(&(0x7f0000000140)='./bus\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x7c, &(0x7f00000003c0)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x23e8a56a, @rand_addr=' \x01\x00', 0x9}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @local}]}, &(0x7f0000000480)=0x10) 14:05:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/19, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:05:00 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, 0x10}}) 14:05:00 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8918, &(0x7f0000000500)={'ip6gre0\x00', 0x0}) 14:05:00 executing program 0: add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='i', 0x1, 0xffffffffffffffff) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="dc", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000340)={0x0, r0}, 0x0, 0x0, 0x0) 14:05:00 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8940, &(0x7f0000000500)={'ip6gre0\x00', 0x0}) [ 287.488439][ T36] audit: type=1804 audit(1630505100.546:30): pid=18251 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir607047778/syzkaller.OxmAbQ/397/file0/file0/bus" dev="ramfs" ino=52840 res=1 errno=0 [ 287.551830][T18258] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:05:00 executing program 0: r0 = socket(0x2, 0x1, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x24004045) 14:05:00 executing program 3: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040), 0x4) 14:05:00 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000e00)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x80, 0x1, 0xee58, 0x44, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, 0x40, 0x700, 0x8001, 0xe3aab85}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x8, 0x80, 0x40, @remote, @local, 0x20, 0x20, 0xda7, 0xa7}}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0xa0440, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', r2, 0x2f, 0xff, 0x3f, 0x7, 0x32, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x8000, 0x4, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8910, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local}}) ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000340)={0x20, 0x2, 0xffff, 0x9, 0x101}) 14:05:00 executing program 2: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x8, &(0x7f0000000040), 0x10) [ 287.594460][T18258] device veth189 entered promiscuous mode [ 287.609422][T18270] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.4'. 14:05:00 executing program 2: r0 = socket(0xa, 0x2, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x4, 0x0, 0x0) 14:05:00 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89a0, &(0x7f0000000500)={'syztnl2\x00', 0x0}) [ 287.781071][ T36] audit: type=1804 audit(1630505100.846:31): pid=18291 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir607047778/syzkaller.OxmAbQ/398/file0/bus" dev="ramfs" ino=52893 res=1 errno=0 [ 287.868663][ T36] audit: type=1804 audit(1630505100.936:32): pid=18298 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir607047778/syzkaller.OxmAbQ/398/file0/bus" dev="ramfs" ino=52893 res=1 errno=0 14:05:01 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000006c0)="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", 0x2000, &(0x7f0000003e80)={&(0x7f0000000200)={0x50, 0xfc857153c933b2f4, 0x438, {0x7, 0x21, 0x0, 0x220a0, 0x0, 0x0, 0x7, 0x1}}, &(0x7f0000000280)={0x18, 0x0, 0x1}, &(0x7f00000002c0)={0x18, 0x0, 0xfa2}, &(0x7f00000026c0)={0x18, 0x0, 0x36e}, 0x0, &(0x7f0000002740)={0x28, 0x0, 0x0, {{0x200, 0x51}}}, 0x0, &(0x7f0000002800)={0x18, 0x0, 0x3, {0xe1d}}, 0x0, &(0x7f0000002880)={0x20, 0x0, 0x3, {0x0, 0x18}}, 0x0, &(0x7f0000003bc0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x6, 0x6, 0xbc6c, 0x0, {0x4, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x6, 0xee01, 0xee00, 0x101}}}, &(0x7f0000004200)={0x30, 0x0, 0x7ff, [{0x4, 0x0, 0x6, 0x0, '\'!(]^\''}]}, 0x0, &(0x7f0000003d80)={0xa0, 0xfffffffffffffffe, 0x0, {{0x3, 0x0, 0x0, 0xff, 0x1000, 0x4, {0x0, 0x23, 0x9, 0x0, 0x0, 0x7, 0x10000, 0x0, 0x0, 0x2000, 0x3ff, 0x0, 0x0, 0x4}}, {0x0, 0xb}}}, 0x0}) creat(&(0x7f0000000140)='./bus\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x7c, &(0x7f00000003c0)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x23e8a56a, @rand_addr=' \x01\x00', 0x9}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @local}]}, &(0x7f0000000480)=0x10) 14:05:01 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x890b, 0x0) 14:05:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/19, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:05:01 executing program 1: r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='i', 0x1, 0xffffffffffffffff) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="dc", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000540)={r0, r1, r0}, 0x0, 0x0, 0x0) 14:05:01 executing program 2: r0 = socket(0x2, 0x6, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x1}, 0x10) 14:05:01 executing program 3: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x25, 0x0, 0x0) 14:05:01 executing program 2: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x5, 0x0, 0x0) [ 287.981949][T18310] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 288.020897][T18310] device veth191 entered promiscuous mode 14:05:01 executing program 3: r0 = socket(0x2, 0x3, 0x1) getsockname$unix(r0, 0x0, &(0x7f0000000080)) 14:05:01 executing program 0: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x17, &(0x7f0000000040), 0x10) 14:05:01 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x5452, &(0x7f0000000500)={'ip6gre0\x00', 0x0}) [ 288.045875][T18322] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.4'. 14:05:01 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000003140)={'ip6gre0\x00', &(0x7f00000030c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @dev, 0x700}}) 14:05:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r4, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 288.219318][T18336] device veth193 entered promiscuous mode 14:05:01 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000006c0)="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", 0x2000, &(0x7f0000003e80)={&(0x7f0000000200)={0x50, 0xfc857153c933b2f4, 0x438, {0x7, 0x21, 0x0, 0x220a0, 0x0, 0x0, 0x7, 0x1}}, &(0x7f0000000280)={0x18, 0x0, 0x1}, &(0x7f00000002c0)={0x18, 0x0, 0xfa2}, &(0x7f00000026c0)={0x18, 0x0, 0x36e}, 0x0, &(0x7f0000002740)={0x28, 0x0, 0x0, {{0x200, 0x51}}}, 0x0, &(0x7f0000002800)={0x18, 0x0, 0x3, {0xe1d}}, 0x0, &(0x7f0000002880)={0x20, 0x0, 0x3, {0x0, 0x18}}, 0x0, &(0x7f0000003bc0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x6, 0x6, 0xbc6c, 0x0, {0x4, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x6, 0xee01, 0xee00, 0x101}}}, &(0x7f0000004200)={0x30, 0x0, 0x7ff, [{0x4, 0x0, 0x6, 0x0, '\'!(]^\''}]}, 0x0, &(0x7f0000003d80)={0xa0, 0xfffffffffffffffe, 0x0, {{0x3, 0x0, 0x0, 0xff, 0x1000, 0x4, {0x0, 0x23, 0x9, 0x0, 0x0, 0x7, 0x10000, 0x0, 0x0, 0x2000, 0x3ff, 0x0, 0x0, 0x4}}, {0x0, 0xb}}}, 0x0}) creat(&(0x7f0000000140)='./bus\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x7c, &(0x7f00000003c0)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x23e8a56a, @rand_addr=' \x01\x00', 0x9}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @local}]}, &(0x7f0000000480)=0x10) 14:05:01 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8901, &(0x7f0000000500)={'ip6gre0\x00', 0x0}) 14:05:01 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8983, 0x0) 14:05:01 executing program 0: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x24, &(0x7f0000000040)={0x1}, 0x10) 14:05:01 executing program 1: r0 = socket(0xa, 0x5, 0x0) accept$packet(r0, 0x0, 0x0) 14:05:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r4, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:05:01 executing program 0: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0xa, &(0x7f0000000040), 0x10) 14:05:01 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8929, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 14:05:02 executing program 2: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x10, &(0x7f0000000040), 0x10) 14:05:02 executing program 0: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0xd, 0x0, 0x0) 14:05:02 executing program 3: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x5, &(0x7f0000000040), 0x10) [ 288.908316][T18356] device veth195 entered promiscuous mode 14:05:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r4, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 289.041493][T18374] device veth197 entered promiscuous mode 14:05:03 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1000000}}, 0x20) 14:05:03 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000001280)={&(0x7f0000001180), 0xc, &(0x7f0000001240)={0x0}}, 0x0) 14:05:03 executing program 0: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x72, 0x0, 0x0) 14:05:03 executing program 3: r0 = socket(0x1, 0x5, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 14:05:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 14:05:03 executing program 5: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x65, 0x0, 0x0) 14:05:03 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8913, &(0x7f0000000500)={'ip6gre0\x00', 0x0}) 14:05:03 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x1, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @remote, 0x0, 0x40, 0xffffffff, 0x10000}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0xf2, 0x0, 0x401, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x7, 0x80000000, 0x6f}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'ip6tnl0\x00', r1, 0x29, 0x0, 0x0, 0x7, 0x10, @local, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x700, 0x2, 0x8c94}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}}) 14:05:03 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) 14:05:03 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000004c0)={'veth1_vlan\x00', &(0x7f0000000480)=@ethtool_sfeatures={0x3b, 0x2, [{0x7}, {}]}}) 14:05:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) [ 290.054356][T18400] device veth199 entered promiscuous mode 14:05:03 executing program 1: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x76, 0x0, 0x0) 14:05:03 executing program 0: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 14:05:03 executing program 3: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8933, &(0x7f0000000080)={'syztnl0\x00', 0x0}) 14:05:03 executing program 2: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x30, 0x0, 0x0) 14:05:03 executing program 1: r0 = socket(0x29, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x3, 0x0, 0x0) [ 290.197951][T18423] device veth201 entered promiscuous mode 14:05:03 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8927, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 14:05:03 executing program 5: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 14:05:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 14:05:03 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8921, &(0x7f0000000500)={'ip6gre0\x00', 0x0}) 14:05:03 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0, 0x3c}}, 0x0) 14:05:03 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000004c0)={'veth1_vlan\x00', &(0x7f0000000480)=@ethtool_sfeatures}) 14:05:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x335, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x3, 0x80, 0x400000}) 14:05:03 executing program 5: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x14, &(0x7f0000000040), 0x10) 14:05:03 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 14:05:03 executing program 1: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x23, &(0x7f0000000040), 0x10) [ 290.508358][T18464] device veth203 entered promiscuous mode 14:05:03 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) 14:05:03 executing program 2: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x4, &(0x7f0000000040)={0x1}, 0x10) 14:05:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 14:05:03 executing program 0: syz_mount_image$erofs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000600)=[{0x0, 0x6}], 0x0, 0x0) 14:05:03 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x13}, 0x40) 14:05:03 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 14:05:03 executing program 1: r0 = socket(0x2, 0x5, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 14:05:03 executing program 2: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x12, 0x0, 0x0) 14:05:03 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x894c, 0x0) 14:05:03 executing program 0: r0 = socket(0xa, 0x3, 0x1) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) [ 290.702716][T18487] device veth205 entered promiscuous mode 14:05:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 14:05:03 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @remote, 0x0, 0x0, 0xffffffff}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0xf2, 0x0, 0x0, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x7, 0x80000000, 0x6f}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'ip6tnl0\x00', r1, 0x29, 0x7, 0x0, 0x7, 0x10, @local, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x700, 0x2, 0x8c94}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}}) 14:05:03 executing program 5: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x15, 0x0, 0x0) 14:05:03 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @remote}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x7, 0x10, @local, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x700}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}}) 14:05:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000002c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0xc, 0x0, &(0x7f0000000300)=[@free_buffer], 0x0, 0x0, 0x0}) 14:05:03 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000240), r1, 0x2}}, 0x18) 14:05:03 executing program 5: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0xc, &(0x7f0000000040)={0x1}, 0x10) 14:05:03 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', r1, 0x29, 0x3f, 0x6, 0x7, 0x20, @mcast1, @remote, 0x8000, 0x7, 0x0, 0x10000}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'sit0\x00', r1, 0x4, 0x8, 0x6, 0xfffff001, 0x4, @local, @empty, 0x20, 0x700, 0x3, 0x8}}) [ 290.871425][T18517] device veth207 entered promiscuous mode 14:05:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 14:05:04 executing program 2: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x21, &(0x7f0000000040), 0x10) 14:05:04 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89a1, &(0x7f0000000500)={'ip6gre0\x00', 0x0}) 14:05:04 executing program 5: r0 = socket(0x1e, 0x5, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={&(0x7f0000000200), 0x2000020c, &(0x7f00000002c0)={0x0}}, 0x0) 14:05:04 executing program 2: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x6, 0x0, 0x0) 14:05:04 executing program 5: r0 = socket(0xa, 0x6, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x4, 0x0, 0x0) 14:05:04 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfffffffffffffd97) 14:05:04 executing program 1: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x84, 0x2, 0x0, 0x0) [ 291.052576][T18558] device veth209 entered promiscuous mode 14:05:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 14:05:04 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8916, &(0x7f0000000500)={'ip6gre0\x00', 0x0}) 14:05:04 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x120002, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x960, 0x0, @in={0x2, 0x0, @remote}}}, 0x20000190) 14:05:04 executing program 0: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x13, 0x0, 0x0) 14:05:04 executing program 5: r0 = socket(0x11, 0x3, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) 14:05:04 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1000000, &(0x7f00000015c0), 0x0, &(0x7f0000001680)={[{@part}]}) 14:05:04 executing program 3: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x21, 0x0, 0x0) 14:05:04 executing program 3: socketpair(0x10, 0x2, 0x0, &(0x7f0000000300)) 14:05:04 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @rand_addr=' \x01\x00', 0x7, 0x700}}) [ 291.215629][T18586] __nla_validate_parse: 18 callbacks suppressed [ 291.215654][T18586] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:05:04 executing program 5: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0xf, &(0x7f0000000040), 0x10) 14:05:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 14:05:04 executing program 3: r0 = socket(0x26, 0x5, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 291.239588][T18586] device veth211 entered promiscuous mode [ 291.244134][T18586] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 14:05:04 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001400)={0xa, 0x0, 0x0, 0x0, 0x920, 0x1}, 0x40) 14:05:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000680)) [ 291.364042][T18610] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 291.384879][T18610] device veth213 entered promiscuous mode [ 291.390865][T18610] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 14:05:04 executing program 3: r0 = socket(0x2, 0x3, 0x5) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 14:05:04 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x891e, &(0x7f0000000500)={'ip6gre0\x00', 0x0}) 14:05:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) [ 291.582925][T18630] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 291.642331][T18630] device veth215 entered promiscuous mode [ 291.677621][T18635] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 14:05:05 executing program 1: r0 = socket(0x2, 0x5, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x24004045) 14:05:05 executing program 0: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x10, 0x0, 0x0) 14:05:05 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1, 0x0, 0x0, 0x2}}, 0x20) 14:05:05 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8971, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 14:05:05 executing program 2: msgget(0x3, 0x667) 14:05:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:05:05 executing program 2: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x8, 0x0, 0x4) 14:05:05 executing program 1: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x7, 0x0, 0x4) 14:05:05 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x24300) 14:05:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001d000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000000)="66b856008ee066b81e018ee8c4c3015dd64e660f3841bbab6c0000260f1c5f9f3e3e360f01c266bad10466ed260f5cb4863d3ca07d0f01cbc4c3456bd384", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:05:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000d759c1"], 0x14}}, 0x0) recvmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f00000003c0)=@nfc_llcp, 0x80, 0x0, 0x0, &(0x7f0000000840)=""/95, 0x5f}, 0x0) [ 292.259587][T18653] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:05:05 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}}) 14:05:05 executing program 5: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x18, &(0x7f0000000040), 0x10) 14:05:05 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000580)={'ip6gre0\x00', 0x0}) [ 292.335188][T18653] device veth217 entered promiscuous mode [ 292.361241][T18657] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 14:05:05 executing program 0: r0 = socket(0x2, 0x1, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, 0x0, 0x0) 14:05:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:05:05 executing program 5: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x1e, 0x0, 0x4) 14:05:05 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom(r0, 0x0, 0x0, 0x2020, 0x0, 0x0) 14:05:05 executing program 2: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x14, &(0x7f0000000040)={0x1}, 0x10) 14:05:05 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, 'L;d', 0x5}) 14:05:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x3, 0x80, 0x400000}) [ 292.541167][T18700] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:05:05 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[], 0x3) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000080)=0x1) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2bb98205) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ff9e, 0x0) 14:05:05 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f0000000000)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x10, 0x0}, 0x0) 14:05:05 executing program 1: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x7, &(0x7f0000000040)={0x1}, 0x10) 14:05:05 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8922, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @private0}}) [ 292.608489][T18700] device veth219 entered promiscuous mode [ 292.645930][T18712] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 14:05:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:05:05 executing program 5: r0 = socket(0x2, 0x5, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x29, 0x0, 0x0) 14:05:05 executing program 2: r0 = socket(0x1e, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) [ 292.706653][T18729] ip6_vti0: mtu greater than device maximum 14:05:05 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x1, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @remote, 0x0, 0x40, 0xffffffff, 0x10000}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0xf2, 0x0, 0x401, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x7, 0x80000000, 0x6f}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'ip6tnl0\x00', r1, 0x29, 0x0, 0x0, 0x7, 0x10, @local, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x700, 0x2, 0x8c94}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}}) 14:05:05 executing program 5: syz_mount_image$erofs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000040), 0x0, 0x0) 14:05:05 executing program 2: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x17, 0x0, 0x0) [ 292.803364][T18735] device veth221 entered promiscuous mode 14:05:06 executing program 0: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x6, 0x0, 0x0) 14:05:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:05:06 executing program 0: r0 = socket(0x2, 0x3, 0x4) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x24004045) 14:05:06 executing program 1: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x17, &(0x7f0000000040)={0x1}, 0x10) 14:05:06 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8916, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local}}) 14:05:06 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) 14:05:06 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8910, &(0x7f0000000500)={'ip6gre0\x00', 0x0}) 14:05:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 293.433097][T18785] device veth223 entered promiscuous mode 14:05:06 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8918, 0x0) 14:05:06 executing program 0: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x75, 0x0, 0x0) 14:05:06 executing program 3: r0 = socket(0xa, 0x3, 0x1) recvmsg$unix(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x12002) [ 293.554794][T18804] device veth225 entered promiscuous mode 14:05:06 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f0000001680)={[{@part}]}) 14:05:06 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8924, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 14:05:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:05:06 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x141) 14:05:06 executing program 0: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x32, 0x0, 0x0) 14:05:06 executing program 2: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x6b, 0x0, 0x0) 14:05:06 executing program 3: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x19, 0x0, 0x0) [ 293.698286][T18825] hfsplus: unable to find HFS+ superblock 14:05:06 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8906, 0x0) [ 293.749467][T18825] hfsplus: unable to find HFS+ superblock [ 293.760142][T18833] device veth227 entered promiscuous mode 14:05:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 14:05:06 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) chdir(&(0x7f0000000480)='./file0\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)='cpuset.cpus\x00', 0x2, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)='0', 0x1}, {&(0x7f0000000040)='a', 0x1}], 0x2) 14:05:06 executing program 5: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x14, 0x0, 0x0) 14:05:06 executing program 2: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x11, 0x0, 0x0) 14:05:06 executing program 3: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x5, 0x0, 0x84) 14:05:06 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89b1, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 14:05:06 executing program 5: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x21, 0x0, 0x4) 14:05:07 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x38) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) unshare(0x60020000) [ 293.882156][T18859] device veth229 entered promiscuous mode [ 293.888949][T18863] new mount options do not match the existing superblock, will be ignored 14:05:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 14:05:07 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) getpid() sched_setscheduler(0x0, 0x0, &(0x7f00000001c0)) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000006c0)="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", 0x2000, &(0x7f0000003e80)={&(0x7f0000000200)={0x50, 0xfc857153c933b2f4, 0x438, {0x7, 0x21, 0x3, 0x220a0, 0x0, 0x2, 0x7, 0x1}}, &(0x7f0000000280)={0x18, 0x0, 0x1, {0x7}}, 0x0, &(0x7f00000026c0)={0x18, 0x0, 0x36e, {0x80000000}}, &(0x7f0000002700)={0x18, 0x0, 0x60bf72d9}, &(0x7f0000002740)={0x28, 0x0, 0x400, {{0x200, 0x51, 0x1}}}, &(0x7f0000002780)={0x60, 0x0, 0xffffffff, {{0x0, 0xfffffffffffffff8, 0x2, 0x0, 0x33, 0x1, 0x0, 0xfffffffd}}}, &(0x7f0000002800)={0x18, 0x0, 0x0, {0xe1d}}, &(0x7f0000000340)=ANY=[@ANYBLOB="16000000daffffff883100000000001072616d66730086653f4032a5ad6da9ab2ff65e43217b38b539e745a2d83192ba3bc2e1e9a355d801cbca4482c71c1f0d84144a3823aabb397479ef722d2cb8e1e11d0e6bd51d8cc06e586ae8aa2b68bc47101b011ca617aa05e4da7da616d2bd334716ba9c"], &(0x7f0000002880)={0x20, 0x0, 0x3}, 0x0, &(0x7f0000003bc0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x6, 0x6, 0xbc6c, 0x7ff, {0x0, 0x0, 0x665, 0x9, 0x0, 0x4, 0x10000, 0x7, 0x0, 0x0, 0x6, 0xee01, 0xee00, 0x101, 0x7}}}, &(0x7f0000004200)={0x50, 0x0, 0x7ff, [{0x0, 0x400, 0x1, 0x1f, '\x14'}, {0x4, 0x8001, 0x6, 0x0, '\'!(]^\''}]}, 0x0, &(0x7f0000003d80)={0xa0, 0xfffffffffffffffe, 0x0, {{0x3, 0x0, 0x0, 0x0, 0x1000, 0x4, {0x1, 0x23, 0x9, 0x100000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2000, 0x3ff, 0x0, 0x0, 0x4}}, {0x0, 0xb}}}, 0x0}) creat(&(0x7f0000000140)='./bus\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x7c, &(0x7f00000003c0)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e20, 0x23e8a56a, @rand_addr=' \x01\x00', 0x9}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @local}]}, &(0x7f0000000480)=0x10) [ 293.940092][T18863] new mount options do not match the existing superblock, will be ignored 14:05:07 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8901, 0x0) 14:05:07 executing program 5: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x78, 0x0, 0x4) 14:05:07 executing program 2: r0 = socket(0x23, 0x5, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, 0x0) 14:05:07 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89a0, &(0x7f0000000500)={'syztnl0\x00', 0x0}) [ 294.055118][T18882] device veth231 entered promiscuous mode [ 294.067264][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 294.067278][ T36] audit: type=1804 audit(1630505107.136:37): pid=18889 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir056712939/syzkaller.JMCDct/459/file0/bus" dev="ramfs" ino=55416 res=1 errno=0 14:05:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000002400150d00"/20, @ANYRES32=r5, @ANYBLOB="00000080f1ffffff00652f0008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 14:05:07 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}}) 14:05:07 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8942, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 14:05:07 executing program 0: r0 = socket(0x25, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x7, 0x0, 0x4) 14:05:07 executing program 2: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) 14:05:07 executing program 5: r0 = socket(0x2, 0x6, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, 0x0, 0x0) 14:05:07 executing program 3: r0 = socket(0x2b, 0x1, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x8, 0x0, 0x4) [ 294.225261][ T36] audit: type=1804 audit(1630505107.246:38): pid=18918 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir056712939/syzkaller.JMCDct/459/file0/bus" dev="ramfs" ino=55416 res=1 errno=0 [ 294.250838][T18927] device veth233 entered promiscuous mode 14:05:07 executing program 1: r0 = socket(0x2, 0x5, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 14:05:07 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x890c, &(0x7f0000000500)={'ip6gre0\x00', 0x0}) [ 294.312648][T18939] overlayfs: failed to resolve './file1': -2 14:05:07 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8914, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 14:05:07 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000017c0)={0x40, 0x0, 0x3}, 0x10) [ 294.341819][ T36] audit: type=1804 audit(1630505107.266:39): pid=18918 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir056712939/syzkaller.JMCDct/459/file0/file0/bus" dev="ramfs" ino=55435 res=1 errno=0 14:05:07 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}}) 14:05:07 executing program 1: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x29, 0x0, 0x0) 14:05:07 executing program 3: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x6b, 0x0, 0x4) 14:05:07 executing program 4: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x11, 0x0, 0x0) 14:05:07 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8981, &(0x7f0000000500)={'syztnl0\x00', 0x0}) [ 294.476587][ T36] audit: type=1804 audit(1630505107.276:40): pid=18925 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir056712939/syzkaller.JMCDct/459/file0/file0/bus" dev="ramfs" ino=55435 res=1 errno=0 14:05:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000000c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000100)=[@acquire={0x40046305, 0x3}], 0x0, 0x0, 0x0}) 14:05:07 executing program 3: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x7, 0x0, 0x0) 14:05:07 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89a1, &(0x7f0000000500)={'syztnl0\x00', 0x0}) 14:05:07 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 'syz0\x00'}) [ 294.591524][ T29] Bluetooth: hci0: command 0x0401 tx timeout 14:05:07 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000480), 0x974e247c635ed087, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000340)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "a294a0", "de2a86127db5fbdef614a59c4c0cdbc7845ebb690333712187d5c9480f7abeda31df3d1975416d44cbc51ffde51651780f664c9d00f4f50e44fda26648aac21364a9889e34292e1f16983c0f682bcc759f8c8f54a9ccff6593265116452d1a104972aa5331ccd59c9b110d13da11c15c2d2c79597aab6b416c05c4044ac865d3a734be078010f6aa24c24b2a1147611b4d9b5cb602a534831273a478cad5b00572058b8bc9d068b5f03f7b5d5479d9d698df63c47896bf9b6d7f56abfbdf1ccc90f553566c3b615f0822d2598712ed0a916418cb83ae11a14df7f5562f9d8f466cf5cde4573d1de20cdaa313919415e1b0e192aec1a4446d44a40c4423b6850e"}}, 0x110) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x38) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000740)={0x6, 0x118, 0xfa00, {{0x0, 0x9, "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", 0x6, 0x6, 0x0, 0x6, 0x0, 0x1, 0x1, 0x1}}}, 0x120) unshare(0x60020000) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x38) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000004c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x2, {0xa, 0x4e23, 0x5, @mcast1, 0x6}}}, 0x38) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x0, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x212ac}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 14:05:07 executing program 0: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x4c81) 14:05:07 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b24df41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f172d96704902cbe7bc04b82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a16e9e184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd47d8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed00b0000002cab554ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bcffc2cc788bee1b47683db01a469398685211bbae0e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcdcc22ee17476d738992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673f8b6e74ce23877a3f4ecfe9379e475b2942fa629fbef2461c96a08707671315c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e48455b588b90dfae158b94f50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b400000000cc0000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859ac8e3c177b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed97116ee0c1fa9185bc68477b8521cb0c69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3b854b1c8c768c001496fa99ce5b5040be959096ea948cfa8e7194123e918914a71ad5a8521fb956d05000000719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bf8c2c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fccf363361dcdba10c1547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d2bccf977c3e88538f406b598307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e54b7fc96d6a706008ed3e14a0c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000000000000000000000000000005333c6099c12dcd92689192727a7267c47cf897853d160100b39b613faefe16bed1fc105cddd77ab929b837d54aa17fa9fbdc2bdc0e98ae2c3f23a6131e2879f0484ee3bfe30b92dd493be66c2242f8184733b80ba28e824910844df3108d5bb2f89049c5f6d63956995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2d0908be79314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc175876410c02889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab602000000000000000000000000000000000000000000fa80459bb5d3c2f325288c2cc2734810e7ef209f233ad097c30ba8c0f8555f8b304a1acfb009a7f2ee0d0380a2f2a8795172af094a2751c35f807949973491c5b22ad1e9d89d21d7f30e51f686b176eb732565750250ebcc9a40a6c909ec9293952e9ac5a81b9627c05dbd5228d6e28f88fda08e68d7318d27b2bc5c21eebca3727b168ce336813c6cf83956f1ddc7851142143f1ab078436f068f8e2819f21c5b3a74605a2d7420a2db49f7afa89f0b2b02b13fea020a6f100edadbf1d3a861174e87122b76f5cb7928bd85a93f5b68f5f76e1a08c19972040011ae3f69c9a5e09a8c2a806749da91d43fbeb6a39b8674aabdf02b16791862e49f78133cf4797a0e9c57abc2cc7b6d"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) open(0x0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000680)=0x14, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 