Warning: Permanently added '10.128.0.158' (ECDSA) to the list of known hosts. 2020/04/22 13:22:16 fuzzer started syzkaller login: [ 59.645102][ T7062] as (7062) used greatest stack depth: 23088 bytes left 2020/04/22 13:22:18 dialing manager at 10.128.0.26:42867 2020/04/22 13:22:18 syscalls: 3000 2020/04/22 13:22:18 code coverage: enabled 2020/04/22 13:22:18 comparison tracing: enabled 2020/04/22 13:22:18 extra coverage: enabled 2020/04/22 13:22:18 setuid sandbox: enabled 2020/04/22 13:22:18 namespace sandbox: enabled 2020/04/22 13:22:18 Android sandbox: /sys/fs/selinux/policy does not exist 2020/04/22 13:22:18 fault injection: enabled 2020/04/22 13:22:18 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/04/22 13:22:18 net packet injection: enabled 2020/04/22 13:22:18 net device setup: enabled 2020/04/22 13:22:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/04/22 13:22:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/04/22 13:22:18 USB emulation: /dev/raw-gadget does not exist 13:25:12 executing program 0: [ 234.783207][ T7071] IPVS: ftp: loaded support on port[0] = 21 13:25:12 executing program 1: [ 234.958133][ T7071] chnl_net:caif_netlink_parms(): no params data found [ 235.078647][ T7071] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.087689][ T7071] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.096205][ T7071] device bridge_slave_0 entered promiscuous mode [ 235.108286][ T7071] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.115601][ T7071] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.125084][ T7071] device bridge_slave_1 entered promiscuous mode [ 235.167376][ T7071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.180031][ T7071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.216692][ T7071] team0: Port device team_slave_0 added [ 235.218048][ T7201] IPVS: ftp: loaded support on port[0] = 21 [ 235.226683][ T7071] team0: Port device team_slave_1 added [ 235.258699][ T7071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.267146][ T7071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.294823][ T7071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 13:25:13 executing program 2: [ 235.311290][ T7071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.319800][ T7071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.350796][ T7071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.466703][ T7071] device hsr_slave_0 entered promiscuous mode [ 235.532948][ T7071] device hsr_slave_1 entered promiscuous mode 13:25:13 executing program 3: [ 235.624286][ T7249] IPVS: ftp: loaded support on port[0] = 21 [ 236.007012][ T7201] chnl_net:caif_netlink_parms(): no params data found 13:25:13 executing program 4: [ 236.059721][ T7378] IPVS: ftp: loaded support on port[0] = 21 [ 236.308266][ T7249] chnl_net:caif_netlink_parms(): no params data found 13:25:14 executing program 5: [ 236.483901][ T7071] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 236.557070][ T7201] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.565889][ T7201] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.576618][ T7201] device bridge_slave_0 entered promiscuous mode [ 236.611154][ T7541] IPVS: ftp: loaded support on port[0] = 21 [ 236.618569][ T7071] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 236.666191][ T7201] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.674690][ T7201] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.684180][ T7201] device bridge_slave_1 entered promiscuous mode [ 236.708333][ T7071] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 236.771537][ T7071] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 236.901482][ T7201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.937707][ T7559] IPVS: ftp: loaded support on port[0] = 21 [ 236.938272][ T7201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.977799][ T7249] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.986379][ T7249] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.995536][ T7249] device bridge_slave_0 entered promiscuous mode [ 237.018097][ T7249] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.025264][ T7249] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.038498][ T7249] device bridge_slave_1 entered promiscuous mode [ 237.058060][ T7378] chnl_net:caif_netlink_parms(): no params data found [ 237.088337][ T7201] team0: Port device team_slave_0 added [ 237.124912][ T7201] team0: Port device team_slave_1 added [ 237.139268][ T7249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.178918][ T7249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.235044][ T7201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.242043][ T7201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.269094][ T7201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.304028][ T7249] team0: Port device team_slave_0 added [ 237.323408][ T7201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.330647][ T7201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.358844][ T7201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.378158][ T7249] team0: Port device team_slave_1 added [ 237.411402][ T7378] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.419374][ T7378] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.428222][ T7378] device bridge_slave_0 entered promiscuous mode [ 237.463885][ T7378] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.471087][ T7378] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.480058][ T7378] device bridge_slave_1 entered promiscuous mode [ 237.545213][ T7201] device hsr_slave_0 entered promiscuous mode [ 237.573407][ T7201] device hsr_slave_1 entered promiscuous mode [ 237.632573][ T7201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.640406][ T7201] Cannot create hsr debugfs directory [ 237.657933][ T7249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.665337][ T7249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.692729][ T7249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.769309][ T7249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.777432][ T7249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.804319][ T7249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.882965][ T7559] chnl_net:caif_netlink_parms(): no params data found [ 237.900825][ T7378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.965191][ T7249] device hsr_slave_0 entered promiscuous mode [ 238.012781][ T7249] device hsr_slave_1 entered promiscuous mode [ 238.062512][ T7249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.070131][ T7249] Cannot create hsr debugfs directory [ 238.090144][ T7378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.139283][ T7541] chnl_net:caif_netlink_parms(): no params data found [ 238.224014][ T7378] team0: Port device team_slave_0 added [ 238.271319][ T7378] team0: Port device team_slave_1 added [ 238.345748][ T7071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.379720][ T7378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.386873][ T7378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.414370][ T7378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.437345][ T7559] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.445822][ T7559] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.455245][ T7559] device bridge_slave_0 entered promiscuous mode [ 238.466871][ T7559] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.474634][ T7559] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.483355][ T7559] device bridge_slave_1 entered promiscuous mode [ 238.498229][ T7378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.505528][ T7378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.531861][ T7378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.646655][ T7378] device hsr_slave_0 entered promiscuous mode [ 238.692762][ T7378] device hsr_slave_1 entered promiscuous mode [ 238.743237][ T7378] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.751030][ T7378] Cannot create hsr debugfs directory [ 238.768803][ T7559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.779383][ T7201] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 238.817983][ T7201] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 238.865204][ T7541] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.872641][ T7541] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.880643][ T7541] device bridge_slave_0 entered promiscuous mode [ 238.890254][ T7541] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.898437][ T7541] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.906817][ T7541] device bridge_slave_1 entered promiscuous mode [ 238.917795][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.930882][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.941071][ T7559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.979121][ T7201] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 239.047617][ T7559] team0: Port device team_slave_0 added [ 239.058718][ T7559] team0: Port device team_slave_1 added [ 239.075216][ T7201] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 239.140995][ T7071] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.164470][ T7541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.231543][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.243579][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.253047][ T2688] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.260312][ T2688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.268702][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.278364][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.287295][ T2688] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.294487][ T2688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.304310][ T7541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.337664][ T7559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.346262][ T7559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.374125][ T7559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.387036][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.421689][ T7559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.432124][ T7559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.458672][ T7559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.477863][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 239.487469][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.512067][ T7541] team0: Port device team_slave_0 added [ 239.531344][ T7541] team0: Port device team_slave_1 added [ 239.590442][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.599801][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.609011][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.618119][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.652071][ T7071] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 239.662895][ T7071] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.681827][ T7249] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 239.725625][ T7249] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 239.784743][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.796819][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.805575][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.815938][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.824897][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.876218][ T7559] device hsr_slave_0 entered promiscuous mode [ 239.932855][ T7559] device hsr_slave_1 entered promiscuous mode [ 239.972490][ T7559] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.980101][ T7559] Cannot create hsr debugfs directory [ 240.001073][ T7541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.008974][ T7541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.035912][ T7541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.064351][ T7249] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 240.114158][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 240.153133][ T7541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.166878][ T7541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.195058][ T7541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.220028][ T7249] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 240.345214][ T7541] device hsr_slave_0 entered promiscuous mode [ 240.382707][ T7541] device hsr_slave_1 entered promiscuous mode [ 240.423183][ T7541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.430912][ T7541] Cannot create hsr debugfs directory [ 240.514100][ T7378] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 240.569679][ T7378] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 240.630779][ T7378] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 240.679268][ T7378] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 240.772627][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 240.780231][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 240.813017][ T7071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.914166][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 240.923776][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 240.971534][ T7201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.012483][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.020449][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.047212][ T7071] device veth0_vlan entered promiscuous mode [ 241.061056][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 241.078407][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 241.089669][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 241.100970][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 241.118002][ T7201] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.125350][ T7541] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 241.179685][ T7541] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 241.259147][ T7541] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 241.330989][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.345455][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.354909][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.362691][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.370854][ T7541] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 241.459163][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.467611][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.479029][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.487811][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.495240][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.504831][ T7071] device veth1_vlan entered promiscuous mode [ 241.524361][ T7559] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 241.566438][ T7559] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 241.625489][ T7559] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 241.696517][ T7559] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 241.773989][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 241.783513][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 241.793418][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 241.803424][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.823683][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 241.841802][ T7378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.898195][ T7378] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.914106][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.924317][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.934353][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.948650][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.956599][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 241.969830][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.003945][ T7071] device veth0_macvtap entered promiscuous mode [ 242.020319][ T7071] device veth1_macvtap entered promiscuous mode [ 242.041952][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.050714][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.060124][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 242.071491][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 242.081027][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 242.090832][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 242.099744][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.109309][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.119639][ T2699] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.126966][ T2699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.138660][ T7201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 242.164660][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.192442][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.201156][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.216246][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.223603][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.241340][ T7071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.265471][ T7249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.280003][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 242.293996][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 242.303519][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.340856][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.353312][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.361439][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.370415][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.379888][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.394571][ T7071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.404586][ T7249] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.426545][ T7559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.433683][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.441848][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 242.451057][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 242.488477][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 242.501245][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 242.510617][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.524342][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.535652][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.546703][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.563941][ T7201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.705042][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.713816][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.724845][ T2699] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.732014][ T2699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.740761][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.750436][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.764880][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.774307][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.784435][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.794722][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.804068][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.814370][ T2699] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.821652][ T2699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.889973][ T7541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.903672][ T7378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 242.932855][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.952678][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.975643][ T7559] 8021q: adding VLAN 0 to HW filter on device team0 13:25:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x11, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/adsp1\x00', 0x505a00, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioprio_set$uid(0x3, 0x0, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x2c}, @local, {[@timestamp_prespec={0x44, 0x4, 0x35}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 13:25:20 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='rpc_pipefs\x00', 0x0, &(0x7f0000000280)='\x7f\'\xd9b\x04\xa5\xea\xf2p\x00\xb6u\x83\xa9\xd6-\xf6c\x0f\xb1\x80?\xcd\xa5\xbeM8.bc\xe0\x90vp\xefC2^\xeaBL\x1a\xe7v\v\x88\xca\xda\x06\xf9W\x83t\xe1\x1d\xebn\xa8\f_\x11\x811\xa5\xec\xca\x05\x00S\xa0\xcd6\xa3\xbf`x3\xc8PC\x90r-?\xa9g\x86\xbc\xe8tOl\x85\vnpUT\xeb5{\xe2*H\x9ai\x1fh\x1b\xe6R\xe1(\xe57,\x04\x82\xd6\xe3j\xaa\xe5\xac\xc8$\xce\xa1\xce-s\xe5\x95\xe5c\"\xe8\x16\xb4u4\xe3\xbe>\xed9\x03\xf9Den\x8c\xcelerTs\x1f\xeae\x1f\xa3R\x80\xf7bf\xd3\x1b\xf7\xa8w\x98J^\"\x15y&\x85<\x12\v/\xc6\x1fY\xb6Gh\x17\xa5\x11\x85\x8e.J\xd5\x00\x00\x00\x00\x00') syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000080)=0xb37) [ 243.082513][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.103016][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.144222][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.154620][ T8331] rpc_pipefs: Unknown parameter ''Ùb¥êòp' [ 243.173781][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.184488][ T8331] binder: 8330:8331 ioctl 40084149 20000080 returned -22 13:25:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={{0x14}, [], {0x14}}, 0x28}}, 0x0) [ 243.189940][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.205934][ T8333] rpc_pipefs: Unknown parameter ''Ùb¥êòp' [ 243.253306][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.271606][ T7201] device veth0_vlan entered promiscuous mode 13:25:21 executing program 0: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) write$cgroup_int(r1, &(0x7f0000000200), 0xe00) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x11, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x11, 0x0, 0x0) r5 = dup2(r3, r4) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x2, 0x9, [0x7, 0x587, 0x20, 0x7, 0x101, 0x1, 0xa, 0xfffd, 0xffff]}, &(0x7f0000000080)=0x1a) [ 243.341731][ T7249] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 243.354368][ T7249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.369771][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.379824][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.389876][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 243.403390][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.411895][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.424381][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.434844][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.445035][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.455518][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.481883][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 243.495244][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 243.504506][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.572493][ T7541] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.584141][ T7201] device veth1_vlan entered promiscuous mode [ 243.621027][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.629652][ T8346] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000024f) [ 243.630264][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.638873][ T8346] FAT-fs (loop0): Filesystem has been set read-only 13:25:21 executing program 0: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) write$cgroup_int(r1, &(0x7f0000000200), 0xe00) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x11, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x11, 0x0, 0x0) r5 = dup2(r3, r4) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x2, 0x9, [0x7, 0x587, 0x20, 0x7, 0x101, 0x1, 0xa, 0xfffd, 0xffff]}, &(0x7f0000000080)=0x1a) [ 243.682222][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.689460][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.709483][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.719810][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.730289][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.737567][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.746807][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.755535][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.766461][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.821327][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.834656][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.845863][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.853098][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.862432][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.871220][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.922627][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.929869][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state 13:25:21 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff}, 0x1000, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="8f4b000000000000000005000000080001"], 0x3}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRES32, @ANYRES64, @ANYRES16=0x0, @ANYRESOCT]], 0x0, 0x0, 0x0}) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000200)={@loopback, @loopback}, 0x8) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x44, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x1}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7f, 0xffffffffffffffff}}, @NL80211_ATTR_WIPHY={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) [ 243.996449][ T7378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.089304][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.107048][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.126530][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.140463][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.160491][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.180267][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 13:25:22 executing program 0: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630000"], 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000600)={{0x1, 0x1, 0x6, 0x2, 'syz0\x00', 0x800}, 0x0, [0x8, 0x26d9, 0x4, 0x48, 0x7fff, 0x7, 0xffffffffffffff00, 0xb56b, 0x0, 0x39, 0x5, 0x3, 0x3, 0x10ba, 0x0, 0x800, 0xfffffffffffffff7, 0x8, 0x9, 0x838, 0x7, 0x7, 0xcd, 0x4, 0x10001, 0x58, 0x20, 0x8, 0x7, 0xfffffffffffffffe, 0xad98, 0x3, 0x7, 0x4, 0x3ff, 0x9, 0x7, 0x1000, 0x2, 0xcb9, 0x0, 0xfffffffffffffffb, 0x10000, 0x8c, 0x6be, 0x800, 0x7, 0x7f, 0x8, 0x509, 0x2, 0x5, 0x8117, 0x10001, 0x96e, 0x5, 0x3, 0x8, 0x6, 0x5, 0x80000001, 0x10001, 0x4, 0xfffffffffffffbe1, 0x1, 0x3, 0x7, 0x86, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x1b7a, 0x4, 0xfff, 0x4, 0x9, 0x4, 0x2, 0x1ff, 0x4, 0xf68e, 0x5, 0x0, 0x8, 0x100, 0x101, 0x7, 0x7fffffff, 0x3c656341, 0x7fff, 0x1, 0x80000001, 0x5, 0x2, 0x0, 0x129e, 0x8, 0x3, 0x900000, 0x5c1, 0x100000000, 0x3, 0x2, 0x5, 0x5, 0x7, 0x7, 0x5, 0xe3d, 0x1, 0xb2b, 0xe1a, 0x4, 0xd686, 0x3, 0xe1e, 0x7, 0x7, 0x9, 0x0, 0x80, 0x7, 0x80, 0x1, 0x9, 0x5f]}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r5, &(0x7f0000000400)="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", 0x200, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) clock_adjtime(0x7, &(0x7f00000000c0)={0x6, 0x0, 0xfa47, 0x7, 0x5, 0x3, 0x8, 0x7, 0x89, 0x2, 0x9d1, 0x10000, 0x3ff, 0x2, 0x1, 0x10001, 0x7, 0xb823, 0xf68, 0x5, 0x4, 0x1, 0x2, 0x9, 0xff, 0x7fff}) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080), 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 244.201878][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.229762][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.240004][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.257787][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.270231][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.288590][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.308083][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 244.320157][ T8361] binder: BINDER_SET_CONTEXT_MGR already set [ 244.376606][ T8364] binder: 8360:8364 unknown command 25349 [ 244.382887][ T8361] binder: 8360:8361 ioctl 40046207 0 returned -16 [ 244.390313][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.400835][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.404546][ T8364] binder: 8360:8364 ioctl c0306201 20000280 returned -22 [ 244.412236][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.425323][ T8361] binder: 8360:8361 ioctl c4c85513 20000600 returned -22 [ 244.437289][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.448150][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.457902][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.466798][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.476980][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.487176][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.495931][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.511592][ T7559] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.535602][ T7559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.562259][ T7249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.594803][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.610680][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.623038][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.631941][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.641862][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 244.651697][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 244.680464][ T7201] device veth0_macvtap entered promiscuous mode [ 244.698658][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 244.707413][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.718290][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.729079][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.738220][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.755343][ T7201] device veth1_macvtap entered promiscuous mode [ 244.771190][ T7378] device veth0_vlan entered promiscuous mode [ 244.782340][ T7541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.800623][ T7559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.833690][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 244.844675][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.861055][ T7201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.874952][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.887366][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 244.895795][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 244.906833][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 244.923250][ T7378] device veth1_vlan entered promiscuous mode [ 244.941197][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 244.953268][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.965903][ T7201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.977689][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 244.987614][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.997629][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 245.008553][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 245.017950][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 245.063093][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 245.073968][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.081566][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.098413][ T7249] device veth0_vlan entered promiscuous mode [ 245.146502][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 245.158368][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 245.174101][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 245.182663][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 245.249961][ T7249] device veth1_vlan entered promiscuous mode [ 245.263838][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 245.273147][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 245.281694][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.291299][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 245.300681][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 245.311955][ T7378] device veth0_macvtap entered promiscuous mode [ 245.402381][ T7378] device veth1_macvtap entered promiscuous mode [ 245.414750][ T7541] 8021q: adding VLAN 0 to HW filter on device batadv0 13:25:23 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000040)='\\vmnet0|c:\xca\xb7\xd1\x9c6nv\xda\xa6\x00dai\xc2\x80\x9e\xd6?\'`@{,vmnet1em0u\x01\x00r\x00', 0x2) ftruncate(r1, 0x1000000) sendfile(r0, r1, 0x0, 0xeefffdef) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000001c0)) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$TIOCCBRK(r4, 0x5428) [ 245.517765][ T7249] device veth0_macvtap entered promiscuous mode [ 245.549214][ T7559] device veth0_vlan entered promiscuous mode [ 245.560743][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 245.571511][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.587618][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 245.603780][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 245.615826][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.636718][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 245.650112][ T8383] binder: BINDER_SET_CONTEXT_MGR already set [ 245.657282][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 245.668982][ T8383] binder: 8377:8383 ioctl 40046207 0 returned -16 [ 245.680016][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.696128][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.711227][ T8383] binder: 8377:8383 ioctl 5428 0 returned -22 [ 245.718267][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.730322][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.745248][ T7378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.757709][ T7249] device veth1_macvtap entered promiscuous mode [ 245.780374][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.790676][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 245.801202][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 245.810551][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 245.820635][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.830105][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.843613][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.856732][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.868582][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.879777][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.891502][ T7378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.915284][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 245.926364][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 245.963939][ T7559] device veth1_vlan entered promiscuous mode [ 246.085901][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 246.096617][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.109909][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 246.120737][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.131337][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 246.141846][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.153445][ T7249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.160875][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 246.175169][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 246.186878][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 246.196576][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 246.256351][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 246.280433][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.300525][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 246.320004][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.330192][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 246.341237][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.355900][ T7249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.391229][ T7559] device veth0_macvtap entered promiscuous mode [ 246.409894][ T8384] binder: BINDER_SET_CONTEXT_MGR already set [ 246.414278][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 246.425281][ T8384] binder: 8377:8384 ioctl 40046207 0 returned -16 [ 246.439142][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 246.444290][ T8384] binder: 8377:8384 ioctl 5428 0 returned -22 [ 246.454269][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 246.465201][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 246.506706][ T7559] device veth1_macvtap entered promiscuous mode [ 246.516605][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 246.530668][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 246.580249][ T7541] device veth0_vlan entered promiscuous mode [ 246.615294][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 246.629821][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 246.664582][ T7541] device veth1_vlan entered promiscuous mode [ 246.682200][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 246.691110][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 246.710392][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 246.769954][ T7559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 246.783309][ T7559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.794144][ T7559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 246.805242][ T7559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.816023][ T7559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 246.828491][ T7559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.844656][ T7559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 246.855806][ T7559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.868212][ T7559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.878935][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 246.891476][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 246.966500][ T7559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 246.985010][ T7559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 13:25:24 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x1, &(0x7f0000001200)=ANY=[@ANYRES64=r0], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x0, 0xe, 0x0, &(0x7f0000000140)="54a2e72c79ee0e93fdacdfc36de4", 0x0, 0x63b}, 0x28) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000000)) 13:25:24 executing program 0: r0 = socket(0x2, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x20002002}) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xf6f, 0x0, 0x0) r2 = dup3(r0, r1, 0x0) shutdown(r2, 0x0) [ 247.012911][ T7559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 247.044340][ T7559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.071219][ T7559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 247.120111][ T7559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.147113][ T8411] binder: 8400:8411 ioctl b704 20000000 returned -22 [ 247.172323][ T7559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 247.222060][ T7559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.234434][ T7559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.255430][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 247.269308][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 247.429805][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 247.438960][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 247.483027][ T7541] device veth0_macvtap entered promiscuous mode [ 247.534683][ T7541] device veth1_macvtap entered promiscuous mode [ 247.565090][ T7541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 247.576450][ T7541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.588181][ T7541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 247.600001][ T7541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.616309][ T7541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 247.640051][ T7541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.656584][ T7541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 247.682949][ T7541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.702392][ T7541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 247.720061][ T7541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.732554][ T7541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.743790][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 247.754917][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 247.763448][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 247.774236][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 247.786989][ T7541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 247.799954][ T7541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.810142][ T7541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 247.827863][ T7541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.839036][ T7541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 247.854641][ T7541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.867767][ T7541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 247.881690][ T7541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.897018][ T7541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 247.907922][ T7541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.920167][ T7541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.937398][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 247.938146][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 13:25:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b00000005000000900400000000000078030000ffffffff78030000f80100008005000080050000ffffffff800500008005000005000000000000000000000000000000000000000000fffffffffffffe800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000076657468305f6d61637674617000000076657468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f100000000000000a800f000000000000000000000000000000000000000000000000000480052454449524543540000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bbfc02000000000000000000000000000000000000fe880000000000000000000000000001fc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006970766c616e3000000000000000000076657468315f746f5f687372000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800f00000000000000000000000000000000000000000000000000048004d415351554552414445000000000000000000000000000000000000000000000000ac1e00010000000000000000000000000000000000000000000000000000000000000000fc020000000000000000000000000000fe8800000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000697036677265300000000000000000007663616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800f0000000000000000000000000000000000000000000000000004800534e4154000000000000000000000000000000000000000000000000000100000000ac141400000000000000000000000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800f000000000000000000000000000000000000000000000000000480052454449524543540000000000000000000000000000000000000000000000000000fc010000000000000000000000000000fe880000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4f0) 13:25:25 executing program 3: r0 = creat(0x0, 0x0) statfs(&(0x7f0000000040)='./bus/file0\x00', &(0x7f0000000080)=""/46) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) syncfs(r1) socket$inet6(0xa, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f00000000c0)={'dummy0\x00', 0x2002}) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000000)) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 13:25:25 executing program 1: ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r1}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x3, 0x8, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xe91939b, 0x0) write$9p(r2, 0x0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x20000c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) 13:25:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x10005, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r1, r3, 0x0, 0xa808) 13:25:25 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000140)={0x3, 0x9803, 0x101}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200000000, 0x2}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="8da0250192f09c09c7e728d49230538d393e88d00380c12e076f8f47693b61dad524e3edc46522d1fd57c6524c4f25a7d22c25c70c6cfeaf67f7ec2ad090f7e882a01c83a962e1e3ae8e29ec71f59811d4f8a404dceb9daf595779083863cca26b2d814f486166bf58777019c6411491b937251516a564859e41cf82463e89e46a4ee46a332f8364b0f7ac63ba3a"], &(0x7f00000006c0)='./file0\x00', &(0x7f0000000b00)='nfs\x00', 0x0, &(0x7f0000000000)) 13:25:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="b8237c00000f23c0bcb02e23d69123d6910f91f8640f099a0d000000b0000f22e0f20f08640f01c436660fc77100c4e10dc62df524000060ead7cf523c4d00b80100000066bad104b009ee", 0x4b}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 248.232923][ T8429] binder: 8424:8429 ioctl 5603 20000140 returned -22 [ 248.247007][ T8432] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 248.279207][ C1] hrtimer: interrupt took 43729 ns [ 248.288511][ T8429] nfs: Unknown parameter '/dev/binder#' [ 248.347872][ T8435] mmap: syz-executor.1 (8435) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 248.351951][ T8429] binder: BINDER_SET_CONTEXT_MGR already set 13:25:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000340)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000040)) write$P9_RREADLINK(r3, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESHEX], 0x26) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) [ 248.410265][ T8446] nfs: Unknown parameter '/dev/binder#' [ 248.416582][ T8429] binder: 8424:8429 ioctl 40046207 0 returned -16 13:25:26 executing program 2: clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000180)={0x667, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x4, 0x0, 0x0, 0x0, 0x1, 0x8, "bdbbb31e"}, 0x6, 0x7, @offset=0x7c, 0x4, 0x0, r0}) dup(0xffffffffffffffff) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) setreuid(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) lremovexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='trusted.overlay.upper\x00') ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0x80044dfe, &(0x7f0000000280)) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0xb300}], 0x1, 0x0) 13:25:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)={[{@resize='resize'}]}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@known='user.syz\x00') 13:25:26 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x11, 0x0, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r6, r5) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000080)=ANY=[], 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r7, r8) 13:25:26 executing program 3: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004001a00020000000700000f010000000000000000fa5d1ee639d71a2f00000000000000f3000000000000000f0300000000000000000000f94854359336ccffc4cc8ee7e83ddcb5540f1faad6882134dd18d275ff00f6bae301eef4f83cff4f4bb386c9427b4351b9b899fe4b95d9be48c8252393cfe4778138b8068abf65698826f078e2c9f53216849f29c670ecfbc2130f050c9d4400e3455f361b1629e67390ea2843b8dc70f406f51996683257018317bca4d71da4f96b6579081026b818a2f43017b439a514"], &(0x7f00000001c0)=""/262, 0x44, 0x106, 0x8}, 0x20) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) 13:25:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="6800000010000104000040000000000000000000", @ANYRES32=0x0, @ANYBLOB="db80833c000000003800128008000100736974002c00028008000200ac1414bb08000300ffffffff06000d0005000000080002007f000001060008001f000000080004000100010008000a00", @ANYRES32, @ANYBLOB="4576062e9af598a5c26d96527d98954ca7947b6d55f54323c11bcc7e5aed57b5d088ff4790031faa99952d03c1387ec6d6737e11bfaeb209ed753b6eab9e12098f50e6bd5adc0f1d70f88b038ee494e7e4a25a27c2669dbf4d06779c3c10af5abf23f251ce20442ef856a6fb085c61c7c8b2000000"], 0x68}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000)=0x8, 0x4) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 248.752115][ T8464] JFS: Cannot determine volume size [ 248.783568][ T8469] binder: BINDER_SET_CONTEXT_MGR already set [ 248.797848][ T8470] BPF:Total section length too long [ 248.799958][ T8469] binder: 8463:8469 ioctl 40046207 0 returned -16 [ 248.804916][ T8471] BPF:Total section length too long 13:25:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e00080008000c000600ff030000a307000000030040e9001338d52f4400009bfb83de448daa7227c43ac9220000010cec4fab91d400000000", 0x55}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x440800, 0x0) getsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) r4 = fcntl$dupfd(r0, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 13:25:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)={[{@resize='resize'}]}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@known='user.syz\x00') [ 248.823259][ T27] audit: type=1804 audit(1587561926.608:2): pid=8469 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir551145358/syzkaller.f8Zldi/2/bus" dev="sda1" ino=15782 res=1 [ 248.888571][ T8477] IPv6: sit1: Disabled Multicast RS [ 248.968927][ T27] audit: type=1804 audit(1587561926.758:3): pid=8469 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir551145358/syzkaller.f8Zldi/2/bus" dev="sda1" ino=15782 res=1 13:25:26 executing program 1: ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r1}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x3, 0x8, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xe91939b, 0x0) write$9p(r2, 0x0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x20000c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) 13:25:26 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7f}}, 0x0, 0x0, 0x39, 0x0, "33cf7eee96d905717d90d0c14158bc759bb2299f571b4d1d2897ad48794e3be3b034c30b66ff3ffbfb1885a3c7ac5e912fabdf6d4f0a5971263080ef9f1c94665d567ac83b68221aeb71804f191b6d2d"}, 0xd8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r6, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x89}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4064) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000a40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf200000000000002500050007ffffffbd0301000000000095002000000000006916000000000000bf6700000000000017060000b964b01a4606feff00200000540600000ee60000bf150000000000000f6500000000000065070000020000002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c27dfef618ecf264e0f84f9f17d3c30e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f633a9a4f16d0a3e127bee45a0100000fe9de56c9d8a814261bdb94a05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f1d5af65727546e7c955ccefa1f6ab689fde4de4e63ede202fa4e0a2127b8b83c71a51445dc8da39e5b0ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb735fd552bdc268694aeb0743e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda32a673a6bb55d8c85f21dce431e56723888fb126a163f16fb2ad9bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3738270b315d362ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154bcb4000000000000000000000000000000bc3af2b170ad3e2b268f4ddc211bc3ebf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa1769080584f800031e03a651bb96589a7eab04871bc47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd56a57fa82b82f639601ae899a53f6715a0a62a29ab028acfc1cb26a0f6a5480a55d638a0c544ba0dc828c22fe30000008000000000000000000000000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac693a27051f2ab759b8dbe8439db2a0426c7e7c0032028c95b29b6ddb551176693a921c76beceff7e4fbfea5011af0a99fa077ffe70cac8b9e44023a1749eb1d0d572b77d6e0d0fcd74035c7a1eb6eb4e1c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c716d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647eebd4d7a93a17bcbb6bae5ff876375d4f18ca372104772a3a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec9f9f3262cb13f4a2575fbe943a6c400"/1107], &(0x7f0000000100)='GPL\x00'}, 0x48) [ 249.108818][ T8495] JFS: Cannot determine volume size [ 249.233659][ T8501] binder: BINDER_SET_CONTEXT_MGR already set [ 249.264346][ T8501] binder: 8499:8501 ioctl 40046207 0 returned -16 [ 249.293153][ T8501] binder: BINDER_SET_CONTEXT_MGR already set [ 249.310791][ T8501] binder: 8499:8501 ioctl 40046207 0 returned -16 [ 249.658964][ T8501] binder: BINDER_SET_CONTEXT_MGR already set [ 249.675722][ T8501] binder: 8499:8501 ioctl 40046207 0 returned -16 [ 249.703846][ T8486] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.3'. [ 249.743556][ T8510] IPv6: sit1: Disabled Multicast RS 13:25:27 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x2c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) recvfrom$l2tp(r3, &(0x7f0000000000)=""/150, 0x96, 0x80000023, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) 13:25:27 executing program 5: r0 = socket(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4, r2}, 0x10) 13:25:27 executing program 5: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8000, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x140a, 0x1, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x18}}, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000cc0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c103000003000000d0030000000000005001000050010000000000000000000000030000380200003802000000030000380200000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000580180010000000000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000164756d6d793000000000000000000000000000000000000005000000000000000008000001000100070000000000000000000000000000005800686173686c696d6974000000000000000000000000000000000000000001726f73653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000028005443504d53530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000038018001000000000000000000000000000000000000000000000000900073726800000000000000000000000000000000000000000000000000000100000000000000002001000000000000000000000000000000000000000000000000000000000001fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048004c454400000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000010000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x430) 