14:05:07 executing program 2: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x3, 0x0, 0x0) 14:05:07 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8983, &(0x7f0000000500)={'ip6gre0\x00', 0x0}) 14:05:07 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8912, &(0x7f0000000500)={'ip6gre0\x00', 0x0}) 14:05:07 executing program 0: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x13, 0x0, 0x0) 14:05:07 executing program 3: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0xa, &(0x7f0000000040)={0xff}, 0x10) 14:05:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000d759c1"], 0x14}}, 0x0) recvmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/95, 0x5f}, 0x0) 14:05:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000020000000000000001000005000000000200f0ff030000000000b897ae"], &(0x7f0000000180)=""/241, 0x32, 0xf1, 0x1}, 0x20) 14:05:08 executing program 2: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x7c, 0x0, 0x0) 14:05:08 executing program 0: r0 = socket(0x2, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x84, 0x1e, 0x0, 0x0) 14:05:08 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x630b, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:08 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000020000000000000001000005000000000200f0"], &(0x7f0000000180)=""/241, 0x32, 0xf1, 0x1}, 0x20) 14:05:08 executing program 4: r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x6, 0x83, 0x0, 0x0) 14:05:08 executing program 3: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x4, 0x0, 0x84) 14:05:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x630b, {0x630c, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046306, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 295.217352][T19062] binder: 19056:19062 unknown command 0 [ 295.232008][T19065] binder: 19059:19065 unknown command 0 [ 295.232302][T19066] binder: 19060:19066 unknown command 0 [ 295.243046][T19062] binder: 19056:19062 ioctl c0306201 20000200 returned -22 [ 295.258196][T19065] binder: 19059:19065 ioctl c0306201 20000200 returned -22 14:05:08 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x630d, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 295.271183][T19066] binder: 19060:19066 ioctl c0306201 20000200 returned -22 [ 295.285265][T19068] binder: 19056:19068 unknown command 0 [ 295.302907][T19068] binder: 19056:19068 ioctl c0306201 20000200 returned -22 14:05:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 295.316650][T19069] binder: 19059:19069 unknown command 0 [ 295.331227][T19069] binder: 19059:19069 ioctl c0306201 20000200 returned -22 [ 295.339852][T19070] binder: 19060:19070 unknown command 0 [ 295.343195][T19062] binder: 19056:19062 unknown command 0 [ 295.360417][T19073] binder: 19056:19073 unknown command 0 14:05:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x4000000000000073, 0x161081) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0xb1a, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e24}], 0x1000000, &(0x7f00000062c0)={[], [{@dont_hash}, {@pcr={'pcr', 0x3d, 0x33}}, {@dont_appraise}, {@fowner_lt}]}) [ 295.363209][T19070] binder: 19060:19070 ioctl c0306201 20000200 returned -22 [ 295.369609][T19062] binder: 19056:19062 ioctl c0306201 20000200 returned -22 [ 295.396598][T19073] binder: 19056:19073 ioctl c0306201 20000200 returned -22 [ 295.397226][T19076] binder: 19072:19076 unknown command 0 14:05:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) ioctl$TCGETS(r0, 0x5401, 0x0) syz_open_dev$sg(&(0x7f0000001740), 0x0, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000900)={0x7fffffff, 0xfff, 0x0, 0x0, 0x0, "434ba415d4fab6cff292741746c0c607a71cbc"}) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 295.448420][T19077] binder: 19074:19077 unknown command 0 [ 295.467012][T19079] binder: 19072:19079 unknown command 0 [ 295.475705][T19077] binder: 19074:19077 ioctl c0306201 20000200 returned -22 [ 295.484176][T19076] binder: 19072:19076 ioctl c0306201 20000200 returned -22 14:05:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046306, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 295.493592][ T36] audit: type=1804 audit(1630505108.556:41): pid=19075 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/410/bus/file0" dev="overlay" ino=14693 res=1 errno=0 [ 295.523801][T19084] binder: 19074:19084 unknown command 0 [ 295.534688][T19083] usb usb9: usbfs: process 19083 (syz-executor.5) did not claim interface 26 before use [ 295.536298][T19079] binder: 19072:19079 ioctl c0306201 20000200 returned -22 [ 295.556112][T19085] binder_alloc: 19072: binder_alloc_buf, no vma [ 295.572071][T19088] loop5: detected capacity change from 0 to 270 14:05:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x4000000000000073, 0x161081) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0xb1a, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e24}], 0x1000000, &(0x7f00000062c0)={[], [{@dont_hash}, {@pcr={'pcr', 0x3d, 0x33}}, {@dont_appraise}, {@fowner_lt}]}) 14:05:08 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0}) [ 295.583466][T19084] binder: 19074:19084 ioctl c0306201 20000200 returned -22 14:05:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40086310, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 295.596487][T19097] binder: 19087:19097 unknown command 0 14:05:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001740), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000040)) 14:05:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x4000000000000073, 0x161081) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0xb1a, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e24}], 0x1000000, &(0x7f00000062c0)={[], [{@dont_hash}, {@pcr={'pcr', 0x3d, 0x33}}, {@dont_appraise}, {@fowner_lt}]}) [ 295.596504][T19097] binder: 19087:19097 ioctl c0306201 20000200 returned -22 14:05:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0}) 14:05:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x4000000000000073, 0x161081) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0xb1a, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e24}], 0x1000000, &(0x7f00000062c0)={[], [{@dont_hash}, {@pcr={'pcr', 0x3d, 0x33}}, {@dont_appraise}, {@fowner_lt}]}) [ 295.613760][T19097] binder: 19087:19097 unknown command 0 [ 295.622098][T19097] binder: 19087:19097 ioctl c0306201 20000200 returned -22 14:05:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:08 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 295.648355][T19076] binder: 19072:19076 unknown command 0 [ 295.648375][T19076] binder: 19072:19076 ioctl c0306201 20000200 returned -22 [ 295.649073][T19076] binder: 19072:19076 unknown command 0 [ 295.649086][T19076] binder: 19072:19076 ioctl c0306201 20000200 returned -22 [ 295.649295][T19079] binder_alloc: 19072: binder_alloc_buf, no vma [ 295.692023][ T36] audit: type=1804 audit(1630505108.626:42): pid=19086 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/410/bus/bus/file0" dev="overlay" ino=14676 res=1 errno=0 [ 295.692557][T19102] binder: 19100:19102 ioctl c0306201 20000380 returned -14 [ 295.716121][T19103] binder: 19100:19103 ioctl c0306201 20000380 returned -14 [ 295.731812][T19106] usb usb9: usbfs: process 19106 (syz-executor.5) did not claim interface 26 before use [ 295.769339][T19110] binder: 19105:19110 unknown command 0 [ 295.769358][T19110] binder: 19105:19110 ioctl c0306201 20000200 returned -22 [ 295.785549][ T36] audit: type=1804 audit(1630505108.846:43): pid=19107 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/411/bus/file0" dev="overlay" ino=13956 res=1 errno=0 [ 295.786729][T19113] binder: 19105:19113 unknown command 0 [ 295.786747][T19113] binder: 19105:19113 ioctl c0306201 20000200 returned -22 [ 295.818145][T19116] usb usb9: usbfs: process 19116 (syz-executor.5) did not claim interface 26 before use [ 295.848165][T19119] binder: 19115:19119 unknown command 0 [ 295.848183][T19119] binder: 19115:19119 ioctl c0306201 20000200 returned -22 [ 295.872622][T19119] binder: 19115:19119 unknown command 0 [ 295.872643][T19119] binder: 19115:19119 ioctl c0306201 20000200 returned -22 [ 295.875183][T19119] binder_alloc: 19115: binder_alloc_buf, no vma [ 295.900369][T19122] usb usb9: usbfs: process 19122 (syz-executor.5) did not claim interface 26 before use [ 296.012337][T19119] binder: 19115:19119 ioctl c0306201 20000380 returned -14 [ 296.064607][T19123] binder: 19121:19123 unknown command 0 [ 296.064626][T19123] binder: 19121:19123 ioctl c0306201 20000200 returned -22 [ 296.069954][T19123] binder: 19121:19123 unknown command 0 14:05:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40086303, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0}) [ 296.104453][T19119] binder: 19115:19119 unknown command 0 [ 296.126550][ T36] audit: type=1804 audit(1630505109.186:44): pid=19127 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/412/bus/file0" dev="overlay" ino=14226 res=1 errno=0 [ 296.129380][T19133] binder: 19121:19133 unknown command 0 [ 296.151712][ C0] vkms_vblank_simulate: vblank timer overrun [ 296.159351][T19119] binder: 19115:19119 ioctl c0306201 20000200 returned -22 [ 296.177880][T19131] binder: 19115:19131 unknown command 0 [ 296.180228][T19123] binder: 19121:19123 ioctl c0306201 20000200 returned -22 [ 296.183909][T19131] binder: 19115:19131 ioctl c0306201 20000200 returned -22 14:05:09 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046307, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:09 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x80, 0x33, 0x14, 0x40, 0x1199, 0x6802, 0xdc17, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x29, 0x9f, 0x82}}]}}]}}, 0x0) [ 296.245190][T19133] binder: 19121:19133 ioctl c0306201 20000380 returned -22 [ 296.260370][T19123] binder: 19121:19123 unknown command 0 [ 296.279283][T19123] binder: 19121:19123 ioctl c0306201 20000200 returned -22 [ 296.279611][T19137] binder: 19121:19137 unknown command 0 [ 296.309357][T19143] binder: 19139:19143 unknown command 0 [ 296.314318][T19146] binder: 19138:19146 unknown command 0 [ 296.321788][T19137] binder: 19121:19137 ioctl c0306201 20000200 returned -22 [ 296.333952][T19123] binder: 19121:19123 unknown command 0 [ 296.334357][T19146] binder: 19138:19146 ioctl c0306201 20000200 returned -22 [ 296.340348][T19123] binder: 19121:19123 ioctl c0306201 20000380 returned -22 [ 296.355558][T19145] binder: 19140:19145 unknown command 0 [ 296.356651][T19146] binder: 19138:19146 ioctl c0306201 20000380 returned -14 [ 296.363662][T19143] binder: 19139:19143 ioctl c0306201 20000200 returned -22 [ 296.374394][T19146] binder: 19138:19146 unknown command 0 [ 296.382901][T19146] binder: 19138:19146 ioctl c0306201 20000200 returned -22 [ 296.388049][T19145] binder: 19140:19145 ioctl c0306201 20000200 returned -22 [ 296.394963][T19149] binder: 19138:19149 ioctl c0306201 20000380 returned -14 [ 296.411027][T19151] binder: 19140:19151 unknown command 0 [ 296.429744][T19152] binder: 19139:19152 unknown command 0 [ 296.436615][T19151] binder: 19140:19151 ioctl c0306201 20000200 returned -22 [ 296.448385][T19152] binder: 19139:19152 ioctl c0306201 20000200 returned -22 14:05:09 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:09 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], 0x10) write$P9_RCREATE(r1, &(0x7f0000000000)={0x18}, 0x18) 14:05:09 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x81) perf_event_open(0x0, 0x0, 0x5, r0, 0x10) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x80) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0xff, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) [ 296.476748][T19151] binder: 19140:19151 unknown command 0 [ 296.491858][T19151] binder: 19140:19151 ioctl c0306201 20000200 returned -22 [ 296.500104][T19154] binder: 19140:19154 unknown command 0 [ 296.517339][T19154] binder: 19140:19154 ioctl c0306201 20000200 returned -22 14:05:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40106308, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 296.541186][T19161] binder: 19157:19161 unknown command 0 [ 296.562957][T19161] binder: 19157:19161 ioctl c0306201 20000200 returned -22 [ 296.579898][ T5] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 296.595208][T19161] binder: 19157:19161 unknown command 0 [ 296.615511][T19161] binder: 19157:19161 ioctl c0306201 20000200 returned -22 [ 296.633316][T19169] binder: 19166:19169 unknown command 0 [ 296.636332][T19167] binder: 19164:19167 unknown command 0 [ 296.644435][T19161] binder: 19157:19161 unknown command 0 [ 296.644601][T19167] binder: 19164:19167 ioctl c0306201 20000200 returned -22 [ 296.653871][T19169] binder: 19166:19169 ioctl c0306201 20000200 returned -22 14:05:09 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 296.691675][T19172] binder: 19164:19172 unknown command 0 [ 296.698884][T19171] binder: 19166:19171 unknown command 0 [ 296.700609][T19161] binder: 19157:19161 ioctl c0306201 20000380 returned -22 [ 296.715748][T19172] binder: 19164:19172 ioctl c0306201 20000200 returned -22 [ 296.718685][T19171] binder: 19166:19171 ioctl c0306201 20000200 returned -22 14:05:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x630b, {0x630c, 0x630b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 296.752397][T19169] binder: 19166:19169 unknown command 0 [ 296.764588][T19169] binder: 19166:19169 ioctl c0306201 20000200 returned -22 [ 296.764753][T19171] binder: 19166:19171 unknown command 0 [ 296.788329][T19171] binder: 19166:19171 ioctl c0306201 20000200 returned -22 14:05:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x4008630a, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 296.809613][T19177] binder: 19176:19177 unknown command 0 [ 296.816886][T19177] binder: 19176:19177 ioctl c0306201 20000200 returned -22 [ 296.826427][T19180] binder: 19178:19180 unknown command 0 [ 296.831579][T19177] binder: 19176:19177 unknown command 0 [ 296.842759][T19180] binder: 19178:19180 ioctl c0306201 20000200 returned -22 [ 296.842896][T19177] binder: 19176:19177 ioctl c0306201 20000200 returned -22 [ 296.871437][T19177] binder: 19176:19177 unknown command 0 [ 296.879740][T19177] binder: 19176:19177 ioctl c0306201 20000380 returned -22 [ 296.905217][T19183] binder: 19178:19183 unknown command 0 14:05:10 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 296.920511][T19183] binder: 19178:19183 ioctl c0306201 20000200 returned -22 [ 296.929894][T19184] binder: BC_ATTEMPT_ACQUIRE not supported [ 296.938286][T19184] binder: 19181:19184 ioctl c0306201 20000200 returned -22 [ 296.955953][ T5] usb 6-1: New USB device found, idVendor=1199, idProduct=6802, bcdDevice=dc.17 [ 296.988035][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.001922][T19186] binder: BC_ATTEMPT_ACQUIRE not supported [ 297.016257][ T5] usb 6-1: config 0 descriptor?? [ 297.022978][T19186] binder: 19181:19186 ioctl c0306201 20000200 returned -22 [ 297.047303][T19189] binder: 19187:19189 unknown command 0 [ 297.066654][ T5] sierra 6-1:0.0: Sierra USB modem converter detected [ 297.079305][T19189] binder: 19187:19189 ioctl c0306201 20000200 returned -22 14:05:10 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) 14:05:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001740), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x1267, &(0x7f0000000040)) [ 297.105570][T19189] binder: 19187:19189 unknown command 0 [ 297.111362][ T36] audit: type=1804 audit(1630505110.176:45): pid=19192 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/413/bus/file0" dev="overlay" ino=14181 res=1 errno=0 [ 297.144762][T19189] binder: 19187:19189 ioctl c0306201 20000200 returned -22 [ 297.156341][T19193] binder: 19187:19193 unknown command 0 [ 297.163408][T19193] binder: 19187:19193 ioctl c0306201 20000380 returned -22 [ 297.298505][ T5] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 297.313078][ T5] usb 6-1: USB disconnect, device number 12 [ 297.330223][ T5] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 297.340380][ T5] sierra 6-1:0.0: device disconnected [ 298.045730][ T5] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 298.415986][ T5] usb 6-1: New USB device found, idVendor=1199, idProduct=6802, bcdDevice=dc.17 [ 298.425045][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.438362][ T5] usb 6-1: config 0 descriptor?? [ 298.479117][ T5] sierra 6-1:0.0: Sierra USB modem converter detected [ 298.505741][ T8105] Bluetooth: hci1: command 0x0406 tx timeout [ 298.511788][ T8105] Bluetooth: hci3: command 0x0406 tx timeout [ 298.518539][ T8105] Bluetooth: hci0: command 0x0406 tx timeout [ 298.524545][ T8105] Bluetooth: hci2: command 0x0406 tx timeout [ 298.531683][ T8105] Bluetooth: hci4: command 0x0406 tx timeout [ 298.538207][ T8105] Bluetooth: hci5: command 0x0406 tx timeout 14:05:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000840)) syz_open_dev$sg(&(0x7f0000001740), 0x0, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8000000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000740)=0x0, &(0x7f0000000780)) syz_io_uring_submit(r4, r3, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0x80, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0, 0x80800, 0x1}, 0x81) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000008c0), 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r5, r3, 0x0, 0x0) 14:05:11 executing program 3: syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x41, &(0x7f0000000200)={[{@rtdev={'rtdev', 0x3d, './file0'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'xfs\x00'}}]}) 14:05:11 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:11 executing program 0: syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200)) 14:05:11 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) 14:05:11 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x5d, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 298.686924][ T5] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 298.723663][ T5] usb 6-1: USB disconnect, device number 13 [ 298.751155][T19247] binder: 19237:19247 unknown command 0 [ 298.759411][ T5] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 298.766857][T19248] XFS (loop3): Invalid device [./file0], error=-15 [ 298.768827][T19245] binder: 19239:19245 unknown command 0 [ 298.784435][T19247] binder: 19237:19247 ioctl c0306201 20000200 returned -22 [ 298.793375][ T5] sierra 6-1:0.0: device disconnected [ 298.818054][T19245] binder: 19239:19245 ioctl c0306201 20000200 returned -22 [ 298.819605][T19248] XFS (loop3): Invalid device [./file0], error=-15 [ 298.834130][T19243] XFS (loop0): Invalid superblock magic number 14:05:11 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) 14:05:12 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 298.854778][T19247] binder: 19237:19247 unknown command 0 [ 298.864047][T19245] binder: 19239:19245 unknown command 0 [ 298.870421][T19247] binder: 19237:19247 ioctl c0306201 20000380 returned -22 [ 298.884951][T19245] binder: 19239:19245 ioctl c0306201 20000200 returned -22 [ 298.894653][T19245] binder_alloc: 19239: binder_alloc_buf, no vma 14:05:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$sg(&(0x7f0000001740), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 14:05:12 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x630c, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 298.929168][T19245] binder: 19239:19245 unknown command 0 [ 298.952048][T19291] binder: 19239:19291 unknown command 0 [ 298.963955][T19245] binder: 19239:19245 ioctl c0306201 20000200 returned -22 14:05:12 executing program 0: syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300), 0xc, 0x0}, 0x4040001) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x0, 0x5, &(0x7f0000001ec0)=[{0x0}, {0x0}, {&(0x7f0000001cc0)="8f153361a3e41286a7dd56e54da5c35c4260953b516c", 0x16}, {&(0x7f0000001d80)="1ea2b1de51da909bdb088b67ba", 0xd, 0x5}, {&(0x7f0000001e40)="b4", 0x1, 0x1}], 0x44, &(0x7f0000001fc0)={[{@shortname_mixed}], [{@smackfsroot={'smackfsroot', 0x3d, 'batadv\x00'}}]}) [ 298.979744][T19302] binder: 19299:19302 unknown command 0 [ 298.991299][T19291] binder: 19239:19291 ioctl c0306201 20000200 returned -22 [ 298.992856][T19243] XFS (loop0): Invalid superblock magic number [ 299.012684][T19302] binder: 19299:19302 ioctl c0306201 20000200 returned -22 14:05:12 executing program 1: perf_event_open(&(0x7f0000001b40)={0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) 14:05:12 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 299.070113][T19320] binder: 19303:19320 unknown command 0 [ 299.070131][T19320] binder: 19303:19320 ioctl c0306201 20000200 returned -22 [ 299.078626][T19322] binder: 19299:19322 unknown command 0 [ 299.078643][T19322] binder: 19299:19322 ioctl c0306201 20000380 returned -22 [ 299.081039][T19326] binder: 19303:19326 unknown command 0 14:05:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001180), 0x8000, &(0x7f0000001200)={[{@utf8}, {@shortname_lower}, {@uni_xlateno}]}) 14:05:12 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:12 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x170) [ 299.157003][T19331] FAT-fs (loop0): bogus number of reserved sectors [ 299.174524][T19331] FAT-fs (loop0): Can't find a valid FAT filesystem [ 299.188569][T19326] binder: 19303:19326 ioctl c0306201 20000200 returned -22 14:05:12 executing program 1: syz_mount_image$erofs(&(0x7f0000004240), &(0x7f0000004280)='./file0\x00', 0x0, 0x0, &(0x7f0000005640), 0x0, &(0x7f00000056c0)) 14:05:12 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8590}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 299.249886][T19343] binder: 19339:19343 unknown command 0 [ 299.275769][T19352] FAT-fs (loop0): bogus number of reserved sectors [ 299.283297][T19343] binder: 19339:19343 ioctl c0306201 20000200 returned -22 14:05:12 executing program 3: perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 299.301707][T19352] FAT-fs (loop0): Can't find a valid FAT filesystem [ 299.314351][T19360] binder: 19339:19360 unknown command 0 [ 299.328632][T19363] erofs: (device loop1): erofs_read_superblock: cannot find valid erofs superblock 14:05:12 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:12 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 299.345802][T19360] binder: 19339:19360 ioctl c0306201 20000380 returned -22 14:05:12 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000140)) 14:05:12 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:05:12 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:12 executing program 3: openat$audio1(0xffffffffffffff9c, &(0x7f0000001240), 0x4182, 0x0) [ 299.429186][T19363] erofs: (device loop1): erofs_read_superblock: cannot find valid erofs superblock 14:05:12 executing program 5: syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair(0x28, 0x0, 0x46ac, &(0x7f0000003b40)) 14:05:12 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@noacl}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}) 14:05:12 executing program 1: socketpair(0x25, 0x5, 0x400, &(0x7f0000000100)) [ 299.474430][T19384] binder: 19376:19384 unknown command 0 [ 299.505235][T19384] binder: 19376:19384 ioctl c0306201 20000200 returned -22 [ 299.545224][T19384] binder: 19376:19384 unknown command 0 [ 299.558482][T19384] binder: 19376:19384 ioctl c0306201 20000200 returned -22 [ 299.571365][T19400] erofs: Unknown parameter 'defcontext' 14:05:12 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) 14:05:12 executing program 1: syz_mount_image$affs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[{0x0, 0x0, 0x100000001}], 0x0, 0x0) 14:05:12 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 299.591070][T19384] binder: 19376:19384 unknown command 0 14:05:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) [ 299.634147][T19384] binder: 19376:19384 ioctl c0306201 20000380 returned -22 [ 299.657238][T19400] erofs: Unknown parameter 'defcontext' [ 299.659478][T19407] loop1: detected capacity change from 0 to 264192 14:05:12 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:12 executing program 3: r0 = landlock_create_ruleset(&(0x7f0000000000)={0x1000}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) 14:05:12 executing program 0: socketpair(0x1f, 0x0, 0x0, &(0x7f00000002c0)) [ 299.685202][T19417] BPF:[1] STRUCT _. [ 299.690202][T19417] BPF:size=0 vlen=0 [ 299.694837][T19417] BPF: 14:05:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) 14:05:12 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 299.731174][T19425] binder: 19424:19425 unknown command 0 [ 299.733524][T19417] BPF:Invalid name [ 299.744103][T19417] BPF: [ 299.744103][T19417] [ 299.769358][T19425] binder: 19424:19425 ioctl c0306201 20000200 returned -22 14:05:12 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/34, 0x22}], 0x1, 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000003c0)) [ 299.783970][T19407] loop1: detected capacity change from 0 to 264192 [ 299.805374][T19435] binder: 19424:19435 unknown command 0 [ 299.819157][T19434] BPF:[1] STRUCT _. [ 299.827394][T19434] BPF:size=0 vlen=0 14:05:12 executing program 1: sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000002980)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000029c0)={0x0, r0+10000000}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003c40), 0xffffffffffffffff) 14:05:12 executing program 3: clock_gettime(0x0, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000200)={0x3}, 0x0, 0x0, &(0x7f0000000300)={r0, r1+10000000}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 14:05:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) [ 299.831386][T19435] binder: 19424:19435 ioctl c0306201 20000200 returned -22 [ 299.841229][T19434] BPF: [ 299.854813][T19425] binder: 19424:19425 unknown command 0 [ 299.857312][T19434] BPF:Invalid name [ 299.868810][T19425] binder: 19424:19425 ioctl c0306201 20000380 returned -22 [ 299.870681][T19434] BPF: [ 299.870681][T19434] 14:05:13 executing program 0: socketpair(0x1, 0x0, 0xfff, &(0x7f0000000280)) 14:05:13 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:13 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f0000000280)) 14:05:13 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x280a000, &(0x7f0000000280)) 14:05:13 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x60001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) [ 299.991202][T19459] BPF:[1] STRUCT _. [ 300.002467][T19463] binder: 19461:19463 unknown command 0 [ 300.009966][T19459] BPF:size=0 vlen=0 [ 300.014661][T19459] BPF: [ 300.018985][T19463] binder: 19461:19463 ioctl c0306201 20000200 returned -22 [ 300.034473][T19459] BPF:Invalid name 14:05:13 executing program 3: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), 0xffffffffffffffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRESDEC=r0], 0x208e292) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x11, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) accept(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f00000003c0)=0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket(0x27, 0x1, 0x0) recvmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pwritev(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f00000004c0)="5f1159b2a1332cc0d19dfd405fd9edf06daf4b0b329dbbf218c16cff42ee50e50bf22fe9cccd2e7d9df4125b8b10ce434f6338c40df184ad24f1506025c2cc4206d1f128cf54aa411ad639e8d80f78aba48efc17e420d55136c0b220226bdfc16978bf990050cf166f", 0x69}, {&(0x7f00000005c0)="a393af06d95a7010715fea08adccd5382c96be505f294b1d505fe0113b2f32b0fc76e58f195720ea3a7dff0abcdc7e96a315e27a1a728fc4ba9e895b7117b89f5773734770b808b45c563cb0f160a897c6a2e0e7da65885f004d41c143b3de000b5120ecc7f7ddfef5c994379a80e0d64134030bc5d38d70ba226c91e8e055fc617c91453b4a4f7c6df664339971f7b15afe3ded617a38b411395979aa52ee2ca2be62d358c3e78503858edf8c2a8a05b66179238d20ce013344b6", 0xbb}, {&(0x7f0000000700)="d796d5b97f9043557137284e0fb6374b7f4aa07697e9bee61e0ca6a44ab696eb105318835b32adbe008319a4c875058cd44401e3ff6811c106b56f723fb1d2d2ff7c372eda5d58b1d4c6b2ba1e355591e4505561dd2e4bbfc9a7ed1b190ab2fde6c5fbf6ff877255b045b425e5316ec24b9fa505a569d172a5ce8061f400529e0be690e15c69acf57aee68d01ae9d3fa23676ed5d56bfdc7373d692c210d9f2e002c2d22b7374e9e099aa31068ab58c11d495abdd69bb246c36e8ec9c3f7cd973bb273bf7349c67f1b9790aa87955d42148be00688beab055b85e973098a670445a7f3b55f", 0xe5}, {&(0x7f0000000800)="e829cca244550c4ea612dcfb409d1d9bd4c19eb6a3ec7273025e7b0407bdf25309ac17e69445d1a2df6d156de79eb565b8766e648a58d5eed8e9442694611707e607fbeecc84309017d38b9dedba430771a1b74664991303cc341deed46d175ccd3908000000000000006a8814e550889aa093e098314104f90ee637bc2a67ed707623a52d928383d79972c93dfb025d0c87c839065963ff7f9a5f660007a8ab", 0xa0}, {0x0}], 0x5, 0x1, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={0x0}, 0x1, 0x0, 0x0, 0xc005}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)=@newlink={0x50, 0x10, 0x401, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1462b, 0x1e46}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}, @IFLA_MTU={0x8, 0x4, 0x2ce3}]}, 0x50}}, 0x0) 14:05:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) [ 300.043981][T19459] BPF: [ 300.043981][T19459] [ 300.055930][T19463] binder: 19461:19463 unknown command 0 14:05:13 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:13 executing program 0: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000500)={[{@bs}]}) [ 300.084982][T19463] binder: 19461:19463 ioctl c0306201 20000200 returned -22 14:05:13 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x198, r0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xe8, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd55}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#.