13:25:27 executing program 1: r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x11, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000180)=[{}]) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/sockstat\x00') r2 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0x40405514, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='wchan\x00') sendfile(r1, r3, 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00') 13:25:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003100)=[{{&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000840)=""/57, 0x39}, {&(0x7f0000000880)=""/195, 0xc3}, {&(0x7f0000000980)=""/13, 0xd}], 0x3}, 0x8001}, {{&(0x7f0000000b40)=@alg, 0x80, &(0x7f0000002040)=[{&(0x7f0000001c00)=""/194, 0xc2}, {&(0x7f0000001d80)=""/178, 0xb2}, {0x0}], 0x3, &(0x7f00000020c0)=""/167, 0xa7}, 0x2}, {{&(0x7f0000002180)=@generic, 0x80, &(0x7f0000002800)=[{&(0x7f0000002200)=""/184, 0xb8}, {&(0x7f00000022c0)=""/190, 0xbe}, {&(0x7f0000002380)=""/239, 0xef}, {&(0x7f0000002480)=""/204, 0xcc}, {&(0x7f0000002580)=""/104, 0x68}, {&(0x7f0000002600)}, {&(0x7f0000002640)=""/131, 0x83}, {&(0x7f0000002700)=""/125, 0x7d}, {&(0x7f0000002780)=""/74, 0x4a}], 0x9, &(0x7f00000028c0)=""/187, 0xbb}}, {{0x0, 0x0, &(0x7f0000002e80)=[{0x0}], 0x1, &(0x7f0000002ec0)=""/8, 0x8}}, {{&(0x7f0000002f00)=@l2tp, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002f80)=""/116, 0x74}], 0x1}}], 0x5, 0x161, &(0x7f0000003340)={0x0, 0x3938700}) sched_setattr(0x0, 0x0, 0x0) getpriority(0x0, 0x0) process_vm_readv(0x0, &(0x7f0000002600)=[{&(0x7f0000003400)=""/107, 0x6b}, {&(0x7f0000001bc0)=""/9, 0x9}, {&(0x7f0000003480)=""/233, 0xe9}], 0x3, &(0x7f0000003740)=[{&(0x7f0000003580)=""/1, 0x1}, {&(0x7f00000035c0)=""/193, 0xc1}, {0x0}], 0x3, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000003380), &(0x7f00000033c0)=0x4) mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="3c7e06", @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000340)="d9f98bc9ef7809a0506c9b2685095646afa976c6c7c04925f372bb588dcfcbf132841ad8b22bce05aa8ec09db17c644656e3045c988e5908af748779406a3c5fb0c6752e3792", &(0x7f0000000480)=""/85, 0x4}, 0x20) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') 13:25:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x4, 0x0, 0x6000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6002920000200600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8a7717294c01c980e7d16ffce4543401c0f3c189af3c4a63ff507ba492b312cede50275aea4a483fe0a87ef095cce34c73325cb0b6ae491dd141ce4883630ce2190ecc447c8967683d09000000000000006301b647f85e01040000aa769b5915ea"], 0x0) [ 250.510460][ T8538] 9pnet_virtio: no channels available for device 127.0.0.1 [ 250.538417][ T8543] binder: BINDER_SET_CONTEXT_MGR already set [ 250.564991][ T8543] binder: 8542:8543 ioctl 40046207 0 returned -16 13:25:28 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)=0x7ff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@dont_appraise='dont_appraise'}, {@hash='hash'}, {@context={'context', 0x3d, 'staff_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x66, 0x35, 0x4, 0x32, 0x34, 0x33, 0x35], 0x2d, [0x6c, 0x63, 0x38, 0x66], 0x2d, [0x31, 0x30, 0x0, 0x62], 0x2d, [0x34, 0x64, 0x30, 0x64], 0x2d, [0x61, 0x61, 0x64, 0x38, 0x38, 0x64, 0x61, 0x65]}}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@seclabel='seclabel'}, {@subj_type={'subj_type', 0x3d, '+em0'}}, {@obj_type={'obj_type', 0x3d, ',,'}}, {@subj_type={'subj_type', 0x3d, ',vmnet1'}}]}}) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r6, 0xc0086421, &(0x7f00000001c0)={r7, 0x2}) ioctl$DRM_IOCTL_SWITCH_CTX(r4, 0x40086424, &(0x7f0000000000)={r7}) [ 250.618374][ T8543] binder: 8542:8543 ioctl 4020ae46 20000000 returned -22 [ 250.644139][ T8543] binder: BINDER_SET_CONTEXT_MGR already set [ 250.687584][ T8543] binder: 8542:8543 ioctl 40046207 0 returned -16 [ 250.687613][ T8544] binder: BINDER_SET_CONTEXT_MGR already set [ 250.708685][ T8544] binder: 8542:8544 ioctl 40046207 0 returned -16 [ 250.752341][ T8491] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.3'. [ 250.778040][ T8554] 9pnet_virtio: no channels available for device 127.0.0.1 [ 250.783337][ T8551] binder: 8550:8551 unknown command 0 [ 250.790884][ T8551] binder: 8550:8551 ioctl c0306201 20000280 returned -22 [ 250.826339][ T8541] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 250.842313][ T8555] binder: 8550:8555 ioctl 40086424 20000000 returned -22 [ 250.943485][ T8551] binder: 8550:8551 unknown command 0 [ 250.948920][ T8551] binder: 8550:8551 ioctl c0306201 20000280 returned -22 13:25:28 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x11, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x2, 0x68, 0x20, 0xc7}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x1, 0x30, 0x4, 0x3, 0x0, r3}, 0x40) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0), 0x6522, r4}, 0x38) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r7 = dup2(r6, r5) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) write$P9_RWSTAT(r7, &(0x7f0000000080)={0x7, 0x7f, 0x2}, 0x7) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000000c0)="0142589055b5d9b0ca8730640a9a38a53f6e2deed1600061fb43fa5863fff610f659", 0x0, 0x1, r4}, 0x38) 13:25:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x11, 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0x40a85323, &(0x7f0000000400)={{}, 'port0\x00'}) 13:25:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140), 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRES64], 0x8) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/99, 0x63}, {&(0x7f0000000340)=""/127, 0x7f}], 0x2, 0x81) r3 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x10) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0xc9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000), 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000014, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 13:25:28 executing program 0: sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x5, 0x0, 0x80}}, 0x30) pipe2(&(0x7f00000004c0)={0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00', 0x11) 13:25:28 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)={r2}, 0x8) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000100)={r5}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={r2, 0x800, 0x0, 0x1, 0xfffb, 0x6, 0x300, 0x0, {r5, @in={{0x2, 0x401, @remote}}, 0x4, 0xb1, 0x8001, 0x3f, 0x72}}, &(0x7f0000000180)=0xb0) r6 = socket(0x10, 0x2, 0x2000000) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r7) add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, r7, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r6, 0x800443d2, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{@fixed}, {@fixed}, {@none}, {@none}, {@none}]}) 13:25:28 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x32, &(0x7f0000000100)) ptrace(0x10, r4) ptrace$peeksig(0x4209, r4, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000180)=[{}]) socket$isdn(0x22, 0x3, 0x26) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440f4d336780208ed86ce7f080634201d3d659ad2c2bd361d6fdef9263c9e720389e19852b50e3caa4cf648"], 0x0, 0x0, 0x0}) r7 = dup2(r6, r5) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000000080)={0xffffffffffffffff, r7, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="10630840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006f3f10d4127fe6cc4fafd88db06019ecef449258df466c"], 0x12, 0x0, 0x0}) [ 251.130800][ T8560] binder: 8558:8560 ioctl 80044946 20000040 returned -22 [ 251.153202][ T8563] binder: 8561:8563 unknown command 0 [ 251.174395][ T8563] binder: 8561:8563 ioctl c0306201 20000280 returned -22 [ 251.191705][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 251.209290][ T8572] binder: 8561:8572 ioctl 4c00 6 returned -22 13:25:29 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e1800002d00050fd25a80648c63940d1024fc60100002400a000200051a82c137153e670402098003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 251.273670][ T8577] binder: BINDER_SET_CONTEXT_MGR already set [ 251.292778][ T8577] binder: 8561:8577 ioctl 40046207 0 returned -16 [ 251.317077][ T8563] binder: 8561:8563 unknown command 0 13:25:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x9) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) sendmsg$xdp(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="bf137f00daa832ae74037ae4ea22bf3a160874224e6b8aefc93174ca26cd68107fa33a1a77f38a9c579f8594b799e663bd2c4afec5477d49da86787243c2f561639cbb06adc289af47ea69f13c1af9e244128851f154560a21178407d1ddfcae1e42f14d0cbcddcbf9d6491cbf6b0abc92ceda9dd4708c025bead53af93f5867fea3ab5c33ce7d08c93c584c3f6b2ec5b3f7345857744f8d80d5963d8006638d2d7911703b3422919a113c0f03e8074347bbda50db46d7a74d2e090a1a28298ad669ddab9a07", 0xc6}, {&(0x7f0000000000)="36e035e164d2669e4355aa2358039a2b450ba2e50cf0842d2104a39c0e1e8e7e1915f6c2", 0x24}, {&(0x7f0000000100)="728caddf637800c08772b6049b318df5aa0bcbb961eeaaf61e8f3dd6eaf67a152b6cdb81b349d3b9ab5adbda97cc738e81826821bf5ddadc6beebd4568eec7c9b3eec5641107e626da6e2897ffac76c9e3fb6fc77d0797679db27ea955e6ae3107da2e9bd201c36fca5884ba64860e9876a009", 0x73}, {&(0x7f0000000380)="16a739187e395d8c2566e1f74d7d7aae8372f9bcaea58a416f8401354f0c2dd09ac034f1e900a333ebe4110f0df6cd3b8e821071dc663e6586204146f5433cad21b4854917146a7b8414f626ba4224c98114a743588f599f14db7951d41eb87cf210c09245da39dd9e916fe1a3ed0a59937927162ce80b921f10e7e17ad01d32436c553e3b6d458ad932c3ef5358e5f1dd1f3de2e27574181bda4731d74cf6bd85afc38b9aa9be0fbde1c8101450be944485", 0xb2}, {&(0x7f00000004c0)="f6ac7a19c6451c9171c1859365fdab5fb6b5770e1dc5af5ccdc91139de91eb8ece0f146bb6e3306c60ca19893b1e49848b2a3e9d7e3d8906d181e8b7482da165754972ad6e4587db084404b03873453c6fdd23c025a0ebc3581afaa1e0d9ade3a406c69ca4091b11c571044bda127e50663f71a52cb04b341553ab197447ad632cc298954e81cc15bbb856ea", 0x8c}], 0x5, 0x0, 0x0, 0x20004001}, 0x20040000) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0xd10c) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_G_FBUF(r4, 0x8030560a, &(0x7f0000000000)={0x0, 0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000680)={0x7fffffff, 0x8, 0x4, 0x10, 0x5, {0x77359400}, {0x4, 0x8, 0x4, 0x0, 0x20, 0x84, "48f03a6a"}, 0x3, 0x3, @userptr=0x20, 0x2, 0x0, r0}) ppoll(&(0x7f0000000700)=[{r1, 0x80}, {0xffffffffffffffff, 0x2004}, {r3, 0x4040}, {0xffffffffffffffff, 0x428d}, {0xffffffffffffffff, 0x1000}, {r0, 0x2}, {r5, 0x10}], 0x7, &(0x7f0000000780), &(0x7f00000007c0)={[0x83]}, 0x8) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 13:25:29 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000d0092636cd200", @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="b5d6000000000000"], 0x5}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r8, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080001000600000043ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004bc0)=ANY=[@ANYBLOB='$\x00'/20, @ANYRES32=r2, @ANYBLOB="f2ff00"/12], 0x24}}, 0x0) [ 251.323908][ T8563] binder: 8561:8563 ioctl c0306201 20000280 returned -22 [ 251.331411][ T8577] binder: 8561:8577 ioctl 4c00 6 returned -22 13:25:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000000)={0x9, 0x3, 0x3, 0xff, &(0x7f00000000c0)=[{}, {}, {}]}) r1 = timerfd_create(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) timerfd_create(0x7, 0x800) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_GSO_MAX_SEGS={0x8}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_hsr\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}]}, 0x50}}, 0x0) [ 251.398467][ T8565] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 251.483569][ T8587] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 251.493849][ T8565] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 13:25:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) lchown(0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240)=0x8, 0x4) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000200)={0x3, 0x100000000098f907, 0x0, [0x100000000000000]}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) getpeername(r2, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000000)=0x80) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000100)={0x0, @empty, 0x4e24, 0x1, 'ovf\x00', 0x2, 0xffffffa8, 0x3a}, 0x2c) sendmsg$TIPC_NL_BEARER_GET(r2, 0x0, 0x0) ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000002c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x3}}}, 0x80, &(0x7f0000000140)=[{0x0}], 0x1, &(0x7f00000005c0)}, 0x4004010) close(0xffffffffffffffff) 13:25:29 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000280)={0x4, 0x3c, "6e2f8d", 0x0, 0x4}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x40485404, &(0x7f00000002c0)={{0x0, 0x3, 0x9, 0x0, 0xf3}, 0x10000, 0x4}) [ 251.837663][ T8640] binder: 8639:8640 ioctl 800448f0 20000280 returned -22 13:25:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x34f, &(0x7f0000000440)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A'}, 0xffffffffffffff9f) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) write$ppp(r3, &(0x7f00000000c0)="9e80a1f7873f171a78ca90cc115b1289f4510145f8357572cececa4218eefb11bb1e74590666319231df39697e2858cfadcca9b4899557f8270c710bf91a01df8485f057a857ca2ed32ca68112242d4148b6aab842df9c63ff958e1ecc751f41acb338", 0x63) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000000)=""/16, &(0x7f0000000080)=0x10) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) 13:25:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="ff000000000000001c0012000c000100626f6e64000000000c000200080001000200000000000000ef59ed5c26845620d363b9bd1ca296c5ec09bf9c53374ce7c2bec128f68807008081b7d853b9ebeb313acb15ace50c0b73db0bc941804eb14518c36313e396e9927ba0b89421ec59aaf25e12261abe52dca25634bc42a7b40866debe41cdca73c05918cc311a0d1d972fdb06d30e9fc11418e0ecb9c8ee651960ffd9acdaa4bc4ef90b2dc0b05b13a3c29a3d"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, r3}, [@NDA_DST_IPV4={0x8, 0x1, @dev}, @NDA_LLADDR={0xa, 0x2, @random="8ff6a8afc787"}]}, 0x30}}, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$TIOCGLCKTRMIOS(r6, 0x5456, &(0x7f0000000080)={0xffffffff, 0x7, 0x200, 0x7fffffff, 0x16, "c3ceb4551021de0b7b2e3e0fc22beec805a8ed"}) [ 251.964132][ T8640] binder: 8639:8640 ioctl 800448f0 20000280 returned -22 [ 252.003347][ T8647] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 13:25:29 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000280)={0x4, 0x3c, "6e2f8d", 0x0, 0x4}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x40485404, &(0x7f00000002c0)={{0x0, 0x3, 0x9, 0x0, 0xf3}, 0x10000, 0x4}) [ 252.055142][ T8647] binder: 8645:8647 ioctl 5456 20000080 returned -22 13:25:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) lchown(0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240)=0x8, 0x4) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000200)={0x3, 0x100000000098f907, 0x0, [0x100000000000000]}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) getpeername(r2, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000000)=0x80) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000100)={0x0, @empty, 0x4e24, 0x1, 'ovf\x00', 0x2, 0xffffffa8, 0x3a}, 0x2c) sendmsg$TIPC_NL_BEARER_GET(r2, 0x0, 0x0) ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000002c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x3}}}, 0x80, &(0x7f0000000140)=[{0x0}], 0x1, &(0x7f00000005c0)}, 0x4004010) close(0xffffffffffffffff) [ 252.099655][ T8653] binder: 8645:8653 ioctl 5456 20000080 returned -22 [ 252.155525][ T8655] binder: 8654:8655 ioctl 800448f0 20000280 returned -22 13:25:30 executing program 3: r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000180)=[{}]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100}, r0, 0x3, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={[], [], @empty}}, 0x1c) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) 13:25:30 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000380)={[0xffffffff, 0x8e3, 0x2, 0x1f, 0xc93, 0x3, 0x5, 0x4, 0xed16, 0x4, 0xfa5d, 0x7, 0x10001, 0x0, 0xfffffffe, 0xa4a, 0xa70, 0x0, 0x9, 0x80000001, 0x8001, 0x7, 0x966, 0x101, 0x27f5, 0x400, 0x5, 0x7, 0x4, 0x7, 0x9, 0x4f, 0xfffffff8, 0x6, 0x81, 0x3, 0x200, 0x7e, 0x401, 0x7, 0x702d, 0x20000, 0x81, 0x126, 0x7, 0x9, 0x712d, 0x10000, 0x4, 0x5, 0x1000, 0x1000, 0x0, 0xbe7cf1f, 0xc27, 0xca4, 0x6, 0x1, 0x8, 0x8, 0x2f18, 0x101, 0x6, 0x6, 0x5, 0x80000000, 0x7fff, 0xc000000, 0x6, 0x6, 0x20, 0x9, 0xffffff1a, 0x80, 0x7fff, 0x10001, 0x7, 0x9, 0x631d04d7, 0x9, 0x54, 0xce, 0x1, 0x9f2, 0x6, 0x4, 0x416, 0x40, 0x1, 0x3, 0x5, 0xf9, 0x401, 0x3, 0x0, 0x8a4c, 0xffff, 0xfffffdc0, 0x7a, 0xffffffc0, 0x0, 0x0, 0x800, 0x7, 0x8, 0x1a, 0xffff, 0x6, 0x40, 0x9, 0x9, 0x3, 0x8d, 0xe36, 0xde, 0x9, 0x9c6b, 0xfffffdb4, 0x3, 0x9, 0x8, 0x1, 0xffffffff, 0x6, 0x0, 0x1ff, 0x4, 0xf5, 0x3, 0x5abd, 0x791b, 0x4, 0x3f, 0x2, 0x75, 0x57, 0x6, 0x800, 0xca8, 0x3, 0x3, 0x4, 0xffff7fff, 0x8001, 0x0, 0x800, 0x8, 0x0, 0x2, 0x7, 0x4, 0x400, 0x0, 0x9, 0x7, 0x9, 0x0, 0xfffffffd, 0x931, 0xffffaed2, 0x5, 0x87f7, 0x101, 0x8000, 0x3f, 0x6, 0x7, 0x7, 0x1cf6, 0x6, 0xfffff800, 0xff, 0x1b23, 0xae7, 0x3f, 0x46bb87e1, 0x1, 0x5, 0xfffffff7, 0x7f80000, 0x7, 0x81, 0xe09, 0x8, 0x6, 0x3, 0x7fffffff, 0x6, 0x7148, 0x2, 0x40, 0x6f1b, 0x4, 0x6, 0x9, 0x9, 0x8, 0x0, 0x6, 0x6, 0x6, 0x0, 0x200, 0x9b5, 0x10001, 0x6, 0xffff, 0x4, 0x1000, 0x2, 0x9, 0x3, 0x3, 0x6, 0x8000, 0x40, 0x7fff8, 0x2, 0x7, 0x49b1, 0x5, 0x800, 0x7, 0x9, 0x1ff, 0xffff, 0x3, 0x800, 0x3f, 0x40, 0xb6, 0x8, 0x3, 0x4, 0xfffff183, 0x5, 0x80000001, 0xcfd, 0x6, 0x7, 0x2, 0x8, 0xc0000, 0x4, 0x5, 0xa3, 0x7a6, 0x7f, 0x2, 0x9, 0xff, 0x5c9, 0xd6, 0x80000001, 0x3, 0x40, 0x1d0b, 0x9, 0x6, 0x1, 0x10001, 0x40000, 0x7fffffff, 0x7, 0x4, 0x7fffffff, 0x4, 0xfffffffb, 0x2, 0x3, 0x300000, 0x2, 0x6, 0x0, 0xfffffffb, 0x7, 0x4, 0x6, 0x8, 0x5, 0x0, 0xffff8000, 0x8000, 0xd6, 0x7, 0x6, 0x80000001, 0x7, 0xdc2b, 0x8, 0x8, 0x1, 0x2, 0x4, 0x5, 0x9, 0x9, 0x4, 0x91d6b9f, 0x10000, 0x1000, 0x48300000, 0x0, 0xb28, 0x9, 0x93, 0x7, 0xff, 0xffff, 0x3, 0x10, 0x40, 0x2, 0xd2d, 0x9, 0x2, 0x6, 0x3, 0x2, 0xcfa0, 0x7fffffff, 0x1, 0x0, 0x2, 0x24a, 0x5, 0x9, 0x800, 0x3, 0xe4, 0x208, 0x1, 0x1f, 0x7f, 0x7, 0x1, 0x8, 0xfffffff8, 0x1, 0x81, 0x6, 0x5, 0x9, 0x80000000, 0x5, 0x6, 0xf98b, 0x1, 0x0, 0x800, 0x1f, 0x4ee, 0x0, 0x7f, 0x0, 0x7, 0x95, 0x1, 0x9e4, 0x0, 0x8, 0x3, 0x817, 0x9, 0xffff, 0xffffdc8c, 0x7, 0x0, 0xa6, 0x200, 0xe2d, 0x8e28, 0x0, 0x80, 0x400, 0x1000, 0x101, 0x7, 0x3, 0x7d, 0x80000000, 0x0, 0x0, 0xfffff1a6, 0x2, 0xfffffffc, 0x8, 0x5, 0xffffffff, 0x3, 0x1fe, 0xe3, 0x0, 0x3, 0x1, 0x5, 0x7, 0x3, 0x2, 0x8, 0x6d9, 0x2, 0x6, 0x8, 0x8, 0x26, 0x1, 0x8000, 0x1, 0x8001, 0x0, 0x3, 0x2, 0x0, 0x2, 0x3, 0xfa2, 0x5, 0x8, 0x4, 0x8001, 0x3, 0x80000000, 0x400, 0xe4a, 0x4, 0x80000, 0x7, 0x3, 0x9, 0x0, 0x7ff, 0x100, 0x3, 0x8, 0x8, 0x5, 0x5118, 0x10001, 0x920b, 0x0, 0xffff, 0x3, 0x7, 0x8, 0x2, 0x7f, 0x4, 0x57, 0x1, 0xe6, 0x1ff, 0x1, 0x401, 0x4, 0x2, 0x7f, 0xffffff81, 0xb, 0x7fffffff, 0x8, 0x7fffffff, 0x9, 0x7fffffff, 0x1, 0x6, 0x6, 0x3, 0x1ff, 0x9, 0x7, 0xff, 0x3, 0x2a, 0xfe7, 0xffffffff, 0x3, 0x3, 0x2, 0x6, 0x2, 0x3f, 0x7ff, 0x39d, 0x9, 0x2, 0xfffffffd, 0x101, 0xffff, 0xfffffffe, 0x2, 0x9, 0x6, 0xffffffff, 0x480000, 0xfff, 0x1, 0x7, 0x9, 0x0, 0x401, 0x5, 0x8000, 0x3, 0x4, 0x10001, 0x6, 0x81, 0x7fffffff, 0x1, 0x10001, 0xcdc3, 0xe8, 0x3ff, 0x7c, 0x75c, 0x5, 0xff, 0xffff, 0x8, 0x6, 0x3, 0xb23, 0x8f, 0x3f, 0xffffffff, 0x2f, 0xff, 0x200, 0x9109, 0xa17e, 0x3, 0x4, 0x101, 0x7, 0x40, 0x7, 0x1, 0x80, 0x4, 0x8001, 0x800, 0x2, 0xa354, 0x8, 0x80000001, 0x4, 0xf35, 0x1d51, 0x5, 0x6, 0xffff, 0x400, 0x1, 0x5, 0x9, 0x3, 0x4, 0x7, 0x8, 0x100, 0x1f, 0x4, 0x8, 0x1, 0x1000, 0x10000, 0x5042, 0xffffffff, 0x1ff, 0x9, 0x0, 0x3ff, 0x0, 0x8001, 0x5, 0x4, 0x7fff, 0x6, 0x8, 0x8000, 0x1, 0x0, 0x6, 0x9, 0x349, 0x8, 0x32, 0x1337d2ab, 0x7, 0x9, 0x38, 0x6, 0x10000, 0xc065, 0x9cc, 0x7, 0x101, 0x9, 0x1, 0x9, 0x2, 0x2, 0x401, 0x0, 0x1ce, 0x360, 0x7f, 0x50, 0x3ff, 0x3, 0x2, 0x9, 0xec, 0x9, 0x3ff, 0x4, 0x0, 0x8, 0x1, 0x1, 0x3c, 0x1000, 0x8, 0x0, 0xbed9, 0x9, 0x8001, 0x4, 0x9, 0x7, 0x4614, 0x0, 0x4, 0x4, 0x4, 0x2, 0x2, 0x5, 0x20, 0x7fff, 0x6, 0x7, 0x1, 0x5a, 0x9, 0x5, 0x1, 0xfffffffb, 0x3f, 0x290c, 0xffffffff, 0x5, 0x4, 0x0, 0x6, 0x3, 0x6, 0x6, 0x10000, 0x8, 0x3ff, 0x10000, 0x3, 0x9, 0x3b, 0x6, 0x7f, 0x200, 0x8001, 0x2d, 0x6, 0x2d32f53d, 0x52, 0x8, 0x1ff, 0x0, 0x1, 0x200, 0x8, 0x31a, 0x1, 0x6, 0x3, 0x3, 0x2, 0x2, 0x2, 0x401, 0x2b58dc52, 0x80000001, 0x9, 0x20, 0x101, 0x4, 0x81, 0x5, 0x1, 0x80000001, 0xfffff800, 0xf3, 0x2, 0x1, 0xb7c, 0x10001, 0x12, 0x6, 0x7, 0x9, 0x4, 0x4f23e31e, 0x0, 0x6, 0x7, 0xffffffff, 0x10000, 0x5, 0x200, 0x40, 0x3, 0x7fffffff, 0x16, 0x40, 0x7f, 0x8, 0x5742, 0x9, 0x3, 0x3ff, 0x1, 0x3c7, 0x0, 0x2, 0x4, 0x80000001, 0x7, 0x5, 0x5, 0x10001, 0x6, 0x80000001, 0x800, 0x443, 0x3, 0x2, 0x1, 0x6, 0x8, 0x40, 0x5, 0x1, 0x7ff, 0x2, 0x2, 0x10001, 0x4, 0x20, 0x4, 0x7, 0x1, 0x0, 0x1, 0x9, 0x0, 0xf1, 0x8, 0x6, 0x38a2, 0x8000, 0xffff0000, 0x33, 0x3ff, 0x9, 0x0, 0x9, 0x17, 0x100, 0x9, 0x80, 0x4, 0x2, 0x1, 0xffffffff, 0xfff, 0x0, 0x1, 0x13, 0x6, 0x0, 0x3, 0x8, 0x9, 0x3, 0xfffffffc, 0x101, 0x6, 0x9, 0x8, 0x6, 0x4, 0x0, 0xf3, 0x932, 0x10001, 0x1000, 0x6, 0x1, 0x7, 0x5, 0x8c, 0x80e4098, 0x1, 0x80e7, 0x400, 0x3, 0x8001, 0x7e00, 0x5, 0xbf5a, 0x200, 0x6, 0xffff, 0x2, 0x0, 0x8, 0x2, 0xb37, 0x3, 0x7fff, 0x6, 0x0, 0x8, 0x7, 0x1ff, 0x32, 0x81, 0x8, 0xbd, 0x8, 0x0, 0x6, 0x2000, 0x7, 0x10000, 0x9, 0x80000000, 0x2, 0xff, 0x4256, 0xa626, 0x51, 0x40, 0x81, 0x20, 0x8, 0x2, 0xa2, 0x8000, 0x2, 0xfffffffe, 0x5, 0x7, 0x5ee77e55, 0x0, 0x6, 0x80000000, 0x6, 0xf25, 0x7ff, 0xff, 0x1, 0x8, 0x9, 0x3, 0x7ff, 0x9, 0x1, 0x7b7e, 0x80, 0x7, 0x2, 0x85, 0x3ff, 0x7, 0x26f17e4c, 0x10001, 0x7, 0x6, 0x4, 0x401, 0x80, 0x7, 0xffffffff, 0x200, 0xffffff5b, 0x7fff, 0x2, 0x3f, 0xb2, 0x8001, 0x0, 0x40, 0x4, 0x59, 0x1, 0x783, 0x0, 0x1, 0x9e6, 0x2, 0x53245f5c, 0x7, 0x7, 0xe3, 0x7, 0x6, 0x1, 0x0, 0x1f, 0x3, 0x2, 0x4, 0x6, 0x80000001, 0xff, 0x800, 0x7, 0x9, 0x2, 0xffff, 0xb2, 0x3, 0xb8, 0x94, 0x2, 0x3, 0x80000001, 0xee29, 0x6, 0x2, 0x3, 0x6221178, 0xffffffff, 0x1, 0x7, 0x0, 0x81, 0x3, 0x800, 0x0, 0x100, 0x9, 0x3f, 0x400, 0x30c, 0xabce, 0x6, 0x1, 0x2, 0x0, 0x6, 0x2, 0x9, 0x7fff, 0x2, 0x4, 0x8001, 0x1, 0x0, 0x3f, 0xfff, 0x0, 0x6, 0x3, 0x7, 0x6, 0x151, 0x0, 0x9, 0x4, 0x4, 0x7, 0x10001, 0x7c, 0x0, 0xcf, 0xae4, 0x6, 0xfffffff8, 0x5, 0x4, 0x8, 0x7, 0x5, 0x800, 0x7ff, 0x3, 0x80, 0xffff, 0x8, 0x5f, 0xfff, 0x9, 0x9, 0x6, 0x100, 0x7, 0x1ff, 0x8, 0x6, 0x5, 0x4, 0x2, 0x7, 0x3, 0x80000001, 0x7, 0x51, 0x0, 0x8, 0xa05, 0x11db, 0x1, 0x81]}) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) close(0xffffffffffffffff) sendfile(0xffffffffffffffff, r2, &(0x7f00000000c0), 0xffffffff00000001) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x1ff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x3c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @local}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0xb}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x11, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000200)={0x0}, &(0x7f0000000300)=0x8) read$fb(r1, &(0x7f0000001380)=""/83, 0x53) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000340)=@assoc_id=r4, 0x4) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="110000000000000000400300010000000000e200000000001c000000000000000000bbec881b0000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000007108800000000000000000000000000000000001100000000000000000000000100"/76], 0x98}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) [ 252.264744][ T8658] hub 9-0:1.0: USB hub found [ 252.309690][ T8658] hub 9-0:1.0: 8 ports detected 13:25:30 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000280)={0x4, 0x3c, "6e2f8d", 0x0, 0x4}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x40485404, &(0x7f00000002c0)={{0x0, 0x3, 0x9, 0x0, 0xf3}, 0x10000, 0x4}) [ 252.359605][ T8596] binder: 8592:8596 ioctl c0306201 20000280 returned -14 13:25:30 executing program 5: ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x2, 'netdevsim0\x00', {0x93}, 0x80}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) chroot(&(0x7f0000000080)='./file0\x00') 13:25:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x34f, &(0x7f0000000440)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A'}, 0xffffffffffffff9f) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) write$ppp(r3, &(0x7f00000000c0)="9e80a1f7873f171a78ca90cc115b1289f4510145f8357572cececa4218eefb11bb1e74590666319231df39697e2858cfadcca9b4899557f8270c710bf91a01df8485f057a857ca2ed32ca68112242d4148b6aab842df9c63ff958e1ecc751f41acb338", 0x63) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000000)=""/16, &(0x7f0000000080)=0x10) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) 13:25:30 executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) recvfrom$phonet(r4, &(0x7f0000000080)=""/50, 0x32, 0x40004040, &(0x7f0000000280)={0x23, 0x40, 0x7, 0x9}, 0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000100), 0x4) shutdown(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20021, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x7, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f00000002c0)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000100], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000040000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) [ 252.625159][ T8674] binder: 8673:8674 ioctl 800448f0 20000280 returned -22 13:25:30 executing program 5: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000300)=0x2000000000005ea, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fb, &(0x7f0000000540)={0x2, 0x4e23, @local}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={@multicast2, @broadcast, @empty}, &(0x7f0000000180)=0xc) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0xfe20) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x1) write$P9_RCREATE(r1, &(0x7f0000000080)={0xff67, 0x73, 0x0, {{0x0, 0x0, 0x1}}}, 0x18) fallocate(r1, 0x0, 0x10001, 0x4) fallocate(r1, 0x3, 0x4, 0x108006) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000001c0)={0x0, 0x0}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @rose}, [@default, @netrom, @bcast, @netrom, @default, @default, @netrom, @rose]}, &(0x7f00000000c0)=0x48, 0x0) r2 = socket$inet_sctp(0x2, 0x0, 0x84) socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/consoles\x00', 0x0, 0x0) fchown(r3, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r3, 0x80184153, &(0x7f0000000340)={0x0, &(0x7f00000002c0)=[0x0]}) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000400), 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xffc1, 0x4}, &(0x7f0000000100)=0x8) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[], 0xffffffa8) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x0) 13:25:30 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$SIOCX25CALLACCPTAPPRV(r3, 0x89e8) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000100)={r6}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000080)={0x3, 0x8, 0x81, 0x80000001, r6}, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="2e00000033000535a4abd32b8018007a0124fc60104a02400c000200053582c12d153e37090001803a256400d1bd", 0x2e}], 0x1}, 0x0) 13:25:30 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000280)={0x4, 0x3c, "6e2f8d", 0x0, 0x4}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x40485404, &(0x7f00000002c0)={{0x0, 0x3, 0x9, 0x0, 0xf3}, 0x10000, 0x4}) 13:25:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) lchown(0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240)=0x8, 0x4) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000200)={0x3, 0x100000000098f907, 0x0, [0x100000000000000]}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) getpeername(r2, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000000)=0x80) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000100)={0x0, @empty, 0x4e24, 0x1, 'ovf\x00', 0x2, 0xffffffa8, 0x3a}, 0x2c) sendmsg$TIPC_NL_BEARER_GET(r2, 0x0, 0x0) ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000002c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x3}}}, 0x80, &(0x7f0000000140)=[{0x0}], 0x1, &(0x7f00000005c0)}, 0x4004010) close(0xffffffffffffffff) [ 252.783445][ T8684] binder: 8682:8684 ioctl 89e8 0 returned -22 [ 252.890838][ T8689] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 252.938780][ T8692] binder: 8690:8692 ioctl 800448f0 20000280 returned -22 13:25:31 executing program 2: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000780)='./bus\x00', 0x2b0200, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0x22}}, {0xa, 0x4e23, 0x558, @remote, 0x1ecb}, 0xffe1, [0x0, 0x3, 0x7fff, 0x7f, 0xb05, 0x9, 0x6b3]}, 0x5c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 253.440566][ T27] audit: type=1804 audit(1587561931.228:4): pid=8709 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir633427238/syzkaller.Bwv2VZ/9/bus" dev="sda1" ino=15786 res=1 13:25:31 executing program 1: prctl$PR_SET_THP_DISABLE(0x29, 0x1) r0 = gettid() socketpair(0x4, 0x6, 0xffffffc1, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000080)={0x2, &(0x7f0000000200)=[{@fixed}, {}]}) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x404000, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) ptrace(0x10, r2) ptrace$peeksig(0x4209, r2, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000180)=[{}]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, r2, 0x3, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) [ 253.501365][ T27] audit: type=1804 audit(1587561931.278:5): pid=8709 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir633427238/syzkaller.Bwv2VZ/9/bus" dev="sda1" ino=15786 res=1 13:25:31 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000280)={0x4, 0x3c, "6e2f8d", 0x0, 0x4}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 13:25:31 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01630441"], 0x0, 0x0, 0x0}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x18, r5, 0x1, 0x70bd2d, 0x1, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x15c, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd84e}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4fc3c0cb}]}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x377}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_team\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @ipv4={[], [], @loopback}, 0x14}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @loopback, 0x9}}}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x881}, 0x4c890) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) symlink(&(0x7f0000000180)='./bus\x00', &(0x7f0000000080)='./bus/file1\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,5pperdir=./file0']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') [ 253.576262][ T8720] binder: 8682:8720 ioctl 89e8 0 returned -22 [ 253.716660][ T8722] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 13:25:31 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a4800001d000505d25a80648c63940d0224fc6010000b400a000000053582c137153e370948018002000000d1bd", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x2b, 0x1, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video36\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='auxv\x00') ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000280)) getsockopt$inet6_dccp_buf(r1, 0x21, 0xc0, &(0x7f0000000100)=""/237, &(0x7f0000000200)=0xed) [ 253.768639][ T8730] binder: 8728:8730 ioctl 800448f0 20000280 returned -22 13:25:31 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="c4a64100040000"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="75dd0000"], 0x0, 0x0, 0x0}) write$P9_RLCREATE(r3, &(0x7f0000000000)={0x18, 0xf, 0x2, {{0x8, 0x3, 0x6}, 0xf0f}}, 0x18) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000000380)="01", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="fa620440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x11, 0x0, 0x0) connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e23, @local}, 0x3, 0x4, 0x1, 0x3}}, 0x26) 13:25:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f00000000c0)={0x0, 0x101}) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000680)=@hat={'permhat ', 0x3, 0x5e, ['/dev/v4l-subdev#\x00', 'TIPCv2\x00', '[\xd2:\x18:\xb2\x90h;\a\x19\xeaJ`&selinux\x00', 'filter\x00', '\x00', 'bridge0\x00', '/dev/binder#\x00', 'system&\x00', '[lo\x00']}, 0x73) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c3f0ac492316a43a3b3adc0d0df13dd3d45767fa3acbcb6638d0834dfb17d865fdbbcddf7ed437a275e151a26fd87563f9fe7dfea39ca542e16e12ec51ac92461525f5982e4a93267679b5c9a3ee38d338276547fe9e83481b13896e64bb9e28930a1206b7902d9025506033938a603c7ca330820f3984759693a564c4ba67a5a5ad83b4a202bd4e16ced522d0934088174338ae26b6a6443e8f69b1bcbc2699d1c156e18b8ca491cc1c01a09032211ce2f771e4021a803", @ANYRES16=r6, @ANYBLOB="000427bd7000fcdbdf2513000000d400018044000400200001000a004e2000000000fc010000000000000000000000000001ba0d0000200002000a004e2000001000fe8800000000000000000000000001010100000044000280080002003600000008000400407700000800040053e40000080001000b0000000800020005000000080001000f0000000800040001000000080003000100000008000300ffffff7f380004001400010002004e23000000000000000000000000200002000a004e2200000081fc010000000000000000000000000000ff7f00000800030001000100"], 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x40044) [ 253.914726][ T8736] netlink: 18406 bytes leftover after parsing attributes in process `syz-executor.2'. [ 253.933722][ T8737] binder: 8735:8737 unknown command 4302532 [ 253.944726][ T8737] binder: 8735:8737 ioctl c0306201 20000200 returned -22 [ 253.986232][ T8741] binder: 8735:8741 unknown command 56693 [ 254.029067][ T8741] binder: 8735:8741 ioctl c0306201 20000280 returned -22 [ 254.052756][ T8737] binder: 8735:8737 unknown command 1074029306 [ 254.069406][ T8737] binder: 8735:8737 ioctl c0306201 20000200 returned -22 [ 254.078425][ T8736] netlink: 18406 bytes leftover after parsing attributes in process `syz-executor.2'. [ 254.104323][ T8741] binder: 8735:8741 unknown command 56693 [ 254.110095][ T8741] binder: 8735:8741 ioctl c0306201 20000280 returned -22 13:25:33 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x13b802, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x8509, 0x0, 0x0, 0x1, 0x0) 13:25:33 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000800)=ANY=[@ANYPTR], 0x8) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240)='gtp\x00') sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="d42f01344a69c0033021db2731e57dfab96d94fe2f1aa9eb080224625886f3b2606c46c27555131b4d042e4c31c577884765a0465e9b4834305f505524c8ef2867932f9a4134fa9b7cfc1124b13cc081918f840ba4a0870dfd6f5665f9a4bf40fd505638140ff7c8a686c71dad354354cd24e121bb86a29b45d9b61ec77cf279cc4c36d2cb9d50a5fe2f02b7f770d3fb53ae9dc3da71988e2f427c9c89f766f01c5b35369acf797d2a5c6ea06daec859f1202e0920d39f748376aec4141a1fafb9849aff51bc38ba0211a98b3382cfc7fc", @ANYRES16=r4, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x28944}, 0x0) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="10092abd7000ffdbdf25020000000c0003000200000000000000462b1f0800000000000000c87f5e15af2c9826af109305e2e67762fd1b0a8297cd9aa9c770a2d8a5eb95d5213359a9b9e870c16c416626810e892a92736e83d95c186e5feae2a4cbcd66cde6529b38771c8f737dee3bd3eeb61a5e9a2c5fb0826b6468c80995aa17fcf85cadcf42fbad403964b2a91c8dec999f85ecec202218a277ba834c1bb67ceee1adb0dc3cdaf8685af62ba932b5a106f5a54c0e15e8d66f1b430ccf015dc03464fc04f6d77204ed73"], 0x20}, 0x1, 0x0, 0x0, 0x884}, 0x8040) r5 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x1402, 0x222, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}]}, 0x38}, 0x1, 0x0, 0x0, 0xa}, 0x20000000) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) close(r5) 13:25:33 executing program 5: unshare(0x28000400) r0 = mq_open(&(0x7f00000000c0)='\\\xf7\xa0\xcc\x16H-o\x007\xe6\xb3\x1a\x8eiz\xdd06P\xd4\x88\x00s\xefu\xdfa\x01y\xde\xc26\xaa\x04\xe9F\x87y\xba\a\x00\x00\x00\x00\x00\x00\x005\x98U\xb4\x9b\x88\x9b\xb5\xe4\x9b5\x8ey:oz\xf5\'f\xd6\xfe\x93\xca\x06r\xac\x1b\x8a\x87\xcafw\xd5\"\x0f\xb7|\xb6\x13\xb3\xdb\x91\x04\xd1j\xa1\xcal\xc7jt\xe7\aK\xdcR&u{\x03\xf8[\x01\x03$Wl@\xc1\xc8e\\sw\xc1\xa6\x8d\xf5\xe2\xbc\xb6\xe5\xedF\xc8(\x9eH\xeau\xe7\x85\xeb]d\x97\xcd#;\x10\xb9\x182\xcf^1v|\x1cA\x9dFF\xcd\x88?%', 0x3c, 0x82, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 13:25:33 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000280)={0x4, 0x3c, "6e2f8d", 0x0, 0x4}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) 13:25:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x2a8601, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f0000000140)={0x5, 0x4, 0x13e, 0x80000001, '\x00', 0x9}) r4 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) getpeername$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400000000000000000000000001c09911c5765c6ed9c7efa13e67e1ba62fe93539f12fad4f77d6b9614e1e911935d8b4b6f711a8c5ef4308d30300766eb2021df2d5b23f4bb9fcbe32f7f3d9938c3370751da5e19ca1c6e8e1d6a360484ea8ff55014424b4fa40b25215848d3a9f6eec490cf65d429c73782c2c3396306fd3ba3046f4c97f875d88aa5f4dc378a806be71cb44410a9544b1a444523a985ed8e46ca29d76320be39ce1b5a319cd1c3bc9edce7e2cc59297cbbc0e32fe4154a8dff183e", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100766c616e000000000400028014000300766c616e3000"/48], 0x48}}, 0x0) 13:25:33 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x11, 0x3, 0x8) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000000)=0x4, 0x4) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @bcast}, [@default, @default, @bcast, @null, @null, @rose, @default, @netrom]}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000180)=0x1, &(0x7f0000000240)=0x1) sendto$inet(r0, &(0x7f00000012c0)="0c260d927f1f6588b967481241ba7860ac5cf65ac618ded8973495abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) [ 255.397372][ T8770] binder: 8765:8770 ioctl 800448f0 20000280 returned -22 [ 255.413570][ T8768] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 255.449513][ T27] audit: type=1804 audit(1587561933.238:6): pid=8771 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir051211271/syzkaller.svexQl/7/bus" dev="sda1" ino=15818 res=1 [ 255.484194][ T8774] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. 13:25:33 executing program 5: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @rand_addr=0x64010101}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x7b, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1"}], 0x18}}], 0x40000000000037b, 0xc000) [ 255.494297][ T8774] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 255.498358][ T8768] binder: 8764:8768 unknown command 16 [ 255.509047][ T8774] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. [ 255.517436][ T8782] binder: BINDER_SET_CONTEXT_MGR already set [ 255.549608][ T8782] binder: 8763:8782 ioctl 40046207 0 returned -16 [ 255.562308][ T8768] binder: 8764:8768 ioctl c0306201 20000280 returned -22 [ 255.579216][ T27] audit: type=1804 audit(1587561933.238:7): pid=8771 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir051211271/syzkaller.svexQl/7/bus" dev="sda1" ino=15818 res=1 [ 255.585795][ T8785] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. 13:25:33 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000280)={0x4, 0x3c, "6e2f8d", 0x0, 0x4}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) 13:25:33 executing program 3: sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="2ce0cdd230b1c3"], 0x1}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_SEQ={0xb, 0xa, "09dc4f73597bfe"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40188}, 0x40000) r0 = syz_open_dev$vivid(&(0x7f00000002c0)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000380)={0x1, 0x0, 0x100, 0x1, {0x4, 0x6, 0x4, 0x5}}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x4801, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f00000003c0)) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={0x0, r3, 0xa}, 0x10) [ 255.641235][ T8785] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 255.662338][ T8785] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. 13:25:33 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x498, 0x240, 0x240, 0x240, 0x338, 0x180, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, &(0x7f0000000000), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_vlan\x00', 'vcan0\x00', {0xff}, {}, 0x2f, 0x3, 0x15}, 0x0, 0xb8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x4}}, @common=@socket0={{0x20, 'socket\x00'}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x22, 0xd9, @empty, 0x4e23}}}, {{@ip={@loopback, @loopback, 0xffffffff, 0x0, 'tunl0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x29, 0x2, 0x50}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x3}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xe}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x3}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x38}, @rand_addr=0x64010100, 0xff, 0xffffffff, 'ip_vti0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x16}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xa}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[], 0x41}, 0x2, 0xf, [0x40, 0x1c, 0x1d, 0x38, 0x30, 0x3a, 0x5, 0x2, 0x4, 0x34, 0x10, 0x35, 0x5, 0xb, 0x11, 0x4], 0x1, 0x6}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x7}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x6, 0x7e, @dev={0xac, 0x14, 0x14, 0x1e}, 0x4e21}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000080)="ba2df74a36c47c850b5a5725d3742eb7", 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x4000000001c, &(0x7f00000001c0)={@remote}, 0x14) [ 255.694875][ T8793] binder: 8792:8793 ioctl 800448f0 20000280 returned -22 13:25:33 executing program 4: r0 = getpgrp(0x0) setpriority(0x0, r0, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x40, 0x0, 0x0, 0x7f, 0x111, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) setresuid(0x0, 0x0, 0x0) geteuid() accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) shmget(0x1, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x80184151, &(0x7f0000000000)={0x0, &(0x7f0000000100)="259486d061d1565e64828a84f51b51c39dfa2963db658393c205d7bf42d6a461bb6b6eb4f6df446bb673fa75a030f5423485a527fdc625dd2d519b1d2cc3b3b7de34f22497aa656fd8be6bacb2fcd0d2a9941ccf5ab16586c76de76408651b6613533dba6ec97b35f5181e4d1c8abcc0031b87f13099e6475dc7732270dd23c00b6f1354adca0fd572e072efe7e0f276962bfd2abd64980d54de2f43a54906c60872ba4d3f20283504a8a477adef73677c60af7c7d2a96fb69eeba2527806941728965f8ccc907c6224afa4827f6e172f436092917672363abfbcb41433a83471a0084e28d97297f97d1ee09fd", 0xed}) ptrace$getenv(0x4201, r1, 0xba, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') 13:25:33 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x444}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0xfffff7d7}) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, [], 0x1}, 0x4}, 0x1c) r3 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_G_FBUF(r3, 0x8030560a, &(0x7f0000000000)={0x0, 0x0, 0x0}) ioctl$VIDIOC_S_AUDIO(r3, 0x40345622, &(0x7f0000000040)={0xf75b, "c601f646317297f76b6508f3c0e086af611184902f8142cf4268312b9157b040", 0x2}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_cache\x00') 13:25:33 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000280)={0x4, 0x3c, "6e2f8d", 0x0, 0x4}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 255.893852][ T8799] binder: BINDER_SET_CONTEXT_MGR already set [ 255.909255][ T8798] EXT4-fs (loop3): bad geometry: block count 1080 exceeds size of device (1 blocks) [ 255.932819][ T8799] binder: 8797:8799 ioctl 40046207 0 returned -16 [ 255.935210][ T8807] binder: 8806:8807 ioctl 800448f0 20000280 returned -22 13:25:33 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000280)={0x4, 0x3c, "6e2f8d", 0x0, 0x4}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 255.981338][ T8809] EXT4-fs (loop3): bad geometry: block count 1080 exceeds size of device (1 blocks) [ 256.012155][ T8799] binder: BINDER_SET_CONTEXT_MGR already set [ 256.038572][ T8799] binder: 8797:8799 ioctl 40046207 0 returned -16 [ 256.038575][ T8808] binder: BINDER_SET_CONTEXT_MGR already set [ 256.038632][ T8808] binder: 8797:8808 ioctl 40046207 0 returned -16 [ 256.047772][ T8816] binder: BINDER_SET_CONTEXT_MGR already set [ 256.084929][ T8798] binder: BINDER_SET_CONTEXT_MGR already set [ 256.090998][ T8798] binder: 8796:8798 ioctl 40046207 0 returned -16 [ 256.127676][ T8823] binder: BINDER_SET_CONTEXT_MGR already set [ 256.143232][ T8816] binder: 8797:8816 ioctl 40046207 0 returned -16 [ 256.154515][ T8823] binder: 8822:8823 ioctl 40046207 0 returned -16 13:25:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) write$tun(r0, &(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="900000c590780000020400002209bde8878510dc91000000503e71426c3e1bb08fb82c3b5aec0052164047d91502270ac2004ca1dd338f9c924af6ec3c825c4cc8288680029a345d22245d02ae3e20ea9737dca3fcd07a1b7481eb0f0eb4043b461a7a112a0a2b9d6216202fcb32893f1be0129b17565823cddcd34de7249b2962a20dfe813a38b5d3d2adaf5256769f8470bef29ac8909d5359ab65913aa7a94545143c3ecfedd92bf80ac9194edecdc9c5884363d4a2c3cef5597c94abfa7fd7e825d2ecceab5f37697076684ec036165d42e7110f01537208037b6ec5ac757a3bc51706bc2baf3638e7be219dc05cfc1031e37feeb139cd7c3bde137ba71d9f3919d447a02454b3915c1bd797704e71f7dad1a425c3295dd152498c3608f27ba04f853bfebfd1d5f1e7e8e058a6c32b78b6d974d0ec213daf0ed9969ea4a083d5c65f4bc522a086923d6b4b746ff6812a1843e58740ab159f5a6cfc4326daf8c270dfa7908d469cedfc15893d810bc1d703615b5639decdf0de636ef46fa1ba52353519a1669feb441e2a2a72ee73a3eab01fed86597bef307296d4f5b5d54c439bbe27c39795109ccd669750a46b3a81dfde9341dd3306032e5eb199d8f0a2f9887755b8cc873b93396a22faedfd67422e1ec052bcfda71da4deb670145ae43b4425e4e04d243da7d229bf11c1c47bdf0b302aa79df23ae9ba6b8e89b04c36c955ca7e94d3c92cd04b01abbe168842b19eb3d76edfa46c6c2bd412e0f7e943638249ab7f3ba9872c86d45518c85660b9d116c780815d4631db99bd0839e7839a945358a2eb11cb32cd9942f6ce7c74327f91ae8ecd9927346feebabcf091dc5cb3a9dee4d5673dfac38df13c6ad46e4367bdce3a7f5b2d03f11e2cefd4031784d15f5044b251df889ff6893e766db9d43715807e91200aeef30fc64e4c4c381dc3f0daf2db10620f3c8506895ae6463197bc6f166886d3e076d45faef00e82952dbde2acc0af34f56dcd2e3e25345689e667cbd47c1511bb5b43e876d16ff1e24dd9032b7cb9a34c53048c1d37"], 0xfca) [ 256.180382][ T8825] binder: 8822:8825 ioctl 800448f0 20000280 returned -22 13:25:34 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x498, 0x240, 0x240, 0x240, 0x338, 0x180, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, &(0x7f0000000000), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_vlan\x00', 'vcan0\x00', {0xff}, {}, 0x2f, 0x3, 0x15}, 0x0, 0xb8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x4}}, @common=@socket0={{0x20, 'socket\x00'}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x22, 0xd9, @empty, 0x4e23}}}, {{@ip={@loopback, @loopback, 0xffffffff, 0x0, 'tunl0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x29, 0x2, 0x50}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x3}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xe}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x3}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x38}, @rand_addr=0x64010100, 0xff, 0xffffffff, 'ip_vti0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x16}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xa}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[], 0x41}, 0x2, 0xf, [0x40, 0x1c, 0x1d, 0x38, 0x30, 0x3a, 0x5, 0x2, 0x4, 0x34, 0x10, 0x35, 0x5, 0xb, 0x11, 0x4], 0x1, 0x6}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x7}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x6, 0x7e, @dev={0xac, 0x14, 0x14, 0x1e}, 0x4e21}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000080)="ba2df74a36c47c850b5a5725d3742eb7", 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x4000000001c, &(0x7f00000001c0)={@remote}, 0x14) 13:25:34 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000280)={0x4, 0x3c, "6e2f8d", 0x0, 0x4}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x498, 0x240, 0x240, 0x240, 0x338, 0x180, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, &(0x7f0000000000), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_vlan\x00', 'vcan0\x00', {0xff}, {}, 0x2f, 0x3, 0x15}, 0x0, 0xb8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x4}}, @common=@socket0={{0x20, 'socket\x00'}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x22, 0xd9, @empty, 0x4e23}}}, {{@ip={@loopback, @loopback, 0xffffffff, 0x0, 'tunl0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x29, 0x2, 0x50}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x3}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xe}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x3}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x38}, @rand_addr=0x64010100, 0xff, 0xffffffff, 'ip_vti0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x16}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xa}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[], 0x41}, 0x2, 0xf, [0x40, 0x1c, 0x1d, 0x38, 0x30, 0x3a, 0x5, 0x2, 0x4, 0x34, 0x10, 0x35, 0x5, 0xb, 0x11, 0x4], 0x1, 0x6}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x7}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x6, 0x7e, @dev={0xac, 0x14, 0x14, 0x1e}, 0x4e21}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000080)="ba2df74a36c47c850b5a5725d3742eb7", 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x4000000001c, &(0x7f00000001c0)={@remote}, 0x14) [ 256.388217][ T8836] binder: BINDER_SET_CONTEXT_MGR already set [ 256.402519][ T8836] binder: 8832:8836 ioctl 40046207 0 returned -16 [ 256.419626][ T8836] binder: BINDER_SET_CONTEXT_MGR already set [ 256.429722][ T8836] binder: 8832:8836 ioctl 40046207 0 returned -16 [ 256.495511][ T8839] binder: 8837:8839 ioctl 800448f0 20000280 returned -22 [ 256.559824][ T8845] binder: BINDER_SET_CONTEXT_MGR already set [ 256.586553][ T8845] binder: 8838:8845 ioctl 40046207 0 returned -16 13:25:34 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000280)={0x4, 0x3c, "6e2f8d", 0x0, 0x4}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 256.733040][ T8849] binder: 8848:8849 ioctl 800448f0 20000280 returned -22 13:25:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(r0, 0x2, &(0x7f00000001c0)="c84b2cee288ca4a01ec614a11a1551ac47f2a01a3104b15940c3ba19705007d3cea8ca39f75c6aff5bae8b93327a2ccc43deae5018f2557c140e8a5ba343820d0622776944a7ed13c3bef93be9a8764ffff4db5c799e2f9602ef11bfdf6963e259cb368d03f66dbc9a4d0c7b5e63e30c12c1ee28c242b480c38ae27447b4fbb5e5116abad9") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000000000000000000000000061158800000000f89400c99600000000"], &(0x7f0000000100)='GPL\x00'}, 0x3b) 13:25:34 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x444}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0xfffff7d7}) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, [], 0x1}, 0x4}, 0x1c) r3 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_G_FBUF(r3, 0x8030560a, &(0x7f0000000000)={0x0, 0x0, 0x0}) ioctl$VIDIOC_S_AUDIO(r3, 0x40345622, &(0x7f0000000040)={0xf75b, "c601f646317297f76b6508f3c0e086af611184902f8142cf4268312b9157b040", 0x2}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_cache\x00') 13:25:34 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000280)={0x4, 0x3c, "6e2f8d", 0x0, 0x4}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 257.002833][ T8858] binder: 8856:8858 ioctl 800448f0 20000280 returned -22 13:25:35 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x1, 0x6c}]}, &(0x7f0000000100)='GPL\x00'}, 0x3b) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x11, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$ttys(0xc, 0x2, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x11, 0x0, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) 13:25:35 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000280)={0x4, 0x3c, "6e2f8d", 0x0, 0x4}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:35 executing program 1: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000100)={r2}, 0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value={r2, 0x60}, 0x8) r3 = socket(0x11, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0xfc, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xf0}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xff}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x2}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfff}, @IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x80}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}]}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x6}]}]}, 0xfc}}, 0x4008000) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x6, 0x80040) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r3, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r5, 0x0) read(r5, &(0x7f0000000180)=""/19, 0xfffffe47) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x808}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc) sendfile(r3, r4, 0x0, 0xffffffff010) 13:25:35 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) pread64(r1, &(0x7f00000000c0)=""/211, 0xd3, 0x9) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x11, 0x0, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, [], 0x7d}, 0x1}}, 0x24) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000a68000/0x3000)=nil, 0x3000, 0x2000001, 0x2010, 0xffffffffffffffff, 0xcd73f000) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) io_submit(0x0, 0x0, 0x0) 13:25:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r4, 0x405, 0x0, 0x0, {0x7e}, [@NL80211_ATTR_IFTYPE={0x8, 0xf}]}, 0x1c}}, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) 13:25:36 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r3, 0x7, &(0x7f00000003c0)={0x1}) ftruncate(r3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = epoll_create(0x5) epoll_wait(r4, &(0x7f0000000140)=[{}], 