\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ',[&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[\'{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}]}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x10011}, 0x44000) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) [ 300.128853][T19489] BPF:[1] STRUCT _. [ 300.130561][T19484] binder: 19461:19484 unknown command 0 [ 300.137273][T19489] BPF:size=0 vlen=0 [ 300.145266][T19489] BPF: [ 300.156845][T19489] BPF:Invalid name [ 300.164996][T19489] BPF: [ 300.164996][T19489] 14:05:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) 14:05:13 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x2) 14:05:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:13 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x81000) 14:05:13 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 300.176942][T19484] binder: 19461:19484 ioctl c0306201 20000380 returned -22 [ 300.189852][ T36] audit: type=1804 audit(1630505113.257:46): pid=19494 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/423/bus/file0" dev="sda1" ino=13960 res=1 errno=0 14:05:13 executing program 0: socketpair(0x1f, 0x0, 0x5, 0x0) 14:05:13 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000012c0)="5500000019007faf37c0f2b2a4a280930ad60010000243dc900723693900090008000000010000000800050000000000080000000004d5440a009b84136ef75afb83de4409000000c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 14:05:13 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000380)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 300.308036][ T36] audit: type=1804 audit(1630505113.377:47): pid=19518 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/424/bus/file0" dev="sda1" ino=14039 res=1 errno=0 [ 300.317743][T19520] binder: 19512:19520 unknown command 0 [ 300.342796][T19514] BPF:[1] STRUCT _. [ 300.352418][T19514] BPF:size=0 vlen=0 14:05:13 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 300.367652][T19514] BPF: [ 300.377931][T19525] binder: 19512:19525 unknown command 0 [ 300.383594][T19514] BPF:Invalid name [ 300.391874][T19514] BPF: [ 300.391874][T19514] [ 300.402307][T19525] binder: 19512:19525 ioctl c0306201 20000200 returned -22 14:05:13 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x174, 0x174, 0x7, [@struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @union={0x0, 0xc, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @union={0x0, 0x6, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @func_proto]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x193}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 300.414116][T19520] binder: 19512:19520 ioctl c0306201 20000200 returned -22 [ 300.432611][T19532] binder: 19512:19532 unknown command 0 14:05:13 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000012c0)="5500000019007faf37c0f2b2a4a280930ad60010000243dc900723693900090008000000010000000800050000000000080000000004d5440a009b84136ef75afb83de4409000000c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 14:05:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) 14:05:13 executing program 3: syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200)={[{@rtdev={'rtdev', 0x3d, './file0'}}]}) 14:05:13 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0xd6877cde778827ae, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) [ 300.448411][ T36] audit: type=1804 audit(1630505113.517:48): pid=19531 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/425/bus/file0" dev="sda1" ino=14039 res=1 errno=0 [ 300.456728][T19532] binder: 19512:19532 ioctl c0306201 20000380 returned -22 14:05:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:13 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:13 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) [ 300.548294][T19544] BPF:[1] STRUCT _. [ 300.552219][T19544] BPF:size=0 vlen=0 [ 300.562966][T19544] BPF: [ 300.573343][T19546] XFS (loop3): Invalid device [./file0], error=-15 [ 300.592675][T19544] BPF:Invalid name 14:05:13 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000002240)='/proc/zoneinfo\x00', 0x0, 0x0) 14:05:13 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x2de9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 300.600279][T19553] binder: 19549:19553 unknown command 0 [ 300.607725][T19544] BPF: [ 300.607725][T19544] [ 300.618934][T19554] overlayfs: failed to resolve './file0': -2 [ 300.622634][T19553] binder: 19549:19553 ioctl c0306201 20000200 returned -22 [ 300.641702][T19546] XFS (loop3): Invalid device [./file0], error=-15 14:05:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) [ 300.656023][ T36] audit: type=1804 audit(1630505113.727:49): pid=19554 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/426/bus/file0" dev="sda1" ino=14039 res=1 errno=0 [ 300.661951][T19562] binder: 19549:19562 unknown command 0 [ 300.691181][T19562] binder: 19549:19562 ioctl c0306201 20000200 returned -22 14:05:13 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:13 executing program 3: pipe2(&(0x7f0000002180)={0xffffffffffffffff}, 0x0) read$FUSE(r0, 0x0, 0xffffffffffffff3e) [ 300.703472][T19553] binder: 19549:19553 unknown command 0 [ 300.712309][T19553] binder: 19549:19553 ioctl c0306201 20000380 returned -22 14:05:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 300.748114][T19568] BPF:[1] STRUCT _. [ 300.757665][T19568] BPF:size=0 vlen=0 [ 300.785226][T19568] BPF: 14:05:13 executing program 1: request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0xfffffffffffffff8) 14:05:13 executing program 0: keyctl$search(0xd, 0x0, 0x0, 0x0, 0x0) [ 300.798187][T19568] BPF:Invalid name 14:05:13 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x200, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x0) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) r2 = shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) r3 = shmget(0x1, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r3, &(0x7f0000404000/0x3000)=nil, 0x5000) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f00000dd000/0x2000)=nil, 0x7000) shmdt(r2) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$IPC_RMID(0x0, 0x0) 14:05:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) 14:05:13 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) [ 300.819892][T19576] overlayfs: failed to resolve './file0': -2 [ 300.821474][T19568] BPF: [ 300.821474][T19568] [ 300.854416][T19577] binder: 19574:19577 unknown command 0 [ 300.878098][ T36] audit: type=1800 audit(1630505113.947:50): pid=19584 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 300.880999][T19577] binder: 19574:19577 ioctl c0306201 20000200 returned -22 [ 300.920904][T19587] binder: 19574:19587 unknown command 0 14:05:14 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:14 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x200, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x0) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) r2 = shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) r3 = shmget(0x1, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r3, &(0x7f0000404000/0x3000)=nil, 0x5000) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f00000dd000/0x2000)=nil, 0x7000) shmdt(r2) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$IPC_RMID(0x0, 0x0) [ 300.925310][T19588] BPF:[1] STRUCT _. [ 300.945448][T19588] BPF:size=0 vlen=0 [ 300.954959][T19588] BPF: [ 300.960878][T19588] BPF:Invalid name 14:05:14 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x200, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x0) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) r2 = shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) r3 = shmget(0x1, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r3, &(0x7f0000404000/0x3000)=nil, 0x5000) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f00000dd000/0x2000)=nil, 0x7000) shmdt(r2) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$IPC_RMID(0x0, 0x0) [ 300.966470][ T36] audit: type=1804 audit(1630505113.947:51): pid=19576 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/427/bus/file0" dev="sda1" ino=13979 res=1 errno=0 [ 300.966487][T19587] binder: 19574:19587 ioctl c0306201 20000200 returned -22 [ 300.992816][T19588] BPF: [ 300.992816][T19588] [ 301.006301][T19593] binder: 19574:19593 unknown command 0 14:05:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) 14:05:14 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x2de9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 301.023699][T19593] binder: 19574:19593 ioctl c0306201 20000380 returned -22 [ 301.062043][T19599] BPF:[1] STRUCT _. [ 301.068478][T19601] overlayfs: failed to resolve './file0': -2 [ 301.075025][T19599] BPF:size=0 vlen=0 [ 301.083806][ T36] audit: type=1800 audit(1630505113.997:52): pid=19584 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=8 res=0 errno=0 [ 301.108485][T19599] BPF: 14:05:14 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x200, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x0) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) r2 = shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) r3 = shmget(0x1, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r3, &(0x7f0000404000/0x3000)=nil, 0x5000) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f00000dd000/0x2000)=nil, 0x7000) shmdt(r2) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$IPC_RMID(0x0, 0x0) [ 301.117373][T19599] BPF:Invalid name [ 301.134377][T19599] BPF: [ 301.134377][T19599] 14:05:14 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) 14:05:14 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:14 executing program 0: mount$fuse(0x0, 0x0, &(0x7f0000000440), 0x5000, &(0x7f00000008c0)=ANY=[@ANYBLOB="66643d1bfd5d3e300e77df1f3c48d41c9544cb31723a881e548e6b3c27ebb14e30d6f794906ce12aa9212d4cf76e41ac992fd7668e5d8d88b8ccf35e2563f766ec5d851cb3f74afee277a3a2ccb511a6042256ee6c1bec71287c40ac4f2a4f84a0c697015a19a5f38e3a057226c8244504405663e133f363489227f513e3bcbf57cc96590b9c68f721e298459a0a", @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',gr', @ANYRESDEC=0x0, @ANYBLOB=',fowner']) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x802000, &(0x7f0000000680)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x40}}], [{@uid_lt={'uid<', 0xee01}}, {@uid_eq}, {@subj_type}]}}) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) fchdir(0xffffffffffffffff) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000005200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x8bb299fcaf013ece) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002f40), 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000005100)={&(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x21, 0x0, 0xe02, 0x3ff, 0x8001, 0x0, 0x5}}, 0x0, &(0x7f00000000c0)={0x18}, &(0x7f0000000580)={0x18, 0x0, 0x1, {0x1}}, &(0x7f00000005c0)={0x18, 0x0, 0xffffffffffffffff, {0x1}}, &(0x7f0000002800)={0x28, 0x0, 0x0, {{0x33bb, 0x20, 0x1}}}, 0x0, &(0x7f00000028c0)={0x18, 0x0, 0xffff}, &(0x7f0000002900)=ANY=[], 0x0, &(0x7f0000002980)={0x78, 0x0, 0x0, {0x0, 0x7, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffffffffffffff8, 0x6, 0x0, 0x8812, 0x20, 0x1000, 0x7, 0x0, 0xee00, 0x1}}}, 0x0, 0x0, &(0x7f0000002c00)={0x1f0, 0x0, 0xffffffff923c421f, [{{0x0, 0x1, 0x1, 0x0, 0x0, 0x81, {0x0, 0x100000001, 0x3d, 0x0, 0x0, 0x0, 0x4, 0x8, 0x3, 0xc000, 0x1000000, 0x0, 0xee01}}, {0x1, 0x100000000, 0x8, 0x0, 'RATEEST\x00'}}, {{0x6, 0x3, 0x3ff, 0x0, 0x0, 0x20, {0x0, 0x1a, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2}}, {0x0, 0x0, 0x5, 0x5, 'syz0\x00'}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3, {0x3, 0x0, 0x8, 0x0, 0x35b, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, r2, 0xee01, 0x0, 0x9}}, {0x2, 0x0, 0x1, 0x7, '\x00'}}]}, 0x0, &(0x7f00000050c0)={0x20, 0x0, 0x400, {0x9, 0x0, 0x0, 0x20}}}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d0, 0xc8, 0x0, 0x1d0, 0x5803, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'bridge0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1d0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x6}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @loopback, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) [ 301.170777][ T36] audit: type=1800 audit(1630505114.117:53): pid=19600 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=11 res=0 errno=0 14:05:14 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x200, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x0) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) r2 = shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) r3 = shmget(0x1, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r3, &(0x7f0000404000/0x3000)=nil, 0x5000) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f00000dd000/0x2000)=nil, 0x7000) shmdt(r2) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$IPC_RMID(0x0, 0x0) [ 301.274426][T19616] BPF:[1] STRUCT _. [ 301.288510][T19619] binder: 19615:19619 unknown command 0 [ 301.294924][T19617] Cannot find add_set index 0 as target [ 301.306285][T19616] BPF:size=0 vlen=0 14:05:14 executing program 0: mount$fuse(0x0, 0x0, &(0x7f0000000440), 0x5000, &(0x7f00000008c0)=ANY=[@ANYBLOB="66643d1bfd5d3e300e77df1f3c48d41c9544cb31723a881e548e6b3c27ebb14e30d6f794906ce12aa9212d4cf76e41ac992fd7668e5d8d88b8ccf35e2563f766ec5d851cb3f74afee277a3a2ccb511a6042256ee6c1bec71287c40ac4f2a4f84a0c697015a19a5f38e3a057226c8244504405663e133f363489227f513e3bcbf57cc96590b9c68f721e298459a0a", @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',gr', @ANYRESDEC=0x0, @ANYBLOB=',fowner']) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x802000, &(0x7f0000000680)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x40}}], [{@uid_lt={'uid<', 0xee01}}, {@uid_eq}, {@subj_type}]}}) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) fchdir(0xffffffffffffffff) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000005200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x8bb299fcaf013ece) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002f40), 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000005100)={&(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x21, 0x0, 0xe02, 0x3ff, 0x8001, 0x0, 0x5}}, 0x0, &(0x7f00000000c0)={0x18}, &(0x7f0000000580)={0x18, 0x0, 0x1, {0x1}}, &(0x7f00000005c0)={0x18, 0x0, 0xffffffffffffffff, {0x1}}, &(0x7f0000002800)={0x28, 0x0, 0x0, {{0x33bb, 0x20, 0x1}}}, 0x0, &(0x7f00000028c0)={0x18, 0x0, 0xffff}, &(0x7f0000002900)=ANY=[], 0x0, &(0x7f0000002980)={0x78, 0x0, 0x0, {0x0, 0x7, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffffffffffffff8, 0x6, 0x0, 0x8812, 0x20, 0x1000, 0x7, 0x0, 0xee00, 0x1}}}, 0x0, 0x0, &(0x7f0000002c00)={0x1f0, 0x0, 0xffffffff923c421f, [{{0x0, 0x1, 0x1, 0x0, 0x0, 0x81, {0x0, 0x100000001, 0x3d, 0x0, 0x0, 0x0, 0x4, 0x8, 0x3, 0xc000, 0x1000000, 0x0, 0xee01}}, {0x1, 0x100000000, 0x8, 0x0, 'RATEEST\x00'}}, {{0x6, 0x3, 0x3ff, 0x0, 0x0, 0x20, {0x0, 0x1a, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2}}, {0x0, 0x0, 0x5, 0x5, 'syz0\x00'}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3, {0x3, 0x0, 0x8, 0x0, 0x35b, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, r2, 0xee01, 0x0, 0x9}}, {0x2, 0x0, 0x1, 0x7, '\x00'}}]}, 0x0, &(0x7f00000050c0)={0x20, 0x0, 0x400, {0x9, 0x0, 0x0, 0x20}}}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d0, 0xc8, 0x0, 0x1d0, 0x5803, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'bridge0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1d0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x6}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @loopback, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 14:05:14 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 301.319125][ T36] audit: type=1800 audit(1630505114.127:54): pid=19602 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 301.323692][T19616] BPF: [ 301.349922][T19619] binder: 19615:19619 ioctl c0306201 20000200 returned -22 [ 301.364796][T19625] binder: 19615:19625 unknown command 0 [ 301.400597][T19625] binder: 19615:19625 ioctl c0306201 20000200 returned -22 [ 301.415799][T19619] binder: 19615:19619 unknown command 0 [ 301.420652][T19630] Cannot find add_set index 0 as target [ 301.436209][T19619] binder: 19615:19619 ioctl c0306201 20000380 returned -22 14:05:14 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x151000, 0x0) [ 301.441500][ T36] audit: type=1804 audit(1630505114.177:55): pid=19601 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/428/bus/file0" dev="sda1" ino=14121 res=1 errno=0 [ 301.461110][T19616] BPF:Invalid name [ 301.502263][T19616] BPF: [ 301.502263][T19616] 14:05:14 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x200, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x0) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) r2 = shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) r3 = shmget(0x1, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r3, &(0x7f0000404000/0x3000)=nil, 0x5000) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f00000dd000/0x2000)=nil, 0x7000) shmdt(r2) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$IPC_RMID(0x0, 0x0) 14:05:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000940)=@generic={0x11, "00000100000044944eeba71a4976e270922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c581103be15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00810000040000010049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x38, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_GATEWAY={0x14, 0x7, @loopback}]}, 0x38}}, 0x0) 14:05:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) 14:05:14 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:14 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:14 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000040)={0x20}, 0xfffffffffffffe73) [ 301.653248][T19647] binder: 19642:19647 unknown command 0 [ 301.655579][T19649] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 301.666080][T19649] IPv6: NLM_F_CREATE should be set when creating new route [ 301.669206][T19647] binder: 19642:19647 ioctl c0306201 20000200 returned -22 [ 301.685191][T19650] BPF:[1] STRUCT _. [ 301.690629][T19650] BPF:size=0 vlen=0 14:05:14 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="110700000000000000000700000008000300", @ANYRES32=r1], 0x1c}}, 0x0) 14:05:14 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x303c0, 0x0) 14:05:14 executing program 4: mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 301.706437][T19650] BPF: [ 301.713228][T19654] binder: 19642:19654 unknown command 0 [ 301.727630][T19650] BPF:Invalid name [ 301.739697][T19650] BPF: [ 301.739697][T19650] [ 301.747643][T19654] binder: 19642:19654 ioctl c0306201 20000200 returned -22 14:05:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) 14:05:14 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x2) [ 301.764915][T19647] binder: 19642:19647 unknown command 0 [ 301.776218][T19647] binder: 19642:19647 ioctl c0306201 20000380 returned -22 14:05:14 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="4800000010000507000000000900000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e00040002800a000500140000000000220008000a00", @ANYRES32=r2], 0x48}, 0x1, 0xb}, 0x24000040) clone(0x40002080, &(0x7f00000001c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0)) 14:05:14 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 301.817349][T19665] BPF:[1] STRUCT _. [ 301.824891][T19663] overlayfs: failed to resolve './file1': -2 [ 301.825676][T19665] BPF:size=0 vlen=0 [ 301.855077][T19665] BPF: 14:05:14 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0xd, 0x6, 0x2d1e9ef78c04f733}, 0x14}}, 0x0) 14:05:14 executing program 4: mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 301.865792][T19665] BPF:Invalid name [ 301.877450][T19672] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 301.880422][T19665] BPF: [ 301.880422][T19665] 14:05:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) [ 301.916844][T19677] binder: 19673:19677 unknown command 0 [ 301.922433][T19677] binder: 19673:19677 ioctl c0306201 20000200 returned -22 [ 301.924786][T19672] device batadv0 entered promiscuous mode [ 301.948625][T19677] binder: 19673:19677 unknown command 0 [ 301.954198][T19677] binder: 19673:19677 ioctl c0306201 20000200 returned -22 14:05:15 executing program 1: ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0xffc0000b, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="040800090000ff01e66174000410090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000540)=ANY=[]) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unlinkat(r0, &(0x7f0000001580)='./file0\x00', 0x200) [ 301.960508][T19685] overlayfs: failed to resolve './file1': -2 [ 301.971802][T19672] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 301.983887][T19686] BPF:[1] STRUCT _. [ 301.987476][T19672] team0: Port device macvlan2 added [ 301.995937][T19686] BPF:size=0 vlen=0 [ 302.006964][T19686] BPF: [ 302.009940][T19686] BPF:Invalid name [ 302.013658][T19686] BPF: 14:05:15 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, 0x0) 14:05:15 executing program 4: mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 302.013658][T19686] [ 302.027376][T19689] binder: 19673:19689 unknown command 0 [ 302.041610][T19689] binder: 19673:19689 ioctl c0306201 20000380 returned -22 14:05:15 executing program 5: openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) [ 302.060873][T19701] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 302.070360][T19702] loop1: detected capacity change from 0 to 264192 [ 302.103473][T19702] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 14:05:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000000)={0xffffff8c, 0x20}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_targets\x00') 14:05:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:15 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/time_for_children\x00') [ 302.119944][T19701] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 302.136009][T19715] BPF:[1] STRUCT _. [ 302.149163][T19701] team0: Port device macvlan3 added [ 302.151263][T19715] BPF:size=0 vlen=0 [ 302.157279][T19718] overlayfs: failed to resolve './file1': -2 14:05:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) [ 302.193211][T19725] binder: 19720:19725 unknown command 0 [ 302.194009][T19715] BPF: [ 302.223038][T19715] BPF:Invalid name [ 302.226726][T19725] binder: 19720:19725 ioctl c0306201 20000200 returned -22 14:05:15 executing program 4: mkdir(0x0, 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:15 executing program 5: openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) [ 302.240255][ T10] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 302.266232][T19738] binder: 19720:19738 unknown command 0 [ 302.272669][T19715] BPF: [ 302.272669][T19715] 14:05:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000000)={0xffffff8c}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:05:15 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000100)={@my=0x0}) [ 302.315422][T19738] binder: 19720:19738 ioctl c0306201 20000200 returned -22 [ 302.318467][T19725] binder: 19720:19725 unknown command 0 [ 302.334212][T19749] BPF:[1] STRUCT _. [ 302.350535][T19725] binder: 19720:19725 ioctl c0306201 20000380 returned -22 14:05:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 302.378090][T19749] BPF:size=0 vlen=0 [ 302.384430][T19753] overlayfs: failed to resolve './file1': -2 [ 302.394505][T19756] __nla_validate_parse: 14 callbacks suppressed [ 302.394520][T19756] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 302.415310][T19749] BPF: [ 302.425113][T19749] BPF:Invalid name 14:05:15 executing program 4: mkdir(0x0, 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 302.450666][T19749] BPF: [ 302.450666][T19749] 14:05:15 executing program 0: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000080)="c2", 0x1, 0x1000}], 0x0, 0x0) 14:05:15 executing program 5: openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) [ 302.472254][T19763] binder: 19760:19763 unknown command 0 [ 302.491474][T19763] binder: 19760:19763 ioctl c0306201 20000200 returned -22 [ 302.507658][T19763] binder: 19760:19763 unknown command 0 [ 302.514286][T19763] binder: 19760:19763 ioctl c0306201 20000200 returned -22 [ 302.530980][T19762] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 302.531075][T19775] loop0: detected capacity change from 0 to 16 [ 302.542902][T19771] overlayfs: failed to resolve './file1': -2 [ 302.549628][T19763] binder: 19760:19763 unknown command 0 [ 302.563199][T19774] BPF:[1] STRUCT _. [ 302.570689][T19774] BPF:size=0 vlen=0 [ 302.574665][T19774] BPF: 14:05:15 executing program 5: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) 14:05:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) [ 302.579370][T19763] binder: 19760:19763 ioctl c0306201 20000380 returned -22 [ 302.589651][T19774] BPF:Invalid name [ 302.593509][T19774] BPF: [ 302.593509][T19774] 14:05:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:15 executing program 4: mkdir(0x0, 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 302.669964][T19785] BPF:[1] STRUCT _. [ 302.673806][T19784] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 302.677701][T19775] loop0: detected capacity change from 0 to 16 [ 302.695943][T19785] BPF:size=0 vlen=0 [ 302.701862][T19792] binder: 19786:19792 unknown command 0 [ 302.710157][T19785] BPF: [ 302.713995][T19785] BPF:Invalid name 14:05:15 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f00000001c0)="2b0101cae22f009f4b1fe439a06dd2c8cb071a20c4be6f511f0688407a3bdf613580b9b686372d28990a4277c3361142cb80596e93a5d5e2ca48575e6ec2054bbeead88fc5c9a0c09fbd1f0177e75ae79acfa2acfde922435f8e7178b56bf480e1a05f5f76bc", 0x66, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000000500)=""/101, 0x65}], 0x1}}], 0x1, 0x0, 0x0) [ 302.718587][T19792] binder: 19786:19792 ioctl c0306201 20000200 returned -22 [ 302.721370][T19793] overlayfs: failed to resolve './file1': -2 [ 302.728295][T19785] BPF: [ 302.728295][T19785] [ 302.750877][T19792] binder: 19786:19792 unknown command 0 14:05:15 executing program 5: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) [ 302.764267][T19792] binder: 19786:19792 ioctl c0306201 20000200 returned -22 [ 302.798148][T19792] binder: 19786:19792 unknown command 0 [ 302.809342][T19792] binder: 19786:19792 ioctl c0306201 20000380 returned -22 [ 302.833914][T19806] BPF:[1] STRUCT _. [ 302.845624][T19806] BPF:size=0 vlen=0 [ 302.854042][T19806] BPF: [ 302.860267][T19806] BPF:Invalid name [ 302.870033][T19806] BPF: [ 302.870033][T19806] 14:05:16 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003e00)={0x18, 0x2, &(0x7f0000003c40)=@raw=[@map], &(0x7f0000003cc0)='GPL\x00', 0x0, 0x5f, &(0x7f0000003d00)=""/95, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:05:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:05:16 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:16 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:16 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) 14:05:16 executing program 5: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) 14:05:16 executing program 3: r0 = socket(0x2, 0x1, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) 14:05:16 executing program 0: bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) [ 303.355263][T19841] BPF:[1] STRUCT _. [ 303.363970][T19840] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 303.365306][T19842] binder: 19833:19842 unknown command 0 [ 303.386868][T19841] BPF:size=0 vlen=0 [ 303.399734][T19841] BPF: 14:05:16 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) 14:05:16 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 303.405635][T19841] BPF:Invalid name [ 303.412815][T19842] binder: 19833:19842 ioctl c0306201 20000200 returned -22 [ 303.424564][T19841] BPF: [ 303.424564][T19841] [ 303.435147][T19848] binder: 19833:19848 unknown command 0 14:05:16 executing program 0: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x2, 0x0, @d}, 0x18, 0xfffffffffffffffe) keyctl$search(0x3, r0, 0x0, 0x0, 0x0) 14:05:16 executing program 3: syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0xe, &(0x7f0000001500)=[{&(0x7f0000000240)="5689887bf4ba5b209351e8b4f57eee3ee46baea45e7e5e33b7cf7b7aa2238232e11ad4b74878246af882e0ab9df36faaf7833ac55a626f95fe470254c66d527966251242dbaed7d71bfa06186e236b5d7600e1a44348d8019318c7538c283d88c52602c751da81b629fa543950658814628a2070fdf21c395d5a5754e54af1fe007d1b6c00f3107d3c967e2bc20a0b1f43889640ccbeff584e0e105db94dfc6550bb914f28896c3b245392ed5eb410e34428eb1fd696652539be604fb5285f763707c36c79cd3f6ebb4e55d821418e510a5ea60e08ba03efa9cdc692fe12b1c88202958acf40472387e28e5eca17f7df9ad422ddbcc9b978878fd417597b769b5ae0cd04842a8c9c90987ecdc62d76f824acee413cf5f0f8ea7419cf814626010a483cd9936b7c56d0153d36849a0c206664c4837a448c22d20cb4db9dd6ca625d36a7079e4df72cc449f340adcdc811c9477487922c49a5d7ed3d6426e8b74a0cf8ee8da0c6fd42e0da125d342185cb8c2486e2872ef709faaed3b65d6c185d1c6f76354ee6bb3750abf27a80fddaadd9061f3868be2a545da7de8fe35f6787e4a4a2322d808283afd39f0ddffc17d665631814f00ae8aa7510869bc75f6f04575e1cc96c2cbd531922c1b485bbf53b906a648c5eccbc11f78c1cfdaf845afe428d63043441087b96f0706bac844ae3e1310c2c3baf7165925fa38826835fde2196cab643f6f1b888559387bb20109b361259c466528396cec9b6add4d73fb672d1fe526d474d33406bc201fc787f4bd39b2e73d4e880820416f9d4cd82c745366903f88324bb99fb9745ad979560917ad19ba2b07c3a40d1a3609c0e0b051f9a52c36841ee4cdcf7c0a132e214269cb6ba9d4c0bfff9b5115c54b480b65367e660dbce5aab98f08cda5970aacd1710e15634d097be7bba7f53ffb8e8d27741d2ec48fbe63f95454e64bf4cb24ebdde88c649e57b0582159b77262c351c84dcfc672a69ee71c111a4ca4ad6015074d28f78cf1abb88661aae7177a7ff77b9f6b9abd765806e49f9a775b8de07baa49d86d8ce2fc234995789a74e2ab8a8e99b9f738034b6a7ea96b8254d013c3667a3070db6a14da81c2a76e8a548af1b9647a2fa7ed292a5c03fe424a2d8ef63294a1419e0060d7036f60006fec014ae41024e6825fdb41c0c07649375c4ecc46162195846bfc13d9c4328d0ae9f290e31bb7248d620cc3d19cbd8507026c9840429cc8993005e31e73751118f2278091531e4f29430b78755c9cb4f93d94e8dd7bacbabe45513e7cd6bfc41b6f747742f7546885dd21e8eeb40047294ac85b1e440884773db2830e56d338bc8e5346a98c9d77653eaab794862f0aed45b4dbbe810008249b298e67bbbc07780a74319ae904205ad1d0177c0b6c6a0ecf7a5da2593fcd9e33f23aac3a7a086049b3e6f428842290bfbb044b7482b29b42d26cf7e4efeb787713f9f5260a63fc01561ab3bbf0224d623cd0afc364d389d2b04a55627b20786dc9e4eb6b8cb0021515d4a626bd7771e154816ebcde77171aa455e9223335a9560ac25819f67081b9b474ba383f8e30f89b6b2f52599bc576abf39a967cdcb0d3c7250d3e8948ffd45fe093a76fbcadc0147ab6527a213128c9bf855e9cc1366691838095ae0c423605b16d20d23cfa3687ace80c90242ee4d8da706aa47e22a0e4f59cebce3650ea2b88bd17f924bafb5ca740cdc2dd4beabf95b064f8474c35fe9a52f5abe44625512a122cf71dc51a45e30d708961ae82a745b2990e777d545dc7c323f09c559d4ca1c1bf88045d4ca7fb9f0110c60d2b7eafc4ecb4f8b0e8701325a53bf5255ea4aaaac7bb6292176e200b1f62af016c165d67eca37d13f92ab3325aaa7c4e09ca2be9b10d2896d064be8485e2d83df290c01e7e943a5a7e14ae16d7575359b2a522ef93196b48f4c0897bb3ac4b40a57d1afeeab90af845c32d3dc6c0e3e05068556814c614b9e9fe1338fb80c3767eda827534f90dbd1e9717ea2662da0d4263adcfaa351f2101a8525406eed55891024bd78eb66698f65a51712a999b0e1185bbe6278f31d02f74b6924a70d548bd826bcb49d09264c0ee7b2ac5eedbcf737b40f8dea4118a47be63f6ffaa9511eb1e2ea5bee7a5632648b2b9bd4494d11309fa4d170184449f3d4c7bc36b19d72df85af5ca43ff420fdfa6527239dd446072183c62541a375ba0049944a0194ada2a633bbacfdffdbb95d5ebc716eab975adb1467c0cfe5ef40096ceaec4b93bc8576c85197e9b6c991b10e90e9e4321f1d984f8a29124fa15825022a989e2a63c2fad17df7e91e25ceec5af8617a84c96b020c6ef0cf67d252672e092aa4ab6909acdc7d3354e8283dee98eb5bb82e88c4370b922bc7aef119ff5d4c89d79f4b1985ccff2efee753bd3f07c4a77608f1d15bc84071cf75f345179b3dab65f01aa15105252f43005975471f51b9360b9a8ae16133b067e52793b94cd94e71004893300af85afea782bdb3f0994fbfcdb179c7b4f77ebe1dbfac330cf59e17389a9ed7a54f18524353994da284a09bbf402b6a562eefefefa9eb72074154f75c80406327d24a9904025f5f2fa4538f64eac043c8022d894fa339ea3467538b57d60cb505a44e37a52bcbbc3cacf4b1a56886a292c0d2dcbe80494aa1209c49b7e9091ae71ad9b420d6a28a8055eaeaf314ae6ca64c33210a9408cf9d51235191462f4281d6a6c20ff97e868dd9b1ee85470cc747ec50bcc1ee732636f619df985895c61ff4d6d16e8f3bfb6dd3c1bf73ca9e477efe96e28d345b55fb42885c805fc2804a73d02054d12618f4074bea6bf7a0f8d251867be1a03ba9d7d75ef09df843b134b0c48b39cf99125bb207ef4527836f2bad4a4c0fc207e2f35e86a548ddd6363fa05de84d8264c345b68e4ef950f65c3a1d4235553a9f02714991f5279866e71ff338153cfd919d1e652f11ef93354ff01213633d7fe89ece2a4ea5ad15ccaa9eb77c83bbb32f658609b1a09d8775b18776bd938198ff9379725e922484ed35ff3600c6fdbb7aae71c4bd7190bf0a8ce00c5c7c2adad6ec1fcb577e9896bbe128534a32fcc4f1678b0ebfcee9eb2244a941a58cb14f03ea70792545aa0abed419dfd5068652a082b620db4bfeb6f1e55048062572c6b53d250671eb2235c46fc476e7b4085c20b64d5dbc0d26ec62cfef3b4337f2a63854221eacf65374a37c7605a56ea31f8ed39432908c7962304e445f77727c53cff75ee58aa63b5eac506f59ab329fcc020fa79bd58e961a399e76b170d3db929a0000f11c7f699ba2fb826961438ecb82be542a809c90b279c71bcf5b1d3ccfb6dd766dd6305a82c43f474a10bbe5fb33d9371ee91b5626dd81a21d75994267e73c5a2420e93b3b5e1a009fc900e61be6a2171a0e1ed24fef4464ee26ef70e92d81f0c6bc19f1d022315e2aa5617e893a0690735abc6858da84e355dc99d636ae26cedf9a16a4f6a127e9f7794ab77c0c3f97652bcaad30ac5195ebbb9487cf9d41a2526a933408d0d80029fd26fb155136930ff06500d1a26abcf898f149112bbe0770ae4d54562ee3a595fd5231702cc52ed30d313e603ceb69c7c2665d1745c5caae1128e50e284f421a31e602b74e3cca1fa4fe70d9a62b4e063c3966fb22fd512ff855ed599a831247d1c4a401ab8f074cdb87770993744d08e542e3c9745996b21a1d95d364ad77df5b95edd6e212907e5c1c57ddf2efed92971f7eeddd2738bdc332f92d5d1d220005c31ca72b2df2e9731a3a3298993843d41e3a851d57eca90f36b639370f389c0362ec01864be71fd7abad261f1344728ee2e167270830df1808d23503793b60d9974d069b34307f7f379d1aa7289da68afbe3b61085b2f5f74f4f9b66ac8795b2b94f017d0f0560c4fa523f95b0e45ca62801d2017101eb8e89fbbbb2cabd072b94b53b78b7ccc63f9839769ad7254b21aea2345b9d3f5318b73cfd3455ca3fcd48b9fd99fbe5a6f910dfd6f479984940a3adb8f574423b0ac73335486ba235bb459587b16f5a0e3d1e424f288abe567fc46add56cdadb4422ffc1b860a7af2778862719d098c263f9480c521a80def52d8e8bccd40f71b24977b042d624899c436ec80fd84c20d4b594c32ccd4ce92d3e155b6a72c1e0f69dcb5dc2d1a02998763eabd4472816c459fe92f0053df93ba4032a2dffdb8bd4f312e7165675e542e74de14415e2619fa6e2fafb6a596b1fa1cfe3442f6595169ba73fc34a7c766a77116c958279fc113ca9f3fdfca9aae8423a27c836dd5c179b5ca7571f4db89bd25b13bd892e45ca7f7e1d63f962099a101cb6462479667dce38eda9d84cf9f96d82bae74f2026a1dc6e8e94eca4186d35517563f3b4e4f392e19afaef4a395703bb8feee888433a10a98d69f05633a270456c145b8e0095c91747033cd1fbca8b13597a384a1bbe6818f3806efd13c59d59fa73767b79e4f24a2a91564c33ed5559037f9975f9b199570212f7b6885d22a320f7e4fb4bb6239b3e7b6de1ca05677e30145af78fa96e0e649517b23e8dc6a2d5e17da259c8adb734ddd78323a29a71614b5707b15daa70f216153f9f574ac61bb3b791cea4cf49b8dccd8a59c7416c32a6235dfcc6ba3ec0c956deb9c85e2f7342144d1aff8c903d74e17669e10702429c86a8dac6d27dce989b566696c9f8cd9440971fc64792ce44f7bf6fa31ee08679992c7169e7afe35033b2b5a9a7a8f3b3327e7fab96c614f95d65ff43f22579565449b12498c6eae60925149bd710eba6fef7312bc9cc64aa15d0c8ecfdd40cf78127f1fa296080f485919416b4be69034e2d7ba73237fc48ed02e9f8512d238a21c0eb1ae2ffa9722adad04e2820d85ac3cd36a624dcab98dd1b123ca68b1e37ed95df2d9a489db7175359b65c05539cff364bb2993fc6c53cb6e9b703edccb68a30165300aa095f6eb6785121264e354ac8ba0ad55ab3c83a9ecbd2c612c5e40fe866744982768619a6a797dcacd6b56804449a8207f1a26980672006f9f3ba6a3b1174fe1f9042b2dab20de431304278128ddde9c994251e70a94dd4ab3ce376a236c6b9428e38ae62cf11630234a5df2e330d0127632ddcaa2d2ccb044e763d3e8fbc459ab40192f84e417e29fda023a0615c81301dfa23b1c0e6e6fade74d544c1b0a9e7306e1c1f7ae909a41a2160f795b033071a59418f8b01a97f95a82374cf5805c0ccd8ed05701f49c681274f16b47e0c7dea98bc5431d409b80fc0d306f7475fb236abff00cd8282129f79b5fe2ba834e15bca99031de4d9a57f8be70ae4a3db9cb025b2508c77010e5133320415189d3b3b5f9b9293cdaa34a5e7bb448a5351e77dab8eb2fbfe85e70aaadf5b9e9a0f77fdd467d3bc0f160cc131acf7bdb298e6ad1964a80e2dd2dceb616cc3f3bf2c22ed67c5e68d5c8f557c874a3960284edbdfa954add7e403e06ef4753556f610721f5bb3082a107da5a85803dbe4fd3bd1e0c9fc96727b5c3e5652c3583e0c5c731fa5880cd95553c0c684590e7743da4fd8b9409a488adfb48f1f0bf50b1943683c381d8bc289c9801da35de2518d6016674e1bf72922aa9d22d816a310662e1aba2a4eec496244b32cd571004b5d34f763e3bdc0e018f4e56f0ec81432c113b46c4c7cc7fdbb568f0a2091b7f85518b5d5e15c2d29c29332a8cda962b226dbc7d5ad38ac48dd94348883041d2f080846ad663a7bd0cbfe828f69a4e1eabf200d804ac690ff9279a42ef840be7938d29d2f0537c19a081", 0x1000, 0x2}, {&(0x7f0000001240)}, {&(0x7f0000001300)="44389c4dcb84412786bf7a0f76f60b07b2827683b6c231f1760d72ec33228dadc3278bab7e7a8a0c2a2a8cb82a4255bd7a9c88b3b85f2ef69ba6c5fda73fe436270ac294a6166a97f4b842371a5191de4e66c66be1a3e67b81845a663bd93e580cb5c9c85e3a2856e3a5cb560106cd2c579b69bb44fa4851deeb21bd1e318b5460bea67a62cf0ae32cd341f16850184b3ba8b65c908666b600cbe79a6038e8608081a0", 0xa3, 0x6}, {&(0x7f00000013c0)="881895660b155748183e95f09548ba90d96aa13031b5d77f70f2b3cfd07d99501ddf", 0x22, 0x1}, {0x0}], 0x0, &(0x7f0000001580)={[{@dots}], [{@fowner_gt={'fowner>', 0xee00}}, {@fsuuid}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]}) [ 303.480720][T19848] binder: 19833:19848 ioctl c0306201 20000200 returned -22 [ 303.493858][T19842] binder: 19833:19842 unknown command 0 14:05:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) [ 303.528201][T19842] binder: 19833:19842 ioctl c0306201 20000380 returned -22 [ 303.548797][T19860] BPF:[1] STRUCT _. [ 303.551366][T19863] loop3: detected capacity change from 0 to 8 [ 303.554960][T19860] BPF:size=0 vlen=0 14:05:16 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:16 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={0x0, &(0x7f0000000540)=""/27, 0x0, 0x1b}, 0x20) 14:05:16 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 303.588618][T19863] FAT-fs (loop3): invalid media value (0x31) [ 303.591478][T19860] BPF: [ 303.603897][T19870] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 303.623735][T19860] BPF:Invalid name 14:05:16 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) [ 303.639767][T19860] BPF: [ 303.639767][T19860] [ 303.641078][T19863] FAT-fs (loop3): Can't find a valid FAT filesystem [ 303.669262][T19875] binder: 19872:19875 unknown command 0 14:05:16 executing program 0: socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) recvmmsg(r0, &(0x7f0000005d40)=[{{0x0, 0x0, &(0x7f0000000040)}, 0x100}, {{&(0x7f00000003c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, &(0x7f0000000480)=""/69, 0x45}, 0xfffffffa}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004700), 0x0, &(0x7f0000004740)=""/29, 0x1d}, 0x400}, {{&(0x7f0000005c00)=@nfc_llcp, 0x80, 0x0}}], 0x5, 0xf74d59d0456d9d88, 0x0) [ 303.692554][T19875] binder: 19872:19875 ioctl c0306201 20000200 returned -22 [ 303.719336][T19863] loop3: detected capacity change from 0 to 8 [ 303.736591][T19887] binder: 19872:19887 unknown command 0 14:05:16 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r6, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe6c}}}, 0x24}}, 0x0) [ 303.742723][T19863] FAT-fs (loop3): invalid media value (0x31) [ 303.757316][T19884] BPF:[1] STRUCT _. [ 303.762062][T19884] BPF:size=0 vlen=0 [ 303.771796][T19884] BPF: [ 303.781755][T19884] BPF:Invalid name [ 303.782245][T19887] binder: 19872:19887 ioctl c0306201 20000200 returned -22 14:05:16 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) 14:05:16 executing program 0: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)='}%^({,#-^!\x00') [ 303.793971][T19875] binder: 19872:19875 unknown command 0 [ 303.794907][T19863] FAT-fs (loop3): Can't find a valid FAT filesystem [ 303.804696][T19875] binder: 19872:19875 ioctl c0306201 20000380 returned -22 [ 303.817101][T19884] BPF: [ 303.817101][T19884] [ 303.822914][T19896] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. 