0x1, 0x80) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f00007a8000)) r5 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000300)='./control\x00', 0x81000050) inotify_rm_watch(0xffffffffffffffff, r5) inotify_rm_watch(0xffffffffffffffff, r5) [ 258.180414][ T8872] binder: 8864:8872 ioctl 800448f0 20000280 returned -22 [ 258.238992][ T27] audit: type=1804 audit(1587561936.028:8): pid=8874 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir313694985/syzkaller.t7RpsE/15/bus" dev="sda1" ino=15827 res=1 [ 258.242511][ T8870] binder: 8867:8870 ioctl 89ea 20000080 returned -22 13:25:36 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000280)={0x4, 0x3c, "6e2f8d", 0x0, 0x4}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 258.336083][ T8878] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 258.345428][ T27] audit: type=1804 audit(1587561936.028:9): pid=8874 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir313694985/syzkaller.t7RpsE/15/bus" dev="sda1" ino=15827 res=1 13:25:36 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet(0x10, 0x2, 0x0) [ 258.428398][ T8878] binder: 8867:8878 ioctl 89ea 20000080 returned -22 [ 258.456179][ T8878] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 258.495779][ T8885] binder: 8883:8885 ioctl 800448f0 20000280 returned -22 13:25:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sync() sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e48000038000505d25a80648c63940d0324fc60100010400a000000053582c137153e370948018000f01700d1bd", 0xffd7}], 0x1, 0x0, 0xfffffffffffffead}, 0x0) 13:25:36 executing program 4: io_setup(0x5f, &(0x7f00000000c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002}) io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000040), 0x65}]) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000080)={0x1, 0x3, 0xfff, 0x80, 0x8000}, 0x14) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r7 = dup2(r6, r2) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5387, &(0x7f0000000040)) 13:25:36 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000280)={0x4, 0x3c, "6e2f8d", 0x0, 0x4}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r4, 0x405, 0x0, 0x0, {0x7e}, [@NL80211_ATTR_IFTYPE={0x8, 0xf}]}, 0x1c}}, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) [ 258.732912][ T8896] binder: 8894:8896 ioctl 800448f0 20000280 returned -22 [ 258.788657][ T8893] binder: BINDER_SET_CONTEXT_MGR already set 13:25:36 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000280)={0x4, 0x3c, "6e2f8d", 0x0, 0x4}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 258.843692][ T8893] binder: 8891:8893 ioctl 40046207 0 returned -16 [ 258.871056][ T8897] binder: 8895:8897 ioctl 89ea 20000080 returned -22 13:25:36 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x101006, 0x0) r2 = memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="056304406bb7753d3a7eed9c9474eeb18936cd5e0f43069aad1f4c03ea8e475c1e91677e3172041a89c6071287f2e85dcc7dae94321ac0834fdfb1ffa9a9e3d246bb4cb6c1fff61052b625d5901a36271ac71bb6351bd346d3a7692ecb918645e83a0cb911ff72d5b0ed823456d5c6696caad9e469b4f3bf00008a2ef341637062fea0a501ba1298e853ba3a80fa85106b8757722281b8fd0c4f2ca82cc0061296b3c6f3face18fb39c447a03540be8a75248f872152a18e31b80ec43623188764"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x1) write$binfmt_aout(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="b29803000003"], 0x6) write$P9_RWRITE(r2, &(0x7f0000000080)={0xb}, 0xb) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x4) sendfile(r1, r2, &(0x7f0000000000), 0x5e976c45) read(0xffffffffffffffff, 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) [ 259.089917][ T8910] binder: 8908:8910 ioctl 800448f0 20000280 returned -22 [ 259.099328][ T8893] binder: BINDER_SET_CONTEXT_MGR already set [ 259.109346][ T8893] binder: 8891:8893 ioctl 40046207 0 returned -16 [ 259.122059][ T8900] binder: BINDER_SET_CONTEXT_MGR already set [ 259.129555][ T8900] binder: 8891:8900 ioctl 40046207 0 returned -16 13:25:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x4001, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffffffffffffff14, 0x0}, 0x200048d4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff000}], 0x1}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 259.138966][ T8913] binder: 8911:8913 ioctl 2400 1 returned -22 [ 259.242550][ T8922] binder: 8911:8922 ioctl 2400 1 returned -22 13:25:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x80002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x4, &(0x7f0000000000)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) io_setup(0x80000001, &(0x7f0000000240)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000204c6ba698884048eef01ccd706ac522a5bfcd2b2310771955403db8c0cc91fe8b"], 0x1}}, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:25:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sync() sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e48000038000505d25a80648c63940d0324fc60100010400a000000053582c137153e370948018000f01700d1bd", 0xffd7}], 0x1, 0x0, 0xfffffffffffffead}, 0x0) 13:25:38 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:38 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe43) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x141000, 0x0) 13:25:38 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002000000000000000000000000000008"], 0x1) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a20010076786a616e10000018000280140003"], 0x3}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 13:25:38 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x11, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={r3}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, r6, 0x5, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffffd}, @SEG6_ATTR_ALGID={0x5}]}, 0x30}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x4c, r6, 0x1, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x3f, 0x10001]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x1c}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1ff}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4005c}, 0x4004000) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x400, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xe}}}, 0x24}}, 0x0) [ 260.327861][ T8945] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.5'. 13:25:38 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe43) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x141000, 0x0) 13:25:38 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:38 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:38 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x11, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x0}, 0x20) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000100)={r4}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], 0x86) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 260.530832][ T8948] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 260.591151][ T8948] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 260.630989][ T8948] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 13:25:38 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x110, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x484a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xe, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x37) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002040)={r0, 0x0, &(0x7f0000001f80)=""/192}, 0x20) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x2, 0x70, 0x6, 0x1, 0x1, 0x9, 0x0, 0x1ff, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, 0x3, @perf_config_ext={0x10001, 0x800}, 0x10000, 0x8, 0x7cee, 0x7, 0x2, 0x9, 0x7}, r3, 0x4, r4, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000440)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r7 = dup2(r6, r5) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="8d52986fdfaabf263fe3393529854a43b2afe36a3fa1"], 0x0, 0x0, 0x0}) sendmsg$AUDIT_MAKE_EQUIV(r7, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x3f7, 0x1, 0x70bd2b, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}}, 0x8811) 13:25:38 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r3, r2) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 260.803532][ T8969] binder: BINDER_SET_CONTEXT_MGR already set [ 260.824024][ T8969] binder: 8968:8969 ioctl 40046207 0 returned -16 [ 260.912939][ T8971] binder: 8968:8971 unknown command 1872253581 [ 260.921736][ T8971] binder: 8968:8971 ioctl c0306201 20000280 returned -22 13:25:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000280)="baf80c432c9187f01766efbafc0cb8bd00ef0f320f624e10bad104ec26660ff85f50361b0f20c0663502000080f26eb800088ec00fae470b", 0x39}], 0x32, 0x51, 0x0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000004c0)={0x3, @bcast}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000003c0), &(0x7f0000000400)=0x8) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x2, 0xfd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$packet(0xffffffffffffffff, &(0x7f00000000c0)=""/181, 0xb5, 0x10022, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000180)="5500000042007f5f00fe01b2a4a2809302060300000000010000000039000b0035004068060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000340)={0x980000, 0x8, 0x5, r4, 0x0, &(0x7f0000000200)={0x9909dd, 0x4, [], @p_u32=&(0x7f00000001c0)=0x8}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1}, 0x1c) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f00000002c0), &(0x7f0000000300)=0x8) 13:25:38 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:38 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:38 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05ffffff7f00000000", @ANYRES64], 0x0, 0x0, 0x0}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x140f, 0x20, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text16={0x10, &(0x7f00000001c0)="0f21e60f9e4b000fae400a66b9800000c00f326635008000000f3066b8908c238766efbafc0c66edd3c90f0fc28e0f01ca0f01c50f4536e50e260f01c9", 0x3d}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) 13:25:38 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000040)=0x2c) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r8 = dup2(r7, r6) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$IMADDTIMER(r8, 0x80044940, &(0x7f00000000c0)) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xffffff31) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) 13:25:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_NET_NS_FD, @IFLA_PROMISCUITY={0x0, 0x1e, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x40004000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000340)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x4010) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_WEIGHT={0x8, 0xf, 0x8001}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r8, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r9, 0x84, 0x11, 0x0, 0x0) getsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000040)={@rand_addr, 0x0}, &(0x7f0000000080)=0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000300)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c010000180001012bbd7000fddbdf251d01050008000900", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="06e651e84844289ff90048000000008cfd01d9", @ANYRES32=r10, @ANYBLOB], 0x16c}}, 0x0) 13:25:39 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 261.335596][ T8993] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 13:25:39 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:39 executing program 5: r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000180)=[{}]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x7, 0x0, 0x3, 0x0, 0x0, 0x7f, 0x4200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = userfaultfd(0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x20}) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x80000000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 261.523610][ T9009] binder: 9005:9009 ioctl c018aa3f 200000c0 returned -22 13:25:39 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r6 = openat$cgroup_ro(r5, &(0x7f00000001c0)='cgroup.controllers\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) r7 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) read$midi(r7, &(0x7f0000000100)=""/142, 0x8e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x400}]}, 0x38}}, 0x0) 13:25:39 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x104}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x200000000000011, 0x3, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000100)={r3}, 0x8) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r3, 0xfffffffb}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) [ 261.569982][ T9009] binder: 9005:9009 ioctl c018aa3f 200000c0 returned -22 13:25:39 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:39 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x3ae}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x300}, 0x48) r1 = socket$inet(0x2, 0x6, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000040)={@broadcast, @broadcast}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x5ee, 0xe000000, &(0x7f00000000c0)="b9ff030000ffffff7f9e14f005051fffffff00004000630677fbac141433e000000162079f4b4d2f87e5feca6aab840213f2325f1a390101050a0100010000000000df74e30d7eabe773afef6f6e4798ab117e9f84fa406b913de8ad827a022e1faee50887dc302819a8a3d0cde36b67f337ce8eee124e061f8fea8ab95f1e8f99c7edea980697449b78569ea293c3eed3b28fc3205db63b2c65e77f19ab28c632cc80d9f2f37f9ba67174fffcb5244b0c909eb8e12116bebc47cf97d2ea8acadfb34ca580b64df7c800113e53bae401cd22f50072deabf93dd4d3e626", 0x0, 0x100, 0x0, 0x296, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x28) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000280)={0x9, 0x8, 0x5, 0x2, 0x6, 0x3, 0x1, 0x7, 0x6, 0x7, 0x4, 0x7, 0x80, 0x1b}, 0xe) 13:25:39 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:39 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 261.890650][ T8984] binder: 8981:8984 unknown command -251 [ 261.905000][ T8984] binder: 8981:8984 ioctl c0306201 20000280 returned -22 [ 262.074455][ T9023] binder: 9021:9023 ioctl c0306201 20000280 returned -14 [ 262.468737][ T8984] binder: 8981:8984 unknown command -251 [ 262.488782][ T8984] binder: 8981:8984 ioctl c0306201 20000280 returned -22 13:25:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000000011905000000000000000000000000240001001400010008000100ac1414aa08000200e00000000c0002000500010000000000240002000c000200050001000000000014000100080001000000000008000200000000000800070000"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x420800, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000040)={0x6000, 0x1000}) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 13:25:40 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000007f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="9f", 0x2bf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)='!', 0x1}], 0x1}}], 0x127ad, 0x0) r1 = accept4(r0, &(0x7f0000000040)=@tipc, &(0x7f00000000c0)=0x80, 0x800) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3fb, 0xa, 0x70bd2c, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008805}, 0x4000040) write$nbd(0xffffffffffffffff, 0x0, 0x0) 13:25:40 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:40 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000004000fb00400000002194dd0517a51a04ccc71729ebc860f7735d8ebc93b68333ace1b61d2d88afcba7e0ad2b8500d0f65506e376b13a9f962d71c7f446dd7ee79b4e04d25f616588cc4643fbb4b334d2bd1c403cab405bc28748dad187d0243e5baa12d68e0ebeae0b890c67eca53488d70b4d325a773ad6bc83abfff9da47a0823d91b047267d8b45ed9810f3aa8e105937d1acbd845d37346cea592300b526db2033c035aa29672cd81eed217a6c26ed8eca04"], 0x0, 0x15}, 0x20) r0 = socket(0xa, 0x1, 0x0) setsockopt(r0, 0x1, 0x20, &(0x7f00000000c0)="2699b3fcbefa5057449d19ac8e1c77f42551b78d205d08bf427e0d2b4f3ca27274f20e9465c50bd029fb0ca0f937f465e7580cd822e2c4caee0516011925b71c5c3f0c2a5e83a716c3dcddec49f14fec254fcb32ded3272e", 0x58) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x11, 0x0, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x3) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 13:25:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4138ae84, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) dup2(r5, r4) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="18630440"], 0x0, 0x0, 0x0}) r8 = dup2(r7, r6) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$TCGETS2(r8, 0x802c542a, &(0x7f0000000000)) 13:25:40 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sched_setscheduler(0x0, 0x0, 0x0) dup(r0) socket$inet(0x2, 0xa, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x186082) r2 = memfd_create(&(0x7f0000000200)=']selfeth1\x0f\x9e^\x00\x98\xdeG\xcc+\xe5R\x8d\x1d\f\n\x82\xbf\x96sg\xcf\xa7\x80\xca\xf3\xd4h4\x92\x8f\xdb\xdc0\xdcqo\v\xc3\x05\x02\x00R\x88!\x7fO\xbf4\x8f\xc0\xa1\xb6M*\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r2, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180d) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, 0x0, 0x20000102000007) pipe2(&(0x7f0000000000), 0x800) 13:25:40 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 262.799759][ T9066] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:40 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x28000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) dup3(r2, r3, 0x0) r5 = dup2(r1, r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x3, @remote}, @in={0x2, 0x4e20, @remote}], 0x20) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 262.928232][ T9076] syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) 13:25:40 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:40 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000680)="4eaec0b0", 0x4, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x0) keyctl$get_security(0x11, r3, 0x0, 0x0) r4 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)="56feab5722d18f38359b93323bdbe67d422e1cae1d6cd6fef6e27c135cc62feccf8a71e0a99d23063549b7c3bb43093016160bbee2781d332c03a91533b61f6b93763800ed36c5503c824aa16bb48d22db9d2971cac7517e554fd9169ad542637d17ce52419105fc46874a675bb8b3bc845bb68aef24df89e762574899431e3b5c32b6ce5f05b76b4145dfaf0ad9a3fe8ecbc9bdec3d2eb304afdffda71ab3d9994c71486c6473a1fbafee73db2ab3a2e1e17ef5adf3f825a6e3928275281a3a3f1fc6e4f910add83f0a8981c4a0fa827b5dcfcfd9985bb24bcc", 0xda, r3) r5 = add_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)="d8634de4c240adc9febbba013e31db2c94088944d8a93bcd0ede28d50b5698f3d98db55abfc579df073b8fc52fa42e4fedf60b527f7126c789196f17bfd54effc478e629d27ebc19fe3e0615043512df0c76639af5df76373365ce59cad92f6502e1f7cda8086e0747d0", 0x6a, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f0000000300)={r1, r4, r5}, &(0x7f0000000340)=""/4096, 0x1000, &(0x7f0000001400)={&(0x7f0000001340)={'sha512-avx2\x00'}, &(0x7f0000001380)="f2e5152eb333bd6dcc955e05dba09db14575cfaa6c7a54fbed66a2390687b7bfb8c7c38e802c595480fb8f86bafbb1a5107a1dc8a15627b3f184b35867f39db44f933140477241a71fc1601bd83ba4039aab2a19a88e64af1483e6877f95830f90528badea20cd5657", 0x69}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'geneve1\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4d}}) 13:25:40 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) socket$packet(0x11, 0x0, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008044500003c000000000006907800000000e000000200000000000800"/74], 0x0) 13:25:40 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:41 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2, 0x10, 0x1, 0x0, 0x3f44}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) gettid() syz_open_procfs(r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x5452, 0x7fffffffefff) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x5, 0x7, 0xf360, 0x80000001, 0x3}) sendmmsg(r2, &(0x7f00000038c0), 0x4000000000000a8, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) 13:25:41 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "1bbced14b1f37f7c", "f49fe5fcc3e25784abab02747a76da14fe4b144ca3663b4cf04b45f5693af328", "f1ad9729", "e5811c01646fa106"}, 0x38) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0}) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$SIOCAX25GETINFOOLD(r5, 0x89e9, &(0x7f0000000100)) ioctl$ASHMEM_PURGE_ALL_CACHES(r4, 0x770a, 0x0) sendto$inet6(r0, &(0x7f0000000080)="39a10e", 0x3, 0x4040841, 0x0, 0x0) 13:25:41 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_G_FBUF(r3, 0x8030560a, &(0x7f0000000000)={0x0, 0x0, 0x0}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x81, 0x3, 0x1, {0x2, @vbi={0x10000, 0x1, 0x79, 0x35323645, [0x76eb], [0x1ac, 0x101], 0x108}}, 0x9}) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000054b0000000000000000", @ANYRES32=r0, @ANYRESHEX=0x0], 0x3}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 13:25:41 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 263.463302][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:25:41 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 263.515571][ T9111] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 263.651655][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:25:41 executing program 0: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:41 executing program 0: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:41 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:41 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000008020d00002c20000000000000630a00ff0000000095000000000000002f74f0ce9286c7e351c996b687ad06d60ee822dccbffcde7e61dd8318d7d96fb3617158021ed079f3d334594c6cddb611c650fe0dbb44278a0eff699d9"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000080)={0xd, 0x800}) [ 264.292496][ T9136] binder: 9134:9136 ioctl 541c 20000080 returned -22 13:25:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="8f4b000000000000000005000000080001"], 0x3}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000420}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9a406ecc5b4afcad2aaaab783851bd6bf50108b96f59342333e5fd5a4973e8f3b47cb0291edf6dceb6732fe97950ca3ff6712e14965fdd373453b2f7ef7b7dae8b4f2e9683f8f38f17ae8603ba6c9c684571897a2107e5248271f71521ed92d1d4cd7dd6815ebe5fc400a5124341f17452065bf23e840acadb7a3073435fa5acf7a6d24062909acf8a3b228f3366cdffef983d0a9aebac094bb3d4b0553ffab5", @ANYRES16=r3, @ANYBLOB="080026bd7000fedbdf250a0000000400280004000b00"], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000081) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x104}, 0x40) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x14201, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r4, 0x80045510, &(0x7f00000002c0)=0x7) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaac46, &(0x7f0000000040)=[{&(0x7f0000000100)="906ded9c567a14606b6673176661740008040980", 0x14, 0x2}], 0x0, 0x0) [ 264.377338][ T9139] binder: 9134:9139 ioctl 541c 20000080 returned -22 13:25:42 executing program 0: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 264.643941][ T9142] binder: BINDER_SET_CONTEXT_MGR already set [ 264.649979][ T9142] binder: 9141:9142 ioctl 40046207 0 returned -16 13:25:42 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2, 0x10, 0x1, 0x0, 0x3f44}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) gettid() syz_open_procfs(r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x5452, 0x7fffffffefff) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x5, 0x7, 0xf360, 0x80000001, 0x3}) sendmmsg(r2, &(0x7f00000038c0), 0x4000000000000a8, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) 13:25:42 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r3, r2) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:42 executing program 0: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:42 executing program 2: r0 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, 0x0, &(0x7f0000000040)) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000080)) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000100)=0x3, 0x2) accept4$x25(r0, 0x0, &(0x7f0000000200), 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="fe98b6adb6e96d375d6ab7d36afc"], 0x0, 0x0, 0x0}) ioctl$BLKRRPART(r4, 0x125f, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x42000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 13:25:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x80000, 0x0) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001800)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3600f5a3", @ANYRES16=r3, @ANYBLOB="005b29bd7000ffdbdf25010000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="080e2dbd7000fbdbdf25010000000800020002000000080001000200000008000100020000000800010003000000"], 0x3}, 0x1, 0x0, 0x0, 0x24}, 0x24000001) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x11, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x11, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x11, 0x0, 0x0) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x4010}, {r4, 0x220}, {r5, 0x120}, {r0, 0x501}, {r6, 0x205}, {r1, 0x8224}], 0x6, 0x40000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x38}}, 0x0) 13:25:42 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0xc000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000280)={[], 0x0, 0xfffffff7, 0xeb, 0x2, 0x4ee6, 0xffffffffffffffff}) fanotify_mark(0xffffffffffffffff, 0x2000000000000011, 0x2, r1, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x44) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) r4 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x10001, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000140)={{0x3, 0x3, 0x6, 0x0, 0x1}}) [ 265.048680][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 265.048694][ T27] audit: type=1804 audit(1587561942.838:14): pid=9158 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir633427238/syzkaller.Bwv2VZ/24/bus" dev="sda1" ino=15888 res=1 13:25:42 executing program 0: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:43 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 265.199236][ T27] audit: type=1804 audit(1587561942.888:15): pid=9158 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir633427238/syzkaller.Bwv2VZ/24/bus" dev="sda1" ino=15888 res=1 13:25:43 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2, 0x10, 0x1, 0x0, 0x3f44}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) gettid() syz_open_procfs(r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x5452, 0x7fffffffefff) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x5, 0x7, 0xf360, 0x80000001, 0x3}) sendmmsg(r2, &(0x7f00000038c0), 0x4000000000000a8, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) [ 265.358098][ T27] audit: type=1804 audit(1587561942.908:16): pid=9158 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir633427238/syzkaller.Bwv2VZ/24/bus" dev="sda1" ino=15888 res=1 