14:05:16 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 303.854746][T19897] overlayfs: failed to resolve './file0': -2 14:05:17 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001e80)=ANY=[], 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, &(0x7f0000000180)) 14:05:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r6, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe6c}}}, 0x24}}, 0x0) 14:05:17 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x2000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @empty}}}}) [ 303.930931][T19908] BPF:[1] STRUCT _. [ 303.946435][T19908] BPF:size=0 vlen=0 [ 303.965112][T19910] binder: 19905:19910 unknown command 0 [ 303.966412][T19908] BPF: 14:05:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) [ 303.988497][T19908] BPF:Invalid name [ 303.993092][T19910] binder: 19905:19910 ioctl c0306201 20000200 returned -22 [ 304.000707][T19917] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 304.013729][T19908] BPF: [ 304.013729][T19908] [ 304.023238][T19910] binder: 19905:19910 unknown command 0 14:05:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r6, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe6c}}}, 0x24}}, 0x0) 14:05:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000340)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) [ 304.062441][T19918] overlayfs: failed to resolve './file0': -2 [ 304.082269][T19927] binder: 19905:19927 unknown command 0 [ 304.091388][T19910] binder: 19905:19910 ioctl c0306201 20000200 returned -22 14:05:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) 14:05:17 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 304.124283][T19927] binder: 19905:19927 ioctl c0306201 20000380 returned -22 14:05:17 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 14:05:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) [ 304.229191][T19938] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 304.270786][T19944] binder: 19940:19944 unknown command 0 [ 304.303794][T19948] overlayfs: failed to resolve './file0': -2 [ 304.311496][T19944] binder: 19940:19944 ioctl c0306201 20000200 returned -22 [ 304.330445][T19957] binder: BINDER_SET_CONTEXT_MGR already set [ 304.351603][T19957] binder: 19940:19957 ioctl 40046207 0 returned -16 [ 304.374132][T19944] binder: 19940:19944 ioctl c0306201 20000200 returned -22 [ 304.395933][T19944] binder: 19940:19944 unknown command 0 [ 304.429887][T19944] binder: 19940:19944 ioctl c0306201 20000380 returned -22 14:05:17 executing program 3: syz_io_uring_setup(0x2759, &(0x7f0000000080)={0x0, 0x0, 0x26}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000200)) 14:05:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) 14:05:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r6, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe6c}}}, 0x24}}, 0x0) 14:05:17 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:17 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 304.984208][T19977] BPF:[1] STRUCT _. [ 304.992811][T19978] binder: 19974:19978 unknown command 0 [ 304.998124][T19977] BPF:size=0 vlen=0 [ 305.002540][T19976] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 305.011128][T19977] BPF: [ 305.022034][T19977] BPF:Invalid name [ 305.027660][T19978] binder: 19974:19978 ioctl c0306201 20000200 returned -22 14:05:18 executing program 3: syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x1}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x32}}}}}}]}}, 0x0) [ 305.062268][T19977] BPF: [ 305.062268][T19977] [ 305.071809][T19982] binder: BINDER_SET_CONTEXT_MGR already set 14:05:18 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) 14:05:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r6, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe6c}}}, 0x24}}, 0x0) [ 305.106848][T19982] binder: 19974:19982 ioctl 40046207 0 returned -16 [ 305.130338][T19990] binder: 19974:19990 ioctl c0306201 20000200 returned -22 [ 305.162063][T19978] binder: 19974:19978 unknown command 0 [ 305.168622][T19978] binder: 19974:19978 ioctl c0306201 20000380 returned -22 [ 305.197093][T19999] BPF:[1] STRUCT _. [ 305.209129][T19999] BPF:size=0 vlen=0 [ 305.221591][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 305.221606][ T36] audit: type=1804 audit(1630505118.287:69): pid=19993 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/445/bus/file0" dev="sda1" ino=14761 res=1 errno=0 [ 305.230650][T19999] BPF: 14:05:18 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 305.269564][T19999] BPF:Invalid name [ 305.273471][T19999] BPF: [ 305.273471][T19999] [ 305.282928][T19998] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 305.335218][T20004] binder: 20002:20004 unknown command 0 [ 305.344372][T20004] binder: 20002:20004 ioctl c0306201 20000200 returned -22 [ 305.358525][T20004] binder: BINDER_SET_CONTEXT_MGR already set [ 305.375713][T20004] binder: 20002:20004 ioctl 40046207 0 returned -16 [ 305.384912][T20004] binder: 20002:20004 ioctl c0306201 20000200 returned -22 [ 305.393283][T20004] binder: 20002:20004 unknown command 0 [ 305.399433][T20004] binder: 20002:20004 ioctl c0306201 20000380 returned -22 [ 305.425449][ T29] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 305.785786][ T29] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.799257][ T29] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.810597][ T29] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 305.827871][ T29] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 305.840954][ T29] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 305.861092][ T29] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 306.025754][ T29] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 306.034838][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.044131][ T29] usb 4-1: Product: syz [ 306.048963][ T29] usb 4-1: Manufacturer: syz [ 306.053919][ T29] usb 4-1: SerialNumber: syz [ 306.335669][ T29] cdc_ncm 4-1:1.0: bind() failure [ 306.342249][ T29] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 306.349479][ T29] cdc_ncm 4-1:1.1: bind() failure [ 306.357127][ T29] usb 4-1: USB disconnect, device number 3 [ 307.065638][ T29] usb 4-1: new high-speed USB device number 4 using dummy_hcd 14:05:20 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000100)={0x10, 0x2}, 0x10) listen(r0, 0xe7) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000000)={0x5, 0x2}, 0x10) 14:05:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) 14:05:20 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r6, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe6c}}}, 0x24}}, 0x0) 14:05:20 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 307.281357][T20035] BPF:[1] STRUCT _. [ 307.288624][T20035] BPF:size=0 vlen=0 [ 307.293320][T20035] BPF: [ 307.297300][T20035] BPF:Invalid name [ 307.301628][T20035] BPF: [ 307.301628][T20035] [ 307.312220][T20033] binder: 20031:20033 unknown command 0 [ 307.319332][T20033] binder: 20031:20033 ioctl c0306201 20000200 returned -22 14:05:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r6, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe6c}}}, 0x24}}, 0x0) 14:05:20 executing program 5: openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) [ 307.326842][ T36] audit: type=1804 audit(1630505120.387:70): pid=20037 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/446/bus/file0" dev="sda1" ino=14776 res=1 errno=0 [ 307.356083][T20033] binder: 20031:20033 unknown command 0 [ 307.362718][T20033] binder: 20031:20033 ioctl c0306201 20000380 returned -22 [ 307.423158][T20050] __nla_validate_parse: 1 callbacks suppressed [ 307.423172][T20050] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 307.424093][T20055] BPF:[1] STRUCT _. [ 307.445781][ T29] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.466834][ T29] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.478378][T20055] BPF:size=0 vlen=0 [ 307.482293][T20055] BPF: [ 307.485566][ T29] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 307.495417][T20055] BPF:Invalid name [ 307.499367][T20055] BPF: [ 307.499367][T20055] [ 307.505037][ T29] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 307.517522][ T29] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 307.527605][ T29] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 307.695441][ T29] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.704536][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.712565][ T29] usb 4-1: Product: syz [ 307.716909][ T29] usb 4-1: Manufacturer: syz [ 307.721595][ T29] usb 4-1: SerialNumber: syz 14:05:21 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0xe2502, 0x0) write$fb(r0, &(0x7f0000000040)='=', 0x1) 14:05:21 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:21 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:21 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x800}]}) 14:05:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r6, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe6c}}}, 0x24}}, 0x0) 14:05:21 executing program 5: openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) [ 308.005502][ T29] cdc_ncm 4-1:1.0: bind() failure [ 308.012833][ T29] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 308.040281][ T29] cdc_ncm 4-1:1.1: bind() failure [ 308.044152][T20083] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. 14:05:21 executing program 0: r0 = socket(0x23, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @remote}, 0xadf90ea1c9765ea3}}) [ 308.059235][T20084] BPF:[1] STRUCT _. [ 308.063599][T20084] BPF:size=0 vlen=0 [ 308.065994][T20082] binder: 20075:20082 unknown command 0 [ 308.079757][T20082] binder: 20075:20082 ioctl c0306201 20000200 returned -22 [ 308.091073][ T29] usb 4-1: USB disconnect, device number 4 [ 308.097024][T20084] BPF: 14:05:21 executing program 3: syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x29, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xfd, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0xdf}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x1}}]}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) [ 308.113806][T20084] BPF:Invalid name [ 308.130667][T20097] binder: 20075:20097 unknown command 0 14:05:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r6, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe6c}}}, 0x24}}, 0x0) 14:05:21 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:21 executing program 5: openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) 14:05:21 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01eb00908e000000000001000000080001006800000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099"], 0x30}}, 0x0) [ 308.142988][ T36] audit: type=1804 audit(1630505121.207:71): pid=20086 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/447/bus/file0" dev="sda1" ino=14791 res=1 errno=0 [ 308.162261][T20084] BPF: [ 308.162261][T20084] [ 308.183035][T20097] binder: 20075:20097 ioctl c0306201 20000380 returned -22 [ 308.237430][T20112] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. 14:05:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) 14:05:21 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 308.285031][T20122] binder: 20113:20122 unknown command 0 [ 308.288892][ T36] audit: type=1804 audit(1630505121.357:72): pid=20115 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/448/bus/file0" dev="sda1" ino=14796 res=1 errno=0 [ 308.303945][T20122] binder: 20113:20122 ioctl c0306201 20000200 returned -22 [ 308.327614][T20126] BPF:[1] STRUCT _. 14:05:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe6c}}}, 0x24}}, 0x0) [ 308.350263][T20129] binder: 20113:20129 unknown command 0 [ 308.351946][T20126] BPF:size=0 vlen=0 [ 308.366308][T20129] binder: 20113:20129 ioctl c0306201 20000380 returned -22 [ 308.370579][T20126] BPF: [ 308.388483][T20126] BPF:Invalid name 14:05:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) 14:05:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) [ 308.402085][T20126] BPF: [ 308.402085][T20126] 14:05:21 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 308.434556][ T36] audit: type=1804 audit(1630505121.497:73): pid=20134 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/449/bus/file0" dev="sda1" ino=14321 res=1 errno=0 [ 308.498919][T20141] BPF:[1] STRUCT _. [ 308.501818][T20143] binder: BINDER_SET_CONTEXT_MGR already set [ 308.507659][T20141] BPF:size=0 vlen=0 [ 308.515202][T20141] BPF: [ 308.521978][T20143] binder: 20140:20143 ioctl 40046207 0 returned -16 [ 308.522836][T20141] BPF:Invalid name [ 308.534975][T20143] binder: 20140:20143 ioctl c0306201 20000200 returned -22 [ 308.547765][T20141] BPF: [ 308.547765][T20141] [ 308.565398][ T29] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 308.805346][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 308.925601][ T29] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 309.095732][ T29] usb 4-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.40 [ 309.104913][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.113736][ T29] usb 4-1: Product: syz [ 309.118561][ T29] usb 4-1: Manufacturer: syz [ 309.123504][ T29] usb 4-1: SerialNumber: syz [ 309.406565][ T29] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 309.420858][ T29] usb 4-1: USB disconnect, device number 5 [ 310.165392][ T4810] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 310.405388][ T4810] usb 4-1: Using ep0 maxpacket: 16 [ 310.525697][ T4810] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 310.706117][ T4810] usb 4-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.40 [ 310.715410][ T4810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.723379][ T4810] usb 4-1: Product: syz [ 310.727852][ T4810] usb 4-1: Manufacturer: syz [ 310.732451][ T4810] usb 4-1: SerialNumber: syz 14:05:24 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000004c0)='.log\x00', 0x0, 0x40) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000500)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 14:05:24 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe6c}}}, 0x24}}, 0x0) 14:05:24 executing program 0: r0 = openat$tcp_mem(0xffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$int_out(r0, 0x0, 0x0) 14:05:24 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) [ 311.016740][ T4810] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 311.035482][ T4810] usb 4-1: USB disconnect, device number 6 [ 311.056859][T20182] BPF:[1] STRUCT _. [ 311.059613][T20179] overlayfs: missing 'lowerdir' 14:05:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe6c}}}, 0x24}}, 0x0) [ 311.061473][T20182] BPF:size=0 vlen=0 [ 311.084898][T20182] BPF: [ 311.086685][T20186] binder: BINDER_SET_CONTEXT_MGR already set [ 311.092155][T20182] BPF:Invalid name [ 311.099141][T20186] binder: 20175:20186 ioctl 40046207 0 returned -16 [ 311.100484][T20182] BPF: [ 311.100484][T20182] 14:05:24 executing program 0: syz_mount_image$ubifs(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001600), 0x0, &(0x7f0000001880)) 14:05:24 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 311.116031][ T36] audit: type=1804 audit(1630505124.177:74): pid=20179 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/450/bus/file0" dev="sda1" ino=14814 res=1 errno=0 [ 311.149645][T20186] binder: 20175:20186 ioctl c0306201 20000200 returned -22 14:05:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) 14:05:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe6c}}}, 0x24}}, 0x0) 14:05:24 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 311.229809][T20198] UBIFS error (pid: 20198): cannot open "/dev/loop0", error -22 [ 311.266749][T20206] BPF:[1] STRUCT _. [ 311.299221][T20198] UBIFS error (pid: 20198): cannot open "/dev/loop0", error -22 [ 311.311880][T20208] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 311.334037][T20211] overlayfs: missing 'lowerdir' [ 311.334222][T20214] binder: BINDER_SET_CONTEXT_MGR already set [ 311.352242][T20206] BPF:size=0 vlen=0 [ 311.373464][ T36] audit: type=1804 audit(1630505124.437:75): pid=20211 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/451/bus/file0" dev="sda1" ino=14816 res=1 errno=0 [ 311.413457][T20206] BPF: [ 311.421981][T20214] binder: 20205:20214 ioctl 40046207 0 returned -16 [ 311.422325][T20219] binder: 20205:20219 ioctl c0306201 20000200 returned -22 [ 311.430937][T20206] BPF:Invalid name [ 311.451785][T20206] BPF: [ 311.451785][T20206] 14:05:25 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000004c0)='.log\x00', 0x0, 0x40) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000500)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 14:05:25 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) 14:05:25 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) 14:05:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe6c}}}, 0x24}}, 0x0) 14:05:25 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 311.994856][T20245] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 312.006916][T20246] BPF:[1] STRUCT _. [ 312.011680][T20248] binder: 20241:20248 unknown command 0 [ 312.015237][T20246] BPF:size=0 vlen=0 [ 312.027322][T20246] BPF: [ 312.031296][T20246] BPF:Invalid name [ 312.040538][T20246] BPF: 14:05:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) 14:05:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x180, 0xe8, 0x180, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@length={{0x28}}, @common=@unspec=@state={{0x28}}]}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private, 0x0, 0x0, '\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@loopback, @loopback, 0x0, 0x0, 'sit0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) [ 312.040538][T20246] [ 312.040922][T20247] overlayfs: missing 'lowerdir' [ 312.048067][T20248] binder: 20241:20248 ioctl c0306201 20000200 returned -22 [ 312.062408][T20259] binder: 20241:20259 unknown command 0 [ 312.069358][T20259] binder: 20241:20259 ioctl c0306201 20000200 returned -22 14:05:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe6c}}}, 0x24}}, 0x0) [ 312.106865][ T36] audit: type=1804 audit(1630505125.177:76): pid=20262 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/452/bus/file0" dev="sda1" ino=14820 res=1 errno=0 [ 312.109864][T20248] binder: 20241:20248 unknown command 0 14:05:25 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 312.182845][T20266] x_tables: duplicate underflow at hook 2 [ 312.191185][T20248] binder: 20241:20248 ioctl c0306201 20000380 returned -22 [ 312.222096][T20268] BPF:[1] STRUCT _. 14:05:25 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={0x0, 0x0, 0xc}, 0x10) 14:05:25 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 312.254423][T20268] BPF:size=0 vlen=0 [ 312.279367][T20270] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 312.308299][T20268] BPF: [ 312.324630][T20268] BPF:Invalid name [ 312.338757][T20276] binder: 20273:20276 unknown command 0 [ 312.346193][T20268] BPF: [ 312.346193][T20268] [ 312.368666][T20276] binder: 20273:20276 ioctl c0306201 20000200 returned -22 [ 312.388106][T20278] overlayfs: missing 'lowerdir' [ 312.415157][T20276] binder: 20273:20276 unknown command 0 [ 312.437657][T20276] binder: 20273:20276 ioctl c0306201 20000200 returned -22 [ 312.450770][ T36] audit: type=1804 audit(1630505125.517:77): pid=20278 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/453/bus/file0" dev="sda1" ino=14817 res=1 errno=0 [ 312.476241][T20287] binder: 20273:20287 unknown command 0 [ 312.481866][T20287] binder: 20273:20287 ioctl c0306201 20000380 returned -22 14:05:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @remote, @rand_addr=0x64010100}, 0xc) 14:05:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) 14:05:26 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETAF(r0, 0x541e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "f309477160dee57f"}) openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) 14:05:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:05:26 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:26 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:26 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}}, &(0x7f0000000040)=""/211, 0x3e, 0xd3, 0x8}, 0x20) 14:05:26 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETAF(r0, 0x541e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "f309477160dee57f"}) openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) [ 313.056290][T20309] BPF:[1] STRUCT _. [ 313.066119][T20309] BPF:size=0 vlen=0 [ 313.070185][T20304] overlayfs: missing 'lowerdir' [ 313.075444][T20307] binder: 20301:20307 unknown command 0 [ 313.078422][T20309] BPF: [ 313.088580][T20307] binder: 20301:20307 ioctl c0306201 20000200 returned -22 [ 313.102288][T20308] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 313.108390][T20309] BPF:Invalid name [ 313.121265][ T36] audit: type=1804 audit(1630505126.187:78): pid=20304 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/454/bus/file0" dev="sda1" ino=14830 res=1 errno=0 14:05:26 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) [ 313.160444][T20309] BPF: [ 313.160444][T20309] [ 313.160624][T20307] binder: 20301:20307 unknown command 0 [ 313.175884][T20319] BPF:[1] VOLATILE (anon) [ 313.186146][T20307] binder: 20301:20307 ioctl c0306201 20000200 returned -22 [ 313.205417][T20319] BPF:type_id=4 14:05:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:05:26 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETAF(r0, 0x541e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "f309477160dee57f"}) openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) [ 313.206131][T20325] BPF:[1] VOLATILE (anon) [ 313.213700][T20315] binder: 20301:20315 unknown command 0 [ 313.222245][T20315] binder: 20301:20315 ioctl c0306201 20000380 returned -22 [ 313.226118][T20319] BPF: [ 313.239969][T20319] BPF:Invalid type_id 14:05:26 executing program 2: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r0, 0xffffffffffffffff) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 313.258747][T20325] BPF:type_id=4 [ 313.273083][T20319] BPF: [ 313.273083][T20319] [ 313.279110][T20330] overlayfs: missing 'lowerdir' [ 313.284641][T20325] BPF: [ 313.293348][T20325] BPF:Invalid type_id [ 313.299369][T20332] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 313.299893][T20333] BPF:[1] STRUCT _. [ 313.319917][T20325] BPF: [ 313.319917][T20325] [ 313.330080][ T36] audit: type=1804 audit(1630505126.397:79): pid=20330 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/455/bus/file0" dev="sda1" ino=14851 res=1 errno=0 14:05:26 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x100}, 0xc) 14:05:26 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETAF(r0, 0x541e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "f309477160dee57f"}) openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) 14:05:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) 14:05:26 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 313.362027][T20333] BPF:size=0 vlen=0 [ 313.374056][T20333] BPF: [ 313.383860][T20333] BPF:Invalid name [ 313.388149][T20339] binder: 20335:20339 unknown command 0 [ 313.390542][T20333] BPF: [ 313.390542][T20333] 14:05:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) [ 313.430616][T20339] binder: 20335:20339 ioctl c0306201 20000200 returned -22 [ 313.452928][T20349] binder: 20335:20349 unknown command 0 [ 313.471162][T20349] binder: 20335:20349 ioctl c0306201 20000380 returned -22 14:05:26 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0xad, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x2, 0x1, 0x3, 0x20, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "aebe27"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7, 0xff80, 0x7f}, {0x6, 0x24, 0x1a, 0x1, 0x30}, [@mbim_extended={0x8, 0x24, 0x1c, 0xf0d, 0x7, 0x7}, @mdlm={0x15}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x81, 0x485}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x2, 0x2, 0x29, 0xc3, 0x6}, @acm={0x4, 0x24, 0x2, 0x1}, @dmm={0x7, 0x24, 0x14, 0x3, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x7, 0x1, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x78, 0x6}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x81, 0x8, 0xf7, 0x10, 0x7f}, 0xcf, &(0x7f0000000100)={0x5, 0xf, 0xcf, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x81, 0x4, 0xe31e}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x2, 0x5, 0x2}, @generic={0xaf, 0x10, 0x2, "55f1cfe2461be46878df52b13932588ac7cb5d204477bab0b11c142cd814b1abe4711fa51a33ffed0451253bddaa6f074f42aac96b43063e374d9a4185226b1069468cd6bdeb3dff7cfcafa64a5ed801ef3b724890f78911f40f28c6f88265f95ac4d8d92988fea6b37bf9ad5f513b5be4b4999f9ff76d04ec5d330f18ca83dcdd4db3947df0e6fa53bc2c7f420460984860a6d7cbd5b78e538ee2bc845ffbdeb0d85f2e5704282b8105ff4f"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x1f, 0x86, 0x5}]}, 0x6, [{0x8f, &(0x7f0000000200)=@string={0x8f, 0x3, "c14514774b14b7bfb1d551b33504bce95138c5f9e87212602c9e42d7c925270b04b9f3fe3933b970c5fd60ac0cdeb0eb4d5c973ece696d17b6b030e24fc0f0466c2251c18bdb63a0d47a1c07a448500003cf49f8cfae71f37975d5f0e12f8dfd59a399ed2681c7636d217635fe8c80230339dc2c74487415461ca9f822a4784814dc572298f98bb88cac31cfb5"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x458}}, {0x76, &(0x7f0000000300)=@string={0x76, 0x3, "46f6caedc96440f1fadae70e1ef2216c03b85a8e954c30018b11f187ce42f2c7ce7ae4de1d110e600fadeb296796c1e984945a4f47e27b0ac29febdbda0b3d9663a7ed4e7d95b43fa9f35fc0f19c8d6dedca5bc4f10ee76f66aa8c4ebc7e5cc06e8dc34aa5ac80e367658f29d6780bdebc304e01"}}, {0xb8, &(0x7f0000000380)=@string={0xb8, 0x3, "fee8a33ef324c85e5db6265b468b2b81af1a807597336543d27ac75dd7d74f18c7ad1f9bb6c71d5e07cafdda8f769176ec3840a2801611baf416b3d4a980f7bad95d1f44627a970e7fa93c8f19d90581902dc0302258ab23dc5465c88c4da9bf918abc25f0f46382a22c8e54c4085a28695e35144d2fd9665dd5f9259aabcd39e3be9d3d7d610497df5d6b010ecf4abd064e1cc2bdee57ba5a22a3027a0f2563197f01411edf25bd29f338390554804436db5dcad581"}}, {0xce, &(0x7f0000000440)=@string={0xce, 0x3, "01882177a79b84a815a5953de5333ba4ae1fe36a4634e77cd3631d31a58b6de6d0e38e0f0381cd8948ef4241e9e778ba162d69cb24ff4a2b462983481ea19ddc1429885d301af90c19bd725e9ae9b090067927c7780ad5b479f681785641193b8656253c04e1de72859dc3b46b422152c6791f40192efad68e9708a32f946094103cc2720015d990ca030672a9e7bec66534f7413ccf51a933fc212b6c5f33df404c022a3e468a15334282844965b31e8bef975262b390c3f0de60b960e34f386d04af55b6bfa82c9f8165e6"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x3801}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000006c0)={0x14, &(0x7f0000000600)={0x40, 0x21, 0x65, {0x65, 0xc, "1a07fe1dcb34b068cd8f4a04d28f7869c8fc07a68308814c46345ff2c4b92958b920624fa53eeac746bf61de0e79d13553ffbd1da1a15d22e91703f0e931128c981e7febba790163287079374a10d588e9eb90eb7b695c46f944760e07462ff5dd1687"}}, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x40, 0xd, 0xe4, "1c4460a3daa6f6f3f438f7738184e96664e5b0bfb78de51f448f97d03b95ce2f64a1d00e120bb07ec6071360aee985eba67db655ea577631f3de064190202ad7903fb008d5e1c3a3f8e9d855e54c5b402573909c57c4808923868e25cb7883da58c7ffad66a7c656c32c11f6623fb01a10d22b7ab7fbbfc12ae129c7e3962642efff4bacb5931fdaa14a14ce3a0d9af14daae9acf3382bb428f0751a8c578f6347c72e3f23dfd44421f51391203838fb53b92c96776b04ee72c2b3b6cd1451c21756769dd51851241cb88678b9460b19119dfb9a03a5f501468204feb87bd092e63b42a8"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000880)={0x20, 0x80, 0x1c, {0x2, 0x1, 0x78, 0x100, 0x6b2, 0x94, 0x81, 0x2, 0x9b, 0x100, 0x1, 0x401}}, &(0x7f00000008c0)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000000900)={0x20, 0x83, 0x2}, &(0x7f0000000940)={0x20, 0x87, 0x2, 0x40}, &(0x7f0000000980)={0x20, 0x89, 0x2, 0x1}}) r1 = syz_open_dev$evdev(&(0x7f0000000a40), 0x4, 0x608882) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000a80)=""/96) r2 = syz_open_dev$hiddev(&(0x7f0000000b00), 0x0, 0x101100) ioctl$HIDIOCGCOLLECTIONINDEX(r2, 0x40184810, &(0x7f0000000b40)={0x2, 0x1, 0xfffffffe, 0x7, 0x0, 0xffffffff}) r3 = syz_open_dev$evdev(&(0x7f0000000b80), 0x3f, 0xa8041) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000000bc0)=""/88) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000e00)={0x14, &(0x7f0000000c40)={0x0, 0x8, 0xb8, {0xb8, 0xf, "c3fe34a90e70da8ba7d54dcfe041693db580948d091990d9b6a8c51b5e7afa1544ee30f1ac66fb635b01a32e1f811829e284e89e399b32164111a2eac476704fe83384e0e869531b984d3a0e05896470bf58240c4f40fbd129f678998abc16b962f96d8a31403314722870e44cfb71d66613284bc799a31303ef6051392f487a1837e00688da5fa92199d9108b76a2739b8eff5bcc3b4b1afa8b1e3228008286b42d277bcd889f3076cb35f172bc949520bc6fddd293"}}, &(0x7f0000000d00)={0x0, 0x3, 0xd4, @string={0xd4, 0x3, "11762cfc3aa191ee9ded0a611988feec660936e442d98dacbeb7916006b6f1f6c96872144e8c66ba10b6f1aa8b23964332790fabaaf3c38341a70809d5e2ed4d995d63c3ad9cefdc9ebf4229552d55bf411ce1064463be51edd6a5e7468f96481082960e7d8e7898eb03a7efa82adbc57ea2d63440215d00cded4769a1585c4726321e3a93fa756b23e0e24404d1ff5cb66577d0a6878a9c70b2f1c4e235083bb6bd19e52be4ea11985e3e305dd8e475e51acecbb1ea968931e337794ba19d5608cb63525ea185610904dc768c46747d8cb1"}}}, &(0x7f0000001040)={0x44, &(0x7f0000000e40)={0x20, 0x1, 0x18, "915a2ecc411c8121c4d11eac137e90125aed2658ca70d7fa"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0xf9}, &(0x7f0000000f00)={0x20, 0x81, 0x1, 'Y'}, &(0x7f0000000f40)={0x20, 0x82, 0x2, 'K\''}, &(0x7f0000000f80)={0x20, 0x83, 0x2, "b606"}, &(0x7f0000000fc0)={0x20, 0x84, 0x4, "7b7c2b91"}, &(0x7f0000001000)={0x20, 0x85, 0x3, "4c879b"}}) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000010c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x28, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8c, 0x40, 0x31, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x3, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x0, 0x3, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1f, 0x6, 0x9}}]}}}]}}]}}, &(0x7f0000001280)={0xa, &(0x7f0000001100)={0xa, 0x6, 0x200, 0x3, 0xfb, 0x2a, 0x30, 0x4}, 0xa7, &(0x7f0000001140)={0x5, 0xf, 0xa7, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x5, 0x7f, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x81, 0x0, 0x7, 0xff00, 0x8}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x7, 0xf000, 0x8000, [0x30]}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x2, 0x7}, @ptm_cap={0x3}, @generic={0x72, 0x10, 0x1, "58f6e4643bd80e563825d1447f4c81c65a220c3010ca43fc4a8dcf6acd5836a661e3068c0d02faf7e7530a093f3c65558a899803b099cd8b87cd418f44ba169bea23c9faf9c264ed60e190139ba2f31f36c8b50570c5b153ac68ab625e268ea2b50552f7aa0a50c8d30c02ff935bb2"}]}, 0x1, [{0x43, &(0x7f0000001200)=@string={0x43, 0x3, "7bc1a19741c2cb1ca3ab9456066d9fe8757d0180f331956bfe93c57787aa4ead037de83bc4b7fa9fc4b8d2c98b016309fb0efb2699cc3c8f84afc9bf20eb863e8c"}}]}) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f00000012c0)=""/252) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000015c0)={0x24, &(0x7f00000013c0)={0x40, 0xa, 0x94, {0x94, 0xa, "fae9f86e65fd1cbffbd356a75fd1cfba1a8a09da6c331be2e82521a03d639480ad2cab95d1178bc74ee33cbebcfd669fb8b17cb8ad0531c05cff351c6c9ea7f8c9112857e9f955bf78751f466d28ec822dfd9ca91f2c7c0eb2195d1ebffa0b62bf6f511a3d8a9e725e50f87139267debc3df81ce751a503a16dc4e666865c1749a793b923f0af6b7242bcffa622045981b96"}}, &(0x7f0000001480)={0x0, 0x3, 0x98, @string={0x98, 0x3, "ede1e682d7f3d496af38ec85f62144776c4de35303d20ce3da9acdbe88fbcc007ba446f57625c888bf8ba059b0bdd75ab93edee1c0a63b365a666e47360fea888b67de1ca55788ab06656c9963a1f17a692a7ef522be4edc98868e174a290e470153a036e0c8b1b75d4293c647522f0f6910979d89b4b6363c5dc181418a9c428083fcac1e3e43650bbb8f3037ee7f4d991f5c2ece85"}}, &(0x7f0000001540)={0x0, 0x22, 0x15, {[@main=@item_012={0x1, 0x0, 0x9, '>'}, @local=@item_012={0x2, 0x2, 0x1, '3O'}, @global=@item_012={0x0, 0x1, 0x2}, @global=@item_4={0x3, 0x1, 0x0, "428a5c8f"}, @main=@item_4={0x3, 0x0, 0xc, "b118ee96"}, @global=@item_4={0x3, 0x1, 0x6, "14567d95"}]}}, &(0x7f0000001580)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8000, 0x36, 0x1, {0x22, 0x708}}}}, &(0x7f0000001800)={0x2c, &(0x7f0000001600)={0x0, 0x12, 0x22, "44f4969c5298c7a77c2222629f5a39d341ebf0c21458292038d1ef3590efcfff3a8e"}, &(0x7f0000001640)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001680)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000016c0)={0x20, 0x1, 0xf8, "5a901818e8be8741a6c9766f2b0721ea403fe634deec60b965f14060b25b976adeb0000a8e4eeb79b0fdde639312aaed4a12c569e2329ef42e00bfa610c7f48535a1df5c762fe5ede1734bd0184a2dc8913d4e6d88ffc85e248b3c9998691a50383ca3ee0d242ca7156fc33fc2c6f041471d94385e90a36f09e7972b5572cc539d2717f982003d63c4be26cae96c52a0c5daabdba9ff6780730d33473c3e5db337db9317a13f7f731d05e434d07e373f9aa7feeff6e58cbfec4eacf6c852b7c9ba0b127a4056865e60f2c3d845cc8895038c6c5ae3f52dbefe9345b3427fb6633a03c43e1af4a518cc428e1b69ecec9e09afbd1fbbe8908a"}, &(0x7f00000017c0)={0x20, 0x3, 0x1, 0x43}}) syz_usb_connect$cdc_ecm(0x4, 0x7a, &(0x7f0000001840)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x1, 0x1, 0x8, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x2f, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x9, 0x24, 0x6, 0x0, 0x0, "4156cfe0"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x9, 0xffff, 0x7}, [@mdlm={0x15, 0x24, 0x12, 0x2}, @ncm={0x6, 0x24, 0x1a, 0x1}, @obex={0x5, 0x24, 0x15, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0x4, 0x81}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0x80, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xff, 0x2, 0x1f}}}}}]}}]}}, &(0x7f0000001c40)={0xa, &(0x7f00000018c0)={0xa, 0x6, 0x110, 0xff, 0x0, 0x7, 0xff, 0x98}, 0x117, &(0x7f0000001900)={0x5, 0xf, 0x117, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0xe9, 0x5, 0x4, 0x6, 0x3a}, @generic={0xf0, 0x10, 0x3, "b75d7a4fad21f62329e10e3268dbad6a44c98d363b27d4491ba517f5206c008f7f32dc562aadb7f2982aa600c11155096e6895ae05c77642e0c715c88986207fea677a14735225a3437608130e76adab41694e6f6c577029a9d401d5942820bb6a26e7f59b539de0ec41c3e91af35053da8ff7296f4ea36fd94dbb79da06a5202f48a413c24efe3cb27577f6e8068060c2952d78e819e1e064e674fd9742dee210744774642d1d5005e41f6e4b48f8be322283a258ee2f391206e686dc7b3e9d593adf25de0462b9e32878d47d6ca3ca5be489d880f9713fec6de227714dc79b51470cb99a8c29b3f85544ae19"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x7f, 0x7, 0x9bb}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x98, 0x7, 0x8}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000001a40)=@lang_id={0x4, 0x3, 0x441}}, {0xbc, &(0x7f0000001a80)=@string={0xbc, 0x3, "2d89e29a75e695477d8457652e233fa53d6f1552ead93324c21205e76324565d2b872b70ee00d55d66185cdc8034c7e09c260daf9c3a51f2de009a3402e2bc63d5acf76b8c541bd8515c130540e9d34650cbab16d1b4cba2cc56768839fcbbb30a2ba30e7ade50ce7a4f14c39c725da96f4bcda6fcb1094feff91ae9c2bb42261a06050cc358a0ad160f9b7facf4353da49628ef1329d44df5cc39dc650825519f8da1b7f435c9f6bd8e40660ab067a7ba855f19ba98ff3328ad"}}, {0xb0, &(0x7f0000001b40)=@string={0xb0, 