13:25:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @remote}, 0x10) io_setup(0x2, &(0x7f0000000140)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000080)={{0x29, @private=0xa010102, 0x4e20, 0x1, 'wrr\x00', 0x3, 0x80000001, 0x19}, {@broadcast, 0x4e21, 0x3, 0x79, 0x9, 0x7}}, 0x44) 13:25:43 executing program 0: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:43 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 265.508848][ T27] audit: type=1804 audit(1587561943.098:17): pid=9162 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir313694985/syzkaller.t7RpsE/25/file0/file0" dev="ramfs" ino=38645 res=1 [ 265.597358][ T27] audit: type=1804 audit(1587561943.368:18): pid=9163 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir633427238/syzkaller.Bwv2VZ/24/bus" dev="sda1" ino=15888 res=1 [ 265.676329][ T27] audit: type=1804 audit(1587561943.368:19): pid=9158 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir633427238/syzkaller.Bwv2VZ/24/bus" dev="sda1" ino=15888 res=1 [ 265.737786][ T27] audit: type=1804 audit(1587561943.368:20): pid=9182 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir633427238/syzkaller.Bwv2VZ/24/bus" dev="sda1" ino=15888 res=1 [ 265.850179][ T27] audit: type=1804 audit(1587561943.418:21): pid=9163 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir633427238/syzkaller.Bwv2VZ/24/bus" dev="sda1" ino=15888 res=1 13:25:44 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000180)=""/138) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$EVIOCSREP(r5, 0x40084503, &(0x7f0000000080)=[0x2, 0xf5]) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6e}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x203182, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) 13:25:44 executing program 2: r0 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, 0x0, &(0x7f0000000040)) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000080)) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000100)=0x3, 0x2) accept4$x25(r0, 0x0, &(0x7f0000000200), 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="fe98b6adb6e96d375d6ab7d36afc"], 0x0, 0x0, 0x0}) ioctl$BLKRRPART(r4, 0x125f, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x42000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 13:25:44 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x11, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x5b8c3bf9, @private2={0xfc, 0x2, [], 0x1}, 0x2}], 0x3b) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000100)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={r4, 0x5}, &(0x7f0000000100)=0x8) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="24000000140081563e06080a000f02000cff0100000060003f03546fabca1b4e7906a6bd", 0x24}], 0x1}, 0x0) 13:25:44 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:44 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 267.163173][ T27] audit: type=1804 audit(1587561944.958:22): pid=9202 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir633427238/syzkaller.Bwv2VZ/25/bus" dev="sda1" ino=15903 res=1 [ 267.190085][ T9205] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 13:25:45 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:45 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 267.294566][ T9208] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 267.309186][ T27] audit: type=1804 audit(1587561944.958:23): pid=9202 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir633427238/syzkaller.Bwv2VZ/25/bus" dev="sda1" ino=15903 res=1 [ 267.404596][ T9207] binder: 9206:9207 ioctl 80044501 20000180 returned -22 [ 267.418424][ T9210] binder: BINDER_SET_CONTEXT_MGR already set [ 267.451545][ T9210] binder: 9206:9210 ioctl 40046207 0 returned -16 [ 267.627157][ T9213] binder: 9206:9213 ioctl 80044501 20000180 returned -22 [ 267.644355][ T9213] binder: 9206:9213 ioctl 40084503 20000080 returned -22 13:25:45 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:46 executing program 1: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141142, 0x130) r2 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r2, 0x402, 0xb1c661d398500c73) fcntl$setownex(r2, 0xf, &(0x7f0000000080)) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ftruncate(r3, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:25:46 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:46 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000180)=""/138) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$EVIOCSREP(r5, 0x40084503, &(0x7f0000000080)=[0x2, 0xf5]) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6e}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x203182, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) 13:25:46 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:46 executing program 2: r0 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, 0x0, &(0x7f0000000040)) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000080)) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000100)=0x3, 0x2) accept4$x25(r0, 0x0, &(0x7f0000000200), 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="fe98b6adb6e96d375d6ab7d36afc"], 0x0, 0x0, 0x0}) ioctl$BLKRRPART(r4, 0x125f, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x42000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 13:25:46 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r4, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x2}}, &(0x7f0000000580)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r6}, 0x78) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r2, 0x10, &(0x7f0000000140)={&(0x7f0000000040)=""/238, 0xee, r5}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000540)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x80ffffff, 0x25}, [@ldst={0x7, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r7}, 0x78) 13:25:46 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 268.850246][ T9240] binder: BINDER_SET_CONTEXT_MGR already set 13:25:46 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 268.916696][ T9240] binder: 9232:9240 ioctl 40046207 0 returned -16 [ 268.920438][ T9237] binder: 9230:9237 ioctl 80044501 20000180 returned -22 [ 268.975516][ T9237] binder: BINDER_SET_CONTEXT_MGR already set [ 269.035328][ T9237] binder: 9230:9237 ioctl 40046207 0 returned -16 13:25:47 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "62aebad9f1ab9387a063ebee5bc484ae2e5e44bc"}, 0x15, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:47 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r7 = dup2(r6, r5) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r7, 0x40044104, &(0x7f0000000000)=0x10001) syz_mount_image$nfs(&(0x7f0000000240)='nfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)='udp\x00') 13:25:47 executing program 1: r0 = socket(0x0, 0x2, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000080)) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000100)=0x3, 0x2) accept4$x25(r0, 0x0, &(0x7f0000000240)=0x15, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x80006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x42000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="054304d9fe6ccd3255b9ae1209a7137940"], 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000040)='mand\x00', 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) [ 269.436639][ T9259] binder: 9257:9259 ioctl 80247008 20000080 returned -22 13:25:47 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:47 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:47 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) setresuid(r4, r2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0, 0x0, 0x0, 0x0, r2}}}, 0xb8}}, 0x0) 13:25:47 executing program 4: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:47 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:47 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000100)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x11, 0x0, 0x0) getsockname$inet6(r6, &(0x7f0000000040), &(0x7f00000000c0)=0x1c) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, r3, 0x10, 0x70bd25, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:25:47 executing program 1: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x2000000000003, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xff000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e600000631177fbac141440e0", 0x0, 0x9}, 0x28) 13:25:47 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x1000}, 0x90) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x41, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05630440", @ANYRESDEC=r6, @ANYRESHEX, @ANYRESOCT=r4], 0x0, 0x0, 0x0}) r7 = dup2(r5, r4) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x5fd8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000100)={r8, 0x4, "60f3428e"}, &(0x7f0000000140)=0xc) 13:25:47 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:47 executing program 4: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 270.285371][ T9291] binder: BINDER_SET_CONTEXT_MGR already set [ 270.318294][ T9291] binder: 9283:9291 ioctl 40046207 0 returned -16 13:25:48 executing program 4: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 270.363909][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 270.363922][ T27] audit: type=1804 audit(1587561948.159:32): pid=9290 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir051211271/syzkaller.svexQl/23/cgroup.controllers" dev="sda1" ino=15933 res=1 13:25:48 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:48 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "0e73a4e384c0a6a1", "5ae3c07f86b73c6cb201b64f0c63733b6671e20956066ec1651a347bb208a40d", "0bf1bd9e", "a6a0af992e9b41de"}, 0x38) ioctl$TCSETS2(r0, 0x541a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "bc09000000000100"}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r5, 0x300, 0x70bd2d, 0x8001, {}, [@TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x53e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd7d3}]}]}, 0x68}}, 0x800) prctl$PR_SET_TIMERSLACK(0x1d, 0x4) ptrace$peeksig(0x4209, r1, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000180)=[{}]) getpgrp(r1) 13:25:48 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:48 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 13:25:48 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000040)={0x3, 'tunl0\x00', {0x1}, 0x4}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r7, 0x6, 0x1f, &(0x7f0000000080)="0ad8031bcca52870b1831bb8bf7f4ff38fdd2d7285daac068c08c07e24e855d48dfdc03b481b738f5ae8230e23093809353c1a156d367d39bdb573d84e5dcb9c6d41e4f0d439eb1ea91a4bce6869acf1067761", 0x53) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$snddsp_control(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x2000002, 0x30, r6, 0x83000000) 13:25:48 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:48 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 271.003637][ T9314] binder: BINDER_SET_CONTEXT_MGR already set [ 271.018050][ T9314] binder: 9312:9314 ioctl 40046207 0 returned -16 [ 271.033930][ T9296] binder: BINDER_SET_CONTEXT_MGR already set [ 271.040166][ T9296] binder: 9283:9296 ioctl 40046207 0 returned -16 [ 271.056541][ T9329] binder: 9283:9329 unknown command 808464432 [ 271.087041][ T9329] binder: 9283:9329 ioctl c0306201 20000200 returned -22 13:25:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x1, 0xffffffffffffffff, &(0x7f0000000380)="6ef07cf14b7b71a6f22aa9936705900d7c5b3cd92b622a732f71580aa10c07bd9814813e528ddb508c7f1a65674546338b7eb3bcc34747ec3e5d0132da2f40a2c9beacdc62bd081e2057a54d55cb9b8c0f76233eed5eaad1d70d92e0255286e7818bee3ad5d5c9fc27611fa7bda80dcad79626bf3b3c5c142578f2e5123502085d39b082d2e2db4facdc5e2fc536a49ce4dd141c9404d1c0994526cf", 0x9c, 0xffffffffffffff01, 0x0, 0x2, r1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x8, 0x15da, 0xffffffffffffffff, &(0x7f0000000480)="f72fb85fb48eb01ee306a454cab842a7c3abe62f27d10be178c2ba14e2fb", 0x1e}]) syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r4 = syz_open_dev$cec(0x0, 0x3, 0x2) exit_group(0xa) r5 = syz_open_dev$cec(0x0, 0x3, 0x2) r6 = dup3(r5, r4, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000000)) r7 = socket$l2tp(0x2, 0x2, 0x73) open_by_handle_at(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="ad94076c21985506144100000000000000b07cb2b8b48db46b874114170449634889e16f09e8427a6676685aca74d3cdf81c446bb6e888ea5f0758adaa00"/74], 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000580)=ANY=[@ANYBLOB="6e617497b6832bf719dce4d1f62b15512d00000000000000000000000000000000000000000000000000000000001b0000000500000078030000d0010000a8000000d0010000a8000000b002000060030000600300006003000060030000a8000000050000000000000000000000e0000002e000000200000000000000007465616d5f736c6176655f31000000007665746830000000000000000000000000000000000000000000ef00000000000000000000000000000000000000000000000000000000007000a800000000000000000000000000000000000000000038004e45544d4150000000000000000000000000000000000000000000000000010000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000007000d00000000000000000000000000000000000000000006000434c5553544552495000000000000000000000000000000000000000000000000000aaaaaaaaaaaa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000626f6e645f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000b80000000000000000000000000000000000000000004800444e415400000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000b000000000000000000000000000000000000000000040004552524f5200000000000000000000000000000000000000000000000000874f6388202e6b8a181a43e0e7d60fa5f7276684821bf48486b3c75ab9c60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000003000feffffff00000000c452f3ca3bd22627ab824d591e5179a50aab302339ea3db0e118e77dc42dade3376ab74fee31bf8a8fd8d1a61af3152b2a1b3504190dc6b4c27e57f8873ca0999cfb371aa3046bedfdcb0494c48fa9169f8d4e7df5994490504200000000000000002845485f2683efd775a2fb6dcde9448cddb909fa711ed8e8fea609faccc610790cca6cc7db48021f546dd246d329674c2690464ce0c3525a44e936f50911cc96a741282fd39e19bba5eec4735cc1f5757206be9370a85900c3d7a3a7ee8c"], 0x3d8) r8 = accept4(r7, &(0x7f00000001c0)=@un=@abs, &(0x7f0000000240)=0x80, 0x800) getsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000280)=0xa4, &(0x7f00000002c0)=0x4) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000000)={0x6, 0x4, 0x4, 0x0, 0x800, {}, {0x0, 0x0, 0x8, 0x0, 0x3, 0x0, "46e3e572"}, 0x0, 0x4, @fd=r6, 0x1}) r9 = dup(r0) getsockopt$bt_sco_SCO_OPTIONS(r9, 0x11, 0x1, &(0x7f0000000080)=""/144, &(0x7f0000000180)=0x90) 13:25:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x11, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f00000000c0)) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x23, 0x0, "67da6d74bfacda1d8acecb6d46424f7cb17029c458978ed807f6eb465e3d58f32701000000a996febb0000004000000000000000a706a52b4300000200000000fb2e00008000"}, 0xd8) r5 = semget$private(0x0, 0x4, 0x409) semctl$GETALL(r5, 0x0, 0xd, &(0x7f00000004c0)=""/131) sendto$inet(r0, 0x0, 0x0, 0x1000000020000010, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRESOCT=r1], &(0x7f0000000380)=0x2) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000100)={0x0, 0xe6cb, 0x1003}, 0x3) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x4, 0x7, 0x506, 0xc302, 0x1, 0x8001, 0x8, {0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}}, 0xf8, 0x8, 0x80, 0x1, 0xfffffffe}}, &(0x7f0000000100)=0xb0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={r6, 0x1}, 0x8) 13:25:48 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:48 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c466000002ed8e4f96765ce27060300060000000000000000b738000000000035f4c38422a3bc822000050000000402030000000000400040000400b3d7c52ebf31a897ff080000000000090d00f8ffffffffffffff03000000000000000d60395a7088d7c200000000a1010001007ea85ca6574c9a992da4030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e7e916c840d410500000000000000f9dc89d1ffd9f2174407619e3a318378887fa2920041a24865a1316973981f6722bc679d3e85ca9d4f92014e2dcae7"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 13:25:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 13:25:49 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:49 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 271.235713][ T9338] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 271.267160][ T9339] ERROR: Domain ' /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.3 proc:/self/fd/3' not defined. 13:25:49 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) open(&(0x7f0000000080)='./bus\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000200)={r2, 0x3}, 0xc) ftruncate(r0, 0x48280) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000002c0)={0x3, @sliced={0x0, [0x0, 0x0, 0x0, 0x1, 0x0, 0x400, 0x7, 0xae, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x4, 0x0, 0x3, 0x3, 0xbac3, 0x0, 0x0, 0x0, 0x0, 0xffac, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf2f]}}) fdatasync(0xffffffffffffffff) 13:25:49 executing program 5: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe43) perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x70, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x0, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000840)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)={&(0x7f0000000100)='./file0\x00', r1}, 0x10) socket$kcm(0x29, 0x0, 0x0) 13:25:49 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:49 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r7 = dup2(r6, r5) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffdb8}, 0x48) 13:25:49 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 271.618963][ T27] audit: type=1804 audit(1587561949.409:33): pid=9361 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir313694985/syzkaller.t7RpsE/33/bus" dev="sda1" ino=15938 res=1 13:25:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x400000, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000002c0)=""/235) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x11, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000500)={&(0x7f00000003c0)=@llc={0x1a, 0x306, 0x6, 0x4, 0x1, 0xf4, @remote}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000440)="d34173848cda502ed05adb24359bd3a5e517c666f0f2e5d0ee7059397386c57d41950393e8c2ddbf1275a4f5eec817eeea092dfb5c6663", 0x37}], 0x1, &(0x7f00000004c0)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x30}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r2, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}}], 0xb7, 0x0, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x42000, 0x0) write$vhost_msg_v2(r3, &(0x7f00000001c0)={0x2, 0x0, {&(0x7f0000000040)=""/135, 0x87, &(0x7f0000000100)=""/138, 0x3, 0x1}}, 0x48) bind$llc(r2, &(0x7f0000000280), 0x10) sendmmsg(r2, &(0x7f00000001c0), 0x400000000000150, 0x0) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, 0x0) 13:25:49 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @loopback}}, 0x24) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 13:25:49 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:49 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x24, r7, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r7, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x34}}, 0x8084) r9 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8}, @IFLA_MTU={0x8}]}, 0x44}}, 0x0) [ 272.133262][ T27] audit: type=1804 audit(1587561949.929:34): pid=9358 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir313694985/syzkaller.t7RpsE/33/bus" dev="sda1" ino=15938 res=1 13:25:50 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:50 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:50 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:50 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0xc000, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) write$9p(r1, &(0x7f0000000580)="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", 0x3b0) r7 = socket$unix(0x1, 0x2, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendfile(r1, r2, 0x0, 0x10000) 13:25:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) vmsplice(r0, &(0x7f0000002080)=[{&(0x7f0000000040)="18ff8929326b3df0c83c7ff5a577a40b0a060e80674a8fb0f4ebf4a0215111253b25339a19534a527d", 0x29}, {&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="082bc5e6b53731d8f0eb6d4902b375f884104671e1a35a7ccab728148690ff841dd7ceb674b9b70e2f60d99e49785ebce7416b8aecddc5c096d8c02b12079f46ed87b2b9408a7d41a08c546c1903df8744781254a2c9628a69f8436aed941f5e42ef6a5cdf4d63d0b5010bd7e641b67ef1476fecf226acc82c4a940e841d008979e8688dff424bddeb2d0bda957e6a816f35b1167d716ac4d7d3722df4c56c65dad7abb9527b76e04ba1b2428693dd6b7cdba2c55de230e273223abf93994eb3731b9dd889591378e60ef55a88aeef090abda29811e5b488785b100fb51f679d8b6731f6d6ec8a9046dab60acece5528f349165f112f382bc72cb6d31b9561415fc4dac1133721bbb094d15b7add6046cc9749f187e3899c6fa3cddd80c98cebb94f7a1488759f7dfe32ef6c3ea047c08adbb453ccb234fe44cb295275490bdc4b0a439ff6887f2fdf23569db1dabb73c38abbdd44a8d644a45831e8306c0a405be25c155bdc6db10c71fe34e1316505b5e204e1cf1f57753920c4470d15d9fc445724510738e1fb099a8d45e09538181e03c9a6e699aed02ee1c8378340ea1187fb4a01443317dc69c4c29e08d44cc4f799451da4a1de946eac8bb4b8f1f5f1b5b8f70edc39e90d6c194ff5cdde526f1cfa440568a1c1d8012e0ad6438460252ba2ea835ae243e210840dc990b76104a53a2c8f9c69643d4d44192ca0ffeda94ec45349b7441f5c4451018bcee6e8e94a90a43c2f0aecfabfd1d5c714e7a3dc67be3fe159dfc0acac8c3af626ba5ab64fce1b4d81e4b7162210b422c360a2e3ea4c7937b3fa16c7bd8bd0951148a634f241f9326894214c11a12e30a0adbdc39f897170157581c73011a1349ca5648f50a1543eb9b5583768358684c4e0b682dd8399789a872e87d512be0ec06bd1c03dafe1102fccf878d3cac59f4d7fdb259fd0bc093164da4e5d824ee23a63c82f899a50eccaa6bd80d5ac2faf3327328fb462f6256b08729395798371f56e6fe73925a4ea35880116580127d313ce68cb5784874348b47ead060d08a055ad06d05bdcb968f4c4a71ab583b2028efc1c3bdc51f47e0b1249afdeff869fbf7d6a6985f189b02ce727927f7e1194251d995c05e8692e964383d309b52b5d7503f0ad9a0a5650c60e673907bd9cef168d58e51e80c5f13a0c75fef1d91a83f01988952c01ab8a67ec25ddf3745eeb2b738906f8cc030d6a894fd2e1e3fca80d00f4895ae97af9549f11f06afdee21fd29911edfcab5dcb45933566a57a1c4250ba1415e91d6662ace857353fe653358cb471ccb814ed899aefcd79b2967777a08f39fb05bae01b207a97fa68e6b7e4e45a32311e6b0acc93858caf2d3e010e1982de872b843c545c37dacb35ac19086cf6bb33e5d77ac2217830bb0e64708694be686cf202b6eddf685ac8fcf448ce040bf8dcca5ddfe9b0ca110df7821bad6dbc114d5226f9920e9a6b75b6ab43f90b56e1f217d0065e916f594acce74df73778cb6564aedd2cf581b8502138c6fe2d6291b50848db1330af178be14862ca77792fd204a10625a9e4ac2430a05bb82ddc2d75a804a62cf86486a2ff5ff2dd1145cd4969d09331757840fa4b7aa118fb1dd5c4899cbd4d8144bbe7da5f414dc57dfe0edfb1837c16c6f55671f7a6424c7ef8b8dd7c98a61419543fe2394767cffff3a5ec4b3b76cbbfb0d78c959082537cc932822ccc37633ced99047c20724b3d5f3c5662569622170c0ff7858a5f1981a0a6b0b31dd4d734b52be716981fb5790a963206ea6791b8f57d576859487457186578c295cd2b745e22fddb17fefa96f49281c92a8a4598c76bc0e2754e2096a7576cb47dba1937d3c31dfdbaaad009ca744c66735edeb2c4e95d4a288addb43e43ade8d36864d0621920bb3e11de8a685f80aed8275da25a7fb71161428c3b36e4f14c91b74a44e29c2c9a9c539ec4748c8e330774af619c7e8418a254a6b7062bc00cb9f769b2b8ec4d0142014805f77669eea92e3404e537b19950aa2343cfd61b3ed5344366a612f82a26b7eac5d1c8c39613076871e89b75d0fc0e90605f80662d11e41bc8edcf0757267091ac1277da21b2063882439d77f69bf30b5d2b5be7b43d9c29578da18a13d7eb192d9789c42725cabd2e69e5124a5c14c43745b2ab2f9085575f22b813dee009d7be421e1058ddb637b36ec719a5c00c493cc8130d8c95be1fd247e4a9c1f09ec0ff1dc2db9918c9f1e3f3097f36f627919b4db05bb738a4c71f6dc34dddc0bd394621304664c6a2c0cf995f0d7989422dc76732ad608888e17ea041f1c2cedefe9d78990bfaee9051b5ba99376093a7aa70c69c5c8491a8e408ac5965d20fd9dd621c6acaad29af892202da1503ff7f63e9baffcf3501d9cd4b80d6701453c8234325d48711547f18ef9ad6b343d25494183b79cd79c30b7bff14e7eb78ae0d446da9c961095e975c5cb32939b860118e67609c14877f435ae46a1decb9445171096bfb0d7b2044532eae0f993066145a01e674f65ccd39d4115e4c1e69a21c04c7dd320de6966c350826bf5da451437690f0d43aec9040f3255c73434a180b39a8691e756412b7d51be23f7a34211a106195de85f96de00ea71fea100746bba09c217fc7362eca5dcc8cc52ba716351451ab99f2ec21e2272ee2873a256883e92269e8fbd7eade21b8da61347710ef65a5f4e54d89a4f7d82588d896e20b63a174f50302dfe3705ba8f209938e6ced9e1bb5ca43ae059e8feb4b33955325de09dc393baea76c6f7c17bb37e7e166e0035a38172118d8aeb3fb7bb7715fa761290894c9bcc4fe727d186da8f08dcd44c44a9979c61b00c84a0539002a8bb9b81775edca8abdb5a348401c2bb73d6367a530df7729d2af63bb09319629cfe840ea3bcaba0b196435bbccbcc42d0a68427c5458435f1fcaa22512d73e067424e2ef9908db05fce2d8c336c2c469df4d236864f450c2b2f03c0f52bd6c53421f3a47b7fb59f5bbb42b1e688c32247c2c1af2e64eccaf57cb7619807490941ba0edf3566fcbf2c0a269a595e60c3cfa21b1b0a135777591860aa069ad84333505e1de8378d07e6653a6dbcb3ef80f8d09acfeef3550ca3b84ba8fc97c3fd7544ba623bf4bfc2f0a50d65e294a58ad1ea553a5710ee69c27205dde2c59bd0aa6b0658d8bf334020fb92a547e94a318050741e1efa4f15e4e7dd27b1961d37af067aab6d0a55426ffca89ea5cef5e042a0b2da1d275bd0f8c9772eed9169c401b0596bacb0556887e51c85345eff4ea0c247c5925a59823ce14e024c0a4a83ccb17aca0262db94cbdb7170ee84c10f67695b35a40251d6275404dbd3d54af8dae30be2cc45ff1cbf307535abd62569cc966693c2e2ce1b6c2f5884c7cb4aaabd69830e2c0184ca345b4008e404fc244e55f278ef42aaaa89301959ef219294645056b5a29cfbadb88495b1682a917b8544f26437451fec9dc56524dfba55f0f5648ba39206efc86e905e2771c8ea7e6fd995ff7df593ee850fc77f540b0747e15a28e760f5a0abe86f55206a89d9e241b96260b726140cdb6f7815fdd572b952378b8c6e6f2a7d141bec98b7d230551e7ee05b66caaf8f23c8e5a65358084b139f804f9db1e14547bec138aaa00fe8da6fb08f0e2d2267f611d15b3cefd5154817d4d84fdff626d223091f8926995360a1fdbf749afe3d45d76012c47f8669ca03ebd29481abfdb1818888dd9691becf115e5ff0c4b79d47b66b25c9c538c16850a50a506d837fb2af8a144f940d1a5041904954b13776c6df7e913558e463679d83ec097cf30a79b6bd4dc51c6730883686dc05e7a927ddbb448bdc3ff0c69c79e86de4ede47ba7e0774caca2dc9cb3b713b9087ed1e54526f2f72ebbd12b397eb9ca6679b5bff8aca921deb4ced7e9fc7533fbb76cf9c448195bba43cc0c339fd74a97442dfa7115dd34c8ed566b8aec077a7fc37bce355fc4e92f7acfa699d8e11c4f268da035302ec73bf8e2da3668d9d8608c1ba4b84c9ba3fe4571ba54e1c8884e416e436289b7194587215665bd36f2d29ef4db0daf4bbab6a65e495ada4d6bcac9dc6e3aed7605e1ba60c90a7ddd09faf052a3c628b07619475a926f287c0a10452d3f82633ba083c813d983af163764aaf0bf6100b1d61e9918dacccb0c93ab2f46025238506d16f6674ccdc2d328ee5b521a5e7d92912310144214931953210504685752f1ef6102a9bc5c030dab50b20950aaff643e17f74c9a0536c540bb8d490641852ed7fb2adf20802bf6a80d10243ef012059942704832273fb217cff765257d59fa82864bbe525126040e8fb730cbc0d639bcef1dde4bd0158f99806f8cea5e948635b119f93e802ed75e12e21512affcb082d2423fc4345f503ace013704130d6c062cd828b374b6417fae624d4ab2db9eb5eeb840738ef049a462fd1b08f7fa47028de6fb7cc73a35b435795900371f94c95de90673688bcd7bbadb35996287615b16293035011fb78a3833ad235154bf778f59dd5cf0588865165bd0c2e36a1f3bfcb8ed797bca8b802daa6d8bdab24b14ec9d60324fb89468a99a59039ce7057027b4cee35372f20917d9a24c1fc278bab49ac3110c010d5d19d332bb003514b4d325129ddb967f19f2f20310e5bf17642fe08e46be03170024001a9df5ad60cbb5aaa0d169ae1bb7ff791e42e1c2e5d6c176115bcc3a93e9fb7433d8ab3722e65eccba9102e4ce98185254d110518bb5f0834532bc3af93dd7c7a20ebe591e8e36a01a28c0a9924cf13bfafc4c2d692649f9e45c534b01d9c4dc5dbf5f8f1067a34524ca60956ac968ddcb5168bbe3777d5c8d9554a95685dbc31a8e3065e6cfc140c33cdc41632d07d580eee5fe2b60a188e48416caa806cca77610ac086d04feb0b04319274b5b030b36de722f25d5e15a024753c935554a0a18a77850b72ccf4c666aaf2dc18f58fc3e1f2c4d5d1fb781463d0ccf7c034f451825af5a62fc83c87347c1223972080a9394bcb10b334eebffde69e82a2b4938f55648352d2d5b972c5b08922c065b771b781a873e83dbc9ecb46483013dbd03e17594d2b246d96b326e5ed9e5e49b05c5ded810763adeab66c0c8c8258a25615895563f2887dfd0a3c55db3e2074efb059220c4f260fe7fd3426873c062435760785546b0f072084b368258599191f5a71d95994cff858191f4dfef2feb38f4c82ae5eef19491769b0ec32c076867f0d5c98be1e8b9120104f79b2c7c312e3fd993fc51055738ca3b583b584956681af128eb4bbd5bbd3f243e3463cbad581e142dd8ba31b2bcddd6ca81897d6bcfa30a4fc70d191515d5c0cef57ca87b6b8e95a0a78da87449e8b7485dc45ab436fc686a796ed2f2556024649f498750ced8cc77fedbed08eb3b647ba8f46857d5b6c3cf08934a1acabbc97c139dfad6a0b47ab75f20f76637aaad4027578c19165f4f00380d8d67e09c7c3f706c37ffb8cec0c513ecc54a5ff048415747e1177d29723e556da357676d1761c975b307086899fb40808fa70a9f503df0842bbfdb6299413b3a1d71678463187016415505c5cd5355b880aacb401393d8ae87473d8cc5d97b71a3e217d6a85848bd69de300afe9422aa701e592d2ac5a02e796d6c293b26c166784f501d268fa33c320d32c5d951b8fbb360a0e10984d49e2d338a24707ce9bb32af0f4a722b73d80e582ee9323bb5aedddb56d8129c1058aab051eb7c7a9ed2ee4afc2d6ccd1205ca265bac0c1572e673d1a306a43e8beaa48b5c04b7", 0x1000}], 0x3, 0x2) pipe(0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 13:25:50 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 272.515794][ T27] audit: type=1804 audit(1587561950.309:35): pid=9393 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir633427238/syzkaller.Bwv2VZ/30/file0/file0" dev="loop2" ino=24 res=1 [ 272.548291][ T9393] binder: BINDER_SET_CONTEXT_MGR already set [ 272.584932][ T9393] binder: 9389:9393 ioctl 40046207 0 returned -16 13:25:50 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:50 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 272.676384][ T27] audit: type=1800 audit(1587561950.339:36): pid=9393 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="loop2" ino=24 res=0 13:25:50 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) setsockopt$bt_hci_HCI_TIME_STAMP(r8, 0x0, 0x3, &(0x7f0000000040)=0x80000001, 0x4) ioctl$TCSETS(r7, 0x40045431, &(0x7f00005befdc)) r9 = syz_open_pts(r7, 0x0) r10 = open(&(0x7f0000000100)='./file1\x00', 0x40, 0x58) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0x2) r11 = fcntl$dupfd(r9, 0x0, r6) syz_kvm_setup_cpu$x86(r11, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 13:25:50 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x11, 0x0, 0x0) ioctl$FICLONE(r1, 0x40049409, r3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x22, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 13:25:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ipv6_route\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/166, 0xa6}], 0x1, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "cc76cdcf5dcf3db12002200000000000660100"}) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setfsgid(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setfsgid(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setfsgid(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setfsgid(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setfsgid(r10) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000500)={{}, {0x1, 0x4}, [{}, {0x2, 0x3}, {}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x7}, {0x2, 0x3}, {0x2, 0x6}, {0x2, 0x3}], {0x4, 0x3}, [{0x8, 0x6, r2}, {0x8, 0x0, r4}, {0x8, 0x1, r6}, {0x8, 0x7, r8}, {0x8, 0x0, r10}], {}, {0x20, 0x3}}, 0x94, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1048000000004c42, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100006cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 13:25:50 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x40}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:50 executing program 5: r0 = socket$inet6(0xa, 0xa, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0x103, 0x1}, 0x20) socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xffffffffffffff37) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000001c0)={0x0, 'vlan0\x00', {}, 0x3ff}) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f00000005c0), 0x4) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000380)={0xa, 0x4e22, 0x80000, @local}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="fe787b3445231052d17a730f5ccf6585dfacd88da895e8e47157608eae9766213e62b35edfc549960a30dcc23cc9c328a316aca70edd277707803f17b8d9bf710834e8a0d6e75d179a4425d00f57c5c2d9a306f259daccf6dc3d7d5ca9ca82422cf8959e47922491d1370e8fa013b12a7dc390bb8142d976f150afd7b621c6eb033ada610b89b27191620b7b2c5f92cec9be39e61d4d899456fde5f6961bd266a378f36af1921fb218c5d0cc4ab0d8d426cb0ce4180404ce3c7da0a7cf"], 0x44}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r2, r3, &(0x7f0000000240)=0x202, 0x4000000000dc) r4 = socket$netlink(0x10, 0x3, 0x13) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000000c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00b87e4427aab84eff8a90e2cb3ae92dc482fc5c94ae0f9adf1286220403b5", @ANYRES16=r5, @ANYBLOB="10002bbd700005002fffffff07003b000100000005003800000000050000000000000000050038000000000008003a0003000000", @ANYBLOB="b882665c0be7140bb2ebe627066bd3831dcea4ff5ad9b76290d3ef8e88059b", @ANYRESOCT=r4], 0x5}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="f01792ce", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000100)={r7}, 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080)={r7, 0x85e}, &(0x7f0000000280)=0x8) 13:25:50 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x40}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:50 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 273.081593][ T9419] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended 13:25:50 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="726177000000b5f61df40f5e6be32e5028524bf400000000000000c0eb981c30191b5ea7f000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000e"], 0x48) [ 273.150390][ T9419] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 273.185669][ T9419] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 273.199494][ T9419] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 13:25:51 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x40}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 273.242389][ T9419] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24389!=0) [ 273.267099][ T9419] EXT4-fs error (device loop1): ext4_fill_super:4567: inode #2: comm syz-executor.1: iget: bogus i_mode (30060) [ 273.291781][ T9419] EXT4-fs (loop1): get root inode failed [ 273.297762][ T9419] EXT4-fs (loop1): mount failed 13:25:51 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x1f}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x2e4, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f0000000100)) ptrace(0x10, r5) ptrace$peeksig(0x4209, r5, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000180)=[{}]) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000006c0)={0x1f, 0x1, {r5}, {r7}, 0xffffffffffffcb9d, 0x5}) syz_mount_image$exfat(&(0x7f0000000000)='exfat\x00', &(0x7f0000000140)='./file0\x00', 0x3, 0x7, &(0x7f0000000600)=[{&(0x7f0000000180)="18b476537e21b5e03e9b71cfa221dbc61baae0b5c05dfffa8a5ee9bf", 0x1c, 0x4}, {&(0x7f00000001c0)="508cea3a8d9a04422909883b968a24489377cdaa2520cbe8ae01178c2cb1904d3ca3571b", 0x24, 0x101}, {&(0x7f0000000380)="10ceec895d9801314e67596812928ed395d562364fd8e192d8d4338181699ecba7cd13a23aa512467e20a1acb20b086902f0c541a4c01ca40eb2b1a57e8cac24fc2a7a4968f4f733576b17a576d7e4344cc02f64b73d740fe9cd34d6709273710d840adc24d1dcdba427f81094dce8d36e494974c3202d6e0ad2dab3e1bacd777c63ed1021bb8ac5cabaef0b0fd15eb9e12bae77dcf639eb9d19", 0x9a, 0x5}, {&(0x7f0000000200)="1bc48e6b7e32cef9fe05bf1b5466e4ae219ba78c41da9725a09e172e94762e57d4cdbc55ff90ddec665a16524f99464c475ea8d9009307cd73450054a75f", 0x3e, 0x6}, {&(0x7f0000000440)="13c32cc7e84207e4e11a7f138ef972683b2f6e0b60d2426f1d93f96879ad94be4e77a955085da07288bef9795c8859503f4a6bea899cb962bb39deae84f2acbbbb2d255c92c9cf7980656f2720995e52aa2308569551fc0db60c06b0c3de7afdf31cf9345fe1d6dac76caaf50303eb768c97fe825b3976d6ce90d9382f71738efc9855153e912dcec0d970c803e7557e886d6d04d8b2f0a7aa58c83c8b6f503de5ed375fc3b61e1febe2cbcb6b49cdb781d730bd2d4ccb1173ad323963c988b941a8093649e18db50cda0e0816db1488cf0e8c0f60ab86dc6dc1320b12d5dc01bcff66dddfca4a", 0xe7, 0x8}, {&(0x7f0000000240), 0x0, 0x200}, {&(0x7f0000000540)="a83dbc6cd1e7e9eb1272605822a01fef3991815122300d90d14cc666c6ca3e2da1920dc50b729eed317b1571d2d98369048b35486fbcf7cf499f8d131b25ab7e7c38a469da2f1de6594acaa955aa9e4b091acc7503fe10dce649553167869b510b100a89b7bb97670877cbeef10496688839689d53ec673596d00bdba79ec8c8c474d83a977f609ceca8dbfe58ea6ecb04a964663c6f7e4a5420d46d8896c0facb9a67a7836b3e8c67c5068d0fb08abef911ad488e7d2f306de1f4a0e80542", 0xbf, 0x4ab9}], 0x100046, &(0x7f0000000700)={[{@errors_remount='errors=remount-ro'}, {@gid={'gid'}}], [{@uid_eq={'uid', 0x3d, r8}}, {@pcr={'pcr', 0x3d, 0x14}}]}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a12b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}, 0xd000000}], 0x400000000000132, 0x4000000) 13:25:51 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:51 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:51 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xe8000, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8001}, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000480)={0x8, {{0x2, 0x0, @rand_addr=0x64010100}}, {{0x2, 0x4e24, @private}}}, 0x104) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800e00000000300000000000000000000000000008e15"], 0x0, 0x1b}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440)='./file0\x00') syz_genetlink_get_family_id$l2tp(0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 13:25:51 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:51 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_G_FBUF(r3, 0x8030560a, &(0x7f0000000000)={0x0, 0x0, 0x0}) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000000)={0x101, 0x9, 0x36, "c3d38e21112716fabab6ac5620d76f837a33d329b4eee1bed1e94bb6953570a2533cda28650e601d3c4a7be5c3f3e0dccc8196480fb8dc0013413180", 0x1b, "5e397c48a5de096876665c70a2853ad7a5cc75fb9674b1234bd5117ae99e52b3f0f523a43c7c3615c00082b8923c278d625df9f57578babbd61a9b51", 0x28}) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4020000}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x11, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x4ae, 0x10000) syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00') sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00'/16, @ANYRES32=0x0, @ANYBLOB="db80833c00120608000100767469001400028008000400ac1e000108000100", @ANYRES32=0x0, @ANYRESHEX=r5, @ANYRES32=0x0, @ANYBLOB="5a7eaf955feb11"], 0x7}}, 0x0) 13:25:51 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x400000) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x10) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000040)) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000480)={0x0, 0x9e}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x2e4, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0xdd) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) creat(0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x14, 0x0, 0x0) 13:25:51 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:51 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:51 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upperdir=./file0,lower`ir=./file0,workdir=./file1\\\x00']) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 13:25:52 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 274.285705][ T9484] overlayfs: unrecognized mount option "lower`ir=./file0" or missing value 13:25:52 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) mknod(&(0x7f0000000380)='./bus\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 13:25:52 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 274.359484][ T9489] overlayfs: unrecognized mount option "lower`ir=./file0" or missing value 13:25:52 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 274.573143][ T9495] binder: 9492:9495 ioctl 802c542a 20000040 returned -22 [ 274.703964][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 274.761967][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 274.772201][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 275.127746][ T9495] binder: 9492:9495 ioctl 802c542a 20000040 returned -22 [ 275.142532][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 275.152637][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 275.160225][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 13:25:54 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0xcd, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000100)) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0xf, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x19, 0x0) 13:25:54 executing program 2: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r0, 0xc91add0bf88807dd, 0x0, 0x10000000, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x24000014}, 0x0) 13:25:54 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:54 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000000)=0x3, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000040)=0x40, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0xfffffffa, 0x200}, {0x79, 0x3}], r4}, 0x18, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) socket$inet_dccp(0x2, 0x6, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 13:25:54 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:54 executing program 2: ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x80, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 13:25:54 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x11, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x11, 0x0, 0x0) r2 = accept(r1, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @private2}, &(0x7f00000001c0)=0x80) socket$inet_sctp(0x2, 0x5, 0x84) flock(r2, 0x2) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0x7, 0x0, 0x0, 0x82c022, &(0x7f0000000140)=ANY=[@ANYRES64, @ANYBLOB="eb39aacaecf6e64ff88834714bb21325bebf48d3757dbf64255d2f438f12ddab7da0d616afba45903f44fa6af7dc03aafdaade538fba2a7528bda901cf70a50d116fba3e0da828c8c335d792b6", @ANYRESOCT=r0, @ANYRES16=r2]) 13:25:54 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:54 executing program 5: clone3(&(0x7f0000000400)={0x29000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x340, 0x0, 0x0, 0x148, 0x0, 0x6800, 0x2a8, 0x2a8, 0x2a8, 0x2a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'bond_slave_1\x00', {0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x7}}}, @common=@unspec=@devgroup={{0x38, 'devgroup\x00'}, {0x4}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0x100, 0x160, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz1\x00'}}, @common=@set={{0x40, 'set\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c9) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/100) [ 276.768670][ T9540] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD 13:25:54 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:54 executing program 5: process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4200, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000100)=0x10, 0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x5) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='ceph\x00', 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x0) 13:25:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="ca439075aad355d0b48605630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') close(0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000100)={r5}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000033c0)={r5, 0xc0, &(0x7f0000003300)=[@in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e23, @private=0xa010100}, @in6={0xa, 0x4e20, 0x7, @loopback, 0xa3d}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x10e8}, @in={0x2, 0x4e20, @private=0xa010100}, @in6={0xa, 0x4e23, 0x10000, @private0, 0x4}, @in6={0xa, 0x4e22, 0x0, @remote}]}, &(0x7f0000003400)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000003440)={0x401, 0x0, 0x7ff, 0x5, r6}, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6e591e54", @ANYRES16=r3, @ANYBLOB="000127bd7000fcdbdf251d0000000c0099004000000003000000"], 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x402}, 0x10) execve(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)=[&(0x7f0000000080)='-\\\x00'], &(0x7f0000000200)=[&(0x7f0000000100)='trusted\'(*)*\x00', &(0x7f0000000140)='#}\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='\x00']) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0xaf386005, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 276.842470][ T9535] IPVS: ftp: loaded support on port[0] = 21 13:25:54 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:54 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 277.019905][ T9552] binder: 9545:9552 unknown command 1972388810 [ 277.059672][ T9547] ceph: No source [ 277.067252][ T9552] binder: 9545:9552 ioctl c0306201 20000200 returned -22 13:25:54 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 277.136739][ T9552] binder: BINDER_SET_CONTEXT_MGR already set [ 277.147143][ T9552] binder: 9545:9552 ioctl 40046207 0 returned -16 13:25:55 executing program 5: process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4200, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000100)=0x10, 0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x5) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='ceph\x00', 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x0) 13:25:55 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 277.318361][ T9585] IPVS: ftp: loaded support on port[0] = 21 [ 277.433095][ T3724] tipc: TX() has been purged, node left! [ 277.434258][ T9588] ceph: No source 13:25:55 executing program 2: ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8, 0x181041) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)={0x7b, 0x3, 0x4, 0x70000, 0x1, {0x0, 0xea60}, {0x3, 0x0, 0x1, 0x40, 0x1, 0x12, "d62bbdfa"}, 0x5, 0x2, @userptr=0x6, 0x80, 0x0, r0}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'hsr0\x00'}) 13:25:55 executing program 1: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="15000000e5ffff018000e80700395032303030c713"], 0x15) write$P9_RLINK(r1, &(0x7f0000000000)={0x7, 0x47, 0x1}, 0x7) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x40050, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug'}}, {@noextend='noextend'}, {@posixacl='posixacl'}]}}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$PPPIOCSMRRU(r5, 0x4004743b, &(0x7f00000000c0)=0x3) 13:25:55 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x40}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:55 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:55 executing program 5: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="4000000058060077e17973"]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) [ 277.687824][ T9619] tmpfs: Unknown parameter '@' [ 277.688954][ T9616] binder: 9612:9616 ioctl 4004743b 200000c0 returned -22 13:25:55 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(0x0) 13:25:55 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x40}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000001400)="66b8000000000f23c00f21f86635020000000f23f8f00fba3d090f01df0fdc754c0f01b449000f20c06635080000000f22c066b91e0b000066b8b98a000066ba000000000f30ba210066b87700000066efd6266690", 0x55}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="f7620c40"], 0x0, 0x0, 0x0}) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="05639c128ee806ddf394239b49bd1795676b6d1b13285bc902a8c98c570909bacb266b698cf591df6e428a734132f07116d5a0c138de1d7f1cd2ed6d562a087ae6d50d28663e3452776c456e12427ba678a4984c5e96bcdabe1505221985fd95cf582d109f4470"], 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x40, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x6, 0xaead8df1043ba3ce, 0x3f80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x36], 0x0, 0x10}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$KVM_PPC_GET_PVINFO(r6, 0x4080aea1, &(0x7f0000000380)=""/4096) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 277.797882][ T9619] tmpfs: Unknown parameter '@' 13:25:55 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/current\x00') ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000100)) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x378, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = accept$alg(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001700)={'batadv_slave_1\x00', r6}) 13:25:55 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x40}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:55 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(0x0) [ 278.108644][ T9640] binder: 9639:9640 unknown command 1074553591 [ 278.150389][ T9640] binder: 9639:9640 ioctl c0306201 20000200 returned -22 13:25:56 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 278.250943][ T9655] binder: 9639:9655 ioctl 4090ae82 200002c0 returned -22 [ 278.292389][ T9640] binder: 9639:9640 ioctl ae80 0 returned -22 13:25:56 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8400, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f00000000c0)=0x8) r3 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) 13:25:56 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(0x0) 13:25:56 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$SNDRV_PCM_IOCTL_DROP(r4, 0x4143, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x82, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0x0, [@multicast1, @multicast1, @broadcast, @multicast2]}]}}}}}}}, 0x0) 13:25:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x12c, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x48, 0xc, 0x0, 0x1, [{0x4}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x405011cc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6bf797ce}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x273a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55f7cc04}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f82cf7f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43deb589}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7cd2a9fe}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd0, 0x8, 0x0, 0x1, [{0x4}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x235ca3c8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1000aa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c7cdf53}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36776bf4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e35490e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bd651e8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e5bd064}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25e2e911}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30bd7a96}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x82}]}, {0x4}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b49b081}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a4e7514}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x408630b4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x49}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7150423}]}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0x158, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x74, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5f05}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6bae}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x136f3d2d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7654c077}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x592c2464}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12e5583f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x18a7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27b056f5}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2873}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17bc8ce8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b7a5a91}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1df8d8c4}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xc0, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x42d9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78e0e189}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f2a}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x619e7983}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd468}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7b30}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x691a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7695dcc7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdf0e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7dc0889b}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc0fc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a8285f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79ad5d55}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5694}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe1e8310}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3eed1c0a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16f11782}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x21e1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bf7a7aa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x84ae}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x158}, 0x1, 0x0, 0x0, 0x20000011}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x11, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r6}}, 0x48) [ 278.829010][ T9680] binder: BINDER_SET_CONTEXT_MGR already set [ 278.844063][ T9683] binder: BINDER_SET_CONTEXT_MGR already set [ 278.863558][ T9680] binder: 9672:9680 ioctl 40046207 0 returned -16 [ 278.866771][ T9683] binder: 9679:9683 ioctl 40046207 0 returned -16 [ 278.882840][ T9686] FAT-fs (loop1): Directory bread(block 1) failed [ 278.895664][ T9683] binder: 9679:9683 ioctl 4143 0 returned -22 [ 278.914010][ T9686] FAT-fs (loop1): Directory bread(block 2) failed 13:25:56 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x11, 0x0, 0x0) r5 = dup3(r0, r4, 0x80000) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x3, &(0x7f0000000080), 0x4) [ 278.948096][ T9686] FAT-fs (loop1): Directory bread(block 3) failed [ 278.979330][ T9686] FAT-fs (loop1): Directory bread(block 4) failed [ 279.024676][ T9686] FAT-fs (loop1): Directory bread(block 5) failed [ 279.060706][ T9686] FAT-fs (loop1): Directory bread(block 6) failed 13:25:56 