0x3, "02a623bd2cb1beeaf763a361c9e0e7f27ecbd59f8dd6eabfd60b7edc82981efcb372c5c92bbd0a0e1551c328683729c22f5bbc603a5882fd11f8d55286dc23496a96f401b63ba9db54b72bcc18ca3f113e4367ee088ff5b5d5549cdb852931116943858363aefa8f471700ebc72a881d0dbba5d7d892e423ff3f754ac5b72e9f0ba9295c48d670836d98f6f5baa002713b95b20222184347b403f75cd51695f342afe67ab1dd48f6ab69e11e000e"}}, {0x4, &(0x7f0000001c00)=@lang_id={0x4, 0x3, 0x585d}}]}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001e40)={0x24, &(0x7f0000001cc0)={0x20, 0xc, 0xb8, {0xb8, 0xe, "72fc470fcc9cbf983db799ad9ab04513e30b29549a44a06305f2717b6c3585286c8a11293de8fd47339b7864199cab02cf7a1c1e76ed972159ce0eefdc8211ad11d9a524a04f78f77c0624d1dcf105b8fdd6bb56ee51eaa82f1fc3f13eca97a6d4dbf31e13e594e033cac2e97edbfdc3d3a3bf9bb1a3ad9c43645cd3aafbdae61a6ea4d8bd419e422469024500b169287a40ecc84eede011f15f92a4bcfc019ccf3a35adc7a58c816aa9080527b4c9307012926d8a76"}}, &(0x7f0000001d80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x455}}, &(0x7f0000001dc0)={0x0, 0x22, 0x26, {[@local=@item_4={0x3, 0x2, 0x3, "7808ae8b"}, @local=@item_4={0x3, 0x2, 0x5, "b1c53964"}, @global=@item_4={0x3, 0x1, 0x6, "64b7a72d"}, @local=@item_4={0x3, 0x2, 0x7, "012bb9c4"}, @main=@item_4={0x3, 0x0, 0x9, "25d290cd"}, @main=@item_4={0x3, 0x0, 0xb, "df399f46"}, @main=@item_012={0x1, 0x0, 0xc, 'f'}, @main=@item_4={0x3, 0x0, 0x0, "337f3e52"}, @global=@item_012={0x0, 0x1, 0x3}]}}, &(0x7f0000001e00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x1f, 0x1, {0x22, 0x851}}}}, &(0x7f0000002040)={0x2c, &(0x7f0000001e80)={0x0, 0x5, 0x4d, "01bda1461749bbc93e8c215154199d15cd6bc123285be38f08dfddf91681807e31a1573c83aea473ff4f7932fdea96e96899fde2a666be6ecf5f5a2d5cbf760bc5bbcd0cec6fad5ccf752de340"}, &(0x7f0000001f00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001f40)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001f80)={0x20, 0x1, 0x53, "ff74e468e56438c69269916928dfe40467ba01db793aa654b97c28628c2db67b7a47a1112198674656373306b380dc6dbe83e06114e087bd0abf7eb63528e75f195884b9a836f30a4272724d041e87123b353c"}, &(0x7f0000002000)={0x20, 0x3, 0x1, 0x8}}) r4 = syz_open_dev$evdev(&(0x7f0000002140), 0x3f, 0x400) ioctl$EVIOCGABS0(r4, 0x80184540, &(0x7f0000002180)=""/85) 14:05:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000001300)=[{&(0x7f0000000200)="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", 0x200}], 0x0, &(0x7f0000001340)) [ 313.489856][T20354] BPF:[1] STRUCT _. [ 313.502806][T20354] BPF:size=0 vlen=0 [ 313.528272][T20354] BPF: [ 313.532547][T20357] overlayfs: missing 'lowerdir' [ 313.539798][T20354] BPF:Invalid name [ 313.541010][T20358] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 313.559116][T20354] BPF: [ 313.559116][T20354] 14:05:26 executing program 2: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r0, 0xffffffffffffffff) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 313.569756][ T36] audit: type=1804 audit(1630505126.637:80): pid=20357 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/456/bus/file0" dev="sda1" ino=14857 res=1 errno=0 14:05:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) 14:05:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r6, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe6c}}}, 0x24}}, 0x0) 14:05:26 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 313.617180][T20372] loop0: detected capacity change from 0 to 1 [ 313.650433][T20372] FAT-fs (loop0): invalid media value (0xa3) 14:05:26 executing program 0: syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000001300)=[{&(0x7f0000000200), 0x0, 0x101}], 0x0, &(0x7f0000001340)={[{@numtail}, {@uni_xlateno}, {@shortname_lower}, {@shortname_winnt}, {@utf8no}, {@rodir}], [{@uid_eq}]}) [ 313.670333][T20372] FAT-fs (loop0): Can't find a valid FAT filesystem [ 313.678766][T20375] binder: 20365:20375 unknown command 0 [ 313.696725][T20375] binder: 20365:20375 ioctl c0306201 20000200 returned -22 [ 313.720833][T20381] BPF:[1] STRUCT _. [ 313.725930][T20379] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 313.742442][T20375] binder: 20365:20375 unknown command 0 [ 313.743922][T20381] BPF:size=0 vlen=0 [ 313.751816][T20387] loop0: detected capacity change from 0 to 1 [ 313.761334][T20375] binder: 20365:20375 ioctl c0306201 20000380 returned -22 14:05:26 executing program 2: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r0, 0xffffffffffffffff) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 313.763651][T20386] overlayfs: missing 'lowerdir' [ 313.783531][T20387] FAT-fs (loop0): bogus number of reserved sectors [ 313.790891][T20381] BPF: [ 313.802723][T20387] FAT-fs (loop0): Can't find a valid FAT filesystem [ 313.804620][T20381] BPF:Invalid name 14:05:26 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 313.809523][ T36] audit: type=1804 audit(1630505126.867:81): pid=20386 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/457/bus/file0" dev="sda1" ino=14860 res=1 errno=0 [ 313.840665][ T8105] usb 4-1: new high-speed USB device number 7 using dummy_hcd 14:05:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 14:05:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r6, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe6c}}}, 0x24}}, 0x0) 14:05:27 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) [ 313.882411][T20400] binder: 20396:20400 unknown command 0 [ 313.889968][T20400] binder: 20396:20400 ioctl c0306201 20000200 returned -22 [ 313.903396][T20400] binder: 20396:20400 unknown command 0 [ 313.910791][T20400] binder: 20396:20400 ioctl c0306201 20000380 returned -22 [ 313.921047][T20381] BPF: [ 313.921047][T20381] [ 313.962349][T20408] overlayfs: missing 'lowerdir' [ 313.972331][T20407] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 313.986123][ T36] audit: type=1804 audit(1630505127.057:82): pid=20408 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/458/bus/file0" dev="sda1" ino=14870 res=1 errno=0 [ 314.019666][T20409] BPF:[1] STRUCT _. [ 314.023929][T20409] BPF:size=0 vlen=0 [ 314.028197][T20409] BPF: [ 314.032416][T20409] BPF:Invalid name [ 314.040409][T20409] BPF: [ 314.040409][T20409] [ 314.105218][ T8105] usb 4-1: Using ep0 maxpacket: 16 [ 314.275678][ T8105] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 314.455288][ T8105] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 314.464410][ T8105] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.473228][ T8105] usb 4-1: Product: 擉໧氡렃蹚䲕İᆋ蟱䋎쟲竎ᄝ怎괏⧫陧钄佚੻鿂௚阽ꝣ仭镽㾴쁟鳱涍쫭쑛໱濧ꩦ二纼쁜赮䫃겥敧⦏磖ゼŎ [ 314.491753][ T8105] usb 4-1: Manufacturer: ј [ 314.496823][ T8105] usb 4-1: SerialNumber: 㺣⓳廈뙝嬦譆脫᪯疀㎗䍥竒巇ퟗᡏ귇鬟잶帝쨇皏皑㣬ꉀ 먑ᛴ풳肩뫷巙䐟穢ທ꥿輼脅ⶐダ堢⎫哜졥䶌뾩誑▼艣Ⲣ咎ࣄ⡚幩ᐵ⽍曙핝◹ꮚ㧍뻣㶝慽霄巟ū켎뵊丆순멗≚ʣེ挥缙䄁봥㤸吅䒀쩝臕 [ 314.989539][T20361] udc-core: couldn't find an available UDC or it's busy [ 314.996502][T20361] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 315.035311][ T8105] cdc_ncm 4-1:1.0: bind() failure [ 315.041855][ T8105] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 315.056230][ T8105] cdc_ncm 4-1:1.1: bind() failure [ 315.064015][ T8105] usb 4-1: USB disconnect, device number 7 [ 315.775223][ T5] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 316.017228][ T5] usb 4-1: Using ep0 maxpacket: 16 [ 316.135738][ T5] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 316.305461][ T5] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 316.314498][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.322717][ T5] usb 4-1: Product: 擉໧氡렃蹚䲕İᆋ蟱䋎쟲竎ᄝ怎괏⧫陧钄佚੻鿂௚阽ꝣ仭镽㾴쁟鳱涍쫭쑛໱濧ꩦ二纼쁜赮䫃겥敧⦏磖ゼŎ [ 316.340663][ T5] usb 4-1: Manufacturer: ј [ 316.345274][ T5] usb 4-1: SerialNumber: 㺣⓳廈뙝嬦譆脫᪯疀㎗䍥竒巇ퟗᡏ귇鬟잶帝쨇皏皑㣬ꉀ 먑ᛴ풳肩뫷巙䐟穢ທ꥿輼脅ⶐダ堢⎫哜졥䶌뾩誑▼艣Ⲣ咎ࣄ⡚幩ᐵ⽍曙핝◹ꮚ㧍뻣㶝慽霄巟ū켎뵊丆순멗≚ʣེ挥缙䄁봥㤸吅䒀쩝臕 14:05:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x32, &(0x7f0000000000)={'security\x00', 0x2, [{}, {}]}, 0x48) 14:05:29 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:29 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) 14:05:29 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000100), 0x4) 14:05:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r6, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe6c}}}, 0x24}}, 0x0) [ 316.583496][T20457] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 316.597550][T20459] BPF:[1] STRUCT _. [ 316.607978][T20462] binder: 20451:20462 unknown command 0 [ 316.610574][T20460] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 316.615201][ T5] cdc_ncm 4-1:1.0: bind() failure [ 316.623148][T20459] BPF:size=0 vlen=0 14:05:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000000)={@multicast2, @remote}, 0xc) [ 316.640334][T20459] BPF: [ 316.646659][T20459] BPF:Invalid name [ 316.650988][T20462] binder: 20451:20462 ioctl c0306201 20000200 returned -22 [ 316.652175][T20459] BPF: [ 316.652175][T20459] [ 316.677973][T20460] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 14:05:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) [ 316.689174][ T5] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 316.692284][T20470] binder: 20451:20470 unknown command 0 [ 316.705353][ T36] audit: type=1804 audit(1630505129.777:83): pid=20471 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/459/bus/file0" dev="sda1" ino=14875 res=1 errno=0 14:05:29 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80) sendmmsg$sock(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}], 0x2, 0x0) 14:05:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r6, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe6c}}}, 0x24}}, 0x0) 14:05:29 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 316.739014][ T5] cdc_ncm 4-1:1.1: bind() failure [ 316.752594][ T5] usb 4-1: USB disconnect, device number 8 [ 316.766835][T20470] binder: 20451:20470 ioctl c0306201 20000380 returned -22 14:05:29 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x17, &(0x7f0000000000)={'security\x00', 0x2, [{}, {}]}, 0x48) 14:05:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8914, &(0x7f0000000800)={'erspan0\x00', 0x0}) [ 316.850469][T20491] BPF:[1] STRUCT _. [ 316.861065][T20491] BPF:size=0 vlen=0 [ 316.870700][T20491] BPF: [ 316.872037][T20495] binder: 20487:20495 unknown command 0 [ 316.874512][T20491] BPF:Invalid name [ 316.889762][T20491] BPF: [ 316.889762][T20491] 14:05:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) 14:05:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r6, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe6c}}}, 0x24}}, 0x0) [ 316.909247][ T3237] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.915615][ T3237] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.929004][T20495] binder: 20487:20495 ioctl c0306201 20000200 returned -22 [ 316.943587][T20497] overlayfs: option "workdir=." is useless in a non-upper mount, ignore 14:05:30 executing program 0: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8a01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x40, 0x9, 0x4, 0x8, 0x0, 0x52, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000040), 0xa}, 0x104, 0x8c8, 0x6, 0x0, 0x1, 0x0, 0x5895, 0x0, 0x200}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d0, 0xc8, 0x0, 0x1d0, 0x5803, 0x2a8, 0x2e8, 0x2e8, 0x1d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'bridge0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1d0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x6}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @loopback, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f00000001c0)='R\trust\xe3c*sgrVid:De', 0xffffffffffffffff) syz_open_pts(0xffffffffffffffff, 0x408440) [ 316.961027][T20495] binder: 20487:20495 unknown command 0 [ 316.983157][T20495] binder: 20487:20495 ioctl c0306201 20000380 returned -22 [ 316.997235][T20506] BPF:[1] STRUCT _. [ 316.997521][T20497] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 317.004162][T20506] BPF:size=0 vlen=0 [ 317.024383][ T36] audit: type=1804 audit(1630505130.087:84): pid=20509 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/460/bus/file0" dev="sda1" ino=14897 res=1 errno=0 [ 317.028338][T20510] Cannot find add_set index 0 as target [ 317.059000][T20506] BPF: 14:05:30 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 317.068060][T20506] BPF:Invalid name [ 317.074492][T20506] BPF: [ 317.074492][T20506] 14:05:30 executing program 0: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8a01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x40, 0x9, 0x4, 0x8, 0x0, 0x52, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000040), 0xa}, 0x104, 0x8c8, 0x6, 0x0, 0x1, 0x0, 0x5895, 0x0, 0x200}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d0, 0xc8, 0x0, 0x1d0, 0x5803, 0x2a8, 0x2e8, 0x2e8, 0x1d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'bridge0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1d0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x6}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @loopback, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f00000001c0)='R\trust\xe3c*sgrVid:De', 0xffffffffffffffff) syz_open_pts(0xffffffffffffffff, 0x408440) 14:05:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) 14:05:30 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 317.159027][T20521] binder: 20518:20521 unknown command 0 [ 317.168722][T20521] binder: 20518:20521 ioctl c0306201 20000200 returned -22 [ 317.190080][T20521] binder: 20518:20521 unknown command 0 [ 317.201195][T20521] binder: 20518:20521 ioctl c0306201 20000380 returned -22 14:05:30 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 317.219157][T20525] Cannot find add_set index 0 as target [ 317.219475][T20527] BPF:[1] STRUCT _. [ 317.240740][T20527] BPF:size=0 vlen=0 [ 317.246006][T20529] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 317.248872][T20527] BPF: 14:05:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) [ 317.269706][T20527] BPF:Invalid name [ 317.277805][T20527] BPF: [ 317.277805][T20527] [ 317.304055][T20529] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 317.304390][T20533] binder: 20532:20533 unknown command 0 [ 317.337963][ T36] audit: type=1804 audit(1630505130.407:85): pid=20534 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/461/bus/file0" dev="sda1" ino=14899 res=1 errno=0 [ 317.350399][T20533] binder: 20532:20533 ioctl c0306201 20000200 returned -22 [ 317.377590][T20537] binder: 20532:20537 unknown command 0 [ 317.383347][T20537] binder: 20532:20537 ioctl c0306201 20000200 returned -22 [ 317.395013][T20537] binder: 20532:20537 unknown command 0 [ 317.401628][T20537] binder: 20532:20537 ioctl c0306201 20000380 returned -22 [ 317.418897][T20538] BPF:[1] STRUCT _. [ 317.430924][T20538] BPF:size=0 vlen=0 14:05:30 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:30 executing program 0: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8a01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x40, 0x9, 0x4, 0x8, 0x0, 0x52, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000040), 0xa}, 0x104, 0x8c8, 0x6, 0x0, 0x1, 0x0, 0x5895, 0x0, 0x200}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d0, 0xc8, 0x0, 0x1d0, 0x5803, 0x2a8, 0x2e8, 0x2e8, 0x1d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'bridge0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1d0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x6}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @loopback, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f00000001c0)='R\trust\xe3c*sgrVid:De', 0xffffffffffffffff) syz_open_pts(0xffffffffffffffff, 0x408440) [ 317.440773][T20538] BPF: [ 317.446509][T20538] BPF:Invalid name [ 317.455916][T20538] BPF: [ 317.455916][T20538] [ 317.479420][T20547] binder: 20545:20547 unknown command 0 [ 317.488862][T20547] binder: 20545:20547 ioctl c0306201 20000200 returned -22 [ 317.509307][T20547] binder: 20545:20547 unknown command 0 [ 317.521545][T20547] binder: 20545:20547 ioctl c0306201 20000200 returned -22 [ 317.539273][T20547] binder: 20545:20547 unknown command 0 [ 317.549415][T20547] binder: 20545:20547 ioctl c0306201 20000380 returned -22 [ 317.552339][T20549] Cannot find add_set index 0 as target 14:05:30 executing program 3: pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000180)={0x21}, 0x0, 0x0) 14:05:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 14:05:30 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:30 executing program 0: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8a01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x40, 0x9, 0x4, 0x8, 0x0, 0x52, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000040), 0xa}, 0x104, 0x8c8, 0x6, 0x0, 0x1, 0x0, 0x5895, 0x0, 0x200}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d0, 0xc8, 0x0, 0x1d0, 0x5803, 0x2a8, 0x2e8, 0x2e8, 0x1d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'bridge0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1d0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x6}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @loopback, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f00000001c0)='R\trust\xe3c*sgrVid:De', 0xffffffffffffffff) syz_open_pts(0xffffffffffffffff, 0x408440) 14:05:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r6, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe6c}}}, 0x24}}, 0x0) 14:05:30 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 14:05:30 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f00000012c0), &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}}, 0xfffffffffffffffb) [ 317.702281][T20566] binder: 20559:20566 unknown command 0 [ 317.732932][T20563] Cannot find add_set index 0 as target 14:05:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r6, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe6c}}}, 0x24}}, 0x0) [ 317.747539][T20569] overlayfs: unrecognized mount option "upper" or missing value [ 317.760765][T20566] binder: 20559:20566 ioctl c0306201 20000200 returned -22 [ 317.773061][T20572] binder: 20559:20572 unknown command 0 [ 317.787775][T20572] binder: 20559:20572 ioctl c0306201 20000200 returned -22 14:05:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) [ 317.803564][ T36] audit: type=1804 audit(1630505130.867:86): pid=20578 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/462/bus/file0" dev="sda1" ino=14874 res=1 errno=0 [ 317.836618][T20566] binder: 20559:20566 unknown command 0 14:05:30 executing program 0: bpf$BPF_BTF_LOAD(0xb, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 14:05:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000200)=""/211, 0x0, 0xd3, 0x8}, 0x20) 14:05:31 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:31 executing program 3: bpf$BPF_BTF_LOAD(0x16, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) [ 317.853384][T20566] binder: 20559:20566 ioctl c0306201 20000380 returned -22 [ 317.883556][T20583] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. 14:05:31 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x10, 0x18}]}}, &(0x7f0000000040)=""/211, 0x32, 0xd3, 0x8}, 0x20) 14:05:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r6, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe6c}}}, 0x24}}, 0x0) [ 318.035905][T20596] overlayfs: unrecognized mount option "upper" or missing value [ 318.083980][ T36] audit: type=1804 audit(1630505131.147:87): pid=20596 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/463/bus/file0" dev="sda1" ino=14911 res=1 errno=0 [ 318.092838][T20606] BPF:[1] FLOAT (anon) [ 318.117396][T20604] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 318.127573][T20609] BPF:[1] FLOAT (anon) 14:05:31 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000200)=""/211, 0x0, 0xd3, 0x8}, 0x20) [ 318.127998][T20605] BPF:hdr_len not found [ 318.143801][T20609] BPF:size=24 [ 318.157997][T20607] binder: 20600:20607 unknown command 0 [ 318.161884][T20609] BPF: [ 318.167660][T20607] binder: 20600:20607 ioctl c0306201 20000200 returned -22 [ 318.172947][T20606] BPF:size=24 14:05:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x1600bd80, &(0x7f0000000000)={@multicast2, @remote}, 0xc) [ 318.180527][T20609] BPF:Invalid type_size [ 318.195160][T20609] BPF: [ 318.195160][T20609] [ 318.201772][T20606] BPF: [ 318.216933][T20606] BPF:Invalid type_size [ 318.223960][T20606] BPF: [ 318.223960][T20606] [ 318.224021][T20623] BPF:hdr_len not found 14:05:31 executing program 0: bpf$BPF_BTF_LOAD(0xd, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 14:05:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r6, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe6c}}}, 0x24}}, 0x0) 14:05:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000200)=""/211, 0x0, 0xd3, 0x8}, 0x20) 14:05:31 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:31 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001dc0)={0x1, &(0x7f0000001d80)=[{}]}) [ 318.242661][T20621] overlayfs: unrecognized mount option "upper" or missing value 14:05:31 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000001c0)={{0xeb9f, 0x2, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000280)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) [ 318.306195][ T36] audit: type=1804 audit(1630505131.377:88): pid=20621 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/464/bus/file0" dev="sda1" ino=14893 res=1 errno=0 [ 318.329343][T20635] binder: BINDER_SET_CONTEXT_MGR already set 14:05:31 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:31 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x80000001}]}}, &(0x7f0000000480)=""/225, 0x26, 0xe1, 0x1}, 0x20) [ 318.373638][T20640] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 318.397632][T20635] binder: 20632:20635 ioctl 40046207 0 returned -16 [ 318.409491][T20639] BPF:hdr_len not found 14:05:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x1e, 0xd3, 0x8}, 0x20) [ 318.418119][T20641] binder: 20632:20641 ioctl c0306201 20000200 returned -22 14:05:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x1600bd80, 0x0, 0x0) 14:05:31 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:31 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGKEYCODE(r0, 0xc0189436, 0x0) 14:05:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r6, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe6c}}}, 0x24}}, 0x0) 14:05:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x1e, 0xd3, 0x8}, 0x20) [ 318.505968][T20657] BPF:No type found [ 318.524847][T20654] overlayfs: workdir and upperdir must be separate subtrees [ 318.558223][T20664] binder: BINDER_SET_CONTEXT_MGR already set [ 318.561099][T20665] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 318.584730][T20666] BPF:No type found 14:05:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, 0x0, 0x0) 14:05:31 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/hid', 0xb0000, 0x0) 14:05:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x1e, 0xd3, 0x8}, 0x20) [ 318.591743][ T36] audit: type=1804 audit(1630505131.657:89): pid=20654 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/465/bus/file0" dev="sda1" ino=14918 res=1 errno=0 14:05:31 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:31 executing program 3: io_setup(0x989b, &(0x7f0000000480)=0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) [ 318.658714][T20664] binder: 20656:20664 ioctl 40046207 0 returned -16 [ 318.671761][T20670] binder: 20656:20670 ioctl c0306201 20000200 returned -22 14:05:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r6, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe6c}}}, 0x24}}, 0x0) 14:05:31 executing program 0: pipe(&(0x7f0000000000)) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) [ 318.720651][T20683] BPF:No type found 14:05:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @private}}}}) 14:05:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r6, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe6c}}}, 0x24}}, 0x0) 14:05:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) 14:05:31 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 318.771758][T20691] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 318.797978][T20689] overlayfs: workdir and upperdir must be separate subtrees 14:05:31 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) [ 318.850260][ T36] audit: type=1804 audit(1630505131.917:90): pid=20689 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/466/bus/file0" dev="sda1" ino=14914 res=1 errno=0 [ 318.868973][T20704] binder: 20702:20704 unknown command 0 [ 318.881582][T20704] binder: 20702:20704 ioctl c0306201 20000200 returned -22 14:05:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d03, 0x1]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x410000, 0x41) fork() syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a40)={0x0, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x8001}}, &(0x7f0000000140)={0x18, 0xffffffffffffffda, 0x0, {0x3800000000000}}, &(0x7f0000000180)={0x18, 0x0, 0x6, {0x10000}}, 0x0, &(0x7f0000000200)={0x28, 0x0, 0x0, {{0x0, 0x2}}}, &(0x7f0000000240)={0x60, 0xfffffffffffffff5, 0xe72, {{0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0x0, 0x0, &(0x7f0000000340)={0x20, 0xffffffffffffffda, 0x0, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0xa0, 0x0, 0x81, {{0x4, 0x0, 0x0, 0x0, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}}, {0x0, 0x8}}}, &(0x7f0000000a00)={0x20, 0x0, 0x0, {0x5, 0x0, 0xffffffff}}}) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 318.927005][T20709] binder: 20702:20709 unknown command 0 [ 318.954890][T20707] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. 14:05:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x29, 0x0, 0x0) 14:05:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) [ 318.978826][T20709] binder: 20702:20709 ioctl c0306201 20000380 returned -22 14:05:32 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGKEYCODE(r0, 0xc0045878, 0x0) 14:05:32 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/211, 0x29, 0xd3, 0x8}, 0x20) 14:05:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r6, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe6c}}}, 0x24}}, 0x0) [ 319.059771][T20717] overlayfs: workdir and upperdir must be separate subtrees 14:05:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/211, 0x29, 0xd3, 0x8}, 0x20) [ 319.121433][ T36] audit: type=1804 audit(1630505132.187:91): pid=20717 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/467/bus/file0" dev="sda1" ino=14904 res=1 errno=0 [ 319.160815][T20736] binder: 20731:20736 unknown command 0 14:05:32 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:32 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x1}]}}, &(0x7f0000000040)=""/211, 0x26, 0xd3, 0x8}, 0x20) 14:05:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/211, 0x29, 0xd3, 0x8}, 0x20) [ 319.182621][T20736] binder: 20731:20736 ioctl c0306201 20000200 returned -22 [ 319.207286][T20736] binder: 20731:20736 unknown command 0 [ 319.210745][T20743] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. 14:05:32 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 319.249936][T20736] binder: 20731:20736 ioctl c0306201 20000380 returned -22 [ 319.337448][T20758] BPF:[1] STRUCT [ 319.349162][T20758] BPF:size=0 vlen=0 [ 319.360316][T20758] BPF: [ 319.366565][T20761] binder: 20757:20761 unknown command 0 [ 319.372995][T20758] BPF:Invalid name [ 319.375107][T20760] BPF:[1] STRUCT [ 319.380432][T20761] binder: 20757:20761 ioctl c0306201 20000200 returned -22 [ 319.382193][T20760] BPF:size=0 vlen=0 [ 319.392218][T20758] BPF: [ 319.392218][T20758] [ 319.392384][T20759] overlayfs: failed to resolve './fil': -2 [ 319.400991][T20761] binder: 20757:20761 unknown command 0 [ 319.416006][T20761] binder: 20757:20761 ioctl c0306201 20000380 returned -22 [ 319.421178][T20760] BPF: [ 319.440408][ T36] audit: type=1804 audit(1630505132.507:92): pid=20765 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/468/bus/file0" dev="sda1" ino=14916 res=1 errno=0 [ 319.440526][T20760] BPF:Invalid name [ 319.475442][T20760] BPF: [ 319.475442][T20760] 14:05:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d03, 0x1]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x410000, 0x41) fork() syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a40)={0x0, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x8001}}, &(0x7f0000000140)={0x18, 0xffffffffffffffda, 0x0, {0x3800000000000}}, &(0x7f0000000180)={0x18, 0x0, 0x6, {0x10000}}, 0x0, &(0x7f0000000200)={0x28, 0x0, 0x0, {{0x0, 0x2}}}, &(0x7f0000000240)={0x60, 0xfffffffffffffff5, 0xe72, {{0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0x0, 0x0, &(0x7f0000000340)={0x20, 0xffffffffffffffda, 0x0, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0xa0, 0x0, 0x81, {{0x4, 0x0, 0x0, 0x0, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}}, {0x0, 0x8}}}, &(0x7f0000000a00)={0x20, 0x0, 0x0, {0x5, 0x0, 0xffffffff}}}) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 14:05:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x0]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) 14:05:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r6, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe6c}}}, 0x24}}, 0x0) 14:05:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000800)={'gre0\x00', &(0x7f00000007c0)={'gretap0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @multicast2}}}}) 14:05:32 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:32 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x0]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) 14:05:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000800)={'gre0\x00', &(0x7f00000007c0)={'gretap0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @multicast2}}}}) 14:05:33 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 319.936487][T20787] binder: 20783:20787 ioctl c0306201 0 returned -14 [ 319.949930][T20788] overlayfs: failed to resolve './fil': -2 [ 319.972529][T20791] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 320.019089][T20787] binder: 20783:20787 unknown command 0 14:05:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x0]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) 14:05:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r6, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe6c}}}, 0x24}}, 0x0) 14:05:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000800)={'gre0\x00', &(0x7f00000007c0)={'gretap0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @multicast2}}}}) [ 320.059831][T20787] binder: 20783:20787 ioctl c0306201 20000200 returned -22 [ 320.068913][T20797] binder: 20783:20797 unknown command 0 [ 320.076512][T20797] binder: 20783:20797 ioctl c0306201 20000380 returned -22 [ 320.113258][T20811] overlayfs: failed to resolve './fil': -2 [ 320.194315][T20819] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. 14:05:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d03, 0x1]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x410000, 0x41) fork() syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a40)={0x0, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x8001}}, &(0x7f0000000140)={0x18, 0xffffffffffffffda, 0x0, {0x3800000000000}}, &(0x7f0000000180)={0x18, 0x0, 0x6, {0x10000}}, 0x0, &(0x7f0000000200)={0x28, 0x0, 0x0, {{0x0, 0x2}}}, &(0x7f0000000240)={0x60, 0xfffffffffffffff5, 0xe72, {{0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0x0, 0x0, &(0x7f0000000340)={0x20, 0xffffffffffffffda, 0x0, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0xa0, 0x0, 0x81, {{0x4, 0x0, 0x0, 0x0, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}}, {0x0, 0x8}}}, &(0x7f0000000a00)={0x20, 0x0, 0x0, {0x5, 0x0, 0xffffffff}}}) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 14:05:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000200)=""/211, 0x29, 0xd3, 0x8}, 0x20) 14:05:33 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:33 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000800)={'gre0\x00', &(0x7f00000007c0)={'gretap0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @multicast2}}}}) 14:05:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) [ 320.563024][T20843] binder: 20837:20843 ioctl c0306201 0 returned -14 [ 320.573073][T20844] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 320.592821][T20845] BPF:[1] STRUCT . [ 320.598658][T20845] BPF:size=0 vlen=0 14:05:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x1600bd78, &(0x7f0000000000)={'security\x00', 0x2, [{}, {}]}, 0x48) [ 320.610314][T20846] overlayfs: failed to resolve './file': -2 [ 320.622943][T20845] BPF: [ 320.633013][T20845] BPF:Invalid name [ 320.639634][T20843] binder: 20837:20843 unknown command 0 [ 320.655917][T20845] BPF: [ 320.655917][T20845] 14:05:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000200)=""/211, 0x29, 0xd3, 0x8}, 0x20) 14:05:33 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) [ 320.664456][T20843] binder: 20837:20843 ioctl c0306201 20000200 returned -22 [ 320.690175][T20854] binder: 20837:20854 unknown command 0 [ 320.698024][T20854] binder: 20837:20854 ioctl c0306201 20000380 returned -22 14:05:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0xf, &(0x7f0000000000)={'security\x00', 0x2, [{}, {}]}, 0x48) 14:05:33 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 320.810364][T20872] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 320.814354][T20873] BPF:[1] STRUCT . [ 320.843106][T20873] BPF:size=0 vlen=0 [ 320.865090][T20873] BPF: [ 320.869583][T20875] overlayfs: failed to resolve './file': -2 [ 320.882830][T20873] BPF:Invalid name [ 320.893964][T20882] binder: 20876:20882 ioctl c0306201 0 returned -14 [ 320.900956][T20873] BPF: [ 320.900956][T20873] [ 320.932649][T20882] binder: 20876:20882 unknown command 0 [ 320.975252][T20882] binder: 20876:20882 ioctl c0306201 20000200 returned -22 [ 320.983002][T20882] binder: 20876:20882 unknown command 0 [ 321.001142][T20882] binder: 20876:20882 ioctl c0306201 20000380 returned -22 14:05:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d03, 0x1]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x410000, 0x41) fork() syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a40)={0x0, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x8001}}, &(0x7f0000000140)={0x18, 0xffffffffffffffda, 0x0, {0x3800000000000}}, &(0x7f0000000180)={0x18, 0x0, 0x6, {0x10000}}, 0x0, &(0x7f0000000200)={0x28, 0x0, 0x0, {{0x0, 0x2}}}, &(0x7f0000000240)={0x60, 0xfffffffffffffff5, 0xe72, {{0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0x0, 0x0, &(0x7f0000000340)={0x20, 0xffffffffffffffda, 0x0, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0xa0, 0x0, 0x81, {{0x4, 0x0, 0x0, 0x0, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}}, {0x0, 0x8}}}, &(0x7f0000000a00)={0x20, 0x0, 0x0, {0x5, 0x0, 0xffffffff}}}) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 14:05:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f00000002c0)={{0x2, 0x0, @broadcast}, {0x0, @dev}, 0x28, {0x2, 0x0, @broadcast}, 'team_slave_0\x00'}) 14:05:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000200)=""/211, 0x29, 0xd3, 0x8}, 0x20) 14:05:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:05:34 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:34 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:34 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000001bc0)='/sys/kernel/profiling', 0x10000, 0x0) [ 321.249069][T20897] binder: 20892:20897 unknown command 0 [ 321.260778][T20903] BPF:[1] STRUCT . [ 321.280222][T20901] overlayfs: failed to resolve './file': -2 [ 321.301181][T20903] BPF:size=0 vlen=0 [ 321.311896][T20897] binder: 20892:20897 ioctl c0306201 20000200 returned -22 [ 321.313420][T20912] binder: 20892:20912 unknown command 0 [ 321.332509][T20903] BPF: 14:05:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) [ 321.355321][T20912] binder: 20892:20912 ioctl c0306201 20000380 returned -22 [ 321.357859][T20903] BPF:Invalid name 14:05:34 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(0x0) creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:34 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') read$FUSE(r0, &(0x7f00000015c0)={0x2020}, 0x2020) 14:05:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) [ 321.407332][T20903] BPF: [ 321.407332][T20903] 14:05:34 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 321.522005][T20932] BPF:[1] STRUCT [ 321.543256][T20933] binder: 20930:20933 unknown command 0 [ 321.549030][T20932] BPF:size=0 vlen=0 [ 321.552858][T20932] BPF: [ 321.566566][T20933] binder: 20930:20933 ioctl c0306201 20000200 returned -22 [ 321.574118][T20932] BPF:Invalid name [ 321.585275][T20932] BPF: [ 321.585275][T20932] [ 321.591207][T20933] binder: 20930:20933 unknown command 0 [ 321.602445][T20933] binder: 20930:20933 ioctl c0306201 20000380 returned -22 14:05:34 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:05:34 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$FUSE_BMAP(r0, &(0x7f0000002040)={0x18, 0xfffffffffffffff5}, 0x18) recvmmsg(r0, &(0x7f0000005080)=[{{&(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=""/77, 0x4d}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/10, 0xa}], 0x1}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000004080)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x4, 0x102, &(0x7f0000001f40)={0x0, 0x3938700}) 14:05:34 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(0x0) creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:34 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x0, 0x1, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp, 0x0, 0x0, 0x2, 0x7, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x7, 0x80, 0x0, 0x0, 0x40, 0x1, 0x0, 0x5e, 0x4209, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2023, 0x1000, 0x0, 0x0, 0x5, 0x9, 0x0, 0x0, @perf_config_ext={0x9, 0x80000000}, 0x0, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xfffffffc, r0, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x100) syncfs(r2) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000010501010000005b00e95b49fe8b4c466798aad481000010a645b7fd35ac437b5b6da8d1f0000097f61493159bd644bc48f0d652ba859f78f182669c1a60b4faadd42cd015f996e2a4879f3275e4c354582b918e7ab083d91e34fde75771288332a71a594b3dd58a8d78d7654a97033327c9adfe000000001bc4b003000000fffffffffffffd107bd3d81cd9d089b8b61cd495fd4e641bd5bf1ffb309ffbcc089880cc4154cccd8e4b5fe0b55a422fdd27ff8b99996ff1fddf645e2bbb1995c90e487ec6aff6d75c236233b11ed841772073c054f811ecec0421c89abb489a0600000000000000fc3b14fc56334a5b87e5caed323a416bfb3dcf530f723e8b709d657017e5bc00000000000000bf3689e30eef4edcc3648e11b200b81fbccec2e8c69f33854d26407ce8ec8bb6c441ed895f58fb2b3bd1a5912436b6cfe3fb81000000000000006f903fba6a259af29d3d3405a07f1ef79cb6aef6b71e16a6aa3257239379d670ea39039c331ff4a964870ee0ab44df7fef9517846d6dcce6fcf093445a5b7cfa1776f09e7e693157b6e7459a27a85aecb388465c6f0624f6ab97f4bf7d9e9a5349869c1b02991f0a893dfcb65863365bbae1100000000000000000"], 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x0) flock(0xffffffffffffffff, 0x6) flock(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000003c0)={'gretap0\x00', {0x2, 0x0, @dev}}) r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000000)=""/83, 0x9b0c4f391059f39b, 0x0, &(0x7f0000000100)={0x77359400}) r4 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) 14:05:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) 14:05:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) [ 321.845318][T20953] BPF:[1] STRUCT [ 321.857783][T20955] binder: 20943:20955 unknown command 0 [ 321.864707][T20953] BPF:size=0 vlen=0 [ 321.879079][T20953] BPF: [ 321.888528][T20955] binder: 20943:20955 ioctl c0306201 20000200 returned -22 14:05:34 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) 14:05:35 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(0x0) creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3, 0x8}, 0x20) 14:05:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r6, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe6c}}}, 0x24}}, 0x0) [ 321.912201][T20953] BPF:Invalid name [ 321.912893][T20969] binder: 20943:20969 unknown command 0 [ 321.929424][T20953] BPF: [ 321.929424][T20953] [ 321.937267][T20969] binder: 20943:20969 ioctl c0306201 20000380 returned -22 14:05:35 executing program 0: timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={0x0, 0x0}}, 0x0) 14:05:35 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000800), 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:35 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) 14:05:35 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x3, 0x3}, 0x1c) [ 322.045075][T20977] BPF:[1] STRUCT [ 322.063597][T20977] BPF:size=0 vlen=0 [ 322.078500][T20977] BPF: [ 322.089156][T20977] BPF:Invalid name 14:05:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r6, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe6c}}}, 0x24}}, 0x0) 14:05:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x3}]}, {0x0, [0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x29, 0xd3, 0x8}, 0x20) 14:05:35 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 322.101766][T20977] BPF: [ 322.101766][T20977] [ 322.111630][T20990] binder: 20987:20990 unknown command 0 [ 322.127563][T20990] binder: 20987:20990 ioctl c0306201 20000200 returned -22 14:05:35 executing program 3: socketpair(0x0, 0xc, 0x0, 0x0) 14:05:35 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0x2, 0x4e22, @dev}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x0, 0x2}]}}}], 0x18}}], 0x1, 0x0) [ 322.159608][T20990] binder: 20987:20990 unknown command 0 [ 322.185307][T20997] BPF:[1] STRUCT . [ 322.191226][T20990] binder: 20987:20990 ioctl c0306201 20000380 returned -22 [ 322.197677][T20997] BPF:size=0 vlen=0 14:05:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r6, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe6c}}}, 0x24}}, 0x0) 14:05:35 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) ftruncate(0xffffffffffffffff, 0x5) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 14:05:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x3}]}, {0x0, [0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x29, 0xd3, 0x8}, 0x20) 14:05:35 executing program 0: epoll_create1(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 14:05:35 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000800), 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 322.215500][T20997] BPF: [ 322.227721][T20997] BPF:Invalid name [ 322.238983][T20997] BPF: [ 322.238983][T20997] 14:05:35 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 322.297989][T21015] BPF:[1] STRUCT . [ 322.301975][T21015] BPF:size=0 vlen=0 [ 322.306279][T21015] BPF: [ 322.310945][T21015] BPF:Invalid name 14:05:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x3}]}, {0x0, [0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x29, 0xd3, 0x8}, 0x20) 14:05:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r6, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe6c}}}, 0x24}}, 0x0) [ 322.348519][T21015] BPF: [ 322.348519][T21015] [ 322.350686][T21023] binder: 21019:21023 unknown command 0 [ 322.365303][T21023] binder: 21019:21023 ioctl c0306201 20000200 returned -22 14:05:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000180)=0x30) [ 322.407756][T21034] binder: 21019:21034 unknown command 0 [ 322.428168][T21038] BPF:[1] STRUCT . [ 322.438878][T21034] binder: 21019:21034 ioctl c0306201 20000380 returned -22 [ 322.453263][T21038] BPF:size=0 vlen=0 14:05:35 executing program 0: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) 14:05:35 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000800), 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:35 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x3}]}, {0x0, [0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x29, 0xd3, 0x8}, 0x20) 14:05:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r6, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe6c}}}, 0x24}}, 0x0) 14:05:35 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$FUSE_BMAP(r0, &(0x7f0000002040)={0x18, 0xfffffffffffffff5}, 0x18) [ 322.477381][T21038] BPF: [ 322.493378][T21038] BPF:Invalid name [ 322.514830][T21038] BPF: [ 322.514830][T21038] 14:05:35 executing program 3: getrlimit(0x0, &(0x7f0000000040)) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) [ 322.588649][T21061] BPF:[1] STRUCT . [ 322.604052][T21066] binder: 21053:21066 unknown command 0 [ 322.609110][T21061] BPF:size=0 vlen=0 [ 322.623560][T21066] binder: 21053:21066 ioctl c0306201 20000200 returned -22 14:05:35 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x0, 0x0, 0x89}, 0x1c) 14:05:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r6, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe6c}}}, 0x24}}, 0x0) [ 322.636841][T21061] BPF: [ 322.654352][T21061] BPF:Invalid name [ 322.660149][T21074] binder: 21053:21074 unknown command 0 14:05:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x3}]}, {0x0, [0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x29, 0xd3, 0x8}, 0x20) 14:05:35 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(0x0, 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 322.690647][T21061] BPF: [ 322.690647][T21061] [ 322.698562][T21074] binder: 21053:21074 ioctl c0306201 20000380 returned -22 14:05:35 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 14:05:35 executing program 3: rt_sigqueueinfo(0x0, 0x0, &(0x7f00000002c0)) 14:05:35 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 322.794639][T21084] BPF:[1] STRUCT . [ 322.810763][T21084] BPF:size=0 vlen=0 [ 322.831197][T21084] BPF: 14:05:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:05:35 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001100)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x0, 0x0, &(0x7f00000000c0)) [ 322.844160][T21084] BPF:Invalid name 14:05:35 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x4802, 0x0) 14:05:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x3}]}, {0x0, [0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x29, 0xd3, 0x8}, 0x20) 14:05:36 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(0x0, 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 322.867155][T21096] binder: 21094:21096 unknown command 0 [ 322.875805][T21084] BPF: [ 322.875805][T21084] 14:05:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') read$FUSE(r0, &(0x7f00000015c0)={0x2020}, 0x2020) [ 322.928129][T21096] binder: 21094:21096 ioctl c0306201 20000200 returned -22 [ 322.948541][T21103] binder: BINDER_SET_CONTEXT_MGR already set [ 322.971779][T21103] binder: 21094:21103 ioctl 40046207 0 returned -16 14:05:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:05:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, 0x0, 0x2a, 0x0, 0x8}, 0x20) [ 322.978445][T21109] BPF:[1] STRUCT . [ 322.978458][T21109] BPF:size=0 vlen=0 [ 322.978463][T21109] BPF: [ 322.978468][T21109] BPF:Invalid name [ 322.978472][T21109] BPF: [ 322.978472][T21109] [ 323.018897][T21096] binder: 21094:21096 ioctl c0306201 20000200 returned -22 [ 323.049389][T21096] binder: 21094:21096 unknown command 0 14:05:36 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) 14:05:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, 0x0, 0x2a, 0x0, 0x8}, 0x20) 14:05:36 executing program 3: pause() sync() [ 323.084566][T21096] binder: 21094:21096 ioctl c0306201 20000380 returned -22 14:05:36 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = open(0x0, 0x0, 0x0) lseek(r0, 0x0, 0x0) 14:05:36 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:05:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, 0x0, 0x2a, 0x0, 0x8}, 0x20) 14:05:36 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000000)={'ipvlan0\x00', @ifru_flags}) 14:05:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3}, 0x20) 14:05:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3}, 0x20) [ 323.252726][T21144] __nla_validate_parse: 12 callbacks suppressed [ 323.252742][T21144] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 323.276915][T21146] binder: 21141:21146 unknown command 0 [ 323.294791][T21146] binder: 21141:21146 ioctl c0306201 20000200 returned -22 14:05:36 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) [ 323.325946][T21146] binder: BINDER_SET_CONTEXT_MGR already set 14:05:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/211, 0x2a, 0xd3}, 0x20) 14:05:36 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8910, 0x0) 14:05:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) [ 323.371008][T21146] binder: 21141:21146 ioctl 40046207 0 returned -16 [ 323.392539][T21162] binder: 21141:21162 ioctl c0306201 20000200 returned -22 [ 323.443354][T21146] binder: 21141:21146 unknown command 0 [ 323.449482][T21146] binder: 21141:21146 ioctl c0306201 20000380 returned -22 [ 323.499120][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 323.499134][ T36] audit: type=1804 audit(1630505136.567:98): pid=21172 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/483/bus/file0" dev="overlay" ino=13980 res=1 errno=0 14:05:37 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001100)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@generic={0x3, 0xfffffffffffffff7}) 14:05:37 executing program 5: futex(0x0, 0x3, 0x0, &(0x7f0000000100), 0x0, 0x0) 14:05:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:05:37 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x5, 0x0, 0x5}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 14:05:37 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:37 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) 14:05:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') read$FUSE(r0, &(0x7f00000015c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000003600)={0x2020}, 0x2020) 14:05:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) [ 324.123157][T21187] binder: 21182:21187 unknown command 0 [ 324.148819][T21187] binder: 21182:21187 ioctl c0306201 20000200 returned -22 14:05:37 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000040)) [ 324.183317][T21192] binder: BINDER_SET_CONTEXT_MGR already set [ 324.190399][ T36] audit: type=1804 audit(1630505137.267:99): pid=21186 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/484/bus/file0" dev="overlay" ino=14000 res=1 errno=0 14:05:37 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000440)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) [ 324.246855][T21187] binder: 21182:21187 ioctl c0306201 20000200 returned -22 [ 324.254261][T21192] binder: 21182:21192 ioctl 40046207 0 returned -16 [ 324.276632][T21187] binder: 21182:21187 unknown command 0 14:05:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:05:37 executing program 3: pipe(&(0x7f0000002400)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_j1939(r0, 0x0, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000780)={&(0x7f0000000180)=@generic, 0x80, 0x0, 0x0, &(0x7f0000000740)=""/32, 0x20}, 0x100) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) 14:05:37 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0x1, &(0x7f0000001240)=@raw=[@call], &(0x7f0000001280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 324.299019][T21187] binder: 21182:21187 ioctl c0306201 20000380 returned -22 14:05:37 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 324.365159][T21204] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 324.429180][ T36] audit: type=1804 audit(1630505137.497:100): pid=21207 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754409904/syzkaller.VHmHTC/485/bus/file0" dev="overlay" ino=14169 res=1 errno=0 14:05:37 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x0) [ 324.492588][T21219] binder: 21214:21219 unknown command 0 [ 324.518280][T21219] binder: 21214:21219 ioctl c0306201 20000200 returned -22 14:05:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 14:05:37 executing program 3: bpf$BPF_GET_MAP_INFO(0x18, 0x0, 0x0) 14:05:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc090}, 0xc080) 14:05:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:05:37 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='syzkaller\x00', 0xb5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 324.557538][T21223] binder: BINDER_SET_CONTEXT_MGR already set 14:05:37 executing program 3: bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) [ 324.597832][T21223] binder: 21214:21223 ioctl 40046207 0 returned -16 [ 324.607065][T21219] binder: 21214:21219 ioctl c0306201 20000200 returned -22 [ 324.622542][T21228] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 324.634466][T21219] binder: 21214:21219 unknown command 0 14:05:37 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 14:05:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 14:05:37 executing program 4: socketpair(0x10, 0x0, 0x0, &(0x7f00000003c0)) [ 324.659909][T21219] binder: 21214:21219 ioctl c0306201 20000380 returned -22 14:05:37 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:05:37 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0xff61) 14:05:37 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x14}, 0x40) 14:05:37 executing program 0: socketpair(0x25, 0x1, 0x0, &(0x7f0000001a00)) [ 324.791907][T21252] binder: 21249:21252 unknown command 0 [ 324.804169][T21253] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. 14:05:37 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000780)={r0}) 14:05:37 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x20}, 0x10) [ 324.835962][T21252] binder: 21249:21252 ioctl c0306201 20000200 returned -22 [ 324.852021][T21260] binder: BINDER_SET_CONTEXT_MGR already set [ 324.869848][T21260] binder: 21249:21260 ioctl 40046207 0 returned -16 14:05:37 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:05:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x24}}, 0x0) [ 324.889269][T21252] binder: 21249:21252 ioctl c0306201 20000200 returned -22 14:05:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:05:38 executing program 4: socketpair(0x1d, 0x0, 0x0, &(0x7f0000002bc0)) [ 324.932196][T21252] binder: 21249:21252 unknown command 0 [ 324.942573][T21252] binder: 21249:21252 ioctl c0306201 20000380 returned -22 14:05:38 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:05:38 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:38 executing program 3: socketpair(0x2, 0x5, 0x0, &(0x7f0000002080)) [ 324.981578][T21280] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. 14:05:38 executing program 5: write$bt_hci(0xffffffffffffffff, 0x0, 0x0) [ 325.036721][T21283] can: request_module (can-proto-0) failed. [ 325.055867][T21290] binder: 21286:21290 unknown command 0 14:05:38 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000700), 0xc) 14:05:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:05:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="ec"], 0x54}}, 0x0) 14:05:38 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff}) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) [ 325.081742][T21290] binder: 21286:21290 ioctl c0306201 20000200 returned -22 [ 325.106286][T21283] can: request_module (can-proto-0) failed. [ 325.126099][T21300] binder: BINDER_SET_CONTEXT_MGR already set 14:05:38 executing program 4: pipe(&(0x7f0000002400)) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x8}, [@initr0]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 325.161012][T21300] binder: 21286:21300 ioctl 40046207 0 returned -16 [ 325.162028][T21306] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 325.188110][T21290] binder: 21286:21290 ioctl c0306201 20000200 returned -22 14:05:38 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000002400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)={r1}) 14:05:38 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:05:38 executing program 0: r0 = socket$isdn_base(0x22, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000001380)) [ 325.210158][T21290] binder: 21286:21290 unknown command 0 [ 325.224324][T21290] binder: 21286:21290 ioctl c0306201 20000380 returned -22 14:05:38 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:05:38 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r0, &(0x7f0000000000)=""/13, 0xd, 0x0, 0x0, 0x0) 14:05:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={0x0}}, 0x0) 14:05:38 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0xca, &(0x7f0000000100)=""/202, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:05:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@timestamp, @window={0x3, 0x1000, 0x1f}, @window={0x3, 0x7067, 0x8}, @mss={0x2, 0x800}, @timestamp, @mss={0x2, 0xfffffffd}], 0x6) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x10000a009) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x10000000}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x28}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='veno\x00', 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x5c) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x4}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x27f4}, 0x700) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) [ 325.349448][T21328] binder: 21326:21328 unknown command 0 [ 325.357723][T21328] binder: 21326:21328 ioctl c0306201 20000200 returned -22 [ 325.381004][T21331] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. 14:05:38 executing program 5: bpf$BPF_GET_MAP_INFO(0x10, 0x0, 0x0) [ 325.399323][T21328] binder: 21326:21328 unknown command 0 [ 325.435497][T21328] binder: 21326:21328 ioctl c0306201 20000200 returned -22 14:05:38 executing program 0: bpf$BPF_GET_MAP_INFO(0x5, 0x0, 0x0) 14:05:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 14:05:38 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 325.448953][T21338] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 325.454405][T21345] binder: 21326:21345 unknown command 0 [ 325.485879][T21345] binder: 21326:21345 ioctl c0306201 20000380 returned -22 14:05:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:05:38 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x24, @long}, 0x14, &(0x7f0000000480)={&(0x7f0000000440)="e5", 0x1}}, 0x850) 14:05:38 executing program 0: r0 = socket$inet(0x2, 0x3, 0x20) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000140)={0x4d6}, 0x4) 14:05:38 executing program 5: openat$tun(0xffffffffffffff9c, 0x0, 0x5a5a02, 0x0) [ 325.581765][T21356] binder: 21353:21356 unknown command 0 [ 325.590129][T21359] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 325.619310][T21356] binder: 21353:21356 ioctl c0306201 20000200 returned -22 [ 325.644516][T21365] binder: 21353:21365 unknown command 0 [ 325.653012][T21365] binder: 21353:21365 ioctl c0306201 20000200 returned -22 [ 325.668964][T21356] binder: 21353:21356 unknown command 0 [ 325.684205][T21356] binder: 21353:21356 ioctl c0306201 20000380 returned -22 14:05:38 executing program 3: bpf$BPF_GET_MAP_INFO(0x19, 0x0, 0x0) 14:05:38 executing program 0: r0 = socket$inet(0x2, 0x3, 0x20) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000140), 0x4) 14:05:38 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000001e40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x40) 14:05:39 executing program 4: io_uring_setup(0x1996, &(0x7f0000000240)) 14:05:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:05:39 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:39 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x40) 14:05:39 executing program 5: socketpair(0x15, 0x5, 0x836, &(0x7f0000000000)) 14:05:39 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) 14:05:39 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0x80086601, 0x0) 14:05:39 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1}}) 14:05:39 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14:05:39 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @local}, 0x20) [ 326.315391][T21392] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 326.327804][T21396] binder: 21385:21396 unknown command 0 [ 326.345742][T21396] binder: 21385:21396 ioctl c0306201 20000200 returned -22 14:05:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) [ 326.404753][T21396] binder: 21385:21396 unknown command 0 [ 326.423816][T21396] binder: 21385:21396 ioctl c0306201 20000200 returned -22 14:05:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_ttl={{0x14}}], 0x38}, 0x0) 14:05:39 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) 14:05:39 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000600)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2}}) [ 326.453953][T21402] binder: 21385:21402 unknown command 0 [ 326.459822][T21402] binder: 21385:21402 ioctl c0306201 20000380 returned -22 [ 326.478996][T21417] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. 14:05:39 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:39 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0xd6fc0, 0x0) 14:05:39 executing program 0: r0 = socket(0x23, 0x5, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) 14:05:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:05:39 executing program 5: sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000800) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8090}, 0x480c0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x40, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffffffffffffffff}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x26}}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000040}, 0x4080) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x3c, 0x0, 0x118, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x30f7b8739a15999b) openat$audio1(0xffffffffffffff9c, &(0x7f0000000d00), 0x4000, 0x0) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000f80), 0xffffffffffffffff) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000fc0), 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000001200)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x60, r0, 0x0, 0x70bd29, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004800}, 0x8000) 14:05:39 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x6, 0xa4, 0x1c, 0x8, 0xac8, 0x323, 0x19ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfd, 0x16, 0x27}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 326.604013][T21432] binder: 21430:21432 unknown command 0 [ 326.620625][T21432] binder: 21430:21432 ioctl c0306201 20000200 returned -22 14:05:39 executing program 0: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0), 0x240000, 0x0) 14:05:39 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "40c1479a"}, 0x0, 0x0, @fd}) [ 326.690103][T21432] binder: 21430:21432 unknown command 0 [ 326.712834][T21432] binder: 21430:21432 ioctl c0306201 20000200 returned -22 14:05:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:05:39 executing program 0: syz_open_dev$mouse(&(0x7f0000000240), 0x0, 0x40) 14:05:39 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f00000001c0)={0x0, 0x400}) io_uring_setup(0x1996, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x0, 0x388}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, 0x0) 14:05:39 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) [ 326.745219][T21456] binder: 21430:21456 unknown command 0 [ 326.785405][T21456] binder: 21430:21456 ioctl c0306201 20000380 returned -22 14:05:39 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:39 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/dev_mcast\x00') preadv(r0, &(0x7f0000005140)=[{&(0x7f0000002e80)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 14:05:39 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@hyper, 0x2}) 14:05:39 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000014c0)={0x2, &(0x7f0000001480)=[{}, {0x8}]}) 14:05:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) [ 326.922995][T21478] binder: 21475:21478 unknown command 0 [ 326.942222][T21478] binder: 21475:21478 ioctl c0306201 20000200 returned -22 [ 326.976688][T21478] binder: 21475:21478 unknown command 0 [ 326.995151][T21478] binder: 21475:21478 ioctl c0306201 20000200 returned -22 [ 327.008299][ T20] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 327.021118][T21478] binder: 21475:21478 unknown command 0 [ 327.031245][T21478] binder: 21475:21478 ioctl c0306201 20000380 returned -22 [ 327.265025][ T20] usb 5-1: Using ep0 maxpacket: 8 [ 327.565122][ T20] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=19.ed [ 327.574284][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.583255][ T20] usb 5-1: Product: syz [ 327.587979][ T20] usb 5-1: Manufacturer: syz [ 327.592644][ T20] usb 5-1: SerialNumber: syz [ 327.599259][ T20] usb 5-1: config 0 descriptor?? [ 327.657156][ T20] gspca_main: vc032x-2.14.0 probing 0ac8:0323 [ 328.515079][ T20] gspca_vc032x: reg_w err -71 [ 328.519853][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.526126][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.531459][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.537711][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.543030][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.548773][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.554124][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.559978][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.565581][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.570940][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.576676][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.582574][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.588315][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.593850][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.599488][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.604928][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.610404][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.615773][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.621241][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.626619][ T20] gspca_vc032x: Unknown sensor... [ 328.632366][ T20] vc032x: probe of 5-1:0.0 failed with error -22 [ 328.640361][ T20] usb 5-1: USB disconnect, device number 6 [ 329.274914][ T8926] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 329.546580][ T8926] usb 5-1: Using ep0 maxpacket: 8 14:05:43 executing program 0: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x416f00, 0x0) 14:05:43 executing program 5: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 14:05:43 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) 14:05:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:05:43 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 329.865010][ T8926] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=19.ed [ 329.874761][ T8926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.883918][ T8926] usb 5-1: Product: syz [ 329.888851][ T8926] usb 5-1: Manufacturer: syz [ 329.893445][ T8926] usb 5-1: SerialNumber: syz [ 329.901529][ T8926] usb 5-1: config 0 descriptor?? 