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 279.079156][ T9686] FAT-fs (loop1): Directory bread(block 7) failed 13:25:56 executing program 2: openat$tun(0xffffffffffffff9c, 0x0, 0x40, 0x0) socket$kcm(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3d}, 0x48) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="8f4b00fd00000200000e74000000002000"], 0x3}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8e83d7be402bf746}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x134, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x10, 0x13, "1664cc1362f855d06694467b"}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xfff7}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xdb, 0xac, "967b9f6d2257fdf1fc5c50c0b226fe1c2e31df162a51dc399ce5b315c27afd47b5a9f3c2221a9d107881a07ae78b6a5a9ef70059de8fc2839dc5f5f1f2bf29edd16d8aede9c43464da282e7f9d61640d6e212f2914dba6cf2bf878b848b4fa99c23b0e6ebc64c4f2dba0695080e74c936654d37b9687ade091c805d830641333b65058ef0875cf7eb41c48d97bb2f15d2c4edc6702487c27577a1db7c985b7cee854944fd709e2e3af73113435a5b23edfd90a8b722c21a339fcb88f3a5de94bf29d79264c8209100f06e84ab0a0ccc45b964b61b6c3a9"}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x627}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x100}]}, 0x134}, 0x1, 0x0, 0x0, 0x2aac15922e8cb9a2}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x4000a0, 0x23, 0x5ac484bb51fa106a, &(0x7f0000000040)="4d50b441e692763513ef874565020007000112bbf32d9fd0880f892fd398e4000000001375bc847d142d1523389037a1d4f5631813cf7037fd584b4af7507a849ce80deea1a57733a5e3730fbef42ab9bedd390775bf809fbcf2a71f32d41a1f7ff3b5483107766a8bd0033d44e6ef7b526c8c67aa9847e283c6cdccbd627ad1094342b1840b506814cb319132533f6d740d9643d0c6dc8481d0c9643dd3e0aa6e1be581aca3ea9377136ce8dd480207fba7af225672c63802beb9647a5fbe90781e147e92eae8d9d79d0d", 0x0, 0x23, 0x0, 0x22d, 0x1000000}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r3) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) [ 279.146566][ T9686] FAT-fs (loop1): Directory bread(block 8) failed [ 279.199057][ T9686] FAT-fs (loop1): Directory bread(block 9) failed [ 279.220694][ T9686] FAT-fs (loop1): Directory bread(block 10) failed 13:25:57 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/current\x00') ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000100)) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x378, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = accept$alg(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001700)={'batadv_slave_1\x00', r6}) 13:25:57 executing program 0 (fault-call:3 fault-nth:0): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:57 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x11, 0x0, 0x0) r5 = dup3(r0, r4, 0x80000) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x3, &(0x7f0000000080), 0x4) 13:25:57 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:57 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f00000002c0)={0x3, 0x0, [{0x3, 0x3, 0x0, 0x0, @irqchip={0x6, 0x97e}}, {0x8, 0x2, 0x0, 0x0, @irqchip={0x7, 0x1}}, {0x4, 0x1, 0x0, 0x0, @msi={0x7d5, 0x80e8, 0x7, 0x9}}]}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000100), 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x7f, 0x7ff, 0x4, 0x1, 0x80}, 0x14) write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="721104bf1a2bc8afd132b5039f0f759013a2b297b7f672d30fea8bd86e3c5f2856d06116f09f4d74adb326606bedb352f9dafa786a2ee05d6e86382220e96281233572438193cdccf6b62aa85c1ef430e0d7bcd795c96f01fc19f28fb15cef10ac4280dc8099f2013324290cb0d09566996a34e3d6b6f7cd3cdee46b2be64819073bfe22b28f5f8394b222f455f065eb6a9aacb87c4f832919411224359b3b048f1ba7c35f0fe540af848e8cfbabf44bad500000ec18486f557e21526437ff269f7624ece03074"], 0xda00) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x312, 0x0, 0x5d, 0x81, 0x7, @random="de97118111a0"}, 0x10) [ 279.471859][ T9710] FAULT_INJECTION: forcing a failure. [ 279.471859][ T9710] name failslab, interval 1, probability 0, space 0, times 1 [ 279.510329][ T9710] CPU: 0 PID: 9710 Comm: syz-executor.0 Not tainted 5.7.0-rc2-syzkaller #0 [ 279.518995][ T9710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 279.529658][ T9710] Call Trace: [ 279.533234][ T9710] dump_stack+0x188/0x20d [ 279.537803][ T9710] should_fail.cold+0x5/0xa [ 279.542477][ T9710] ? lock_downgrade+0x840/0x840 [ 279.547365][ T9710] ? fault_create_debugfs_attr+0x140/0x140 [ 279.553387][ T9710] ? sock_free_inode+0x20/0x20 [ 279.558236][ T9710] should_failslab+0x5/0xf [ 279.562722][ T9710] kmem_cache_alloc+0x29b/0x740 [ 279.567700][ T9710] ? apparmor_path_link+0xb50/0xb50 [ 279.572937][ T9710] ? sock_free_inode+0x20/0x20 [ 279.577737][ T9710] sock_alloc_inode+0x18/0x1c0 [ 279.582691][ T9710] ? sock_free_inode+0x20/0x20 [ 279.587503][ T9710] alloc_inode+0x61/0x1e0 [ 279.591853][ T9710] new_inode_pseudo+0x14/0xe0 [ 279.596550][ T9710] sock_alloc+0x3c/0x260 [ 279.600823][ T9710] __sock_create+0xba/0x730 [ 279.605324][ T9710] __sys_socket+0xef/0x200 [ 279.609799][ T9710] ? fput_many+0x2f/0x1a0 [ 279.614132][ T9710] ? move_addr_to_kernel+0x70/0x70 [ 279.619289][ T9710] ? switch_fpu_return+0x1db/0x4b0 [ 279.624391][ T9710] ? fpregs_mark_activate+0x320/0x320 [ 279.629784][ T9710] ? __ia32_sys_clock_settime+0x260/0x260 [ 279.635542][ T9710] ? trace_hardirqs_off_caller+0x55/0x230 [ 279.641265][ T9710] __x64_sys_socket+0x6f/0xb0 [ 279.645932][ T9710] ? lockdep_hardirqs_on+0x463/0x620 [ 279.651228][ T9710] do_syscall_64+0xf6/0x7d0 [ 279.655790][ T9710] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 279.661665][ T9710] RIP: 0033:0x45f377 [ 279.665548][ T9710] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 aa 8b fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8d 8b fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 279.685240][ T9710] RSP: 002b:00007f7038d969c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 279.693650][ T9710] RAX: ffffffffffffffda RBX: 00007f7038d96a58 RCX: 000000000045f377 [ 279.701771][ T9710] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 279.709744][ T9710] RBP: 000000000078bf00 R08: 0000000000000009 R09: 0000000000000000 13:25:57 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$setflags(r0, 0x2, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0xfd1, 0x4) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x26004fe8, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) [ 279.717724][ T9710] R10: 0000000000000064 R11: 0000000000000202 R12: 00007f7038d96a40 [ 279.725683][ T9710] R13: 0000000000000bc8 R14: 00000000004d8200 R15: 00007f7038d976d4 [ 279.789202][ T9710] socket: no more sockets 13:25:57 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r1 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'syz_tun\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev={0xfe, 0x80, [0x0, 0xb, 0x8, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x3f}, 0x0, 0x8, 0x0, 0xd000000, 0x0, 0x20c200a2, r5}) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000000)={r5, 0x1, 0x6, @dev}, 0x10) r6 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r6, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r6) sendfile(r0, r6, 0x0, 0x20000102000007) [ 279.848058][ T9717] binder: BINDER_SET_CONTEXT_MGR already set [ 279.863671][ T9717] binder: 9715:9717 ioctl 40046207 0 returned -16 13:25:57 executing program 0 (fault-call:3 fault-nth:1): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16, 0x400000000000}], 0x1000000, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x80, 0x0, 0x0, 0x0, 0xdd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x600) sendfile(r1, r2, 0x0, 0x10000) 13:25:57 executing program 3: r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x10000, 0x1000, &(0x7f000002d000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x4, r0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:25:57 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 280.131431][ T9737] FAULT_INJECTION: forcing a failure. [ 280.131431][ T9737] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 280.144667][ T9737] CPU: 1 PID: 9737 Comm: syz-executor.0 Not tainted 5.7.0-rc2-syzkaller #0 [ 280.153272][ T9737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.163337][ T9737] Call Trace: [ 280.166650][ T9737] dump_stack+0x188/0x20d [ 280.167998][ T9739] FAT-fs (loop1): bogus number of reserved sectors [ 280.171013][ T9737] should_fail.cold+0x5/0xa [ 280.171036][ T9737] ? fault_create_debugfs_attr+0x140/0x140 [ 280.171051][ T9737] ? mark_held_locks+0xe0/0xe0 [ 280.171125][ T9737] ? _kstrtoull+0x13f/0x1f0 [ 280.171145][ T9737] ? _parse_integer+0x180/0x180 [ 280.177648][ T9739] FAT-fs (loop1): Can't find a valid FAT filesystem [ 280.182179][ T9737] __alloc_pages_nodemask+0x17a/0x810 [ 280.182200][ T9737] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 280.182215][ T9737] ? find_held_lock+0x2d/0x110 [ 280.182235][ T9737] ? lock_downgrade+0x840/0x840 [ 280.182253][ T9737] cache_grow_begin+0x8c/0xc10 [ 280.235481][ T9737] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 280.240971][ T9737] kmem_cache_alloc+0x670/0x740 [ 280.245848][ T9737] ? apparmor_path_link+0xb50/0xb50 [ 280.251071][ T9737] ? sock_free_inode+0x20/0x20 [ 280.255992][ T9737] sock_alloc_inode+0x18/0x1c0 [ 280.260937][ T9737] ? sock_free_inode+0x20/0x20 [ 280.265731][ T9737] alloc_inode+0x61/0x1e0 [ 280.270092][ T9737] new_inode_pseudo+0x14/0xe0 [ 280.274841][ T9737] sock_alloc+0x3c/0x260 [ 280.279113][ T9737] __sock_create+0xba/0x730 [ 280.283647][ T9737] __sys_socket+0xef/0x200 [ 280.288084][ T9737] ? fput_many+0x2f/0x1a0 [ 280.292469][ T9737] ? move_addr_to_kernel+0x70/0x70 [ 280.297597][ T9737] ? ksys_write+0x1a5/0x250 [ 280.302107][ T9737] ? __ia32_sys_read+0xb0/0xb0 [ 280.306868][ T9737] ? __ia32_sys_clock_settime+0x260/0x260 [ 280.312587][ T9737] ? trace_hardirqs_off_caller+0x55/0x230 [ 280.318319][ T9737] __x64_sys_socket+0x6f/0xb0 [ 280.323011][ T9737] ? lockdep_hardirqs_on+0x463/0x620 [ 280.328324][ T9737] do_syscall_64+0xf6/0x7d0 [ 280.332860][ T9737] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 280.338885][ T9737] RIP: 0033:0x45f377 [ 280.342781][ T9737] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 aa 8b fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8d 8b fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 280.362394][ T9737] RSP: 002b:00007f7038d969c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 280.370816][ T9737] RAX: ffffffffffffffda RBX: 00007f7038d96a58 RCX: 000000000045f377 [ 280.378788][ T9737] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 280.386858][ T9737] RBP: 000000000078bf00 R08: 0000000000000009 R09: 0000000000000000 [ 280.394844][ T9737] R10: 0000000000000064 R11: 0000000000000202 R12: 00007f7038d96a40 [ 280.402944][ T9737] R13: 0000000000000bc8 R14: 00000000004d8200 R15: 00007f7038d976d4 13:25:58 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x11, 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') lseek(r1, 0x1f, 0x0) getdents64(r1, 0x0, 0xc0002024) [ 280.497253][ T9739] FAT-fs (loop1): bogus number of reserved sectors [ 280.505999][ T9739] FAT-fs (loop1): Can't find a valid FAT filesystem 13:25:58 executing program 0 (fault-call:3 fault-nth:2): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:58 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 13:25:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x11, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[]}}, 0xc0c0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f00000003c0)={0x4, 0x3, 0x4, 0x40000000, 0x7, {r8, r9/1000+60000}, {0x4, 0x2, 0x5, 0x1, 0x80, 0xb0, "68a23677"}, 0xf0, 0x1, @planes=&(0x7f00000002c0)={0x6, 0x20, @userptr, 0x4}, 0x1000, 0x0, 0xffffffffffffffff}) ioctl$CAPI_CLR_FLAGS(r10, 0x80044325, &(0x7f0000000440)) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000001c00050200000000000000000a000000c205010a35ee0521bc696eb478b969fa3aa284b95e2ac0ad7543d34e4fbb9d870834225e645608f79e3694eae8abddfd3dd8a3bbb315ac7375862df76cb26f89b8fe6e246f6553d5ee695b8aa90481ab8f2a86eb94d18969924d938d68a09f863495723adc19fb626152303d25aa4a14551271fbdcd2f446b4c9656cfa58708a4b6b30a900"/166, @ANYRES32=r6, @ANYBLOB="00000a00140001001800000063f1aac2000000000000000000000001", @ANYRES16=0x0], 0x4}}, 0x800) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r11, 0x4010ae68, &(0x7f0000000140)={0x5000, 0x5000}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x7a00, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000110001040000000000000000022875a2", @ANYRES32=r6, @ANYBLOB="0300000000000000"], 0x20}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000240)={0x0, 0x5, 0x10001, 0x0, 0x7}) 13:25:58 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup3(r2, r1, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x208000, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)=""/4096, &(0x7f0000000080)=""/64, &(0x7f0000000100)=""/77, 0x12000}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="240000006c0007031dfffd946f610500070000006700000077000000421ba3a20400ff7e280000001100ffffba16a004000000000008000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 13:25:58 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) [ 280.803787][ T9766] FAULT_INJECTION: forcing a failure. [ 280.803787][ T9766] name failslab, interval 1, probability 0, space 0, times 0 [ 280.831370][ T9748] ================================================================== [ 280.839971][ T9748] BUG: KASAN: slab-out-of-bounds in kvm_vcpu_gfn_to_memslot+0x50e/0x540 [ 280.848310][ T9748] Read of size 8 at addr ffff888094724468 by task syz-executor.3/9748 [ 280.856805][ T9748] [ 280.859128][ T9748] CPU: 1 PID: 9748 Comm: syz-executor.3 Not tainted 5.7.0-rc2-syzkaller #0 [ 280.867722][ T9748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.877778][ T9748] Call Trace: [ 280.881067][ T9748] dump_stack+0x188/0x20d [ 280.885392][ T9748] print_address_description.constprop.0.cold+0xd3/0x315 [ 280.892404][ T9748] ? kvm_vcpu_gfn_to_memslot+0x50e/0x540 [ 280.898022][ T9748] __kasan_report.cold+0x35/0x4d [ 280.902976][ T9748] ? kvm_vcpu_gfn_to_memslot+0x50e/0x540 [ 280.908608][ T9748] ? kvm_vcpu_gfn_to_memslot+0x50e/0x540 [ 280.914255][ T9748] kasan_report+0x33/0x50 [ 280.918624][ T9748] kvm_vcpu_gfn_to_memslot+0x50e/0x540 [ 280.924165][ T9748] try_async_pf+0x12b/0xac0 [ 280.928726][ T9748] ? ept_gva_to_gpa+0x1e0/0x1e0 [ 280.933601][ T9748] ? mark_held_locks+0x9f/0xe0 [ 280.938423][ T9748] ? mmu_topup_memory_caches+0x325/0x460 [ 280.944095][ T9748] direct_page_fault+0x27d/0x1d70 [ 280.949121][ T9748] ? kvm_mmu_get_page+0x1e70/0x1e70 [ 280.954412][ T9748] ? kvm_mtrr_check_gfn_range_consistency+0x254/0x2e0 [ 280.961173][ T9748] ? kvm_vcpu_mtrr_init+0x70/0x70 [ 280.966299][ T9748] kvm_mmu_page_fault+0x187/0x15d0 [ 280.971581][ T9748] ? finish_task_switch+0x275/0x750 [ 280.976799][ T9748] ? kvm_nx_lpage_recovery_worker+0x790/0x790 [ 280.982941][ T9748] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 280.988485][ T9748] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 280.994459][ T9748] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 281.000006][ T9748] ? handle_ept_violation+0x206/0x550 [ 281.005377][ T9748] ? vmx_inject_irq+0x5b0/0x5b0 [ 281.010214][ T9748] vmx_handle_exit+0x2b8/0x1700 [ 281.015153][ T9748] vcpu_enter_guest+0xfea/0x59d0 [ 281.020107][ T9748] ? vmx_vcpu_load_vmcs+0x960/0x960 [ 281.025316][ T9748] ? kvm_vcpu_reload_apic_access_page+0x300/0x300 [ 281.031844][ T9748] ? kvm_arch_vcpu_ioctl_run+0x23a/0x16e0 [ 281.037586][ T9748] ? lock_release+0x800/0x800 [ 281.042261][ T9748] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 281.047799][ T9748] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 281.053792][ T9748] ? lockdep_hardirqs_on+0x463/0x620 [ 281.059175][ T9748] ? kvm_arch_vcpu_ioctl_run+0x3fb/0x16e0 [ 281.065105][ T9748] ? kvm_arch_vcpu_ioctl_run+0x27b/0x16e0 [ 281.071021][ T9748] kvm_arch_vcpu_ioctl_run+0x3fb/0x16e0 [ 281.076755][ T9748] kvm_vcpu_ioctl+0x493/0xe60 [ 281.081429][ T9748] ? kvm_get_dirty_log_protect.isra.0+0x670/0x670 [ 281.087994][ T9748] ? ioctl_file_clone+0x180/0x180 [ 281.093548][ T9748] ? __fget_files+0x32f/0x500 [ 281.098226][ T9748] ? ksys_dup3+0x3c0/0x3c0 [ 281.102688][ T9748] ? __x64_sys_futex+0x380/0x4f0 [ 281.107625][ T9748] ? kvm_get_dirty_log_protect.isra.0+0x670/0x670 [ 281.114028][ T9748] ksys_ioctl+0x11a/0x180 [ 281.118348][ T9748] __x64_sys_ioctl+0x6f/0xb0 [ 281.122924][ T9748] ? lockdep_hardirqs_on+0x463/0x620 [ 281.128201][ T9748] do_syscall_64+0xf6/0x7d0 [ 281.132715][ T9748] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 281.138610][ T9748] RIP: 0033:0x45c829 [ 281.142505][ T9748] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 281.162188][ T9748] RSP: 002b:00007f14f118ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.170595][ T9748] RAX: ffffffffffffffda RBX: 00000000004e7ac0 RCX: 000000000045c829 [ 281.178854][ T9748] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 281.187294][ T9748] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 281.195280][ T9748] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 281.203350][ T9748] R13: 00000000000003c0 R14: 00000000004c6499 R15: 00007f14f118f6d4 [ 281.213193][ T9748] [ 281.215543][ T9748] Allocated by task 9748: [ 281.219902][ T9748] save_stack+0x1b/0x40 [ 281.224054][ T9748] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 281.229743][ T9748] kvmalloc_node+0x61/0xf0 [ 281.234249][ T9748] kvm_set_memslot+0x115/0x1530 [ 281.239084][ T9748] __kvm_set_memory_region+0xcf7/0x1320 [ 281.244617][ T9748] kvm_set_memory_region+0x29/0x50 [ 281.249719][ T9748] kvm_vm_ioctl+0x678/0x23e0 [ 281.254306][ T9748] ksys_ioctl+0x11a/0x180 [ 281.258628][ T9748] __x64_sys_ioctl+0x6f/0xb0 [ 281.263207][ T9748] do_syscall_64+0xf6/0x7d0 [ 281.267696][ T9748] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 281.273587][ T9748] [ 281.275937][ T9748] Freed by task 27: [ 281.279747][ T9748] save_stack+0x1b/0x40 [ 281.283892][ T9748] __kasan_slab_free+0xf7/0x140 [ 281.288738][ T9748] kfree+0x109/0x2b0 [ 281.292633][ T9748] skb_free_head+0x8b/0xa0 [ 281.297100][ T9748] skb_release_data+0x42e/0x8b0 [ 281.301939][ T9748] skb_release_all+0x46/0x60 [ 281.306515][ T9748] kfree_skb+0xfa/0x410 [ 281.310698][ T9748] kauditd_hold_skb+0x155/0x180 [ 281.315535][ T9748] kauditd_send_queue+0x19f/0x210 [ 281.320586][ T9748] kauditd_thread+0x7f1/0xb80 [ 281.325289][ T9748] kthread+0x388/0x470 [ 281.329344][ T9748] ret_from_fork+0x24/0x30 [ 281.333738][ T9748] [ 281.336069][ T9748] The buggy address belongs to the object at ffff888094724000 [ 281.336069][ T9748] which belongs to the cache kmalloc-2k of size 2048 [ 281.350132][ T9748] The buggy address is located 1128 bytes inside of [ 281.350132][ T9748] 2048-byte region [ffff888094724000, ffff888094724800) [ 281.363570][ T9748] The buggy address belongs to the page: [ 281.369224][ T9748] page:ffffea000251c900 refcount:1 mapcount:0 mapping:0000000062c3fac6 index:0x0 [ 281.378342][ T9748] flags: 0xfffe0000000200(slab) [ 281.383188][ T9748] raw: 00fffe0000000200 ffffea00027b0848 ffffea000240eb48 ffff8880aa000e00 [ 281.391784][ T9748] raw: 0000000000000000 ffff888094724000 0000000100000001 0000000000000000 [ 281.400352][ T9748] page dumped because: kasan: bad access detected [ 281.406743][ T9748] [ 281.409054][ T9748] Memory state around the buggy address: [ 281.414675][ T9748] ffff888094724300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 281.422722][ T9748] ffff888094724380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 281.430784][ T9748] >ffff888094724400: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 281.438840][ T9748] ^ [ 281.446294][ T9748] ffff888094724480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc 13:25:59 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 281.454364][ T9748] ffff888094724500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 281.462434][ T9748] ================================================================== [ 281.470489][ T9748] Disabling lock debugging due to kernel taint [ 281.483682][ T9773] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 281.520587][ T9766] CPU: 1 PID: 9766 Comm: syz-executor.0 Tainted: G B 5.7.0-rc2-syzkaller #0 [ 281.530636][ T9766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.540696][ T9766] Call Trace: [ 281.544001][ T9766] dump_stack+0x188/0x20d [ 281.548345][ T9766] should_fail.cold+0x5/0xa [ 281.552864][ T9766] ? lock_downgrade+0x840/0x840 [ 281.557735][ T9766] ? fault_create_debugfs_attr+0x140/0x140 [ 281.563556][ T9766] should_failslab+0x5/0xf [ 281.567978][ T9766] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 281.573366][ T9766] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 281.579359][ T9766] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 281.585194][ T9766] apparmor_sk_alloc_security+0x81/0x100 [ 281.590909][ T9766] security_sk_alloc+0x6c/0xb0 [ 281.595692][ T9766] sk_prot_alloc+0x241/0x2f0 [ 281.600294][ T9766] sk_alloc+0x36/0x1100 [ 281.603530][ T9778] binder: 9771:9778 ioctl ae01 0 returned -22 [ 281.604550][ T9766] __netlink_create+0x63/0x300 [ 281.604570][ T9766] netlink_create+0x3a1/0x5d0 [ 281.620182][ T9766] ? genl_unbind+0x1c0/0x1c0 [ 281.624927][ T9766] ? genl_family_find_byname+0xf0/0xf0 [ 281.630427][ T9766] __sock_create+0x3cb/0x730 [ 281.635041][ T9766] __sys_socket+0xef/0x200 [ 281.639500][ T9766] ? fput_many+0x2f/0x1a0 [ 281.643832][ T9766] ? move_addr_to_kernel+0x70/0x70 [ 281.649213][ T9766] ? ksys_write+0x1a5/0x250 [ 281.653709][ T9766] ? __ia32_sys_read+0xb0/0xb0 [ 281.658457][ T9766] ? __ia32_sys_clock_settime+0x260/0x260 [ 281.664162][ T9766] ? trace_hardirqs_off_caller+0x55/0x230 [ 281.669866][ T9766] __x64_sys_socket+0x6f/0xb0 [ 281.674533][ T9766] ? lockdep_hardirqs_on+0x463/0x620 [ 281.679807][ T9766] do_syscall_64+0xf6/0x7d0 [ 281.684334][ T9766] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 281.690208][ T9766] RIP: 0033:0x45f377 [ 281.694111][ T9766] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 aa 8b fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8d 8b fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 281.714822][ T9766] RSP: 002b:00007f7038d969c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 281.723223][ T9766] RAX: ffffffffffffffda RBX: 00007f7038d96a58 RCX: 000000000045f377 [ 281.731192][ T9766] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 281.739163][ T9766] RBP: 000000000078bf00 R08: 0000000000000009 R09: 0000000000000000 [ 281.747215][ T9766] R10: 0000000000000064 R11: 0000000000000202 R12: 00007f7038d96a40 [ 281.755311][ T9766] R13: 0000000000000bc8 R14: 00000000004d8200 R15: 00007f7038d976d4 13:25:59 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') [ 281.789318][ T9748] Kernel panic - not syncing: panic_on_warn set ... [ 281.795945][ T9748] CPU: 0 PID: 9748 Comm: syz-executor.3 Tainted: G B 5.7.0-rc2-syzkaller #0 [ 281.805920][ T9748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.815996][ T9748] Call Trace: [ 281.819326][ T9748] dump_stack+0x188/0x20d [ 281.823783][ T9748] panic+0x2e3/0x75c [ 281.828235][ T9748] ? add_taint.cold+0x16/0x16 [ 281.833273][ T9748] ? preempt_schedule_common+0x5e/0xc0 [ 281.838875][ T9748] ? kvm_vcpu_gfn_to_memslot+0x50e/0x540 [ 281.844655][ T9748] ? preempt_schedule_thunk+0x16/0x18 [ 281.850364][ T9748] ? trace_hardirqs_on+0x55/0x220 [ 281.855511][ T9748] ? kvm_vcpu_gfn_to_memslot+0x50e/0x540 [ 281.861172][ T9748] end_report+0x4d/0x53 [ 281.865299][ T9782] binder: BINDER_SET_CONTEXT_MGR already set [ 281.865359][ T9748] __kasan_report.cold+0xd/0x4d [ 281.876281][ T9748] ? kvm_vcpu_gfn_to_memslot+0x50e/0x540 [ 281.877311][ T9782] binder: 9771:9782 ioctl 40046207 0 returned -16 [ 281.881925][ T9748] ? kvm_vcpu_gfn_to_memslot+0x50e/0x540 [ 281.881938][ T9748] kasan_report+0x33/0x50 [ 281.881952][ T9748] kvm_vcpu_gfn_to_memslot+0x50e/0x540 [ 281.881965][ T9748] try_async_pf+0x12b/0xac0 [ 281.881978][ T9748] ? ept_gva_to_gpa+0x1e0/0x1e0 [ 281.881995][ T9748] ? mark_held_locks+0x9f/0xe0 [ 281.882009][ T9748] ? mmu_topup_memory_caches+0x325/0x460 [ 281.882028][ T9748] direct_page_fault+0x27d/0x1d70 [ 281.928622][ T9748] ? kvm_mmu_get_page+0x1e70/0x1e70 [ 281.933873][ T9748] ? kvm_mtrr_check_gfn_range_consistency+0x254/0x2e0 [ 281.940647][ T9748] ? kvm_vcpu_mtrr_init+0x70/0x70 [ 281.945727][ T9748] kvm_mmu_page_fault+0x187/0x15d0 [ 281.950866][ T9748] ? finish_task_switch+0x275/0x750 [ 281.956083][ T9748] ? kvm_nx_lpage_recovery_worker+0x790/0x790 [ 281.962174][ T9748] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 281.967740][ T9748] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 281.973772][ T9748] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 281.979336][ T9748] ? handle_ept_violation+0x206/0x550 [ 281.984940][ T9748] ? vmx_inject_irq+0x5b0/0x5b0 [ 281.989820][ T9748] vmx_handle_exit+0x2b8/0x1700 [ 281.994896][ T9748] vcpu_enter_guest+0xfea/0x59d0 [ 281.999892][ T9748] ? vmx_vcpu_load_vmcs+0x960/0x960 [ 282.005113][ T9748] ? kvm_vcpu_reload_apic_access_page+0x300/0x300 [ 282.011897][ T9748] ? kvm_arch_vcpu_ioctl_run+0x23a/0x16e0 [ 282.017645][ T9748] ? lock_release+0x800/0x800 [ 282.022447][ T9748] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 282.028015][ T9748] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 282.034018][ T9748] ? lockdep_hardirqs_on+0x463/0x620 [ 282.039344][ T9748] ? kvm_arch_vcpu_ioctl_run+0x3fb/0x16e0 [ 282.045085][ T9748] ? kvm_arch_vcpu_ioctl_run+0x27b/0x16e0 [ 282.050819][ T9748] kvm_arch_vcpu_ioctl_run+0x3fb/0x16e0 [ 282.056387][ T9748] kvm_vcpu_ioctl+0x493/0xe60 [ 282.061112][ T9748] ? kvm_get_dirty_log_protect.isra.0+0x670/0x670 [ 282.067537][ T9748] ? ioctl_file_clone+0x180/0x180 [ 282.072577][ T9748] ? __fget_files+0x32f/0x500 [ 282.077266][ T9748] ? ksys_dup3+0x3c0/0x3c0 [ 282.081700][ T9748] ? __x64_sys_futex+0x380/0x4f0 [ 282.086652][ T9748] ? kvm_get_dirty_log_protect.isra.0+0x670/0x670 [ 282.093073][ T9748] ksys_ioctl+0x11a/0x180 [ 282.097413][ T9748] __x64_sys_ioctl+0x6f/0xb0 [ 282.102024][ T9748] ? lockdep_hardirqs_on+0x463/0x620 [ 282.107428][ T9748] do_syscall_64+0xf6/0x7d0 [ 282.112214][ T9748] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 282.118117][ T9748] RIP: 0033:0x45c829 [ 282.122020][ T9748] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 282.141710][ T9748] RSP: 002b:00007f14f118ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.150130][ T9748] RAX: ffffffffffffffda RBX: 00000000004e7ac0 RCX: 000000000045c829 [ 282.158258][ T9748] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 282.166413][ T9748] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 282.174469][ T9748] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 282.182436][ T9748] R13: 00000000000003c0 R14: 00000000004c6499 R15: 00007f14f118f6d4 [ 282.191785][ T9748] Kernel Offset: disabled [ 282.196134][ T9748] Rebooting in 86400 seconds..