14:05:43 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x6, 0xa4, 0x1c, 0x8, 0xac8, 0x323, 0x19ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfd, 0x16, 0x27}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 329.937159][ T8926] usb 5-1: can't set config #0, error -71 [ 329.951394][ T8926] usb 5-1: USB disconnect, device number 7 14:05:43 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, 0x0) 14:05:43 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000005c0)={'sit0\x00', 0x0}) [ 329.995953][T21519] __nla_validate_parse: 3 callbacks suppressed [ 329.996039][T21519] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 329.998079][T21524] binder: 21512:21524 unknown command 0 14:05:43 executing program 3: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x6500, 0x0) 14:05:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) [ 330.078222][T21534] binder: 21512:21534 unknown command 0 [ 330.107581][T21534] binder: 21512:21534 ioctl c0306201 20000200 returned -22 14:05:43 executing program 0: openat$audio1(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) 14:05:43 executing program 5: openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 14:05:43 executing program 3: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0xe0000, 0x0) [ 330.123104][T21524] binder: 21512:21524 ioctl c0306201 20000200 returned -22 [ 330.136084][T21544] binder: 21512:21544 unknown command 0 [ 330.143186][T21542] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 330.149028][T21544] binder: 21512:21544 ioctl c0306201 20000380 returned -22 14:05:43 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:43 executing program 5: syz_io_uring_setup(0x18c5, &(0x7f0000000100), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6a9f, &(0x7f0000000240), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 14:05:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:05:43 executing program 3: openat$null(0xffffffffffffff9c, 0x0, 0x444001, 0x0) [ 330.294438][T21562] binder: 21557:21562 unknown command 0 [ 330.306799][T21562] binder: 21557:21562 ioctl c0306201 20000200 returned -22 [ 330.322422][T21562] binder: 21557:21562 unknown command 0 [ 330.331007][T21562] binder: 21557:21562 ioctl c0306201 20000200 returned -22 [ 330.340539][T21564] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 330.358588][T21562] binder: 21557:21562 unknown command 0 [ 330.373377][T21562] binder: 21557:21562 ioctl c0306201 20000380 returned -22 [ 330.424931][ T8926] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 330.664929][ T8926] usb 5-1: Using ep0 maxpacket: 8 [ 330.945123][ T8926] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=19.ed [ 330.954315][ T8926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.963223][ T8926] usb 5-1: Product: syz [ 330.967991][ T8926] usb 5-1: Manufacturer: syz [ 330.972633][ T8926] usb 5-1: SerialNumber: syz [ 330.978904][ T8926] usb 5-1: config 0 descriptor?? [ 331.016336][ T8926] gspca_main: vc032x-2.14.0 probing 0ac8:0323 [ 331.894944][ T8926] gspca_vc032x: reg_w err -71 [ 331.899844][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 331.906255][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 331.911749][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 331.917958][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 331.923453][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 331.929186][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 331.934544][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 331.940258][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 331.945914][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 331.951261][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 331.956925][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 331.962588][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 331.968338][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 331.973685][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 331.979292][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 331.984653][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 331.990285][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 331.996107][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.001477][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.007425][ T8926] gspca_vc032x: Unknown sensor... [ 332.012564][ T8926] vc032x: probe of 5-1:0.0 failed with error -22 [ 332.020545][ T8926] usb 5-1: USB disconnect, device number 8 14:05:45 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x6, 0xa4, 0x1c, 0x8, 0xac8, 0x323, 0x19ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfd, 0x16, 0x27}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 14:05:45 executing program 0: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280), 0x23e283, 0x0) 14:05:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f00000007c0)="23ab524e954dd7860c86b83ed702cd", 0xf}, {&(0x7f0000000880)='[', 0x1}], 0x2}, 0x0) 14:05:45 executing program 5: syz_io_uring_setup(0x7c73, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) 14:05:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:05:45 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) 14:05:45 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x18c5, &(0x7f0000000100)={0x0, 0x7c5f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x66bf0e3187f8b0b5, 0xffffffffffffffff, 0x10000000) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6a9f, &(0x7f0000000240)={0x0, 0xc2fa, 0x2, 0x0, 0x2e0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) [ 332.453408][T21595] binder: 21590:21595 unknown command 0 [ 332.482130][T21595] binder: 21590:21595 ioctl c0306201 20000200 returned -22 [ 332.486465][T21596] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. 14:05:45 executing program 5: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) socketpair(0x0, 0x0, 0x0, &(0x7f0000000740)) 14:05:45 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000640)='ns/cgroup\x00') [ 332.513822][T21604] binder: 21590:21604 unknown command 0 [ 332.522436][T21604] binder: 21590:21604 ioctl c0306201 20000200 returned -22 [ 332.543597][T21595] binder: 21590:21595 unknown command 0 [ 332.552638][T21595] binder: 21590:21595 ioctl c0306201 20000380 returned -22 14:05:45 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:45 executing program 5: mq_notify(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, 0x6}) [ 332.699308][T21626] binder: 21623:21626 unknown command 0 [ 332.705903][T21626] binder: 21623:21626 ioctl c0306201 20000200 returned -22 [ 332.716068][T21626] binder: 21623:21626 unknown command 0 [ 332.730092][T21626] binder: 21623:21626 ioctl c0306201 20000200 returned -22 [ 332.737972][ T20] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 332.746194][T21626] binder: 21623:21626 unknown command 0 [ 332.751965][T21626] binder: 21623:21626 ioctl c0306201 20000380 returned -22 [ 333.004860][ T20] usb 5-1: Using ep0 maxpacket: 8 [ 333.304947][ T20] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=19.ed [ 333.314184][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.322740][ T20] usb 5-1: Product: syz [ 333.327185][ T20] usb 5-1: Manufacturer: syz [ 333.331834][ T20] usb 5-1: SerialNumber: syz [ 333.339747][ T20] usb 5-1: config 0 descriptor?? [ 333.386213][ T20] gspca_main: vc032x-2.14.0 probing 0ac8:0323 [ 334.265099][ T20] gspca_vc032x: reg_w err -71 [ 334.269853][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.275863][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.281192][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.286831][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.292175][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.297891][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.303243][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.308766][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.314538][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.320094][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.325604][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.330951][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.336455][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.341798][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.347347][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.352708][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.358286][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.363634][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.369466][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.374954][ T20] gspca_vc032x: Unknown sensor... [ 334.380043][ T20] vc032x: probe of 5-1:0.0 failed with error -22 [ 334.388882][ T20] usb 5-1: USB disconnect, device number 9 14:05:47 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x6, 0xa4, 0x1c, 0x8, 0xac8, 0x323, 0x19ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfd, 0x16, 0x27}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 14:05:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:05:47 executing program 3: syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, &(0x7f0000000fc0), 0x0, 0x0) 14:05:47 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@hyper}) 14:05:47 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:47 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 14:05:47 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) connect(r0, 0x0, 0x0) [ 334.827677][T21653] binder: 21647:21653 unknown command 0 14:05:47 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x58}}, 0x0) 14:05:47 executing program 3: recvmsg$unix(0xffffffffffffffff, 0x0, 0x80000001) [ 334.867881][T21653] binder: 21647:21653 ioctl c0306201 20000200 returned -22 [ 334.877710][T21651] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 334.904633][T21653] binder: 21647:21653 ioctl c0306201 20000200 returned -14 14:05:48 executing program 0: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x4, 0x70bd27, 0x0, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_vlan\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8090}, 0x480c0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000d00), 0x4000, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) 14:05:48 executing program 5: syz_io_uring_setup(0x7c73, &(0x7f0000000000)={0x0, 0xf060}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) [ 334.924615][T21653] binder: 21647:21653 ioctl c0306201 20000380 returned -14 14:05:48 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 335.052767][T21681] binder: 21677:21681 unknown command 0 [ 335.075666][T21681] binder: 21677:21681 ioctl c0306201 20000200 returned -22 [ 335.098175][T21681] binder: 21677:21681 ioctl c0306201 20000200 returned -14 [ 335.106958][T21681] binder: 21677:21681 ioctl c0306201 20000380 returned -14 [ 335.134790][ T8926] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 335.394802][ T8926] usb 5-1: Using ep0 maxpacket: 8 [ 335.714942][ T8926] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=19.ed [ 335.724000][ T8926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.732836][ T8926] usb 5-1: Product: syz [ 335.737552][ T8926] usb 5-1: Manufacturer: syz [ 335.742129][ T8926] usb 5-1: SerialNumber: syz [ 335.751177][ T8926] usb 5-1: config 0 descriptor?? [ 335.799200][ T8926] gspca_main: vc032x-2.14.0 probing 0ac8:0323 [ 336.654885][ T8926] gspca_vc032x: reg_w err -71 [ 336.659843][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 336.666116][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 336.671677][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 336.678331][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 336.683672][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 336.689775][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 336.695503][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 336.700882][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 336.706834][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 336.712272][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 336.718421][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 336.723696][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 336.729670][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 336.735352][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 336.740641][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 336.746920][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 336.752206][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 336.758221][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 336.763499][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 336.769444][ T8926] gspca_vc032x: Unknown sensor... [ 336.775340][ T8926] vc032x: probe of 5-1:0.0 failed with error -22 [ 336.782910][ T8926] usb 5-1: USB disconnect, device number 10 14:05:50 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x6, 0xa4, 0x1c, 0x8, 0xac8, 0x323, 0x19ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfd, 0x16, 0x27}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 14:05:50 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x9}}}}}}]}}, 0x0) 14:05:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:05:50 executing program 5: syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$audio1(0xffffffffffffff9c, &(0x7f0000000d00), 0x4000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000f80), 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000fc0), 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 14:05:50 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000540), 0x51b101, 0x0) 14:05:50 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:50 executing program 0: syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_io_uring_setup(0x7c73, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), 0x0) [ 337.216134][T21708] binder: 21701:21708 unknown command 0 [ 337.232009][T21708] binder: 21701:21708 ioctl c0306201 20000200 returned -22 [ 337.263963][T21704] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 337.277086][T21708] binder: 21701:21708 ioctl c0306201 20000200 returned -14 14:05:50 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x3, 0x6, &(0x7f0000000080)) 14:05:50 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x10, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 337.304291][T21708] binder: 21701:21708 ioctl c0306201 20000380 returned -14 14:05:50 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x45, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10002, 0x401}) 14:05:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) [ 337.378002][T21727] binder: 21725:21727 unknown command 0 [ 337.388377][T21727] binder: 21725:21727 ioctl c0306201 20000200 returned -22 14:05:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000800)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) fsync(r0) [ 337.421104][T21727] binder: 21725:21727 unknown command 0 [ 337.437490][T21727] binder: 21725:21727 ioctl c0306201 20000200 returned -22 [ 337.448926][T21734] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 337.459260][T21727] binder: 21725:21727 unknown command 0 [ 337.470767][T21727] binder: 21725:21727 ioctl c0306201 20000380 returned -22 [ 337.484878][ T8926] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 337.494792][ T29] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 337.774762][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 337.854852][ T8926] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.864874][ T8926] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 337.875236][ T8926] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 337.885524][ T8926] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 337.895768][ T8926] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 338.064849][ T8926] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 338.074106][ T8926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.082483][ T8926] usb 4-1: Product: syz [ 338.086880][ T8926] usb 4-1: Manufacturer: syz [ 338.091514][ T8926] usb 4-1: SerialNumber: syz [ 338.094859][ T29] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=19.ed [ 338.115398][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.123585][ T29] usb 5-1: Product: syz [ 338.129206][ T29] usb 5-1: Manufacturer: syz [ 338.134417][ T29] usb 5-1: SerialNumber: syz [ 338.142168][ T29] usb 5-1: config 0 descriptor?? [ 338.196131][ T29] gspca_main: vc032x-2.14.0 probing 0ac8:0323 [ 338.374963][ T8926] cdc_ncm 4-1:1.0: bind() failure [ 338.384142][ T8926] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 338.397170][ T8926] cdc_ncm 4-1:1.1: bind() failure [ 338.404119][ T8926] usb 4-1: USB disconnect, device number 9 [ 338.835611][ T29] gspca_vc032x: reg_w err -71 [ 338.840335][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.849382][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.855151][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.860764][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.867365][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.872640][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.878575][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.883935][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.889944][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.895675][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.900957][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.906851][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.912126][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.918179][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.923880][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.929839][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.935616][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.940900][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.947133][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.952412][ T29] gspca_vc032x: Unknown sensor... [ 338.958183][ T29] vc032x: probe of 5-1:0.0 failed with error -22 [ 338.966455][ T29] usb 5-1: USB disconnect, device number 11 [ 339.244709][ T20] usb 4-1: new high-speed USB device number 10 using dummy_hcd 14:05:52 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x6, 0xa4, 0x1c, 0x8, 0xac8, 0x323, 0x19ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfd, 0x16, 0x27}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 339.624757][ T8926] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 339.624893][ T20] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.643863][ T20] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 339.654494][ T20] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 339.665117][ T20] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 339.675693][ T20] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 339.855131][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 339.864542][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.864784][ T8926] usb 5-1: Using ep0 maxpacket: 8 [ 339.874238][ T20] usb 4-1: Product: syz [ 339.882300][ T20] usb 4-1: Manufacturer: syz [ 339.887457][ T20] usb 4-1: SerialNumber: syz 14:05:53 executing program 3: syz_io_uring_setup(0x18c5, &(0x7f0000000100), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) 14:05:53 executing program 5: syz_read_part_table(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000000880)=[{&(0x7f0000000700)='7a', 0x2, 0xffff}, {&(0x7f0000000740)="19", 0x1}]) 14:05:53 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x10, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01eb00908e000000000001000000080001"], 0x30}}, 0x0) 14:05:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) [ 340.164811][ T20] cdc_ncm 4-1:1.0: bind() failure [ 340.165038][ T8926] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=19.ed [ 340.171574][ T20] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 340.189155][ T8926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 14:05:53 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system', 0x200, 0x0) [ 340.210603][T21796] binder: 21788:21796 unknown command 0 [ 340.216966][ T20] cdc_ncm 4-1:1.1: bind() failure [ 340.222311][T21796] binder: 21788:21796 ioctl c0306201 20000200 returned -22 [ 340.232267][ T20] usb 4-1: USB disconnect, device number 10 [ 340.239595][T21796] binder: BINDER_SET_CONTEXT_MGR already set [ 340.242661][T21797] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 340.247851][T21796] binder: 21788:21796 ioctl 40046207 0 returned -16 14:05:53 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/power_supply', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) [ 340.269328][ T8926] usb 5-1: Product: syz [ 340.269684][T21796] binder: 21788:21796 unknown command 0 [ 340.291196][T21796] binder: 21788:21796 ioctl c0306201 20000200 returned -22 [ 340.293153][ T8926] usb 5-1: Manufacturer: syz [ 340.309045][T21796] binder: 21788:21796 unknown command 0 14:05:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) 14:05:53 executing program 5: mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) [ 340.317511][ T8926] usb 5-1: SerialNumber: syz [ 340.325869][T21796] binder: 21788:21796 ioctl c0306201 20000380 returned -22 [ 340.334103][T21804] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 340.336183][ T8926] usb 5-1: config 0 descriptor?? 14:05:53 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x10, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:53 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system', 0x519482, 0x0) [ 340.384916][T21809] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 340.458090][ T8926] gspca_main: vc032x-2.14.0 probing 0ac8:0323 [ 340.466220][T21826] binder: 21823:21826 unknown command 0 [ 340.485517][T21826] binder: 21823:21826 ioctl c0306201 20000200 returned -22 [ 340.495317][T21826] binder: 21823:21826 unknown command 0 [ 340.512863][T21826] binder: 21823:21826 ioctl c0306201 20000200 returned -22 [ 340.525487][T21826] binder: 21823:21826 unknown command 0 [ 340.531300][T21826] binder: 21823:21826 ioctl c0306201 20000380 returned -22 [ 341.104749][ T8926] gspca_vc032x: reg_w err -71 [ 341.109657][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 341.115816][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 341.121096][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 341.127616][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 341.132905][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 341.139266][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 341.144557][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 341.150858][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 341.156639][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 341.161917][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 341.167950][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 341.173527][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 341.179494][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 341.185495][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 341.190863][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 341.196344][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 341.202060][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 341.207583][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 341.212860][ T8926] gspca_vc032x: I2c Bus Busy Wait 00 [ 341.218304][ T8926] gspca_vc032x: Unknown sensor... [ 341.223349][ T8926] vc032x: probe of 5-1:0.0 failed with error -22 [ 341.231551][ T8926] usb 5-1: USB disconnect, device number 12 14:05:54 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x6, 0xa4, 0x1c, 0x8, 0xac8, 0x323, 0x19ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfd, 0x16, 0x27}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 14:05:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:05:54 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/power_supply', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system', 0x48240, 0x0) 14:05:54 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 14:05:54 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, 0x0, 0x0) 14:05:54 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:54 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 14:05:54 executing program 0: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 341.650951][T21853] binder: 21849:21853 unknown command 0 [ 341.674276][T21854] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 341.683886][T21853] binder: 21849:21853 ioctl c0306201 20000200 returned -22 14:05:54 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) 14:05:54 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/power_supply', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, 0x0) [ 341.705770][T21861] binder: 21849:21861 unknown command 0 [ 341.717790][T21861] binder: 21849:21861 ioctl c0306201 20000200 returned -22 [ 341.735993][T21853] binder: 21849:21853 unknown command 0 [ 341.741695][T21853] binder: 21849:21853 ioctl c0306201 20000380 returned -22 14:05:54 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:54 executing program 5: r0 = getpid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000200)) [ 341.855100][T21878] binder: 21876:21878 unknown command 0 [ 341.872639][T21878] binder: 21876:21878 ioctl c0306201 20000200 returned -22 [ 341.882790][T21878] binder: 21876:21878 unknown command 0 [ 341.888946][T21878] binder: 21876:21878 ioctl c0306201 20000200 returned -22 [ 341.897647][T21878] binder: 21876:21878 unknown command 0 [ 341.903790][T21878] binder: 21876:21878 ioctl c0306201 20000380 returned -22 [ 341.936930][ T4810] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 342.194735][ T4810] usb 5-1: Using ep0 maxpacket: 8 [ 342.505532][ T4810] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=19.ed [ 342.514810][ T4810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.522843][ T4810] usb 5-1: Product: syz [ 342.528165][ T4810] usb 5-1: Manufacturer: syz [ 342.532757][ T4810] usb 5-1: SerialNumber: syz [ 342.539092][ T4810] usb 5-1: config 0 descriptor?? [ 342.575931][ T4810] gspca_main: vc032x-2.14.0 probing 0ac8:0323 [ 343.234806][ T4810] gspca_vc032x: reg_w err -71 [ 343.239713][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.246381][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.251921][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.258130][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.263477][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.269079][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.274361][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.279807][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.285258][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.290535][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.295848][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.301125][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.306566][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.311844][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.317218][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.322493][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.328244][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.333530][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.338944][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.344221][ T4810] gspca_vc032x: Unknown sensor... [ 343.349345][ T4810] vc032x: probe of 5-1:0.0 failed with error -22 [ 343.357442][ T4810] usb 5-1: USB disconnect, device number 13 14:05:56 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x6, 0xa4, 0x1c, 0x8, 0xac8, 0x323, 0x19ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfd, 0x16, 0x27}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 14:05:56 executing program 3: clock_gettime(0x0, &(0x7f0000000000)) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x10) 14:05:56 executing program 0: syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000001500)=[{&(0x7f00000011c0), 0x0, 0x80000000}, {&(0x7f0000000100)}], 0x840, &(0x7f0000003d80)={[{@gid_ignore}, {@undelete}, {@utf8}]}) 14:05:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:05:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1b, 0x0, &(0x7f0000000040)) 14:05:56 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:56 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$sock(r0, &(0x7f0000000340)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=[@timestamping={{0x14}}, @timestamping={{0x14}}], 0x30}, 0x240048d1) 14:05:56 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0, 0x0) listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/4096, 0x1000) 14:05:56 executing program 0: accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) getrusage(0x0, &(0x7f00000000c0)) [ 343.769661][T21903] binder: 21900:21903 unknown command 0 [ 343.791969][T21903] binder: 21900:21903 ioctl c0306201 20000200 returned -22 [ 343.803636][T21905] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. 14:05:56 executing program 5: syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f00000008c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}) [ 343.843158][T21912] binder: 21900:21912 unknown command 0 [ 343.874181][T21912] binder: 21900:21912 ioctl c0306201 20000200 returned -22 14:05:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:05:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='veth0_macvtap\x00') [ 343.892457][T21903] binder: 21900:21903 unknown command 0 [ 343.899058][T21903] binder: 21900:21903 ioctl c0306201 20000380 returned -22 [ 343.983520][T21931] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 344.084652][ T4810] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 344.324698][ T4810] usb 5-1: Using ep0 maxpacket: 8 [ 344.604741][ T4810] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=19.ed [ 344.613986][ T4810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.622392][ T4810] usb 5-1: Product: syz [ 344.626909][ T4810] usb 5-1: Manufacturer: syz [ 344.631737][ T4810] usb 5-1: SerialNumber: syz [ 344.640503][ T4810] usb 5-1: config 0 descriptor?? [ 344.685929][ T4810] gspca_main: vc032x-2.14.0 probing 0ac8:0323 [ 345.344749][ T4810] gspca_vc032x: reg_w err -71 [ 345.349460][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.355195][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.360537][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.366222][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.371900][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.377790][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.383186][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.388767][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.394183][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.399999][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.405438][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.410716][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.416166][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.421442][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.426933][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.432280][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.437840][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.443151][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.448777][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.454061][ T4810] gspca_vc032x: Unknown sensor... [ 345.459439][ T4810] vc032x: probe of 5-1:0.0 failed with error -22 [ 345.467147][ T4810] usb 5-1: USB disconnect, device number 14 14:05:58 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x6, 0xa4, 0x1c, 0x8, 0xac8, 0x323, 0x19ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfd, 0x16, 0x27}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 14:05:58 executing program 3: syz_mount_image$udf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 14:05:58 executing program 5: ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f38, 0x1]}) syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x0, 0xaaaaaaaaaaaadfe, &(0x7f0000000340), 0x0, &(0x7f0000000000)={[{@utf8}]}) 14:05:58 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0xe102, 0x0) 14:05:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:05:58 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:05:58 executing program 3: msgsnd(0x0, &(0x7f00000000c0), 0x8, 0x0) [ 345.875369][T21959] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 345.903601][T21963] binder: 21958:21963 unknown command 0 14:05:59 executing program 0: add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000280)='!', 0x1, 0xffffffffffffffff) [ 345.918877][T21963] binder: 21958:21963 ioctl c0306201 20000200 returned -22 14:05:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) [ 345.970213][T21963] binder: 21958:21963 unknown command 0 [ 345.996858][T21963] binder: 21958:21963 ioctl c0306201 20000200 returned -22 14:05:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, 0x0, &(0x7f0000000000)) 14:05:59 executing program 0: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) [ 346.021221][T21975] binder: 21958:21975 unknown command 0 [ 346.028187][T21975] binder: 21958:21975 ioctl c0306201 20000380 returned -22 14:05:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000080)={&(0x7f0000229000/0x1000)=nil, 0x8, 0x2, 0x60}) close(r0) [ 346.107891][T21985] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 346.228497][ T20] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 346.504582][ T20] usb 5-1: Using ep0 maxpacket: 8 [ 346.814689][ T20] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=19.ed [ 346.823967][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.832806][ T20] usb 5-1: Product: syz [ 346.837687][ T20] usb 5-1: Manufacturer: syz [ 346.842368][ T20] usb 5-1: SerialNumber: syz [ 346.848713][ T20] usb 5-1: config 0 descriptor?? [ 346.887090][ T20] gspca_main: vc032x-2.14.0 probing 0ac8:0323 [ 347.544901][ T20] gspca_vc032x: reg_w err -71 [ 347.549696][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 347.556136][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 347.561457][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 347.567819][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 347.573182][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 347.579067][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 347.584396][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 347.589966][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 347.595531][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 347.600810][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 347.606527][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 347.611916][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 347.617551][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 347.622967][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 347.629165][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 347.634461][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 347.640009][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 347.645562][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 347.650852][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 347.656397][ T20] gspca_vc032x: Unknown sensor... [ 347.661477][ T20] vc032x: probe of 5-1:0.0 failed with error -22 [ 347.669415][ T20] usb 5-1: USB disconnect, device number 15 14:06:01 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x6, 0xa4, 0x1c, 0x8, 0xac8, 0x323, 0x19ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfd, 0x16, 0x27}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 14:06:01 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:06:01 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000001340)={&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000040)="7f", 0x1}, {&(0x7f00000000c0)="8a90739b0c50026fe2c502a47dd34d5721c92bc9973aa7fa99b4d7eca35a47ad14021d7594190be391285ce42ba99a5e942132412059cd78e83cf4d6f7dbec2008441013c41a9a5672011ef41479f596804f436a4ea02235a90ae5993c21fa8ae0a877f4b4f4a95cfb719fc3", 0x6c}, {&(0x7f0000000140)="b2db20a54fe00699aeb6147861f5cc12cf413895eff288da54a64325cf80d4402afa356f9387507252ad889047c3a33201bee267791baefc2226d2966f728a65d527999895a589ca2e32f5e969d9845690150f4b13d6a6e1f4d98055232f8f8ee0cd964c0a09a1c0f47cc7e98041817fc2fdf3a6582dd52cd218dc5bda63991678ae0705838599fa5da503bf97aebe3d9857c246270f757e5041f14ce4", 0x9d}, {&(0x7f0000000200)="96ce29cdbd71422c7c00afcb095ebf24ec0880ae5d0b106c386851501714030bd0487677bf7e89f880bf9c50", 0x2c}], 0x4, &(0x7f0000001300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x18}, 0x0) 14:06:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000229000/0x2000)=nil}) 14:06:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:06:01 executing program 5: syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x48000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) socket$inet6_udp(0xa, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 14:06:01 executing program 0: io_setup(0xfffffffb, &(0x7f0000000040)) 14:06:01 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r2 = fork() tgkill(r1, r2, 0x0) [ 348.084365][T22019] binder: 22010:22019 unknown command 0 [ 348.091621][T22018] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 348.099850][T22019] binder: 22010:22019 ioctl c0306201 20000200 returned -22 14:06:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f0000000000)={[{@fat=@nfs}]}) 14:06:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:06:01 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000340)) [ 348.155454][T22027] binder: 22010:22027 unknown command 0 [ 348.170327][T22027] binder: 22010:22027 ioctl c0306201 20000200 returned -22 [ 348.190438][T22019] binder: 22010:22019 unknown command 0 [ 348.196700][T22019] binder: 22010:22019 ioctl c0306201 20000380 returned -22 14:06:01 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 348.292104][T22045] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 348.301925][T22050] binder: 22049:22050 unknown command 0 [ 348.310037][T22050] binder: 22049:22050 ioctl c0306201 20000200 returned -22 [ 348.332513][T22050] binder: 22049:22050 unknown command 0 [ 348.349029][T22050] binder: 22049:22050 ioctl c0306201 20000200 returned -22 [ 348.359525][T22050] binder: 22049:22050 unknown command 0 [ 348.373510][T22050] binder: 22049:22050 ioctl c0306201 20000380 returned -22 [ 348.404663][ T4810] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 348.644607][ T4810] usb 5-1: Using ep0 maxpacket: 8 [ 348.924733][ T4810] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=19.ed [ 348.933805][ T4810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.942714][ T4810] usb 5-1: Product: syz [ 348.947506][ T4810] usb 5-1: Manufacturer: syz [ 348.952106][ T4810] usb 5-1: SerialNumber: syz [ 348.958998][ T4810] usb 5-1: config 0 descriptor?? [ 348.997014][ T4810] gspca_main: vc032x-2.14.0 probing 0ac8:0323 [ 349.654682][ T4810] gspca_vc032x: reg_w err -71 [ 349.659486][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.665713][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.671076][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.677514][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.683025][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.689016][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.694340][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.700500][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.706320][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.711606][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.717864][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.723157][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.729365][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.735234][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.740517][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.746481][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.752019][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.758053][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.763336][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.769362][ T4810] gspca_vc032x: Unknown sensor... [ 349.774416][ T4810] vc032x: probe of 5-1:0.0 failed with error -22 [ 349.783185][ T4810] usb 5-1: USB disconnect, device number 16 14:06:03 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x6, 0xa4, 0x1c, 0x8, 0xac8, 0x323, 0x19ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfd, 0x16, 0x27}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 14:06:03 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, 0x0) 14:06:03 executing program 3: add_key$user(&(0x7f0000009100), 0x0, 0x0, 0x0, 0xfffffffffffffff9) 14:06:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:06:03 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000006100)) 14:06:03 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, 0x0, 0x0, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:06:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x10, 0x0, &(0x7f0000000440)) [ 350.196776][T22079] binder: 22075:22079 unknown command 0 [ 350.212702][T22080] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 350.228677][T22079] binder: 22075:22079 ioctl c0306201 20000200 returned -22 [ 350.260145][T22079] binder: 22075:22079 unknown command 0 [ 350.277095][T22079] binder: 22075:22079 ioctl c0306201 20000200 returned -22 14:06:03 executing program 3: syz_mount_image$udf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0xee00, 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 14:06:03 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000002700)='./file0\x00', &(0x7f0000002740), 0x0, 0x0, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0xfffffffffffffd74) 14:06:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:06:03 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, 0x0, 0x0, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 350.310294][T22079] binder: 22075:22079 unknown command 0 [ 350.317152][T22079] binder: 22075:22079 ioctl c0306201 20000380 returned -22 14:06:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0100000102050000000000000000000a0000040802000000006970000e0006007369702d3230303030000000040001800c010a80080001400000000108000140000000013c0002802c000180140003002001000000000000000000000000000114000400ff02005e0000000000000000000000010c000280050001001c00000008000140000000000800014000000001180002801400018008000100e000000208000200e0000002940002800600034000030000060003400004000014000180080001000000000008000200e00000010c00028005000100840000002c00018014000300ff01000000000000000000000000000114000400fc00000000000000000000000000000106000340000200002c00018014000300fe80000000000000000000000000003c14000400fc0200000000000000000000000000000600074000000000"], 0x14c}, 0x1, 0x0, 0x0, 0x40}, 0x24000001) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002780)={{{@in=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@private0}, 0x0, @in6=@mcast2}}, 0xe4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r1, 0x0, 0x12, 0x0, &(0x7f0000000f00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r2, 0x0, 0x12, 0x0, &(0x7f0000000f00)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000240)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000200)={0x2, 'wlan0\x00', 0x3}, 0x18) [ 350.400113][T22104] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 350.403170][T22107] binder: 22100:22107 unknown command 0 [ 350.460445][T22107] binder: 22100:22107 ioctl c0306201 20000200 returned -22 [ 350.475768][T22114] binder: 22100:22114 unknown command 0 [ 350.481463][T22114] binder: 22100:22114 ioctl c0306201 20000200 returned -22 [ 350.501811][T22107] binder: 22100:22107 unknown command 0 [ 350.509020][T22107] binder: 22100:22107 ioctl c0306201 20000380 returned -22 [ 350.524572][ T20] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 350.794602][ T20] usb 5-1: Using ep0 maxpacket: 8 [ 351.094793][ T20] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=19.ed [ 351.104013][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.112939][ T20] usb 5-1: Product: syz [ 351.118376][ T20] usb 5-1: Manufacturer: syz [ 351.123052][ T20] usb 5-1: SerialNumber: syz [ 351.129128][ T20] usb 5-1: config 0 descriptor?? [ 351.165759][ T20] gspca_main: vc032x-2.14.0 probing 0ac8:0323 [ 351.384649][ T20] gspca_vc032x: reg_r err -32 [ 351.389408][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 351.396696][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 351.402219][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 351.407675][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 351.413519][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 351.419076][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 351.424362][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 351.429796][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 351.435227][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 351.440614][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 351.446201][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 351.451486][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 351.456991][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 351.462277][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 351.467922][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 351.473215][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 351.478829][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 351.484199][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 351.489858][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 351.495654][ T20] gspca_vc032x: Unknown sensor... [ 351.500838][ T20] vc032x: probe of 5-1:0.0 failed with error -22 14:06:06 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x6, 0xa4, 0x1c, 0x8, 0xac8, 0x323, 0x19ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfd, 0x16, 0x27}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 14:06:06 executing program 3: r0 = openat$bsg(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 14:06:06 executing program 0: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x11) 14:06:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:06:06 executing program 5: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001280)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 14:06:06 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, 0x0, 0x0, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 353.176264][ T20] usb 5-1: USB disconnect, device number 17 14:06:06 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0) [ 353.237590][T22143] binder: 22136:22143 unknown command 0 [ 353.243053][T22145] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 353.254417][T22143] binder: 22136:22143 ioctl c0306201 20000200 returned -22 [ 353.271741][T22143] binder: 22136:22143 unknown command 0 [ 353.278442][T22143] binder: 22136:22143 ioctl c0306201 20000200 returned -22 14:06:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000680)={0x0, 'bridge_slave_0\x00'}, 0x18) 14:06:06 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system', 0x0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) 14:06:06 executing program 0: openat$ipvs(0xffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) getresuid(&(0x7f0000000180), &(0x7f0000000080), &(0x7f00000000c0)) [ 353.290163][T22143] binder: 22136:22143 unknown command 0 [ 353.303039][T22143] binder: 22136:22143 ioctl c0306201 20000380 returned -22 14:06:06 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:06:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) [ 353.401461][T22166] binder: 22162:22166 unknown command 0 [ 353.422505][T22166] binder: 22162:22166 ioctl c0306201 20000200 returned -22 [ 353.433988][T22166] binder: 22162:22166 unknown command 0 [ 353.446219][T22166] binder: 22162:22166 ioctl c0306201 20000200 returned -22 [ 353.458310][T22166] binder: 22162:22166 unknown command 0 [ 353.465508][T22166] binder: 22162:22166 ioctl c0306201 20000380 returned -22 [ 353.479039][T22169] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 353.684496][ T20] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 353.924575][ T20] usb 5-1: Using ep0 maxpacket: 8 [ 354.234657][ T20] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=19.ed [ 354.243801][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.252108][ T20] usb 5-1: Product: syz [ 354.256459][ T20] usb 5-1: Manufacturer: syz [ 354.261048][ T20] usb 5-1: SerialNumber: syz [ 354.269858][ T20] usb 5-1: config 0 descriptor?? [ 354.328022][ T20] gspca_main: vc032x-2.14.0 probing 0ac8:0323 [ 354.544556][ T20] gspca_vc032x: reg_r err -32 [ 354.549301][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 354.555425][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 354.560723][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 354.567780][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 354.573063][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 354.578412][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 354.583691][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 354.589763][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 354.595167][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 354.600455][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 354.605845][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 354.611125][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 354.616442][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 354.621717][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 354.627122][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 354.632410][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 354.637734][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 354.643014][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 354.648326][ T20] gspca_vc032x: I2c Bus Busy Wait 00 [ 354.653604][ T20] gspca_vc032x: Unknown sensor... [ 354.658696][ T20] vc032x: probe of 5-1:0.0 failed with error -22 14:06:09 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x6, 0xa4, 0x1c, 0x8, 0xac8, 0x323, 0x19ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfd, 0x16, 0x27}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 14:06:09 executing program 3: r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/80, 0x50}], 0x1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/192, 0xc0}, {0x0}], 0x2, 0x0) 14:06:09 executing program 5: openat$thread_pidfd(0xffffff9c, &(0x7f0000000000), 0xe0440, 0x0) 14:06:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x17, 0xa, 0x801}, 0x14}}, 0x0) 14:06:09 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:06:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) [ 356.225515][ T4810] usb 5-1: USB disconnect, device number 18 14:06:09 executing program 0: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)) 14:06:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f00000000c0)={@multicast2, @broadcast, @dev}, 0xc) [ 356.280878][T22195] binder: 22189:22195 unknown command 0 [ 356.310592][T22195] binder: 22189:22195 ioctl c0306201 20000200 returned -22 14:06:09 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/power_supply', 0x0, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) [ 356.326203][T22197] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 356.343720][T22195] binder: 22189:22195 unknown command 0 [ 356.358038][T22195] binder: 22189:22195 ioctl c0306201 20000200 returned -22 [ 356.367589][T22195] binder: 22189:22195 unknown command 0 14:06:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, 0x0, 0x0) 14:06:09 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f00000016c0), 0x2, 0x0) [ 356.376549][T22195] binder: 22189:22195 ioctl c0306201 20000380 returned -22 14:06:09 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 356.492712][T22223] binder: 22220:22223 unknown command 0 [ 356.498663][T22223] binder: 22220:22223 ioctl c0306201 20000200 returned -22 [ 356.512263][T22223] binder: 22220:22223 unknown command 0 [ 356.519055][T22223] binder: 22220:22223 ioctl c0306201 20000200 returned -22 [ 356.529519][T22223] binder: 22220:22223 unknown command 0 [ 356.537327][T22223] binder: 22220:22223 ioctl c0306201 20000380 returned -22 [ 356.714562][ T4810] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 356.954580][ T4810] usb 5-1: Using ep0 maxpacket: 8 [ 357.234793][ T4810] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=19.ed [ 357.243952][ T4810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.253097][ T4810] usb 5-1: Product: syz [ 357.257811][ T4810] usb 5-1: Manufacturer: syz [ 357.262449][ T4810] usb 5-1: SerialNumber: syz [ 357.269426][ T4810] usb 5-1: config 0 descriptor?? [ 357.315779][ T4810] gspca_main: vc032x-2.14.0 probing 0ac8:0323 [ 357.534546][ T4810] gspca_vc032x: reg_r err -32 [ 357.539314][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.545082][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.550584][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.556277][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.561850][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.567452][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.572807][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.578401][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.583812][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.589496][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.595018][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.600288][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.606012][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.611436][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.617287][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.622668][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.628285][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.633591][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.639231][ T4810] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.644825][ T4810] gspca_vc032x: Unknown sensor... [ 357.649907][ T4810] vc032x: probe of 5-1:0.0 failed with error -22 14:06:12 executing program 4: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 14:06:12 executing program 5: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x402, 0x8) 14:06:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:06:12 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 14:06:12 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8915, &(0x7f0000000000)={'syz_tun\x00', @ifru_addrs=@phonet}) 14:06:12 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 359.290680][ T9474] usb 5-1: USB disconnect, device number 19 [ 359.331268][T22247] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 359.357969][T22250] binder: 22248:22250 unknown command 0 [ 359.373185][T22250] binder: 22248:22250 ioctl c0306201 20000200 returned -22 14:06:12 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x292941, 0x0) 14:06:12 executing program 3: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 14:06:12 executing program 5: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 14:06:12 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 359.388055][T22250] binder: 22248:22250 unknown command 0 [ 359.407092][T22250] binder: 22248:22250 ioctl c0306201 20000380 returned -22 14:06:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe6c}}}, 0x24}}, 0x0) 14:06:12 executing program 0: setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0xea60}}, 0x0) [ 359.531670][T22271] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 359.533381][T22273] binder: 22263:22273 unknown command 0 [ 359.574126][T22273] binder: 22263:22273 ioctl c0306201 20000200 returned -22 [ 359.592579][T22273] binder: 22263:22273 unknown command 0 [ 359.599136][T22273] binder: 22263:22273 ioctl c0306201 20000380 returned -22 14:06:12 executing program 4: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 14:06:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt(r0, 0x6, 0x0, 0x0, 0x0) 14:06:12 executing program 5: pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0xfea1) 14:06:12 executing program 0: io_setup(0x58cc, &(0x7f0000008300)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) io_getevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x989680}) 14:06:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe6c}}}, 0x24}}, 0x0) 14:06:12 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:06:13 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{}, {0xfffb}]}) 14:06:13 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000006, 0x10, r0, 0x10000000) [ 359.920053][T22290] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 359.924325][T22294] binder: 22287:22294 unknown command 0 14:06:13 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x18}, 0x94) 14:06:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe6c}}}, 0x24}}, 0x0) [ 359.966264][T22294] binder: 22287:22294 ioctl c0306201 20000200 returned -22 [ 359.990112][T22306] binder: 22287:22306 unknown command 0 [ 360.014262][T22306] binder: 22287:22306 ioctl c0306201 20000380 returned -22 14:06:13 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x4b47, 0x0) 14:06:13 executing program 5: r0 = io_uring_setup(0x4c7, &(0x7f0000000080)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r1, &(0x7f0000019a40)=""/102400, 0x19000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 360.093948][T22315] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. 14:06:13 executing program 4: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 14:06:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:06:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x24}}, 0x0) 14:06:13 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x5451, 0x0) 14:06:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) 14:06:13 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) flistxattr(r0, &(0x7f0000000000)=""/169, 0xa9) 14:06:13 executing program 0: r0 = syz_io_uring_setup(0x273f, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) fsetxattr$security_ima(r0, &(0x7f0000000380), &(0x7f00000003c0)=@ng, 0x2, 0x0) 14:06:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x90, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x58, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f866525}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x4}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x90}}, 0x0) [ 360.502020][T22339] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 360.523508][T22342] binder: 22337:22342 unknown command 0 [ 360.538153][T22342] binder: 22337:22342 ioctl c0306201 20000200 returned -22 14:06:13 executing program 0: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000140)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, r0) 14:06:13 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x78, &(0x7f00000002c0)="8de208f1679d915745c9f7251cce03ab26a25750cb070000006083f3cf09690f0800000076751e3811ac9d0dd3fd000000000027b236630a670057a74244a96187389fa2273b94ba06b9e4e3af9c6ff81d781d007fbe72f2f98608448dad202100dfe301745d4dc463ce5e06d54359b83bd82797e48adf82"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x3a) 14:06:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) [ 360.586342][T22342] binder: 22337:22342 ioctl c0306201 0 returned -14 [ 360.613999][T22356] ------------[ cut here ]------------ [ 360.629769][T22342] binder: 22337:22342 unknown command 0 [ 360.642395][T22356] WARNING: CPU: 1 PID: 22356 at mm/page_alloc.c:5365 __alloc_pages+0x588/0x5f0 [ 360.653192][T22342] binder: 22337:22342 ioctl c0306201 20000380 returned -22 [ 360.670322][T22364] ptrace attach of "/root/syz-executor.3"[22362] was attempted by "/root/syz-executor.3"[22364] [ 360.672181][T22356] Modules linked in: 14:06:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_GET_FILE_RW_HINT(r0, 0xb, 0x0) [ 360.685564][T22365] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 360.705775][T22356] [ 360.708429][T22356] CPU: 1 PID: 22356 Comm: syz-executor.5 Not tainted 5.14.0-syzkaller #0 [ 360.727566][T22356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.750842][T22356] RIP: 0010:__alloc_pages+0x588/0x5f0 [ 360.757978][T22356] Code: 00 48 ba 00 00 00 00 00 fc ff df e9 5e fd ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 6d fd ff ff e8 8d 62 0a 00 e9 63 fd ff ff <0f> 0b 45 31 e4 e9 7a fd ff ff 48 8d 4c 24 50 80 e1 07 80 c1 03 38 [ 360.779375][T22356] RSP: 0018:ffffc900167c71a0 EFLAGS: 00010246 [ 360.786331][T22356] RAX: dffffc0000000000 RBX: 0000000000000015 RCX: 0000000000000000 [ 360.799066][T22356] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc900167c7228 [ 360.818725][T22356] RBP: ffffc900167c72b0 R08: dffffc0000000000 R09: ffffc900167c7200 [ 360.832268][T22356] R10: fffff52002cf8e45 R11: 0000000000000000 R12: 0000000000040dc0 [ 360.841017][T22356] R13: ffffc900167c7200 R14: 1ffff92002cf8e3c R15: 1ffff92002cf8e38 [ 360.849569][T22356] FS: 00007f844408a700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 360.859085][T22356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.867214][T22356] CR2: 000000c029850340 CR3: 0000000090796000 CR4: 00000000001526f0 [ 360.875386][T22356] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 360.883532][T22356] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 360.892086][T22356] Call Trace: [ 360.895421][T22356] ? __rmqueue_pcplist+0x2030/0x2030 [ 360.900713][T22356] ? __nla_validate_parse+0x1b3c/0x24f0 [ 360.906543][T22356] ? alloc_pages+0x3f3/0x500 [ 360.911239][T22356] kmalloc_order+0x41/0x170 [ 360.916041][T22356] kmalloc_order_trace+0x15/0x70 [ 360.921188][T22356] __kmalloc+0x292/0x390 [ 360.925600][T22356] kcalloc+0x2b/0x40 [ 360.929683][T22356] netlbl_cipsov4_add+0x1630/0x31a0 [ 360.935378][T22356] ? asan.module_dtor+0x20/0x20 [ 360.940821][T22356] ? genl_family_rcv_msg_attrs_parse+0x1cd/0x290 [ 360.947972][T22356] genl_rcv_msg+0xfb4/0x13c0 [ 360.952686][T22356] ? genl_bind+0x360/0x360 [ 360.957521][T22356] ? unwind_get_return_address+0x48/0x80 [ 360.963458][T22356] ? arch_stack_walk+0x98/0xe0 [ 360.968917][T22356] ? rcu_read_lock_sched_held+0x5d/0x110 [ 360.974921][T22356] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 360.981138][T22356] ? rcu_read_lock_sched_held+0x5d/0x110 [ 360.987395][T22356] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 360.993606][T22356] ? rcu_read_lock_sched_held+0x5d/0x110 [ 360.999740][T22356] ? rcu_lock_acquire+0x5/0x30 [ 361.005043][T22356] ? rcu_read_lock_sched_held+0x5d/0x110 [ 361.010821][T22356] ? asan.module_dtor+0x20/0x20 [ 361.016045][T22356] ? trace_lock_acquire+0x59/0x190 [ 361.021899][T22356] netlink_rcv_skb+0x1f0/0x460 [ 361.027105][T22356] ? genl_bind+0x360/0x360 [ 361.031657][T22356] ? netlink_ack+0xb70/0xb70 [ 361.036654][T22356] ? __down_read_common+0x1b0/0x450 [ 361.042636][T22356] ? up_read_non_owner+0x1c0/0x1c0 [ 361.048623][T22356] ? netlink_deliver_tap+0x130/0x840 [ 361.054254][T22356] genl_rcv+0x24/0x40 [ 361.058701][T22356] netlink_unicast+0x7de/0x9b0 [ 361.063607][T22356] ? netlink_detachskb+0xa0/0xa0 [ 361.069057][T22356] ? __virt_addr_valid+0x21b/0x2d0 [ 361.075065][T22356] ? __phys_addr_symbol+0x2b/0x70 [ 361.080158][T22356] ? __check_object_size+0x2f3/0x3f0 [ 361.090470][T22356] ? bpf_lsm_netlink_send+0x5/0x10 [ 361.096316][T22356] netlink_sendmsg+0x9e7/0xe00 14:06:14 executing program 4: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 14:06:14 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:06:14 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 14:06:14 executing program 0: select(0x47, &(0x7f0000000000)={0x0, 0x3f}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) 14:06:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000f5ffff270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) [ 361.101246][T22356] ? netlink_getsockopt+0xa60/0xa60 [ 361.117222][T22356] ? iovec_from_user+0x359/0x390 [ 361.139230][T22356] ? __import_iovec+0x35f/0x500 14:06:14 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') fgetxattr(r0, &(0x7f0000000040)=@known='security.selinux\x00', &(0x7f0000000080)=""/102, 0x66) 14:06:14 executing program 3: select(0x47, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)={0x2}, &(0x7f0000000100)) [ 361.157696][T22356] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 361.165999][T22384] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 361.177370][T22387] binder: 22377:22387 unknown command 0 [ 361.191232][T22387] binder: 22377:22387 ioctl c0306201 20000200 returned -22 [ 361.193413][T22356] ? security_socket_sendmsg+0x9d/0xb0 [ 361.225477][T22387] binder: 22377:22387 ioctl c0306201 0 returned -14 [ 361.230820][T22356] ? netlink_getsockopt+0xa60/0xa60 [ 361.248297][T22387] binder: 22377:22387 unknown command 0 [ 361.254868][T22356] ____sys_sendmsg+0x5a2/0x900 [ 361.259749][T22387] binder: 22377:22387 ioctl c0306201 20000380 returned -22 [ 361.270710][T22356] ? __sys_sendmsg_sock+0x30/0x30 [ 361.289491][T22356] __sys_sendmsg+0x319/0x400 [ 361.303211][T22356] ? ____sys_sendmsg+0x900/0x900 [ 361.318855][T22356] ? do_raw_spin_unlock+0x134/0x8a0 [ 361.324148][T22356] ? trace_lock_release+0x4f/0x150 [ 361.331524][T22356] ? lock_release+0x81/0x7b0 [ 361.339774][T22356] ? trace_lock_release+0x4f/0x150 [ 361.346803][T22356] ? read_lock_is_recursive+0x10/0x10 [ 361.352449][T22356] ? read_lock_is_recursive+0x10/0x10 [ 361.360580][T22356] ? __lock_acquire+0x6100/0x6100 [ 361.366400][T22356] ? __lock_acquire+0x6100/0x6100 [ 361.371517][T22356] ? account_other_time+0x63/0x280 [ 361.377306][T22356] ? rcu_read_lock_sched_held+0x5d/0x110 [ 361.383243][T22356] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 361.389823][T22356] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 361.396552][T22356] do_syscall_64+0x3d/0xb0 [ 361.401649][T22356] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 361.407954][T22356] RIP: 0033:0x4665f9 [ 361.411931][T22356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 361.435922][T22356] RSP: 002b:00007f844408a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.445248][T22356] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 361.453700][T22356] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 361.462181][T22356] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 361.471133][T22356] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 361.479276][T22356] R13: 00007fffab5ad64f R14: 00007f844408a300 R15: 0000000000022000 [ 361.487551][T22356] Kernel panic - not syncing: panic_on_warn set ... [ 361.494435][T22356] CPU: 0 PID: 22356 Comm: syz-executor.5 Not tainted 5.14.0-syzkaller #0 [ 361.503031][T22356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.513249][T22356] Call Trace: [ 361.516651][T22356] dump_stack_lvl+0x1ae/0x29f [ 361.521389][T22356] ? show_regs_print_info+0x12/0x12 [ 361.526683][T22356] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 361.532443][T22356] panic+0x2e1/0x850 [ 361.536457][T22356] ? __kernel_text_address+0x93/0x100 [ 361.542077][T22356] ? __warn+0x13e/0x270 [ 361.547365][T22356] ? nmi_panic+0x90/0x90 [ 361.551602][T22356] __warn+0x26a/0x270 [ 361.555572][T22356] ? __alloc_pages+0x588/0x5f0 [ 361.560323][T22356] ? __alloc_pages+0x588/0x5f0 [ 361.565089][T22356] report_bug+0x1b1/0x2e0 [ 361.569419][T22356] handle_bug+0x3d/0x70 [ 361.573574][T22356] exc_invalid_op+0x16/0x40 [ 361.578682][T22356] asm_exc_invalid_op+0x12/0x20 [ 361.583518][T22356] RIP: 0010:__alloc_pages+0x588/0x5f0 [ 361.588876][T22356] Code: 00 48 ba 00 00 00 00 00 fc ff df e9 5e fd ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 6d fd ff ff e8 8d 62 0a 00 e9 63 fd ff ff <0f> 0b 45 31 e4 e9 7a fd ff ff 48 8d 4c 24 50 80 e1 07 80 c1 03 38 [ 361.608723][T22356] RSP: 0018:ffffc900167c71a0 EFLAGS: 00010246 [ 361.614774][T22356] RAX: dffffc0000000000 RBX: 0000000000000015 RCX: 0000000000000000 [ 361.622728][T22356] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc900167c7228 [ 361.630685][T22356] RBP: ffffc900167c72b0 R08: dffffc0000000000 R09: ffffc900167c7200 [ 361.638742][T22356] R10: fffff52002cf8e45 R11: 0000000000000000 R12: 0000000000040dc0 [ 361.647394][T22356] R13: ffffc900167c7200 R14: 1ffff92002cf8e3c R15: 1ffff92002cf8e38 [ 361.655360][T22356] ? __rmqueue_pcplist+0x2030/0x2030 [ 361.661068][T22356] ? __nla_validate_parse+0x1b3c/0x24f0 [ 361.666610][T22356] ? alloc_pages+0x3f3/0x500 [ 361.671445][T22356] kmalloc_order+0x41/0x170 [ 361.675930][T22356] kmalloc_order_trace+0x15/0x70 [ 361.680848][T22356] __kmalloc+0x292/0x390 [ 361.685433][T22356] kcalloc+0x2b/0x40 [ 361.689307][T22356] netlbl_cipsov4_add+0x1630/0x31a0 [ 361.694507][T22356] ? asan.module_dtor+0x20/0x20 [ 361.699339][T22356] ? genl_family_rcv_msg_attrs_parse+0x1cd/0x290 [ 361.705747][T22356] genl_rcv_msg+0xfb4/0x13c0 [ 361.710581][T22356] ? genl_bind+0x360/0x360 [ 361.714985][T22356] ? unwind_get_return_address+0x48/0x80 [ 361.720603][T22356] ? arch_stack_walk+0x98/0xe0 [ 361.725364][T22356] ? rcu_read_lock_sched_held+0x5d/0x110 [ 361.731352][T22356] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 361.737471][T22356] ? rcu_read_lock_sched_held+0x5d/0x110 [ 361.743094][T22356] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 361.749111][T22356] ? rcu_read_lock_sched_held+0x5d/0x110 [ 361.754734][T22356] ? rcu_lock_acquire+0x5/0x30 [ 361.759590][T22356] ? rcu_read_lock_sched_held+0x5d/0x110 [ 361.765300][T22356] ? asan.module_dtor+0x20/0x20 [ 361.770138][T22356] ? trace_lock_acquire+0x59/0x190 [ 361.775533][T22356] netlink_rcv_skb+0x1f0/0x460 [ 361.780360][T22356] ? genl_bind+0x360/0x360 [ 361.784767][T22356] ? netlink_ack+0xb70/0xb70 [ 361.789430][T22356] ? __down_read_common+0x1b0/0x450 [ 361.794859][T22356] ? up_read_non_owner+0x1c0/0x1c0 [ 361.799961][T22356] ? netlink_deliver_tap+0x130/0x840 [ 361.805855][T22356] genl_rcv+0x24/0x40 [ 361.809822][T22356] netlink_unicast+0x7de/0x9b0 [ 361.815159][T22356] ? netlink_detachskb+0xa0/0xa0 [ 361.820182][T22356] ? __virt_addr_valid+0x21b/0x2d0 [ 361.825398][T22356] ? __phys_addr_symbol+0x2b/0x70 [ 361.830513][T22356] ? __check_object_size+0x2f3/0x3f0 [ 361.836912][T22356] ? bpf_lsm_netlink_send+0x5/0x10 [ 361.842022][T22356] netlink_sendmsg+0x9e7/0xe00 [ 361.846950][T22356] ? netlink_getsockopt+0xa60/0xa60 [ 361.852128][T22356] ? iovec_from_user+0x359/0x390 [ 361.857054][T22356] ? __import_iovec+0x35f/0x500 [ 361.861887][T22356] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 361.867157][T22356] ? security_socket_sendmsg+0x9d/0xb0 [ 361.872716][T22356] ? netlink_getsockopt+0xa60/0xa60 [ 361.877988][T22356] ____sys_sendmsg+0x5a2/0x900 [ 361.882733][T22356] ? __sys_sendmsg_sock+0x30/0x30 [ 361.887738][T22356] __sys_sendmsg+0x319/0x400 [ 361.892311][T22356] ? ____sys_sendmsg+0x900/0x900 [ 361.897240][T22356] ? do_raw_spin_unlock+0x134/0x8a0 [ 361.902440][T22356] ? trace_lock_release+0x4f/0x150 [ 361.907531][T22356] ? lock_release+0x81/0x7b0 [ 361.912187][T22356] ? trace_lock_release+0x4f/0x150 [ 361.917275][T22356] ? read_lock_is_recursive+0x10/0x10 [ 361.922805][T22356] ? read_lock_is_recursive+0x10/0x10 [ 361.928282][T22356] ? __lock_acquire+0x6100/0x6100 [ 361.933296][T22356] ? __lock_acquire+0x6100/0x6100 [ 361.939294][T22356] ? account_other_time+0x63/0x280 [ 361.944503][T22356] ? rcu_read_lock_sched_held+0x5d/0x110 [ 361.950316][T22356] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 361.956295][T22356] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 361.962283][T22356] do_syscall_64+0x3d/0xb0 [ 361.966784][T22356] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 361.972759][T22356] RIP: 0033:0x4665f9 [ 361.976640][T22356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 361.996693][T22356] RSP: 002b:00007f844408a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.005202][T22356] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 362.013290][T22356] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 362.021357][T22356] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 362.029328][T22356] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 362.037471][T22356] R13: 00007fffab5ad64f R14: 00007f844408a300 R15: 0000000000022000 [ 362.047056][T22356] Kernel Offset: disabled [ 362.051478][T22356] Rebooting in 86400 seconds..